
ROOT 96f2bed4 candidate 0xab6b52
00ab6b50 push esi
00ab6b51 push 0x96f2bed4
00ab6b56 push 0xcd193769
00ab6b5b push 0x21340ac
00ab6b60 push 1
00ab6b62 push 0x82229855
00ab6b67 push 1
00ab6b69 mov esi, ecx
00ab6b6b call 0x4da1f0
00ab6b70 xorps xmm0, xmm0
00ab6b73 xor ecx, ecx
00ab6b75 lea eax, [esi + 0x94]
00ab6b7b mov dword ptr [esi], 0xf6863c
00ab6b81 mov dword ptr [esi + 0x3c], ecx
00ab6b84 mov dword ptr [esi + 0x40], ecx
00ab6b87 mov dword ptr [esi + 0x44], ecx
00ab6b8a mov dword ptr [esi + 0x48], ecx
00ab6b8d movss dword ptr [esi + 0x4c], xmm0
00ab6b92 mov dword ptr [esi + 0x78], ecx
00ab6b95 mov dword ptr [esi + 0x90], ecx
00ab6b9b lea edx, [eax + 0x40]
00ab6b9e mov edi, edi
00ab6ba0 mov dword ptr [eax], ecx
00ab6ba2 add eax, 4
00ab6ba5 cmp eax, edx
00ab6ba7 jb 0xab6ba0
00ab6ba9 lea eax, [esi + 0xf8]
00ab6baf lea edx, [eax + 4]
00ab6bb2 mov dword ptr [eax], ecx
00ab6bb4 add eax, 4
00ab6bb7 cmp eax, edx
00ab6bb9 jb 0xab6bb2
00ab6bbb lea eax, [esi + 0x7c]

ROOT 96f2bed4 candidate 0xab7d24
00ab7c90 push esi
00ab7c91 mov esi, ecx
00ab7c93 call 0x4da5d0
00ab7c98 mov ecx, esi
00ab7c9a pop esi
00ab7c9b jmp 0xab7080
00ab7ca0 push esi
00ab7ca1 push edi
00ab7ca2 mov edi, edx
00ab7ca4 mov esi, ecx
00ab7ca6 call 0x4da880
00ab7cab cmp dword ptr [esi + 0x3c], 0
00ab7caf je 0xab7dcc
00ab7cb5 movss xmm0, dword ptr [edi + 0x1aa0]
00ab7cbd addss xmm0, dword ptr [esi + 0x4c]
00ab7cc2 mov eax, dword ptr [esi + 0x38]
00ab7cc5 movss dword ptr [esi + 0x4c], xmm0
00ab7cca jmp dword ptr [eax*4 + 0xab7dd0]
00ab7cd1 ucomiss xmm0, dword ptr [0xf0fc08]
00ab7cd8 lahf 
00ab7cd9 test ah, 0x44
00ab7cdc jnp 0xab7d4a
00ab7cde comiss xmm0, dword ptr [0xec6e10]
00ab7ce5 jbe 0xab7d4a
00ab7ce7 mov edx, dword ptr [esi + 0x78]
00ab7cea mov ecx, esi
00ab7cec call 0xab6ca0
00ab7cf1 test eax, eax
00ab7cf3 je 0xab7db7
00ab7cf9 mov eax, dword ptr [esi + 0x90]
00ab7cff test eax, eax
00ab7d01 je 0xab7d1e
00ab7d03 jle 0xab7db7
00ab7d09 push 0
00ab7d0b push eax
00ab7d0c lea edx, [esi + 0x7c]
00ab7d0f mov ecx, esi
00ab7d11 call 0xab6ed0
00ab7d16 test eax, eax
00ab7d18 je 0xab7db7
00ab7d1e push 0x4ab6415
00ab7d23 mov edx, 0x96f2bed4
00ab7d28 mov ecx, 0x1c35800
00ab7d2d call 0x69c150
00ab7d32 xorps xmm0, xmm0
00ab7d35 xor ecx, ecx
00ab7d37 movss dword ptr [esi + 0x4c], xmm0
00ab7d3c mov dword ptr [esi + 0x38], 1
00ab7d43 call 0xab3b00
00ab7d48 jmp 0xab7db7
00ab7d4a comiss xmm0, dword ptr [0xec7048]
00ab7d51 jbe 0xab7db7
00ab7d53 mov ecx, 1
00ab7d58 call 0xab3b00
00ab7d5d jmp 0xab7db7
00ab7d5f comiss xmm0, dword ptr [0xec703c]
00ab7d66 jbe 0xab7db7
00ab7d68 xorps xmm0, xmm0
00ab7d6b mov edx, edi
00ab7d6d mov ecx, esi
00ab7d6f movss dword ptr [esi + 0x4c], xmm0
00ab7d74 call 0xab7500
00ab7d79 mov dword ptr [esi + 0x38], 2
00ab7d80 jmp 0xab7db7
00ab7d82 comiss xmm0, dword ptr [0xec704c]
00ab7d89 jbe 0xab7db7
00ab7d8b push 0x923c763f

ROOT 96f2bed4 candidate 0xab7d91
00ab7d79 mov dword ptr [esi + 0x38], 2
00ab7d80 jmp 0xab7db7
00ab7d82 comiss xmm0, dword ptr [0xec704c]
00ab7d89 jbe 0xab7db7
00ab7d8b push 0x923c763f
00ab7d90 mov edx, 0x96f2bed4
00ab7d95 mov ecx, 0x1c35800
00ab7d9a call 0x69c150
00ab7d9f mov dword ptr [esi + 0x38], 3
00ab7da6 jmp 0xab7db7
00ab7da8 xorps xmm0, xmm0
00ab7dab movss dword ptr [esi + 0x4c], xmm0
00ab7db0 mov dword ptr [esi + 0x38], 0
00ab7db7 call 0x6070e0
00ab7dbc test eax, eax
00ab7dbe je 0xab7dcc
00ab7dc0 pop edi
00ab7dc1 mov ecx, 1
00ab7dc6 pop esi
00ab7dc7 jmp 0xab3b00
00ab7dcc pop edi
00ab7dcd pop esi
00ab7dce ret 
00ab7dcf nop 
00ab7dd0 sar dword ptr [ebx + ebp*4], 1
00ab7dd4 pop edi
00ab7dd5 jge 0xab7d82
00ab7dd7 add byte ptr [edx - 0x57ff5483], al
00ab7ddd jge 0xab7d8a
00ab7ddf add byte ptr [esi - 0x75], dl
00ab7de2 int1 
00ab7de3 mov eax, dword ptr [esi + 0x3c]
00ab7de6 push edi
00ab7de7 mov edi, edx
00ab7de9 jmp dword ptr [eax*4 + 0xab7e98]
00ab7df0 call 0xab6d00
00ab7df5 push edi
00ab7df6 push 4
00ab7df8 lea edx, [esi + 0x94]

ROOT 3acf63a0 candidate 0xab19ce
00ab19b6 mov dword ptr [ebx - 0x7d4f820], 0x336a3874
00ab19c0 push ebp
00ab19c1 mov ecx, edi
00ab19c3 call 0xab1030
00ab19c8 mov dword ptr [edi + 0x230], 0x3acf63a0
00ab19d2 mov dword ptr [edi + 0x238], 0x21331a8
00ab19dc mov dword ptr [edi], 0xf679bc
00ab19e2 mov dword ptr [edi + 0x240], 0x5d47b0
00ab19ec mov dword ptr [edi + 0x244], 1
00ab19f6 mov ecx, dword ptr [esi + 0xc]
00ab19f9 mov dword ptr [ecx + 0x78], edi
00ab19fc add edi, 0x24f
00ab1a02 mov edx, edi
00ab1a04 and edx, 7
00ab1a07 sub edi, edx
00ab1a09 je 0xab1a43
00ab1a0b push 0x34
00ab1a0d push ebp
00ab1a0e mov ecx, edi
00ab1a10 call 0xab1030
00ab1a15 mov dword ptr [edi + 0x230], 0xb699be28
00ab1a1f mov dword ptr [edi + 0x238], 0x21331b8
00ab1a29 mov dword ptr [edi], 0xf679bc
00ab1a2f mov dword ptr [edi + 0x240], 0x5d4760

ROOT 3acf63a0 candidate 0xb94410
00b943c0 sub esp, 0xc
00b943c3 push ebx
00b943c4 mov ebx, edx
00b943c6 call 0x5c5670
00b943cb test eax, eax
00b943cd jne 0xb943d8
00b943cf xor eax, eax
00b943d1 pop ebx
00b943d2 add esp, 0xc
00b943d5 ret 0xc
00b943d8 mov eax, dword ptr [0x13a2aac]
00b943dd cmp eax, 1
00b943e0 je 0xb943f5
00b943e2 cmp eax, 2
00b943e5 je 0xb943f5
00b943e7 cmp eax, 3
00b943ea je 0xb943f5
00b943ec call 0xb96c80
00b943f1 test eax, eax
00b943f3 je 0xb943cf
00b943f5 mov eax, dword ptr [esp + 0x18]
00b943f9 mov ecx, dword ptr [eax + 0x28]
00b943fc mov eax, dword ptr [ecx + 0x28]
00b943ff test eax, eax
00b94401 je 0xb9440c
00b94403 mov ecx, eax
00b94405 mov eax, dword ptr [ecx + 0x28]
00b94408 test eax, eax
00b9440a jne 0xb94403
00b9440c mov ecx, dword ptr [ecx]
00b9440e cmp ecx, 0x3acf63a0
00b94414 je 0xb9441e
00b94416 cmp ecx, 0x6a7e945f
00b9441c jne 0xb943cf
00b9441e push edi
00b9441f mov edi, dword ptr [esp + 0x20]
00b94423 lea ecx, [esp + 8]
00b94427 push ecx
00b94428 mov ecx, dword ptr [edi + 0xc]
00b9442b mov edx, 0x87b1dc26
00b94430 mov dword ptr [esp + 0xc], 0xffffffff
00b94438 call 0x69e120
00b9443d test eax, eax
00b9443f jne 0xb94489
00b94441 mov edx, dword ptr [edi]
00b94443 xor ecx, ecx
00b94445 mov eax, 0x13a1748
00b9444a lea ebx, [ebx]
00b94450 cmp dword ptr [eax], edx
00b94452 je 0xb94461
00b94454 add eax, 0xc
00b94457 inc ecx
00b94458 cmp eax, 0x13a2a44
00b9445d jl 0xb94450
00b9445f jmp 0xb94465
00b94461 mov dword ptr [esp + 8], ecx
00b94465 mov edx, dword ptr [esp + 8]
00b94469 mov ecx, dword ptr [edi + 0xc]
00b9446c mov dword ptr [esp + 0xc], edx
00b94470 mov dword ptr [esp + 0x10], 0x82f6983b
00b94478 mov eax, dword ptr [ecx]
00b9447a mov eax, dword ptr [eax + 0x10]

ROOT 3acf63a0 candidate 0xe2b946
00e2b8a0 push 0xf11110
00e2b8a5 push 0x69aada92
00e2b8aa mov ecx, 0x1924840
00e2b8af call 0x5c5c00
00e2b8b4 push 0xeac140
00e2b8b9 call 0xe2316c
00e2b8be pop ecx
00e2b8bf ret 
00e2b8c0 push 0xf11134
00e2b8c5 push 0x7a54808e
00e2b8ca mov ecx, 0x191fbc0
00e2b8cf call 0x5c5c00
00e2b8d4 push 0xeac160
00e2b8d9 call 0xe2316c
00e2b8de pop ecx
00e2b8df ret 
00e2b8e0 push 0xf11158
00e2b8e5 push 0x1e290179
00e2b8ea mov ecx, 0x1924ba0
00e2b8ef call 0x5c5c00
00e2b8f4 push 0xeac180
00e2b8f9 call 0xe2316c
00e2b8fe pop ecx
00e2b8ff ret 
00e2b900 push 0xf1117c
00e2b905 push 0xb1a6d066
00e2b90a mov ecx, 0x19203a0
00e2b90f call 0x5c5c00
00e2b914 push 0xeac1a0
00e2b919 call 0xe2316c
00e2b91e pop ecx
00e2b91f ret 
00e2b920 push 0xf111a0
00e2b925 push 0x6a7e945f
00e2b92a mov ecx, 0x1921ea0
00e2b92f call 0x5c5c00
00e2b934 push 0xeac1c0
00e2b939 call 0xe2316c
00e2b93e pop ecx
00e2b93f ret 
00e2b940 push 0xf111c4
00e2b945 push 0x3acf63a0
00e2b94a mov ecx, 0x1923be0
00e2b94f call 0x5c5c00
00e2b954 push 0xeac1e0
00e2b959 call 0xe2316c
00e2b95e pop ecx
00e2b95f ret 
00e2b960 push 0xf111e8
00e2b965 push 0x96822c65
00e2b96a mov ecx, 0x1922d40
00e2b96f call 0x5c5c00
00e2b974 push 0xeac200
00e2b979 call 0xe2316c
00e2b97e pop ecx
00e2b97f ret 
00e2b980 push 0xf1120c
00e2b985 push 0x3b15637
00e2b98a mov ecx, 0x19228c0
00e2b98f call 0x5c5c00
00e2b994 push 0xeac220
00e2b999 call 0xe2316c
00e2b99e pop ecx
00e2b99f ret 
00e2b9a0 push 0xf11230
00e2b9a5 push 0xaf06644b
00e2b9aa mov ecx, 0x19217e0
00e2b9af call 0x5c5c00

ROOT 03b15637 candidate 0xc8345b
00c83450 push 0x151
00c83455 push 0x25dde014
00c8345a mov edx, 0x3b15637
00c8345f mov ecx, 0x10dacf0
00c83464 call 0x5c85f0
00c83469 ret 
00c8346a int3 
00c8346b int3 
00c8346c int3 
00c8346d int3 
00c8346e int3 
00c8346f int3 
00c83470 push 0x168
00c83475 push 0x25dde014
00c8347a mov edx, 0x3b15637
00c8347f mov ecx, 0x10dacf0
00c83484 call 0x5c7f50
00c83489 ret 
00c8348a int3 
00c8348b int3 
00c8348c int3 
00c8348d int3 
00c8348e int3 
00c8348f int3 
00c83490 push 0x183
00c83495 push 0x25dde014
00c8349a mov edx, 0x32
00c8349f mov ecx, 0x10dacf0
00c834a4 call 0x5c8000
00c834a9 ret 
00c834aa int3 
00c834ab int3 
00c834ac int3 
00c834ad int3 
00c834ae int3 
00c834af int3 
00c834b0 push esi
00c834b1 mov esi, ecx
00c834b3 cmp dword ptr [esi + 0x18], 0
00c834b7 jne 0xc834ec
00c834b9 mov edx, 0x3b15637
00c834be mov ecx, 0x10dacf0
00c834c3 call 0x5c7ca0

ROOT 03b15637 candidate 0xc8347b
00c83470 push 0x168
00c83475 push 0x25dde014
00c8347a mov edx, 0x3b15637
00c8347f mov ecx, 0x10dacf0
00c83484 call 0x5c7f50
00c83489 ret 
00c8348a int3 
00c8348b int3 
00c8348c int3 
00c8348d int3 
00c8348e int3 
00c8348f int3 
00c83490 push 0x183
00c83495 push 0x25dde014
00c8349a mov edx, 0x32
00c8349f mov ecx, 0x10dacf0
00c834a4 call 0x5c8000
00c834a9 ret 
00c834aa int3 
00c834ab int3 
00c834ac int3 
00c834ad int3 
00c834ae int3 
00c834af int3 
00c834b0 push esi
00c834b1 mov esi, ecx
00c834b3 cmp dword ptr [esi + 0x18], 0
00c834b7 jne 0xc834ec
00c834b9 mov edx, 0x3b15637
00c834be mov ecx, 0x10dacf0
00c834c3 call 0x5c7ca0
00c834c8 test eax, eax
00c834ca jne 0xc834ec
00c834cc mov ecx, 0x154c150
00c834d1 call 0x48de20
00c834d6 test eax, eax
00c834d8 jne 0xc834ec
00c834da call 0x468fe0
00c834df test eax, eax
00c834e1 jne 0xc834ec
00c834e3 mov eax, dword ptr [esi]
00c834e5 mov edx, dword ptr [eax + 0x28]

ROOT 03b15637 candidate 0xc834ba
00c834b0 push esi
00c834b1 mov esi, ecx
00c834b3 cmp dword ptr [esi + 0x18], 0
00c834b7 jne 0xc834ec
00c834b9 mov edx, 0x3b15637
00c834be mov ecx, 0x10dacf0
00c834c3 call 0x5c7ca0
00c834c8 test eax, eax
00c834ca jne 0xc834ec
00c834cc mov ecx, 0x154c150
00c834d1 call 0x48de20
00c834d6 test eax, eax
00c834d8 jne 0xc834ec
00c834da call 0x468fe0
00c834df test eax, eax
00c834e1 jne 0xc834ec
00c834e3 mov eax, dword ptr [esi]
00c834e5 mov edx, dword ptr [eax + 0x28]
00c834e8 mov ecx, esi
00c834ea call edx
00c834ec mov edx, 2
00c834f1 cmp dword ptr [esi + 0xc], edx
00c834f4 jne 0xc834fd
00c834f6 mov ecx, esi
00c834f8 call 0xc84a10
00c834fd pop esi
00c834fe ret 4
00c83501 int3 
00c83502 int3 
00c83503 int3 
00c83504 int3 
00c83505 int3 
00c83506 int3 
00c83507 int3 
00c83508 int3 
00c83509 int3 
00c8350a int3 
00c8350b int3 
00c8350c int3 
00c8350d int3 
00c8350e int3 
00c8350f int3 
00c83510 movss xmm0, dword ptr [0xec7068]
00c83518 sub esp, 8
00c8351b movss dword ptr [esp + 4], xmm0

ROOT 03b15637 candidate 0xc83976
00c83970 push ebx
00c83971 push esi
00c83972 mov ebx, ecx
00c83974 push edi
00c83975 mov edx, 0x3b15637
00c8397a mov ecx, 0x10dacf0
00c8397f call 0x5c7ca0
00c83984 test eax, eax
00c83986 je 0xc83992
00c83988 cmp dword ptr [eax + 0x24], 0
00c8398c je 0xc83992
00c8398e xor edi, edi
00c83990 jmp 0xc83997
00c83992 mov edi, 1
00c83997 cmp dword ptr [0x20276a0], 0x34
00c8399e jne 0xc839af
00c839a0 mov ecx, ebx
00c839a2 call 0xc84530
00c839a7 test eax, eax
00c839a9 je 0xc839af
00c839ab xor esi, esi
00c839ad jmp 0xc839b4
00c839af mov esi, 1
00c839b4 call 0x4120b0
00c839b9 cmp dword ptr [eax + 0x34], 0
00c839bd je 0xc839e1
00c839bf mov ecx, dword ptr [eax + 0x2c]
00c839c2 lea ecx, [ecx + ecx*2]
00c839c5 cmp dword ptr [eax + ecx*4 + 0x14], 4
00c839ca jne 0xc839e1
00c839cc mov ecx, 0xa2
00c839d1 call 0x5dd660
00c839d6 test eax, eax
00c839d8 je 0xc839e1
00c839da mov eax, 1
00c839df jmp 0xc839e3
00c839e1 xor eax, eax

ROOT 03b15637 candidate 0xe2b986
00e2b96e add eax, ebp
00e2b970 mov word ptr [edx + 0x68ff79], fs
00e2b976 ret 0xea
00e2b979 call 0xe2316c
00e2b97e pop ecx
00e2b97f ret 
00e2b980 push 0xf1120c
00e2b985 push 0x3b15637
00e2b98a mov ecx, 0x19228c0
00e2b98f call 0x5c5c00
00e2b994 push 0xeac220
00e2b999 call 0xe2316c
00e2b99e pop ecx
00e2b99f ret 
00e2b9a0 push 0xf11230
00e2b9a5 push 0xaf06644b
00e2b9aa mov ecx, 0x19217e0
00e2b9af call 0x5c5c00
00e2b9b4 push 0xeac240
00e2b9b9 call 0xe2316c
00e2b9be pop ecx
00e2b9bf ret 
00e2b9c0 push 0xf11254
00e2b9c5 push 0x41d5508
00e2b9ca mov ecx, 0x1921240
00e2b9cf call 0x5c5c00
00e2b9d4 push 0xeac260
00e2b9d9 call 0xe2316c
00e2b9de pop ecx
00e2b9df ret 
00e2b9e0 push 0xf11278
00e2b9e5 push 0x34bf5301
00e2b9ea mov ecx, 0x1920700
00e2b9ef call 0x5c5c00

ROOT c557c178 candidate 0xc79161
00c79150 push esi
00c79151 push edi
00c79152 mov esi, ecx
00c79154 xor edi, edi
00c79156 cmp dword ptr [esi + 8], edi
00c79159 jne 0xc791a4
00c7915b push 0x637fb88a
00c79160 mov edx, 0xc557c178
00c79165 mov ecx, 0xbb05a9c1
00c7916a call 0x699010
00c7916f mov dword ptr [esi + 8], eax
00c79172 cmp eax, edi
00c79174 je 0xc792a6
00c7917a mov edx, 0xacbe829f
00c7917f mov ecx, eax
00c79181 call 0x69f140
00c79186 cmp eax, edi
00c79188 je 0xc79195
00c7918a push 1
00c7918c mov dl, 5
00c7918e mov ecx, eax
00c79190 call 0x69ef40
00c79195 mov edx, dword ptr [esi + 8]
00c79198 push 0x64
00c7919a mov ecx, 0x1c35800
00c7919f call 0x69d870
00c791a4 call 0x6e1e40
00c791a9 mov dword ptr [esi + 0x14], eax
00c791ac cmp eax, edi
00c791ae je 0xc791c3
00c791b0 mov edx, dword ptr [eax]
00c791b2 mov ecx, eax
00c791b4 mov eax, dword ptr [edx + 8]
00c791b7 call eax
00c791b9 mov ecx, eax
00c791bb call 0x5d4880
00c791c0 mov dword ptr [esi + 0x1c], eax
00c791c3 cmp dword ptr [0x1e85c5c], 1
00c791ca push ebp
00c791cb jne 0xc79234

ROOT c557c178 candidate 0xc79242
00c7922a rol byte ptr [ebp - 0x76de8a40], 1
00c79230 jle 0xc7924a
00c79232 jmp 0xc79239
00c79234 cmp dword ptr [esi + 4], edi
00c79237 je 0xc79253
00c79239 push 0x4ab6415
00c7923e mov dword ptr [esi + 4], edi
00c79241 mov edx, 0xc557c178
00c79246 mov ecx, 0x1c35800
00c7924b call 0x69c150
00c79250 cmp dword ptr [esi + 4], edi
00c79253 pop ebp
00c79254 je 0xc792a6
00c79256 movss xmm1, dword ptr [esi + 0xc]
00c7925b xorps xmm2, xmm2
00c7925e comiss xmm1, xmm2
00c79261 movss xmm0, dword ptr [0xec6ff0]
00c79269 jbe 0xc79271
00c7926b movaps xmm0, xmm2
00c7926e mov dword ptr [esi + 0x10], edi
00c79271 movss xmm2, dword ptr [0xfc08f4]
00c79279 comiss xmm1, xmm2
00c7927c jbe 0xc7928d
00c7927e comiss xmm2, xmm0
00c79281 jbe 0xc7928d
00c79283 movaps xmm0, xmm2
00c79286 mov dword ptr [esi + 0x10], 1
00c7928d movss xmm2, dword ptr [0xfc08fc]
00c79295 comiss xmm1, xmm2
00c79298 jbe 0xc792a6
00c7929a comiss xmm2, xmm0
00c7929d jbe 0xc792a6
00c7929f mov dword ptr [esi + 0x10], 2
00c792a6 pop edi
00c792a7 pop esi
00c792a8 ret 4
00c792ab int3 
00c792ac int3 
00c792ad int3 
00c792ae int3 
00c792af int3 

ROOT 7b56752e candidate 0x5e1b3c
005e1b00 call 0x4c4b20
005e1b05 test eax, eax
005e1b07 je 0x5e1b57
005e1b09 call 0x968d70
005e1b0e test eax, eax
005e1b10 je 0x5e1b57
005e1b12 cmp dword ptr [0x1932384], 0
005e1b19 jne 0x5e1bbb
005e1b1f movss xmm0, dword ptr [esp + 4]
005e1b25 push ecx
005e1b26 movss dword ptr [esp], xmm0
005e1b2b call 0x96c410
005e1b30 test eax, eax
005e1b32 je 0x5e1b4a
005e1b34 push 0x2c
005e1b36 push 0x13f72661
005e1b3b mov edx, 0x7b56752e
005e1b40 mov ecx, 0x10dacf0
005e1b45 call 0x5c7f50
005e1b4a mov dword ptr [0x1932384], 1
005e1b54 ret 4
005e1b57 cmp dword ptr [0x1932384], 0
005e1b5e je 0x5e1b6f
005e1b60 call 0x968df0
005e1b65 mov dword ptr [0x1932384], 0
005e1b6f mov edx, 0x7b56752e
005e1b74 mov ecx, 0x10dacf0
005e1b79 call 0x5c7ca0
005e1b7e test eax, eax
005e1b80 jne 0x5e1bbb
005e1b82 push esi
005e1b83 push 0x3f
005e1b85 push 0x13f72661
005e1b8a push 0x33
005e1b8c push 1
005e1b8e mov edx, 0x7b56752e
005e1b93 mov ecx, 0x10dacf0
005e1b98 call 0x5c84e0
005e1b9d mov esi, eax
005e1b9f test esi, esi
005e1ba1 je 0x5e1bba
005e1ba3 call 0xaa27f0
005e1ba8 test eax, eax

ROOT 7b56752e candidate 0x5e1b70
005e1b00 call 0x4c4b20
005e1b05 test eax, eax
005e1b07 je 0x5e1b57
005e1b09 call 0x968d70
005e1b0e test eax, eax
005e1b10 je 0x5e1b57
005e1b12 cmp dword ptr [0x1932384], 0
005e1b19 jne 0x5e1bbb
005e1b1f movss xmm0, dword ptr [esp + 4]
005e1b25 push ecx
005e1b26 movss dword ptr [esp], xmm0
005e1b2b call 0x96c410
005e1b30 test eax, eax
005e1b32 je 0x5e1b4a
005e1b34 push 0x2c
005e1b36 push 0x13f72661
005e1b3b mov edx, 0x7b56752e
005e1b40 mov ecx, 0x10dacf0
005e1b45 call 0x5c7f50
005e1b4a mov dword ptr [0x1932384], 1
005e1b54 ret 4
005e1b57 cmp dword ptr [0x1932384], 0
005e1b5e je 0x5e1b6f
005e1b60 call 0x968df0
005e1b65 mov dword ptr [0x1932384], 0
005e1b6f mov edx, 0x7b56752e
005e1b74 mov ecx, 0x10dacf0
005e1b79 call 0x5c7ca0
005e1b7e test eax, eax
005e1b80 jne 0x5e1bbb
005e1b82 push esi
005e1b83 push 0x3f
005e1b85 push 0x13f72661
005e1b8a push 0x33
005e1b8c push 1
005e1b8e mov edx, 0x7b56752e
005e1b93 mov ecx, 0x10dacf0
005e1b98 call 0x5c84e0
005e1b9d mov esi, eax
005e1b9f test esi, esi
005e1ba1 je 0x5e1bba
005e1ba3 call 0xaa27f0
005e1ba8 test eax, eax
005e1baa js 0x5e1bba
005e1bac mov edx, dword ptr [esi + 0x18]
005e1baf push eax
005e1bb0 mov ecx, 0x10dacf0
005e1bb5 call 0x5c8190
005e1bba pop esi
005e1bbb ret 4

ROOT 7b56752e candidate 0x5e1b8f
005e1b00 call 0x4c4b20
005e1b05 test eax, eax
005e1b07 je 0x5e1b57
005e1b09 call 0x968d70
005e1b0e test eax, eax
005e1b10 je 0x5e1b57
005e1b12 cmp dword ptr [0x1932384], 0
005e1b19 jne 0x5e1bbb
005e1b1f movss xmm0, dword ptr [esp + 4]
005e1b25 push ecx
005e1b26 movss dword ptr [esp], xmm0
005e1b2b call 0x96c410
005e1b30 test eax, eax
005e1b32 je 0x5e1b4a
005e1b34 push 0x2c
005e1b36 push 0x13f72661
005e1b3b mov edx, 0x7b56752e
005e1b40 mov ecx, 0x10dacf0
005e1b45 call 0x5c7f50
005e1b4a mov dword ptr [0x1932384], 1
005e1b54 ret 4
005e1b57 cmp dword ptr [0x1932384], 0
005e1b5e je 0x5e1b6f
005e1b60 call 0x968df0
005e1b65 mov dword ptr [0x1932384], 0
005e1b6f mov edx, 0x7b56752e
005e1b74 mov ecx, 0x10dacf0
005e1b79 call 0x5c7ca0
005e1b7e test eax, eax
005e1b80 jne 0x5e1bbb
005e1b82 push esi
005e1b83 push 0x3f
005e1b85 push 0x13f72661
005e1b8a push 0x33
005e1b8c push 1
005e1b8e mov edx, 0x7b56752e
005e1b93 mov ecx, 0x10dacf0
005e1b98 call 0x5c84e0
005e1b9d mov esi, eax
005e1b9f test esi, esi
005e1ba1 je 0x5e1bba
005e1ba3 call 0xaa27f0
005e1ba8 test eax, eax
005e1baa js 0x5e1bba
005e1bac mov edx, dword ptr [esi + 0x18]
005e1baf push eax
005e1bb0 mov ecx, 0x10dacf0
005e1bb5 call 0x5c8190
005e1bba pop esi
005e1bbb ret 4

ROOT 7b56752e candidate 0xb8722d
00b87215 ret 0xca0b
00b87218 neg ecx
00b8721a sbb ecx, ecx
00b8721c neg ecx
00b8721e xor edx, edx
00b87220 test eax, eax
00b87222 setne dl
00b87225 and ecx, edx
00b87227 and ecx, 1
00b8722a mov edi, ecx
00b8722c mov edx, 0x7b56752e
00b87231 mov ecx, 0x10dacf0
00b87236 call 0x5c7ca0
00b8723b test eax, eax
00b8723d je 0xb87256
00b8723f mov edx, dword ptr [eax + 0x18]
00b87242 mov ecx, 0x10dacf0
00b87247 call 0x5c8240
00b8724c cmp eax, 7
00b8724f mov eax, 0xfbae00
00b87254 je 0xb8725b
00b87256 mov eax, 0xf34a60
00b8725b movaps xmm0, xmmword ptr [eax]
00b8725e mov edx, dword ptr [esi + 0x18]
00b87261 push 7
00b87263 mov ecx, 0x10dacf0
00b87268 movaps xmmword ptr [esp + 0x14], xmm0
00b8726d call 0x5c8190
00b87272 mov edx, dword ptr [esi + 0x18]
00b87275 movaps xmm0, xmmword ptr [esp + 0x10]
00b8727a mov ecx, 0x10dacf0
00b8727f call 0x5c81e0
00b87284 mov eax, dword ptr [esi]
00b87286 mov eax, dword ptr [eax + 0x28]
00b87289 mov edx, edi
00b8728b mov ecx, esi
00b8728d call eax
00b8728f jmp 0xb872b6
00b87291 push 0x30
00b87293 push 0x2d2fa1a4

ROOT 7b56752e candidate 0xb8f727
00b8f6b0 call 0x4120b0
00b8f6b5 mov ecx, eax
00b8f6b7 call 0x8fb2e0
00b8f6bc mov ecx, eax
00b8f6be call 0x6b5360
00b8f6c3 mov eax, dword ptr [eax + 0x14]
00b8f6c6 cmp dword ptr [eax], -1
00b8f6c9 je 0xb8f7a5
00b8f6cf push esi
00b8f6d0 push 0xc8
00b8f6d5 push 0x7972c3ca
00b8f6da mov edx, 0x34bf5301
00b8f6df mov ecx, 0x10dacf0
00b8f6e4 call 0x5c85f0
00b8f6e9 mov esi, eax
00b8f6eb test esi, esi
00b8f6ed je 0xb8f7a4
00b8f6f3 call 0x6a79b0
00b8f6f8 mov edx, dword ptr [esi + 0x18]
00b8f6fb push ecx
00b8f6fc mov ecx, 0x10dacf0
00b8f701 test eax, eax
00b8f703 jne 0xb8f74f
00b8f705 movss xmm0, dword ptr [0xec98c4]
00b8f70d movss dword ptr [esp], xmm0
00b8f712 call 0x5c8210
00b8f717 mov edx, dword ptr [esi + 0x18]
00b8f71a push 7
00b8f71c mov ecx, 0x10dacf0
00b8f721 call 0x5c8190
00b8f726 mov edx, 0x7b56752e
00b8f72b mov ecx, 0x10dacf0
00b8f730 call 0x5c7ca0
00b8f735 test eax, eax
00b8f737 je 0xb8f770
00b8f739 mov edx, dword ptr [esi + 0x18]
00b8f73c movaps xmm0, xmmword ptr [0xfbb070]
00b8f743 mov ecx, 0x10dacf0
00b8f748 call 0x5c81e0
00b8f74d jmp 0xb8f770
00b8f74f movss xmm0, dword ptr [0xfbb06c]
00b8f757 movss dword ptr [esp], xmm0
00b8f75c call 0x5c8210
00b8f761 mov edx, dword ptr [esi + 0x18]
00b8f764 push 8
00b8f766 mov ecx, 0x10dacf0
00b8f76b call 0x5c8190
00b8f770 mov eax, dword ptr [esp + 8]
00b8f774 sub eax, 0
00b8f777 mov ecx, 0x55f
00b8f77c jne 0xb8f783
00b8f77e mov ecx, 0x560
00b8f783 call 0x5ca8e0
00b8f788 push eax
00b8f789 mov edx, 0xdc62badb
00b8f78e lea ecx, [esi + 0x5c]

ROOT 7b56752e candidate 0xe2bdf0
00e2bdd8 push 0x32
00e2bdda push 2
00e2bddc sub esp, 8
00e2bddf movss dword ptr [esp + 4], xmm0
00e2bde5 xorps xmm0, xmm0
00e2bde8 movss dword ptr [esp], xmm0
00e2bded push 0
00e2bdef push 0x7b56752e
00e2bdf4 push 0x7b56752e
00e2bdf9 mov ecx, 0x1920040
00e2bdfe call 0x5c6b60
00e2be03 mov ecx, 0x192009c
00e2be08 mov dword ptr [0x1920040], 0xf11ba4
00e2be12 call 0x5c7250
00e2be17 mov ecx, 0x192009c
00e2be1c mov dword ptr [0x1920064], 0
00e2be26 mov dword ptr [0x1920140], 0
00e2be30 mov dword ptr [0x1920150], 0
00e2be3a call 0x5c72a0
00e2be3f xorps xmm0, xmm0
00e2be42 and dword ptr [0x192014c], 0xff000000
00e2be4c push 0xeac520
00e2be51 movss dword ptr [0x1920060], xmm0
00e2be59 call 0xe2316c

ROOT 7b56752e candidate 0xe2bdf5
00e2bddd in al, dx
00e2bdde or bl, dh
00e2bde0 movups xmmword ptr [esp + 4], xmm0
00e2bde5 xorps xmm0, xmm0
00e2bde8 movss dword ptr [esp], xmm0
00e2bded push 0
00e2bdef push 0x7b56752e
00e2bdf4 push 0x7b56752e
00e2bdf9 mov ecx, 0x1920040
00e2bdfe call 0x5c6b60
00e2be03 mov ecx, 0x192009c
00e2be08 mov dword ptr [0x1920040], 0xf11ba4
00e2be12 call 0x5c7250
00e2be17 mov ecx, 0x192009c
00e2be1c mov dword ptr [0x1920064], 0
00e2be26 mov dword ptr [0x1920140], 0
00e2be30 mov dword ptr [0x1920150], 0
00e2be3a call 0x5c72a0
00e2be3f xorps xmm0, xmm0
00e2be42 and dword ptr [0x192014c], 0xff000000
00e2be4c push 0xeac520
00e2be51 movss dword ptr [0x1920060], xmm0
00e2be59 call 0xe2316c
00e2be5e pop ecx
00e2be5f ret 

ROOT 924b4b24 candidate 0xb87171
00b87130 call 0x5c5690
00b87135 test eax, eax
00b87137 je 0xb8714f
00b87139 push esi
00b8713a mov esi, 0x1d955d0
00b8713f call 0xb870d0
00b87144 mov esi, 0x1d95520
00b87149 call 0xb870d0
00b8714e pop esi
00b8714f ret 
00b87150 push ebp
00b87151 mov ebp, esp
00b87153 and esp, 0xfffffff0
00b87156 sub esp, 0x14
00b87159 cmp dword ptr [0x1ffd634], 0
00b87160 push ebx
00b87161 push esi
00b87162 push edi
00b87163 je 0xb872d0
00b87169 cmp dword ptr [0x1ffd630], 0
00b87170 mov edx, 0x924b4b24
00b87175 mov ecx, 0x10dacf0
00b8717a je 0xb87291
00b87180 call 0x5c7ca0
00b87185 mov esi, eax
00b87187 test esi, esi
00b87189 je 0xb872b6
00b8718f call 0x91f520
00b87194 mov ecx, eax
00b87196 call 0x91f530
00b8719b test eax, eax
00b8719d je 0xb871b6
00b8719f call 0x91d530
00b871a4 cmp eax, 7
00b871a7 jne 0xb871b6
00b871a9 call 0x42c430
00b871ae test eax, eax
00b871b0 je 0xb871b6
00b871b2 mov al, 1
00b871b4 jmp 0xb871b8
00b871b6 xor al, al
00b871b8 movzx ebx, al
00b871bb call 0x48ef10
00b871c0 cmp eax, 3
00b871c3 jne 0xb871e6
00b871c5 call 0x9682b0
00b871ca test eax, eax
00b871cc je 0xb871e6
00b871ce call 0x42c430
00b871d3 test eax, eax
00b871d5 je 0xb871e6
00b871d7 call 0x91c1f0
00b871dc cmp eax, 0x17

ROOT 924b4b24 candidate 0xb872b7
00b8729f je 0xb872b6
00b872a1 mov esi, dword ptr [eax]
00b872a3 mov ecx, eax
00b872a5 mov eax, dword ptr [esi + 0x28]
00b872a8 xor edx, edx
00b872aa call eax
00b872ac mov dword ptr [0x1ffd630], 1
00b872b6 mov edx, 0x924b4b24
00b872bb mov ecx, 0x10dacf0
00b872c0 call 0x5c8180
00b872c5 neg eax
00b872c7 sbb eax, eax
00b872c9 neg eax
00b872cb mov dword ptr [0x1ffd630], eax
00b872d0 pop edi
00b872d1 pop esi
00b872d2 pop ebx
00b872d3 mov esp, ebp
00b872d5 pop ebp
00b872d6 ret 4
00b872d9 int3 
00b872da int3 
00b872db int3 
00b872dc int3 
00b872dd int3 
00b872de int3 
00b872df int3 
00b872e0 sub esp, 0x54
00b872e3 cmp dword ptr [0x1ffd638], 0
00b872ea jne 0xb872f2
00b872ec xor eax, eax
00b872ee add esp, 0x54
00b872f1 ret 
00b872f2 call 0x966600
00b872f7 test edi, edi
00b872f9 je 0xb872ec
00b872fb test eax, eax
00b872fd je 0xb872ec
00b872ff push ebx
00b87300 movzx ebx, word ptr [eax + 0x74]
00b87304 push esi
00b87305 mov ecx, edi
00b87307 call 0x60e370
00b8730c movzx esi, word ptr [eax + 0x74]
00b87310 mov ecx, edi
00b87312 call 0x60e380
00b87317 cmp bx, si
00b8731a jne 0xb87322
00b8731c movzx eax, word ptr [eax + 0x74]
00b87320 jmp 0xb87324
00b87322 mov eax, esi

ROOT 924b4b24 candidate 0xb8978f
00b89730 push 0x2b0
00b89735 xor dl, dl
00b89737 mov ecx, 0x13a0690
00b8973c call 0xd95820
00b89741 mov dword ptr [0x13a0690], 1
00b8974b call 0xb9c3b0
00b89750 call 0xba6060
00b89755 pxor xmm0, xmm0
00b89759 movq qword ptr [0x1ffd630], xmm0
00b89761 mov dword ptr [0x1ffd634], 1
00b8976b jmp 0xc72230
00b89770 call 0xc72360
00b89775 cmp dword ptr [0x1ffd634], 0
00b8977c je 0xb897a9
00b8977e cmp dword ptr [0x1ffd630], 0
00b89785 je 0xb8979d
00b89787 push 0x7c
00b89789 push 0x2d2fa1a4
00b8978e mov edx, 0x924b4b24
00b89793 mov ecx, 0x10dacf0
00b89798 call 0x5c7f50
00b8979d pxor xmm0, xmm0
00b897a1 movq qword ptr [0x1ffd630], xmm0
00b897a9 call 0xba60c0
00b897ae call 0xb9c3e0
00b897b3 call 0xb7f8e0
00b897b8 call 0xb7f220
00b897bd push 0x2b0
00b897c2 xor dl, dl
00b897c4 mov ecx, 0x13a0690
00b897c9 call 0xd95820
00b897ce ret 
00b897cf int3 
00b897d0 push esi
00b897d1 mov esi, ecx
00b897d3 call 0x5c5ad0
00b897d8 test byte ptr [esp + 8], 1
00b897dd je 0xb897e6
00b897df mov ecx, esi
00b897e1 call 0xd92ea0
00b897e6 mov eax, esi
00b897e8 pop esi
00b897e9 ret 4
00b897ec int3 
00b897ed int3 
00b897ee int3 
00b897ef int3 
00b897f0 cmp dword ptr [0x13a1118], 0
00b897f7 jne 0xb8982e

ROOT 924b4b24 candidate 0xe2bd40
00e2bd28 push 0x32
00e2bd2a push 2
00e2bd2c sub esp, 8
00e2bd2f movss dword ptr [esp + 4], xmm0
00e2bd35 xorps xmm0, xmm0
00e2bd38 movss dword ptr [esp], xmm0
00e2bd3d push 0
00e2bd3f push 0x924b4b24
00e2bd44 push 0x924b4b24
00e2bd49 mov ecx, 0x1924de0
00e2bd4e call 0x5c6b60
00e2bd53 mov ecx, 0x1924e3c
00e2bd58 mov dword ptr [0x1924de0], 0xf11ba4
00e2bd62 call 0x5c7250
00e2bd67 mov ecx, 0x1924e3c
00e2bd6c mov dword ptr [0x1924e04], 0
00e2bd76 mov dword ptr [0x1924ee0], 0
00e2bd80 mov dword ptr [0x1924ef0], 0
00e2bd8a call 0x5c72a0
00e2bd8f xorps xmm0, xmm0
00e2bd92 and dword ptr [0x1924eec], 0xff000000
00e2bd9c push 0xeac4e0
00e2bda1 movss dword ptr [0x1924e00], xmm0
00e2bda9 call 0xe2316c

ROOT 924b4b24 candidate 0xe2bd45
00e2bd2d in al, dx
00e2bd2e or bl, dh
00e2bd30 movups xmmword ptr [esp + 4], xmm0
00e2bd35 xorps xmm0, xmm0
00e2bd38 movss dword ptr [esp], xmm0
00e2bd3d push 0
00e2bd3f push 0x924b4b24
00e2bd44 push 0x924b4b24
00e2bd49 mov ecx, 0x1924de0
00e2bd4e call 0x5c6b60
00e2bd53 mov ecx, 0x1924e3c
00e2bd58 mov dword ptr [0x1924de0], 0xf11ba4
00e2bd62 call 0x5c7250
00e2bd67 mov ecx, 0x1924e3c
00e2bd6c mov dword ptr [0x1924e04], 0
00e2bd76 mov dword ptr [0x1924ee0], 0
00e2bd80 mov dword ptr [0x1924ef0], 0
00e2bd8a call 0x5c72a0
00e2bd8f xorps xmm0, xmm0
00e2bd92 and dword ptr [0x1924eec], 0xff000000
00e2bd9c push 0xeac4e0
00e2bda1 movss dword ptr [0x1924e00], xmm0
00e2bda9 call 0xe2316c
00e2bdae pop ecx
00e2bdaf ret 

ROOT 96822c65 candidate 0xc6eca3
00c6ec90 push ebp
00c6ec91 mov ebp, esp
00c6ec93 and esp, 0xfffffff8
00c6ec96 sub esp, 0x20
00c6ec99 push ebx
00c6ec9a push ebp
00c6ec9b push esi
00c6ec9c push edi
00c6ec9d mov edi, ecx
00c6ec9f mov esi, dword ptr [edi + 4]
00c6eca2 mov edx, 0x96822c65
00c6eca7 mov ecx, 0x10dacf0
00c6ecac call 0x5c7ca0
00c6ecb1 mov dword ptr [esp + 0x10], eax
00c6ecb5 test eax, eax
00c6ecb7 jne 0xc6ecd6
00c6ecb9 push 0x1f0
00c6ecbe push 0xa4e25a4f
00c6ecc3 mov edx, 0x96822c65
00c6ecc8 mov ecx, 0x10dacf0
00c6eccd call 0x5c85f0
00c6ecd2 mov dword ptr [esp + 0x10], eax
00c6ecd6 test esi, esi
00c6ecd8 je 0xc6ecfb
00c6ecda mov ecx, dword ptr [esi + 4]
00c6ecdd lea eax, [esi - 0x78]
00c6ece0 mov esi, ecx
00c6ece2 sub esi, eax
00c6ece4 neg esi
00c6ece6 sbb esi, esi
00c6ece8 and esi, ecx
00c6ecea test esi, esi
00c6ecec je 0xc6ecfd
00c6ecee mov ecx, esi
00c6ecf0 call 0x6b49c0
00c6ecf5 mov dword ptr [esp + 0x24], eax
00c6ecf9 jmp 0xc6ed05
00c6ecfb xor esi, esi
00c6ecfd mov dword ptr [esp + 0x24], 0
00c6ed05 mov ebp, esi
00c6ed07 test esi, esi
00c6ed09 je 0xc6ee5e
00c6ed0f nop 

ROOT 96822c65 candidate 0xc6ecc4
00c6ec90 push ebp
00c6ec91 mov ebp, esp
00c6ec93 and esp, 0xfffffff8
00c6ec96 sub esp, 0x20
00c6ec99 push ebx
00c6ec9a push ebp
00c6ec9b push esi
00c6ec9c push edi
00c6ec9d mov edi, ecx
00c6ec9f mov esi, dword ptr [edi + 4]
00c6eca2 mov edx, 0x96822c65
00c6eca7 mov ecx, 0x10dacf0
00c6ecac call 0x5c7ca0
00c6ecb1 mov dword ptr [esp + 0x10], eax
00c6ecb5 test eax, eax
00c6ecb7 jne 0xc6ecd6
00c6ecb9 push 0x1f0
00c6ecbe push 0xa4e25a4f
00c6ecc3 mov edx, 0x96822c65
00c6ecc8 mov ecx, 0x10dacf0
00c6eccd call 0x5c85f0
00c6ecd2 mov dword ptr [esp + 0x10], eax
00c6ecd6 test esi, esi
00c6ecd8 je 0xc6ecfb
00c6ecda mov ecx, dword ptr [esi + 4]
00c6ecdd lea eax, [esi - 0x78]
00c6ece0 mov esi, ecx
00c6ece2 sub esi, eax
00c6ece4 neg esi
00c6ece6 sbb esi, esi
00c6ece8 and esi, ecx
00c6ecea test esi, esi
00c6ecec je 0xc6ecfd
00c6ecee mov ecx, esi
00c6ecf0 call 0x6b49c0
00c6ecf5 mov dword ptr [esp + 0x24], eax
00c6ecf9 jmp 0xc6ed05
00c6ecfb xor esi, esi
00c6ecfd mov dword ptr [esp + 0x24], 0
00c6ed05 mov ebp, esi
00c6ed07 test esi, esi
00c6ed09 je 0xc6ee5e
00c6ed0f nop 
00c6ed10 mov esi, dword ptr [ebp + 0xb0c]
00c6ed16 mov ecx, ebp
00c6ed18 call 0x5d4880
00c6ed1d mov ebx, eax
00c6ed1f test esi, esi
00c6ed21 je 0xc6ee43
00c6ed27 cmp dword ptr [edi + esi*8 + 0x18], 0
00c6ed2c jne 0xc6ee14

ROOT 96822c65 candidate 0xc79e88
00c79e70 into 
00c79e71 movsd dword ptr es:[edi], dword ptr [esi]
00c79e72 jmp 0xc79e87
00c79e74 mov edi, 0x16869f4c
00c79e79 jmp 0xc79e87
00c79e7b mov edi, 0x7a5cd977
00c79e80 jmp 0xc79e87
00c79e82 mov edi, 0xc914d1aa
00c79e87 mov edx, 0x96822c65
00c79e8c mov ecx, 0x10dacf0
00c79e91 call 0x5c7ca0
00c79e96 test eax, eax
00c79e98 je 0xc7a127
00c79e9e mov edx, dword ptr [esi*8 + 0xfc04d4]
00c79ea5 push edi
00c79ea6 lea ecx, [eax + 0x5c]
00c79ea9 call 0x5c75d0
00c79eae mov ecx, dword ptr [esp + 0x14]
00c79eb2 mov edx, dword ptr [ecx + 8]
00c79eb5 movaps xmm0, xmmword ptr [edx + 0x3f0]
00c79ebc movaps xmmword ptr [esp + 0x70], xmm0
00c79ec1 call 0x4317b0
00c79ec6 mov edi, eax
00c79ec8 mov edx, edi
00c79eca lea ecx, [esp + 0x70]
00c79ece call 0xc724b0
00c79ed3 test eax, eax
00c79ed5 je 0xc79ef7
00c79ed7 mov eax, dword ptr [ebx + esi*4 + 0x44]
00c79edb mov dword ptr [esp + 0x58], 0x82f6983b
00c79ee3 mov dword ptr [esp + 0x54], 0
00c79eeb mov ecx, dword ptr [eax + 0xc]
00c79eee lea edx, [esp + 0x54]

ROOT 96822c65 candidate 0xe2b966
00e2b8a0 push 0xf11110
00e2b8a5 push 0x69aada92
00e2b8aa mov ecx, 0x1924840
00e2b8af call 0x5c5c00
00e2b8b4 push 0xeac140
00e2b8b9 call 0xe2316c
00e2b8be pop ecx
00e2b8bf ret 
00e2b8c0 push 0xf11134
00e2b8c5 push 0x7a54808e
00e2b8ca mov ecx, 0x191fbc0
00e2b8cf call 0x5c5c00
00e2b8d4 push 0xeac160
00e2b8d9 call 0xe2316c
00e2b8de pop ecx
00e2b8df ret 
00e2b8e0 push 0xf11158
00e2b8e5 push 0x1e290179
00e2b8ea mov ecx, 0x1924ba0
00e2b8ef call 0x5c5c00
00e2b8f4 push 0xeac180
00e2b8f9 call 0xe2316c
00e2b8fe pop ecx
00e2b8ff ret 
00e2b900 push 0xf1117c
00e2b905 push 0xb1a6d066
00e2b90a mov ecx, 0x19203a0
00e2b90f call 0x5c5c00
00e2b914 push 0xeac1a0
00e2b919 call 0xe2316c
00e2b91e pop ecx
00e2b91f ret 
00e2b920 push 0xf111a0
00e2b925 push 0x6a7e945f
00e2b92a mov ecx, 0x1921ea0
00e2b92f call 0x5c5c00
00e2b934 push 0xeac1c0
00e2b939 call 0xe2316c
00e2b93e pop ecx
00e2b93f ret 
00e2b940 push 0xf111c4
00e2b945 push 0x3acf63a0
00e2b94a mov ecx, 0x1923be0
00e2b94f call 0x5c5c00
00e2b954 push 0xeac1e0
00e2b959 call 0xe2316c
00e2b95e pop ecx
00e2b95f ret 
00e2b960 push 0xf111e8
00e2b965 push 0x96822c65
00e2b96a mov ecx, 0x1922d40
00e2b96f call 0x5c5c00
00e2b974 push 0xeac200
00e2b979 call 0xe2316c
00e2b97e pop ecx
00e2b97f ret 
00e2b980 push 0xf1120c
00e2b985 push 0x3b15637
00e2b98a mov ecx, 0x19228c0
00e2b98f call 0x5c5c00
00e2b994 push 0xeac220
00e2b999 call 0xe2316c
00e2b99e pop ecx
00e2b99f ret 
00e2b9a0 push 0xf11230
00e2b9a5 push 0xaf06644b
00e2b9aa mov ecx, 0x19217e0
00e2b9af call 0x5c5c00
00e2b9b4 push 0xeac240
00e2b9b9 call 0xe2316c
00e2b9be pop ecx
00e2b9bf ret 
00e2b9c0 push 0xf11254
00e2b9c5 push 0x41d5508
00e2b9ca mov ecx, 0x1921240
00e2b9cf call 0x5c5c00

ROOT 6a7e945f candidate 0xb94418
00b943c0 sub esp, 0xc
00b943c3 push ebx
00b943c4 mov ebx, edx
00b943c6 call 0x5c5670
00b943cb test eax, eax
00b943cd jne 0xb943d8
00b943cf xor eax, eax
00b943d1 pop ebx
00b943d2 add esp, 0xc
00b943d5 ret 0xc
00b943d8 mov eax, dword ptr [0x13a2aac]
00b943dd cmp eax, 1
00b943e0 je 0xb943f5
00b943e2 cmp eax, 2
00b943e5 je 0xb943f5
00b943e7 cmp eax, 3
00b943ea je 0xb943f5
00b943ec call 0xb96c80
00b943f1 test eax, eax
00b943f3 je 0xb943cf
00b943f5 mov eax, dword ptr [esp + 0x18]
00b943f9 mov ecx, dword ptr [eax + 0x28]
00b943fc mov eax, dword ptr [ecx + 0x28]
00b943ff test eax, eax
00b94401 je 0xb9440c
00b94403 mov ecx, eax
00b94405 mov eax, dword ptr [ecx + 0x28]
00b94408 test eax, eax
00b9440a jne 0xb94403
00b9440c mov ecx, dword ptr [ecx]
00b9440e cmp ecx, 0x3acf63a0
00b94414 je 0xb9441e
00b94416 cmp ecx, 0x6a7e945f
00b9441c jne 0xb943cf
00b9441e push edi
00b9441f mov edi, dword ptr [esp + 0x20]
00b94423 lea ecx, [esp + 8]
00b94427 push ecx
00b94428 mov ecx, dword ptr [edi + 0xc]
00b9442b mov edx, 0x87b1dc26
00b94430 mov dword ptr [esp + 0xc], 0xffffffff
00b94438 call 0x69e120
00b9443d test eax, eax
00b9443f jne 0xb94489
00b94441 mov edx, dword ptr [edi]
00b94443 xor ecx, ecx
00b94445 mov eax, 0x13a1748
00b9444a lea ebx, [ebx]
00b94450 cmp dword ptr [eax], edx
00b94452 je 0xb94461
00b94454 add eax, 0xc
00b94457 inc ecx
00b94458 cmp eax, 0x13a2a44
00b9445d jl 0xb94450
00b9445f jmp 0xb94465
00b94461 mov dword ptr [esp + 8], ecx
00b94465 mov edx, dword ptr [esp + 8]
00b94469 mov ecx, dword ptr [edi + 0xc]
00b9446c mov dword ptr [esp + 0xc], edx
00b94470 mov dword ptr [esp + 0x10], 0x82f6983b
00b94478 mov eax, dword ptr [ecx]
00b9447a mov eax, dword ptr [eax + 0x10]
00b9447d lea edx, [esp + 0xc]
00b94481 push edx

ROOT 6a7e945f candidate 0xe2b926
00e2b8a0 push 0xf11110
00e2b8a5 push 0x69aada92
00e2b8aa mov ecx, 0x1924840
00e2b8af call 0x5c5c00
00e2b8b4 push 0xeac140
00e2b8b9 call 0xe2316c
00e2b8be pop ecx
00e2b8bf ret 
00e2b8c0 push 0xf11134
00e2b8c5 push 0x7a54808e
00e2b8ca mov ecx, 0x191fbc0
00e2b8cf call 0x5c5c00
00e2b8d4 push 0xeac160
00e2b8d9 call 0xe2316c
00e2b8de pop ecx
00e2b8df ret 
00e2b8e0 push 0xf11158
00e2b8e5 push 0x1e290179
00e2b8ea mov ecx, 0x1924ba0
00e2b8ef call 0x5c5c00
00e2b8f4 push 0xeac180
00e2b8f9 call 0xe2316c
00e2b8fe pop ecx
00e2b8ff ret 
00e2b900 push 0xf1117c
00e2b905 push 0xb1a6d066
00e2b90a mov ecx, 0x19203a0
00e2b90f call 0x5c5c00
00e2b914 push 0xeac1a0
00e2b919 call 0xe2316c
00e2b91e pop ecx
00e2b91f ret 
00e2b920 push 0xf111a0
00e2b925 push 0x6a7e945f
00e2b92a mov ecx, 0x1921ea0
00e2b92f call 0x5c5c00
00e2b934 push 0xeac1c0
00e2b939 call 0xe2316c
00e2b93e pop ecx
00e2b93f ret 
00e2b940 push 0xf111c4
00e2b945 push 0x3acf63a0
00e2b94a mov ecx, 0x1923be0
00e2b94f call 0x5c5c00
00e2b954 push 0xeac1e0
00e2b959 call 0xe2316c
00e2b95e pop ecx
00e2b95f ret 
00e2b960 push 0xf111e8
00e2b965 push 0x96822c65
00e2b96a mov ecx, 0x1922d40
00e2b96f call 0x5c5c00
00e2b974 push 0xeac200
00e2b979 call 0xe2316c
00e2b97e pop ecx
00e2b97f ret 
00e2b980 push 0xf1120c
00e2b985 push 0x3b15637
00e2b98a mov ecx, 0x19228c0
00e2b98f call 0x5c5c00

ROOT 041d5508 candidate 0xe2b9c6
00e2b9ae add eax, ebp
00e2b9b0 dec esp
00e2b9b1 mov byte ptr [0x4068ff79], al
00e2b9b6 ret 0xea
00e2b9b9 call 0xe2316c
00e2b9be pop ecx
00e2b9bf ret 
00e2b9c0 push 0xf11254
00e2b9c5 push 0x41d5508
00e2b9ca mov ecx, 0x1921240
00e2b9cf call 0x5c5c00
00e2b9d4 push 0xeac260
00e2b9d9 call 0xe2316c
00e2b9de pop ecx
00e2b9df ret 
00e2b9e0 push 0xf11278
00e2b9e5 push 0x34bf5301
00e2b9ea mov ecx, 0x1920700
00e2b9ef call 0x5c5c00
00e2b9f4 push 0xeac280
00e2b9f9 call 0xe2316c
00e2b9fe pop ecx
00e2b9ff ret 
00e2ba00 push 0xf1129c
00e2ba05 push 0x8bdaf8c
00e2ba0a mov ecx, 0x1924600
00e2ba0f call 0x5c5c00
00e2ba14 push 0xeac2a0
00e2ba19 call 0xe2316c
00e2ba1e pop ecx
00e2ba1f ret 
00e2ba20 push 0xf112c0
00e2ba25 push 0x11083352
00e2ba2a mov ecx, 0x1924180
00e2ba2f call 0x5c5c00
