
START de2400
00de2400 push      ebx
00de2401 mov       ebx, ecx
00de2403 mov       eax, dword ptr [ebx + 0x4c]
00de2406 neg       eax
00de2408 sbb       eax, eax
00de240a and       eax, dword ptr [esp + 0x24]
00de240e push      ebp
00de240f sub       eax, 0
00de2412 mov       ebp, edx
00de2414 je        0xde24c7
00de241a dec       eax
00de241b je        0xde245e
00de241d movss     xmm0, dword ptr [esp + 0x24]
00de2423 mov       eax, dword ptr [esp + 0x1c]
00de2427 mov       ecx, dword ptr [esp + 0x18]
00de242b mov       edx, dword ptr [esp + 0x14]
00de242f sub       esp, 8
00de2432 movss     dword ptr [esp + 4], xmm0
00de2438 movss     xmm0, dword ptr [esp + 0x28]
00de243e movss     dword ptr [esp], xmm0
00de2443 push      eax
00de2444 mov       eax, dword ptr [esp + 0x1c]
00de2448 push      ecx
00de2449 mov       ecx, dword ptr [esp + 0x1c]
00de244d push      edx
00de244e push      eax
00de244f push      ecx
00de2450 mov       edx, ebp
00de2452 mov       ecx, ebx
00de2454 call      0xde19c0
00de2459 pop       ebp
00de245a pop       ebx
00de245b ret       0x20
00de245e push      esi
00de245f push      edi
00de2460 call      0xd96860
00de2465 mov       edi, dword ptr [esp + 0x1c]
00de2469 mov       esi, eax
00de246b call      0xde0fd0
00de2470 mulss     xmm0, dword ptr [ebx + 0x54]
00de2475 comiss    xmm0, dword ptr [0xec6e14]
00de247c jbe       0xde2485
00de247e mov       eax, 1
00de2483 jmp       0xde2487
00de2485 xor       eax, eax
00de2487 movss     xmm0, dword ptr [esp + 0x2c]
00de248d mov       edx, dword ptr [esp + 0x24]
00de2491 mov       ecx, dword ptr [esp + 0x18]
00de2495 push      eax
00de2496 mov       eax, dword ptr [esp + 0x24]
00de249a sub       esp, 8
00de249d movss     dword ptr [esp + 4], xmm0
00de24a3 movss     xmm0, dword ptr [esp + 0x34]
00de24a9 movss     dword ptr [esp], xmm0
00de24ae push      edx
00de24af mov       edx, dword ptr [esp + 0x24]
00de24b3 push      eax
00de24b4 push      edi
00de24b5 push      ecx
00de24b6 push      edx
00de24b7 mov       edx, ebp
00de24b9 mov       ecx, ebx
00de24bb call      0xde1250
00de24c0 pop       edi
00de24c1 pop       esi
00de24c2 pop       ebp
00de24c3 pop       ebx
00de24c4 ret       0x20
00de24c7 movss     xmm0, dword ptr [esp + 0x24]
00de24cd mov       eax, dword ptr [esp + 0x1c]
00de24d1 mov       ecx, dword ptr [esp + 0x18]
00de24d5 mov       edx, dword ptr [esp + 0x14]
00de24d9 push      0
00de24db sub       esp, 8
00de24de movss     dword ptr [esp + 4], xmm0
00de24e4 movss     xmm0, dword ptr [esp + 0x2c]
00de24ea movss     dword ptr [esp], xmm0
00de24ef push      eax
00de24f0 mov       eax, dword ptr [esp + 0x20]
00de24f4 push      ecx
00de24f5 mov       ecx, dword ptr [esp + 0x20]
00de24f9 push      edx
00de24fa push      eax
00de24fb push      ecx
00de24fc mov       edx, ebp
00de24fe mov       ecx, ebx
00de2500 call      0xde1250
00de2505 pop       ebp
00de2506 pop       ebx
00de2507 ret       0x20
00de250a int3      
00de250b int3      
00de250c int3      
00de250d int3      
00de250e int3      
00de250f int3      
00de2510 push      esi
00de2511 mov       esi, ecx
00de2513 cmp       dword ptr [esi + 0x290], 0
00de251a mov       eax, edx
00de251c je        0xde2524
00de251e xor       eax, eax
00de2520 pop       esi
00de2521 ret       8
00de2524 test      eax, eax
00de2526 jne       0xde252d
00de2528 call      0x65fe90
00de252d mov       ecx, dword ptr [esp + 0xc]
00de2531 mov       dword ptr [esi + 0x294], eax
00de2537 mov       eax, dword ptr [esp + 8]
00de253b mov       dword ptr [esi + 0x298], eax
00de2541 mov       eax, 1
00de2546 mov       dword ptr [esi + 0x29c], ecx
00de254c mov       dword ptr [esi + 0x290], eax
00de2552 pop       esi
00de2553 ret       8
00de2556 int3      
00de2557 int3      
00de2558 int3      
00de2559 int3      
00de255a int3      
00de255b int3      
00de255c int3      
00de255d int3      
00de255e int3      
00de255f int3      
00de2560 xor       eax, eax
00de2562 cmp       dword ptr [ecx + 0x290], eax
00de2568 jne       0xde256b
00de256a ret       
00de256b mov       dword ptr [ecx + 0x294], eax
00de2571 mov       dword ptr [ecx + 0x290], eax
00de2577 mov       eax, 1
00de257c ret       
00de257d int3      
00de257e int3      
00de257f int3      
00de2580 mov       eax, dword ptr [ecx + 0xc]
00de2583 cmp       eax, ecx
00de2585 je        0xde25a0
00de2587 test      eax, eax
00de2589 je        0xde25a0
00de258b jmp       0xde2590
00de258d lea       ecx, [ecx]
00de2590 cmp       dword ptr [eax + 0x48], edx
00de2593 je        0xde25a2
00de2595 mov       eax, dword ptr [eax + 0xc]
00de2598 cmp       eax, ecx
00de259a je        0xde25a0
00de259c test      eax, eax
00de259e jne       0xde2590
00de25a0 xor       eax, eax
00de25a2 ret       
00de25a3 int3      
00de25a4 int3      
00de25a5 int3      
00de25a6 int3      
00de25a7 int3      
00de25a8 int3      
00de25a9 int3      
00de25aa int3      
00de25ab int3      
00de25ac int3      
00de25ad int3      
00de25ae int3      
00de25af int3      
00de25b0 mov       eax, dword ptr [ecx + 0xc]
00de25b3 cmp       eax, ecx
00de25b5 je        0xde25d0
00de25b7 test      eax, eax
00de25b9 je        0xde25d0
00de25bb jmp       0xde25c0
00de25bd lea       ecx, [ecx]
00de25c0 cmp       dword ptr [eax + 0x4c], edx
00de25c3 je        0xde25d2
00de25c5 mov       eax, dword ptr [eax + 0xc]
00de25c8 cmp       eax, ecx
00de25ca je        0xde25d0
00de25cc test      eax, eax
00de25ce jne       0xde25c0
00de25d0 xor       eax, eax
00de25d2 ret       
00de25d3 int3      
00de25d4 int3      
00de25d5 int3      
00de25d6 int3      
00de25d7 int3      
00de25d8 int3      
00de25d9 int3      
00de25da int3      
00de25db int3      
00de25dc int3      
00de25dd int3      
00de25de int3      
00de25df int3      
00de25e0 push      esi
00de25e1 mov       esi, edx
00de25e3 cmp       dword ptr [esi], 0
00de25e6 jne       0xde26c2
00de25ec mov       eax, dword ptr [esp + 8]
00de25f0 mov       edx, dword ptr [esp + 0xc]
00de25f4 mov       dword ptr [esi + 0x26c], eax
00de25fa mov       eax, dword ptr [esp + 0x10]
00de25fe mov       dword ptr [esi + 0x270], edx
00de2604 mov       dword ptr [esi], 1
00de260a mov       dword ptr [esi + 0x274], eax
00de2610 mov       ecx, dword ptr [ecx + 0x294]
00de2616 push      0
00de2618 lea       edx, [esi + 0x18]
00de261b call      0xda1f50
00de2620 test      eax, eax
00de2622 je        0xde26c2
00de2628 mov       eax, dword ptr [esi + 0x260]
00de262e test      eax, eax
00de2630 je        0xde265b
00de2632 mov       ecx, dword ptr [esi + 0x268]
00de2638 mov       edx, dword ptr [esi + 0x264]
00de263e push      ecx
00de263f push      edx
00de2640 mov       edx, dword ptr [esi + 0x4c]
00de2643 lea       ecx, [esi + 0x50]
00de2646 push      ecx
00de2647 mov       ecx, dword ptr [esi + 0x48]
00de264a push      edx
00de264b mov       edx, dword ptr [esi + 0x44]
00de264e push      ecx
00de264f mov       ecx, dword ptr [esi + 0x40]
00de2652 push      edx
00de2653 xor       edx, edx
00de2655 push      ecx
00de2656 lea       ecx, [edx + 2]
00de2659 call      eax
00de265b mov       ecx, dword ptr [esi + 0x48]
00de265e mov       edx, dword ptr [ecx]
00de2660 mov       eax, dword ptr [edx + 4]
00de2663 call      eax
00de2665 mov       eax, dword ptr [esi + 0x26c]
00de266b test      eax, eax
00de266d je        0xde269a
00de266f mov       ecx, dword ptr [esi + 0x274]
00de2675 mov       edx, dword ptr [esi + 0x270]
00de267b push      ecx
00de267c push      edx
00de267d mov       edx, dword ptr [esi + 0x4c]
00de2680 lea       ecx, [esi + 0x50]
00de2683 push      ecx
00de2684 mov       ecx, dword ptr [esi + 0x48]
00de2687 push      edx
00de2688 mov       edx, dword ptr [esi + 0x44]
00de268b push      ecx
00de268c mov       ecx, dword ptr [esi + 0x40]
00de268f push      edx
00de2690 mov       edx, 2
00de2695 push      ecx
00de2696 mov       ecx, edx
00de2698 call      eax
00de269a mov       edx, dword ptr [esi + 0xc]
00de269d mov       eax, dword ptr [esi + 0x10]
00de26a0 mov       dword ptr [edx + 0x10], eax
00de26a3 mov       ecx, dword ptr [esi + 0x10]
00de26a6 mov       edx, dword ptr [esi + 0xc]
00de26a9 mov       dword ptr [ecx + 0xc], edx
00de26ac mov       dword ptr [esi + 0x10], esi
00de26af mov       dword ptr [esi + 0xc], esi
00de26b2 mov       dword ptr [esi + 8], 3
00de26b9 mov       eax, 1
00de26be pop       esi
00de26bf ret       0xc
00de26c2 xor       eax, eax
00de26c4 pop       esi
00de26c5 ret       0xc
00de26c8 int3      
00de26c9 int3      
00de26ca int3      
00de26cb int3      
00de26cc int3      
00de26cd int3      
00de26ce int3      
00de26cf int3      
00de26d0 xor       eax, eax
00de26d2 cmp       dword ptr [ecx + 0x10], ecx
00de26d5 sete      al
00de26d8 ret       
00de26d9 int3      
00de26da int3      
00de26db int3      
00de26dc int3      
00de26dd int3      
00de26de int3      
00de26df int3      
00de26e0 push      esi
00de26e1 mov       esi, ecx
00de26e3 cmp       dword ptr [esi + 0x10], esi
00de26e6 je        0xde271b
00de26e8 mov       ecx, 0x20e40f0
00de26ed call      0xd9c880
00de26f2 cmp       dword ptr [esi + 0x10], esi
00de26f5 je        0xde271b
00de26f7 jmp       0xde2700
00de26f9 lea       esp, [esp]
00de2700 mov       ecx, 0x20e40f0
00de2705 call      0xd9c880
00de270a push      0
00de270c push      0x3e8
00de2711 call      0xda1a90
00de2716 cmp       dword ptr [esi + 0x10], esi
00de2719 jne       0xde2700
00de271b pop       esi
00de271c ret       
00de271d int3      
00de271e int3      
00de271f int3      
00de2720 sub       esp, 0x1c
00de2723 push      esi
00de2724 mov       esi, ecx
00de2726 mov       eax, dword ptr [esi + 0x24]
00de2729 mov       eax, dword ptr [eax + 4]
00de272c sub       eax, 0
00de272f push      edi
00de2730 je        0xde2752
00de2732 dec       eax
00de2733 jne       0xde27ff
00de2739 mov       eax, dword ptr [esi + 0x24]
00de273c mov       edi, dword ptr [eax + 0x48]
00de273f mov       edx, dword ptr [eax + 0x4c]
00de2742 mov       ecx, dword ptr [eax + 0x44]
00de2745 push      0
00de2747 push      edi
00de2748 call      0xda3510
00de274d jmp       0xde27e1
00de2752 mov       eax, dword ptr [esi + 0x24]
00de2755 mov       edi, dword ptr [eax + 0x288]
00de275b mov       edx, dword ptr [eax + 0x27c]
00de2761 mov       ecx, dword ptr [eax + 0x48]
00de2764 push      ebx
00de2765 mov       ebx, dword ptr [eax + 0x284]
00de276b push      ebp
00de276c mov       ebp, dword ptr [eax + 0x280]
00de2772 push      edi
00de2773 mov       dword ptr [esp + 0x14], edx
00de2777 mov       edx, dword ptr [eax + 0x278]
00de277d mov       edi, dword ptr [esp + 0x14]
00de2781 push      ebx
00de2782 push      ebp
00de2783 push      edi
00de2784 mov       dword ptr [esp + 0x24], edx
00de2788 mov       edx, dword ptr [eax + 0x250]
00de278e mov       edi, dword ptr [esp + 0x24]
00de2792 push      edi
00de2793 mov       dword ptr [esp + 0x2c], edx
00de2797 mov       edx, dword ptr [eax + 0x258]
00de279d mov       edi, dword ptr [esp + 0x2c]
00de27a1 push      edi
00de27a2 mov       dword ptr [esp + 0x34], edx
00de27a6 mov       edx, dword ptr [eax + 0x254]
00de27ac mov       edi, dword ptr [esp + 0x34]
00de27b0 mov       dword ptr [esp + 0x38], edx
00de27b4 mov       edx, dword ptr [eax + 0x25c]
00de27ba push      edi
00de27bb mov       edi, dword ptr [esp + 0x3c]
00de27bf mov       dword ptr [esp + 0x40], edx
00de27c3 lea       edx, [eax + 0x50]
00de27c6 mov       eax, dword ptr [eax + 0x4c]
00de27c9 push      edi
00de27ca mov       edi, dword ptr [esp + 0x44]
00de27ce mov       dword ptr [esp + 0x48], eax
00de27d2 mov       eax, dword ptr [ecx]
00de27d4 mov       eax, dword ptr [eax + 8]
00de27d7 push      edi
00de27d8 push      edx
00de27d9 mov       edx, dword ptr [esp + 0x50]
00de27dd call      eax
00de27df pop       ebp
00de27e0 pop       ebx
00de27e1 test      eax, eax
00de27e3 je        0xde27f5
00de27e5 mov       ecx, dword ptr [esi + 0x24]
00de27e8 pop       edi
00de27e9 mov       dword ptr [ecx + 8], 1
00de27f0 pop       esi
00de27f1 add       esp, 0x1c
00de27f4 ret       
00de27f5 mov       edx, dword ptr [esi + 0x24]
00de27f8 mov       dword ptr [edx + 8], 2
00de27ff pop       edi
00de2800 pop       esi
00de2801 add       esp, 0x1c
00de2804 ret       
00de2805 int3      
00de2806 int3      
00de2807 int3      
00de2808 int3      
00de2809 int3      
00de280a int3      
00de280b int3      
00de280c int3      
00de280d int3      
00de280e int3      
00de280f int3      
00de2810 sub       esp, 0x228
00de2816 mov       eax, dword ptr [ecx + 0x24]
00de2819 mov       edx, dword ptr [eax + 8]
00de281c mov       dword ptr [esp + 0x24], edx
00de2820 mov       edx, dword ptr [eax]
00de2822 mov       dword ptr [esp + 0x14], edx
00de2826 mov       edx, dword ptr [eax + 0x260]
00de282c mov       dword ptr [esp + 8], edx
00de2830 mov       edx, dword ptr [eax + 0x264]
00de2836 mov       dword ptr [esp + 0x10], edx
00de283a mov       edx, dword ptr [eax + 0x268]
00de2840 mov       dword ptr [esp + 0xc], edx
00de2844 mov       edx, dword ptr [eax + 0x26c]
00de284a mov       dword ptr [esp + 0x1c], edx
00de284e mov       edx, dword ptr [eax + 0x270]
00de2854 mov       dword ptr [esp + 0x18], edx
00de2858 mov       edx, dword ptr [eax + 0x274]
00de285e push      ebx
00de285f mov       dword ptr [esp + 0x24], edx
00de2863 mov       edx, dword ptr [eax + 0x44]
00de2866 push      ebp
00de2867 mov       ebp, dword ptr [eax + 0x40]
00de286a mov       dword ptr [esp + 8], edx
00de286e mov       edx, dword ptr [eax + 0x4c]
00de2871 push      esi
00de2872 mov       esi, dword ptr [eax + 0x48]
00de2875 mov       dword ptr [esp + 0x10], edx
00de2879 push      edi
00de287a mov       ebx, 0x100
00de287f add       eax, 0x50
00de2882 lea       edx, [esp + 0x38]
00de2886 movzx     edi, word ptr [eax]
00de2889 test      di, di
00de288c je        0xde28e7
00de288e mov       word ptr [edx], di
00de2891 movzx     edi, word ptr [eax + 2]
00de2895 test      di, di
00de2898 je        0xde28d5
00de289a mov       word ptr [edx + 2], di
00de289e movzx     edi, word ptr [eax + 4]
00de28a2 test      di, di
00de28a5 je        0xde28da
00de28a7 mov       word ptr [edx + 4], di
00de28ab movzx     edi, word ptr [eax + 6]
00de28af test      di, di
00de28b2 je        0xde28df
00de28b4 mov       word ptr [edx + 6], di
00de28b8 movzx     edi, word ptr [eax + 8]
00de28bc test      di, di
00de28bf je        0xde28e4
00de28c1 mov       word ptr [edx + 8], di
00de28c5 sub       ebx, 5
00de28c8 add       eax, 0xa
00de28cb add       edx, 0xa
00de28ce cmp       ebx, 1
00de28d1 jg        0xde2886
00de28d3 jmp       0xde28e7
00de28d5 add       edx, 2
00de28d8 jmp       0xde28e7
00de28da add       edx, 4
00de28dd jmp       0xde28e7
00de28df add       edx, 6
00de28e2 jmp       0xde28e7
00de28e4 add       edx, 8
00de28e7 xor       eax, eax
00de28e9 mov       word ptr [edx], ax
00de28ec mov       eax, dword ptr [ecx + 0x24]
00de28ef mov       edx, dword ptr [eax + 0xc]
00de28f2 mov       eax, dword ptr [eax + 0x10]
00de28f5 mov       dword ptr [edx + 0x10], eax
00de28f8 mov       eax, dword ptr [ecx + 0x24]
00de28fb mov       edx, dword ptr [eax + 0x10]
00de28fe mov       eax, dword ptr [eax + 0xc]
00de2901 mov       dword ptr [edx + 0xc], eax
00de2904 mov       eax, dword ptr [ecx + 0x24]
00de2907 mov       edx, dword ptr [esp + 0x34]
00de290b mov       dword ptr [eax + 0x10], eax
00de290e mov       eax, dword ptr [ecx + 0x24]
00de2911 mov       dword ptr [eax + 0xc], eax
00de2914 mov       eax, dword ptr [ecx + 0x24]
00de2917 mov       dword ptr [eax + 8], 3
00de291e jmp       dword ptr [edx*4 + 0xde2aa0]
00de2925 mov       eax, dword ptr [esp + 0x18]
00de2929 test      eax, eax
00de292b je        0xde294f
00de292d mov       ecx, dword ptr [esp + 0x1c]
00de2931 mov       edx, dword ptr [esp + 0x20]
00de2935 push      ecx
00de2936 push      edx
00de2937 mov       edx, dword ptr [esp + 0x1c]
00de293b lea       ecx, [esp + 0x40]
00de293f push      ecx
00de2940 mov       ecx, dword ptr [esp + 0x1c]
00de2944 push      edx
00de2945 push      esi
00de2946 push      ecx
00de2947 xor       edx, edx
00de2949 push      ebp
00de294a lea       ecx, [edx + 2]
00de294d call      eax
00de294f mov       eax, dword ptr [esp + 0x2c]
00de2953 test      eax, eax
00de2955 je        0xde2a39
00de295b mov       edx, dword ptr [esp + 0x30]
00de295f mov       ecx, dword ptr [esp + 0x28]
00de2963 push      edx
00de2964 push      ecx
00de2965 mov       ecx, dword ptr [esp + 0x1c]
00de2969 lea       edx, [esp + 0x40]
00de296d push      edx
00de296e mov       edx, dword ptr [esp + 0x1c]
00de2972 push      ecx
00de2973 push      esi
00de2974 push      edx
00de2975 mov       edx, 2
00de297a mov       ecx, edx
00de297c jmp       0xde2a36
00de2981 mov       ecx, dword ptr [ecx + 0x24]
00de2984 mov       eax, dword ptr [ecx + 4]
00de2987 sub       eax, 0
00de298a je        0xde29c5
00de298c dec       eax
00de298d jne       0xde2a39
00de2993 mov       ecx, dword ptr [ecx + 0x44]
00de2996 call      0xda2f20
00de299b mov       eax, dword ptr [esp + 0x18]
00de299f test      eax, eax
00de29a1 je        0xde2a39
00de29a7 mov       ecx, dword ptr [esp + 0x1c]
00de29ab mov       edx, dword ptr [esp + 0x20]
00de29af push      ecx
00de29b0 push      edx
00de29b1 mov       edx, dword ptr [esp + 0x1c]
00de29b5 lea       ecx, [esp + 0x40]
00de29b9 push      ecx
00de29ba mov       ecx, dword ptr [esp + 0x1c]
00de29be push      edx
00de29bf push      esi
00de29c0 push      ecx
00de29c1 xor       ecx, ecx
00de29c3 jmp       0xde2a34
00de29c5 cmp       dword ptr [esp + 0x24], 0
00de29ca jne       0xde29e7
00de29cc test      ebp, ebp
00de29ce je        0xde29d5
00de29d0 lea       ecx, [ebp + 0x24]
00de29d3 jmp       0xde29e0
00de29d5 mov       eax, dword ptr [esp + 0x10]
00de29d9 test      eax, eax
00de29db je        0xde29e7
00de29dd lea       ecx, [eax + 0x10]
00de29e0 mov       edx, esi
00de29e2 call      0xd94160
00de29e7 mov       eax, dword ptr [esp + 0x18]
00de29eb test      eax, eax
00de29ed je        0xde2a39
00de29ef mov       edx, dword ptr [esp + 0x1c]
00de29f3 mov       ecx, dword ptr [esp + 0x20]
00de29f7 push      edx
00de29f8 push      ecx
00de29f9 mov       ecx, dword ptr [esp + 0x1c]
00de29fd lea       edx, [esp + 0x40]
00de2a01 push      edx
00de2a02 mov       edx, dword ptr [esp + 0x1c]
00de2a06 push      ecx
00de2a07 push      esi
00de2a08 push      edx
00de2a09 xor       ecx, ecx
00de2a0b jmp       0xde2a34
00de2a0d mov       eax, dword ptr [esp + 0x18]
00de2a11 test      eax, eax
00de2a13 je        0xde2a39
00de2a15 mov       ecx, dword ptr [esp + 0x1c]
00de2a19 mov       edx, dword ptr [esp + 0x20]
00de2a1d push      ecx
00de2a1e push      edx
00de2a1f mov       edx, dword ptr [esp + 0x1c]
00de2a23 lea       ecx, [esp + 0x40]
00de2a27 push      ecx
00de2a28 mov       ecx, dword ptr [esp + 0x1c]
00de2a2c push      edx
00de2a2d push      esi
00de2a2e push      ecx
00de2a2f mov       ecx, 1
00de2a34 xor       edx, edx
00de2a36 push      ebp
00de2a37 call      eax
00de2a39 cmp       dword ptr [esp + 0x24], 0
00de2a3e je        0xde2a92
00de2a40 mov       edx, dword ptr [esi + 8]
00de2a43 mov       eax, dword ptr [esi + 0xc]
00de2a46 mov       dword ptr [edx + 0xc], eax
00de2a49 mov       ecx, dword ptr [esi + 0xc]
00de2a4c mov       edx, dword ptr [esi + 8]
00de2a4f mov       dword ptr [ecx + 8], edx
00de2a52 mov       eax, dword ptr [esi]
00de2a54 mov       edx, dword ptr [eax + 4]
00de2a57 mov       ecx, esi
00de2a59 mov       dword ptr [esi + 0xc], esi
00de2a5c mov       dword ptr [esi + 8], esi
00de2a5f call      edx
00de2a61 mov       edi, dword ptr [esp + 0x2c]
00de2a65 test      edi, edi
00de2a67 je        0xde2a92
00de2a69 mov       ecx, dword ptr [esp + 0x30]
00de2a6d mov       edx, dword ptr [esp + 0x28]
00de2a71 push      ecx
00de2a72 push      edx
00de2a73 mov       edx, dword ptr [esp + 0x1c]
00de2a77 lea       ecx, [esp + 0x40]
00de2a7b push      ecx
00de2a7c mov       ecx, dword ptr [esp + 0x1c]
00de2a80 push      edx
00de2a81 push      esi
00de2a82 push      ecx
00de2a83 xor       ecx, ecx
00de2a85 test      eax, eax
00de2a87 sete      cl
00de2a8a push      ebp
00de2a8b mov       edx, 2
00de2a90 call      edi
00de2a92 pop       edi
00de2a93 pop       esi
00de2a94 pop       ebp
00de2a95 pop       ebx
00de2a96 add       esp, 0x228
00de2a9c ret       
00de2a9d lea       ecx, [ecx]
00de2aa0 and       eax, 0x8100de29
00de2aa5 sub       esi, ebx
00de2aa7 add       byte ptr [0x2500de2a], cl
00de2aad sub       esi, ebx
00de2aaf add       byte ptr [esi - 0x75], dl
00de2ab2 ret       0xbe
00de2ab5 add       dword ptr [eax], eax
00de2ab7 add       byte ptr [ebx + 0x3eb50c1], al
00de2abd lea       ecx, [ecx]
00de2ac0 movzx     edx, word ptr [eax]
00de2ac3 test      dx, dx
00de2ac6 je        0xde2b35
00de2ac8 mov       word ptr [ecx], dx
00de2acb movzx     edx, word ptr [eax + 2]
00de2acf test      dx, dx
00de2ad2 je        0xde2b14
00de2ad4 mov       word ptr [ecx + 2], dx
00de2ad8 movzx     edx, word ptr [eax + 4]
00de2adc test      dx, dx
00de2adf je        0xde2b1e
00de2ae1 mov       word ptr [ecx + 4], dx
00de2ae5 movzx     edx, word ptr [eax + 6]
00de2ae9 test      dx, dx
00de2aec je        0xde2b28
00de2aee mov       word ptr [ecx + 6], dx
00de2af2 movzx     edx, word ptr [eax + 8]
00de2af6 test      dx, dx
00de2af9 je        0xde2b32
00de2afb mov       word ptr [ecx + 8], dx
00de2aff sub       esi, 5
00de2b02 add       eax, 0xa
00de2b05 add       ecx, 0xa
00de2b08 cmp       esi, 1
00de2b0b jg        0xde2ac0
00de2b0d xor       eax, eax
00de2b0f mov       word ptr [ecx], ax
00de2b12 pop       esi
00de2b13 ret       
00de2b14 add       ecx, 2
00de2b17 xor       eax, eax
00de2b19 mov       word ptr [ecx], ax
00de2b1c pop       esi
00de2b1d ret       
00de2b1e add       ecx, 4
00de2b21 xor       eax, eax
00de2b23 mov       word ptr [ecx], ax
00de2b26 pop       esi
00de2b27 ret       
00de2b28 add       ecx, 6
00de2b2b xor       eax, eax
00de2b2d mov       word ptr [ecx], ax
00de2b30 pop       esi
00de2b31 ret       
00de2b32 add       ecx, 8
00de2b35 xor       eax, eax
00de2b37 mov       word ptr [ecx], ax
00de2b3a pop       esi
00de2b3b ret       
00de2b3c int3      
00de2b3d int3      
00de2b3e int3      
00de2b3f int3      
00de2b40 cmp       dword ptr [ecx + 0x290], 0
00de2b47 push      esi
00de2b48 mov       esi, edx
00de2b4a je        0xde2baa
00de2b4c cmp       dword ptr [esi + 0x10], esi
00de2b4f jne       0xde2baa
00de2b51 mov       edx, dword ptr [esi + 0x48]
00de2b54 cmp       dword ptr [edx + 0xc], edx
00de2b57 jne       0xde2baa
00de2b59 call      0xde2580
00de2b5e test      eax, eax
00de2b60 je        0xde2b67
00de2b62 cmp       dword ptr [eax], 0
00de2b65 je        0xde2baa
00de2b67 mov       dword ptr [esi + 8], 0
00de2b6e mov       eax, dword ptr [ecx + 0xc]
00de2b71 mov       dword ptr [esi + 0xc], eax
00de2b74 mov       dword ptr [esi + 0x10], ecx
00de2b77 mov       edx, eax
00de2b79 mov       dword ptr [edx + 0x10], esi
00de2b7c mov       eax, dword ptr [esi + 0x10]
00de2b7f mov       dword ptr [eax + 0xc], esi
00de2b82 mov       dword ptr [esi + 0x38], ecx
00de2b85 mov       dword ptr [esi + 0x3c], esi
00de2b88 mov       ecx, dword ptr [ecx + 0x294]
00de2b8e lea       edx, [esi + 0x18]
00de2b91 call      0xda21a0
00de2b96 cmp       eax, -1
00de2b99 jne       0xde2ba3
00de2b9b cmp       edx, 0x7fffffff
00de2ba1 je        0xde2baa
00de2ba3 mov       eax, 1
00de2ba8 pop       esi
00de2ba9 ret       
00de2baa xor       eax, eax
00de2bac pop       esi
00de2bad ret       
00de2bae int3      
00de2baf int3      
00de2bb0 push      ebx
00de2bb1 mov       ebx, dword ptr [esp + 0x18]
00de2bb5 push      ebp
00de2bb6 mov       ebp, dword ptr [esp + 0x20]
00de2bba test      ebx, ebx
00de2bbc cmove     ebx, dword ptr [esp + 0xc]
00de2bc1 push      esi
00de2bc2 push      edi
00de2bc3 mov       esi, edx
00de2bc5 mov       edi, ecx
00de2bc7 test      ebp, ebp
00de2bc9 jne       0xde2bd2
00de2bcb mov       ebp, dword ptr [esp + 0x14]
00de2bcf add       ebp, 0x10
00de2bd2 mov       ecx, esi
00de2bd4 call      0x4daac0
00de2bd9 mov       ecx, dword ptr [esp + 0x14]
00de2bdd mov       edx, dword ptr [esp + 0x18]
00de2be1 xor       eax, eax
00de2be3 mov       dword ptr [esi + 4], eax
00de2be6 mov       dword ptr [esi + 0x44], eax
00de2be9 mov       eax, dword ptr [esp + 0x1c]
00de2bed mov       dword ptr [esi + 0x40], ecx
00de2bf0 mov       dword ptr [esi + 0x48], edx
00de2bf3 mov       edx, dword ptr [esp + 0x20]
00de2bf7 mov       ecx, esi
00de2bf9 mov       dword ptr [esi + 0x4c], eax
00de2bfc call      0xde2ab0
00de2c01 mov       ecx, dword ptr [esp + 0x2c]
00de2c05 mov       edx, dword ptr [esp + 0x30]
00de2c09 mov       eax, dword ptr [esp + 0x34]
00de2c0d mov       dword ptr [esi + 0x258], ecx
00de2c13 mov       ecx, dword ptr [esp + 0x38]
00de2c17 mov       dword ptr [esi + 0x25c], edx
00de2c1d mov       edx, dword ptr [esp + 0x3c]
00de2c21 mov       dword ptr [esi + 0x264], ecx
00de2c27 mov       dword ptr [esi + 0x268], edx
00de2c2d mov       edx, dword ptr [esp + 0x40]
00de2c31 mov       dword ptr [esi + 0x260], eax
00de2c37 mov       dword ptr [esi + 0x250], ebx
00de2c3d mov       dword ptr [esi + 0x254], ebp
00de2c43 mov       eax, dword ptr [edi + 0x298]
00de2c49 mov       dword ptr [esi + 0x278], eax

START dbfc40
00dbfc40 sub       esp, 0x20
00dbfc43 push      ebx
00dbfc44 push      esi
00dbfc45 push      edi
00dbfc46 mov       edi, ecx
00dbfc48 mov       eax, dword ptr [edi + 0x14]
00dbfc4b mov       ecx, dword ptr [eax + 0x9c]
00dbfc51 mov       ebx, edx
00dbfc53 mov       dword ptr [esp + 0x20], ebx
00dbfc57 mov       esi, ebx
00dbfc59 mov       dword ptr [esp + 0x28], ebx
00dbfc5d call      0xde0fb0
00dbfc62 fstp      dword ptr [esp + 0x24]
00dbfc66 cmp       word ptr [ebx], 0
00dbfc6a je        0xdbfccd
00dbfc6c jmp       0xdbfc74
00dbfc6e mov       edi, edi
00dbfc70 mov       ebx, dword ptr [esp + 0x20]
00dbfc74 mov       ecx, esi
00dbfc76 sub       ecx, ebx
00dbfc78 sar       ecx, 1
00dbfc7a cmp       ecx, dword ptr [esp + 0x30]
00dbfc7e jge       0xdbfccd
00dbfc80 mov       edx, dword ptr [edi + 0x14]
00dbfc83 movzx     edx, word ptr [edx + 0xa0]
00dbfc8a cmp       word ptr [esi], dx
00dbfc8d jne       0xdbfcc4
00dbfc8f lea       ecx, [esi + 2]
00dbfc92 mov       ebx, esi
00dbfc94 sub       ebx, dword ptr [esp + 0x28]
00dbfc98 mov       dword ptr [esp + 0x1c], ecx
00dbfc9c movzx     ecx, word ptr [ecx]
00dbfc9f sar       ebx, 1
00dbfca1 mov       dword ptr [esp + 0xc], esi
00dbfca5 mov       eax, 1
00dbfcaa test      cx, cx
00dbfcad je        0xdbfcc4
00dbfcaf nop       
00dbfcb0 cmp       cx, dx
00dbfcb3 je        0xdbfdb3
00dbfcb9 movzx     ecx, word ptr [esi + eax*2 + 2]
00dbfcbe inc       eax
00dbfcbf test      cx, cx
00dbfcc2 jne       0xdbfcb0
00dbfcc4 add       esi, 2
00dbfcc7 cmp       word ptr [esi], 0
00dbfccb jne       0xdbfc70
00dbfccd mov       eax, dword ptr [edi + 0x14]
00dbfcd0 cmp       dword ptr [eax + 0xa4], 0
00dbfcd7 jne       0xdbfda6
00dbfcdd sub       esi, dword ptr [esp + 0x28]
00dbfce1 sar       esi, 1
00dbfce3 test      esi, esi
00dbfce5 jle       0xdbfda6
00dbfceb cmp       dword ptr [eax + 0x94], 1
00dbfcf2 jne       0xdbfd48
00dbfcf4 movss     xmm1, dword ptr [esp + 0x38]
00dbfcfa movss     xmm2, dword ptr [esp + 0x34]
00dbfd00 mov       ecx, eax
00dbfd02 mov       edx, dword ptr [ecx + 0x98]
00dbfd08 mov       ebx, dword ptr [ecx + 0x90]
00dbfd0e mov       eax, edx
00dbfd10 shl       eax, 0x18
00dbfd13 sar       eax, 0x1c
00dbfd16 push      eax
00dbfd17 push      ebx
00dbfd18 mov       ebx, ecx
00dbfd1a movaps    xmm0, xmmword ptr [ebx + 0x80]
00dbfd21 addps     xmm0, xmmword ptr [ebx + 0x10]
00dbfd25 mov       ebx, dword ptr [esp + 0x30]
00dbfd29 push      ecx
00dbfd2a movss     dword ptr [esp], xmm1
00dbfd2f push      esi
00dbfd30 lea       eax, [ecx + 0x20]
00dbfd33 mov       ecx, dword ptr [ecx + 0x9c]
00dbfd39 shl       edx, 0x1c
00dbfd3c push      ebx
00dbfd3d sar       edx, 0x1c
00dbfd40 push      ecx
00dbfd41 call      0xdbfba0
00dbfd46 fstp      st(0)
00dbfd48 mov       ecx, dword ptr [edi + 0x14]
00dbfd4b mov       edx, dword ptr [ecx + 0x9c]
00dbfd51 mov       ebx, dword ptr [ecx + 0x70]
00dbfd54 movaps    xmm0, xmmword ptr [ecx + 0x10]
00dbfd58 movss     xmm1, dword ptr [esp + 0x38]
00dbfd5e movss     xmm2, dword ptr [esp + 0x34]
00dbfd64 mov       dword ptr [esp + 0x30], edx
00dbfd68 mov       edx, dword ptr [ecx + 0x98]
00dbfd6e mov       eax, edx
00dbfd70 shl       eax, 0x18
00dbfd73 sar       eax, 0x1c
00dbfd76 push      eax
00dbfd77 push      ebx
00dbfd78 push      ecx
00dbfd79 movss     dword ptr [esp], xmm1
00dbfd7e lea       eax, [ecx + 0x20]
00dbfd81 mov       ecx, dword ptr [esp + 0x34]
00dbfd85 push      esi
00dbfd86 push      ecx
00dbfd87 mov       ecx, dword ptr [esp + 0x44]
00dbfd8b shl       edx, 0x1c
00dbfd8e sar       edx, 0x1c
00dbfd91 push      ecx
00dbfd92 call      0xdbfba0
00dbfd97 fmul      dword ptr [esp + 0x34]
00dbfd9b mov       edx, dword ptr [edi + 0x14]
00dbfd9e mov       eax, edx
00dbfda0 fadd      dword ptr [edx + 0x10]
00dbfda3 fstp      dword ptr [eax + 0x10]
00dbfda6 fld       dword ptr [esp + 0x24]
00dbfdaa pop       edi
00dbfdab pop       esi
00dbfdac pop       ebx
00dbfdad add       esp, 0x20
00dbfdb0 ret       0xc
00dbfdb3 lea       edx, [eax - 1]
00dbfdb6 test      edx, edx
00dbfdb8 jle       0xdbfcc4
00dbfdbe mov       ecx, dword ptr [esp + 0x1c]
00dbfdc2 lea       esi, [esi + eax*2 + 2]
00dbfdc6 call      0xd95f40
00dbfdcb mov       dword ptr [esp + 0x14], eax
00dbfdcf test      eax, eax
00dbfdd1 je        0xdbfcc4
00dbfdd7 mov       ecx, dword ptr [edi + 0x14]
00dbfdda cmp       dword ptr [ecx + 0xa4], 0
00dbfde1 jne       0xdbfeb7
00dbfde7 test      ebx, ebx
00dbfde9 jle       0xdbfeb7
00dbfdef cmp       dword ptr [ecx + 0x94], 1
00dbfdf6 jne       0xdbfe4e
00dbfdf8 mov       edx, dword ptr [ecx + 0x98]
00dbfdfe movss     xmm1, dword ptr [esp + 0x38]
00dbfe04 movss     xmm2, dword ptr [esp + 0x34]
00dbfe0a mov       eax, edx
00dbfe0c shl       eax, 0x18
00dbfe0f sar       eax, 0x1c
00dbfe12 push      eax
00dbfe13 lea       eax, [ecx + 0x20]
00dbfe16 mov       ecx, dword ptr [ecx + 0x90]
00dbfe1c push      ecx
00dbfe1d mov       ecx, dword ptr [edi + 0x14]
00dbfe20 movaps    xmm0, xmmword ptr [ecx + 0x80]
00dbfe27 addps     xmm0, xmmword ptr [ecx + 0x10]
00dbfe2b push      ecx
00dbfe2c mov       ecx, dword ptr [esp + 0x34]
00dbfe30 movss     dword ptr [esp], xmm1
00dbfe35 push      ebx
00dbfe36 push      ecx
00dbfe37 mov       ecx, dword ptr [edi + 0x14]
00dbfe3a mov       ecx, dword ptr [ecx + 0x9c]
00dbfe40 shl       edx, 0x1c
00dbfe43 sar       edx, 0x1c
00dbfe46 push      ecx
00dbfe47 call      0xdbfba0
00dbfe4c fstp      st(0)
00dbfe4e mov       ecx, dword ptr [edi + 0x14]
00dbfe51 mov       edx, dword ptr [ecx + 0x70]
00dbfe54 mov       eax, dword ptr [ecx + 0x9c]
00dbfe5a movaps    xmm0, xmmword ptr [ecx + 0x10]
00dbfe5e movss     xmm1, dword ptr [esp + 0x38]
00dbfe64 movss     xmm2, dword ptr [esp + 0x34]
00dbfe6a mov       dword ptr [esp + 0x1c], edx
00dbfe6e mov       edx, dword ptr [ecx + 0x98]
00dbfe74 mov       dword ptr [esp + 0x18], eax
00dbfe78 mov       eax, edx
00dbfe7a shl       eax, 0x18
00dbfe7d sar       eax, 0x1c
00dbfe80 push      eax
00dbfe81 push      dword ptr [esp + 0x20]
00dbfe85 lea       eax, [ecx + 0x20]
00dbfe88 push      ecx
00dbfe89 mov       ecx, dword ptr [esp + 0x34]
00dbfe8d movss     dword ptr [esp], xmm1
00dbfe92 push      ebx
00dbfe93 push      ecx
00dbfe94 mov       ecx, dword ptr [esp + 0x2c]
00dbfe98 shl       edx, 0x1c
00dbfe9b sar       edx, 0x1c
00dbfe9e push      ecx
00dbfe9f call      0xdbfba0
00dbfea4 fmul      dword ptr [esp + 0x34]
00dbfea8 mov       edx, dword ptr [edi + 0x14]
00dbfeab mov       eax, edx
00dbfead fadd      dword ptr [edx + 0x10]
00dbfeb0 fstp      dword ptr [eax + 0x10]
00dbfeb3 mov       eax, dword ptr [esp + 0x14]
00dbfeb7 mov       ecx, dword ptr [edi + 0x14]
00dbfeba movss     xmm0, dword ptr [ecx + 0x10]
00dbfebf mov       ebx, dword ptr [ecx]
00dbfec1 sub       esp, 8
00dbfec4 movss     dword ptr [esp + 0x18], xmm0
00dbfeca movss     xmm0, dword ptr [esp + 0x40]
00dbfed0 movss     dword ptr [esp + 4], xmm0
00dbfed6 movss     xmm0, dword ptr [esp + 0x3c]
00dbfedc movss     dword ptr [esp], xmm0
00dbfee1 mov       edx, eax
00dbfee3 mov       eax, dword ptr [ebx + 4]
00dbfee6 push      1
00dbfee8 call      eax
00dbfeea test      eax, eax
00dbfeec jne       0xdbff06
00dbfeee mov       ecx, dword ptr [edi + 0x14]
00dbfef1 mov       edx, dword ptr [esp + 0xc]
00dbfef5 movss     xmm0, dword ptr [esp + 0x10]
00dbfefb movss     dword ptr [ecx + 0x10], xmm0
00dbff00 mov       dword ptr [esp + 0x28], edx
00dbff04 jmp       0xdbff0a
00dbff06 mov       dword ptr [esp + 0x28], esi
00dbff0a mov       eax, dword ptr [edi + 0x14]
00dbff0d mov       ecx, dword ptr [eax + 0x9c]
00dbff13 call      0xde0fb0
00dbff18 fst       dword ptr [esp + 0xc]
00dbff1c fld       dword ptr [esp + 0x24]
00dbff20 fcompi    st(1)
00dbff22 fstp      st(0)
00dbff24 ja        0xdbfcc7
00dbff2a movss     xmm0, dword ptr [esp + 0xc]
00dbff30 movss     dword ptr [esp + 0x24], xmm0
00dbff36 jmp       0xdbfcc7
00dbff3b int3      
00dbff3c int3      
00dbff3d int3      
00dbff3e int3      
00dbff3f int3      
