00df4730 sub      esp, 0x10
00df4733 push     ebx
00df4734 push     esi
00df4735 mov      esi, dword ptr [0xec2164]
00df473b push     edi
00df473c mov      dword ptr [esp + 0x18], ecx
00df4740 lea      ebx, [ecx + 0x14]
00df4743 xchg     dword ptr [esp + 0xc], eax
00df4747 push     0
00df4749 push     4
00df474b push     ebx
00df474c call     esi
00df474e mov      edi, eax
00df4750 jmp      dword ptr [edi*4 + 0xdf4824]
00df4757 xchg     dword ptr [esp + 0x10], eax
00df475b push     edi
00df475c push     4
00df475e push     ebx
00df475f call     esi
00df4761 cmp      eax, edi
00df4763 jmp      0xdf4773
00df4765 xchg     dword ptr [esp + 0x14], eax
00df4769 push     3
00df476b push     4
00df476d push     ebx
00df476e call     esi
00df4770 cmp      eax, 3
00df4773 jne      0xdf4743
00df4775 mov      ebx, dword ptr [esp + 0x18]
00df4779 lea      edi, [ebx + 0x10]
00df477c lea      esp, [esp]
00df4780 xchg     dword ptr [esp + 0x18], eax
00df4784 push     4
00df4786 push     0
00df4788 push     edi
00df4789 call     esi
00df478b jmp      dword ptr [eax*4 + 0xdf4838]
00df4792 xchg     dword ptr [esp + 0x14], eax
00df4796 push     1
00df4798 push     0
00df479a push     edi
00df479b call     esi
00df479d jmp      dword ptr [eax*4 + 0xdf4854]
00df47a4 call     0xda3620
00df47a9 cmp      dword ptr [eax], 0
00df47ac jle      0xdf4780
00df47ae call     0xda3620
00df47b3 mov      eax, dword ptr [eax + 0x21e70]
00df47b9 call     eax
00df47bb jmp      0xdf4780
00df47bd call     0xda3620
00df47c2 cmp      dword ptr [eax], 0
00df47c5 jle      0xdf4780
00df47c7 call     0xda3620
00df47cc mov      ecx, dword ptr [eax + 0x21e70]
00df47d2 call     ecx
00df47d4 jmp      0xdf4780
00df47d6 call     0xda3620
00df47db cmp      dword ptr [eax], 0
00df47de jle      0xdf47ef
00df47e0 call     0xda3620
00df47e5 mov      edx, dword ptr [eax + 0x21e6c]
00df47eb mov      ecx, ebx
00df47ed call     edx
00df47ef mov      eax, ebx
00df47f1 lea      ecx, [ebx + 0x30]
00df47f4 jmp      0xdf4800
00df47f6 lea      esp, [esp]
00df47fd lea      ecx, [ecx]
00df4800 mov      dword ptr [eax], 0
00df4806 mov      dword ptr [eax + 4], 0
00df480d add      eax, 8
00df4810 cmp      eax, ecx
00df4812 jb       0xdf4800
00df4814 mov      dword ptr [ebx + 0x18], 0
00df481b pop      edi
00df481c pop      esi
00df481d pop      ebx
00df481e add      esp, 0x10
00df4821 ret      
00df4822 mov      edi, edi
00df4824 jne      0xdf486d
00df4826 fild     word ptr [eax]
00df4828 push     edi
00df4829 inc      edi
00df482a fild     word ptr [eax]
00df482c push     edi
00df482d inc      edi
00df482e fild     word ptr [eax]
00df4830 inc      edi
00df4832 fild     word ptr [eax]
00df4834 jne      0xdf487d
00df4836 fild     word ptr [eax]
00df4838 sbb      ecx, dword ptr [eax - 0x21]
00de3480 mov      eax, dword ptr [0x2117a58]
00de3485 test     eax, eax
00de3487 jne      0xde34e1
00de3489 call     0xde3ac0
00de348e mov      edx, 0xd6261335
00de3493 mov      ecx, eax
00de3495 call     0xde3a30
00de349a mov      dword ptr [0x2117a58], eax
00de349f test     eax, eax
00de34a1 jne      0xde34e1
00de34a3 push     0x32d6a2e4
00de34a8 mov      ecx, 0x2117a2c
00de34ad call     0xda2d90
00de34b2 push     0x2117a2c
00de34b7 mov      dword ptr [0x2117a2c], 0xfd630c
00de34c1 mov      dword ptr [0x2117a58], 0x2117a2c
00de34cb call     0xde3ac0
00de34d0 mov      edx, 0xd6261335
00de34d5 mov      ecx, eax
00de34d7 call     0xde3a50
00de34dc mov      eax, dword ptr [0x2117a58]
00de34e1 ret      
00de34e2 int3     
00de34e3 int3     
00de34e4 int3     
00de34e5 int3     
00de34e6 int3     
00de34e7 int3     
00de34e8 int3     
00de34e9 int3     
00de34ea int3     
00de34eb int3     
00de34ec int3     
00de34ed int3     
00de34ee int3     
00de34ef int3     
00de34f0 push     esi
00de34f1 mov      esi, ecx
00de34f3 mov      dword ptr [esi], 0xfd630c
00de34f9 call     0xda2dd0
00de34fe test     byte ptr [esp + 8], 1
00de3503 je       0xde350c
00de3505 mov      ecx, esi
00de3507 call     0xd92ea0
00de350c mov      eax, esi
00de350e pop      esi
00de350f ret      4
00de3512 int3     
00de3513 int3     
00de3514 int3     
00de3515 int3     
00de3516 int3     
00de3517 int3     
00de3518 int3     
00de3519 int3     
00de351a int3     
00de351b int3     
00de351c int3     
00de351d int3     
00de351e int3     
00de351f int3     
00de3520 push     ecx
00de3521 cmp      dword ptr [esp + 0xc], 0
00de3526 push     ebx
00de3527 push     esi
00de3528 mov      ebx, ecx
00de352a push     edi
00de352b mov      edi, edx
00de352d mov      dword ptr [esp + 0xc], ebx
00de3531 jne      0xde353f
00de3533 call     0xda2e20
00de3538 mov      eax, dword ptr [eax + 8]
00de353b mov      dword ptr [esp + 0x18], eax
00de353f mov      esi, dword ptr [esp + 0x14]
00de3543 test     esi, esi
00de3545 jne      0xde355b
00de3547 mov      ecx, ebx
00de3549 call     0xda2e20
00de354e mov      esi, dword ptr [eax + 4]
00de3551 cmp      esi, 4
00de3554 jge      0xde355b
00de3556 mov      esi, 4
00de355b test     edi, edi
00de355d jne      0xde3568
00de355f pop      edi
00de3560 pop      esi
00de3561 xor      eax, eax
00de3563 pop      ebx
00de3564 pop      ecx
00de3565 ret      0x10
00de3568 push     ebp
00de3569 push     esi
00de356a push     edi
00de356b call     dword ptr [0xec21cc]
00de3571 mov      ebp, eax
00de3573 add      esp, 8
00de3576 mov      dword ptr [esp + 0x18], ebp
00de357a test     ebp, ebp
00de357c jne      0xde35da
00de357e mov      edx, dword ptr [ebx]
00de3580 mov      eax, dword ptr [edx + 0xa4]
00de3586 mov      ecx, ebx
00de3588 call     eax
00de358a test     eax, eax
00de358c je       0xde35c9
00de358e mov      ebx, dword ptr [esp + 0x24]
00de3592 mov      ebp, dword ptr [esp + 0x20]
00de3596 mov      ecx, dword ptr [esp + 0x1c]
00de359a push     ebx
00de359b push     ebp
00de359c push     ecx
00dcec50 push     esi
00dcec51 mov      esi, ecx
00dcec53 mov      eax, dword ptr [esi + 8]
00dcec56 test     eax, 0x100
00dcec5b je       0xdcecd5
00dcec5d and      eax, 0xfffffeff
00dcec62 mov      dword ptr [esi + 8], eax
00dcec65 mov      eax, dword ptr [esi + 0x10]
00dcec68 test     eax, eax
00dcec6a jne      0xdcec71
00dcec6c mov      dword ptr [esi + 0x10], eax
00dcec6f jmp      0xdcec78
00dcec71 lea      eax, [eax + esi + 0xf]
00dcec75 mov      dword ptr [esi + 0x10], eax
00dcec78 push     ebx
00dcec79 call     0xde3480
00dcec7e mov      ebx, dword ptr [eax]
00dcec80 push     0xbd
00dcec85 push     0xa3eb4556
00dcec8a push     0
00dcec8c mov      ecx, eax
00dcec8e mov      eax, dword ptr [ebx + 4]
00dcec91 push     8
00dcec93 mov      edx, 0x30
00dcec98 call     eax
00dcec9a mov      dword ptr [esi + 0x18], eax
00dcec9d lea      ecx, [eax + 0x30]
00dceca0 pop      ebx
00dceca1 jmp      0xdcecb0
00dceca3 lea      esp, [esp]
00dcecaa lea      ebx, [ebx]
00dcecb0 mov      dword ptr [eax], 0
00dcecb6 mov      dword ptr [eax + 4], 0
00dcecbd add      eax, 8
00dcecc0 cmp      eax, ecx
00dcecc2 jb       0xdcecb0
00dcecc4 mov      ecx, dword ptr [esi + 0x18]
00dcecc7 mov      edx, esi
00dcecc9 call     0xdf46f0
00dcecce mov      ecx, esi
00dcecd0 call     0xe08540
00dcecd5 pop      esi
00dcecd6 ret      4
00dcecd9 int3     
00dcecda int3     
00dcecdb int3     
00dcecdc int3     
00dcecdd int3     
00dcecde int3     
00dcecdf int3     
00e08540 mov      eax, dword ptr [0x21215d0]
00e08545 push     esi
00e08546 mov      esi, ecx
00e08548 test     eax, eax
00e0854a je       0xe08552
00e0854c cmp      esi, eax
00e0854e jne      0xe08557
00e08550 pop      esi
00e08551 ret      
00e08552 call     0xe08480
00e08557 mov      eax, dword ptr [esi + 8]
00e0855a test     eax, 0x200
00e0855f jne      0xe08550
00e08561 or       eax, 0x200
00e08566 push     edi
00e08567 mov      dword ptr [esi + 8], eax
00e0856a call     0xdd1170
00e0856f mov      edi, eax
00e08571 mov      ecx, edi
00e08573 call     0xda1c90
00e08578 mov      eax, dword ptr [0x21215d0]
00e0857d cmp      dword ptr [eax], 0
00e08580 jne      0xe0858d
00e08582 cmp      dword ptr [eax + 4], 0
00e08586 jne      0xe0858d
00e08588 mov      dword ptr [eax + 4], eax
00e0858b mov      dword ptr [eax], eax
00e0858d movsx    ecx, byte ptr [esi + 8]
00e08591 sub      ecx, 0
00e08594 je       0xe0859e
00e08596 dec      ecx
00e08597 jne      0xe085b2
00e08599 inc      dword ptr [eax + 0x24]
00e0859c jmp      0xe085a1
00e0859e inc      dword ptr [eax + 0x20]
00e085a1 mov      ecx, dword ptr [eax + 4]
00e085a4 mov      dword ptr [esi], eax
00e085a6 mov      dword ptr [esi + 4], ecx
00e085a9 mov      edx, ecx
00e085ab mov      dword ptr [edx], esi
00e085ad mov      eax, dword ptr [esi]
00e085af mov      dword ptr [eax + 4], esi
00e085b2 call     0xdf4560
00e085b7 test     eax, eax
00e085b9 je       0xe085c7
00e085bb mov      ecx, dword ptr [esi + 0x18]
00e085be push     0
00e085c0 xor      edx, edx
00e085c2 call     0xdbae20
00e085c7 mov      ecx, edi
00e085c9 pop      edi
00e085ca pop      esi
00e085cb jmp      0xda1cb0
00e085d0 mov      eax, dword ptr [0x21215d0]
00e085d5 push     esi
00e085d6 mov      esi, ecx
00e085d8 test     eax, eax
00e085da je       0xe085e2
00e085dc cmp      esi, eax
00e085de jne      0xe085e7
00e085e0 pop      esi
00e085e1 ret      
00e085e2 call     0xe08480
00e085e7 and      dword ptr [esi + 8], 0xfffffdff
00e085ee call     0xdd1170
00e085f3 mov      ecx, eax
00e085f5 call     0xda1c90
00e085fa movsx    eax, byte ptr [esi + 8]
00e085fe sub      eax, 0
00e08601 je       0xe08634
00e08603 mov      eax, dword ptr [esi + 4]
00e08606 mov      ecx, dword ptr [esi]
00e08608 mov      dword ptr [eax], ecx
00e0860a mov      eax, dword ptr [esi + 4]
00e0860d mov      edx, dword ptr [esi]
00e0860f mov      dword ptr [edx + 4], eax
00e08612 mov      eax, dword ptr [0x21215d0]
00e08617 mov      dword ptr [esi + 4], 0
00e0861e mov      dword ptr [esi], 0
00e08624 dec      dword ptr [eax + 0x24]
00e08627 call     0xdd1170
00e0862c mov      ecx, eax
00e0862e pop      esi
00e0862f jmp      0xda1cb0
00e08634 mov      ecx, dword ptr [esi + 4]
00e08637 mov      edx, dword ptr [esi]
00e08639 mov      dword ptr [ecx], edx
00e0863b mov      eax, dword ptr [esi]
00e0863d mov      ecx, dword ptr [esi + 4]
00e08640 mov      dword ptr [eax + 4], ecx
00e08643 mov      eax, dword ptr [0x21215d0]
00e08648 mov      dword ptr [esi + 4], 0
00e0864f mov      dword ptr [esi], 0
00e08655 dec      dword ptr [eax + 0x20]
00e08658 call     0xdd1170
00e0865d mov      ecx, eax
00e0865f pop      esi
00e08660 jmp      0xda1cb0
00e08665 int3     
00e08666 int3     
00e08667 int3     
00e08668 int3     
00e08669 int3     
00e0866a int3     
00e0866b int3     
00e0866c int3     
00e0866d int3     
00e0866e int3     
00e0866f int3     
00e08670 push     ebx
00e08671 push     edi
00e08672 mov      edi, ecx
00e08674 mov      ebx, edx
00e08676 test     edi, edi
00e08678 je       0xe086d9
00e0867a call     0x4dff60
