REGION 00e081b0..00e08473
00e081b0 sub      esp, 0x10
00e081b3 push     ebx
00e081b4 push     ebp
00e081b5 push     esi
00e081b6 push     edi
00e081b7 mov      ebx, ecx
00e081b9 call     0xda3620
00e081be mov      ecx, eax
00e081c0 call     0xddb790
00e081c5 mov      dword ptr [esp + 0x18], eax
00e081c9 mov      dword ptr [esp + 0x1c], 1
00e081d1 call     0xdd1170
00e081d6 mov      edi, eax
00e081d8 mov      ecx, edi
00e081da mov      dword ptr [esp + 0x10], edi
00e081de call     0xda1c90
00e081e3 call     0xda3620
00e081e8 mov      ebp, dword ptr [0xec20dc]
00e081ee mov      esi, eax
00e081f0 call     ebp
00e081f2 cmp      eax, dword ptr [esi + 0x21d38]
00e081f8 jne      0xe08202
00e081fa mov      esi, dword ptr [esi + 0x21e98]
00e08200 jmp      0xe0821a
00e08202 call     ebp
00e08204 cmp      eax, dword ptr [esi + 0x21e88]
00e0820a jne      0xe08214
00e0820c mov      esi, dword ptr [esi + 0x21e90]
00e08212 jmp      0xe0821a
00e08214 mov      esi, dword ptr [esi + 0x21e84]
00e0821a test     esi, esi
00e0821c jne      0xe08225
00e0821e mov      ecx, edi
00e08220 jmp      0xe08442
00e08225 mov      cl, byte ptr [ebx + 8]
00e08228 xor      eax, eax
00e0822a mov      dword ptr [esp + 0x14], eax
00e0822e cmp      cl, 1
00e08231 je       0xe08237
00e08233 test     cl, cl
00e08235 jne      0xe08287
00e08237 mov      ecx, dword ptr [0x21215d0]
00e0823d mov      esi, dword ptr [ecx]
00e0823f cmp      esi, ecx
00e08241 je       0xe08287
00e08243 cmp      esi, ebx
00e08245 je       0xe0827d
00e08247 mov      cl, byte ptr [esi + 8]
00e0824a cmp      cl, byte ptr [ebx + 8]
00e0824d jne      0xe0827d
00e0824f mov      ecx, dword ptr [ebx + 0xc]
00e08252 cmp      dword ptr [esi + 0xc], ecx
00e08255 jne      0xe0827d
00e08257 mov      edx, dword ptr [ebx + 0x10]
00e0825a push     ecx
00e0825b mov      ecx, dword ptr [esi + 0x10]
00e0825e call     0xd95710
00e08263 test     eax, eax
00e08265 jne      0xe08279
00e08267 mov      ecx, dword ptr [esi + 0x18]
00e0826a call     0xdf4530
00e0826f mov      dword ptr [esp + 0x14], eax
00e08273 test     eax, eax
00e08275 jne      0xe08287
00e08277 jmp      0xe0827d
00e08279 mov      eax, dword ptr [esp + 0x14]
00e0827d mov      esi, dword ptr [esi]
00e0827f cmp      esi, dword ptr [0x21215d0]
00e08285 jne      0xe08243
00e08287 movsx    ecx, byte ptr [ebx + 8]
00e0828b sub      ecx, 0
00e0828e je       0xe0835f
00e08294 dec      ecx
00e08295 je       0xe0829e
00e08297 mov      ecx, edi
00e08299 jmp      0xe08442
00e0829e test     eax, eax
00e082a0 je       0xe082af
00e082a2 mov      edx, dword ptr [eax]
00e082a4 push     eax
00e082a5 mov      eax, dword ptr [edx + 4]
00e082a8 call     eax
00e082aa jmp      0xe08407
00e082af call     0xda3620
00e082b4 mov      esi, eax
00e082b6 call     ebp
00e082b8 cmp      eax, dword ptr [esi + 0x21d38]
00e082be jne      0xe082c8
00e082c0 mov      edi, dword ptr [esi + 0x21e98]
00e082c6 jmp      0xe082e0
00e082c8 call     ebp
00e082ca cmp      eax, dword ptr [esi + 0x21e88]
00e082d0 jne      0xe082da
00e082d2 mov      edi, dword ptr [esi + 0x21e90]
00e082d8 jmp      0xe082e0
00e082da mov      edi, dword ptr [esi + 0x21e84]
00e082e0 call     0xda3620
00e082e5 mov      esi, eax
00e082e7 call     ebp
00e082e9 cmp      eax, dword ptr [esi + 0x21d38]
00e082ef jne      0xe082f9
00e082f1 mov      esi, dword ptr [esi + 0x21e98]
00e082f7 jmp      0xe08311
00e082f9 call     ebp
00e082fb cmp      eax, dword ptr [esi + 0x21e88]
00e08301 jne      0xe0830b
00e08303 mov      esi, dword ptr [esi + 0x21e90]
00e08309 jmp      0xe08311
00e0830b mov      esi, dword ptr [esi + 0x21e84]
00e08311 mov      eax, dword ptr [ebx + 0x10]
00e08314 mov      ecx, dword ptr [esi]
00e08316 mov      ecx, dword ptr [ecx + 0x1a8]
00e0831c lea      edx, [esp + 0x14]
00e08320 push     edx
00e08321 push     eax
00e08322 push     edi
00e08323 call     ecx
00e08325 cmp      eax, 0x8007000e
00e0832a je       0xe0843e
00e08330 test     eax, eax
00e08332 je       0xe08403
00e08338 call     0xda3620
00e0833d mov      edx, dword ptr [eax + 0x21d1c]
00e08343 mov      ecx, dword ptr [esp + 0x10]
00e08347 call     0xda1cb0
00e0834c lea      ecx, [esp + 0x18]
00e08350 call     0x53a1f0
00e08355 pop      edi
00e08356 pop      esi
00e08357 pop      ebp
00e08358 xor      eax, eax
00e0835a pop      ebx
00e0835b add      esp, 0x10
00e0835e ret      
00e0835f test     eax, eax
00e08361 je       0xe08370
00e08363 mov      ecx, dword ptr [eax]
00e08365 mov      edx, dword ptr [ecx + 4]
00e08368 push     eax
00e08369 call     edx
00e0836b jmp      0xe08407
00e08370 call     0xda3620
00e08375 mov      esi, eax
00e08377 call     ebp
00e08379 cmp      eax, dword ptr [esi + 0x21d38]
00e0837f jne      0xe08389
00e08381 mov      edi, dword ptr [esi + 0x21e98]
00e08387 jmp      0xe083a1
00e08389 call     ebp
00e0838b cmp      eax, dword ptr [esi + 0x21e88]
00e08391 jne      0xe0839b
00e08393 mov      edi, dword ptr [esi + 0x21e90]
00e08399 jmp      0xe083a1
00e0839b mov      edi, dword ptr [esi + 0x21e84]
00e083a1 call     0xda3620
00e083a6 mov      esi, eax
00e083a8 call     ebp
00e083aa cmp      eax, dword ptr [esi + 0x21d38]
00e083b0 jne      0xe083ba
00e083b2 mov      esi, dword ptr [esi + 0x21e98]
00e083b8 jmp      0xe083d2
00e083ba call     ebp
00e083bc cmp      eax, dword ptr [esi + 0x21e88]
00e083c2 jne      0xe083cc
00e083c4 mov      esi, dword ptr [esi + 0x21e90]
00e083ca jmp      0xe083d2
00e083cc mov      esi, dword ptr [esi + 0x21e84]
00e083d2 mov      edx, dword ptr [ebx + 0x10]
00e083d5 mov      eax, dword ptr [esi]
00e083d7 mov      eax, dword ptr [eax + 0x16c]
00e083dd lea      ecx, [esp + 0x14]
00e083e1 push     ecx
00e083e2 push     edx
00e083e3 push     edi
00e083e4 call     eax
00e083e6 cmp      eax, 0x8007000e
00e083eb je       0xe0843e
00e083ed test     eax, eax
00e083ef je       0xe08403
00e083f1 call     0xda3620
00e083f6 mov      ecx, dword ptr [eax + 0x21d1c]
00e083fc test     ecx, ecx
00e083fe jmp      0xe08343
00e08403 mov      edi, dword ptr [esp + 0x10]
00e08407 mov      esi, dword ptr [esp + 0x14]
00e0840b mov      ecx, edi
00e0840d call     0xda1cb0
00e08412 call     0xda3620
00e08417 cmp      dword ptr [esp + 0x18], 0
00e0841c mov      ecx, eax
00e0841e je       0xe0842f
00e08420 call     0xddb790
00e08425 pop      edi
00e08426 mov      eax, esi
00e08428 pop      esi
00e08429 pop      ebp
00e0842a pop      ebx
00e0842b add      esp, 0x10
00e0842e ret      
00e0842f call     0xddb850
00e08434 pop      edi
00e08435 mov      eax, esi
00e08437 pop      esi
00e08438 pop      ebp
00e08439 pop      ebx
00e0843a add      esp, 0x10
00e0843d ret      
00e0843e mov      ecx, dword ptr [esp + 0x10]
00e08442 call     0xda1cb0
00e08447 call     0xda3620
00e0844c cmp      dword ptr [esp + 0x18], 0
00e08451 mov      ecx, eax
00e08453 je       0xe08464
00e08455 call     0xddb790
00e0845a pop      edi
00e0845b pop      esi
00e0845c pop      ebp
00e0845d xor      eax, eax
00e0845f pop      ebx
00e08460 add      esp, 0x10
00e08463 ret      
00e08464 call     0xddb850
00e08469 pop      edi
00e0846a pop      esi
00e0846b pop      ebp
00e0846c xor      eax, eax
00e0846e pop      ebx
00e0846f add      esp, 0x10
00e08472 ret      
REGION 00e08480..00e08531
00e08480 push     esi
00e08481 xor      esi, esi
00e08483 cmp      dword ptr [0x21215d0], esi
00e08489 jne      0xe08527
00e0848f mov      eax, 1
00e08494 test     byte ptr [0x21215fc], al
00e0849a jne      0xe084ed
00e0849c or       dword ptr [0x21215fc], eax
00e084a2 and      dword ptr [0x21215dc], 0xfffffeff
00e084ac pxor     xmm0, xmm0
00e084b0 push     0xec15a0
00e084b5 mov      dword ptr [0x21215d4], esi
00e084bb mov      dword ptr [0x21215d8], esi
00e084c1 mov      dword ptr [0x21215e0], esi
00e084c7 mov      dword ptr [0x21215e4], esi
00e084cd mov      dword ptr [0x21215e8], esi
00e084d3 mov      dword ptr [0x21215f0], 0x10001
00e084dd movq     qword ptr [0x21215f4], xmm0
00e084e5 call     0xe2316c
00e084ea add      esp, 4
00e084ed call     0xde3ac0
00e084f2 mov      edx, 0x74d2bd1b
00e084f7 mov      ecx, eax
00e084f9 call     0xde3a30
00e084fe mov      dword ptr [0x21215d0], eax
00e08503 cmp      eax, esi
00e08505 jne      0xe08527
00e08507 push     0x21215d4
00e0850c mov      dword ptr [0x21215d0], 0x21215d4
00e08516 call     0xde3ac0
00e0851b mov      edx, 0x74d2bd1b
00e08520 mov      ecx, eax
00e08522 call     0xde3a50
00e08527 pop      esi
00e08528 ret      
00e08529 int3     
00e0852a int3     
00e0852b int3     
00e0852c int3     
00e0852d int3     
00e0852e int3     
00e0852f int3     
REGION 00e08540..00e085c3
00e08540 mov      eax, dword ptr [0x21215d0]
00e08545 push     esi
00e08546 mov      esi, ecx
00e08548 test     eax, eax
00e0854a je       0xe08552
00e0854c cmp      esi, eax
00e0854e jne      0xe08557
00e08550 pop      esi
00e08551 ret      
00e08552 call     0xe08480
00e08557 mov      eax, dword ptr [esi + 8]
00e0855a test     eax, 0x200
00e0855f jne      0xe08550
00e08561 or       eax, 0x200
00e08566 push     edi
00e08567 mov      dword ptr [esi + 8], eax
00e0856a call     0xdd1170
00e0856f mov      edi, eax
00e08571 mov      ecx, edi
00e08573 call     0xda1c90
00e08578 mov      eax, dword ptr [0x21215d0]
00e0857d cmp      dword ptr [eax], 0
00e08580 jne      0xe0858d
00e08582 cmp      dword ptr [eax + 4], 0
00e08586 jne      0xe0858d
00e08588 mov      dword ptr [eax + 4], eax
00e0858b mov      dword ptr [eax], eax
00e0858d movsx    ecx, byte ptr [esi + 8]
00e08591 sub      ecx, 0
00e08594 je       0xe0859e
00e08596 dec      ecx
00e08597 jne      0xe085b2
00e08599 inc      dword ptr [eax + 0x24]
00e0859c jmp      0xe085a1
00e0859e inc      dword ptr [eax + 0x20]
00e085a1 mov      ecx, dword ptr [eax + 4]
00e085a4 mov      dword ptr [esi], eax
00e085a6 mov      dword ptr [esi + 4], ecx
00e085a9 mov      edx, ecx
00e085ab mov      dword ptr [edx], esi
00e085ad mov      eax, dword ptr [esi]
00e085af mov      dword ptr [eax + 4], esi
00e085b2 call     0xdf4560
00e085b7 test     eax, eax
00e085b9 je       0xe085c7
00e085bb mov      ecx, dword ptr [esi + 0x18]
00e085be push     0
00e085c0 xor      edx, edx
REGION 00e085d0..00e08604
00e085d0 mov      eax, dword ptr [0x21215d0]
00e085d5 push     esi
00e085d6 mov      esi, ecx
00e085d8 test     eax, eax
00e085da je       0xe085e2
00e085dc cmp      esi, eax
00e085de jne      0xe085e7
00e085e0 pop      esi
00e085e1 ret      
00e085e2 call     0xe08480
00e085e7 and      dword ptr [esi + 8], 0xfffffdff
00e085ee call     0xdd1170
00e085f3 mov      ecx, eax
00e085f5 call     0xda1c90
00e085fa movsx    eax, byte ptr [esi + 8]
00e085fe sub      eax, 0
00e08601 je       0xe08634
REGION 00e08610..00e08637
00e08610 inc      edx
00e08611 add      al, 0xa1
00e08613 rcl      byte ptr [0x46c70212]
00e08619 add      al, 0
00e0861b add      byte ptr [eax], al
00e0861d add      bh, al
00e0861f push     es
00e08620 add      byte ptr [eax], al
00e08622 add      byte ptr [eax], al
00e08624 dec      dword ptr [eax + 0x24]
00e08627 call     0xdd1170
00e0862c mov      ecx, eax
00e0862e pop      esi
00e0862f jmp      0xda1cb0
00e08634 mov      ecx, dword ptr [esi + 4]
REGION 00e08640..00e08667
00e08640 mov      dword ptr [eax + 4], ecx
00e08643 mov      eax, dword ptr [0x21215d0]
00e08648 mov      dword ptr [esi + 4], 0
00e0864f mov      dword ptr [esi], 0
00e08655 dec      dword ptr [eax + 0x20]
00e08658 call     0xdd1170
00e0865d mov      ecx, eax
00e0865f pop      esi
00e08660 jmp      0xda1cb0
00e08665 int3     
00e08666 int3     
REGION 00dcec50..00dcecd9
00dcec50 push     esi
00dcec51 mov      esi, ecx
00dcec53 mov      eax, dword ptr [esi + 8]
00dcec56 test     eax, 0x100
00dcec5b je       0xdcecd5
00dcec5d and      eax, 0xfffffeff
00dcec62 mov      dword ptr [esi + 8], eax
00dcec65 mov      eax, dword ptr [esi + 0x10]
00dcec68 test     eax, eax
00dcec6a jne      0xdcec71
00dcec6c mov      dword ptr [esi + 0x10], eax
00dcec6f jmp      0xdcec78
00dcec71 lea      eax, [eax + esi + 0xf]
00dcec75 mov      dword ptr [esi + 0x10], eax
00dcec78 push     ebx
00dcec79 call     0xde3480
00dcec7e mov      ebx, dword ptr [eax]
00dcec80 push     0xbd
00dcec85 push     0xa3eb4556
00dcec8a push     0
00dcec8c mov      ecx, eax
00dcec8e mov      eax, dword ptr [ebx + 4]
00dcec91 push     8
00dcec93 mov      edx, 0x30
00dcec98 call     eax
00dcec9a mov      dword ptr [esi + 0x18], eax
00dcec9d lea      ecx, [eax + 0x30]
00dceca0 pop      ebx
00dceca1 jmp      0xdcecb0
00dceca3 lea      esp, [esp]
00dcecaa lea      ebx, [ebx]
00dcecb0 mov      dword ptr [eax], 0
00dcecb6 mov      dword ptr [eax + 4], 0
00dcecbd add      eax, 8
00dcecc0 cmp      eax, ecx
00dcecc2 jb       0xdcecb0
00dcecc4 mov      ecx, dword ptr [esi + 0x18]
00dcecc7 mov      edx, esi
00dcecc9 call     0xdf46f0
00dcecce mov      ecx, esi
00dcecd0 call     0xe08540
00dcecd5 pop      esi
00dcecd6 ret      4
REGION 00dcece0..00dced40
00dcece0 push     esi
00dcece1 mov      esi, ecx
00dcece3 mov      edx, dword ptr [esi + 0x10]
00dcece6 push     edi
00dcece7 test     edx, edx
00dcece9 je       0xdced17
00dceceb mov      eax, dword ptr [esi + 8]
00dcecee mov      ecx, dword ptr [eax + 0x20]
00dcecf1 mov      eax, dword ptr [ecx + 0x38]
00dcecf4 mov      ecx, dword ptr [eax + 0x10]
00dcecf7 mov      eax, dword ptr [edx + 0x60]
00dcecfa mov      ecx, dword ptr [ecx + 0x14]
00dcecfd test     eax, eax
00dcecff je       0xdced0b
00dced01 test     ecx, ecx
00dced03 je       0xdced0d
00dced05 mov      edi, eax
00dced07 sub      edi, ecx
00dced09 jns      0xdced0d
00dced0b mov      eax, ecx
00dced0d mov      dword ptr [edx + 0x60], eax
00dced10 mov      dword ptr [esi + 0x10], 0
00dced17 call     0xda6e00
00dced1c mov      edi, eax
00dced1e mov      ecx, edi
00dced20 call     0xda1c90
00dced25 mov      edx, dword ptr [esi]
00dced27 mov      eax, dword ptr [esi + 4]
00dced2a mov      dword ptr [edx + 4], eax
00dced2d mov      ecx, dword ptr [esi + 4]
00dced30 mov      edx, dword ptr [esi]
00dced32 mov      dword ptr [ecx], edx
00dced34 mov      ecx, edi
00dced36 pop      edi
00dced37 mov      dword ptr [esi], 0
