FUNCTION 00dc09d0
00dc09d0 mov eax, dword ptr [esp + 4]
00dc09d4 mov dword ptr [esp + 4], eax
00dc09d8 test eax, eax
00dc09da je 0xdc09e2
00dc09dc mov dword ptr [eax], 0
00dc09e2 mov eax, dword ptr [ecx]
00dc09e4 mov eax, dword ptr [eax + 8]
00dc09e7 push esi
00dc09e8 lea esi, [esp + 8]
00dc09ec push esi
00dc09ed call eax
00dc09ef pop esi
00dc09f0 ret 4
00dc09f3 int3 
00dc09f4 int3 
00dc09f5 int3 
00dc09f6 int3 
00dc09f7 int3 
00dc09f8 int3 
00dc09f9 int3 
00dc09fa int3 
00dc09fb int3 
00dc09fc int3 
00dc09fd int3 
00dc09fe int3 
00dc09ff int3 
00dc0a00 mov eax, dword ptr [esp + 4]
00dc0a04 mov dword ptr [esp + 4], eax
00dc0a08 test eax, eax
00dc0a0a je 0xdc0a12
00dc0a0c mov dword ptr [eax], 0
00dc0a12 mov eax, dword ptr [ecx]
00dc0a14 mov eax, dword ptr [eax + 0xc]
00dc0a17 push esi
00dc0a18 lea esi, [esp + 8]
00dc0a1c push esi
00dc0a1d call eax
00dc0a1f pop esi
00dc0a20 ret 4
00dc0a23 int3 
00dc0a24 int3 
00dc0a25 int3 
00dc0a26 int3 
00dc0a27 int3 
00dc0a28 int3 
00dc0a29 int3 
00dc0a2a int3 
00dc0a2b int3 
00dc0a2c int3 
00dc0a2d int3 
00dc0a2e int3 
00dc0a2f int3 
00dc0a30 mov eax, dword ptr [esp + 4]
00dc0a34 mov dword ptr [esp + 4], eax
00dc0a38 test eax, eax
00dc0a3a je 0xdc0a42
00dc0a3c mov dword ptr [eax], 0
00dc0a42 mov eax, dword ptr [ecx]
00dc0a44 mov eax, dword ptr [eax + 0x10]
00dc0a47 push esi
00dc0a48 lea esi, [esp + 8]
00dc0a4c push esi
00dc0a4d call eax
00dc0a4f pop esi
00dc0a50 ret 4
00dc0a53 int3 
00dc0a54 int3 
00dc0a55 int3 
00dc0a56 int3 
00dc0a57 int3 
00dc0a58 int3 
00dc0a59 int3 
00dc0a5a int3 
00dc0a5b int3 
00dc0a5c int3 
00dc0a5d int3 
00dc0a5e int3 
00dc0a5f int3 
00dc0a60 mov eax, dword ptr [esp + 4]
00dc0a64 mov dword ptr [esp + 4], eax
00dc0a68 test eax, eax
00dc0a6a je 0xdc0a72
00dc0a6c mov dword ptr [eax], 0
00dc0a72 mov eax, dword ptr [ecx]
00dc0a74 mov eax, dword ptr [eax + 0x14]
00dc0a77 push esi
00dc0a78 lea esi, [esp + 8]
00dc0a7c push esi
00dc0a7d call eax
00dc0a7f pop esi
00dc0a80 ret 4
00dc0a83 int3 
00dc0a84 int3 
00dc0a85 int3 
00dc0a86 int3 
00dc0a87 int3 
00dc0a88 int3 
00dc0a89 int3 
00dc0a8a int3 
00dc0a8b int3 
00dc0a8c int3 
00dc0a8d int3 
00dc0a8e int3 
00dc0a8f int3 
00dc0a90 push esi
00dc0a91 mov esi, ecx
00dc0a93 mov eax, dword ptr [esi + 0xc]
00dc0a96 mov dword ptr [esi], 0xfd19cc
00dc0a9c test eax, eax
00dc0a9e jle 0xdc0acf
00dc0aa0 mov eax, dword ptr [esi + 0x14]
00dc0aa3 mov eax, dword ptr [eax + 0x78]
00dc0aa6 sub eax, 0
00dc0aa9 je 0xdc0ac1
00dc0aab call 0xdc05f0
00dc0ab0 mov edx, dword ptr [esi]
00dc0ab2 mov eax, dword ptr [edx + 8]
00dc0ab5 mov ecx, esi
00dc0ab7 call eax
00dc0ab9 mov ecx, esi
00dc0abb pop esi
00dc0abc jmp 0xdbbe80
00dc0ac1 call 0xdc0470
00dc0ac6 mov edx, dword ptr [esi]
00dc0ac8 mov eax, dword ptr [edx + 8]
00dc0acb mov ecx, esi
00dc0acd call eax
00dc0acf mov ecx, esi
00dc0ad1 pop esi
00dc0ad2 jmp 0xdbbe80
00dc0ad7 int3 
00dc0ad8 int3 
00dc0ad9 int3 
00dc0ada int3 
00dc0adb int3 
00dc0adc int3 
00dc0add int3 
00dc0ade int3 
00dc0adf int3 
00dc0ae0 mov eax, 0x1018
00dc0ae5 call 0xe230a0
00dc0aea push esi
00dc0aeb mov esi, ecx
00dc0aed fld dword ptr [esi + 0x60]
00dc0af0 push edi
00dc0af1 fstp dword ptr [esi + 0x10]
00dc0af4 mov edi, edx
00dc0af6 fld dword ptr [esi + 0x68]
00dc0af9 fstp dword ptr [esi + 0x14]
00dc0afc call 0x660050
00dc0b01 mov edx, edi
00dc0b03 mov ecx, eax
00dc0b05 call 0x65fec0
00dc0b0a mov edi, eax
00dc0b0c xor eax, eax
00dc0b0e cmp edi, eax
00dc0b10 je 0xdc0b61
00dc0b12 cmp word ptr [edi], ax
00dc0b15 je 0xdc0b61
00dc0b17 push 0x800
00dc0b1c lea edx, [esp + 0x24]
00dc0b20 lea ecx, [esp + 0xc]
00dc0b24 mov dword ptr [esp + 0x10], eax
00dc0b28 mov dword ptr [esp + 0x14], eax
00dc0b2c mov dword ptr [esp + 0x18], eax
00dc0b30 mov dword ptr [esp + 0x1c], eax
00dc0b34 mov dword ptr [esp + 0xc], 0xfd19cc
00dc0b3c mov dword ptr [esp + 0x20], esi
00dc0b40 call 0xdbbbf0
00dc0b45 mov edx, dword ptr [esp + 0x1024]
00dc0b4c push edx
00dc0b4d mov edx, edi
00dc0b4f lea ecx, [esp + 0xc]
00dc0b53 call 0xdbbe30
00dc0b58 lea ecx, [esp + 8]
00dc0b5c call 0xdc0a90
00dc0b61 pop edi
00dc0b62 pop esi
00dc0b63 add esp, 0x1018
00dc0b69 ret 4
00dc0b6c int3 
00dc0b6d int3 
00dc0b6e int3 
00dc0b6f int3 
00dc0b70 mov eax, 0x1018
00dc0b75 call 0xe230a0
00dc0b7a push ebx
00dc0b7b push esi
00dc0b7c mov esi, ecx
00dc0b7e fld dword ptr [esi + 0x60]
00dc0b81 push edi
00dc0b82 fstp dword ptr [esi + 0x10]
00dc0b85 mov edi, edx
00dc0b87 fld dword ptr [esi + 0x68]
00dc0b8a mov dword ptr [esi + 0xa4], 1
00dc0b94 fstp dword ptr [esi + 0x14]
00dc0b97 call 0x660050
00dc0b9c mov edx, edi
00dc0b9e mov ecx, eax
00dc0ba0 call 0x65fec0
00dc0ba5 mov edi, eax
00dc0ba7 xor ebx, ebx
00dc0ba9 cmp edi, ebx
00dc0bab je 0xdc0c37
00dc0bb1 push 0x800
00dc0bb6 lea edx, [esp + 0x28]
00dc0bba lea ecx, [esp + 0x10]
00dc0bbe mov dword ptr [esp + 0x14], ebx
00dc0bc2 mov dword ptr [esp + 0x18], ebx
00dc0bc6 mov dword ptr [esp + 0x1c], ebx
00dc0bca mov dword ptr [esp + 0x20], ebx
00dc0bce mov dword ptr [esp + 0x10], 0xfd19cc
00dc0bd6 mov dword ptr [esp + 0x24], esi
00dc0bda call 0xdbbbf0
00dc0bdf mov ecx, dword ptr [esp + 0x1028]
00dc0be6 push ecx
00dc0be7 mov edx, edi
00dc0be9 lea ecx, [esp + 0x10]
00dc0bed call 0xdbbe30
00dc0bf2 mov dword ptr [esp + 0xc], 0xfd19cc
00dc0bfa cmp dword ptr [esp + 0x18], ebx
00dc0bfe jle 0xdc0c28
00dc0c00 mov edx, dword ptr [esp + 0x20]
00dc0c04 mov eax, dword ptr [edx + 0x78]
00dc0c07 sub eax, ebx
00dc0c09 lea ecx, [esp + 0xc]
00dc0c0d je 0xdc0c16
00dc0c0f call 0xdc05f0
00dc0c14 jmp 0xdc0c1b
00dc0c16 call 0xdc0470
00dc0c1b mov eax, dword ptr [esp + 0xc]
00dc0c1f mov edx, dword ptr [eax + 8]
00dc0c22 lea ecx, [esp + 0xc]
00dc0c26 call edx
00dc0c28 lea ecx, [esp + 0xc]
00dc0c2c call 0xdbbe80
00dc0c31 mov dword ptr [esi + 0xa4], ebx
00dc0c37 pop edi
00dc0c38 pop esi
00dc0c39 pop ebx
00dc0c3a add esp, 0x1018
00dc0c40 ret 4
00dc0c43 int3 
00dc0c44 int3 
00dc0c45 int3 
00dc0c46 int3 
00dc0c47 int3 
00dc0c48 int3 
00dc0c49 int3 
00dc0c4a int3 
00dc0c4b int3 
00dc0c4c int3 
00dc0c4d int3 
00dc0c4e int3 
00dc0c4f int3 
00dc0c50 mov eax, 0x1018
00dc0c55 call 0xe230a0
00dc0c5a push ebx
00dc0c5b push esi
00dc0c5c mov esi, ecx
00dc0c5e fld dword ptr [esi + 0x60]
00dc0c61 push edi
00dc0c62 fstp dword ptr [esi + 0x10]
00dc0c65 xor ebx, ebx
00dc0c67 fld dword ptr [esi + 0x68]
00dc0c6a mov edi, edx
00dc0c6c push 0x800
00dc0c71 fstp dword ptr [esi + 0x14]
00dc0c74 lea edx, [esp + 0x28]
00dc0c78 lea ecx, [esp + 0x10]
00dc0c7c mov dword ptr [esi + 0xa4], 1
00dc0c86 mov dword ptr [esp + 0x14], ebx
00dc0c8a mov dword ptr [esp + 0x18], ebx
00dc0c8e mov dword ptr [esp + 0x1c], ebx
00dc0c92 mov dword ptr [esp + 0x20], ebx
00dc0c96 mov dword ptr [esp + 0x10], 0xfd19cc
00dc0c9e mov dword ptr [esp + 0x24], esi
00dc0ca2 call 0xdbbbf0
00dc0ca7 mov ecx, dword ptr [esp + 0x1028]
00dc0cae push ecx
00dc0caf mov edx, edi
00dc0cb1 lea ecx, [esp + 0x10]
00dc0cb5 call 0xdbbe30
00dc0cba mov dword ptr [esp + 0xc], 0xfd19cc
00dc0cc2 cmp dword ptr [esp + 0x18], ebx
00dc0cc6 jle 0xdc0cf0
00dc0cc8 mov edx, dword ptr [esp + 0x20]
00dc0ccc mov eax, dword ptr [edx + 0x78]
00dc0ccf sub eax, ebx
00dc0cd1 lea ecx, [esp + 0xc]
00dc0cd5 je 0xdc0cde
00dc0cd7 call 0xdc05f0
00dc0cdc jmp 0xdc0ce3
00dc0cde call 0xdc0470
00dc0ce3 mov eax, dword ptr [esp + 0xc]
00dc0ce7 mov edx, dword ptr [eax + 8]
00dc0cea lea ecx, [esp + 0xc]
00dc0cee call edx
00dc0cf0 lea ecx, [esp + 0xc]
00dc0cf4 call 0xdbbe80
00dc0cf9 pop edi
00dc0cfa mov dword ptr [esi + 0xa4], ebx
00dc0d00 pop esi
00dc0d01 pop ebx
00dc0d02 add esp, 0x1018
00dc0d08 ret 4
00dc0d0b int3 
00dc0d0c int3 
00dc0d0d int3 
00dc0d0e int3 
00dc0d0f int3 
00dc0d10 mov eax, 0x1018
00dc0d15 call 0xe230a0
00dc0d1a fld dword ptr [ecx + 0x60]
00dc0d1d fstp dword ptr [ecx + 0x10]
00dc0d20 push ebx
00dc0d21 fld dword ptr [ecx + 0x68]
00dc0d24 push esi
00dc0d25 xor ebx, ebx
00dc0d27 fstp dword ptr [ecx + 0x14]
00dc0d2a mov esi, edx
00dc0d2c mov dword ptr [esp + 0x1c], ecx
00dc0d30 push 0x800
00dc0d35 lea edx, [esp + 0x24]
00dc0d39 lea ecx, [esp + 0xc]
00dc0d3d mov dword ptr [esp + 0x10], ebx
00dc0d41 mov dword ptr [esp + 0x14], ebx
00dc0d45 mov dword ptr [esp + 0x18], ebx
00dc0d49 mov dword ptr [esp + 0x1c], ebx
00dc0d4d mov dword ptr [esp + 0xc], 0xfd19cc
00dc0d55 call 0xdbbbf0
00dc0d5a mov ecx, dword ptr [esp + 0x1024]
00dc0d61 push ecx
00dc0d62 mov edx, esi
00dc0d64 lea ecx, [esp + 0xc]
00dc0d68 call 0xdbbe30
00dc0d6d mov dword ptr [esp + 8], 0xfd19cc
00dc0d75 cmp dword ptr [esp + 0x14], ebx
00dc0d79 jle 0xdc0da3
00dc0d7b mov edx, dword ptr [esp + 0x1c]
00dc0d7f mov eax, dword ptr [edx + 0x78]
00dc0d82 sub eax, ebx
00dc0d84 lea ecx, [esp + 8]
00dc0d88 je 0xdc0d91
00dc0d8a call 0xdc05f0
00dc0d8f jmp 0xdc0d96
00dc0d91 call 0xdc0470
00dc0d96 mov eax, dword ptr [esp + 8]
00dc0d9a mov edx, dword ptr [eax + 8]
00dc0d9d lea ecx, [esp + 8]
00dc0da1 call edx
00dc0da3 lea ecx, [esp + 8]
00dc0da7 call 0xdbbe80
00dc0dac pop esi
00dc0dad pop ebx
00dc0dae add esp, 0x1018
00dc0db4 ret 4
00dc0db7 int3 
00dc0db8 int3 
00dc0db9 int3 
00dc0dba int3 
00dc0dbb int3 
00dc0dbc int3 
00dc0dbd int3 
00dc0dbe int3 
00dc0dbf int3 
00dc0dc0 push esi
00dc0dc1 mov esi, ecx
00dc0dc3 mov eax, dword ptr [esi + 0xc]
00dc0dc6 mov dword ptr [esi], 0xfd19cc
00dc0dcc test eax, eax
00dc0dce jle 0xdc0df0
00dc0dd0 mov eax, dword ptr [esi + 0x14]
00dc0dd3 mov eax, dword ptr [eax + 0x78]
00dc0dd6 sub eax, 0
00dc0dd9 je 0xdc0de2
00dc0ddb call 0xdc05f0
00dc0de0 jmp 0xdc0de7
00dc0de2 call 0xdc0470
00dc0de7 mov edx, dword ptr [esi]
00dc0de9 mov eax, dword ptr [edx + 8]
00dc0dec mov ecx, esi
00dc0dee call eax
00dc0df0 mov ecx, esi
00dc0df2 call 0xdbbe80
00dc0df7 test byte ptr [esp + 8], 1
00dc0dfc je 0xdc0e05
00dc0dfe mov ecx, esi
00dc0e00 call 0xd92ea0
00dc0e05 mov eax, esi
00dc0e07 pop esi
00dc0e08 ret 4
00dc0e0b int3 
00dc0e0c int3 
00dc0e0d int3 
00dc0e0e int3 
00dc0e0f int3 
00dc0e10 push esi
00dc0e11 mov esi, ecx
00dc0e13 lea ecx, [esi + 0x10]
00dc0e16 mov dword ptr [esi], 0xfd1a04
00dc0e1c cmp dword ptr [ecx + 8], ecx
00dc0e1f je 0xdc0e47
00dc0e21 push edi
00dc0e22 mov eax, dword ptr [ecx + 8]
00dc0e25 cmp eax, ecx
00dc0e27 je 0xdc0e41
00dc0e29 mov edx, dword ptr [eax + 4]
00dc0e2c mov edi, dword ptr [eax + 8]
00dc0e2f mov dword ptr [edx + 8], edi
00dc0e32 mov edx, dword ptr [eax + 8]
00dc0e35 mov edi, dword ptr [eax + 4]
00dc0e38 mov dword ptr [edx + 4], edi
00dc0e3b mov dword ptr [eax + 8], eax
00dc0e3e mov dword ptr [eax + 4], eax
00dc0e41 cmp dword ptr [ecx + 8], ecx
00dc0e44 jne 0xdc0e22
00dc0e46 pop edi
00dc0e47 xor eax, eax
00dc0e49 mov dword ptr [esi + 0x38], eax
00dc0e4c mov dword ptr [esi + 0x3c], eax
00dc0e4f mov dword ptr [esi + 0x40], eax
00dc0e52 call 0xdbc140
00dc0e57 mov eax, dword ptr [esi + 4]
00dc0e5a mov ecx, dword ptr [esi + 8]
00dc0e5d mov dword ptr [esi], 0xee3efc
00dc0e63 mov dword ptr [eax + 8], ecx
00dc0e66 mov edx, dword ptr [esi + 8]
00dc0e69 mov eax, dword ptr [esi + 4]
00dc0e6c mov dword ptr [edx + 4], eax
00dc0e6f mov dword ptr [esi + 8], esi
00dc0e72 mov dword ptr [esi + 4], esi
00dc0e75 pop esi
00dc0e76 ret 
00dc0e77 int3 
00dc0e78 int3 
00dc0e79 int3 
00dc0e7a int3 
00dc0e7b int3 
00dc0e7c int3 
00dc0e7d int3 
00dc0e7e int3 
00dc0e7f int3 
00dc0e80 push ebx
00dc0e81 push esi
00dc0e82 mov esi, dword ptr [ecx + 0x18]
00dc0e85 push edi
00dc0e86 lea edi, [ecx + 0x10]
00dc0e89 mov ebx, edx
00dc0e8b cmp esi, edi
00dc0e8d je 0xdc0eab
00dc0e8f test esi, esi
00dc0e91 je 0xdc0eab
00dc0e93 mov eax, dword ptr [esi]
00dc0e95 mov edx, dword ptr [eax + 0x14]
00dc0e98 mov ecx, esi
00dc0e9a call edx
00dc0e9c cmp eax, ebx
00dc0e9e je 0xdc0eb1
00dc0ea0 mov esi, dword ptr [esi + 8]
00dc0ea3 cmp esi, edi
00dc0ea5 je 0xdc0eab
00dc0ea7 test esi, esi
00dc0ea9 jne 0xdc0e93
00dc0eab pop edi
00dc0eac pop esi
00dc0ead xor eax, eax
00dc0eaf pop ebx
00dc0eb0 ret 
00dc0eb1 pop edi
00dc0eb2 mov eax, esi
00dc0eb4 pop esi
00dc0eb5 pop ebx
00dc0eb6 ret 
00dc0eb7 int3 
00dc0eb8 int3 
00dc0eb9 int3 
00dc0eba int3 
00dc0ebb int3 
00dc0ebc int3 
00dc0ebd int3 
00dc0ebe int3 
00dc0ebf int3 
00dc0ec0 mov dword ptr [ecx + 0x38], edx
00dc0ec3 mov eax, 1
00dc0ec8 ret 
00dc0ec9 int3 
00dc0eca int3 
00dc0ecb int3 
00dc0ecc int3 
00dc0ecd int3 
00dc0ece int3 
00dc0ecf int3 
00dc0ed0 push ecx
00dc0ed1 push ebx
00dc0ed2 push ebp
00dc0ed3 push esi
00dc0ed4 push edi
00dc0ed5 mov edi, edx
00dc0ed7 mov eax, dword ptr [edi]
00dc0ed9 mov edx, dword ptr [eax + 0x14]
00dc0edc mov ebp, ecx
00dc0ede mov ecx, edi
00dc0ee0 call edx
00dc0ee2 mov esi, dword ptr [ebp + 0x18]
00dc0ee5 lea ebx, [ebp + 0x10]
00dc0ee8 mov dword ptr [esp + 0x10], eax
00dc0eec cmp esi, ebx
00dc0eee je 0xdc0f10
00dc0ef0 test esi, esi
00dc0ef2 je 0xdc0f10
00dc0ef4 mov eax, dword ptr [esi]
00dc0ef6 mov edx, dword ptr [eax + 0x14]
00dc0ef9 mov ecx, esi
00dc0efb call edx
00dc0efd cmp eax, dword ptr [esp + 0x10]
00dc0f01 je 0xdc0f1c
00dc0f03 mov eax, dword ptr [esi + 8]
00dc0f06 cmp eax, ebx
00dc0f08 je 0xdc0f10
00dc0f0a mov esi, eax
00dc0f0c test eax, eax
00dc0f0e jne 0xdc0ef4
00dc0f10 cmp dword ptr [edi + 8], edi
00dc0f13 je 0xdc0f39
00dc0f15 mov ecx, 0x213c1ec
00dc0f1a jmp 0xdc0f21
00dc0f1c mov ecx, 0x213c1d0
00dc0f21 mov edx, 0x7fffffff
00dc0f26 mov dword ptr [ebp + 0x40], ecx
00dc0f29 call 0xd95f70
00dc0f2e pop edi
00dc0f2f pop esi
00dc0f30 mov dword ptr [ebp + 0x3c], eax
00dc0f33 pop ebp
00dc0f34 xor eax, eax
00dc0f36 pop ebx
00dc0f37 pop ecx
00dc0f38 ret 
00dc0f39 mov eax, dword ptr [ebx + 8]
00dc0f3c mov ecx, dword ptr [eax + 4]
00dc0f3f mov dword ptr [edi + 4], ecx
00dc0f42 mov edx, dword ptr [ebx + 8]
00dc0f45 mov dword ptr [edi + 8], edx
00dc0f48 mov eax, ecx
00dc0f4a mov dword ptr [eax + 8], edi
00dc0f4d mov ecx, dword ptr [edi + 8]
00dc0f50 mov dword ptr [ecx + 4], edi
00dc0f53 pop edi
00dc0f54 pop esi
00dc0f55 pop ebp
00dc0f56 mov eax, 1
00dc0f5b pop ebx
00dc0f5c pop ecx
00dc0f5d ret 
00dc0f5e int3 
00dc0f5f int3 
00dc0f60 push ecx
00dc0f61 mov eax, dword ptr [esp + 0xc]
00dc0f65 push ebx
00dc0f66 push esi
00dc0f67 push edi
00dc0f68 mov edi, ecx
00dc0f6a mov esi, edx
00dc0f6c mov dword ptr [esp + 0xc], edi
00dc0f70 test eax, eax
00dc0f72 je 0xdc0f76
00dc0f74 mov dword ptr [eax], esi
00dc0f76 movzx eax, word ptr [esi]
00dc0f79 mov ebx, esi
00dc0f7b test ax, ax
00dc0f7e je 0xdc0f92
00dc0f80 cmp ax, 0x3a
00dc0f84 je 0xdc0fb1
00dc0f86 movzx eax, word ptr [ebx + 2]
00dc0f8a add ebx, 2
00dc0f8d test ax, ax
00dc0f90 jne 0xdc0f80
00dc0f92 cmp word ptr [ebx], 0x3a
00dc0f96 je 0xdc0fb1
00dc0f98 mov eax, dword ptr [edi + 0x38]
00dc0f9b mov ecx, dword ptr [esp + 0x14]
00dc0f9f xor edx, edx
00dc0fa1 test eax, eax
00dc0fa3 setne dl
00dc0fa6 pop edi
00dc0fa7 pop esi
00dc0fa8 mov dword ptr [ecx], eax
00dc0faa pop ebx
00dc0fab mov eax, edx
00dc0fad pop ecx
00dc0fae ret 8
00dc0fb1 mov eax, ebx
00dc0fb3 sub eax, esi
00dc0fb5 sar eax, 1
00dc0fb7 cmp eax, 1
00dc0fba jl 0xdc0f98
00dc0fbc push ebp
00dc0fbd lea edx, [eax + 1]
00dc0fc0 mov ecx, esi
00dc0fc2 call 0xd95f40
00dc0fc7 mov esi, dword ptr [edi + 0x18]
00dc0fca add edi, 0x10
00dc0fcd mov ebp, eax
00dc0fcf cmp esi, edi
00dc0fd1 je 0xdc0fef
00dc0fd3 test esi, esi
00dc0fd5 je 0xdc0fef
00dc0fd7 mov eax, dword ptr [esi]
00dc0fd9 mov edx, dword ptr [eax + 0x14]
00dc0fdc mov ecx, esi
00dc0fde call edx
00dc0fe0 cmp eax, ebp
00dc0fe2 je 0xdc0ff1
00dc0fe4 mov esi, dword ptr [esi + 8]
00dc0fe7 cmp esi, edi
00dc0fe9 je 0xdc0fef
00dc0feb test esi, esi
00dc0fed jne 0xdc0fd7
00dc0fef xor esi, esi
00dc0ff1 mov ecx, dword ptr [esp + 0x18]
00dc0ff5 mov dword ptr [ecx], esi
00dc0ff7 pop ebp
00dc0ff8 test esi, esi
00dc0ffa je 0xdc1015
00dc0ffc mov eax, dword ptr [esp + 0x18]
00dc1000 test eax, eax
00dc1002 je 0xdc1009
00dc1004 add ebx, 2
00dc1007 mov dword ptr [eax], ebx
00dc1009 pop edi
00dc100a pop esi
00dc100b mov eax, 1
00dc1010 pop ebx
00dc1011 pop ecx
00dc1012 ret 8
00dc1015 mov eax, dword ptr [esp + 0xc]
00dc1019 mov eax, dword ptr [eax + 0x38]
00dc101c mov dword ptr [ecx], eax
00dc101e xor ecx, ecx
00dc1020 test eax, eax
00dc1022 setne cl
00dc1025 pop edi
00dc1026 pop esi
00dc1027 pop ebx
00dc1028 mov eax, ecx
00dc102a pop ecx
00dc102b ret 8
00dc102e int3 
00dc102f int3 
00dc1030 push ecx
00dc1031 mov eax, dword ptr [esp + 0xc]
00dc1035 push ebx
00dc1036 push esi
00dc1037 push edi
00dc1038 mov edi, ecx
00dc103a mov esi, edx
00dc103c mov dword ptr [esp + 0xc], edi
FUNCTION 006601c0
006601c0 mov eax, dword ptr [esp + 4]
006601c4 push esi
006601c5 push edi
006601c6 mov edi, dword ptr [edx]
006601c8 mov esi, ecx
006601ca mov dword ptr [esp + 0xc], eax
006601ce test eax, eax
006601d0 je 0x6601ee
006601d2 lea ecx, [esp + 0xc]
006601d6 call 0x65ffb0
006601db test eax, eax
006601dd je 0x6601ee
006601df mov ecx, dword ptr [esp + 0xc]
006601e3 push ecx
006601e4 push eax
006601e5 mov edx, esi
006601e7 mov ecx, edi
006601e9 call 0x660010
006601ee pop edi
006601ef pop esi
006601f0 ret 4
006601f3 retf 
006601f4 int3 
006601f5 int3 
006601f6 int3 
006601f7 int3 
006601f8 int3 
006601f9 int3 
006601fa int3 
006601fb int3 
006601fc int3 
006601fd int3 
006601fe int3 
006601ff int3 
00660200 cmp dword ptr [ecx + 0xc], ecx
00660203 je 0x660227
00660205 push esi
00660206 mov eax, dword ptr [ecx + 0xc]
00660209 mov edx, dword ptr [eax + 8]
0066020c mov esi, dword ptr [eax + 0xc]
0066020f mov dword ptr [edx + 0xc], esi
00660212 mov edx, dword ptr [eax + 0xc]
00660215 mov esi, dword ptr [eax + 8]
00660218 mov dword ptr [edx + 8], esi
0066021b mov dword ptr [eax + 0xc], eax
0066021e mov dword ptr [eax + 8], eax
00660221 cmp dword ptr [ecx + 0xc], ecx
00660224 jne 0x660206
00660226 pop esi
00660227 mov eax, dword ptr [ecx + 8]
0066022a mov edx, dword ptr [ecx + 0xc]
0066022d mov dword ptr [ecx], 0xedb338
00660233 mov dword ptr [eax + 0xc], edx
00660236 mov eax, dword ptr [ecx + 0xc]
00660239 mov edx, dword ptr [ecx + 8]
0066023c mov dword ptr [eax + 8], edx
0066023f mov dword ptr [ecx + 0xc], ecx
00660242 mov dword ptr [ecx + 8], ecx
00660245 ret 
00660246 pop edx
00660247 int3 
00660248 int3 
00660249 int3 
0066024a int3 
0066024b int3 
0066024c int3 
0066024d int3 
0066024e int3 
0066024f int3 
00660250 push ebx
00660251 push ebp
00660252 mov ebp, dword ptr [ecx + 0x2c]
00660255 push esi
00660256 push edi
00660257 mov edi, dword ptr [esp + 0x14]
0066025b mov ebx, edx
0066025d lea esi, [edi + ebp - 1]
00660261 xor edx, edx
00660263 mov eax, esi
00660265 div edi
00660267 sub esi, edx
00660269 mov edx, dword ptr [ecx + 0x30]
0066026c mov eax, esi
0066026e mov edi, eax
00660270 sub edi, ebp
00660272 sub edx, edi
00660274 cmp edx, ebx
00660276 jl 0x660289
00660278 add edi, ebx
0066027a sub edx, ebx
0066027c add dword ptr [ecx + 0x2c], edi
0066027f pop edi
00660280 pop esi
00660281 pop ebp
00660282 mov dword ptr [ecx + 0x30], edx
00660285 pop ebx
00660286 ret 0x10
00660289 pop edi
0066028a pop esi
0066028b pop ebp
0066028c xor eax, eax
0066028e pop ebx
0066028f ret 0x10
00660292 cli 
00660293 int3 
00660294 int3 
00660295 int3 
00660296 int3 
00660297 int3 
00660298 int3 
00660299 int3 
0066029a int3 
0066029b int3 
0066029c int3 
0066029d int3 
0066029e int3 
0066029f int3 
006602a0 push ebx
006602a1 push esi
006602a2 mov esi, ecx
006602a4 xor ebx, ebx
006602a6 push edi
006602a7 lea ecx, [esi + 0x90]
006602ad mov dword ptr [esi + 0xc], ebx
006602b0 mov dword ptr [esi + 4], esi
006602b3 mov dword ptr [esi + 8], esi
006602b6 mov dword ptr [esi], 0xf1ddfc
006602bc call 0xdbcff0
006602c1 mov dword ptr [esi + 0x90], 0xec9b84
006602cb mov dword ptr [esi + 0xc8], ebx
006602d1 or eax, 0xffffffff
006602d4 mov dword ptr [esi + 0xcc], eax
006602da mov dword ptr [esi + 0xd0], ebx
006602e0 mov dword ptr [esi + 0xd4], ebx
006602e6 mov dword ptr [esi + 0xd8], ebx
006602ec push eax
006602ed mov edx, esi
006602ef mov ecx, 0x20e40f0
006602f4 mov dword ptr [esi + 0x2f8], ebx
006602fa mov dword ptr [esi + 0x2fc], eax
00660300 call 0xd9c1a0
00660305 pop edi
00660306 mov eax, esi
00660308 pop esi
00660309 pop ebx
0066030a ret 
0066030b push eax
0066030c int3 
0066030d int3 
0066030e int3 
0066030f int3 
00660310 push esi
00660311 mov esi, ecx
00660313 mov dword ptr [esi], 0xf1ddfc
00660319 mov eax, dword ptr [esi + 0x94]
0066031f mov ecx, dword ptr [esi + 0x98]
00660325 push edi
00660326 lea edi, [esi + 0x90]
0066032c mov dword ptr [eax + 8], ecx
0066032f mov edx, dword ptr [edi + 8]
00660332 mov eax, dword ptr [edi + 4]
00660335 mov dword ptr [edx + 4], eax
00660338 lea ecx, [esi + 0x2dc]
FUNCTION 00dd3610
00dd3610 push esi
00dd3611 push edi
00dd3612 mov esi, ecx
00dd3614 call 0xda3620
00dd3619 mov eax, dword ptr [eax + 0x3094]
00dd361f mov edx, dword ptr [eax + 8]
00dd3622 mov ecx, esi
00dd3624 call 0x54b630
00dd3629 xor edi, edi
00dd362b cmp dword ptr [esi + 0x3c], edi
00dd362e jle 0xdd3647
00dd3630 push ebx
00dd3631 xor ebx, ebx
00dd3633 mov ecx, dword ptr [esi + 0x40]
00dd3636 add ecx, ebx
00dd3638 call 0xdde910
00dd363d inc edi
00dd363e sub ebx, -0x80
00dd3641 cmp edi, dword ptr [esi + 0x3c]
00dd3644 jl 0xdd3633
00dd3646 pop ebx
00dd3647 pop edi
00dd3648 mov eax, 1
00dd364d pop esi
00dd364e ret 
00dd364f int3 
00dd3650 push ebx
00dd3651 mov ebx, dword ptr [esp + 8]
00dd3655 push ebp
00dd3656 push esi
00dd3657 mov esi, dword ptr [eax + 0x18]
00dd365a xor ecx, ecx
00dd365c test esi, esi
00dd365e jle 0xdd367f
00dd3660 mov edx, dword ptr [eax + 0x1c]
00dd3663 add edx, 0xc
00dd3666 mov eax, dword ptr [edx]
00dd3668 test eax, eax
00dd366a je 0xdd3677
00dd366c cmp eax, edi
00dd366e jb 0xdd3677
00dd3670 lea ebp, [edi + ebx]
00dd3673 cmp eax, ebp
00dd3675 jb 0xdd3687
00dd3677 inc ecx
00dd3678 add edx, 0x18
00dd367b cmp ecx, esi
00dd367d jl 0xdd3666
00dd367f pop esi
00dd3680 pop ebp
00dd3681 xor eax, eax
00dd3683 pop ebx
00dd3684 ret 4
00dd3687 pop esi
00dd3688 pop ebp
00dd3689 mov eax, 1
00dd368e pop ebx
00dd368f ret 4
00dd3692 int3 
00dd3693 int3 
00dd3694 int3 
00dd3695 int3 
00dd3696 int3 
00dd3697 int3 
00dd3698 int3 
00dd3699 int3 
00dd369a int3 
00dd369b int3 
00dd369c int3 
00dd369d int3 
00dd369e int3 
00dd369f int3 
00dd36a0 cmp dword ptr [ecx + 0x48], 0
00dd36a4 jne 0xdd36a9
00dd36a6 xor eax, eax
00dd36a8 ret 
00dd36a9 mov eax, dword ptr [ecx + 0x44]
00dd36ac ret 
00dd36ad int3 
00dd36ae int3 
00dd36af int3 
00dd36b0 mov eax, edx
00dd36b2 mov edx, dword ptr [ecx + 0x48]
00dd36b5 test edx, edx
00dd36b7 jne 0xdd36bc
00dd36b9 xor eax, eax
00dd36bb ret 
00dd36bc cmp eax, dword ptr [ecx + 0x44]
00dd36bf jge 0xdd36b9
00dd36c1 imul eax, eax, 0xe0
00dd36c7 add eax, edx
00dd36c9 ret 
00dd36ca int3 
00dd36cb int3 
00dd36cc int3 
00dd36cd int3 
00dd36ce int3 
00dd36cf int3 
00dd36d0 mov eax, dword ptr [ecx + 0x48]
00dd36d3 test eax, eax
00dd36d5 jne 0xdd36d8
00dd36d7 ret 
00dd36d8 xor edx, edx
00dd36da cmp dword ptr [ecx + 0x44], edx
00dd36dd setle dl
00dd36e0 dec edx
00dd36e1 and eax, edx
00dd36e3 ret 
00dd36e4 int3 
00dd36e5 int3 
00dd36e6 int3 
00dd36e7 int3 
00dd36e8 int3 
00dd36e9 int3 
00dd36ea int3 
00dd36eb int3 
00dd36ec int3 
00dd36ed int3 
00dd36ee int3 
00dd36ef int3 
00dd36f0 push edi
00dd36f1 mov edi, dword ptr [ecx + 0x48]
00dd36f4 test edi, edi
00dd36f6 jne 0xdd36fc
00dd36f8 xor eax, eax
00dd36fa pop edi
00dd36fb ret 
00dd36fc sub edx, edi
00dd36fe push esi
00dd36ff mov esi, edx
00dd3701 mov eax, 0x92492493
00dd3706 imul esi
00dd3708 add edx, esi
00dd370a sar edx, 7
00dd370d mov eax, edx
00dd370f shr eax, 0x1f
00dd3712 add eax, edx
00dd3714 pop esi
00dd3715 js 0xdd36f8
00dd3717 lea edx, [eax + 1]
00dd371a cmp edx, dword ptr [ecx + 0x44]
00dd371d jge 0xdd36f8
00dd371f inc eax
