Original text.bin SHA256 5dafbec541c01a91459ec797af4a5d1cc52ed6250ba426ead3baa92b4c7b22ad; read-only static disassembly, no runtime proof
00e0b000 mov byte ptr [eax], al
00e0b002 add byte ptr [eax], al
00e0b004 mov dword ptr [ebp - 0x34], eax
00e0b007 add edi, 8
00e0b00a mov ecx, eax
00e0b00c lea esp, [esp]
00e0b010 mov edx, dword ptr [edi]
00e0b012 mov dword ptr [ecx], edx
00e0b014 add ecx, 4
00e0b017 lea edx, [eax + 0x10]
00e0b01a add edi, 4
00e0b01d cmp ecx, edx
00e0b01f jb 0xe0b010
00e0b021 mov edx, dword ptr [ebp - 0x18]
00e0b024 mov edi, dword ptr [ebp - 0x38]
00e0b027 mov dword ptr [eax + 0xc], edx
00e0b02a mov ecx, 1
00e0b02f add word ptr [eax + 8], cx
00e0b033 cmp dword ptr [esi + 0x44], edi
00e0b036 pxor xmm0, xmm0
00e0b03a setne dl
00e0b03d or byte ptr [esi + 0x330], dl
00e0b043 cmp dword ptr [esi + 0x48], eax
00e0b046 mov dword ptr [esi + 0x44], edi
00e0b049 setne dl
00e0b04c or byte ptr [esi + 0x330], dl
00e0b052 mov dword ptr [esi + 0x48], eax
00e0b055 xor edi, edi
00e0b057 cmp dword ptr [esi + 0x4c], edi
00e0b05a setne al
00e0b05d or byte ptr [esi + 0x330], al
00e0b063 mov eax, dword ptr [ebp - 0x3c]
00e0b066 cmp dword ptr [esi + 0x50], eax
00e0b069 mov dword ptr [esi + 0x4c], edi
00e0b06c setne dl
00e0b06f or byte ptr [esi + 0x330], dl
00e0b075 mov dword ptr [esi + 0x50], eax
00e0b078 mov eax, dword ptr [ebp - 4]
00e0b07b mov dword ptr [ebp - 0x80], ecx
00e0b07e mov edx, 0x2121e88
00e0b083 lea ecx, [ebp - 0x80]
00e0b086 mov dword ptr [ebp - 0x7c], edi
00e0b089 mov dword ptr [ebp - 0x78], eax
00e0b08c mov dword ptr [ebp - 0x74], eax
00e0b08f movq qword ptr [ebp - 0x70], xmm0
00e0b094 movq qword ptr [ebp - 0x68], xmm0
00e0b099 call 0xdcc700
00e0b09e mov eax, dword ptr [ebp - 0x34]
00e0b0a1 push eax
00e0b0a2 mov edx, 0xe0a2b0
00e0b0a7 mov ecx, esi
00e0b0a9 call 0xdb0170
00e0b0ae mov ecx, dword ptr [ebp - 0x40]
00e0b0b1 mov dword ptr [esi + 0x2c], ecx
00e0b0b4 lea eax, [edi + 1]
00e0b0b7 lea esp, [ebp - 0x90]
00e0b0bd pop edi
00e0b0be pop esi
00e0b0bf mov esp, ebp
00e0b0c1 pop ebp
00e0b0c2 mov esp, ebx
00e0b0c4 pop ebx
00e0b0c5 ret 8
00e0b0c8 int3 
00e0b0c9 int3 
00e0b0ca int3 
00e0b0cb int3 
00e0b0cc int3 
00e0b0cd int3 
00e0b0ce int3 
00e0b0cf int3 
00e0b0d0 push ecx
00e0b0d1 push ebx
00e0b0d2 push ebp
00e0b0d3 mov ebp, ecx
00e0b0d5 xor ebx, ebx
00e0b0d7 push edi
00e0b0d8 mov byte ptr [ebp + 0x331], 1
00e0b0df cmp byte ptr [ebp + 0x330], bl
00e0b0e5 je 0xe0b0ef
00e0b0e7 lea edx, [ebx + 1]
00e0b0ea call 0xdb2210
00e0b0ef mov edi, dword ptr [esp + 0x14]
00e0b0f3 mov eax, dword ptr [edi + 4]
00e0b0f6 mov dword ptr [esp + 0xc], ebx
00e0b0fa cmp dword ptr [eax + 0x7c], ebx
00e0b0fd jle 0xe0b234
00e0b103 mov dword ptr [esp + 0x14], ebx
00e0b107 push esi
00e0b108 jmp 0xe0b110
00e0b10a lea ebx, [ebx]
00e0b110 mov eax, dword ptr [eax + 0x80]
00e0b116 mov ecx, dword ptr [edi + 0xc]
00e0b119 add eax, dword ptr [esp + 0x18]
00e0b11d test ecx, ecx
00e0b11f je 0xe0b131
00e0b121 movzx edx, word ptr [eax + 0x22]
00e0b125 mov ecx, dword ptr [ecx + edx*4]
00e0b128 test dword ptr [eax + 0x24], ecx
00e0b12b je 0xe0b219
00e0b131 mov edx, dword ptr [edi + 8]
00e0b134 test edx, edx
00e0b136 je 0xe0b14a
00e0b138 movzx ecx, word ptr [eax + 0x20]
00e0b13c lea ecx, [ecx + ecx*4]
00e0b13f cmp dword ptr [edx + ecx*8 + 0x14], 0
00e0b144 je 0xe0b219
00e0b14a cmp dword ptr [eax + 0x18], 0
00e0b14e jle 0xe0b219
00e0b154 mov esi, dword ptr [ebp + 0x18]
00e0b157 sub esi, 0x48
00e0b15a mov edx, esi
00e0b15c and edx, 3
00e0b15f sub esi, edx
00e0b161 mov dword ptr [ebp + 0x18], esi
00e0b164 mov ecx, dword ptr [edi + 4]
00e0b167 mov dword ptr [esi + 4], eax
00e0b16a mov eax, dword ptr [0x146abc8]
00e0b16f mov dword ptr [esi], ecx
00e0b171 mov edx, dword ptr [edi]
00e0b173 mov dword ptr [esi + 8], edx
00e0b176 mov dword ptr [esi + 0xc], 0xd17daf62
00e0b17d mov dword ptr [esi + 0x10], eax
00e0b180 movss xmm0, dword ptr [0x1468b04]
00e0b188 movss dword ptr [esi + 0x14], xmm0
00e0b18d test byte ptr [edi + 0x10], 1
00e0b191 je 0xe0b1a0
00e0b193 push esi
00e0b194 mov edx, 0xe0a4a0
00e0b199 mov ecx, ebp
00e0b19b call 0xdb0170
00e0b1a0 test byte ptr [edi + 0x10], 2
00e0b1a4 je 0xe0b1db
00e0b1a6 lea ecx, [esi + 0x18]
00e0b1a9 mov eax, ecx
00e0b1ab lea edx, [eax + 0x18]
00e0b1ae sub esi, ecx
00e0b1b0 mov ebx, dword ptr [esi + eax]
00e0b1b3 mov dword ptr [eax], ebx
00e0b1b5 add eax, 4
00e0b1b8 cmp eax, edx
00e0b1ba jb 0xe0b1b0
00e0b1bc mov esi, ecx
00e0b1be mov ecx, dword ptr [0x1468b08]
00e0b1c4 mov dword ptr [esi + 0x10], ecx
00e0b1c7 push esi
00e0b1c8 mov edx, 0xe0a4a0
00e0b1cd mov ecx, ebp
00e0b1cf mov dword ptr [esi + 0xc], 0x1b5ff5f2
00e0b1d6 call 0xdb0170
00e0b1db test byte ptr [edi + 0x10], 4
00e0b1df je 0xe0b219
00e0b1e1 lea ecx, [esi + 0x18]
00e0b1e4 mov eax, ecx
00e0b1e6 lea edx, [eax + 0x18]
00e0b1e9 sub esi, ecx
00e0b1eb jmp 0xe0b1f0
00e0b1ed lea ecx, [ecx]
00e0b1f0 mov ebx, dword ptr [esi + eax]
00e0b1f3 mov dword ptr [eax], ebx
00e0b1f5 add eax, 4
00e0b1f8 cmp eax, edx
00e0b1fa jb 0xe0b1f0
00e0b1fc mov edx, dword ptr [0x1468b0c]
00e0b202 mov dword ptr [ecx + 0x10], edx
00e0b205 mov dword ptr [ecx + 0xc], 0xbfb62492
00e0b20c push ecx
00e0b20d mov edx, 0xe0a4a0
00e0b212 mov ecx, ebp
00e0b214 call 0xdb0170
00e0b219 mov ecx, dword ptr [esp + 0x10]
00e0b21d mov eax, dword ptr [edi + 4]
00e0b220 add dword ptr [esp + 0x18], 0x40
00e0b225 inc ecx
00e0b226 mov dword ptr [esp + 0x10], ecx
00e0b22a cmp ecx, dword ptr [eax + 0x7c]
00e0b22d jl 0xe0b110
00e0b233 pop esi
00e0b234 mov eax, dword ptr [edi + 4]
00e0b237 mov ecx, dword ptr [eax + 0x88]
00e0b23d push ecx
00e0b23e mov edx, 0xe0a3d0
00e0b243 mov ecx, ebp
00e0b245 call 0xdb0170
00e0b24a pop edi
00e0b24b pop ebp
00e0b24c pop ebx
00e0b24d pop ecx
00e0b24e ret 4
00e0b251 int3 
00e0b252 int3 
00e0b253 int3 
00e0b254 int3 
00e0b255 int3 
00e0b256 int3 
00e0b257 int3 
00e0b258 int3 
00e0b259 int3 
00e0b25a int3 
00e0b25b int3 
00e0b25c int3 
00e0b25d int3 
00e0b25e int3 
00e0b25f int3 
00e0b260 sub esp, 0x1c
00e0b263 push ebx
00e0b264 push ebp
00e0b265 push esi
00e0b266 push edi
00e0b267 mov dword ptr [esp + 0x10], edx
00e0b26b push 0
00e0b26d mov edx, 0x801f78b9
00e0b272 mov ebp, ecx
00e0b274 call 0xde75b0
00e0b279 neg eax
00e0b27b sbb ebx, ebx
00e0b27d push 0
00e0b27f mov edx, 0xd17daf62
00e0b284 mov ecx, ebp
00e0b286 neg ebx
00e0b288 call 0xde75b0
00e0b28d neg eax
00e0b28f push 0
00e0b291 mov edx, 0x1b5ff5f2
00e0b296 mov ecx, ebp
00e0b298 sbb esi, esi
00e0b29a call 0xde75b0
00e0b29f neg eax
00e0b2a1 sbb edi, edi
00e0b2a3 push 0
00e0b2a5 mov edx, 0xbfb62492
00e0b2aa mov ecx, ebp
00e0b2ac neg edi
00e0b2ae call 0xde75b0
00e0b2b3 neg eax
00e0b2b5 sbb eax, eax
00e0b2b7 neg eax
00e0b2b9 neg esi
00e0b2bb jne 0xe0b2ca
00e0b2bd test edi, edi
00e0b2bf je 0xe0b2d7
00e0b2c1 test eax, eax
00e0b2c3 je 0xe0b2d7
00e0b2c5 mov esi, 1
00e0b2ca test edi, edi
00e0b2cc je 0xe0b2d7
00e0b2ce test eax, eax
00e0b2d0 jne 0xe0b2d7
00e0b2d2 mov eax, 1
00e0b2d7 mov edx, dword ptr [esp + 0x34]
00e0b2db cmp dword ptr [edx], 0
00e0b2de je 0xe0b2ef
00e0b2e0 test esi, esi
00e0b2e2 je 0xe0b2ef
00e0b2e4 test ebx, ebx
00e0b2e6 je 0xe0b2ef
00e0b2e8 mov ecx, 1
00e0b2ed jmp 0xe0b2f1
00e0b2ef xor ecx, ecx
00e0b2f1 mov esi, dword ptr [esp + 0x38]
00e0b2f5 mov dword ptr [edx], ecx
00e0b2f7 cmp dword ptr [esi], 0
00e0b2fa je 0xe0b30b
00e0b2fc test edi, edi
00e0b2fe je 0xe0b30b
00e0b300 test ebx, ebx
00e0b302 je 0xe0b30b
00e0b304 mov ecx, 1
00e0b309 jmp 0xe0b30d
00e0b30b xor ecx, ecx
00e0b30d mov edi, dword ptr [esp + 0x3c]
00e0b311 mov dword ptr [esi], ecx
00e0b313 cmp dword ptr [edi], 0
00e0b316 je 0xe0b327
00e0b318 test eax, eax
00e0b31a je 0xe0b327
00e0b31c test ebx, ebx
00e0b31e je 0xe0b327
00e0b320 mov eax, 1
00e0b325 jmp 0xe0b329
00e0b327 xor eax, eax
00e0b329 mov dword ptr [edi], eax
00e0b32b cmp dword ptr [edx], 0
00e0b32e jne 0xe0b33d
00e0b330 cmp dword ptr [esi], 0
00e0b333 jne 0xe0b33d
00e0b335 test eax, eax
00e0b337 je 0xe0b3e7
00e0b33d call 0xdb3e20
00e0b342 mov ecx, 0x2116434
00e0b347 cmp dword ptr [eax + 0x44], ecx
00e0b34a setne dl
00e0b34d or byte ptr [eax + 0x330], dl
00e0b353 mov dword ptr [eax + 0x44], ecx
00e0b356 xor ecx, ecx
00e0b358 cmp dword ptr [eax + 0x48], ecx
00e0b35b setne dl
00e0b35e or byte ptr [eax + 0x330], dl
00e0b364 cmp dword ptr [eax + 0x4c], ecx
00e0b367 mov dword ptr [eax + 0x48], ecx
00e0b36a setne dl
00e0b36d or byte ptr [eax + 0x330], dl
00e0b373 cmp dword ptr [eax + 0x50], ecx
00e0b376 mov dword ptr [eax + 0x4c], ecx
00e0b379 setne dl
00e0b37c or byte ptr [eax + 0x330], dl
00e0b382 mov edx, dword ptr [esp + 0x30]
00e0b386 mov dword ptr [eax + 0x50], ecx
00e0b389 mov eax, dword ptr [esp + 0x10]
00e0b38d mov dword ptr [esp + 0x14], eax
00e0b391 mov eax, dword ptr [esp + 0x40]
00e0b395 mov dword ptr [esp + 0x20], eax
00e0b399 mov eax, dword ptr [esp + 0x34]
00e0b39d mov dword ptr [esp + 0x1c], edx
00e0b3a1 xor edx, edx
00e0b3a3 cmp dword ptr [eax], ecx
00e0b3a5 mov eax, dword ptr [esi]
00e0b3a7 setne dl
00e0b3aa neg eax
00e0b3ac sbb eax, eax
00e0b3ae and eax, 2
00e0b3b1 mov dword ptr [esp + 0x28], ecx
00e0b3b5 lea ecx, [esp + 0x14]
00e0b3b9 push ecx
00e0b3ba or edx, eax
00e0b3bc mov eax, dword ptr [edi]
00e0b3be neg eax
00e0b3c0 sbb eax, eax
00e0b3c2 and eax, 4
00e0b3c5 or edx, eax
00e0b3c7 mov dword ptr [esp + 0x28], edx
00e0b3cb xor edx, edx
00e0b3cd mov ecx, 0xee3da0
00e0b3d2 mov dword ptr [esp + 0x1c], ebp
00e0b3d6 call 0xdccf10
00e0b3db mov edx, 0xe0b0d0
00e0b3e0 mov ecx, eax
00e0b3e2 call 0xdd2ba0
00e0b3e7 pop edi
00e0b3e8 pop esi
00e0b3e9 pop ebp
00e0b3ea pop ebx
00e0b3eb add esp, 0x1c
00e0b3ee ret 0x14
00e0b3f1 int3 
00e0b3f2 int3 
00e0b3f3 int3 
00e0b3f4 int3 
00e0b3f5 int3 
00e0b3f6 int3 
00e0b3f7 int3 
00e0b3f8 int3 
00e0b3f9 int3 
00e0b3fa int3 
00e0b3fb int3 
00e0b3fc int3 
00e0b3fd int3 
00e0b3fe int3 
00e0b3ff int3 
00e0b400 push ebp
00e0b401 mov ebp, esp
00e0b403 and esp, 0xfffffff0
00e0b406 sub esp, 0x84
00e0b40c push ebx
00e0b40d xor ebx, ebx
00e0b40f push esi
00e0b410 push edi
00e0b411 mov dword ptr [esp + 0x18], edx
00e0b415 mov dword ptr [esp + 0x1c], ecx
00e0b419 mov dword ptr [esp + 0x14], ebx
00e0b41d cmp dword ptr [edx + 0x60], ebx
00e0b420 jle 0xe0b570
00e0b426 xorps xmm0, xmm0
00e0b429 mov eax, dword ptr [ebp + 8]
00e0b42c movss dword ptr [esp + 0x2c], xmm0
00e0b432 movaps xmm0, xmmword ptr [0xfdf1d0]
00e0b439 movaps xmmword ptr [esp + 0x30], xmm0
00e0b43e mov dword ptr [esp + 0x10], eax
00e0b442 jmp 0xe0b446
00e0b444 mov edx, ecx
00e0b446 mov eax, dword ptr [edx + 0x64]
00e0b449 mov esi, dword ptr [esp + 0x10]
00e0b44d add eax, ebx
00e0b44f mov ecx, 0x10
00e0b454 lea edi, [esp + 0x50]
00e0b458 rep movsd dword ptr es:[edi], dword ptr [esi]
00e0b45a movss xmm1, dword ptr [eax]
00e0b45e mulss xmm1, dword ptr [esp + 0x50]
00e0b464 movss xmm0, dword ptr [esp + 0x60]
00e0b46a mulss xmm0, dword ptr [eax + 4]
00e0b46f addss xmm1, xmm0
00e0b473 movss xmm0, dword ptr [eax + 8]
00e0b478 mulss xmm0, dword ptr [esp + 0x70]
00e0b47e addss xmm1, xmm0
00e0b482 movss xmm0, dword ptr [esp + 0x80]
00e0b48b subss xmm0, xmm1
00e0b48f movss xmm1, dword ptr [esp + 0x64]
00e0b495 movss dword ptr [esp + 0x80], xmm0
00e0b49e mulss xmm1, dword ptr [eax + 4]
00e0b4a3 movss xmm2, dword ptr [eax]
00e0b4a7 mulss xmm2, dword ptr [esp + 0x54]
00e0b4ad addss xmm2, xmm1
00e0b4b1 movss xmm1, dword ptr [eax + 8]
00e0b4b6 mulss xmm1, dword ptr [esp + 0x74]
00e0b4bc addss xmm2, xmm1
00e0b4c0 movss xmm1, dword ptr [esp + 0x84]
00e0b4c9 subss xmm1, xmm2
00e0b4cd movss xmm2, dword ptr [esp + 0x68]
00e0b4d3 movss dword ptr [esp + 0x84], xmm1
00e0b4dc mulss xmm2, dword ptr [eax + 4]
00e0b4e1 movss xmm3, dword ptr [eax]
00e0b4e5 mulss xmm3, dword ptr [esp + 0x58]
00e0b4eb addss xmm3, xmm2
00e0b4ef movss xmm2, dword ptr [eax + 8]
00e0b4f4 mulss xmm2, dword ptr [esp + 0x78]
00e0b4fa addss xmm3, xmm2
00e0b4fe movss xmm2, dword ptr [esp + 0x88]
00e0b507 subss xmm2, xmm3
00e0b50b lea edx, [esp + 0x50]
00e0b50f lea ecx, [esp + 0x40]
00e0b513 movss dword ptr [esp + 0x88], xmm2
00e0b51c movss dword ptr [esp + 0x20], xmm0
00e0b522 movss dword ptr [esp + 0x24], xmm1
00e0b528 movss dword ptr [esp + 0x28], xmm2
00e0b52e call 0xd92280
00e0b533 movaps xmm1, xmmword ptr [eax]
00e0b536 mov esi, dword ptr [esp + 0x1c]
00e0b53a movaps xmm0, xmmword ptr [esp + 0x30]
00e0b53f mulps xmm0, xmmword ptr [esp + 0x20]
00e0b544 movaps xmmword ptr [ebx + esi], xmm1
00e0b548 call 0xd91c00
00e0b54d mov eax, dword ptr [esp + 0x14]
00e0b551 mov ecx, dword ptr [esp + 0x18]
00e0b555 add dword ptr [esp + 0x10], 0x40
00e0b55a movaps xmmword ptr [ebx + esi + 0x10], xmm0
00e0b55f inc eax
00e0b560 add ebx, 0x30
00e0b563 mov dword ptr [esp + 0x14], eax
00e0b567 cmp eax, dword ptr [ecx + 0x60]
00e0b56a jl 0xe0b444
00e0b570 pop edi
00e0b571 pop esi
00e0b572 pop ebx
00e0b573 mov esp, ebp
00e0b575 pop ebp
00e0b576 ret 4
00e0b579 int3 
00e0b57a int3 
00e0b57b int3 
00e0b57c int3 
00e0b57d int3 
00e0b57e int3 
00e0b57f int3 
00e0b580 push ecx
00e0b581 xchg dword ptr [esp], eax
00e0b584 pop ecx
00e0b585 ret 
00e0b586 int3 
00e0b587 int3 
00e0b588 int3 
00e0b589 int3 
00e0b58a int3 
00e0b58b int3 
00e0b58c int3 
00e0b58d int3 
00e0b58e int3 
00e0b58f int3 
00e0b590 mov eax, edx
00e0b592 lea edx, [ecx + 0x528]
00e0b598 mov ecx, eax
00e0b59a jmp 0xdf4380
00e0b59f int3 
00e0b5a0 mov eax, edx
00e0b5a2 lea edx, [ecx + 0x530]
00e0b5a8 mov ecx, eax
00e0b5aa jmp 0xdf4380
00e0b5af int3 
00e0b5b0 push ebp
00e0b5b1 mov ebp, esp
00e0b5b3 and esp, 0xfffffff8
00e0b5b6 sub esp, 8
00e0b5b9 push esi
00e0b5ba lea esi, [ecx + 0x530]
00e0b5c0 push edi
00e0b5c1 mov ecx, esi
00e0b5c3 mov dword ptr [esp + 8], 0
00e0b5cb mov dword ptr [esp + 0xc], 0
00e0b5d3 xor edi, edi
00e0b5d5 call 0xdf4390
00e0b5da test eax, eax
00e0b5dc je 0xe0b608
00e0b5de mov edi, edi
00e0b5e0 lea edx, [esp + 8]
00e0b5e4 mov ecx, eax
00e0b5e6 call 0xdbb1c0
00e0b5eb test eax, eax
00e0b5ed jne 0xe0b5fd
00e0b5ef test edi, edi
00e0b5f1 jne 0xe0b5fd
00e0b5f3 mov eax, dword ptr [esp + 8]
00e0b5f7 test eax, eax
00e0b5f9 je 0xe0b5fd
00e0b5fb mov edi, eax
00e0b5fd mov ecx, esi
00e0b5ff call 0xdf4390
00e0b604 test eax, eax
00e0b606 jne 0xe0b5e0
00e0b608 mov edx, dword ptr [esp + 8]
00e0b60c test edx, edx
00e0b60e je 0xe0b61a
00e0b610 push 0x24
00e0b612 push edi
00e0b613 mov ecx, esi
00e0b615 call 0xe157d0
00e0b61a pop edi
00e0b61b pop esi
00e0b61c mov esp, ebp
00e0b61e pop ebp
00e0b61f ret 
00e0b620 push esi
00e0b621 lea esi, [ecx + 0x528]
00e0b627 mov ecx, esi
00e0b629 call 0xdf4390
00e0b62e test eax, eax
00e0b630 je 0xe0b644
00e0b632 mov ecx, eax
00e0b634 call 0xdbbaf0
00e0b639 mov ecx, esi
00e0b63b call 0xdf4390
00e0b640 test eax, eax
00e0b642 jne 0xe0b632
00e0b644 pop esi
00e0b645 ret 
00e0b646 int3 
00e0b647 int3 
00e0b648 int3 
00e0b649 int3 
00e0b64a int3 
00e0b64b int3 
00e0b64c int3 
00e0b64d int3 
00e0b64e int3 
00e0b64f int3 
00e0b650 push ecx
00e0b651 push esi
00e0b652 push edi
00e0b653 mov edi, dword ptr [esp + 0x10]
00e0b657 mov eax, dword ptr [edi + 0x20]
00e0b65a mov dword ptr [esp + 8], ecx
00e0b65e mov ecx, dword ptr [edi + 0x1c]
00e0b661 mov esi, edx
00e0b663 lea edx, [ecx + eax - 0xf]
00e0b667 cmp edx, 0x71
00e0b66a ja 0xe0b6ac
00e0b66c movzx edx, byte ptr [edx + 0xe0b7e8]
00e0b673 jmp dword ptr [edx*4 + 0xe0b7cc]
00e0b67a mov eax, 0x18
00e0b67f jmp 0xe0b6b9
00e0b681 xor ecx, ecx
00e0b683 cmp eax, 1
00e0b686 sete cl
00e0b689 lea eax, [ecx + ecx + 0x17]
00e0b68d jmp 0xe0b6b9
00e0b68f mov eax, 0x16
00e0b694 jmp 0xe0b6b9
00e0b696 mov eax, dword ptr [edi + 0x38]
00e0b699 neg eax
00e0b69b sbb eax, eax
00e0b69d and eax, 0x4d
00e0b6a0 add eax, 0x24
00e0b6a3 jmp 0xe0b6b9
00e0b6a5 mov eax, 0x74
00e0b6aa jmp 0xe0b6b9
00e0b6ac sub eax, 2
00e0b6af neg eax
00e0b6b1 sbb eax, eax
00e0b6b3 and eax, 0xfffffff2
00e0b6b6 add eax, 0x23
00e0b6b9 mov edx, dword ptr [edi + 0x28]
00e0b6bc push ebx
00e0b6bd mov ebx, dword ptr [edi + 0x24]
00e0b6c0 add ebx, edx
00e0b6c2 push ebp
00e0b6c3 cmp ebx, 0x10
00e0b6c6 je 0xe0b70e
00e0b6c8 cmp ebx, 0x18
00e0b6cb je 0xe0b707
00e0b6cd cmp ebx, 0x20
00e0b6d0 jne 0xe0b707
00e0b6d2 test edx, edx
00e0b6d4 je 0xe0b6f8
00e0b6d6 cmp edx, 4
00e0b6d9 je 0xe0b6f1
00e0b6db cmp edx, 8
00e0b6de jne 0xe0b6f8
00e0b6e0 xor ebx, ebx
00e0b6e2 cmp dword ptr [edi + 0x3c], ebx
00e0b6e5 setne bl
00e0b6e8 lea ebx, [ebx*8 + 0x4b]
00e0b6ef jmp 0xe0b718
00e0b6f1 mov ebx, 0x4f
00e0b6f6 jmp 0xe0b718
00e0b6f8 mov ebx, dword ptr [edi + 0x3c]
00e0b6fb neg ebx
00e0b6fd sbb ebx, ebx
00e0b6ff and ebx, 0xb
00e0b702 add ebx, 0x47
00e0b705 jmp 0xe0b718
00e0b707 mov ebx, 0x4d
00e0b70c jmp 0xe0b718
00e0b70e neg edx
00e0b710 sbb edx, edx
00e0b712 and edx, 0xfffffff9
00e0b715 lea ebx, [edx + 0x50]
00e0b718 mov edx, dword ptr [edi + 0x18]
00e0b71b mov ecx, dword ptr [edi + 0x14]
00e0b71e mov dword ptr [esp + 0x18], edx
00e0b722 mov edx, esi
00e0b724 lea ebp, [esi + 0x38]
00e0b727 jmp 0xe0b730
00e0b729 lea esp, [esp]
00e0b730 mov dword ptr [edx], 0
00e0b736 add edx, 4
00e0b739 cmp edx, ebp
00e0b73b jb 0xe0b730
00e0b73d mov edx, dword ptr [edi + 0x48]
00e0b740 mov dword ptr [esi + 0x10], edx
00e0b743 mov edx, dword ptr [edi + 0x4c]
00e0b746 mov dword ptr [esi + 0x14], edx
00e0b749 mov edx, dword ptr [esp + 0x10]
00e0b74d mov dword ptr [esi + 0x1c], edx
00e0b750 mov edx, dword ptr [edi + 0x44]
00e0b753 mov dword ptr [esi], ecx
00e0b755 mov ecx, dword ptr [esp + 0x18]
00e0b759 mov dword ptr [esi + 8], eax
00e0b75c mov dword ptr [esi + 0x20], edx
00e0b75f mov dword ptr [esi + 4], ecx
00e0b762 mov edx, dword ptr [edi + 0x30]
00e0b765 mov eax, 1
00e0b76a mov dword ptr [esi + 0x28], ebx
00e0b76d mov dword ptr [esi + 0xc], edx
00e0b770 mov dword ptr [esi + 0x24], eax
00e0b773 mov dword ptr [esi + 0x18], eax
00e0b776 cmp dword ptr [edi + 0x44], 0
00e0b77a pop ebp
00e0b77b pop ebx
00e0b77c je 0xe0b782
00e0b77e xor eax, eax
00e0b780 jmp 0xe0b785
00e0b782 mov eax, dword ptr [edi + 0x2c]
00e0b785 mov dword ptr [esi + 0x30], eax
00e0b788 call 0xda3620
00e0b78d mov eax, dword ptr [eax + 0x1f8d0]
00e0b793 test eax, eax
00e0b795 jg 0xe0b79b
00e0b797 xor eax, eax
00e0b799 jmp 0xe0b7a5
00e0b79b cmp eax, 4
00e0b79e jl 0xe0b7a5
00e0b7a0 mov eax, 4
00e0b7a5 cmp dword ptr [edi + 0x44], 0
00e0b7a9 je 0xe0b7bb
00e0b7ab mov eax, dword ptr [eax*4 + 0xfdf250]
00e0b7b2 pop edi
00e0b7b3 mov dword ptr [esi + 0x34], eax
00e0b7b6 pop esi
00e0b7b7 pop ecx
00e0b7b8 ret 4
00e0b7bb mov eax, dword ptr [eax*4 + 0xfdf23c]
00e0b7c2 pop edi
00e0b7c3 mov dword ptr [esi + 0x34], eax
00e0b7c6 pop esi
00e0b7c7 pop ecx
00e0b7c8 ret 4
00e0b7cb nop 
00e0b7cc jp 0xe0b784
00e0b7ce loopne 0xe0b7d0
00e0b7d0 xor dword ptr [esi - 0x4970ff20], 0xb6ac00e0
00e0b7da loopne 0xe0b7dc
00e0b7dc xchg esi, eax
00e0b7dd mov dh, 0xe0
00e0b7df add byte ptr [ebp - 0x53ff1f4a], ah
00e0b7e5 mov dh, 0xe0
00e0b7e7 add byte ptr [eax], al
00e0b7e9 add dword ptr [esi], eax
00e0b7eb push es
00e0b7ec push es
00e0b7ed push es
00e0b7ee push es
00e0b7ef push es
00e0b7f0 push es
00e0b7f1 add al, byte ptr [esi]
00e0b7f3 push es
00e0b7f4 push es
00e0b7f5 push es
00e0b7f6 push es
00e0b7f7 push es
00e0b7f8 push es
00e0b7f9 add eax, dword ptr [esi]
00e0b7fb push es
00e0b7fc push es
00e0b7fd push es
00e0b7fe push es
00e0b7ff push es
00e0b800 push es
00e0b801 push es
00e0b802 push es
00e0b803 push es
00e0b804 push es
00e0b805 push es
00e0b806 push es
00e0b807 push es
00e0b808 push es
00e0b809 push es
00e0b80a push es
00e0b80b push es
00e0b80c push es
00e0b80d push es
00e0b80e push es
00e0b80f push es
00e0b810 push es
00e0b811 push es
00e0b812 push es
00e0b813 push es
00e0b814 push es
00e0b815 push es
00e0b816 push es
00e0b817 push es
00e0b818 push es
00e0b819 add al, 6
00e0b81b push es
00e0b81c push es
00e0b81d push es
00e0b81e push es
00e0b81f push es
00e0b820 push es
00e0b821 push es
00e0b822 push es
00e0b823 push es
00e0b824 push es
00e0b825 push es
00e0b826 push es
00e0b827 push es
00e0b828 push es
00e0b829 push es
00e0b82a push es
00e0b82b push es
00e0b82c push es
00e0b82d push es
00e0b82e push es
00e0b82f push es
00e0b830 push es
00e0b831 push es
00e0b832 push es
00e0b833 push es
00e0b834 push es
00e0b835 push es
00e0b836 push es
00e0b837 push es
00e0b838 push es
00e0b839 push es
00e0b83a push es
00e0b83b push es
00e0b83c push es
00e0b83d push es
00e0b83e push es
00e0b83f push es
00e0b840 push es
00e0b841 push es
00e0b842 push es
00e0b843 push es
00e0b844 push es
00e0b845 push es
00e0b846 push es
00e0b847 push es
00e0b848 push es
00e0b849 push es
00e0b84a push es
00e0b84b push es
00e0b84c push es
00e0b84d push es
00e0b84e push es
00e0b84f push es
00e0b850 push es
00e0b851 push es
00e0b852 push es
00e0b853 push es
00e0b854 push es
00e0b855 push es
00e0b856 push es
00e0b857 push es
00e0b858 push es
00e0b859 add eax, 0xcccccccc
00e0b85e int3 
00e0b85f int3 
00e0b860 sub esp, 0x24
00e0b863 push ebx
00e0b864 mov ebx, dword ptr [esp + 0x34]
00e0b868 push ebp
00e0b869 mov ebp, dword ptr [esp + 0x30]
00e0b86d push esi
00e0b86e mov esi, dword ptr [esp + 0x38]
00e0b872 push edi
00e0b873 mov edi, dword ptr [esp + 0x44]
00e0b877 cmp esi, 0x84
00e0b87d ja 0xe0b936
00e0b883 je 0xe0b8a8
00e0b885 mov eax, esi
00e0b887 sub eax, 2
00e0b88a je 0xe0b89c
00e0b88c sub eax, 0xe
00e0b88f jne 0xe0b986
00e0b895 push eax
00e0b896 call dword ptr [0xec22e4]
00e0b89c pop edi
00e0b89d pop esi
00e0b89e pop ebp
00e0b89f xor eax, eax
00e0b8a1 pop ebx
00e0b8a2 add esp, 0x24
00e0b8a5 ret 0x10
00e0b8a8 lea edx, [esp + 0x24]
00e0b8ac movzx eax, di
00e0b8af mov ecx, edi
00e0b8b1 push edx
00e0b8b2 shr ecx, 0x10
00e0b8b5 push ebp
00e0b8b6 mov dword ptr [esp + 0x18], eax
00e0b8ba mov dword ptr [esp + 0x1c], ecx
00e0b8be call dword ptr [0xec22f4]
00e0b8c4 test eax, eax
00e0b8c6 je 0xe0b8fc
00e0b8c8 lea eax, [esp + 0x10]
00e0b8cc push eax
00e0b8cd push ebp
00e0b8ce call dword ptr [0xec22f8]
00e0b8d4 test eax, eax
00e0b8d6 je 0xe0b8fc
00e0b8d8 mov eax, dword ptr [esp + 0x10]
00e0b8dc cmp eax, dword ptr [esp + 0x24]
00e0b8e0 jl 0xe0b8fc
00e0b8e2 cmp eax, dword ptr [esp + 0x2c]
00e0b8e6 jg 0xe0b8fc
00e0b8e8 mov eax, dword ptr [esp + 0x14]
00e0b8ec cmp eax, dword ptr [esp + 0x28]
00e0b8f0 jl 0xe0b8fc
00e0b8f2 cmp eax, dword ptr [esp + 0x30]
00e0b8f6 jle 0xe0b986
00e0b8fc call 0xda3620
00e0b901 mov ecx, dword ptr [eax + 0x21d14]
00e0b907 test ecx, ecx
00e0b909 jne 0xe0b986
00e0b90b push 1
00e0b90d call dword ptr [0xec22e8]
00e0b913 call 0xda3620
00e0b918 push edi
00e0b919 push ebx
00e0b91a push esi
00e0b91b push ebp
00e0b91c mov dword ptr [eax + 0x21d14], 1
00e0b926 call dword ptr [0xec22ec]
00e0b92c pop edi
00e0b92d pop esi
00e0b92e pop ebp
00e0b92f pop ebx
00e0b930 add esp, 0x24
00e0b933 ret 0x10
00e0b936 cmp esi, 0x112
00e0b93c je 0xe0b975
00e0b93e cmp esi, 0x219
00e0b944 jne 0xe0b986
00e0b946 lea edx, [esp + 0x18]
00e0b94a xor ecx, ecx
00e0b94c mov dword ptr [esp + 0x18], ebx
00e0b950 mov dword ptr [esp + 0x1c], edi
00e0b954 mov dword ptr [esp + 0x20], 0
00e0b95c call 0xe0f630
00e0b961 push edi
00e0b962 push ebx
00e0b963 push esi
00e0b964 push ebp
00e0b965 call dword ptr [0xec22ec]
00e0b96b pop edi
00e0b96c pop esi
00e0b96d pop ebp
00e0b96e pop ebx
00e0b96f add esp, 0x24
00e0b972 ret 0x10
00e0b975 mov edx, ebx
00e0b977 and edx, 0xfffffff0
00e0b97a cmp edx, 0xf100
00e0b980 je 0xe0b89c
00e0b986 push edi
00e0b987 push ebx
00e0b988 push esi
00e0b989 push ebp
00e0b98a call dword ptr [0xec22ec]
00e0b990 pop edi
00e0b991 pop esi
00e0b992 pop ebp
00e0b993 pop ebx
00e0b994 add esp, 0x24
00e0b997 ret 0x10
00e0b99a int3 
00e0b99b int3 
00e0b99c int3 
00e0b99d int3 
00e0b99e int3 
00e0b99f int3 
00e0b9a0 sub esp, 0x1c
00e0b9a3 push ebp
00e0b9a4 push esi
00e0b9a5 mov esi, dword ptr [0xec22d8]
00e0b9ab push 1
00e0b9ad push 0
00e0b9af push 0
00e0b9b1 push 0
00e0b9b3 lea eax, [esp + 0x18]
00e0b9b7 push eax
00e0b9b8 mov ebp, ecx
00e0b9ba call esi
00e0b9bc test eax, eax
00e0b9be je 0xe0ba0e
00e0b9c0 push ebx
00e0b9c1 mov ebx, dword ptr [0xec22dc]
00e0b9c7 push edi
00e0b9c8 mov edi, dword ptr [0xec22e0]
00e0b9ce mov edi, edi
00e0b9d0 cmp dword ptr [esp + 0x14], 0x12
00e0b9d5 jne 0xe0b9eb
00e0b9d7 mov ecx, dword ptr [esp + 0x18]
00e0b9db mov dword ptr [ebp + 0x944], ecx
00e0b9e1 mov dword ptr [ebp + 0x940], 1
00e0b9eb lea edx, [esp + 0x10]
00e0b9ef push edx
00e0b9f0 call edi
00e0b9f2 lea eax, [esp + 0x10]
00e0b9f6 push eax
00e0b9f7 call ebx
00e0b9f9 push 1
00e0b9fb push 0
00e0b9fd push 0
00e0b9ff push 0
00e0ba01 lea ecx, [esp + 0x20]
00e0ba05 push ecx
00e0ba06 call esi
00e0ba08 test eax, eax
00e0ba0a jne 0xe0b9d0
00e0ba0c pop edi
00e0ba0d pop ebx
00e0ba0e pop esi
00e0ba0f pop ebp
00e0ba10 add esp, 0x1c
00e0ba13 ret 
00e0ba14 int3 
00e0ba15 int3 
00e0ba16 int3 
00e0ba17 int3 
00e0ba18 int3 
00e0ba19 int3 
00e0ba1a int3 
00e0ba1b int3 
00e0ba1c int3 
00e0ba1d int3 
00e0ba1e int3 
00e0ba1f int3 
00e0ba20 cmp dword ptr [0x146abcc], 0
00e0ba27 je 0xe0ba4b
00e0ba29 call 0xda3620
00e0ba2e mov eax, dword ptr [eax + 0x21d34]
00e0ba34 mov ecx, dword ptr [eax + 0x864]
00e0ba3a mov edx, dword ptr [ecx]
00e0ba3c mov eax, dword ptr [edx + 0x24]
00e0ba3f call eax
00e0ba41 xor edx, edx
00e0ba43 lea ecx, [edx + 6]
00e0ba46 jmp 0xe0f630
00e0ba4b ret 
00e0ba4c int3 
00e0ba4d int3 
00e0ba4e int3 
00e0ba4f int3 
00e0ba50 mov dword ptr [ecx + 0x85c], 1
00e0ba5a ret 
00e0ba5b int3 
00e0ba5c int3 
00e0ba5d int3 
00e0ba5e int3 
00e0ba5f int3 
00e0ba60 push ebx
00e0ba61 push esi
00e0ba62 push edi
00e0ba63 call 0xda3620
00e0ba68 mov edi, dword ptr [0xec20dc]
00e0ba6e mov esi, eax
00e0ba70 call edi
00e0ba72 cmp eax, dword ptr [esi + 0x21d38]
00e0ba78 jne 0xe0ba82
00e0ba7a mov ebx, dword ptr [esi + 0x21e98]
00e0ba80 jmp 0xe0ba9a
00e0ba82 call edi
00e0ba84 cmp eax, dword ptr [esi + 0x21e88]
00e0ba8a jne 0xe0ba94
00e0ba8c mov ebx, dword ptr [esi + 0x21e90]
00e0ba92 jmp 0xe0ba9a
00e0ba94 mov ebx, dword ptr [esi + 0x21e84]
00e0ba9a call 0xda3620
00e0ba9f mov esi, eax
00e0baa1 call edi
00e0baa3 cmp eax, dword ptr [esi + 0x21d38]
00e0baa9 jne 0xe0bac0
00e0baab mov esi, dword ptr [esi + 0x21e98]
00e0bab1 mov eax, dword ptr [esi]
00e0bab3 mov ecx, dword ptr [eax + 0xa4]
00e0bab9 push ebx
00e0baba call ecx
00e0babc pop edi
00e0babd pop esi
00e0babe pop ebx
00e0babf ret 
00e0bac0 call edi
00e0bac2 cmp eax, dword ptr [esi + 0x21e88]
00e0bac8 jne 0xe0badf
00e0baca mov esi, dword ptr [esi + 0x21e90]
00e0bad0 mov eax, dword ptr [esi]
00e0bad2 mov ecx, dword ptr [eax + 0xa4]
00e0bad8 push ebx
00e0bad9 call ecx
00e0badb pop edi
00e0badc pop esi
00e0badd pop ebx
00e0bade ret 
00e0badf mov esi, dword ptr [esi + 0x21e84]
00e0bae5 mov eax, dword ptr [esi]
00e0bae7 mov ecx, dword ptr [eax + 0xa4]
00e0baed push ebx
00e0baee call ecx
00e0baf0 pop edi
00e0baf1 pop esi
00e0baf2 pop ebx
00e0baf3 ret 
00e0baf4 int3 
00e0baf5 int3 
00e0baf6 int3 
00e0baf7 int3 
00e0baf8 int3 
00e0baf9 int3 
00e0bafa int3 
00e0bafb int3 
00e0bafc int3 
00e0bafd int3 
00e0bafe int3 
00e0baff int3 
00e0bb00 push ebx
00e0bb01 push esi
00e0bb02 push edi
00e0bb03 mov esi, ecx
00e0bb05 call 0xda3620
00e0bb0a cmp dword ptr [eax + 0x1f8c8], 0
00e0bb11 jle 0xe0bb2a
00e0bb13 mov eax, dword ptr [esi + 0x868]
00e0bb19 cmp dword ptr [eax], 0
00e0bb1c je 0xe0bb2a
00e0bb1e mov eax, dword ptr [eax]
00e0bb20 mov edx, dword ptr [eax]
00e0bb22 push 1
00e0bb24 push eax
00e0bb25 mov eax, dword ptr [edx + 0x18]
00e0bb28 call eax
00e0bb2a call 0xda3620
00e0bb2f mov edi, dword ptr [0xec20dc]
00e0bb35 mov esi, eax
00e0bb37 call edi
00e0bb39 cmp eax, dword ptr [esi + 0x21d38]
00e0bb3f jne 0xe0bb49
00e0bb41 mov ebx, dword ptr [esi + 0x21e98]
00e0bb47 jmp 0xe0bb61
00e0bb49 call edi
00e0bb4b cmp eax, dword ptr [esi + 0x21e88]
00e0bb51 jne 0xe0bb5b
00e0bb53 mov ebx, dword ptr [esi + 0x21e90]
00e0bb59 jmp 0xe0bb61
00e0bb5b mov ebx, dword ptr [esi + 0x21e84]
00e0bb61 call 0xda3620
00e0bb66 mov esi, eax
00e0bb68 call edi
00e0bb6a cmp eax, dword ptr [esi + 0x21d38]
00e0bb70 jne 0xe0bb87
00e0bb72 mov esi, dword ptr [esi + 0x21e98]
00e0bb78 mov ecx, dword ptr [esi]
00e0bb7a mov edx, dword ptr [ecx + 0xa8]
00e0bb80 push ebx
00e0bb81 call edx
00e0bb83 pop edi
00e0bb84 pop esi
00e0bb85 pop ebx
00e0bb86 ret 
00e0bb87 call edi
00e0bb89 cmp eax, dword ptr [esi + 0x21e88]
00e0bb8f jne 0xe0bba6
00e0bb91 mov esi, dword ptr [esi + 0x21e90]
00e0bb97 mov ecx, dword ptr [esi]
00e0bb99 mov edx, dword ptr [ecx + 0xa8]
00e0bb9f push ebx
00e0bba0 call edx
00e0bba2 pop edi
00e0bba3 pop esi
00e0bba4 pop ebx
00e0bba5 ret 
00e0bba6 mov esi, dword ptr [esi + 0x21e84]
00e0bbac mov ecx, dword ptr [esi]
00e0bbae mov edx, dword ptr [ecx + 0xa8]
00e0bbb4 push ebx
00e0bbb5 call edx
00e0bbb7 pop edi
00e0bbb8 pop esi
00e0bbb9 pop ebx
00e0bbba ret 
00e0bbbb int3 
00e0bbbc int3 
00e0bbbd int3 
00e0bbbe int3 
00e0bbbf int3 
00e0bbc0 push ecx
00e0bbc1 push ebx
00e0bbc2 push ebp
00e0bbc3 push esi
00e0bbc4 mov dword ptr [esp + 0xc], edx
00e0bbc8 mov edx, dword ptr [edx + 0xc]
00e0bbcb mov ebx, ecx
00e0bbcd push edi
00e0bbce mov ecx, 4
00e0bbd3 call 0xdbadd0
00e0bbd8 call 0xda3620
00e0bbdd mov ebp, dword ptr [0xec20dc]
00e0bbe3 mov esi, eax
00e0bbe5 call ebp
00e0bbe7 cmp eax, dword ptr [esi + 0x21d38]
00e0bbed jne 0xe0bbf7
00e0bbef mov esi, dword ptr [esi + 0x21e98]
00e0bbf5 jmp 0xe0bc0f
00e0bbf7 call ebp
00e0bbf9 cmp eax, dword ptr [esi + 0x21e88]
00e0bbff jne 0xe0bc09
00e0bc01 mov esi, dword ptr [esi + 0x21e90]
00e0bc07 jmp 0xe0bc0f
00e0bc09 mov esi, dword ptr [esi + 0x21e84]
00e0bc0f call 0xda3620
00e0bc14 mov edi, eax
00e0bc16 call ebp
00e0bc18 cmp eax, dword ptr [edi + 0x21d38]
00e0bc1e jne 0xe0bc28
00e0bc20 mov eax, dword ptr [edi + 0x21e98]
00e0bc26 jmp 0xe0bc40
00e0bc28 call ebp
00e0bc2a cmp eax, dword ptr [edi + 0x21e88]
00e0bc30 jne 0xe0bc3a
00e0bc32 mov eax, dword ptr [edi + 0x21e90]
00e0bc38 jmp 0xe0bc40
00e0bc3a mov eax, dword ptr [edi + 0x21e84]
00e0bc40 mov eax, dword ptr [eax]
00e0bc42 mov ecx, dword ptr [eax + 0x44]
00e0bc45 push 0
00e0bc47 push 0
00e0bc49 push 0
00e0bc4b push 0
00e0bc4d push esi
00e0bc4e call ecx
00e0bc50 mov edi, dword ptr [esp + 0x10]
00e0bc54 mov edx, dword ptr [edi + 0xc]
00e0bc57 mov ecx, 4
00e0bc5c call 0xdbadf0
00e0bc61 mov edx, dword ptr [edi + 0xc]
00e0bc64 mov ecx, 5
00e0bc69 call 0xdbadd0
00e0bc6e mov edx, dword ptr [ebx + 0x868]
00e0bc74 mov esi, dword ptr [ebx + 0x86c]
00e0bc7a mov eax, dword ptr [edx + 8]
00e0bc7d mov dword ptr [ebx + 0x868], eax
00e0bc83 test esi, esi
00e0bc85 je 0xe0bcd8
00e0bc87 mov eax, dword ptr [esi]
00e0bc89 test eax, eax
00e0bc8b je 0xe0bcd8
00e0bc8d mov ecx, dword ptr [eax]
00e0bc8f mov edx, dword ptr [ecx + 0x1c]
00e0bc92 push 1
00e0bc94 push 0
00e0bc96 push 0
00e0bc98 push eax
00e0bc99 call edx
00e0bc9b cmp eax, 1
00e0bc9e jne 0xe0bccf
00e0bca0 call 0xda3620
00e0bca5 cmp dword ptr [eax + 0x1f8cc], 0
00e0bcac je 0xe0bcba
00e0bcae push 0
00e0bcb0 push 0x3e8
00e0bcb5 call 0xda1a90
00e0bcba mov eax, dword ptr [esi]
00e0bcbc mov ecx, dword ptr [eax]
00e0bcbe mov edx, dword ptr [ecx + 0x1c]
00e0bcc1 push 1
00e0bcc3 push 0
00e0bcc5 push 0
00e0bcc7 push eax
00e0bcc8 call edx
00e0bcca cmp eax, 1
00e0bccd je 0xe0bca0
00e0bccf mov eax, dword ptr [esi + 8]
00e0bcd2 mov dword ptr [ebx + 0x86c], eax
00e0bcd8 mov edx, dword ptr [edi + 0xc]
00e0bcdb pop edi
00e0bcdc pop esi
00e0bcdd pop ebp
00e0bcde mov ecx, 5
00e0bce3 pop ebx
00e0bce4 add esp, 4
00e0bce7 jmp 0xdbadf0
00e0bcec int3 
00e0bced int3 
00e0bcee int3 
00e0bcef int3 
00e0bcf0 mov eax, dword ptr [ecx + 0x864]
00e0bcf6 cmp eax, 0x146abf0
00e0bcfb jne 0xe0bd00
00e0bcfd xor eax, eax
00e0bcff ret 
00e0bd00 cmp eax, 0x146abf4
00e0bd05 jne 0xe0bd0d
00e0bd07 mov eax, 1
00e0bd0c ret 
00e0bd0d cmp eax, 0x146abf8
00e0bd12 jne 0xe0bd1a
00e0bd14 mov eax, 2
00e0bd19 ret 
00e0bd1a cmp eax, 0x146ac00
00e0bd1f jne 0xe0bd27
00e0bd21 mov eax, 3
00e0bd26 ret 
00e0bd27 xor ecx, ecx
00e0bd29 cmp eax, 0x146ac08
00e0bd2e setne cl
00e0bd31 lea eax, [ecx - 1]
00e0bd34 and eax, 4
00e0bd37 ret 
00e0bd38 int3 
00e0bd39 int3 
00e0bd3a int3 
00e0bd3b int3 
00e0bd3c int3 
00e0bd3d int3 
00e0bd3e int3 
00e0bd3f int3 
00e0bd40 call 0xda3620
00e0bd45 mov eax, dword ptr [eax + 0x21d34]
00e0bd4b mov eax, dword ptr [eax + 0x864]
00e0bd51 cmp eax, 0x146abf0
00e0bd56 jne 0xe0bd5b
00e0bd58 xor eax, eax
00e0bd5a ret 
00e0bd5b cmp eax, 0x146abf4
00e0bd60 jne 0xe0bd68
00e0bd62 mov eax, 1
00e0bd67 ret 
00e0bd68 cmp eax, 0x146abf8
00e0bd6d jne 0xe0bd75
00e0bd6f mov eax, 2
00e0bd74 ret 
00e0bd75 cmp eax, 0x146ac00
00e0bd7a jne 0xe0bd82
00e0bd7c mov eax, 3
00e0bd81 ret 
00e0bd82 xor ecx, ecx
00e0bd84 cmp eax, 0x146ac08
00e0bd89 setne cl
00e0bd8c lea eax, [ecx - 1]
00e0bd8f and eax, 4
00e0bd92 ret 
00e0bd93 int3 
00e0bd94 int3 
00e0bd95 int3 
00e0bd96 int3 
00e0bd97 int3 
00e0bd98 int3 
00e0bd99 int3 
00e0bd9a int3 
00e0bd9b int3 
00e0bd9c int3 
00e0bd9d int3 
00e0bd9e int3 
00e0bd9f int3 
00e0bda0 test byte ptr [esp + 4], 1
00e0bda5 push esi
00e0bda6 mov esi, ecx
00e0bda8 mov dword ptr [esi], 0xfdf1f4
00e0bdae je 0xe0bdb5
00e0bdb0 call 0xd92ea0
00e0bdb5 mov eax, esi
00e0bdb7 pop esi
00e0bdb8 ret 4
00e0bdbb int3 
00e0bdbc int3 
00e0bdbd int3 
00e0bdbe int3 
00e0bdbf int3 
00e0bdc0 sub esp, 0x28
00e0bdc3 push ebx
00e0bdc4 push ebp
00e0bdc5 push esi
00e0bdc6 mov ebp, ecx
00e0bdc8 push edi
00e0bdc9 lea ecx, [ebp + 0x4dc]
00e0bdcf mov ebx, edx
00e0bdd1 call 0xda1c90
00e0bdd6 test ebx, ebx
00e0bdd8 je 0xe0be2b
00e0bdda mov eax, dword ptr [ebx + 8]
00e0bddd cmp eax, 3
00e0bde0 je 0xe0be19
00e0bde2 lea ecx, [ebp + 0x4d0]
00e0bde8 call 0xda1d90
00e0bded lea ecx, [ebp + 0x4dc]
00e0bdf3 call 0xda1cb0
00e0bdf8 or edx, 0xffffffff
00e0bdfb lea ecx, [ebp + 0x4d0]
00e0be01 call 0xda1d00
00e0be06 lea ecx, [ebp + 0x4dc]
00e0be0c call 0xda1c90
00e0be11 mov ecx, dword ptr [ebx + 8]
00e0be14 cmp ecx, 3
00e0be17 jne 0xe0bde2
00e0be19 pop edi
00e0be1a pop esi
00e0be1b lea ecx, [ebp + 0x4dc]
00e0be21 pop ebp
00e0be22 pop ebx
00e0be23 add esp, 0x28
00e0be26 jmp 0xda1cb0
00e0be2b mov edx, dword ptr [ebp + 0x500]
00e0be31 lea edi, [ebp + 0x500]
00e0be37 cmp edx, edi
00e0be39 je 0xe0be75
00e0be3b jmp 0xe0be40
00e0be3d lea ecx, [ecx]
00e0be40 lea ecx, [ebp + 0x4d0]
00e0be46 call 0xda1d90
00e0be4b lea ecx, [ebp + 0x4dc]
00e0be51 call 0xda1cb0
00e0be56 or edx, 0xffffffff
00e0be59 lea ecx, [ebp + 0x4d0]
00e0be5f call 0xda1d00
00e0be64 lea ecx, [ebp + 0x4dc]
00e0be6a call 0xda1c90
00e0be6f mov eax, dword ptr [edi]
00e0be71 cmp eax, edi
00e0be73 jne 0xe0be40
00e0be75 lea ecx, [ebp + 0x4dc]
00e0be7b call 0xda1cb0
00e0be80 xor esi, esi
00e0be82 mov dword ptr [esp + 0x10], esi
00e0be86 mov dword ptr [esp + 0x14], esi
00e0be8a mov dword ptr [esp + 0x18], esi
00e0be8e lea edx, [esp + 0x10]
00e0be92 mov ecx, ebp
00e0be94 mov dword ptr [esp + 0x1c], 1
00e0be9c call 0xe0e860
00e0bea1 lea edx, [esp + 0x10]
00e0bea5 mov ecx, ebp
00e0bea7 call 0xe0bdc0
00e0beac mov ecx, dword ptr [esp + 0x18]
00e0beb0 test ecx, ecx
00e0beb2 je 0xe0beb8
00e0beb4 mov dword ptr [esp + 0x18], esi
00e0beb8 pop edi
00e0beb9 pop esi
00e0beba pop ebp
00e0bebb pop ebx
00e0bebc add esp, 0x28
00e0bebf ret 
00e0bec0 push ebp
00e0bec1 mov ebp, esp
00e0bec3 and esp, 0xfffffff8
00e0bec6 sub esp, 0xc
00e0bec9 push ebx
00e0beca push esi
00e0becb push edi
00e0becc xor eax, eax
00e0bece mov edi, ecx
00e0bed0 lea ecx, [edi + 0x538]
00e0bed6 mov dword ptr [esp + 0x10], eax
00e0beda mov dword ptr [esp + 0x14], eax
00e0bede mov dword ptr [esp + 0xc], eax
00e0bee2 call 0xdf4390
00e0bee7 mov esi, eax
00e0bee9 test esi, esi
00e0beeb je 0xe0bf3b
00e0beed mov ecx, dword ptr [esi + 0x28]
00e0bef0 test ecx, ecx
00e0bef2 je 0xe0bf16
00e0bef4 mov eax, dword ptr [edi + 0x848]
00e0befa sub eax, ecx
00e0befc cmp eax, -4
00e0beff jle 0xe0bf16
00e0bf01 test eax, eax
00e0bf03 jg 0xe0bf16
00e0bf05 cmp dword ptr [esp + 0xc], 0
00e0bf0a jne 0xe0bf10
00e0bf0c mov dword ptr [esp + 0xc], esi
00e0bf10 lea edx, [esp + 0x10]
00e0bf14 jmp 0xe0bf23
00e0bf16 mov ecx, esi
00e0bf18 call 0xdbb090
00e0bf1d lea edx, [edi + 0x540]
00e0bf23 mov ecx, esi
00e0bf25 call 0xdf4380
00e0bf2a lea ecx, [edi + 0x538]
00e0bf30 call 0xdf4390
00e0bf35 mov esi, eax
00e0bf37 test esi, esi
00e0bf39 jne 0xe0beed
00e0bf3b mov eax, dword ptr [esp + 0x10]
00e0bf3f test eax, eax
00e0bf41 je 0xe0bf59
00e0bf43 mov ecx, dword ptr [esp + 0xc]
00e0bf47 mov edx, dword ptr [esp + 0x10]
00e0bf4b push 0x24
00e0bf4d push ecx
00e0bf4e lea ecx, [edi + 0x538]
00e0bf54 call 0xe157d0
00e0bf59 pop edi
00e0bf5a pop esi
00e0bf5b pop ebx
00e0bf5c mov esp, ebp
00e0bf5e pop ebp
00e0bf5f ret 
00e0bf60 push ebp
00e0bf61 mov ebp, esp
00e0bf63 and esp, 0xfffffff0
00e0bf66 sub esp, 0x34
00e0bf69 push ebx
00e0bf6a push esi
00e0bf6b mov esi, dword ptr [ebp + 8]
00e0bf6e push edi
00e0bf6f mov edi, dword ptr [esi + 8]
00e0bf72 add edi, -0x15
00e0bf75 mov ebx, 1
00e0bf7a xor eax, eax
00e0bf7c lea ecx, [ebx + 0xf]
00e0bf7f cmp edi, 0x6b
00e0bf82 ja 0xe0c00a
00e0bf88 movzx edi, byte ptr [edi + 0xe0c1e0]
00e0bf8f jmp dword ptr [edi*4 + 0xe0c1b8]
00e0bf96 mov dword ptr [esp + 0x10], eax
00e0bf9a mov dword ptr [esp + 0xc], 0xf
00e0bfa2 jmp 0xe0c01a
00e0bfa4 mov dword ptr [esp + 0x10], ebx
00e0bfa8 mov dword ptr [esp + 0xc], 0xf
00e0bfb0 jmp 0xe0c01a
00e0bfb2 mov dword ptr [esp + 0x10], eax
00e0bfb6 mov dword ptr [esp + 0xc], ecx
00e0bfba jmp 0xe0c01a
00e0bfbc mov dword ptr [esp + 0x10], eax
00e0bfc0 jmp 0xe0c012
00e0bfc2 mov dword ptr [esp + 0x10], 2
00e0bfca mov dword ptr [esp + 0xc], 0x1e
00e0bfd2 jmp 0xe0c01a
00e0bfd4 mov dword ptr [esp + 0x14], ebx
00e0bfd8 mov dword ptr [esp + 0x10], ecx
00e0bfdc mov dword ptr [esp + 0xc], 0x30
00e0bfe4 jmp 0xe0c01e
00e0bfe6 mov dword ptr [esp + 0x10], ecx
00e0bfea mov dword ptr [esp + 0xc], 0x30
00e0bff2 jmp 0xe0c01a
00e0bff4 mov dword ptr [esp + 0x14], ebx
00e0bff8 mov dword ptr [esp + 0x10], 0x20
00e0c000 mov dword ptr [esp + 0xc], 0x60
00e0c008 jmp 0xe0c01e
00e0c00a mov dword ptr [esp + 0x10], 8
00e0c012 mov dword ptr [esp + 0xc], 0x18
00e0c01a mov dword ptr [esp + 0x14], eax
00e0c01e mov edi, dword ptr [esi + 0x28]
00e0c021 add edi, -0x47
00e0c024 cmp edi, 0xc
00e0c027 ja 0xe0c07a
00e0c029 jmp dword ptr [edi*4 + 0xe0c24c]
00e0c030 mov dword ptr [esp + 0x18], ebx
00e0c034 mov eax, 8
00e0c039 jmp 0xe0c07e
00e0c03b mov dword ptr [esp + 0x18], eax
00e0c03f mov eax, 8
00e0c044 jmp 0xe0c07e
00e0c046 mov dword ptr [esp + 0x18], eax
00e0c04a mov eax, 4
00e0c04f jmp 0xe0c07e
00e0c051 mov dword ptr [esp + 0x18], ebx
00e0c055 mov ecx, 0x20
00e0c05a jmp 0xe0c083
00e0c05c mov dword ptr [esp + 0x18], eax
00e0c060 mov ecx, 0x20
00e0c065 jmp 0xe0c083
00e0c067 mov dword ptr [esp + 0x18], eax
00e0c06b jmp 0xe0c083
00e0c06d mov dword ptr [esp + 0x18], eax
00e0c071 mov eax, ebx
00e0c073 mov ecx, 0xf
00e0c078 jmp 0xe0c083
00e0c07a mov dword ptr [esp + 0x18], eax
00e0c07e mov ecx, 0x18
00e0c083 mov ebx, dword ptr [esi]
00e0c085 mov edi, dword ptr [esi + 4]
00e0c088 mov dword ptr [esp + 0x1c], ebx
00e0c08c cmp ebx, edi
00e0c08e ja 0xe0c098
00e0c090 mov dword ptr [esp + 0x1c], edi
00e0c094 jae 0xe0c098
00e0c096 mov edi, ebx
00e0c098 mov ebx, dword ptr [esp + 0x1c]
00e0c09c fild dword ptr [esp + 0x1c]
00e0c0a0 test ebx, ebx
00e0c0a2 jns 0xe0c0aa
00e0c0a4 fadd dword ptr [0xec74c8]
00e0c0aa mov dword ptr [esp + 0x1c], edi
00e0c0ae fild dword ptr [esp + 0x1c]
00e0c0b2 test edi, edi
00e0c0b4 jns 0xe0c0bc
00e0c0b6 fadd dword ptr [0xec74c8]
00e0c0bc fdivp st(1)
00e0c0be xor edi, edi
00e0c0c0 fld dword ptr [0xfc20d8]
00e0c0c6 fmul st(1)
00e0c0c8 fld1 
00e0c0ca fsub st(1), st(0)
00e0c0cc fxch st(1)
00e0c0ce fstp dword ptr [esp + 0x1c]
00e0c0d2 movss xmm0, dword ptr [esp + 0x1c]
00e0c0d8 fxch st(1)
00e0c0da fmul dword ptr [0xec6fc0]
00e0c0e0 shufps xmm0, xmm0, 0
00e0c0e4 andps xmm0, xmmword ptr [0xfdf1e0]
00e0c0eb movaps xmmword ptr [esp + 0x30], xmm0
00e0c0f0 fsubrp st(1)
00e0c0f2 fstp dword ptr [esp + 0x1c]
00e0c0f6 movss xmm0, dword ptr [esp + 0x1c]
00e0c0fc shufps xmm0, xmm0, 0
00e0c100 andps xmm0, xmmword ptr [0xfdf1e0]
00e0c107 movaps xmmword ptr [esp + 0x20], xmm0
00e0c10c movss xmm0, dword ptr [esp + 0x20]
00e0c112 comiss xmm0, dword ptr [esp + 0x30]
00e0c117 mov dword ptr [esp + 0x1c], 1
00e0c11f ja 0xe0c125
00e0c121 mov dword ptr [esp + 0x1c], edi
00e0c125 mov dword ptr [edx], 2
00e0c12b mov dword ptr [edx + 4], edi
00e0c12e mov dword ptr [edx + 8], edi
00e0c131 mov ebx, dword ptr [esi]
00e0c133 mov dword ptr [edx + 0xc], ebx
00e0c136 mov ebx, dword ptr [esi + 4]
00e0c139 mov dword ptr [edx + 0x10], ebx
00e0c13c mov ebx, dword ptr [esi]
00e0c13e mov dword ptr [edx + 0x14], ebx
00e0c141 mov ebx, dword ptr [esi + 4]
00e0c144 mov dword ptr [edx + 0x18], ebx
00e0c147 mov ebx, dword ptr [esp + 0xc]
00e0c14b mov dword ptr [edx + 0x1c], ebx
00e0c14e mov ebx, dword ptr [esp + 0x10]
00e0c152 mov dword ptr [edx + 0x28], eax
00e0c155 mov dword ptr [edx + 0x20], ebx
00e0c158 mov dword ptr [edx + 0x24], ecx
00e0c15b mov eax, 0x3c
00e0c160 cmp dword ptr [esi + 0x20], edi
00e0c163 jne 0xe0c168
00e0c165 mov eax, dword ptr [esi + 0x30]
00e0c168 mov ecx, dword ptr [esp + 0x1c]
00e0c16c mov dword ptr [edx + 0x2c], eax
00e0c16f mov eax, dword ptr [esi + 0xc]
00e0c172 mov dword ptr [edx + 0x30], eax
00e0c175 mov eax, dword ptr [esp + 0x14]
00e0c179 mov dword ptr [edx + 0x34], ecx
00e0c17c mov ecx, dword ptr [esp + 0x18]
00e0c180 mov dword ptr [edx + 0x38], eax
00e0c183 mov dword ptr [edx + 0x3c], ecx
00e0c186 mov dword ptr [edx + 0x40], 1
00e0c18d mov eax, dword ptr [esi + 0x20]
00e0c190 mov dword ptr [edx + 0x44], eax
00e0c193 mov ecx, dword ptr [esi + 0x10]
00e0c196 mov dword ptr [edx + 0x48], ecx
00e0c199 mov eax, dword ptr [esi + 0x14]
00e0c19c mov dword ptr [edx + 0x50], edi
00e0c19f mov dword ptr [edx + 0x54], edi
00e0c1a2 mov dword ptr [edx + 0x58], edi
00e0c1a5 mov dword ptr [edx + 0x5c], edi
00e0c1a8 mov dword ptr [edx + 0x60], edi
00e0c1ab pop edi
00e0c1ac pop esi
00e0c1ad mov dword ptr [edx + 0x4c], eax
00e0c1b0 pop ebx
00e0c1b1 mov esp, ebp
00e0c1b3 pop ebp
00e0c1b4 ret 4
00e0c1b7 nop 
00e0c1b8 or al, al
00e0c1ba loopne 0xe0c1bc
00e0c1bc mov esp, 0xb200e0bf
00e0c1c1 mov edi, 0xbf9600e0
00e0c1c6 loopne 0xe0c1c8
00e0c1c8 movsb byte ptr es:[edi], byte ptr [esi]
00e0c1c9 mov edi, 0xbfc200e0
00e0c1ce loopne 0xe0c1d0
00e0c1d0 out 0xbf, al
00e0c1d2 loopne 0xe0c1d4
00e0c1d4 aam 0xbf
00e0c1d6 loopne 0xe0c1d8
00e0c1d8 hlt 
00e0c1d9 mov edi, 0xc00a00e0
00e0c1de loopne 0xe0c1e0
00e0c1e0 add byte ptr [ecx], al
00e0c1e2 add al, byte ptr [ebx]
00e0c1e4 add al, 9
00e0c1e6 or dword ptr [ecx], ecx
00e0c1e8 or dword ptr [ecx], ecx
00e0c1ea or dword ptr [ecx], ecx
00e0c1ec or dword ptr [ecx], ecx
00e0c1ee add eax, 0x9090906
00e0c1f3 or dword ptr [ecx], ecx
00e0c1f5 or dword ptr [ecx], ecx
00e0c1f7 or dword ptr [ecx], ecx
00e0c1f9 or dword ptr [ecx], ecx
00e0c1fb or dword ptr [ecx], ecx
00e0c1fd or dword ptr [ecx], ecx
00e0c1ff or dword ptr [ecx], ecx
00e0c201 or dword ptr [ecx], ecx
00e0c203 or dword ptr [ecx], ecx
00e0c205 or dword ptr [ecx], ecx
00e0c207 or dword ptr [ecx], ecx
00e0c209 or dword ptr [ecx], ecx
00e0c20b or dword ptr [ecx], ecx
00e0c20d or dword ptr [ecx], ecx
00e0c20f or dword ptr [ecx], ecx
00e0c211 or dword ptr [ecx], ecx
00e0c213 or dword ptr [ecx], ecx
00e0c215 or dword ptr [ecx], ecx
00e0c217 or dword ptr [ecx], ecx
00e0c219 or dword ptr [ecx], ecx
00e0c21b or dword ptr [ecx], ecx
00e0c21d or dword ptr [ecx], ecx
00e0c21f or dword ptr [ecx], ecx
00e0c221 or dword ptr [ecx], ecx
00e0c223 or dword ptr [ecx], ecx
00e0c225 or dword ptr [ecx], ecx
00e0c227 or dword ptr [ecx], ecx
00e0c229 or dword ptr [ecx], ecx
00e0c22b or dword ptr [ecx], ecx
00e0c22d or dword ptr [ecx], ecx
00e0c22f or dword ptr [ecx], ecx
00e0c231 or dword ptr [ecx], ecx
00e0c233 or dword ptr [ecx], ecx
00e0c235 or dword ptr [ecx], ecx
00e0c237 or dword ptr [ecx], ecx
00e0c239 or dword ptr [ecx], ecx
00e0c23b or dword ptr [edi], eax
00e0c23d or dword ptr [ecx], ecx
00e0c23f or dword ptr [ecx], ecx
00e0c241 or dword ptr [ecx], ecx
00e0c243 or dword ptr [ecx], ecx
00e0c245 or dword ptr [ecx], ecx
00e0c247 or dword ptr [ecx], ecx
00e0c249 or dword ptr [ecx], ecx
00e0c24b or byte ptr [eax + eax*8 - 0x20], bl
00e0c24f add byte ptr [edx - 0x40], bh
00e0c252 loopne 0xe0c254
00e0c254 insd dword ptr es:[edi], dx
00e0c255 shl al, 0
00e0c258 jp 0xe0c21a
00e0c25a loopne 0xe0c25c
00e0c25c cmp eax, eax
00e0c25e loopne 0xe0c260
00e0c260 jp 0xe0c222
00e0c262 loopne 0xe0c264
00e0c264 jp 0xe0c226
00e0c266 loopne 0xe0c268
00e0c268 jp 0xe0c22a
00e0c26a loopne 0xe0c26c
00e0c26c inc esi
00e0c26d shl al, 0
00e0c270 shl al, 0
00e0c274 jp 0xe0c236
00e0c276 loopne 0xe0c278
00e0c278 push ecx
00e0c279 shl al, 0
00e0c27c xor al, al
00e0c27e loopne 0xe0c280
00e0c280 push ebx
00e0c281 push ebp
00e0c282 push esi
00e0c283 push edi
00e0c284 mov edi, ecx
00e0c286 mov esi, dword ptr [edi + 0x860]
00e0c28c neg esi
00e0c28e sbb esi, esi
00e0c290 and esi, 0xfffffffe
00e0c293 call 0xda3620
00e0c298 lea edx, [esi + 2]
00e0c29b mov ecx, eax
00e0c29d call 0xddaa90
00e0c2a2 lea ebp, [edi + 0x870]
00e0c2a8 mov esi, ebp
00e0c2aa xor ebx, ebx
00e0c2ac lea esp, [esp]
00e0c2b0 mov eax, dword ptr [esi]
00e0c2b2 cmp eax, ebx
00e0c2b4 je 0xe0c2c0
00e0c2b6 mov ecx, dword ptr [eax]
00e0c2b8 mov edx, dword ptr [ecx + 8]
00e0c2bb push eax
00e0c2bc call edx
00e0c2be mov dword ptr [esi], ebx
00e0c2c0 mov esi, dword ptr [esi + 8]
00e0c2c3 cmp esi, ebp
00e0c2c5 jne 0xe0c2b0
00e0c2c7 mov eax, dword ptr [edi + 0x864]
00e0c2cd mov esi, dword ptr [eax]
00e0c2cf call 0xda3620
00e0c2d4 mov edx, dword ptr [eax + 0x21e84]
00e0c2da mov ecx, dword ptr [edi + 0x864]
00e0c2e0 mov eax, dword ptr [esi + 0x20]
00e0c2e3 call eax
00e0c2e5 mov ecx, dword ptr [edi + 0x864]
00e0c2eb mov esi, dword ptr [ecx]
00e0c2ed call 0xda3620
00e0c2f2 mov edx, dword ptr [eax + 0x21e80]
00e0c2f8 mov ecx, dword ptr [edi + 0x864]
00e0c2fe mov eax, dword ptr [esi + 0x1c]
00e0c301 call eax
00e0c303 call 0xda3620
00e0c308 mov dword ptr [eax + 0x21e84], ebx
00e0c30e call 0xda3620
00e0c313 mov dword ptr [eax + 0x21e80], ebx
00e0c319 call 0xda3620
00e0c31e mov dword ptr [eax + 0x21e94], ebx
00e0c324 call 0xda3620
00e0c329 mov dword ptr [eax + 0x21e98], ebx
00e0c32f call 0xda3620
00e0c334 mov dword ptr [eax + 0x21e8c], ebx
00e0c33a call 0xda3620
00e0c33f mov dword ptr [eax + 0x21e90], ebx
00e0c345 call 0xda3620
00e0c34a pop edi
00e0c34b pop esi
00e0c34c pop ebp
00e0c34d mov edx, 1
00e0c352 mov ecx, eax
00e0c354 pop ebx
00e0c355 jmp 0xddaa90
00e0c35a int3 
00e0c35b int3 
00e0c35c int3 
00e0c35d int3 
00e0c35e int3 
00e0c35f int3 
00e0c360 cmp byte ptr [0x2121eb8], 0
00e0c367 jne 0xe0c40c
00e0c36d call dword ptr [0xec21a0]
00e0c373 cmp byte ptr [eax], 0x22
00e0c376 jne 0xe0c37d
00e0c378 mov dl, 0x22
00e0c37a inc eax
00e0c37b jmp 0xe0c37f
00e0c37d mov dl, 0x20
00e0c37f mov cl, byte ptr [eax]
00e0c381 push esi
00e0c382 push edi
00e0c383 xor edi, edi
00e0c385 mov esi, eax
00e0c387 cmp cl, dl
00e0c389 je 0xe0c3ba
00e0c38b jmp 0xe0c390
00e0c38d lea ecx, [ecx]
00e0c390 test cl, cl
00e0c392 je 0xe0c3b4
00e0c394 cmp cl, 0x3a
00e0c397 je 0xe0c3a3
00e0c399 cmp cl, 0x2f
00e0c39c je 0xe0c3a3
00e0c39e cmp cl, 0x5c
00e0c3a1 jne 0xe0c3a6
00e0c3a3 lea esi, [eax + 1]
00e0c3a6 cmp cl, 0x2e
00e0c3a9 mov cl, byte ptr [eax + 1]
00e0c3ac cmove edi, eax
00e0c3af inc eax
00e0c3b0 cmp cl, dl
00e0c3b2 jne 0xe0c390
00e0c3b4 test edi, edi
00e0c3b6 je 0xe0c3ba
00e0c3b8 mov eax, edi
00e0c3ba sub eax, esi
00e0c3bc cmp eax, 0xff
00e0c3c1 jle 0xe0c3ca
00e0c3c3 mov edi, 0xff
00e0c3c8 jmp 0xe0c3da
00e0c3ca mov edi, eax
00e0c3cc test edi, edi
00e0c3ce jne 0xe0c3da
00e0c3d0 mov esi, 0x213d8f4
00e0c3d5 mov edi, 4
00e0c3da lea edx, [edi + 1]
00e0c3dd mov eax, 0x2121eb8
00e0c3e2 cmp edx, 1
00e0c3e5 jle 0xe0c400
00e0c3e7 sub esi, eax
00e0c3e9 lea esp, [esp]
00e0c3f0 mov cl, byte ptr [esi + eax]
00e0c3f3 test cl, cl
00e0c3f5 je 0xe0c400
00e0c3f7 mov byte ptr [eax], cl
00e0c3f9 dec edx
00e0c3fa inc eax
00e0c3fb cmp edx, 1
00e0c3fe jg 0xe0c3f0
00e0c400 mov byte ptr [eax], 0
00e0c403 mov byte ptr [edi + 0x2121eb8], 0
00e0c40a pop edi
00e0c40b pop esi
00e0c40c mov eax, 0x2121eb8
00e0c411 ret 
00e0c412 int3 
00e0c413 int3 
00e0c414 int3 
00e0c415 int3 
00e0c416 int3 
00e0c417 int3 
00e0c418 int3 
00e0c419 int3 
00e0c41a int3 
00e0c41b int3 
00e0c41c int3 
00e0c41d int3 
00e0c41e int3 
00e0c41f int3 
00e0c420 sub esp, 0x18
00e0c423 push esi
00e0c424 mov esi, ecx
00e0c426 cmp dword ptr [esi + 0x850], 0
00e0c42d mov dword ptr [esp + 8], edx
00e0c431 je 0xe0c71e
00e0c437 cmp dword ptr [0x146abcc], 0
00e0c43e je 0xe0c462
00e0c440 call 0xda3620
00e0c445 mov eax, dword ptr [eax + 0x21d34]
00e0c44b mov ecx, dword ptr [eax + 0x864]
00e0c451 mov edx, dword ptr [ecx]
00e0c453 mov eax, dword ptr [edx + 0x24]
00e0c456 call eax
00e0c458 xor edx, edx
00e0c45a lea ecx, [edx + 6]
00e0c45d call 0xe0f630
00e0c462 mov eax, dword ptr [esi + 0x850]
00e0c468 xor ecx, ecx
00e0c46a cmp dword ptr [esi + 0x2c], ecx
00e0c46d push ebx
00e0c46e push ebp
00e0c46f sete cl
00e0c472 push edi
00e0c473 mov edi, dword ptr [0xec2360]
00e0c479 push -0x14
00e0c47b push eax
00e0c47c mov dword ptr [esi + 0x854], ecx
00e0c482 call edi
00e0c484 mov ebp, eax
00e0c486 mov eax, dword ptr [esi + 0x850]
00e0c48c push -0x10
00e0c48e push eax
00e0c48f call edi
00e0c491 mov edx, dword ptr [0x146abd4]
00e0c497 mov ecx, dword ptr [0x146abe4]
00e0c49d mov edi, dword ptr [0x146abd0]
00e0c4a3 not ecx
00e0c4a5 not edx
00e0c4a7 and edx, ecx
00e0c4a9 mov ecx, dword ptr [0x146abe0]
00e0c4af not ecx
00e0c4b1 not edi
00e0c4b3 and edi, ecx
00e0c4b5 and edi, eax
00e0c4b7 mov dword ptr [esp + 0x10], eax
00e0c4bb xor eax, eax
00e0c4bd and edx, ebp
00e0c4bf cmp dword ptr [esi + 0x854], eax
00e0c4c5 setne al
00e0c4c8 shl eax, 4
00e0c4cb mov ecx, dword ptr [eax + 0x146abdc]
00e0c4d1 mov ebx, dword ptr [eax + 0x146abd8]
00e0c4d7 not ecx
00e0c4d9 and ecx, edx
00e0c4db or ecx, dword ptr [eax + 0x146abd4]
00e0c4e1 not ebx
00e0c4e3 and ebx, edi
00e0c4e5 or ebx, dword ptr [eax + 0x146abd0]
00e0c4eb cmp ebp, ecx
00e0c4ed mov ebp, dword ptr [0xec2368]
00e0c4f3 jne 0xe0c4ff
00e0c4f5 cmp dword ptr [esp + 0x10], ebx
00e0c4f9 je 0xe0c5be
00e0c4ff mov edx, dword ptr [esi + 0x850]
00e0c505 mov edi, dword ptr [0xec22c8]
00e0c50b push ecx
00e0c50c push -0x14
00e0c50e push edx
00e0c50f call edi
00e0c511 mov eax, dword ptr [esi + 0x850]
00e0c517 push ebx
00e0c518 push -0x10
00e0c51a push eax
00e0c51b call edi
00e0c51d mov ecx, dword ptr [esi + 0x850]
00e0c523 push 0x27
00e0c525 push 0
00e0c527 push 0
00e0c529 push 0
00e0c52b push 0
00e0c52d push 0
00e0c52f push ecx
00e0c530 call ebp
00e0c532 push 0
00e0c534 push 0x2710
00e0c539 call 0xda1a90
00e0c53e cmp dword ptr [0x146abcc], 0
00e0c545 je 0xe0c569
00e0c547 call 0xda3620
00e0c54c mov edx, dword ptr [eax + 0x21d34]
00e0c552 mov ecx, dword ptr [edx + 0x864]
00e0c558 mov eax, dword ptr [ecx]
00e0c55a mov edx, dword ptr [eax + 0x24]
00e0c55d call edx
00e0c55f xor edx, edx
00e0c561 lea ecx, [edx + 6]
00e0c564 call 0xe0f630
00e0c569 cmp dword ptr [esi + 0x854], 0
00e0c570 jne 0xe0c587
00e0c572 mov eax, dword ptr [esi + 0x850]
00e0c578 push 0x13
00e0c57a push 0
00e0c57c push 0
00e0c57e push 0
00e0c580 push 0
00e0c582 push -2
00e0c584 push eax
00e0c585 call ebp
00e0c587 push 0
00e0c589 push 0x2710
00e0c58e call 0xda1a90
00e0c593 cmp dword ptr [0x146abcc], 0
00e0c59a je 0xe0c5be
00e0c59c call 0xda3620
00e0c5a1 mov ecx, dword ptr [eax + 0x21d34]
00e0c5a7 mov ecx, dword ptr [ecx + 0x864]
00e0c5ad mov edx, dword ptr [ecx]
00e0c5af mov eax, dword ptr [edx + 0x24]
00e0c5b2 call eax
00e0c5b4 xor edx, edx
00e0c5b6 lea ecx, [edx + 6]
00e0c5b9 call 0xe0f630
00e0c5be push 0
00e0c5c0 push 0x2710
00e0c5c5 call 0xda1a90
00e0c5ca cmp dword ptr [0x146abcc], 0
00e0c5d1 je 0xe0c5f5
00e0c5d3 call 0xda3620
00e0c5d8 mov ecx, dword ptr [eax + 0x21d34]
00e0c5de mov ecx, dword ptr [ecx + 0x864]
00e0c5e4 mov edx, dword ptr [ecx]
00e0c5e6 mov eax, dword ptr [edx + 0x24]
00e0c5e9 call eax
00e0c5eb xor edx, edx
00e0c5ed lea ecx, [edx + 6]
00e0c5f0 call 0xe0f630
00e0c5f5 mov edi, dword ptr [esi + 0x850]
00e0c5fb mov ecx, dword ptr [esi + 0xc]
00e0c5fe mov edx, dword ptr [esi + 0x10]
00e0c601 mov ebx, dword ptr [0xec2360]
00e0c607 pxor xmm0, xmm0
00e0c60b push -0x14
00e0c60d movq qword ptr [esp + 0x24], xmm0
00e0c613 push edi
00e0c614 movq qword ptr [esp + 0x20], xmm0
00e0c61a mov dword ptr [esp + 0x28], ecx
00e0c61e mov dword ptr [esp + 0x2c], edx
00e0c622 call ebx
00e0c624 push eax
00e0c625 push edi
00e0c626 call dword ptr [0xec22cc]
00e0c62c neg eax
00e0c62e sbb eax, eax
00e0c630 neg eax
00e0c632 push eax
00e0c633 push -0x10
00e0c635 push edi
00e0c636 call ebx
00e0c638 push eax
00e0c639 lea eax, [esp + 0x24]
00e0c63d push eax
00e0c63e call dword ptr [0xec236c]
00e0c644 mov ecx, dword ptr [esi + 0x854]
00e0c64a mov edx, dword ptr [esp + 0x24]
00e0c64e mov eax, dword ptr [esp + 0x20]
00e0c652 neg ecx
00e0c654 sbb ecx, ecx
00e0c656 sub edx, dword ptr [esp + 0x1c]
00e0c65a sub eax, dword ptr [esp + 0x18]
00e0c65e and ecx, 0xfffffffe
00e0c661 add ecx, 2
00e0c664 or ecx, 0x14
00e0c667 push ecx
00e0c668 mov ecx, dword ptr [esi + 0x850]
00e0c66e push edx
00e0c66f push eax
00e0c670 push 0
00e0c672 push 0
00e0c674 push 0
00e0c676 push ecx
00e0c677 call ebp
00e0c679 push 0
00e0c67b push 0x2710
00e0c680 call 0xda1a90
00e0c685 cmp dword ptr [0x146abcc], 0
00e0c68c pop edi
00e0c68d pop ebp
00e0c68e pop ebx
00e0c68f je 0xe0c6b3
00e0c691 call 0xda3620
00e0c696 mov edx, dword ptr [eax + 0x21d34]
00e0c69c mov ecx, dword ptr [edx + 0x864]
00e0c6a2 mov eax, dword ptr [ecx]
00e0c6a4 mov edx, dword ptr [eax + 0x24]
00e0c6a7 call edx
00e0c6a9 xor edx, edx
00e0c6ab lea ecx, [edx + 6]
00e0c6ae call 0xe0f630
00e0c6b3 cmp dword ptr [esp + 8], 0
00e0c6b8 je 0xe0c6e3
00e0c6ba mov eax, dword ptr [esi + 0x850]
00e0c6c0 push 5
00e0c6c2 push eax
00e0c6c3 call dword ptr [0xec22fc]
00e0c6c9 mov ecx, dword ptr [esi + 0x850]
00e0c6cf push ecx
00e0c6d0 call dword ptr [0xec22d0]
00e0c6d6 mov edx, dword ptr [esi + 0x850]
00e0c6dc push edx
00e0c6dd call dword ptr [0xec22d4]
00e0c6e3 push 0
00e0c6e5 push 0x2710
00e0c6ea call 0xda1a90
00e0c6ef cmp dword ptr [0x146abcc], 0
00e0c6f6 je 0xe0c71e
00e0c6f8 call 0xda3620
00e0c6fd mov eax, dword ptr [eax + 0x21d34]
00e0c703 mov ecx, dword ptr [eax + 0x864]
00e0c709 mov edx, dword ptr [ecx]
00e0c70b mov eax, dword ptr [edx + 0x24]
00e0c70e call eax
00e0c710 xor edx, edx
00e0c712 lea ecx, [edx + 6]
00e0c715 pop esi
00e0c716 add esp, 0x18
00e0c719 jmp 0xe0f630
00e0c71e pop esi
00e0c71f add esp, 0x18
00e0c722 ret 
00e0c723 int3 
00e0c724 int3 
00e0c725 int3 
00e0c726 int3 
00e0c727 int3 
00e0c728 int3 
00e0c729 int3 
00e0c72a int3 
00e0c72b int3 
00e0c72c int3 
00e0c72d int3 
00e0c72e int3 
00e0c72f int3 
00e0c730 sub esp, 0xc
00e0c733 push esi
00e0c734 mov esi, ecx
00e0c736 mov eax, dword ptr [esi + 0x864]
00e0c73c push edi
00e0c73d mov dword ptr [esi + 0x854], 0
00e0c747 mov edi, dword ptr [eax]
00e0c749 call 0xda3a90
00e0c74e mov ecx, dword ptr [eax + 0x60]
00e0c751 push ecx
00e0c752 call 0xda3a90
00e0c757 mov edx, dword ptr [eax + 0x5c]
00e0c75a mov ecx, dword ptr [esi + 0x864]
00e0c760 mov eax, dword ptr [edi + 0x2c]
00e0c763 call eax
00e0c765 mov ecx, dword ptr [esi + 0x864]
00e0c76b mov edx, dword ptr [ecx]
00e0c76d mov eax, dword ptr [edx + 0x10]
00e0c770 call eax
00e0c772 xor edx, edx
00e0c774 lea ecx, [edx + 1]
00e0c777 mov dword ptr [esi + 0x850], eax
00e0c77d call 0xe0f630
00e0c782 mov ecx, dword ptr [esi + 0x864]
00e0c788 mov edx, dword ptr [ecx]
00e0c78a mov eax, dword ptr [edx + 0x28]
00e0c78d call eax
00e0c78f mov ecx, dword ptr [esi + 0x2c]
00e0c792 pxor xmm0, xmm0
00e0c796 movq qword ptr [esp + 0xc], xmm0
00e0c79c mov dword ptr [esp + 0x10], ecx
00e0c7a0 lea edx, [esp + 8]
00e0c7a4 mov ecx, 2
00e0c7a9 mov dword ptr [esp + 8], 0
00e0c7b1 call 0xe0f630
00e0c7b6 pop edi
00e0c7b7 pop esi
00e0c7b8 add esp, 0xc
00e0c7bb ret 
00e0c7bc int3 
00e0c7bd int3 
00e0c7be int3 
00e0c7bf int3 
00e0c7c0 sub esp, 0xc
00e0c7c3 push ebx
00e0c7c4 push ebp
00e0c7c5 push esi
00e0c7c6 mov ebp, edx
00e0c7c8 push edi
00e0c7c9 mov edi, ecx
00e0c7cb xor ebx, ebx
00e0c7cd test ebp, ebp
00e0c7cf lea ecx, [edi + 0x528]
00e0c7d5 mov dword ptr [esp + 0x18], ebp
00e0c7d9 mov dword ptr [esp + 0x14], edi
00e0c7dd setne bl
00e0c7e0 call 0xdf4390
00e0c7e5 test eax, eax
00e0c7e7 je 0xe0c806
00e0c7e9 lea esp, [esp]
00e0c7f0 mov ecx, eax
00e0c7f2 call 0xdbbaf0
00e0c7f7 lea ecx, [edi + 0x528]
00e0c7fd call 0xdf4390
00e0c802 test eax, eax
00e0c804 jne 0xe0c7f0
00e0c806 mov ecx, edi
00e0c808 call 0xe0b5b0
00e0c80d xor edi, edi
00e0c80f cmp ebp, edi
00e0c811 je 0xe0c833
00e0c813 mov esi, dword ptr [ebp + 0x10]
00e0c816 cmp esi, edi
00e0c818 je 0xe0c830
00e0c81a lea ebx, [ebx]
00e0c820 mov edx, dword ptr [esi + 8]
00e0c823 mov eax, dword ptr [esi + 4]
00e0c826 mov ecx, ebp
00e0c828 call eax
00e0c82a mov esi, dword ptr [esi]
00e0c82c cmp esi, edi
00e0c82e jne 0xe0c820
00e0c830 mov dword ptr [ebp + 0x10], edi
00e0c833 call 0xda3620
00e0c838 mov ebp, dword ptr [0xec20dc]
00e0c83e mov esi, eax
00e0c840 call ebp
00e0c842 cmp eax, dword ptr [esi + 0x21d38]
00e0c848 jne 0xe0c852
00e0c84a mov esi, dword ptr [esi + 0x21e98]
00e0c850 jmp 0xe0c86a
00e0c852 call ebp
00e0c854 cmp eax, dword ptr [esi + 0x21e88]
00e0c85a jne 0xe0c864
00e0c85c mov esi, dword ptr [esi + 0x21e90]
00e0c862 jmp 0xe0c86a
00e0c864 mov esi, dword ptr [esi + 0x21e84]
00e0c86a call 0xda3620
00e0c86f cmp esi, edi
00e0c871 jne 0xe0c87e
00e0c873 mov dword ptr [eax + 0x21d1c], edi
00e0c879 jmp 0xe0c915
00e0c87e mov esi, eax
00e0c880 call ebp
00e0c882 cmp eax, dword ptr [esi + 0x21d38]
00e0c888 jne 0xe0c892
00e0c88a mov edi, dword ptr [esi + 0x21e98]
00e0c890 jmp 0xe0c8aa
00e0c892 call ebp
00e0c894 cmp eax, dword ptr [esi + 0x21e88]
00e0c89a jne 0xe0c8a4
00e0c89c mov edi, dword ptr [esi + 0x21e90]
00e0c8a2 jmp 0xe0c8aa
00e0c8a4 mov edi, dword ptr [esi + 0x21e84]
00e0c8aa call 0xda3620
00e0c8af mov esi, eax
00e0c8b1 call ebp
00e0c8b3 cmp eax, dword ptr [esi + 0x21d38]
00e0c8b9 jne 0xe0c8c3
00e0c8bb mov esi, dword ptr [esi + 0x21e98]
00e0c8c1 jmp 0xe0c8db
00e0c8c3 call ebp
00e0c8c5 cmp eax, dword ptr [esi + 0x21e88]
00e0c8cb jne 0xe0c8d5
00e0c8cd mov esi, dword ptr [esi + 0x21e90]
00e0c8d3 jmp 0xe0c8db
00e0c8d5 mov esi, dword ptr [esi + 0x21e84]
00e0c8db mov ecx, dword ptr [esi]
00e0c8dd mov edx, dword ptr [ecx + 0xc]
00e0c8e0 push edi
00e0c8e1 call edx
00e0c8e3 cmp eax, 0x88760868
00e0c8e8 je 0xe0c906
00e0c8ea cmp eax, 0x88760869
00e0c8ef je 0xe0c906
00e0c8f1 test eax, eax
00e0c8f3 jne 0xe0c915
00e0c8f5 call 0xda3620
00e0c8fa mov dword ptr [eax + 0x21d1c], 0
00e0c904 jmp 0xe0c915
00e0c906 call 0xda3620
00e0c90b mov dword ptr [eax + 0x21d1c], 1
00e0c915 xor esi, esi
00e0c917 cmp ebx, esi
00e0c919 je 0xe0c93f
00e0c91b call 0xda3620
00e0c920 mov eax, dword ptr [eax + 0x21d1c]
00e0c926 test eax, eax
00e0c928 jne 0xe0c93f
00e0c92a call 0xda3620
00e0c92f mov dword ptr [esp + 0x10], 1
00e0c937 cmp dword ptr [eax + 0x21d24], esi
00e0c93d jle 0xe0c943
00e0c93f mov dword ptr [esp + 0x10], esi
00e0c943 mov edi, dword ptr [esp + 0x18]
00e0c947 cmp edi, esi
00e0c949 je 0xe0c980
00e0c94b mov edx, dword ptr [edi + 0xc]
00e0c94e mov ecx, 3
00e0c953 call 0xdbadd0
00e0c958 mov ecx, dword ptr [edi + 0xc]
00e0c95b mov ebx, dword ptr [esp + 0x14]
00e0c95f mov dword ptr [ebx + 0x848], ecx
00e0c965 cmp dword ptr [esp + 0x10], esi
00e0c969 je 0xe0c97a
00e0c96b cmp dword ptr [edi + 0x30], esi
00e0c96e je 0xe0c97a
00e0c970 mov dword ptr [esp + 0x10], 1
00e0c978 jmp 0xe0c984
00e0c97a mov dword ptr [esp + 0x10], esi
00e0c97e jmp 0xe0c984
00e0c980 mov ebx, dword ptr [esp + 0x14]
00e0c984 call 0xda3620
00e0c989 mov esi, eax
00e0c98b call ebp
00e0c98d cmp eax, dword ptr [esi + 0x21d38]
00e0c993 jne 0xe0c99d
00e0c995 mov esi, dword ptr [esi + 0x21e98]
00e0c99b jmp 0xe0c9b5
00e0c99d call ebp
00e0c99f cmp eax, dword ptr [esi + 0x21e88]
00e0c9a5 jne 0xe0c9af
00e0c9a7 mov esi, dword ptr [esi + 0x21e90]
00e0c9ad jmp 0xe0c9b5
00e0c9af mov esi, dword ptr [esi + 0x21e84]
00e0c9b5 test esi, esi
00e0c9b7 jne 0xe0c9bf
00e0c9b9 mov dword ptr [esp + 0x10], esi
00e0c9bd jmp 0xe0c9c6
00e0c9bf cmp dword ptr [esp + 0x10], 0
00e0c9c4 jne 0xe0c9da
00e0c9c6 test edi, edi
00e0c9c8 je 0xe0cd08
00e0c9ce mov ecx, dword ptr [edi]
00e0c9d0 call 0xdb0740
00e0c9d5 jmp 0xe0ccf7
00e0c9da mov edx, dword ptr [ebx + 0x85c]
00e0c9e0 test edx, edx
00e0c9e2 je 0xe0ca40
00e0c9e4 xor edi, edi
00e0c9e6 jmp 0xe0c9f0
00e0c9e8 lea esp, [esp]
00e0c9ef nop 
00e0c9f0 mov dword ptr [ebx + 0x85c], edi
00e0c9f6 call 0xda3620
00e0c9fb mov eax, dword ptr [eax + 0x1f8c8]
00e0ca01 cmp eax, edi
00e0ca03 jne 0xe0ca09
00e0ca05 xor ecx, ecx
00e0ca07 jmp 0xe0ca0f
00e0ca09 mov ecx, dword ptr [ebx + 0x868]
00e0ca0f mov edx, 1
00e0ca14 cmp eax, edx
00e0ca16 jle 0xe0ca30
00e0ca18 mov esi, dword ptr [ebx + 0x868]
00e0ca1e mov edi, edi
00e0ca20 mov ecx, dword ptr [ecx + 4]
00e0ca23 cmp ecx, esi
00e0ca25 je 0xe0ca2e
00e0ca27 inc edx
00e0ca28 cmp edx, eax
00e0ca2a jl 0xe0ca20
00e0ca2c jmp 0xe0ca30
00e0ca2e xor ecx, ecx
00e0ca30 mov dword ptr [ebx + 0x86c], ecx
00e0ca36 mov eax, dword ptr [ebx + 0x85c]
00e0ca3c test eax, eax
00e0ca3e jne 0xe0c9f0
00e0ca40 mov ecx, dword ptr [ebx + 0x864]
00e0ca46 mov edx, dword ptr [ecx]
00e0ca48 mov eax, dword ptr [edx + 0x3c]
00e0ca4b call eax
00e0ca4d call 0xda3620
00e0ca52 mov esi, eax
00e0ca54 call ebp
00e0ca56 cmp eax, dword ptr [esi + 0x21d38]
00e0ca5c jne 0xe0ca66
00e0ca5e mov edi, dword ptr [esi + 0x21e98]
00e0ca64 jmp 0xe0ca7e
00e0ca66 call ebp
00e0ca68 cmp eax, dword ptr [esi + 0x21e88]
00e0ca6e jne 0xe0ca78
00e0ca70 mov edi, dword ptr [esi + 0x21e90]
00e0ca76 jmp 0xe0ca7e
00e0ca78 mov edi, dword ptr [esi + 0x21e84]
00e0ca7e call 0xda3620
00e0ca83 mov esi, eax
00e0ca85 call ebp
00e0ca87 cmp eax, dword ptr [esi + 0x21d38]
00e0ca8d jne 0xe0ca97
00e0ca8f mov esi, dword ptr [esi + 0x21e98]
00e0ca95 jmp 0xe0caaf
00e0ca97 call ebp
00e0ca99 cmp eax, dword ptr [esi + 0x21e88]
00e0ca9f jne 0xe0caa9
00e0caa1 mov esi, dword ptr [esi + 0x21e90]
00e0caa7 jmp 0xe0caaf
00e0caa9 mov esi, dword ptr [esi + 0x21e84]
00e0caaf mov esi, dword ptr [esi]
00e0cab1 call 0xda3620
00e0cab6 mov ecx, dword ptr [esi + 0x48]
00e0cab9 add eax, 0x1f8b4
00e0cabe push eax
00e0cabf xor ebx, ebx
00e0cac1 push ebx
00e0cac2 push ebx
00e0cac3 push ebx
00e0cac4 push edi
00e0cac5 call ecx
00e0cac7 test eax, eax
00e0cac9 je 0xe0cad6
00e0cacb call 0xda3620
00e0cad0 mov dword ptr [eax + 0x1f8b4], ebx
00e0cad6 call 0xda3620
00e0cadb mov esi, eax
00e0cadd call ebp
00e0cadf cmp eax, dword ptr [esi + 0x21d38]
00e0cae5 jne 0xe0caef
00e0cae7 mov edi, dword ptr [esi + 0x21e98]
00e0caed jmp 0xe0cb07
00e0caef call ebp
00e0caf1 cmp eax, dword ptr [esi + 0x21e88]
00e0caf7 jne 0xe0cb01
00e0caf9 mov edi, dword ptr [esi + 0x21e90]
00e0caff jmp 0xe0cb07
00e0cb01 mov edi, dword ptr [esi + 0x21e84]
00e0cb07 call 0xda3620
00e0cb0c mov esi, eax
00e0cb0e call ebp
00e0cb10 cmp eax, dword ptr [esi + 0x21d38]
00e0cb16 jne 0xe0cb20
00e0cb18 mov esi, dword ptr [esi + 0x21e98]
00e0cb1e jmp 0xe0cb38
00e0cb20 call ebp
00e0cb22 cmp eax, dword ptr [esi + 0x21e88]
00e0cb28 jne 0xe0cb32
00e0cb2a mov esi, dword ptr [esi + 0x21e90]
00e0cb30 jmp 0xe0cb38
00e0cb32 mov esi, dword ptr [esi + 0x21e84]
00e0cb38 mov esi, dword ptr [esi]
00e0cb3a call 0xda3620
00e0cb3f mov edx, dword ptr [esi + 0xa0]
00e0cb45 add eax, 0x1f8b8
00e0cb4a push eax
00e0cb4b push edi
00e0cb4c call edx
00e0cb4e test eax, eax
00e0cb50 je 0xe0cb5d
00e0cb52 call 0xda3620
00e0cb57 mov dword ptr [eax + 0x1f8b8], ebx
00e0cb5d mov eax, dword ptr [esp + 0x18]
00e0cb61 cmp eax, ebx
00e0cb63 jne 0xe0cb69
00e0cb65 xor ecx, ecx
00e0cb67 jmp 0xe0cb6b
00e0cb69 mov ecx, dword ptr [eax]
00e0cb6b call 0xdb0ea0
00e0cb70 call 0xda3620
00e0cb75 cmp dword ptr [eax + 0x1f8b4], ebx
00e0cb7b je 0xe0cbf7
00e0cb7d call 0xda3620
00e0cb82 mov esi, eax
00e0cb84 call ebp
00e0cb86 cmp eax, dword ptr [esi + 0x21d38]
00e0cb8c jne 0xe0cb96
00e0cb8e mov edi, dword ptr [esi + 0x21e98]
00e0cb94 jmp 0xe0cbae
00e0cb96 call ebp
00e0cb98 cmp eax, dword ptr [esi + 0x21e88]
00e0cb9e jne 0xe0cba8
00e0cba0 mov edi, dword ptr [esi + 0x21e90]
00e0cba6 jmp 0xe0cbae
00e0cba8 mov edi, dword ptr [esi + 0x21e84]
00e0cbae call 0xda3620
00e0cbb3 mov esi, eax
00e0cbb5 call ebp
00e0cbb7 cmp eax, dword ptr [esi + 0x21d38]
00e0cbbd jne 0xe0cbc7
00e0cbbf mov esi, dword ptr [esi + 0x21e98]
00e0cbc5 jmp 0xe0cbdf
00e0cbc7 call ebp
00e0cbc9 cmp eax, dword ptr [esi + 0x21e88]
00e0cbcf jne 0xe0cbd9
00e0cbd1 mov esi, dword ptr [esi + 0x21e90]
00e0cbd7 jmp 0xe0cbdf
00e0cbd9 mov esi, dword ptr [esi + 0x21e84]
00e0cbdf mov esi, dword ptr [esi]
00e0cbe1 call 0xda3620
00e0cbe6 mov eax, dword ptr [eax + 0x1f8b4]
00e0cbec mov ecx, dword ptr [esi + 0x94]
00e0cbf2 push eax
00e0cbf3 push ebx
00e0cbf4 push edi
00e0cbf5 call ecx
00e0cbf7 call 0xda3620
00e0cbfc cmp dword ptr [eax + 0x1f8b8], ebx
00e0cc02 je 0xe0cc7d
00e0cc04 call 0xda3620
00e0cc09 mov esi, eax
00e0cc0b call ebp
00e0cc0d cmp eax, dword ptr [esi + 0x21d38]
00e0cc13 jne 0xe0cc1d
00e0cc15 mov edi, dword ptr [esi + 0x21e98]
00e0cc1b jmp 0xe0cc35
00e0cc1d call ebp
00e0cc1f cmp eax, dword ptr [esi + 0x21e88]
00e0cc25 jne 0xe0cc2f
00e0cc27 mov edi, dword ptr [esi + 0x21e90]
00e0cc2d jmp 0xe0cc35
00e0cc2f mov edi, dword ptr [esi + 0x21e84]
00e0cc35 call 0xda3620
00e0cc3a mov esi, eax
00e0cc3c call ebp
00e0cc3e cmp eax, dword ptr [esi + 0x21d38]
00e0cc44 jne 0xe0cc4e
00e0cc46 mov esi, dword ptr [esi + 0x21e98]
00e0cc4c jmp 0xe0cc66
00e0cc4e call ebp
00e0cc50 cmp eax, dword ptr [esi + 0x21e88]
00e0cc56 jne 0xe0cc60
00e0cc58 mov esi, dword ptr [esi + 0x21e90]
00e0cc5e jmp 0xe0cc66
00e0cc60 mov esi, dword ptr [esi + 0x21e84]
00e0cc66 mov esi, dword ptr [esi]
00e0cc68 call 0xda3620
00e0cc6d mov edx, dword ptr [eax + 0x1f8b8]
00e0cc73 mov eax, dword ptr [esi + 0x9c]
00e0cc79 push edx
00e0cc7a push edi
00e0cc7b call eax
00e0cc7d call 0xda3620
00e0cc82 cmp dword ptr [eax + 0x1f8b8], ebx
00e0cc88 je 0xe0cca8
00e0cc8a call 0xda3620
00e0cc8f mov ecx, dword ptr [eax + 0x1f8b8]
00e0cc95 mov esi, dword ptr [ecx]
00e0cc97 call 0xda3620
00e0cc9c mov edx, dword ptr [eax + 0x1f8b8]
00e0cca2 mov eax, dword ptr [esi + 8]
00e0cca5 push edx
00e0cca6 call eax
00e0cca8 call 0xda3620
00e0ccad cmp dword ptr [eax + 0x1f8b4], ebx
00e0ccb3 je 0xe0ccd3
00e0ccb5 call 0xda3620
00e0ccba mov ecx, dword ptr [eax + 0x1f8b4]
00e0ccc0 mov esi, dword ptr [ecx]
00e0ccc2 call 0xda3620
00e0ccc7 mov edx, dword ptr [eax + 0x1f8b4]
00e0cccd mov eax, dword ptr [esi + 8]
00e0ccd0 push edx
00e0ccd1 call eax
00e0ccd3 mov esi, dword ptr [esp + 0x14]
00e0ccd7 mov ecx, dword ptr [esi + 0x864]
00e0ccdd mov edx, dword ptr [ecx]
00e0ccdf mov eax, dword ptr [edx + 8]
00e0cce2 call eax
00e0cce4 mov ecx, dword ptr [esi + 0x864]
00e0ccea mov edx, dword ptr [ecx]
00e0ccec mov eax, dword ptr [edx + 0x40]
00e0ccef call eax
00e0ccf1 mov edi, dword ptr [esp + 0x18]
00e0ccf5 mov ebx, esi
00e0ccf7 test edi, edi
00e0ccf9 je 0xe0cd08
00e0ccfb mov edx, dword ptr [edi + 0xc]
00e0ccfe mov ecx, 3
00e0cd03 call 0xdbadf0
00e0cd08 mov ecx, ebx
00e0cd0a call 0xe0bec0
00e0cd0f cmp dword ptr [esp + 0x10], 0
00e0cd14 je 0xe0d03a
00e0cd1a xor edi, edi
00e0cd1c call 0xda3620
00e0cd21 cmp dword ptr [eax + 0x21dd4], edi
00e0cd27 jbe 0xe0cdae
00e0cd2d lea ecx, [ecx]
00e0cd30 call 0xda3620
00e0cd35 mov esi, eax
00e0cd37 call ebp
00e0cd39 cmp eax, dword ptr [esi + 0x21d38]
00e0cd3f jne 0xe0cd49
00e0cd41 mov ebx, dword ptr [esi + 0x21e98]
00e0cd47 jmp 0xe0cd61
00e0cd49 call ebp
00e0cd4b cmp eax, dword ptr [esi + 0x21e88]
00e0cd51 jne 0xe0cd5b
00e0cd53 mov ebx, dword ptr [esi + 0x21e90]
00e0cd59 jmp 0xe0cd61
00e0cd5b mov ebx, dword ptr [esi + 0x21e84]
00e0cd61 call 0xda3620
00e0cd66 mov esi, eax
00e0cd68 call ebp
00e0cd6a cmp eax, dword ptr [esi + 0x21d38]
00e0cd70 jne 0xe0cd7a
00e0cd72 mov esi, dword ptr [esi + 0x21e98]
00e0cd78 jmp 0xe0cd92
00e0cd7a call ebp
00e0cd7c cmp eax, dword ptr [esi + 0x21e88]
00e0cd82 jne 0xe0cd8c
00e0cd84 mov esi, dword ptr [esi + 0x21e90]
00e0cd8a jmp 0xe0cd92
00e0cd8c mov esi, dword ptr [esi + 0x21e84]
00e0cd92 mov ecx, dword ptr [esi]
00e0cd94 mov edx, dword ptr [ecx + 0x104]
00e0cd9a push 0
00e0cd9c push edi
00e0cd9d push ebx
00e0cd9e call edx
00e0cda0 inc edi
00e0cda1 call 0xda3620
00e0cda6 cmp edi, dword ptr [eax + 0x21dd4]
00e0cdac jb 0xe0cd30
00e0cdae xor edi, edi
00e0cdb0 call 0xda3620
00e0cdb5 cmp dword ptr [eax + 0x21df8], edi
00e0cdbb jbe 0xe0ce47
00e0cdc1 call 0xda3620
00e0cdc6 mov esi, eax
00e0cdc8 call ebp
00e0cdca cmp eax, dword ptr [esi + 0x21d38]
00e0cdd0 jne 0xe0cdda
00e0cdd2 mov ebx, dword ptr [esi + 0x21e98]
00e0cdd8 jmp 0xe0cdf2
00e0cdda call ebp
00e0cddc cmp eax, dword ptr [esi + 0x21e88]
00e0cde2 jne 0xe0cdec
00e0cde4 mov ebx, dword ptr [esi + 0x21e90]
00e0cdea jmp 0xe0cdf2
00e0cdec mov ebx, dword ptr [esi + 0x21e84]
00e0cdf2 call 0xda3620
00e0cdf7 mov esi, eax
00e0cdf9 call ebp
00e0cdfb cmp eax, dword ptr [esi + 0x21d38]
00e0ce01 jne 0xe0ce0b
00e0ce03 mov esi, dword ptr [esi + 0x21e98]
00e0ce09 jmp 0xe0ce23
00e0ce0b call ebp
00e0ce0d cmp eax, dword ptr [esi + 0x21e88]
00e0ce13 jne 0xe0ce1d
00e0ce15 mov esi, dword ptr [esi + 0x21e90]
00e0ce1b jmp 0xe0ce23
00e0ce1d mov esi, dword ptr [esi + 0x21e84]
00e0ce23 mov eax, dword ptr [esi]
00e0ce25 mov ecx, dword ptr [eax + 0x190]
00e0ce2b push 0
00e0ce2d push 0
00e0ce2f push 0
00e0ce31 push edi
00e0ce32 push ebx
00e0ce33 call ecx
00e0ce35 inc edi
00e0ce36 call 0xda3620
00e0ce3b cmp edi, dword ptr [eax + 0x21df8]
00e0ce41 jb 0xe0cdc1
00e0ce47 call 0xda3620
00e0ce4c mov esi, eax
00e0ce4e call ebp
00e0ce50 cmp eax, dword ptr [esi + 0x21d38]
00e0ce56 jne 0xe0ce60
00e0ce58 mov edi, dword ptr [esi + 0x21e98]
00e0ce5e jmp 0xe0ce78
00e0ce60 call ebp
00e0ce62 cmp eax, dword ptr [esi + 0x21e88]
00e0ce68 jne 0xe0ce72
00e0ce6a mov edi, dword ptr [esi + 0x21e90]
00e0ce70 jmp 0xe0ce78
00e0ce72 mov edi, dword ptr [esi + 0x21e84]
00e0ce78 call 0xda3620
00e0ce7d mov esi, eax
00e0ce7f call ebp
00e0ce81 cmp eax, dword ptr [esi + 0x21d38]
00e0ce87 jne 0xe0ce91
00e0ce89 mov esi, dword ptr [esi + 0x21e98]
00e0ce8f jmp 0xe0cea9
00e0ce91 call ebp
00e0ce93 cmp eax, dword ptr [esi + 0x21e88]
00e0ce99 jne 0xe0cea3
00e0ce9b mov esi, dword ptr [esi + 0x21e90]
00e0cea1 jmp 0xe0cea9
00e0cea3 mov esi, dword ptr [esi + 0x21e84]
00e0cea9 mov edx, dword ptr [esi]
00e0ceab mov eax, dword ptr [edx + 0x164]
00e0ceb1 push 2
00e0ceb3 push edi
00e0ceb4 call eax
00e0ceb6 call 0xda3620
00e0cebb mov esi, eax
00e0cebd call ebp
00e0cebf cmp eax, dword ptr [esi + 0x21d38]
00e0cec5 jne 0xe0cecf
00e0cec7 mov esi, dword ptr [esi + 0x21e98]
00e0cecd jmp 0xe0cee7
00e0cecf call ebp
00e0ced1 cmp eax, dword ptr [esi + 0x21e88]
00e0ced7 jne 0xe0cee1
00e0ced9 mov esi, dword ptr [esi + 0x21e90]
00e0cedf jmp 0xe0cee7
00e0cee1 mov esi, dword ptr [esi + 0x21e84]
00e0cee7 call 0xda3620
00e0ceec mov edi, eax
00e0ceee call ebp
00e0cef0 cmp eax, dword ptr [edi + 0x21d38]
00e0cef6 jne 0xe0cf00
00e0cef8 mov edi, dword ptr [edi + 0x21e98]
00e0cefe jmp 0xe0cf18
00e0cf00 call ebp
00e0cf02 cmp eax, dword ptr [edi + 0x21e88]
00e0cf08 jne 0xe0cf12
00e0cf0a mov edi, dword ptr [edi + 0x21e90]
00e0cf10 jmp 0xe0cf18
00e0cf12 mov edi, dword ptr [edi + 0x21e84]
00e0cf18 mov ecx, dword ptr [edi]
00e0cf1a mov edx, dword ptr [ecx + 0x170]
00e0cf20 push 0
00e0cf22 push esi
00e0cf23 call edx
00e0cf25 call 0xda3620
00e0cf2a mov esi, eax
00e0cf2c call ebp
00e0cf2e cmp eax, dword ptr [esi + 0x21d38]
00e0cf34 jne 0xe0cf3e
00e0cf36 mov esi, dword ptr [esi + 0x21e98]
00e0cf3c jmp 0xe0cf56
00e0cf3e call ebp
00e0cf40 cmp eax, dword ptr [esi + 0x21e88]
00e0cf46 jne 0xe0cf50
00e0cf48 mov esi, dword ptr [esi + 0x21e90]
00e0cf4e jmp 0xe0cf56
00e0cf50 mov esi, dword ptr [esi + 0x21e84]
00e0cf56 call 0xda3620
00e0cf5b mov edi, eax
00e0cf5d call ebp
00e0cf5f cmp eax, dword ptr [edi + 0x21d38]
00e0cf65 jne 0xe0cf6f
00e0cf67 mov edi, dword ptr [edi + 0x21e98]
00e0cf6d jmp 0xe0cf87
00e0cf6f call ebp
00e0cf71 cmp eax, dword ptr [edi + 0x21e88]
00e0cf77 jne 0xe0cf81
00e0cf79 mov edi, dword ptr [edi + 0x21e90]
00e0cf7f jmp 0xe0cf87
00e0cf81 mov edi, dword ptr [edi + 0x21e84]
00e0cf87 mov eax, dword ptr [edi]
00e0cf89 mov ecx, dword ptr [eax + 0x1ac]
00e0cf8f push 0
00e0cf91 push esi
00e0cf92 call ecx
00e0cf94 call 0xda3620
00e0cf99 mov esi, eax
00e0cf9b call ebp
00e0cf9d cmp eax, dword ptr [esi + 0x21d38]
00e0cfa3 jne 0xe0cfad
00e0cfa5 mov esi, dword ptr [esi + 0x21e98]
00e0cfab jmp 0xe0cfc5
00e0cfad call ebp
00e0cfaf cmp eax, dword ptr [esi + 0x21e88]
00e0cfb5 jne 0xe0cfbf
00e0cfb7 mov esi, dword ptr [esi + 0x21e90]
00e0cfbd jmp 0xe0cfc5
00e0cfbf mov esi, dword ptr [esi + 0x21e84]
00e0cfc5 call 0xda3620
00e0cfca mov edi, eax
00e0cfcc call ebp
00e0cfce cmp eax, dword ptr [edi + 0x21d38]
00e0cfd4 jne 0xe0cfde
00e0cfd6 mov eax, dword ptr [edi + 0x21e98]
00e0cfdc jmp 0xe0cff6
00e0cfde call ebp
00e0cfe0 cmp eax, dword ptr [edi + 0x21e88]
00e0cfe6 jne 0xe0cff0
00e0cfe8 mov eax, dword ptr [edi + 0x21e90]
00e0cfee jmp 0xe0cff6
00e0cff0 mov eax, dword ptr [edi + 0x21e84]
00e0cff6 mov edx, dword ptr [eax]
00e0cff8 mov eax, dword ptr [edx + 0x1a0]
00e0cffe push 0
00e0d000 push esi
00e0d001 call eax
00e0d003 call 0xd96820
00e0d008 mov ebx, dword ptr [esp + 0x14]
00e0d00c mov ecx, dword ptr [ebx + 0x864]
00e0d012 mov esi, eax
00e0d014 mov eax, dword ptr [ecx]
00e0d016 mov eax, dword ptr [eax + 0x44]
00e0d019 mov edi, edx
00e0d01b mov edx, dword ptr [esp + 0x18]
00e0d01f call eax
00e0d021 call 0xd96820
00e0d026 mov ecx, dword ptr [ebx + 0x938]
00e0d02c sub eax, esi
00e0d02e sbb edx, edi
00e0d030 mov edi, dword ptr [esp + 0x18]
00e0d034 mov dword ptr [ecx + 0x18], eax
00e0d037 mov dword ptr [ecx + 0x1c], edx
00e0d03a test edi, edi
00e0d03c je 0xe0d05c
00e0d03e mov esi, dword ptr [edi + 0x18]
00e0d041 test esi, esi
00e0d043 je 0xe0d055
00e0d045 mov edx, dword ptr [esi + 8]
00e0d048 mov eax, dword ptr [esi + 4]
00e0d04b mov ecx, edi
00e0d04d call eax
00e0d04f mov esi, dword ptr [esi]
00e0d051 test esi, esi
00e0d053 jne 0xe0d045
00e0d055 mov dword ptr [edi + 0x18], 0
00e0d05c pop edi
00e0d05d pop esi
00e0d05e pop ebp
00e0d05f pop ebx
00e0d060 add esp, 0xc
00e0d063 ret 
00e0d064 int3 
00e0d065 int3 
00e0d066 int3 
00e0d067 int3 
00e0d068 int3 
00e0d069 int3 
00e0d06a int3 
00e0d06b int3 
00e0d06c int3 
00e0d06d int3 
00e0d06e int3 
00e0d06f int3 
00e0d070 push edi
00e0d071 mov edi, ecx
00e0d073 cmp dword ptr [edi + 0x940], 0
00e0d07a je 0xe0d19e
00e0d080 cmp dword ptr [edi + 0x858], 0
00e0d087 je 0xe0d182
00e0d08d push ebx
00e0d08e push esi
00e0d08f call 0xda3620
00e0d094 mov ebx, dword ptr [0xec20dc]
00e0d09a mov esi, eax
00e0d09c call ebx
00e0d09e cmp eax, dword ptr [esi + 0x21d38]
00e0d0a4 jne 0xe0d0ae
00e0d0a6 mov esi, dword ptr [esi + 0x21e98]
00e0d0ac jmp 0xe0d0c6
00e0d0ae call ebx
00e0d0b0 cmp eax, dword ptr [esi + 0x21e88]
00e0d0b6 jne 0xe0d0c0
00e0d0b8 mov esi, dword ptr [esi + 0x21e90]
00e0d0be jmp 0xe0d0c6
00e0d0c0 mov esi, dword ptr [esi + 0x21e84]
00e0d0c6 test esi, esi
00e0d0c8 je 0xe0d0eb
00e0d0ca mov eax, dword ptr [edi + 0x864]
00e0d0d0 mov esi, dword ptr [eax]
00e0d0d2 call 0xda3620
00e0d0d7 mov ecx, eax
00e0d0d9 call 0x59e930
00e0d0de mov ecx, dword ptr [edi + 0x864]
00e0d0e4 mov edx, eax
00e0d0e6 mov eax, dword ptr [esi + 0x20]
00e0d0e9 call eax
00e0d0eb call 0xda3620
00e0d0f0 mov esi, eax
00e0d0f2 call ebx
00e0d0f4 cmp eax, dword ptr [esi + 0x21d38]
00e0d0fa jne 0xe0d104
00e0d0fc mov esi, dword ptr [esi + 0x21e94]
00e0d102 jmp 0xe0d11c
00e0d104 call ebx
00e0d106 cmp eax, dword ptr [esi + 0x21e88]
00e0d10c jne 0xe0d116
00e0d10e mov esi, dword ptr [esi + 0x21e8c]
00e0d114 jmp 0xe0d11c
00e0d116 mov esi, dword ptr [esi + 0x21e80]
00e0d11c test esi, esi
00e0d11e je 0xe0d141
00e0d120 mov ecx, dword ptr [edi + 0x864]
00e0d126 mov esi, dword ptr [ecx]
00e0d128 call 0xda3620
00e0d12d mov ecx, eax
00e0d12f call 0x536b80
00e0d134 mov ecx, dword ptr [edi + 0x864]
00e0d13a mov edx, eax
00e0d13c mov eax, dword ptr [esi + 0x1c]
00e0d13f call eax
00e0d141 cmp dword ptr [edi + 0x850], 0
00e0d148 pop esi
00e0d149 pop ebx
00e0d14a je 0xe0d163
00e0d14c xor edx, edx
00e0d14e lea ecx, [edx + 3]
00e0d151 call 0xe0f630
00e0d156 mov ecx, dword ptr [edi + 0x864]
00e0d15c mov edx, dword ptr [ecx]
00e0d15e mov eax, dword ptr [edx + 0x30]
00e0d161 call eax
00e0d163 mov eax, dword ptr [0x2121eb4]
00e0d168 test eax, eax
00e0d16a je 0xe0d16e
00e0d16c call eax
00e0d16e mov ecx, dword ptr [edi + 0x944]
00e0d174 push ecx
00e0d175 call dword ptr [0xec20a0]
00e0d17b push eax
00e0d17c call dword ptr [0xec20b4]
00e0d182 mov edi, dword ptr [edi + 0x944]
00e0d188 call 0xde3ac0
00e0d18d mov dword ptr [eax], edi
00e0d18f call 0xda3620
00e0d194 mov dword ptr [eax + 0x21d04], 1
00e0d19e pop edi
00e0d19f ret 
00e0d1a0 sub esp, 0xc
00e0d1a3 mov eax, dword ptr [edx + 0xc]
00e0d1a6 push esi
00e0d1a7 mov esi, ecx
00e0d1a9 movzx ecx, byte ptr [eax + 0xe0d3b8]
00e0d1b0 mov dword ptr [esp + 4], edx
00e0d1b4 jmp dword ptr [ecx*4 + 0xe0d3ac]
00e0d1bb xor eax, eax
00e0d1bd pop esi
00e0d1be add esp, 0xc
00e0d1c1 ret 
00e0d1c2 call 0xda3620
00e0d1c7 mov edx, 2
00e0d1cc mov ecx, eax
00e0d1ce call 0xddaa90
00e0d1d3 mov ecx, esi
00e0d1d5 call 0xe0d070
00e0d1da xor edx, edx
00e0d1dc mov ecx, esi
00e0d1de call 0xe0c7c0
00e0d1e3 call 0xda3620
00e0d1e8 mov edx, 1
00e0d1ed mov ecx, eax
00e0d1ef call 0xddaa90
00e0d1f4 xor eax, eax
00e0d1f6 pop esi
00e0d1f7 add esp, 0xc
00e0d1fa ret 
00e0d1fb push ebx
00e0d1fc push edi
00e0d1fd call 0xda3620
00e0d202 mov edi, dword ptr [eax + 0x308c]
00e0d208 push 4
00e0d20a mov edx, 3
00e0d20f mov ecx, edi
00e0d211 call 0xdda550
00e0d216 call 0xda3620
00e0d21b mov edx, 2
00e0d220 mov ecx, eax
00e0d222 call 0xddaa90
00e0d227 mov ecx, esi
00e0d229 call 0xe0d070
00e0d22e call 0xd96820
00e0d233 mov ecx, dword ptr [esi + 0x938]
00e0d239 mov dword ptr [ecx + 8], eax
00e0d23c mov dword ptr [ecx + 0xc], edx
00e0d23f mov ecx, dword ptr [esi + 0x938]
00e0d245 mov dword ptr [esi + 0x93c], ecx
00e0d24b mov ebx, dword ptr [esi + 0x938]
00e0d251 lea ecx, [esi + 0x908]
00e0d257 cmp ebx, ecx
00e0d259 jne 0xe0d263
00e0d25b lea ecx, [esi + 0x8a8]
00e0d261 jmp 0xe0d26c
00e0d263 mov ecx, dword ptr [esi + 0x938]
00e0d269 add ecx, 0x30
00e0d26c mov dword ptr [esi + 0x938], ecx
00e0d272 mov ecx, dword ptr [esi + 0x938]
00e0d278 push ebp
00e0d279 lea ebp, [ecx + 0x30]
00e0d27c xor ebx, ebx
00e0d27e mov edi, edi
00e0d280 mov dword ptr [ecx], ebx
00e0d282 mov dword ptr [ecx + 4], ebx
00e0d285 add ecx, 8
00e0d288 cmp ecx, ebp
00e0d28a jb 0xe0d280
00e0d28c mov ecx, dword ptr [esi + 0x938]
00e0d292 mov dword ptr [ecx], eax
00e0d294 mov dword ptr [ecx + 4], edx
00e0d297 mov eax, dword ptr [esi + 0x938]
00e0d29d mov dword ptr [eax + 0x20], ebx
00e0d2a0 mov dword ptr [eax + 0x24], ebx
00e0d2a3 mov eax, dword ptr [esi + 0x938]
00e0d2a9 mov dword ptr [eax + 0x28], ebx
00e0d2ac mov dword ptr [eax + 0x2c], ebx
00e0d2af call 0xd96820
00e0d2b4 mov dword ptr [esp + 0x18], edx
00e0d2b8 mov edx, edi
00e0d2ba mov ecx, esi
00e0d2bc mov ebp, eax
00e0d2be call 0xe0c7c0
00e0d2c3 call 0xd96820
00e0d2c8 mov ecx, dword ptr [esi + 0x938]
00e0d2ce sub eax, ebp
00e0d2d0 sbb edx, dword ptr [esp + 0x18]
00e0d2d4 mov dword ptr [ecx + 0x10], eax
00e0d2d7 mov dword ptr [ecx + 0x14], edx
00e0d2da call 0xda3620
00e0d2df mov edx, 1
00e0d2e4 mov ecx, eax
00e0d2e6 call 0xddaa90
00e0d2eb mov ecx, dword ptr [edi + 0x24]
00e0d2ee cmp ecx, ebx
00e0d2f0 je 0xe0d301
00e0d2f2 mov edx, dword ptr [edi]
00e0d2f4 cmp dword ptr [edx + 0x38], ebx
00e0d2f7 je 0xe0d301
00e0d2f9 or edx, 0xffffffff
00e0d2fc call 0xda1d00
00e0d301 lea ecx, [esi + 0x4dc]
00e0d307 call 0xda1c90
00e0d30c call 0xd96820
00e0d311 mov ecx, dword ptr [esp + 0x10]
00e0d315 mov dword ptr [ecx + 0x20], eax
00e0d318 mov dword ptr [ecx + 0x24], edx
00e0d31b mov dword ptr [ecx + 8], 3
00e0d322 mov eax, dword ptr [edi + 4]
00e0d325 mov dword ptr [esp + 0x10], eax
00e0d329 call 0xda3620
00e0d32e mov ecx, dword ptr [esp + 0x10]
00e0d332 mov dword ptr [eax + 0x308c], ecx
00e0d338 call 0xe0b580
00e0d33d push 5
00e0d33f mov edx, 4
00e0d344 mov ecx, edi
00e0d346 mov dword ptr [edi + 0xc], ebx
00e0d349 call 0xdda550
00e0d34e push ebx
00e0d34f mov edx, 5
00e0d354 mov ecx, edi
00e0d356 call 0xdda550
00e0d35b push ebx
00e0d35c lea ecx, [esi + 0x4d0]
00e0d362 xor edx, edx
00e0d364 call 0xda1d60
00e0d369 lea ecx, [esi + 0x4dc]
00e0d36f call 0xda1cb0
00e0d374 pop ebp
00e0d375 cmp dword ptr [esi + 0x860], ebx
00e0d37b jne 0xe0d3a0
00e0d37d call 0xd96820
00e0d382 mov edi, eax
00e0d384 mov ebx, edx
00e0d386 call 0xe0ba20
00e0d38b mov esi, dword ptr [esi + 0x938]
00e0d391 call 0xd96820
00e0d396 sub eax, edi
00e0d398 sbb edx, ebx
00e0d39a add dword ptr [esi + 0x28], eax
00e0d39d adc dword ptr [esi + 0x2c], edx
00e0d3a0 pop edi
00e0d3a1 pop ebx
00e0d3a2 mov eax, 1
00e0d3a7 pop esi
00e0d3a8 add esp, 0xc
00e0d3ab ret 
00e0d3ac ret 0xe0d1
00e0d3af add byte ptr [ebx - 0x4ff1f2f], bh
00e0d3b5 shl eax, 1
00e0d3b7 add byte ptr [eax], al
00e0d3b9 add dword ptr [ecx], eax
00e0d3bb add dword ptr [ecx], eax
00e0d3bd add dword ptr [ecx], eax
00e0d3bf add dword ptr [edx], eax
00e0d3c1 int3 
00e0d3c2 int3 
00e0d3c3 int3 
00e0d3c4 int3 
00e0d3c5 int3 
00e0d3c6 int3 
00e0d3c7 int3 
00e0d3c8 int3 
00e0d3c9 int3 
00e0d3ca int3 
00e0d3cb int3 
00e0d3cc int3 
00e0d3cd int3 
00e0d3ce int3 
00e0d3cf int3 
00e0d3d0 cmp dword ptr [ecx + 0x864], 0x146abf0
00e0d3da jne 0xe0d3ea
00e0d3dc mov eax, dword ptr [ecx + 0x494]
00e0d3e2 push edx
00e0d3e3 push eax
00e0d3e4 call dword ptr [0xec2094]
00e0d3ea ret 
00e0d3eb int3 
00e0d3ec int3 
00e0d3ed int3 
00e0d3ee int3 
00e0d3ef int3 
00e0d3f0 sub esp, 0x10
00e0d3f3 push ebx
00e0d3f4 push ebp
00e0d3f5 mov ebp, dword ptr [0xec20dc]
00e0d3fb push esi
00e0d3fc mov ebx, ecx
00e0d3fe mov dword ptr [esp + 0xc], ebx
00e0d402 mov dword ptr [esp + 0x10], 0
00e0d40a lea esi, [ebx + 0x870]
00e0d410 mov dword ptr [esp + 0x14], 4
00e0d418 push edi
00e0d419 lea esp, [esp]
00e0d420 mov dword ptr [esp + 0x1c], esi
00e0d424 call 0xda3620
00e0d429 mov edi, eax
00e0d42b call ebp
00e0d42d cmp eax, dword ptr [edi + 0x21d38]
00e0d433 jne 0xe0d43d
00e0d435 mov edi, dword ptr [edi + 0x21e98]
00e0d43b jmp 0xe0d455
00e0d43d call ebp
00e0d43f cmp eax, dword ptr [edi + 0x21e88]
00e0d445 jne 0xe0d44f
00e0d447 mov edi, dword ptr [edi + 0x21e90]
00e0d44d jmp 0xe0d455
00e0d44f mov edi, dword ptr [edi + 0x21e84]
00e0d455 test edi, edi
00e0d457 je 0xe0d4d1
00e0d459 call 0xda3620
00e0d45e mov edi, eax
00e0d460 call ebp
00e0d462 cmp eax, dword ptr [edi + 0x21d38]
00e0d468 jne 0xe0d472
00e0d46a mov ebx, dword ptr [edi + 0x21e98]
00e0d470 jmp 0xe0d48a
00e0d472 call ebp
00e0d474 cmp eax, dword ptr [edi + 0x21e88]
00e0d47a jne 0xe0d484
00e0d47c mov ebx, dword ptr [edi + 0x21e90]
00e0d482 jmp 0xe0d48a
00e0d484 mov ebx, dword ptr [edi + 0x21e84]
00e0d48a call 0xda3620
00e0d48f mov edi, eax
00e0d491 call ebp
00e0d493 cmp eax, dword ptr [edi + 0x21d38]
00e0d499 jne 0xe0d4a3
00e0d49b mov edi, dword ptr [edi + 0x21e98]
00e0d4a1 jmp 0xe0d4bb
00e0d4a3 call ebp
00e0d4a5 cmp eax, dword ptr [edi + 0x21e88]
00e0d4ab jne 0xe0d4b5
00e0d4ad mov edi, dword ptr [edi + 0x21e90]
00e0d4b3 jmp 0xe0d4bb
00e0d4b5 mov edi, dword ptr [edi + 0x21e84]
00e0d4bb mov eax, dword ptr [edi]
00e0d4bd mov ecx, dword ptr [eax + 0x1d8]
00e0d4c3 push esi
00e0d4c4 push 8
00e0d4c6 push ebx
00e0d4c7 call ecx
00e0d4c9 mov ebx, dword ptr [esp + 0x10]
00e0d4cd test eax, eax
00e0d4cf je 0xe0d4d7
00e0d4d1 mov dword ptr [esi], 0
00e0d4d7 dec dword ptr [esp + 0x18]
00e0d4db mov edx, dword ptr [esp + 0x14]
00e0d4df lea eax, [esi + 0xc]
00e0d4e2 mov dword ptr [esi + 4], edx
00e0d4e5 mov dword ptr [esi + 8], eax
00e0d4e8 mov dword ptr [esp + 0x14], esi
00e0d4ec mov esi, eax
00e0d4ee jne 0xe0d420
00e0d4f4 mov ecx, dword ptr [esp + 0x1c]
00e0d4f8 lea eax, [ebx + 0x870]
00e0d4fe mov dword ptr [ecx + 8], eax
00e0d501 mov dword ptr [ebx + 0x874], ecx
00e0d507 mov dword ptr [ebx + 0x868], eax
00e0d50d call 0xda3620
00e0d512 mov eax, dword ptr [eax + 0x1f8c8]
00e0d518 pop edi
00e0d519 test eax, eax
00e0d51b jne 0xe0d521
00e0d51d xor ecx, ecx
00e0d51f jmp 0xe0d527
00e0d521 mov ecx, dword ptr [ebx + 0x868]
00e0d527 mov edx, 1
00e0d52c cmp eax, edx
00e0d52e jle 0xe0d542
00e0d530 mov esi, dword ptr [ebx + 0x868]
00e0d536 mov ecx, dword ptr [ecx + 4]
00e0d539 cmp ecx, esi
00e0d53b je 0xe0d54f
00e0d53d inc edx
00e0d53e cmp edx, eax
00e0d540 jl 0xe0d536
00e0d542 pop esi
00e0d543 pop ebp
00e0d544 mov dword ptr [ebx + 0x86c], ecx
00e0d54a pop ebx
00e0d54b add esp, 0x10
00e0d54e ret 
00e0d54f pop esi
00e0d550 xor eax, eax
00e0d552 pop ebp
00e0d553 mov dword ptr [ebx + 0x86c], eax
00e0d559 pop ebx
00e0d55a add esp, 0x10
00e0d55d ret 
00e0d55e int3 
00e0d55f int3 
00e0d560 sub esp, 0xc
00e0d563 push ebx
00e0d564 push ebp
00e0d565 push esi
00e0d566 mov ebx, edx
00e0d568 mov esi, ecx
00e0d56a push edi
00e0d56b mov edi, dword ptr [esi + 0x850]
00e0d571 mov dword ptr [esp + 0x14], ebx
00e0d575 call 0xda3a90
00e0d57a push eax
00e0d57b mov edx, ebx
00e0d57d mov ecx, edi
00e0d57f call 0xe0b650
00e0d584 mov eax, dword ptr [esi + 0x850]
00e0d58a test eax, eax
00e0d58c jne 0xe0d596
00e0d58e call 0xde3ac0
00e0d593 mov eax, dword ptr [eax + 0xc]
00e0d596 mov dword ptr [esp + 0x10], eax
00e0d59a call 0xda3620
00e0d59f mov ebp, dword ptr [0xec20dc]
00e0d5a5 mov edi, eax
00e0d5a7 call ebp
00e0d5a9 cmp eax, dword ptr [edi + 0x21d38]
00e0d5af jne 0xe0d5b9
00e0d5b1 mov ebx, dword ptr [edi + 0x21e94]
00e0d5b7 jmp 0xe0d5d1
00e0d5b9 call ebp
00e0d5bb cmp eax, dword ptr [edi + 0x21e88]
00e0d5c1 jne 0xe0d5cb
00e0d5c3 mov ebx, dword ptr [edi + 0x21e8c]
00e0d5c9 jmp 0xe0d5d1
00e0d5cb mov ebx, dword ptr [edi + 0x21e80]
00e0d5d1 call 0xda3620
00e0d5d6 mov edi, eax
00e0d5d8 call ebp
00e0d5da cmp eax, dword ptr [edi + 0x21d38]
00e0d5e0 jne 0xe0d5ea
00e0d5e2 mov eax, dword ptr [edi + 0x21e94]
00e0d5e8 jmp 0xe0d602
00e0d5ea call ebp
00e0d5ec cmp eax, dword ptr [edi + 0x21e88]
00e0d5f2 jne 0xe0d5fc
00e0d5f4 mov eax, dword ptr [edi + 0x21e8c]
00e0d5fa jmp 0xe0d602
00e0d5fc mov eax, dword ptr [edi + 0x21e80]
00e0d602 mov edx, dword ptr [esp + 0x14]
00e0d606 mov edi, dword ptr [eax]
00e0d608 mov eax, dword ptr [esi + 4]
00e0d60b lea ecx, [esp + 0x18]
00e0d60f push ecx
00e0d610 mov ecx, dword ptr [esp + 0x14]
00e0d614 push edx
00e0d615 mov edx, dword ptr [esi]
00e0d617 push eax
00e0d618 push ecx
00e0d619 push edx
00e0d61a call 0xda3a90
00e0d61f mov eax, dword ptr [eax + 0x50]
00e0d622 mov ecx, dword ptr [edi + 0x40]
00e0d625 push eax
00e0d626 push ebx
00e0d627 call ecx
00e0d629 pop edi
00e0d62a pop esi
00e0d62b pop ebp
00e0d62c pop ebx
00e0d62d test eax, eax
00e0d62f je 0xe0d637
00e0d631 xor eax, eax
00e0d633 add esp, 0xc
00e0d636 ret 
00e0d637 mov eax, dword ptr [esp + 8]
00e0d63b add esp, 0xc
00e0d63e ret 
00e0d63f int3 
00e0d640 call 0xda3620
00e0d645 mov eax, dword ptr [eax + 0x21d34]
00e0d64b mov eax, dword ptr [eax + 0x850]
00e0d651 ret 
00e0d652 int3 
00e0d653 int3 
00e0d654 int3 
00e0d655 int3 
00e0d656 int3 
00e0d657 int3 
00e0d658 int3 
00e0d659 int3 
00e0d65a int3 
00e0d65b int3 
00e0d65c int3 
00e0d65d int3 
00e0d65e int3 
00e0d65f int3 
00e0d660 call 0xda3620
00e0d665 push 0x20
00e0d667 call 0xe1bbb6
00e0d66c ret 
00e0d66d int3 
00e0d66e int3 
00e0d66f int3 
00e0d670 call 0xda3620
00e0d675 call 0xda3620
00e0d67a cmp dword ptr [eax + 0x21e80], 0
00e0d681 je 0xe0d6a3
00e0d683 push esi
00e0d684 call 0xda3620
00e0d689 mov eax, dword ptr [eax + 0x21e80]
00e0d68f mov esi, dword ptr [eax]
00e0d691 call 0xda3620
00e0d696 mov ecx, dword ptr [eax + 0x21e80]
00e0d69c mov edx, dword ptr [esi + 8]
00e0d69f push ecx
00e0d6a0 call edx
00e0d6a2 pop esi
00e0d6a3 ret 
00e0d6a4 int3 
00e0d6a5 int3 
00e0d6a6 int3 
00e0d6a7 int3 
00e0d6a8 int3 
00e0d6a9 int3 
00e0d6aa int3 
00e0d6ab int3 
00e0d6ac int3 
00e0d6ad int3 
00e0d6ae int3 
00e0d6af int3 
00e0d6b0 call 0xda3620
00e0d6b5 call 0xda3620
00e0d6ba cmp dword ptr [eax + 0x21e84], 0
00e0d6c1 je 0xe0d6e3
00e0d6c3 push esi
00e0d6c4 call 0xda3620
00e0d6c9 mov eax, dword ptr [eax + 0x21e84]
00e0d6cf mov esi, dword ptr [eax]
00e0d6d1 call 0xda3620
00e0d6d6 mov ecx, dword ptr [eax + 0x21e84]
00e0d6dc mov edx, dword ptr [esi + 8]
00e0d6df push ecx
00e0d6e0 call edx
00e0d6e2 pop esi
00e0d6e3 ret 
00e0d6e4 int3 
00e0d6e5 int3 
00e0d6e6 int3 
00e0d6e7 int3 
00e0d6e8 int3 
00e0d6e9 int3 
00e0d6ea int3 
00e0d6eb int3 
00e0d6ec int3 
00e0d6ed int3 
00e0d6ee int3 
00e0d6ef int3 
00e0d6f0 call 0xda3620
00e0d6f5 mov ecx, dword ptr [eax + 0x21d34]
00e0d6fb jmp 0xe0b9a0
00e0d700 push esi
00e0d701 mov esi, edx
00e0d703 call 0xda3620
00e0d708 mov eax, dword ptr [eax + 0x21d34]
00e0d70e mov ecx, dword ptr [eax + 0x944]
00e0d714 mov dword ptr [esi], ecx
00e0d716 mov eax, dword ptr [eax + 0x940]
00e0d71c pop esi
00e0d71d ret 
00e0d71e int3 
00e0d71f int3 
00e0d720 call 0xda3620
00e0d725 mov ecx, dword ptr [eax + 0x21d34]
00e0d72b jmp 0xe0ba60
00e0d730 call 0xda3620
00e0d735 mov ecx, dword ptr [eax + 0x21d34]
00e0d73b jmp 0xe0bb00
00e0d740 push esi
00e0d741 mov esi, edx
00e0d743 call 0xda3620
00e0d748 mov ecx, dword ptr [eax + 0x21d34]
00e0d74e mov edx, esi
00e0d750 pop esi
00e0d751 jmp 0xe0bbc0
00e0d756 int3 
00e0d757 int3 
00e0d758 int3 
00e0d759 int3 
00e0d75a int3 
00e0d75b int3 
00e0d75c int3 
00e0d75d int3 
00e0d75e int3 
00e0d75f int3 
00e0d760 push esi
00e0d761 mov esi, edx
00e0d763 call 0xda3620
00e0d768 mov ecx, dword ptr [eax + 0x21d34]
00e0d76e mov edx, esi
00e0d770 pop esi
00e0d771 jmp 0xe0d560
00e0d776 int3 
00e0d777 int3 
00e0d778 int3 
00e0d779 int3 
00e0d77a int3 
00e0d77b int3 
00e0d77c int3 
00e0d77d int3 
00e0d77e int3 
00e0d77f int3 
00e0d780 push esi
00e0d781 call 0xda3620
00e0d786 mov esi, dword ptr [eax + 0x21d34]
00e0d78c call 0xda3620
00e0d791 cmp dword ptr [eax + 0x21d24], 0
00e0d798 jle 0xe0d7b0
00e0d79a cmp dword ptr [eax + 0x21d28], 0
00e0d7a1 je 0xe0d7b0
00e0d7a3 mov ecx, esi
00e0d7a5 mov edx, 1
00e0d7aa pop esi
00e0d7ab jmp 0xe0c420
00e0d7b0 mov ecx, esi
00e0d7b2 xor edx, edx
00e0d7b4 pop esi
00e0d7b5 jmp 0xe0c420
00e0d7ba int3 
00e0d7bb int3 
00e0d7bc int3 
00e0d7bd int3 
00e0d7be int3 
00e0d7bf int3 
00e0d7c0 push esi
00e0d7c1 call 0xda3620
00e0d7c6 mov esi, dword ptr [eax + 0x21d34]
00e0d7cc mov eax, dword ptr [esi + 0x850]
00e0d7d2 test eax, eax
00e0d7d4 je 0xe0d7fc
00e0d7d6 push eax
00e0d7d7 call dword ptr [0xec235c]
00e0d7dd mov dword ptr [esi + 0x850], 0
00e0d7e7 call 0xde3ac0
00e0d7ec mov eax, dword ptr [eax + 8]
00e0d7ef push eax
00e0d7f0 call 0xe0c360
00e0d7f5 push eax
00e0d7f6 call dword ptr [0xec2358]
00e0d7fc pop esi
00e0d7fd ret 
00e0d7fe int3 
00e0d7ff int3 
00e0d800 mov ecx, dword ptr [ecx + 4]
00e0d803 mov eax, dword ptr [ecx]
00e0d805 mov edx, dword ptr [eax]
00e0d807 jmp edx
00e0d809 int3 
00e0d80a int3 
00e0d80b int3 
00e0d80c int3 
00e0d80d int3 
00e0d80e int3 
00e0d80f int3 
00e0d810 mov ecx, dword ptr [ecx + 4]
00e0d813 mov eax, dword ptr [ecx]
00e0d815 mov eax, dword ptr [eax + 4]
00e0d818 push esi
00e0d819 mov esi, dword ptr [esp + 8]
00e0d81d push esi
00e0d81e call eax
00e0d820 pop esi
00e0d821 ret 4
00e0d824 int3 
00e0d825 int3 
00e0d826 int3 
00e0d827 int3 
00e0d828 int3 
00e0d829 int3 
00e0d82a int3 
00e0d82b int3 
00e0d82c int3 
00e0d82d int3 
00e0d82e int3 
00e0d82f int3 
00e0d830 mov ecx, dword ptr [ecx + 4]
00e0d833 mov eax, dword ptr [ecx]
00e0d835 mov edx, dword ptr [eax + 8]
00e0d838 jmp edx
00e0d83a int3 
00e0d83b int3 
00e0d83c int3 
00e0d83d int3 
00e0d83e int3 
00e0d83f int3 
00e0d840 mov ecx, dword ptr [ecx + 4]
00e0d843 mov eax, dword ptr [ecx]
00e0d845 mov edx, dword ptr [eax + 0xc]
00e0d848 jmp edx
00e0d84a int3 
00e0d84b int3 
00e0d84c int3 
00e0d84d int3 
00e0d84e int3 
00e0d84f int3 
00e0d850 mov ecx, dword ptr [ecx + 4]
00e0d853 mov eax, dword ptr [ecx]
00e0d855 mov edx, dword ptr [eax + 0x10]
00e0d858 jmp edx
00e0d85a int3 
00e0d85b int3 
00e0d85c int3 
00e0d85d int3 
00e0d85e int3 
00e0d85f int3 
00e0d860 mov ecx, dword ptr [ecx + 4]
00e0d863 mov eax, dword ptr [ecx]
00e0d865 mov edx, dword ptr [eax + 0x14]
00e0d868 jmp edx
00e0d86a int3 
00e0d86b int3 
00e0d86c int3 
00e0d86d int3 
00e0d86e int3 
00e0d86f int3 
00e0d870 mov ecx, dword ptr [ecx + 4]
00e0d873 mov eax, dword ptr [ecx]
00e0d875 mov eax, dword ptr [eax + 0x18]
00e0d878 jmp eax
00e0d87a int3 
00e0d87b int3 
00e0d87c int3 
00e0d87d int3 
00e0d87e int3 
00e0d87f int3 
00e0d880 mov ecx, dword ptr [ecx + 4]
00e0d883 mov eax, dword ptr [ecx]
00e0d885 mov eax, dword ptr [eax + 0x1c]
00e0d888 jmp eax
00e0d88a int3 
00e0d88b int3 
00e0d88c int3 
00e0d88d int3 
00e0d88e int3 
00e0d88f int3 
00e0d890 mov ecx, dword ptr [ecx + 4]
00e0d893 mov eax, dword ptr [ecx]
00e0d895 mov eax, dword ptr [eax + 0x20]
00e0d898 jmp eax
00e0d89a int3 
00e0d89b int3 
00e0d89c int3 
00e0d89d int3 
00e0d89e int3 
00e0d89f int3 
00e0d8a0 mov ecx, dword ptr [ecx + 4]
00e0d8a3 mov eax, dword ptr [ecx]
00e0d8a5 mov edx, dword ptr [eax + 0x24]
00e0d8a8 jmp edx
00e0d8aa int3 
00e0d8ab int3 
00e0d8ac int3 
00e0d8ad int3 
00e0d8ae int3 
00e0d8af int3 
00e0d8b0 mov ecx, dword ptr [ecx + 4]
00e0d8b3 mov eax, dword ptr [ecx]
00e0d8b5 mov edx, dword ptr [eax + 0x28]
00e0d8b8 jmp edx
00e0d8ba int3 
00e0d8bb int3 
00e0d8bc int3 
00e0d8bd int3 
00e0d8be int3 
00e0d8bf int3 
00e0d8c0 mov ecx, dword ptr [ecx + 4]
00e0d8c3 mov eax, dword ptr [ecx]
00e0d8c5 mov eax, dword ptr [eax + 0x2c]
00e0d8c8 push esi
00e0d8c9 mov esi, dword ptr [esp + 8]
00e0d8cd push esi
00e0d8ce call eax
00e0d8d0 pop esi
00e0d8d1 ret 4
00e0d8d4 int3 
00e0d8d5 int3 
00e0d8d6 int3 
00e0d8d7 int3 
00e0d8d8 int3 
00e0d8d9 int3 
00e0d8da int3 
00e0d8db int3 
00e0d8dc int3 
00e0d8dd int3 
00e0d8de int3 
00e0d8df int3 
00e0d8e0 mov ecx, dword ptr [ecx + 4]
00e0d8e3 mov eax, dword ptr [ecx]
00e0d8e5 mov edx, dword ptr [eax + 0x30]
00e0d8e8 jmp edx
00e0d8ea int3 
00e0d8eb int3 
00e0d8ec int3 
00e0d8ed int3 
00e0d8ee int3 
00e0d8ef int3 
00e0d8f0 mov ecx, dword ptr [ecx + 4]
00e0d8f3 mov eax, dword ptr [ecx]
00e0d8f5 mov eax, dword ptr [eax + 0x34]
00e0d8f8 jmp eax
00e0d8fa int3 
00e0d8fb int3 
00e0d8fc int3 
00e0d8fd int3 
00e0d8fe int3 
00e0d8ff int3 
00e0d900 push ebp
00e0d901 push esi
00e0d902 push edi
00e0d903 mov ebp, ecx
00e0d905 call 0xda3620
00e0d90a mov dword ptr [eax + 0x21e88], 0xffffffff
00e0d914 call 0xda3620
00e0d919 mov dword ptr [eax + 0x21d30], 1
00e0d923 call 0xda3620
00e0d928 xor edi, edi
00e0d92a mov dword ptr [eax + 0x21e80], edi
00e0d930 call 0xda3620
00e0d935 mov dword ptr [eax + 0x21e84], edi
00e0d93b call 0xda3620
00e0d940 mov dword ptr [eax + 0x21e94], edi
00e0d946 call 0xda3620
00e0d94b mov dword ptr [eax + 0x21e98], edi
00e0d951 call 0xda3620
00e0d956 mov dword ptr [eax + 0x21e8c], edi
00e0d95c call 0xda3620
00e0d961 mov dword ptr [eax + 0x21e90], edi
00e0d967 mov ecx, dword ptr [ebp + 0x864]
00e0d96d mov eax, dword ptr [ecx]
00e0d96f mov edx, dword ptr [eax + 0x14]
00e0d972 call edx
00e0d974 mov esi, eax
00e0d976 call 0xda3620
00e0d97b mov dword ptr [eax + 0x21e80], esi
00e0d981 call 0xda3620
00e0d986 call 0xda3620
00e0d98b cmp dword ptr [eax + 0x306c], edi
00e0d991 je 0xe0d9ba
00e0d993 call 0xda3620
00e0d998 lea esi, [eax + 0x306c]
00e0d99e call 0xda3620
00e0d9a3 mov ecx, dword ptr [eax + 0x21e80]
00e0d9a9 mov eax, dword ptr [esi]
00e0d9ab call eax
00e0d9ad mov esi, eax
00e0d9af call 0xda3620
00e0d9b4 mov dword ptr [eax + 0x21e80], esi
00e0d9ba push ebx
00e0d9bb call 0xda3620
00e0d9c0 mov dword ptr [eax + 0x21e8c], edi
00e0d9c6 call 0xda3620
00e0d9cb lea esi, [eax + 0x21e80]
00e0d9d1 call 0xda3620
00e0d9d6 mov ecx, dword ptr [esi]
00e0d9d8 mov dword ptr [eax + 0x21e94], ecx
00e0d9de mov esi, dword ptr [ebp + 0x860]
00e0d9e4 neg esi
00e0d9e6 sbb esi, esi
00e0d9e8 and esi, 0xfffffffe
00e0d9eb call 0xda3620
00e0d9f0 lea edx, [esi + 2]
00e0d9f3 mov ecx, eax
00e0d9f5 call 0xddaa90
00e0d9fa mov dword ptr [ebp], 1
00e0da01 call 0xda3620
00e0da06 mov ebx, dword ptr [0xec20dc]
00e0da0c mov esi, eax
00e0da0e call ebx
00e0da10 cmp eax, dword ptr [esi + 0x21d38]
00e0da16 jne 0xe0da20
00e0da18 mov esi, dword ptr [esi + 0x21e94]
00e0da1e jmp 0xe0da38
00e0da20 call ebx
00e0da22 cmp eax, dword ptr [esi + 0x21e88]
00e0da28 jne 0xe0da32
00e0da2a mov esi, dword ptr [esi + 0x21e8c]
00e0da30 jmp 0xe0da38
00e0da32 mov esi, dword ptr [esi + 0x21e80]
00e0da38 cmp esi, edi
00e0da3a je 0xe0dacc
00e0da40 call 0xda3620
00e0da45 mov esi, eax
00e0da47 call ebx
00e0da49 cmp eax, dword ptr [esi + 0x21d38]
00e0da4f jne 0xe0da59
00e0da51 mov edi, dword ptr [esi + 0x21e94]
00e0da57 jmp 0xe0da71
00e0da59 call ebx
00e0da5b cmp eax, dword ptr [esi + 0x21e88]
00e0da61 jne 0xe0da6b
00e0da63 mov edi, dword ptr [esi + 0x21e8c]
00e0da69 jmp 0xe0da71
00e0da6b mov edi, dword ptr [esi + 0x21e80]
00e0da71 call 0xda3620
00e0da76 mov esi, eax
00e0da78 call ebx
00e0da7a cmp eax, dword ptr [esi + 0x21d38]
00e0da80 jne 0xe0da8a
00e0da82 mov esi, dword ptr [esi + 0x21e94]
00e0da88 jmp 0xe0daa2
00e0da8a call ebx
00e0da8c cmp eax, dword ptr [esi + 0x21e88]
00e0da92 jne 0xe0da9c
00e0da94 mov esi, dword ptr [esi + 0x21e8c]
00e0da9a jmp 0xe0daa2
00e0da9c mov esi, dword ptr [esi + 0x21e80]
00e0daa2 mov esi, dword ptr [esi]
00e0daa4 call 0xda3620
00e0daa9 mov edx, dword ptr [ebp]
00e0daac add eax, 0x21d3c
00e0dab1 push eax
00e0dab2 push edx
00e0dab3 call 0xda3a90
00e0dab8 mov eax, dword ptr [eax + 0x50]
00e0dabb mov ecx, dword ptr [esi + 0x38]
00e0dabe push eax
00e0dabf push edi
00e0dac0 call ecx
00e0dac2 xor edi, edi
00e0dac4 test eax, eax
00e0dac6 je 0xe0db8f
00e0dacc push 0x130
00e0dad1 call 0xda3620
00e0dad6 lea ecx, [eax + 0x21d3c]
00e0dadc xor dl, dl
00e0dade call 0xd95820
00e0dae3 call 0xda3620
00e0dae8 mov dword ptr [eax + 0x21e28], 0x3ff
00e0daf2 call 0xda3620
00e0daf7 mov esi, 0x300
00e0dafc mov dword ptr [eax + 0x21e08], esi
00e0db02 call 0xda3620
00e0db07 mov dword ptr [eax + 0x21e00], esi
00e0db0d call 0xda3620
00e0db12 mov esi, 0x4000
00e0db17 mov dword ptr [eax + 0x21e04], esi
00e0db1d call 0xda3620
00e0db22 movss xmm0, dword ptr [0xec74d0]
00e0db2a movss dword ptr [eax + 0x21dec], xmm0
00e0db32 call 0xda3620
00e0db37 mov dword ptr [eax + 0x21df0], 0x10000
00e0db41 call 0xda3620
00e0db46 mov dword ptr [eax + 0x21dd4], 0x40
00e0db50 call 0xda3620
00e0db55 mov dword ptr [eax + 0x21df8], 0x40
00e0db5f call 0xda3620
00e0db64 mov dword ptr [eax + 0x21d94], esi
00e0db6a call 0xda3620
00e0db6f mov dword ptr [eax + 0x21d98], esi
00e0db75 call 0xda3620
00e0db7a mov dword ptr [eax + 0x21d9c], esi
00e0db80 call 0xda3620
00e0db85 mov dword ptr [eax + 0x21da8], 8
00e0db8f call 0xda3620
00e0db94 mov esi, eax
00e0db96 call ebx
00e0db98 cmp eax, dword ptr [esi + 0x21d38]
00e0db9e jne 0xe0dba8
00e0dba0 mov esi, dword ptr [esi + 0x21e94]
00e0dba6 jmp 0xe0dbc0
00e0dba8 call ebx
00e0dbaa cmp eax, dword ptr [esi + 0x21e88]
00e0dbb0 jne 0xe0dbba
00e0dbb2 mov esi, dword ptr [esi + 0x21e8c]
00e0dbb8 jmp 0xe0dbc0
00e0dbba mov esi, dword ptr [esi + 0x21e80]
00e0dbc0 cmp esi, edi
00e0dbc2 je 0xe0dc43
00e0dbc4 call 0xda3620
00e0dbc9 mov esi, eax
00e0dbcb call ebx
00e0dbcd cmp eax, dword ptr [esi + 0x21d38]
00e0dbd3 jne 0xe0dbdd
00e0dbd5 mov edi, dword ptr [esi + 0x21e94]
00e0dbdb jmp 0xe0dbf5
00e0dbdd call ebx
00e0dbdf cmp eax, dword ptr [esi + 0x21e88]
00e0dbe5 jne 0xe0dbef
00e0dbe7 mov edi, dword ptr [esi + 0x21e8c]
00e0dbed jmp 0xe0dbf5
00e0dbef mov edi, dword ptr [esi + 0x21e80]
00e0dbf5 call 0xda3620
00e0dbfa mov esi, eax
00e0dbfc call ebx
00e0dbfe cmp eax, dword ptr [esi + 0x21d38]
00e0dc04 jne 0xe0dc0e
00e0dc06 mov esi, dword ptr [esi + 0x21e94]
00e0dc0c jmp 0xe0dc26
00e0dc0e call ebx
00e0dc10 cmp eax, dword ptr [esi + 0x21e88]
00e0dc16 jne 0xe0dc20
00e0dc18 mov esi, dword ptr [esi + 0x21e8c]
00e0dc1e jmp 0xe0dc26
00e0dc20 mov esi, dword ptr [esi + 0x21e80]
00e0dc26 mov esi, dword ptr [esi]
00e0dc28 lea edx, [ebp + 0x44]
00e0dc2b push edx
00e0dc2c push 0
00e0dc2e call 0xda3a90
00e0dc33 mov eax, dword ptr [eax + 0x50]
00e0dc36 mov ecx, dword ptr [esi + 0x14]
00e0dc39 push eax
00e0dc3a push edi
00e0dc3b call ecx
00e0dc3d xor edi, edi
00e0dc3f test eax, eax
00e0dc41 je 0xe0dc52
00e0dc43 push 0x44c
00e0dc48 lea ecx, [ebp + 0x44]
00e0dc4b xor dl, dl
00e0dc4d call 0xd95820
00e0dc52 call 0xda3620
00e0dc57 mov esi, eax
00e0dc59 call ebx
00e0dc5b cmp eax, dword ptr [esi + 0x21d38]
00e0dc61 jne 0xe0dc6b
00e0dc63 mov esi, dword ptr [esi + 0x21e94]
00e0dc69 jmp 0xe0dc83
00e0dc6b call ebx
00e0dc6d cmp eax, dword ptr [esi + 0x21e88]
00e0dc73 jne 0xe0dc7d
00e0dc75 mov esi, dword ptr [esi + 0x21e8c]
00e0dc7b jmp 0xe0dc83
00e0dc7d mov esi, dword ptr [esi + 0x21e80]
00e0dc83 cmp esi, edi
00e0dc85 je 0xe0dd15
00e0dc8b call 0xda3620
00e0dc90 mov esi, eax
00e0dc92 call ebx
00e0dc94 cmp eax, dword ptr [esi + 0x21d38]
00e0dc9a jne 0xe0dca4
00e0dc9c mov edi, dword ptr [esi + 0x21e94]
00e0dca2 jmp 0xe0dcbc
00e0dca4 call ebx
00e0dca6 cmp eax, dword ptr [esi + 0x21e88]
00e0dcac jne 0xe0dcb6
00e0dcae mov edi, dword ptr [esi + 0x21e8c]
00e0dcb4 jmp 0xe0dcbc
00e0dcb6 mov edi, dword ptr [esi + 0x21e80]
00e0dcbc call 0xda3620
00e0dcc1 mov esi, eax
00e0dcc3 call ebx
00e0dcc5 cmp eax, dword ptr [esi + 0x21d38]
00e0dccb jne 0xe0dcd5
00e0dccd mov esi, dword ptr [esi + 0x21e94]
00e0dcd3 jmp 0xe0dced
00e0dcd5 call ebx
00e0dcd7 cmp eax, dword ptr [esi + 0x21e88]
00e0dcdd jne 0xe0dce7
00e0dcdf mov esi, dword ptr [esi + 0x21e8c]
00e0dce5 jmp 0xe0dced
00e0dce7 mov esi, dword ptr [esi + 0x21e80]
00e0dced mov edx, dword ptr [ebp]
00e0dcf0 mov esi, dword ptr [esi]
00e0dcf2 push 0x29
00e0dcf4 push 3
00e0dcf6 push 0
00e0dcf8 push 0x15
00e0dcfa push edx
00e0dcfb call 0xda3a90
00e0dd00 mov eax, dword ptr [eax + 0x50]
00e0dd03 mov ecx, dword ptr [esi + 0x28]
00e0dd06 push eax
00e0dd07 push edi
00e0dd08 call ecx
00e0dd0a xor edi, edi
00e0dd0c test eax, eax
00e0dd0e jne 0xe0dd15
00e0dd10 lea esi, [edi + 1]
00e0dd13 jmp 0xe0dd17
00e0dd15 xor esi, esi
00e0dd17 call 0xda3620
00e0dd1c mov dword ptr [eax + 0x21d2c], esi
00e0dd22 call 0xddb760
00e0dd27 test eax, eax
00e0dd29 je 0xe0dd34
00e0dd2b mov dword ptr [ebp + 4], 0x40
00e0dd32 jmp 0xe0dd4a
00e0dd34 mov dword ptr [ebp + 4], 0x20
00e0dd3b call 0xda3620
00e0dd40 mov dword ptr [eax + 0x21e28], 0xffffffff
00e0dd4a mov ecx, dword ptr [ebp + 0x864]
00e0dd50 mov eax, dword ptr [ecx]
00e0dd52 mov eax, dword ptr [eax + 0x18]
00e0dd55 lea esi, [ebp + 0xc]
00e0dd58 mov edx, esi
00e0dd5a call eax
00e0dd5c mov ebx, eax
00e0dd5e call 0xda3620
00e0dd63 mov dword ptr [eax + 0x21e84], ebx
00e0dd69 call 0xda3620
00e0dd6e cmp dword ptr [ebp + 0x864], 0x146abf0
00e0dd78 pop ebx
00e0dd79 je 0xe0dd8e
00e0dd7b push esi
00e0dd7c call 0xda3620
00e0dd81 lea edx, [eax + 0x1f8fc]
00e0dd87 mov ecx, ebp
00e0dd89 call 0xe0bf60
00e0dd8e call 0xda3620
00e0dd93 mov ecx, dword ptr [eax + 0x21d30]
00e0dd99 test ecx, ecx
00e0dd9b jne 0xe0ddc2
00e0dd9d call 0xda3620
00e0dda2 lea esi, [eax + 0x21e84]
00e0dda8 call 0xda3620
00e0ddad mov edx, dword ptr [esi]
00e0ddaf mov dword ptr [eax + 0x21e90], edx
00e0ddb5 call 0xda3620
00e0ddba mov dword ptr [eax + 0x21e98], edi
00e0ddc0 jmp 0xe0dde5
00e0ddc2 call 0xda3620
00e0ddc7 mov dword ptr [eax + 0x21e90], edi
00e0ddcd call 0xda3620
00e0ddd2 lea esi, [eax + 0x21e84]
00e0ddd8 call 0xda3620
00e0dddd mov ecx, dword ptr [esi]
00e0dddf mov dword ptr [eax + 0x21e98], ecx
00e0dde5 mov ecx, ebp
00e0dde7 call 0xe0d3f0
00e0ddec call 0xda3620
00e0ddf1 pop edi
00e0ddf2 pop esi
00e0ddf3 mov edx, 1
00e0ddf8 mov ecx, eax
00e0ddfa pop ebp
00e0ddfb jmp 0xddaa90
00e0de00 sub esp, 0x84
00e0de06 push ebx
00e0de07 push ebp
00e0de08 push esi
00e0de09 mov ebp, ecx
00e0de0b mov esi, dword ptr [ebp + 0x860]
00e0de11 neg esi
00e0de13 sbb esi, esi
00e0de15 push edi
00e0de16 and esi, 0xfffffffe
00e0de19 call 0xda3620
00e0de1e lea edx, [esi + 2]
00e0de21 mov ecx, eax
00e0de23 call 0xddaa90
00e0de28 mov ecx, dword ptr [ebp + 0x864]
00e0de2e mov eax, dword ptr [ecx]
00e0de30 mov edx, dword ptr [eax + 0xc]
00e0de33 call edx
00e0de35 lea edi, [ebp + 0x870]
00e0de3b mov esi, edi
00e0de3d lea ecx, [ecx]
00e0de40 mov eax, dword ptr [esi]
00e0de42 test eax, eax
00e0de44 je 0xe0de54
00e0de46 mov ecx, dword ptr [eax]
00e0de48 mov edx, dword ptr [ecx + 8]
00e0de4b push eax
00e0de4c call edx
00e0de4e mov dword ptr [esi], 0
00e0de54 mov esi, dword ptr [esi + 8]
00e0de57 cmp esi, edi
00e0de59 jne 0xe0de40
00e0de5b call 0xda3620
00e0de60 mov ebx, dword ptr [0xec20dc]
00e0de66 mov esi, eax
00e0de68 call ebx
00e0de6a cmp eax, dword ptr [esi + 0x21d38]
00e0de70 jne 0xe0de7a
00e0de72 mov esi, dword ptr [esi + 0x21e98]
00e0de78 jmp 0xe0de92
00e0de7a call ebx
00e0de7c cmp eax, dword ptr [esi + 0x21e88]
00e0de82 jne 0xe0de8c
00e0de84 mov esi, dword ptr [esi + 0x21e90]
00e0de8a jmp 0xe0de92
00e0de8c mov esi, dword ptr [esi + 0x21e84]
00e0de92 test esi, esi
00e0de94 je 0xe0df05
00e0de96 call 0xda3620
00e0de9b mov esi, eax
00e0de9d call ebx
00e0de9f cmp eax, dword ptr [esi + 0x21d38]
00e0dea5 jne 0xe0deaf
00e0dea7 mov edi, dword ptr [esi + 0x21e98]
00e0dead jmp 0xe0dec7
00e0deaf call ebx
00e0deb1 cmp eax, dword ptr [esi + 0x21e88]
00e0deb7 jne 0xe0dec1
00e0deb9 mov edi, dword ptr [esi + 0x21e90]
00e0debf jmp 0xe0dec7
00e0dec1 mov edi, dword ptr [esi + 0x21e84]
00e0dec7 call 0xda3620
00e0decc mov esi, eax
00e0dece call ebx
00e0ded0 cmp eax, dword ptr [esi + 0x21d38]
00e0ded6 jne 0xe0dee0
00e0ded8 mov esi, dword ptr [esi + 0x21e98]
00e0dede jmp 0xe0def8
00e0dee0 call ebx
00e0dee2 cmp eax, dword ptr [esi + 0x21e88]
00e0dee8 jne 0xe0def2
00e0deea mov esi, dword ptr [esi + 0x21e90]
00e0def0 jmp 0xe0def8
00e0def2 mov esi, dword ptr [esi + 0x21e84]
00e0def8 mov eax, dword ptr [esi]
00e0defa mov ecx, dword ptr [eax + 0x9c]
00e0df00 push 0
00e0df02 push edi
00e0df03 call ecx
00e0df05 mov eax, dword ptr [ebp + 0x864]
00e0df0b cmp eax, 0x146abf0
00e0df10 jne 0xe0df16
00e0df12 xor eax, eax
00e0df14 jmp 0xe0df50
00e0df16 cmp eax, 0x146abf4
00e0df1b jne 0xe0df24
00e0df1d mov eax, 1
00e0df22 jmp 0xe0df50
00e0df24 cmp eax, 0x146abf8
00e0df29 jne 0xe0df32
00e0df2b mov eax, 2
00e0df30 jmp 0xe0df50
00e0df32 cmp eax, 0x146ac00
00e0df37 jne 0xe0df40
00e0df39 mov eax, 3
00e0df3e jmp 0xe0df50
00e0df40 xor edx, edx
00e0df42 cmp eax, 0x146ac08
00e0df47 setne dl
00e0df4a lea eax, [edx - 1]
00e0df4d and eax, 4
00e0df50 jmp dword ptr [eax*4 + 0xe0e290]
00e0df57 call 0xda3620
00e0df5c cmp dword ptr [eax + 0x21d24], 0
00e0df63 jle 0xe0dfeb
00e0df69 cmp dword ptr [eax + 0x21d28], 0
00e0df70 je 0xe0dfeb
00e0df72 mov esi, dword ptr [ebp + 0x850]
00e0df78 call 0xda3a90
00e0df7d push eax
00e0df7e lea edx, [ebp + 0xc]
00e0df81 mov ecx, esi
00e0df83 call 0xe0b650
00e0df88 jmp 0xe0dfeb
00e0df8a lea eax, [ebp + 0xc]
00e0df8d push eax
00e0df8e lea edx, [esp + 0x34]
00e0df92 mov ecx, ebp
00e0df94 call 0xe0bf60
00e0df99 push 0x64
00e0df9b call 0xda3a90
00e0dfa0 mov edx, eax
00e0dfa2 lea ecx, [esp + 0x34]
00e0dfa6 call 0xd95710
00e0dfab test eax, eax
00e0dfad je 0xe0dfeb
00e0dfaf call 0xda3620
00e0dfb4 cmp dword ptr [eax + 0x21d24], 0
00e0dfbb jle 0xe0dfeb
00e0dfbd cmp dword ptr [eax + 0x21d28], 0
00e0dfc4 je 0xe0dfeb
00e0dfc6 push 0x64
00e0dfc8 call 0xda3620
00e0dfcd lea ecx, [eax + 0x1f8fc]
00e0dfd3 lea edx, [esp + 0x34]
00e0dfd7 call 0xd958b0
00e0dfdc call 0xda3620
00e0dfe1 mov dword ptr [eax + 0x21d24], 3
00e0dfeb mov ecx, dword ptr [ebp + 0x864]
00e0dff1 mov edx, dword ptr [ecx]
00e0dff3 mov eax, dword ptr [edx + 0x28]
00e0dff6 call eax
00e0dff8 mov ecx, dword ptr [ebp + 0x2c]
00e0dffb pxor xmm0, xmm0
00e0dfff movq qword ptr [esp + 0x14], xmm0
00e0e005 mov dword ptr [esp + 0x18], ecx
00e0e009 lea edx, [esp + 0x10]
00e0e00d mov ecx, 2
00e0e012 mov dword ptr [esp + 0x10], 0
00e0e01a call 0xe0f630
00e0e01f call 0xda3620
00e0e024 mov esi, eax
00e0e026 call ebx
00e0e028 cmp eax, dword ptr [esi + 0x21d38]
00e0e02e jne 0xe0e038
00e0e030 mov esi, dword ptr [esi + 0x21e98]
00e0e036 jmp 0xe0e050
00e0e038 call ebx
00e0e03a cmp eax, dword ptr [esi + 0x21e88]
00e0e040 jne 0xe0e04a
00e0e042 mov esi, dword ptr [esi + 0x21e90]
00e0e048 jmp 0xe0e050
00e0e04a mov esi, dword ptr [esi + 0x21e84]
00e0e050 test esi, esi
00e0e052 je 0xe0e17e
00e0e058 call 0xda3620
00e0e05d mov esi, eax
00e0e05f call ebx
00e0e061 cmp eax, dword ptr [esi + 0x21d38]
00e0e067 jne 0xe0e071
00e0e069 mov edi, dword ptr [esi + 0x21e98]
00e0e06f jmp 0xe0e089
00e0e071 call ebx
00e0e073 cmp eax, dword ptr [esi + 0x21e88]
00e0e079 jne 0xe0e083
00e0e07b mov edi, dword ptr [esi + 0x21e90]
00e0e081 jmp 0xe0e089
00e0e083 mov edi, dword ptr [esi + 0x21e84]
00e0e089 call 0xda3620
00e0e08e mov esi, eax
00e0e090 call ebx
00e0e092 cmp eax, dword ptr [esi + 0x21d38]
00e0e098 jne 0xe0e0a2
00e0e09a mov esi, dword ptr [esi + 0x21e98]
00e0e0a0 jmp 0xe0e0ba
00e0e0a2 call ebx
00e0e0a4 cmp eax, dword ptr [esi + 0x21e88]
00e0e0aa jne 0xe0e0b4
00e0e0ac mov esi, dword ptr [esi + 0x21e90]
00e0e0b2 jmp 0xe0e0ba
00e0e0b4 mov esi, dword ptr [esi + 0x21e84]
00e0e0ba mov edx, dword ptr [esi]
00e0e0bc mov eax, dword ptr [edx + 0xc]
00e0e0bf push edi
00e0e0c0 call eax
00e0e0c2 cmp eax, 0x88760868
00e0e0c7 je 0xe0e17e
00e0e0cd lea esi, [ebp + 0xc]
00e0e0d0 mov ecx, 0xe
00e0e0d5 lea edi, [esp + 0x30]
00e0e0d9 rep movsd dword ptr es:[edi], dword ptr [esi]
00e0e0db call 0xda3620
00e0e0e0 mov esi, eax
00e0e0e2 call ebx
00e0e0e4 cmp eax, dword ptr [esi + 0x21d38]
00e0e0ea jne 0xe0e0f4
00e0e0ec mov esi, dword ptr [esi + 0x21e98]
00e0e0f2 jmp 0xe0e10c
00e0e0f4 call ebx
00e0e0f6 cmp eax, dword ptr [esi + 0x21e88]
00e0e0fc jne 0xe0e106
00e0e0fe mov esi, dword ptr [esi + 0x21e90]
00e0e104 jmp 0xe0e10c
00e0e106 mov esi, dword ptr [esi + 0x21e84]
00e0e10c call 0xda3620
00e0e111 mov edi, eax
00e0e113 call ebx
00e0e115 cmp eax, dword ptr [edi + 0x21d38]
00e0e11b jne 0xe0e125
00e0e11d mov edi, dword ptr [edi + 0x21e98]
00e0e123 jmp 0xe0e13d
00e0e125 call ebx
00e0e127 cmp eax, dword ptr [edi + 0x21e88]
00e0e12d jne 0xe0e137
00e0e12f mov edi, dword ptr [edi + 0x21e90]
00e0e135 jmp 0xe0e13d
00e0e137 mov edi, dword ptr [edi + 0x21e84]
00e0e13d mov ecx, dword ptr [edi]
00e0e13f mov eax, dword ptr [ecx + 0x40]
00e0e142 lea edx, [esp + 0x30]
00e0e146 push edx
00e0e147 push esi
00e0e148 call eax
00e0e14a xor edx, edx
00e0e14c lea ecx, [edx + 5]
00e0e14f test eax, eax
00e0e151 jne 0xe0e156
00e0e153 lea ecx, [edx + 4]
00e0e156 call 0xe0f630
00e0e15b cmp dword ptr [ebp + 0x860], 0
00e0e162 je 0xe0e17e
00e0e164 push 0
00e0e166 lea ecx, [esp + 0x20]
00e0e16a push ecx
00e0e16b push 0x30000
00e0e170 push 0x10000
00e0e175 call dword ptr [0xec21c4]
00e0e17b add esp, 0x10
00e0e17e mov ecx, ebp
00e0e180 call 0xe0d3f0
00e0e185 cmp dword ptr [0x146abcc], 0
00e0e18c je 0xe0e1b0
00e0e18e call 0xda3620
00e0e193 mov edx, dword ptr [eax + 0x21d34]
00e0e199 mov ecx, dword ptr [edx + 0x864]
00e0e19f mov eax, dword ptr [ecx]
00e0e1a1 mov edx, dword ptr [eax + 0x24]
00e0e1a4 call edx
00e0e1a6 xor edx, edx
00e0e1a8 lea ecx, [edx + 6]
00e0e1ab call 0xe0f630
00e0e1b0 mov dword ptr [esp + 0x28], 0x3c
00e0e1b8 call 0xda3620
00e0e1bd mov esi, eax
00e0e1bf call ebx
00e0e1c1 cmp eax, dword ptr [esi + 0x21d38]
00e0e1c7 jne 0xe0e1d1
00e0e1c9 mov esi, dword ptr [esi + 0x21e98]
00e0e1cf jmp 0xe0e1e9
00e0e1d1 call ebx
00e0e1d3 cmp eax, dword ptr [esi + 0x21e88]
00e0e1d9 jne 0xe0e1e3
00e0e1db mov esi, dword ptr [esi + 0x21e90]
00e0e1e1 jmp 0xe0e1e9
00e0e1e3 mov esi, dword ptr [esi + 0x21e84]
00e0e1e9 test esi, esi
00e0e1eb je 0xe0e262
00e0e1ed call 0xda3620
00e0e1f2 mov esi, eax
00e0e1f4 call ebx
00e0e1f6 cmp eax, dword ptr [esi + 0x21d38]
00e0e1fc jne 0xe0e206
00e0e1fe mov edi, dword ptr [esi + 0x21e98]
00e0e204 jmp 0xe0e21e
00e0e206 call ebx
00e0e208 cmp eax, dword ptr [esi + 0x21e88]
00e0e20e jne 0xe0e218
00e0e210 mov edi, dword ptr [esi + 0x21e90]
00e0e216 jmp 0xe0e21e
00e0e218 mov edi, dword ptr [esi + 0x21e84]
00e0e21e call 0xda3620
00e0e223 mov esi, eax
00e0e225 call ebx
00e0e227 cmp eax, dword ptr [esi + 0x21d38]
00e0e22d jne 0xe0e237
00e0e22f mov esi, dword ptr [esi + 0x21e98]
00e0e235 jmp 0xe0e24f
00e0e237 call ebx
00e0e239 cmp eax, dword ptr [esi + 0x21e88]
00e0e23f jne 0xe0e249
00e0e241 mov esi, dword ptr [esi + 0x21e90]
00e0e247 jmp 0xe0e24f
00e0e249 mov esi, dword ptr [esi + 0x21e84]
00e0e24f mov eax, dword ptr [esi]
00e0e251 mov edx, dword ptr [eax + 0x20]
00e0e254 lea ecx, [esp + 0x20]
00e0e258 push ecx
00e0e259 push 0
00e0e25b push edi
00e0e25c call edx
00e0e25e test eax, eax
00e0e260 jne 0xe0e271
00e0e262 call 0xda3620
00e0e267 mov ecx, dword ptr [esp + 0x28]
00e0e26b mov dword ptr [eax + 0x1f928], ecx
00e0e271 call 0xda3620
00e0e276 mov edx, 1
00e0e27b mov ecx, eax
00e0e27d call 0xddaa90
00e0e282 pop edi
00e0e283 pop esi
00e0e284 pop ebp
00e0e285 pop ebx
00e0e286 add esp, 0x84
00e0e28c ret 
00e0e28d lea ecx, [ecx]
00e0e290 push edi
00e0e291 fnstsw ax
00e0e293 add byte ptr [edi - 0x21], dl
00e0e296 loopne 0xe0e298
00e0e298 mov bl, bh
00e0e29a loopne 0xe0e29c
00e0e29c mov bl, bh
00e0e29e loopne 0xe0e2a0
00e0e2a0 mov bl, bh
00e0e2a2 loopne 0xe0e2a4
00e0e2a4 int3 
00e0e2a5 int3 
00e0e2a6 int3 
00e0e2a7 int3 
00e0e2a8 int3 
00e0e2a9 int3 
00e0e2aa int3 
00e0e2ab int3 
00e0e2ac int3 
00e0e2ad int3 
00e0e2ae int3 
00e0e2af int3 
00e0e2b0 sub esp, 0x48
00e0e2b3 push ebx
00e0e2b4 push ebp
00e0e2b5 push esi
00e0e2b6 push edi
00e0e2b7 mov ebp, edx
00e0e2b9 mov ebx, ecx
00e0e2bb call dword ptr [0xec22c4]
00e0e2c1 mov dword ptr [esp + 0x14], eax
00e0e2c5 call 0xda3a90
00e0e2ca push eax
00e0e2cb lea edx, [ebx + 0xc]
00e0e2ce xor ecx, ecx
00e0e2d0 call 0xe0b650
00e0e2d5 mov esi, dword ptr [ebx + 0xc]
00e0e2d8 mov edi, dword ptr [ebx + 0x10]
00e0e2db pxor xmm0, xmm0
00e0e2df xor eax, eax
00e0e2e1 movq qword ptr [esp + 0x30], xmm0
00e0e2e7 movq qword ptr [esp + 0x38], xmm0
00e0e2ed movq qword ptr [esp + 0x40], xmm0
00e0e2f3 movq qword ptr [esp + 0x48], xmm0
00e0e2f9 movq qword ptr [esp + 0x50], xmm0
00e0e2ff mov dword ptr [esp + 0x30], 0x40
00e0e307 mov dword ptr [esp + 0x34], 0xe0b860
00e0e30f mov dword ptr [esp + 0x38], eax
00e0e313 mov dword ptr [esp + 0x3c], eax
00e0e317 call 0xde3ac0
00e0e31c mov eax, dword ptr [eax + 8]
00e0e31f mov dword ptr [esp + 0x40], eax
00e0e323 call 0xda3620
00e0e328 cmp dword ptr [eax + 0x3070], 0
00e0e32f je 0xe0e342
00e0e331 call 0xda3620
00e0e336 mov ecx, dword ptr [eax + 0x3070]
00e0e33c mov dword ptr [esp + 0x44], ecx
00e0e340 jmp 0xe0e353
00e0e342 push 0x7f00
00e0e347 push 0
00e0e349 call dword ptr [0xec2304]
00e0e34f mov dword ptr [esp + 0x44], eax
00e0e353 push 0x7f00
00e0e358 push 0
00e0e35a call dword ptr [0xec22c0]
00e0e360 push 4
00e0e362 mov dword ptr [esp + 0x4c], eax
00e0e366 call dword ptr [0xec2048]
00e0e36c mov dword ptr [esp + 0x4c], eax
00e0e370 mov dword ptr [esp + 0x50], 0x213d8fc
00e0e378 call 0xe0c360
00e0e37d lea edx, [esp + 0x30]
00e0e381 push edx
00e0e382 mov dword ptr [esp + 0x58], eax
00e0e386 call dword ptr [0xec2300]
00e0e38c xor ecx, ecx
00e0e38e cmp cx, ax
00e0e391 je 0xe0e435
00e0e397 mov edx, dword ptr [0x146abd4]
00e0e39d mov eax, dword ptr [0x146abd0]
00e0e3a2 pxor xmm0, xmm0
00e0e3a6 mov dword ptr [esp + 0x1c], edx
00e0e3aa mov dword ptr [esp + 0x18], eax
00e0e3ae movq qword ptr [esp + 0x20], xmm0
00e0e3b4 movq qword ptr [esp + 0x28], xmm0
00e0e3ba call 0xda3620
00e0e3bf cmp dword ptr [eax + 0x3074], 0
00e0e3c6 jne 0xe0e3d3
00e0e3c8 call 0xe0c360
00e0e3cd mov dword ptr [esp + 0x10], eax
00e0e3d1 jmp 0xe0e3e2
00e0e3d3 call 0xda3620
00e0e3d8 mov ecx, dword ptr [eax + 0x3074]
00e0e3de mov dword ptr [esp + 0x10], ecx
00e0e3e2 call 0xde3ac0
00e0e3e7 mov eax, dword ptr [eax + 8]
00e0e3ea mov edx, dword ptr [esp + 0x14]
00e0e3ee sub edi, dword ptr [esp + 0x24]
00e0e3f2 sub esi, dword ptr [esp + 0x20]
00e0e3f6 mov ecx, dword ptr [esp + 0x18]
00e0e3fa push 0
00e0e3fc push eax
00e0e3fd mov eax, dword ptr [esp + 0x64]
00e0e401 push 0
00e0e403 push edx
00e0e404 mov edx, dword ptr [esp + 0x20]
00e0e408 push edi
00e0e409 push esi
00e0e40a push eax
00e0e40b push ebp
00e0e40c push ecx
00e0e40d push edx
00e0e40e call 0xe0c360
00e0e413 push eax
00e0e414 mov eax, dword ptr [esp + 0x48]
00e0e418 push eax
00e0e419 call dword ptr [0xec2354]
00e0e41f mov dword ptr [ebx + 0x850], eax
00e0e425 test eax, eax
00e0e427 je 0xe0e435
00e0e429 mov edx, 1
00e0e42e mov ecx, ebx
00e0e430 call 0xe0c420
00e0e435 pop edi
00e0e436 pop esi
00e0e437 pop ebp
00e0e438 pop ebx
00e0e439 add esp, 0x48
00e0e43c ret 4
00e0e43f int3 
00e0e440 mov eax, dword ptr [edx + 0xc]
00e0e443 push esi
00e0e444 mov esi, ecx
00e0e446 jmp dword ptr [eax*4 + 0xe0e494]
00e0e44d call 0xe0c730
00e0e452 xor eax, eax
00e0e454 pop esi
00e0e455 ret 
00e0e456 xor edx, edx
00e0e458 lea ecx, [edx + 3]
00e0e45b call 0xe0f630
00e0e460 mov ecx, dword ptr [esi + 0x864]
00e0e466 mov edx, dword ptr [ecx]
00e0e468 mov eax, dword ptr [edx + 0x30]
00e0e46b call eax
00e0e46d xor eax, eax
00e0e46f pop esi
00e0e470 ret 
00e0e471 call 0xe0d900
00e0e476 xor eax, eax
00e0e478 pop esi
00e0e479 ret 
00e0e47a call 0xe0c280
00e0e47f xor eax, eax
00e0e481 pop esi
00e0e482 ret 
00e0e483 mov ecx, dword ptr [esi + 0x864]
00e0e489 mov edx, dword ptr [ecx]
00e0e48b mov eax, dword ptr [edx + 0x48]
00e0e48e call eax
00e0e490 xor eax, eax
00e0e492 pop esi
00e0e493 ret 
00e0e494 nop 
00e0e495 in al, 0xe0
00e0e497 add byte ptr [eax - 0x6fff1f1c], dl
00e0e49d in al, 0xe0
00e0e49f add byte ptr [ebp - 0x1c], cl
00e0e4a2 loopne 0xe0e4a4
00e0e4a4 push esi
00e0e4a5 in al, 0xe0
00e0e4a7 add byte ptr [ecx - 0x1c], dh
00e0e4aa loopne 0xe0e4ac
00e0e4ac jp 0xe0e492
00e0e4ae loopne 0xe0e4b0
00e0e4b0 and esp, 0xffffffe0
00e0e4b3 add byte ptr [eax - 0x33ff1f1c], dl
00e0e4b9 int3 
00e0e4ba int3 
00e0e4bb int3 
00e0e4bc int3 
00e0e4bd int3 
00e0e4be int3 
00e0e4bf int3 
00e0e4c0 push ebp
00e0e4c1 mov ebp, esp
00e0e4c3 and esp, 0xfffffff8
00e0e4c6 sub esp, 0x20
00e0e4c9 push ebx
00e0e4ca push ebp
00e0e4cb push esi
00e0e4cc push edi
00e0e4cd push 0
00e0e4cf lea eax, [esp + 0x18]
00e0e4d3 push eax
00e0e4d4 push 0x30000
00e0e4d9 push 0x20000
00e0e4de mov edi, ecx
00e0e4e0 call dword ptr [0xec21c4]
00e0e4e6 add esp, 0x10
00e0e4e9 call dword ptr [0xec20dc]
00e0e4ef mov esi, eax
00e0e4f1 call 0xda3620
00e0e4f6 mov dword ptr [eax + 0x21d38], esi
00e0e4fc mov dword ptr [esp + 0x10], 0
00e0e504 mov ecx, dword ptr [edi + 0x864]
00e0e50a mov eax, dword ptr [ecx]
00e0e50c mov eax, dword ptr [eax + 0x34]
00e0e50f lea edx, [edi + 0x944]
00e0e515 call eax
00e0e517 mov dword ptr [edi + 0x940], eax
00e0e51d call 0xda3620
00e0e522 cmp dword ptr [eax + 0x21d24], 0
00e0e529 jle 0xe0e57d
00e0e52b cmp dword ptr [edi + 0x860], 0
00e0e532 jne 0xe0e57d
00e0e534 call 0xd96820
00e0e539 cmp dword ptr [0x146abcc], 0
00e0e540 mov ebx, eax
00e0e542 mov ebp, edx
00e0e544 je 0xe0e568
00e0e546 call 0xda3620
00e0e54b mov ecx, dword ptr [eax + 0x21d34]
00e0e551 mov ecx, dword ptr [ecx + 0x864]
00e0e557 mov edx, dword ptr [ecx]
00e0e559 mov eax, dword ptr [edx + 0x24]
00e0e55c call eax
00e0e55e xor edx, edx
00e0e560 lea ecx, [edx + 6]
00e0e563 call 0xe0f630
00e0e568 mov esi, dword ptr [edi + 0x938]
00e0e56e call 0xd96820
00e0e573 sub eax, ebx
00e0e575 sbb edx, ebp
00e0e577 add dword ptr [esi + 0x28], eax
00e0e57a adc dword ptr [esi + 0x2c], edx
00e0e57d call 0xda3620
00e0e582 mov esi, dword ptr [eax + 0x21d18]
00e0e588 call 0xda3620
00e0e58d mov ecx, dword ptr [eax + 0x21d14]
00e0e593 cmp esi, ecx
00e0e595 je 0xe0e62e
00e0e59b test esi, esi
00e0e59d je 0xe0e5b8
00e0e59f push 1
00e0e5a1 call dword ptr [0xec22e8]
00e0e5a7 call 0xda3620
00e0e5ac mov dword ptr [eax + 0x21d14], 1
00e0e5b6 jmp 0xe0e62e
00e0e5b8 mov eax, dword ptr [edi + 0x850]
00e0e5be test eax, eax
00e0e5c0 je 0xe0e62e
00e0e5c2 lea edx, [esp + 0x20]
00e0e5c6 push edx
00e0e5c7 push eax
00e0e5c8 call dword ptr [0xec22f4]
00e0e5ce test eax, eax
00e0e5d0 je 0xe0e62e
00e0e5d2 lea eax, [esp + 0x18]
00e0e5d6 push eax
00e0e5d7 call dword ptr [0xec22f0]
00e0e5dd test eax, eax
00e0e5df je 0xe0e62e
00e0e5e1 mov edx, dword ptr [edi + 0x850]
00e0e5e7 lea ecx, [esp + 0x18]
00e0e5eb push ecx
00e0e5ec push edx
00e0e5ed call dword ptr [0xec22f8]
00e0e5f3 test eax, eax
00e0e5f5 je 0xe0e62e
00e0e5f7 mov eax, dword ptr [esp + 0x18]
00e0e5fb cmp eax, dword ptr [esp + 0x20]
00e0e5ff jl 0xe0e62e
00e0e601 cmp eax, dword ptr [esp + 0x28]
00e0e605 jg 0xe0e62e
00e0e607 mov eax, dword ptr [esp + 0x1c]
00e0e60b cmp eax, dword ptr [esp + 0x24]
00e0e60f jl 0xe0e62e
00e0e611 cmp eax, dword ptr [esp + 0x2c]
00e0e615 jg 0xe0e62e
00e0e617 push 0
00e0e619 call dword ptr [0xec22e8]
00e0e61f call 0xda3620
00e0e624 mov dword ptr [eax + 0x21d14], 0
00e0e62e lea ecx, [edi + 0x4dc]
00e0e634 call 0xda1c90
00e0e639 lea ecx, [edi + 0x4c4]
00e0e63f call 0xda1d90
00e0e644 mov esi, dword ptr [edi + 0x500]
00e0e64a lea eax, [edi + 0x500]
00e0e650 cmp esi, eax
00e0e652 jne 0xe0e658
00e0e654 xor esi, esi
00e0e656 jmp 0xe0e689
00e0e658 mov eax, dword ptr [esi]
00e0e65a mov ecx, dword ptr [esi + 4]
00e0e65d mov dword ptr [ecx], eax
00e0e65f mov edx, dword ptr [esi + 4]
00e0e662 mov eax, dword ptr [esi]
00e0e664 mov dword ptr [eax + 4], edx
00e0e667 mov dword ptr [esi], esi
00e0e669 mov dword ptr [esi + 4], esi
00e0e66c mov dword ptr [esi + 8], 2
00e0e673 call 0xd96820
00e0e678 lea ecx, [edi + 0x4d0]
00e0e67e mov dword ptr [esi + 0x18], eax
00e0e681 mov dword ptr [esi + 0x1c], edx
00e0e684 call 0xda1d90
00e0e689 lea ecx, [edi + 0x4dc]
00e0e68f call 0xda1cb0
00e0e694 test esi, esi
00e0e696 jne 0xe0e71f
00e0e69c cmp dword ptr [edi + 0x860], esi
00e0e6a2 jne 0xe0e6ec
00e0e6a4 call 0xd96820
00e0e6a9 mov ebx, eax
00e0e6ab mov ebp, edx
00e0e6ad cmp dword ptr [0x146abcc], esi
00e0e6b3 je 0xe0e6d7
00e0e6b5 call 0xda3620
00e0e6ba mov ecx, dword ptr [eax + 0x21d34]
00e0e6c0 mov ecx, dword ptr [ecx + 0x864]
00e0e6c6 mov edx, dword ptr [ecx]
00e0e6c8 mov eax, dword ptr [edx + 0x24]
00e0e6cb call eax
00e0e6cd xor edx, edx
00e0e6cf lea ecx, [esi + 6]
00e0e6d2 call 0xe0f630
00e0e6d7 mov esi, dword ptr [edi + 0x938]
00e0e6dd call 0xd96820
00e0e6e2 sub eax, ebx
00e0e6e4 sbb edx, ebp
00e0e6e6 add dword ptr [esi + 0x28], eax
00e0e6e9 adc dword ptr [esi + 0x2c], edx
00e0e6ec call 0xd96820
00e0e6f1 mov ebp, edx
00e0e6f3 mov edx, 0x2710
00e0e6f8 lea ecx, [edi + 0x4c4]
00e0e6fe mov ebx, eax
00e0e700 call 0xda1d00
00e0e705 mov esi, dword ptr [edi + 0x938]
00e0e70b call 0xd96820
00e0e710 sub eax, ebx
00e0e712 sbb edx, ebp
00e0e714 add dword ptr [esi + 0x20], eax
00e0e717 adc dword ptr [esi + 0x24], edx
00e0e71a jmp 0xe0e7d2
00e0e71f cmp dword ptr [esi + 0xc], 8
00e0e723 jne 0xe0e730
00e0e725 call 0xda3620
00e0e72a mov ecx, dword ptr [eax + 0x308c]
00e0e730 mov eax, dword ptr [esi + 0xc]
00e0e733 jmp dword ptr [eax*4 + 0xe0e7e8]
00e0e73a mov dword ptr [esp + 0x10], 1
00e0e742 jmp 0xe0e79b
00e0e744 jmp dword ptr [eax*4 + 0xe0e80c]
00e0e74b mov ecx, edi
00e0e74d call 0xe0c730
00e0e752 jmp 0xe0e79b
00e0e754 xor edx, edx
00e0e756 lea ecx, [edx + 3]
00e0e759 call 0xe0f630
00e0e75e mov ecx, dword ptr [edi + 0x864]
00e0e764 mov edx, dword ptr [ecx]
00e0e766 mov eax, dword ptr [edx + 0x30]
00e0e769 call eax
00e0e76b jmp 0xe0e79b
00e0e76d mov ecx, edi
00e0e76f call 0xe0d900
00e0e774 jmp 0xe0e79b
00e0e776 mov ecx, edi
00e0e778 call 0xe0c280
00e0e77d jmp 0xe0e79b
00e0e77f mov ecx, dword ptr [edi + 0x864]
00e0e785 mov edx, dword ptr [ecx]
00e0e787 mov eax, dword ptr [edx + 0x48]
00e0e78a call eax
00e0e78c jmp 0xe0e79b
00e0e78e mov edx, esi
00e0e790 mov ecx, edi
00e0e792 call 0xe0d1a0
00e0e797 test eax, eax
00e0e799 jne 0xe0e7d2
00e0e79b lea ecx, [edi + 0x4dc]
00e0e7a1 call 0xda1c90
00e0e7a6 call 0xd96820
00e0e7ab mov dword ptr [esi + 0x24], edx
00e0e7ae mov dword ptr [esi + 0x20], eax
00e0e7b1 push 0
00e0e7b3 lea ecx, [edi + 0x4d0]
00e0e7b9 xor edx, edx
00e0e7bb mov dword ptr [esi + 8], 3
00e0e7c2 call 0xda1d60
00e0e7c7 lea ecx, [edi + 0x4dc]
00e0e7cd call 0xda1cb0
00e0e7d2 cmp dword ptr [esp + 0x10], 0
00e0e7d7 je 0xe0e504
00e0e7dd pop edi
00e0e7de xor eax, eax
00e0e7e0 pop esi
00e0e7e1 pop ebp
00e0e7e2 pop ebx
00e0e7e3 mov esp, ebp
00e0e7e5 pop ebp
00e0e7e6 ret 
00e0e7e7 nop 
00e0e7e8 mov fs, edi
00e0e7ea loopne 0xe0e7ec
00e0e7ec wait 
00e0e7ed out 0xe0, eax
00e0e7ef add byte ptr [edx], bh
00e0e7f1 out 0xe0, eax
00e0e7f3 add byte ptr [edi - 0x20], al
00e0e7f7 add byte ptr [edi - 0x20], al
00e0e7fb add byte ptr [edi - 0x20], al
00e0e7ff add byte ptr [edi - 0x20], al
00e0e803 add byte ptr [edi - 0x20], al
00e0e807 add byte ptr [esi - 0x64ff1f19], cl
00e0e80d out 0xe0, eax
00e0e80f add byte ptr [ebx - 0x64ff1f19], bl
00e0e815 out 0xe0, eax
00e0e817 add byte ptr [ebx - 0x19], cl
00e0e81a loopne 0xe0e81c
00e0e81c push esp
00e0e81d out 0xe0, eax
00e0e81f add byte ptr [ebp - 0x19], ch
00e0e822 loopne 0xe0e824
00e0e824 jbe 0xe0e80d
00e0e826 loopne 0xe0e828
00e0e828 jg 0xe0e811
00e0e82a loopne 0xe0e82c
00e0e82c wait 
00e0e82d out 0xe0, eax
00e0e82f add byte ptr [ebx + 0x56042444], cl
00e0e835 push eax
00e0e836 mov esi, edx
00e0e838 call 0xda3620
00e0e83d mov ecx, dword ptr [eax + 0x21d34]
00e0e843 mov edx, esi
00e0e845 call 0xe0e2b0
00e0e84a pop esi
00e0e84b ret 4
00e0e84e int3 
00e0e84f int3 
00e0e850 call 0xda3620
00e0e855 mov ecx, dword ptr [eax + 0x21d34]
00e0e85b jmp 0xe0de00
00e0e860 push ebx
00e0e861 push esi
00e0e862 mov esi, edx
00e0e864 push edi
00e0e865 mov edi, ecx
00e0e867 mov dword ptr [esi + 8], 1
00e0e86e call 0xd96820
00e0e873 mov dword ptr [esi + 0x10], eax
00e0e876 mov eax, dword ptr [esi + 0xc]
00e0e879 mov dword ptr [esi + 0x14], edx
00e0e87c jmp dword ptr [eax*4 + 0xe0e9b4]
00e0e883 mov ecx, edi
00e0e885 call 0xe0bcf0
00e0e88a cmp dword ptr [eax*4 + 0xfdf264], 0
00e0e892 jne 0xe0e96f
00e0e898 mov dword ptr [esi + 8], 2
00e0e89f call 0xd96820
00e0e8a4 mov dword ptr [esi + 0x18], eax
00e0e8a7 mov dword ptr [esi + 0x1c], edx
00e0e8aa call 0xd96820
00e0e8af mov dword ptr [esi + 0x20], eax
00e0e8b2 mov dword ptr [esi + 0x24], edx
00e0e8b5 mov dword ptr [esi + 8], 3
00e0e8bc pop edi
00e0e8bd pop esi
00e0e8be pop ebx
00e0e8bf ret 
00e0e8c0 mov ecx, edi
00e0e8c2 call 0xe0bcf0
00e0e8c7 cmp dword ptr [eax*4 + 0xfdf264], 0
00e0e8cf jne 0xe0e96f
00e0e8d5 xor edx, edx
00e0e8d7 mov ecx, edi
00e0e8d9 call 0xe0bdc0
00e0e8de mov dword ptr [esi + 8], 2
00e0e8e5 call 0xd96820
00e0e8ea mov dword ptr [esi + 0x18], eax
00e0e8ed mov dword ptr [esi + 0x1c], edx
00e0e8f0 call dword ptr [0xec20dc]
00e0e8f6 mov ebx, eax
00e0e8f8 call 0xda3620
00e0e8fd mov edx, esi
00e0e8ff mov ecx, edi
00e0e901 mov dword ptr [eax + 0x21d38], ebx
00e0e907 call 0xe0d1a0
00e0e90c test eax, eax
00e0e90e jne 0xe0e922
00e0e910 call 0xd96820
00e0e915 mov dword ptr [esi + 0x20], eax
00e0e918 mov dword ptr [esi + 0x24], edx
00e0e91b mov dword ptr [esi + 8], 3
00e0e922 call 0xda3620
00e0e927 pop edi
00e0e928 pop esi
00e0e929 mov dword ptr [eax + 0x21d38], 0xffffffff
00e0e933 pop ebx
00e0e934 ret 
00e0e935 cmp dword ptr [edi + 0x860], 0
00e0e93c je 0xe0e96f
00e0e93e xor edx, edx
00e0e940 mov ecx, edi
00e0e942 call 0xe0bdc0
00e0e947 mov dword ptr [esi + 8], 2
00e0e94e call 0xd96820
00e0e953 mov dword ptr [esi + 0x1c], edx
00e0e956 mov edx, esi
00e0e958 mov ecx, edi
00e0e95a mov dword ptr [esi + 0x18], eax
00e0e95d call 0xe0e440
00e0e962 test eax, eax
00e0e964 jne 0xe0e8bc
00e0e96a jmp 0xe0e8aa
00e0e96f lea ecx, [edi + 0x4dc]
00e0e975 call 0xda1c90
00e0e97a mov ecx, dword ptr [edi + 0x504]
00e0e980 mov dword ptr [esi + 4], ecx
00e0e983 lea edx, [edi + 0x500]
00e0e989 mov dword ptr [esi], edx
00e0e98b mov eax, dword ptr [esi + 4]
00e0e98e mov dword ptr [eax], esi
00e0e990 mov ecx, dword ptr [esi]
00e0e992 mov dword ptr [ecx + 4], esi
00e0e995 push 0
00e0e997 lea ecx, [edi + 0x4c4]
00e0e99d xor edx, edx
00e0e99f call 0xda1d60
00e0e9a4 lea ecx, [edi + 0x4dc]
00e0e9aa pop edi
00e0e9ab pop esi
00e0e9ac pop ebx
00e0e9ad jmp 0xda1cb0
00e0e9b2 mov edi, edi
00e0e9b4 shr al, 0xe0
00e0e9b7 add byte ptr [ebx + 0x6f00e0e8], al
00e0e9bd jmp 0xea15eaa2
00e0e9c2 loopne 0xe0e9c4
00e0e9c4 xor eax, 0x3500e0e9
00e0e9c9 jmp 0xea15eaae
00e0e9ce loopne 0xe0e9d0
00e0e9d0 xor eax, 0xc000e0e9
00e0e9d5 call 0xcdaceaba
00e0e9da int3 
00e0e9db int3 
00e0e9dc int3 
00e0e9dd int3 
00e0e9de int3 
00e0e9df int3 
00e0e9e0 sub esp, 0x28
00e0e9e3 push esi
00e0e9e4 mov esi, ecx
00e0e9e6 push edi
00e0e9e7 lea ecx, [esi + 0x4dc]
00e0e9ed call 0xda1c90
00e0e9f2 mov ecx, dword ptr [esi + 0x500]
00e0e9f8 lea eax, [esi + 0x500]
00e0e9fe cmp ecx, eax
00e0ea00 jne 0xe0ea59
00e0ea02 lea ecx, [esi + 0x4dc]
00e0ea08 call 0xda1cb0
00e0ea0d xor esi, esi
00e0ea0f mov dword ptr [esp + 8], esi
00e0ea13 mov dword ptr [esp + 0xc], esi
00e0ea17 mov dword ptr [esp + 0x10], esi
00e0ea1b mov dword ptr [esp + 0x14], esi
00e0ea1f call 0xda3620
00e0ea24 mov ecx, dword ptr [eax + 0x21d34]
00e0ea2a lea edx, [esp + 8]
00e0ea2e call 0xe0e860
00e0ea33 call 0xda3620
00e0ea38 mov ecx, dword ptr [eax + 0x21d34]
00e0ea3e lea edx, [esp + 8]
00e0ea42 call 0xe0bdc0
00e0ea47 mov edx, dword ptr [esp + 0x10]
00e0ea4b test edx, edx
00e0ea4d je 0xe0ea53
00e0ea4f mov dword ptr [esp + 0x10], esi
00e0ea53 pop edi
00e0ea54 pop esi
00e0ea55 add esp, 0x28
00e0ea58 ret 
00e0ea59 lea ecx, [esi + 0x4d0]
00e0ea5f call 0xda1d90
00e0ea64 lea ecx, [esi + 0x4dc]
00e0ea6a call 0xda1cb0
00e0ea6f pop edi
00e0ea70 lea ecx, [esi + 0x4d0]
00e0ea76 or edx, 0xffffffff
00e0ea79 pop esi
00e0ea7a add esp, 0x28
00e0ea7d jmp 0xda1d00
00e0ea82 int3 
00e0ea83 int3 
00e0ea84 int3 
00e0ea85 int3 
00e0ea86 int3 
00e0ea87 int3 
00e0ea88 int3 
00e0ea89 int3 
00e0ea8a int3 
00e0ea8b int3 
00e0ea8c int3 
00e0ea8d int3 
00e0ea8e int3 
00e0ea8f int3 
00e0ea90 sub esp, 0x28
00e0ea93 push esi
00e0ea94 push edi
00e0ea95 xor edi, edi
00e0ea97 mov dword ptr [esp + 8], edi
00e0ea9b mov dword ptr [esp + 0xc], edi
00e0ea9f mov esi, ecx
00e0eaa1 mov dword ptr [esp + 0x10], edi
00e0eaa5 mov dword ptr [esp + 0x14], edi
00e0eaa9 lea esp, [esp]
00e0eab0 mov eax, dword ptr [esi + 0x528]
00e0eab6 test eax, eax
00e0eab8 jne 0xe0eace
00e0eaba mov ecx, dword ptr [esi + 0x530]
00e0eac0 test ecx, ecx
00e0eac2 jne 0xe0eace
00e0eac4 mov edx, dword ptr [esi + 0x538]
00e0eaca test edx, edx
00e0eacc je 0xe0eb01
00e0eace lea edx, [esp + 8]
00e0ead2 mov ecx, esi
00e0ead4 call 0xe0e860
00e0ead9 lea edx, [esp + 8]
00e0eadd mov ecx, esi
00e0eadf call 0xe0bdc0
00e0eae4 mov dword ptr [esp + 0x10], edi
00e0eae8 call 0xda3620
00e0eaed mov eax, dword ptr [eax + 0x21d1c]
00e0eaf3 test eax, eax
00e0eaf5 je 0xe0eab0
00e0eaf7 mov ecx, dword ptr [esi + 0x538]
00e0eafd test ecx, ecx
00e0eaff jne 0xe0eab0
00e0eb01 xor edx, edx
00e0eb03 mov ecx, esi
00e0eb05 call 0xe0bdc0
00e0eb0a mov edx, dword ptr [esp + 0x10]
00e0eb0e test edx, edx
00e0eb10 je 0xe0eb16
00e0eb12 mov dword ptr [esp + 0x10], edi
00e0eb16 pop edi
00e0eb17 pop esi
00e0eb18 add esp, 0x28
00e0eb1b ret 
00e0eb1c int3 
00e0eb1d int3 
00e0eb1e int3 
00e0eb1f int3 
00e0eb20 sub esp, 0x2c
00e0eb23 push ebx
00e0eb24 push ebp
00e0eb25 push esi
00e0eb26 push edi
00e0eb27 mov edi, ecx
00e0eb29 lea ecx, [edi + 0x540]
00e0eb2f mov dword ptr [esp + 0x10], edx
00e0eb33 call 0xdf4390
00e0eb38 mov esi, eax
00e0eb3a xor ebp, ebp
00e0eb3c cmp esi, ebp
00e0eb3e jne 0xe0eb9f
00e0eb40 call 0xda3620
00e0eb45 mov esi, eax
00e0eb47 call dword ptr [0xec20dc]
00e0eb4d mov ecx, edi
00e0eb4f cmp eax, dword ptr [esi + 0x21d38]
00e0eb55 jne 0xe0eb5e
00e0eb57 call 0xe0bec0
00e0eb5c jmp 0xe0eb8e
00e0eb5e mov dword ptr [esp + 0x14], ebp
00e0eb62 mov dword ptr [esp + 0x18], ebp
00e0eb66 mov dword ptr [esp + 0x1c], ebp
00e0eb6a lea edx, [esp + 0x14]
00e0eb6e mov dword ptr [esp + 0x20], ebp
00e0eb72 call 0xe0e860
00e0eb77 lea edx, [esp + 0x14]
00e0eb7b mov ecx, edi
00e0eb7d call 0xe0bdc0
00e0eb82 mov eax, dword ptr [esp + 0x1c]
00e0eb86 test eax, eax
00e0eb88 je 0xe0eb8e
00e0eb8a mov dword ptr [esp + 0x1c], ebp
00e0eb8e lea ecx, [edi + 0x540]
00e0eb94 call 0xdf4390
00e0eb99 mov esi, eax
00e0eb9b cmp esi, ebp
00e0eb9d je 0xe0eb40
00e0eb9f mov ecx, dword ptr [esp + 0x10]
00e0eba3 mov edx, esi
00e0eba5 call 0xdf42e0
00e0ebaa lea edx, [edi + 0x538]
00e0ebb0 pop edi
00e0ebb1 mov ecx, esi
00e0ebb3 pop esi
00e0ebb4 pop ebp
00e0ebb5 pop ebx
00e0ebb6 add esp, 0x2c
00e0ebb9 jmp 0xdf4380
00e0ebbe int3 
00e0ebbf int3 
00e0ebc0 jmp 0xe0e4c0
00e0ebc5 int3 
00e0ebc6 int3 
00e0ebc7 int3 
00e0ebc8 int3 
00e0ebc9 int3 
00e0ebca int3 
00e0ebcb int3 
00e0ebcc int3 
00e0ebcd int3 
00e0ebce int3 
00e0ebcf int3 
00e0ebd0 mov ecx, dword ptr [esp + 4]
00e0ebd4 call 0xe0e4c0
00e0ebd9 ret 4
00e0ebdc int3 
00e0ebdd int3 
00e0ebde int3 
00e0ebdf int3 
00e0ebe0 mov eax, ecx
00e0ebe2 mov ecx, dword ptr [eax + 0x864]
00e0ebe8 mov dword ptr [eax + 0x84c], 0
00e0ebf2 cmp ecx, 0x146abf0
00e0ebf8 jne 0xe0ebfe
00e0ebfa xor edx, edx
00e0ebfc jmp 0xe0ec3a
00e0ebfe cmp ecx, 0x146abf4
00e0ec04 jne 0xe0ec0d
00e0ec06 mov edx, 1
00e0ec0b jmp 0xe0ec3a
00e0ec0d cmp ecx, 0x146abf8
00e0ec13 jne 0xe0ec1c
00e0ec15 mov edx, 2
00e0ec1a jmp 0xe0ec3a
00e0ec1c cmp ecx, 0x146ac00
00e0ec22 jne 0xe0ec2b
00e0ec24 mov edx, 3
00e0ec29 jmp 0xe0ec3a
00e0ec2b xor edx, edx
00e0ec2d cmp ecx, 0x146ac08
00e0ec33 setne dl
00e0ec36 dec edx
00e0ec37 and edx, 4
00e0ec3a jmp dword ptr [edx*4 + 0xe0ec70]
00e0ec41 push 1
00e0ec43 push 0
00e0ec45 push 0x4000
00e0ec4a push 1
00e0ec4c push eax
00e0ec4d push 0
00e0ec4f lea ecx, [eax + 0x490]
00e0ec55 mov edx, 0x213d8ec
00e0ec5a call 0xda1b90
00e0ec5f ret 
00e0ec60 push esi
00e0ec61 mov esi, dword ptr [ecx]
00e0ec63 push eax
00e0ec64 mov eax, dword ptr [esi + 4]
00e0ec67 mov edx, 0xe0ebc0
00e0ec6c call eax
00e0ec6e pop esi
00e0ec6f ret 
00e0ec70 inc ecx
00e0ec71 in al, dx
00e0ec72 loopne 0xe0ec74
00e0ec74 outsd dx, dword ptr [esi]
00e0ec75 in al, dx
00e0ec76 loopne 0xe0ec78
00e0ec78 pushal 
00e0ec79 in al, dx
00e0ec7a loopne 0xe0ec7c
00e0ec7c outsd dx, dword ptr [esi]
00e0ec7d in al, dx
00e0ec7e loopne 0xe0ec80
00e0ec80 outsd dx, dword ptr [esi]
00e0ec81 in al, dx
00e0ec82 loopne 0xe0ec84
00e0ec84 int3 
00e0ec85 int3 
00e0ec86 int3 
00e0ec87 int3 
00e0ec88 int3 
00e0ec89 int3 
00e0ec8a int3 
00e0ec8b int3 
00e0ec8c int3 
00e0ec8d int3 
00e0ec8e int3 
00e0ec8f int3 
00e0ec90 push ecx
00e0ec91 push esi
00e0ec92 mov esi, ecx
00e0ec94 mov dword ptr [esp + 4], edx
00e0ec98 push edi
00e0ec99 mov edx, 1
00e0ec9e lea ecx, [esi + 0x4c4]
00e0eca4 call 0xda1db0
00e0eca9 test eax, eax
00e0ecab jne 0xe0ecb1
00e0ecad pop edi
00e0ecae pop esi
00e0ecaf pop ecx
00e0ecb0 ret 
00e0ecb1 push ebx
00e0ecb2 xor edx, edx
00e0ecb4 lea ecx, [esi + 0x4d0]
00e0ecba call 0xda1db0
00e0ecbf test eax, eax
00e0ecc1 je 0xe0ecdd
00e0ecc3 lea ecx, [esi + 0x4dc]
00e0ecc9 call 0xda1c40
00e0ecce test eax, eax
00e0ecd0 jne 0xe0ecef
00e0ecd2 lea ecx, [esi + 0x4d0]
00e0ecd8 call 0xda1cd0
00e0ecdd lea ecx, [esi + 0x4c4]
00e0ece3 call 0xda1cd0
00e0ece8 pop ebx
00e0ece9 pop edi
00e0ecea xor eax, eax
00e0ecec pop esi
00e0eced pop ecx
00e0ecee ret 
00e0ecef xor ebx, ebx
00e0ecf1 lea eax, [esi + 0x528]
00e0ecf7 mov dword ptr [esi + 0x940], ebx
00e0ecfd .byte 0x89
00e0ecfe sahf 
00e0ecff inc esp
