Перейти к содержанию
  • записи
    104
  • комментариев
    125
  • просмотров
    15 639

Большой бряк на структуру размером 0x1000 за 10 секунд


MasterGH

887 просмотров

Пример лога снятия данных с брейкпоинта на структуру 0x1000 за 10 секунд.

В структуре по смещению 0x2C0  находится здоровье персонажа. На начало этой структуры и был поставлен брейкпоинт .

 

Ниже будет большой кусок опкодов, который работает со структурой. Можно посмотреть в каком порядке опкоды исполняются и с какими смещениями, насколько далеко они друг от друга. Некоторые смещения рядом с известными смещениями могут заинтересовать.  Одинаковые опкоды в определенном порядке, но по разным RIP тоже могут заинтересовать. Switch-case могут заинтересоваь в виде cmp [x]. число. Инструкции чтения из структуры больше интересуют, т.к. они могут более вероятно, на что-то влиять - из них читается и для чего-то это нужно. 

 

Спойлер

Elapsed time: 10.04 
Count opcodes 974 

004A11C5 - 80 B9 14030000 00 - cmp byte ptr [ecx+00000314],00 
0040AEB5 - 8B 88 3C050000  - mov ecx,[eax+0000053C] 
0040AEFE - 8B 88 3C050000  - mov ecx,[eax+0000053C] 
0040AF42 - 8B 88 3C050000  - mov ecx,[eax+0000053C] 
0040AFA2 - 8B 88 3C050000  - mov ecx,[eax+0000053C] 
004A1137 - 80 B8 14030000 00 - cmp byte ptr [eax+00000314],00 
004A1167 - A5 - movsd  
004A1168 - A5 - movsd  
004A1169 - A5 - movsd  
00446AB2 - 80 BE 14030000 00 - cmp byte ptr [esi+00000314],00 
0043DA35 - 80 BE 14030000 00 - cmp byte ptr [esi+00000314],00 
0043DACE - 80 B8 14030000 00 - cmp byte ptr [eax+00000314],00 
004A10D3 - 80 B8 14030000 00 - cmp byte ptr [eax+00000314],00 
004A1107 - A5 - movsd  
004A1108 - A5 - movsd  
004A1109 - A5 - movsd  
00549C12 - 8B 88 3C050000  - mov ecx,[eax+0000053C] 
004F3C73 - D9 00  - fld dword ptr [eax] 
004F3C79 - D9 40 04  - fld dword ptr [eax+04] 
004F3C80 - D9 40 08  - fld dword ptr [eax+08] 
004D4980 - 8B 91 2C030000  - mov edx,[ecx+0000032C] 
004F4AFB - D9 00  - fld dword ptr [eax] 
004F4B01 - D9 40 04  - fld dword ptr [eax+04] 
004F4B0D - D9 40 08  - fld dword ptr [eax+08] 
004F4B26 - 8B 80 3C050000  - mov eax,[eax+0000053C] 
005430A7 - D9 00  - fld dword ptr [eax] 
005430B0 - D9 40 04  - fld dword ptr [eax+04] 
004AD701 - 80 BA 14030000 00 - cmp byte ptr [edx+00000314],00 
005936CA - 83 7A 4C 00 - cmp dword ptr [edx+4C],00 
005936D0 - 8A 82 5C010000  - mov al,[edx+0000015C] 
00593886 - D8 8B DC020000  - fmul dword ptr [ebx+000002DC] 
004BA09D - D8 08  - fmul dword ptr [eax] 
004BA0C9 - D8 48 04  - fmul dword ptr [eax+04] 
004BA0F6 - D8 48 08  - fmul dword ptr [eax+08] 
004BA123 - D8 48 10  - fmul dword ptr [eax+10] 
004BA150 - D8 48 14  - fmul dword ptr [eax+14] 
004BA17D - D8 48 18  - fmul dword ptr [eax+18] 
004BA1A4 - D9 40 30  - fld dword ptr [eax+30] 
004BA1A9 - D9 40 34  - fld dword ptr [eax+34] 
004BA1AF - D9 40 38  - fld dword ptr [eax+38] 
005938BC - 8A 83 D4010000  - mov al,[ebx+000001D4] 
005938C5 - 80 BB 14030000 00 - cmp byte ptr [ebx+00000314],00 
005938F4 - 8A 83 C0040000  - mov al,[ebx+000004C0] 
00593932 - 8B 45 4C  - mov eax,[ebp+4C] 
00593C7A - 8B 45 4C  - mov eax,[ebp+4C] 
004B1C15 - 8B 45 4C  - mov eax,[ebp+4C] 
004B1C2C - 8A 45 50  - mov al,[ebp+50] 
004B1C50 - 8B 45 4C  - mov eax,[ebp+4C] 
00402C26 - D9 18  - fstp dword ptr [eax] 
00402C39 - D9 58 04  - fstp dword ptr [eax+04] 
004583EA - 8A 42 50  - mov al,[edx+50] 
004583F3 - 0FBE 82 98040000  - movsx eax,byte ptr [edx+00000498] 
004583FD - 8A 84 C2 70030000  - mov al,[edx+eax*8+00000370] 
004D49F1 - 83 BB E4000000 00 - cmp dword ptr [ebx+000000E4],00 
004C5716 - D8 22  - fsub dword ptr [edx] 
004C571D - D8 61 04  - fsub dword ptr [ecx+04] 
004C6278 - 80 B9 60010000 02 - cmp byte ptr [ecx+00000160],02 
004C6295 - 8B AA 2C030000  - mov ebp,[edx+0000032C] 
004C1613 - D9 00  - fld dword ptr [eax] 
004C161B - D9 40 04  - fld dword ptr [eax+04] 
004C1625 - D9 40 08  - fld dword ptr [eax+08] 
004C1677 - 8B 8F 24020000  - mov ecx,[edi+00000224] 
004150D5 - 8B 80 3C050000  - mov eax,[eax+0000053C] 
004D2CB9 - 83 BB 24020000 31 - cmp dword ptr [ebx+00000224],31 
004D2CE4 - 8B 83 2C030000  - mov eax,[ebx+0000032C] 
004D2DAE - D9 40 04  - fld dword ptr [eax+04] 
004D2DBF - D8 28  - fsubr dword ptr [eax] 
00419364 - 66 8B 7B 58  - mov di,[ebx+58] 
00419381 - 8A 43 51  - mov al,[ebx+51] 
00419392 - 66 89 43 58  - mov [ebx+58],ax 
0041939F - A5 - movsd  
004193A0 - A5 - movsd  
004193A1 - A5 - movsd  
004C55AB - 80 BA 14030000 00 - cmp byte ptr [edx+00000314],00 
004C55B7 - D9 03  - fld dword ptr [ebx] 
004C55BD - D9 43 04  - fld dword ptr [ebx+04] 
004C5943 - D8 20  - fsub dword ptr [eax] 
004C594C - D8 60 04  - fsub dword ptr [eax+04] 
004C595A - D8 60 08  - fsub dword ptr [eax+08] 
004C59AC - D8 20  - fsub dword ptr [eax] 
004C59B5 - D8 60 04  - fsub dword ptr [eax+04] 
004C59C3 - D8 60 08  - fsub dword ptr [eax+08] 
004C58DE - D8 20  - fsub dword ptr [eax] 
004C58E7 - D8 60 04  - fsub dword ptr [eax+04] 
004C58F1 - D8 60 08  - fsub dword ptr [eax+08] 
004B1C75 - 8A 45 54  - mov al,[ebp+54] 
004B1C87 - 8B 39  - mov edi,[ecx] 
004EFE48 - 80 BE 56050000 00 - cmp byte ptr [esi+00000556],00 
004EFE57 - 80 BE 56050000 00 - cmp byte ptr [esi+00000556],00 
004EFE60 - C7 86 68050000 00000000 - mov [esi+00000568],00000000 
004EFE6A - 8B 96 EC020000  - mov edx,[esi+000002EC] 
004EFEA0 - 0FB7 46 5A  - movzx eax,word ptr [esi+5A] 
004C89BE - 8A 8B 24010000  - mov cl,[ebx+00000124] 
004C89E4 - 8B 43 4C  - mov eax,[ebx+4C] 
004C89ED - 8A 93 5A010000  - mov dl,[ebx+0000015A] 
004C8A1D - 8B 43 4C  - mov eax,[ebx+4C] 
004C8A26 - 8A 83 56010000  - mov al,[ebx+00000156] 
004C8A32 - 88 83 56010000  - mov [ebx+00000156],al 
004C53F9 - 0FB7 45 5A  - movzx eax,word ptr [ebp+5A] 
004C56DD - 8B 8C B5 F4040000  - mov ecx,[ebp+esi*4+000004F4] 
004C5700 - 8B 8C B5 F4040000  - mov ecx,[ebp+esi*4+000004F4] 
004C570E - D9 00  - fld dword ptr [eax] 
004C571A - D9 40 04  - fld dword ptr [eax+04] 
004C8A3D - 8A 83 22010000  - mov al,[ebx+00000122] 
004C8A47 - 88 83 22010000  - mov [ebx+00000122],al 
004C81F9 - 80 BD 14030000 00 - cmp byte ptr [ebp+00000314],00 
004C8210 - 83 BD 24020000 31 - cmp dword ptr [ebp+00000224],31 
004C8229 - D8 8D C0000000  - fmul dword ptr [ebp+000000C0] 
00546492 - A5 - movsd  
00546493 - A5 - movsd  
00546494 - A5 - movsd  
00546495 - 8A 45 54  - mov al,[ebp+54] 
004C8720 - 8A 45 54  - mov al,[ebp+54] 
004C8725 - 88 45 54  - mov [ebp+54],al 
004C8A52 - 8B 83 24020000  - mov eax,[ebx+00000224] 
004C8DD0 - 8A 83 54010000  - mov al,[ebx+00000154] 
004C8DD8 - 88 83 54010000  - mov [ebx+00000154],al 
004C8DDE - 8A 83 54010000  - mov al,[ebx+00000154] 
004C8DF1 - 8B BB EC020000  - mov edi,[ebx+000002EC] 
004CE760 - 83 B9 24020000 22 - cmp dword ptr [ecx+00000224],22 
004CE769 - 8A 81 55010000  - mov al,[ecx+00000155] 
004CE776 - 8A 81 55010000  - mov al,[ecx+00000155] 
004CE783 - D9 81 C0020000  - fld dword ptr [ecx+000002C0] 
004C8E2B - 83 BB 38020000 00 - cmp dword ptr [ebx+00000238],00 
004C8E40 - D8 9B 08010000  - fcomp dword ptr [ebx+00000108] 
004C8E73 - C6 83 F0040000 00 - mov byte ptr [ebx+000004F0],00 
004C8E7A - D9 83 C0020000  - fld dword ptr [ebx+000002C0] 
004C8ECD - 8A 83 5B010000  - mov al,[ebx+0000015B] 
004C8ED5 - 88 83 5B010000  - mov [ebx+0000015B],al 
004C8EDB - 8A 43 51  - mov al,[ebx+51] 
004C8EE6 - D9 83 0C010000  - fld dword ptr [ebx+0000010C] 
004CAEA0 - 8A 83 55010000  - mov al,[ebx+00000155] 
004CAEA8 - 88 83 55010000  - mov [ebx+00000155],al 
004CAEAE - 8B 93 20020000  - mov edx,[ebx+00000220] 
004CAEEA - 8A 83 58010000  - mov al,[ebx+00000158] 
004CAEFE - 8A 83 5A010000  - mov al,[ebx+0000015A] 
004CAF69 - 8A 83 54010000  - mov al,[ebx+00000154] 
00495FD3 - 8A 43 50  - mov al,[ebx+50] 
00495FEE - 8A 43 51  - mov al,[ebx+51] 
00495FF3 - 88 43 51  - mov [ebx+51],al 
00495FF6 - 8A 43 51  - mov al,[ebx+51] 
00495FFB - 88 43 51  - mov [ebx+51],al 
00495FFE - 8A 43 52  - mov al,[ebx+52] 
00496003 - 88 43 52  - mov [ebx+52],al 
00496006 - 8A 43 54  - mov al,[ebx+54] 
0049600B - 88 43 54  - mov [ebx+54],al 
0049600E - 8A 53 50  - mov dl,[ebx+50] 
00496020 - C6 83 EE000000 00 - mov byte ptr [ebx+000000EE],00 
00496027 - 8A 43 52  - mov al,[ebx+52] 
0049602C - 88 43 52  - mov [ebx+52],al 
0049602F - 66 C7 83 20010000 0000 - mov word ptr [ebx+00000120],0000 
00496038 - C7 83 0C010000 00000000 - mov [ebx+0000010C],00000000 
00496042 - C7 83 10010000 00000000 - mov [ebx+00000110],00000000 
0049604C - 8A 43 51  - mov al,[ebx+51] 
0049605A - 8A 43 50  - mov al,[ebx+50] 
0049606B - 8A 43 51  - mov al,[ebx+51] 
00495C10 - 8A 81 22010000  - mov al,[ecx+00000122] 
00495C28 - D8 A9 80000000  - fsubr dword ptr [ecx+00000080] 
00495C2E - D9 99 80000000  - fstp dword ptr [ecx+00000080] 
00495C40 - D9 41 78  - fld dword ptr [ecx+78] 
00495C43 - D8 81 90000000  - fadd dword ptr [ecx+00000090] 
00495C49 - D9 59 78  - fstp dword ptr [ecx+78] 
00495C4C - D9 41 7C  - fld dword ptr [ecx+7C] 
00495C4F - D8 81 94000000  - fadd dword ptr [ecx+00000094] 
00495C55 - D9 59 7C  - fstp dword ptr [ecx+7C] 
00495C58 - D9 81 80000000  - fld dword ptr [ecx+00000080] 
00495C5E - D8 81 98000000  - fadd dword ptr [ecx+00000098] 
00495C64 - D9 99 80000000  - fstp dword ptr [ecx+00000080] 
00495C6A - D9 81 84000000  - fld dword ptr [ecx+00000084] 
00495C70 - D8 81 9C000000  - fadd dword ptr [ecx+0000009C] 
00495C76 - D9 99 84000000  - fstp dword ptr [ecx+00000084] 
00495C7C - D9 81 88000000  - fld dword ptr [ecx+00000088] 
00495C82 - D8 81 A0000000  - fadd dword ptr [ecx+000000A0] 
00495C88 - D9 99 88000000  - fstp dword ptr [ecx+00000088] 
00495C8E - D9 81 8C000000  - fld dword ptr [ecx+0000008C] 
00495C94 - D8 81 A4000000  - fadd dword ptr [ecx+000000A4] 
00495C9A - D9 99 8C000000  - fstp dword ptr [ecx+0000008C] 
00495CA0 - C7 81 90000000 00000000 - mov [ecx+00000090],00000000 
00495CAA - C7 81 94000000 00000000 - mov [ecx+00000094],00000000 
00495CB4 - C7 81 98000000 00000000 - mov [ecx+00000098],00000000 
00495CBE - C7 81 9C000000 00000000 - mov [ecx+0000009C],00000000 
00495CC8 - C7 81 A0000000 00000000 - mov [ecx+000000A0],00000000 
00495CD2 - C7 81 A4000000 00000000 - mov [ecx+000000A4],00000000 
00495CE8 - D9 83 CC000000  - fld dword ptr [ebx+000000CC] 
00495D78 - D9 43 7C  - fld dword ptr [ebx+7C] 
00495D81 - D9 43 78  - fld dword ptr [ebx+78] 
00495D8C - D9 83 80000000  - fld dword ptr [ebx+00000080] 
00495DF4 - D9 43 78  - fld dword ptr [ebx+78] 
00495DF9 - D9 5B 78  - fstp dword ptr [ebx+78] 
00495DFC - D9 43 7C  - fld dword ptr [ebx+7C] 
00495E01 - D9 5B 7C  - fstp dword ptr [ebx+7C] 
00495E04 - D9 83 80000000  - fld dword ptr [ebx+00000080] 
00495E0C - D9 9B 80000000  - fstp dword ptr [ebx+00000080] 
00495E12 - D9 83 84000000  - fld dword ptr [ebx+00000084] 
00495E1E - D9 9B 84000000  - fstp dword ptr [ebx+00000084] 
00495E24 - D9 83 88000000  - fld dword ptr [ebx+00000088] 
00495E30 - D9 9B 88000000  - fstp dword ptr [ebx+00000088] 
00495E36 - D9 83 8C000000  - fld dword ptr [ebx+0000008C] 
00495E42 - D9 9B 8C000000  - fstp dword ptr [ebx+0000008C] 
004CB006 - 8B AB 24020000  - mov ebp,[ebx+00000224] 
004C74A4 - D9 83 E0020000  - fld dword ptr [ebx+000002E0] 
004C74B4 - D8 8B E4020000  - fmul dword ptr [ebx+000002E4] 
004C74CA - FF B3 DC020000  - push [ebx+000002DC] 
004C74D6 - D9 9B DC020000  - fstp dword ptr [ebx+000002DC] 
004C74E9 - D9 83 DC020000  - fld dword ptr [ebx+000002DC] 
004C7548 - 83 BB 24020000 10 - cmp dword ptr [ebx+00000224],10 
004C7563 - D8 A3 DC020000  - fsub dword ptr [ebx+000002DC] 
004C75B8 - D9 83 DC020000  - fld dword ptr [ebx+000002DC] 
004C75C0 - D9 9B DC020000  - fstp dword ptr [ebx+000002DC] 
004C75C8 - D9 83 DC020000  - fld dword ptr [ebx+000002DC] 
004C75EA - D9 83 DC010000  - fld dword ptr [ebx+000001DC] 
004C75F4 - D9 83 DC020000  - fld dword ptr [ebx+000002DC] 
004C7618 - D8 8B E0010000  - fmul dword ptr [ebx+000001E0] 
004C7620 - D9 9B D4020000  - fstp dword ptr [ebx+000002D4] 
004C7626 - D9 83 DC020000  - fld dword ptr [ebx+000002DC] 
004C7648 - D9 83 DC010000  - fld dword ptr [ebx+000001DC] 
004C7652 - D9 83 DC020000  - fld dword ptr [ebx+000002DC] 
004C7674 - D9 83 E0010000  - fld dword ptr [ebx+000001E0] 
004C767E - D9 9B D8020000  - fstp dword ptr [ebx+000002D8] 
004C769A - D9 83 D4020000  - fld dword ptr [ebx+000002D4] 
004C76A6 - D9 9B D4020000  - fstp dword ptr [ebx+000002D4] 
004C76AC - D9 83 D8020000  - fld dword ptr [ebx+000002D8] 
004C76E4 - D9 9B D8020000  - fstp dword ptr [ebx+000002D8] 
004CE870 - 8B 91 24020000  - mov edx,[ecx+00000224] 
004C773E - FF B3 DC020000  - push [ebx+000002DC] 
004C7A6E - D8 83 E8050000  - fadd dword ptr [ebx+000005E8] 
004C774D - D9 83 D8020000  - fld dword ptr [ebx+000002D8] 
004C775D - D9 83 D4020000  - fld dword ptr [ebx+000002D4] 
004C7782 - D8 A3 DC020000  - fsub dword ptr [ebx+000002DC] 
004C783A - D9 9B D4020000  - fstp dword ptr [ebx+000002D4] 
004C7866 - D9 9B D8020000  - fstp dword ptr [ebx+000002D8] 
004C786C - 8B 43 4C  - mov eax,[ebx+4C] 
004C787B - 8B 43 4C  - mov eax,[ebx+4C] 
004C7F79 - A5 - movsd  
004C7F7A - A5 - movsd  
004C7F7B - A5 - movsd  
004C7F7F - FF B5 DC020000  - push [ebp+000002DC] 
004B957C - D9 1B  - fstp dword ptr [ebx] 
004B958A - D9 5B 04  - fstp dword ptr [ebx+04] 
004B9593 - D9 5B 08  - fstp dword ptr [ebx+08] 
004B959C - D9 5B 10  - fstp dword ptr [ebx+10] 
004B95A3 - D9 5B 14  - fstp dword ptr [ebx+14] 
004B95AA - D9 5B 18  - fstp dword ptr [ebx+18] 
004B95B9 - D9 5B 20  - fstp dword ptr [ebx+20] 
004B95C8 - D9 5B 24  - fstp dword ptr [ebx+24] 
004B95CF - D9 5B 28  - fstp dword ptr [ebx+28] 
004B95D8 - C7 43 30 00000000 - mov [ebx+30],00000000 
004B95DF - C7 43 34 00000000 - mov [ebx+34],00000000 
004B95E6 - C7 43 38 00000000 - mov [ebx+38],00000000 
004C7F96 - D9 45 34  - fld dword ptr [ebp+34] 
004C7F9D - D9 5D 34  - fstp dword ptr [ebp+34] 
004C7FA0 - D9 45 38  - fld dword ptr [ebp+38] 
004C7FA7 - D9 5D 38  - fstp dword ptr [ebp+38] 
004C7FAA - D9 45 3C  - fld dword ptr [ebp+3C] 
004C7FB1 - D9 5D 3C  - fstp dword ptr [ebp+3C] 
004C7AC0 - 8A 83 54010000  - mov al,[ebx+00000154] 
004C7ADD - A5 - movsd  
004C7ADE - A5 - movsd  
004C7ADF - A5 - movsd  
004C7AE3 - FF B3 DC020000  - push [ebx+000002DC] 
004B93B4 - D9 13  - fst dword ptr [ebx] 
004B93B8 - D9 5B 04  - fstp dword ptr [ebx+04] 
004B93BF - C7 43 08 00000000 - mov [ebx+08],00000000 
004B93C6 - D9 5B 10  - fstp dword ptr [ebx+10] 
004B93C9 - D9 53 14  - fst dword ptr [ebx+14] 
004B93CE - C7 43 18 00000000 - mov [ebx+18],00000000 
004B93D5 - C7 43 20 00000000 - mov [ebx+20],00000000 
004B93DC - C7 43 24 00000000 - mov [ebx+24],00000000 
004B93E3 - C7 43 28 0000803F - mov [ebx+28],3F800000 
004B946C - C7 43 30 00000000 - mov [ebx+30],00000000 
004B9473 - C7 43 34 00000000 - mov [ebx+34],00000000 
004B947A - C7 43 38 00000000 - mov [ebx+38],00000000 
004C7AF6 - D9 43 34  - fld dword ptr [ebx+34] 
004C7AFD - D9 5B 34  - fstp dword ptr [ebx+34] 
004C7B00 - D9 43 38  - fld dword ptr [ebx+38] 
004C7B07 - D9 5B 38  - fstp dword ptr [ebx+38] 
004C7B0A - D9 43 3C  - fld dword ptr [ebx+3C] 
004C7B11 - D9 5B 3C  - fstp dword ptr [ebx+3C] 
004C7B14 - 83 BB EC020000 00 - cmp dword ptr [ebx+000002EC],00 
004C7D50 - 80 BB 23010000 1A - cmp byte ptr [ebx+00000123],1A 
004C7E48 - D9 83 D4020000  - fld dword ptr [ebx+000002D4] 
004C7E4E - D8 63 78  - fsub dword ptr [ebx+78] 
004C7E55 - D9 83 D8020000  - fld dword ptr [ebx+000002D8] 
004C7E5B - D8 63 7C  - fsub dword ptr [ebx+7C] 
004C7E64 - 83 BB EC020000 00 - cmp dword ptr [ebx+000002EC],00 
004C7EFB - D9 43 78  - fld dword ptr [ebx+78] 
004C7F02 - D9 5B 78  - fstp dword ptr [ebx+78] 
004C7F05 - D9 43 7C  - fld dword ptr [ebx+7C] 
004C7F0C - D9 5B 7C  - fstp dword ptr [ebx+7C] 
004CC76C - 8B 43 4C  - mov eax,[ebx+4C] 
004CC78C - 8A 8B 58010000  - mov cl,[ebx+00000158] 
004CC7CA - 8A 8B 54010000  - mov cl,[ebx+00000154] 
004CCC57 - 80 BB 23010000 13 - cmp byte ptr [ebx+00000123],13 
004CB09C - 8A 83 54010000  - mov al,[ebx+00000154] 
004D958C - 8A 83 5B010000  - mov al,[ebx+0000015B] 
004D8FD7 - 8B 83 E0040000  - mov eax,[ebx+000004E0] 
004D8FF7 - 8B 8B 80010000  - mov ecx,[ebx+00000180] 
004D95C7 - 83 BB 64010000 00 - cmp dword ptr [ebx+00000164],00 
004CB0C8 - 8A 83 54010000  - mov al,[ebx+00000154] 
004CB0E0 - 8A 83 55010000  - mov al,[ebx+00000155] 
004CB0F1 - 8A 83 54010000  - mov al,[ebx+00000154] 
004CB107 - 8A 83 54010000  - mov al,[ebx+00000154] 
004CB11B - 8A 83 55010000  - mov al,[ebx+00000155] 
004CB12F - 8A 83 56010000  - mov al,[ebx+00000156] 
004CB186 - 83 BB 38020000 00 - cmp dword ptr [ebx+00000238],00 
004CB196 - 83 BB 24020000 01 - cmp dword ptr [ebx+00000224],01 
004CB1BB - 8B 83 24020000  - mov eax,[ebx+00000224] 
004CB1C1 - 8B 93 24020000  - mov edx,[ebx+00000224] 
004D0738 - 8B B3 10030000  - mov esi,[ebx+00000310] 
004D0804 - 8B 43 4C  - mov eax,[ebx+4C] 
004D0811 - 8B 43 4C  - mov eax,[ebx+4C] 
004D081E - 83 BB 2C020000 01 - cmp dword ptr [ebx+0000022C],01 
004D0900 - 0FBE 8B 98040000  - movsx ecx,byte ptr [ebx+00000498] 
00564100 - 8B 11  - mov edx,[ecx] 
004D0938 - 0FBE 83 98040000  - movsx eax,byte ptr [ebx+00000498] 
004D0942 - 8B AC C3 5C030000  - mov ebp,[ebx+eax*8+0000035C] 
004D09E9 - C7 83 D4020000 00000000 - mov [ebx+000002D4],00000000 
004D09F3 - C7 83 D8020000 00000000 - mov [ebx+000002D8],00000000 
004CB826 - 8B 39  - mov edi,[ecx] 
004CB82B - 8A 83 57010000  - mov al,[ebx+00000157] 
004E5929 - 8A 85 56010000  - mov al,[ebp+00000156] 
004E5947 - 0FBF 45 5C  - movsx eax,word ptr [ebp+5C] 
004E59C2 - 83 BD 24020000 20 - cmp dword ptr [ebp+00000224],20 
004E59D4 - 66 8B 85 2A050000  - mov ax,[ebp+0000052A] 
004CB9BB - 80 BB 14030000 00 - cmp byte ptr [ebx+00000314],00 
004CB9D4 - C7 83 EC020000 00000000 - mov [ebx+000002EC],00000000 
004EFF05 - 8A 46 52  - mov al,[esi+52] 
004EFF1B - 8B 8E 3C050000  - mov ecx,[esi+0000053C] 
004A7620 - 8B 51 60  - mov edx,[ecx+60] 
004EFF2F - 8B 86 2C020000  - mov eax,[esi+0000022C] 
004F13F0 - D9 81 48050000  - fld dword ptr [ecx+00000548] 
004F13F6 - D8 99 4C050000  - fcomp dword ptr [ecx+0000054C] 
004EFF59 - 8B 86 24020000  - mov eax,[esi+00000224] 
004F0105 - 83 BE 64010000 00 - cmp dword ptr [esi+00000164],00 
004F010E - C7 86 2C020000 01000000 - mov [esi+0000022C],00000001 
004F0118 - 8A 86 55010000  - mov al,[esi+00000155] 
004F0188 - 8B 86 24020000  - mov eax,[esi+00000224] 
004F018E - 8B 8E 24020000  - mov ecx,[esi+00000224] 
004F046C - 8B 46 4C  - mov eax,[esi+4C] 
004F1AF7 - C7 85 44050000 00000000 - mov [ebp+00000544],00000000 
004F1B01 - 83 BD 24020000 23 - cmp dword ptr [ebp+00000224],23 
004F1C6D - 0FBE 8D 98040000  - movsx ecx,byte ptr [ebp+00000498] 
004F1C77 - 8B 84 CD 5C030000  - mov eax,[ebp+ecx*8+0000035C] 
004F1CA4 - 83 BD 24020000 11 - cmp dword ptr [ebp+00000224],11 
004F0939 - 8B 45 4C  - mov eax,[ebp+4C] 
004F0948 - 8B 45 4C  - mov eax,[ebp+4C] 
004F0957 - 8B 45 4C  - mov eax,[ebp+4C] 
004F0966 - 8B 45 4C  - mov eax,[ebp+4C] 
004F0977 - 8B 45 4C  - mov eax,[ebp+4C] 
004F0988 - 8B 45 4C  - mov eax,[ebp+4C] 
004F0999 - 8B 45 4C  - mov eax,[ebp+4C] 
004F09AA - 8A 85 5A010000  - mov al,[ebp+0000015A] 
004F0BCD - D8 9D 44050000  - fcomp dword ptr [ebp+00000544] 
004F0CB0 - D9 85 48050000  - fld dword ptr [ebp+00000548] 
004F0CE8 - 83 BD 24020000 11 - cmp dword ptr [ebp+00000224],11 
004F0D77 - C7 85 2C020000 01000000 - mov [ebp+0000022C],00000001 
004F122E - 80 BD 7C050000 00 - cmp byte ptr [ebp+0000057C],00 
004F1CB4 - 8A 85 55010000  - mov al,[ebp+00000155] 
004F1CC1 - 0FBE 95 98040000  - movsx edx,byte ptr [ebp+00000498] 
004F1CCB - 8B 84 D5 5C030000  - mov eax,[ebp+edx*8+0000035C] 
004F1FA3 - 0FBE 93 98040000  - movsx edx,byte ptr [ebx+00000498] 
004F1FB3 - 8B 84 D3 5C030000  - mov eax,[ebx+edx*8+0000035C] 
004F1FC0 - 80 BB 7D050000 00 - cmp byte ptr [ebx+0000057D],00 
004F1FEB - 83 BB B4040000 00 - cmp dword ptr [ebx+000004B4],00 
004F1FF8 - 0FBE 83 98040000  - movsx eax,byte ptr [ebx+00000498] 
004F2012 - 8B 11  - mov edx,[ecx] 
004F2019 - 8B 00  - mov eax,[eax] 
004F21E0 - 83 A3 14020000 FD - and dword ptr [ebx+00000214],-03 
004F21E7 - 83 BB 24020000 10 - cmp dword ptr [ebx+00000224],10 
004F2345 - 83 BB 9C040000 00 - cmp dword ptr [ebx+0000049C],00 
004F2355 - 8B 83 9C040000  - mov eax,[ebx+0000049C] 
004F23A6 - 83 BB 9C040000 00 - cmp dword ptr [ebx+0000049C],00 
004F23B0 - 88 83 7D050000  - mov [ebx+0000057D],al 
004CE7B0 - 83 B9 24020000 28 - cmp dword ptr [ecx+00000224],28 
004F2530 - 0FBE 83 98040000  - movsx eax,byte ptr [ebx+00000498] 
004F25D6 - 8A 83 54050000  - mov al,[ebx+00000554] 
004F25DC - 3A 83 98040000  - cmp al,[ebx+00000498] 
004F0519 - 0FBE 8E 98040000  - movsx ecx,byte ptr [esi+00000498] 
004F0520 - 8B 46 64  - mov eax,[esi+64] 
00563B43 - 8B 43 04  - mov eax,[ebx+04] 
00563B4F - 8B 53 04  - mov edx,[ebx+04] 
004F26F3 - D9 83 E8050000  - fld dword ptr [ebx+000005E8] 
004F2751 - 0FBE 8B 98040000  - movsx ecx,byte ptr [ebx+00000498] 
004F276C - 8B 10  - mov edx,[eax] 
004F2791 - 8B 11  - mov edx,[ecx] 
004F2820 - 83 BB D4010000 01 - cmp dword ptr [ebx+000001D4],01 
004F0767 - 83 BE 2C020000 04 - cmp dword ptr [esi+0000022C],04 
004F0797 - D9 40 04  - fld dword ptr [eax+04] 
004F079C - D9 00  - fld dword ptr [eax] 
004F07C8 - 8B 86 58050000  - mov eax,[esi+00000558] 
004F07EC - C6 86 55050000 01 - mov byte ptr [esi+00000555],01 
004B1C8C - 8A 45 51  - mov al,[ebp+51] 
004B1CB7 - 8A 45 52  - mov al,[ebp+52] 
0049B7E8 - 66 8B 79 58  - mov di,[ecx+58] 
0049B7F5 - 8A 51 51  - mov dl,[ecx+51] 
004742C8 - 0FBF 41 5C  - movsx eax,word ptr [ecx+5C] 
004BA5DC - D9 41 10  - fld dword ptr [ecx+10] 
004BA5E5 - D9 01  - fld dword ptr [ecx] 
004BA5F0 - D9 41 20  - fld dword ptr [ecx+20] 
004BA5F7 - D8 41 30  - fadd dword ptr [ecx+30] 
004BA5FE - D9 41 14  - fld dword ptr [ecx+14] 
004BA603 - D9 41 04  - fld dword ptr [ecx+04] 
004BA60A - D9 41 24  - fld dword ptr [ecx+24] 
004BA611 - D8 41 34  - fadd dword ptr [ecx+34] 
004BA61C - D9 41 18  - fld dword ptr [ecx+18] 
004BA621 - D9 41 08  - fld dword ptr [ecx+08] 
004BA628 - D9 41 28  - fld dword ptr [ecx+28] 
004BA62F - D8 41 38  - fadd dword ptr [ecx+38] 
00474310 - 0FBF 49 5C  - movsx ecx,word ptr [ecx+5C] 
0049D9B7 - 8A 50 50  - mov dl,[eax+50] 
0049D9FC - 39 98 4C030000  - cmp [eax+0000034C],ebx 
004B1D16 - 8A 45 51  - mov al,[ebp+51] 
004B1D22 - 8B 39  - mov edi,[ecx] 
0049626C - C7 85 08010000 00000000 - mov [ebp+00000108],00000000 
00496276 - C6 85 EF000000 00 - mov byte ptr [ebp+000000EF],00 
0049627D - 8A 85 22010000  - mov al,[ebp+00000122] 
00496285 - 88 85 22010000  - mov [ebp+00000122],al 
0049628B - 8A 45 51  - mov al,[ebp+51] 
004962B4 - 8A 5D 50  - mov bl,[ebp+50] 
005B3E97 - C1 E9 02 - shr ecx,02 
005B3E9A - F3 A5 - repe movsd  
00496343 - 8A 45 50  - mov al,[ebp+50] 
00496352 - D9 45 7C  - fld dword ptr [ebp+7C] 
00496359 - D9 45 78  - fld dword ptr [ebp+78] 
00496364 - D9 85 80000000  - fld dword ptr [ebp+00000080] 
00495BD0 - D9 41 78  - fld dword ptr [ecx+78] 
00495BD9 - D8 41 34  - fadd dword ptr [ecx+34] 
00495BDC - D9 59 34  - fstp dword ptr [ecx+34] 
00495BDF - D9 41 7C  - fld dword ptr [ecx+7C] 
00495BE8 - D8 41 38  - fadd dword ptr [ecx+38] 
00495BEB - D9 59 38  - fstp dword ptr [ecx+38] 
00495BEE - D9 81 80000000  - fld dword ptr [ecx+00000080] 
00495BFA - D8 41 3C  - fadd dword ptr [ecx+3C] 
00495BFD - D9 59 3C  - fstp dword ptr [ecx+3C] 
00497351 - D8 8B 84000000  - fmul dword ptr [ebx+00000084] 
00497361 - D8 8B 88000000  - fmul dword ptr [ebx+00000088] 
00497375 - D8 8B 8C000000  - fmul dword ptr [ebx+0000008C] 
004BA459 - D9 40 04  - fld dword ptr [eax+04] 
004BA465 - D9 40 08  - fld dword ptr [eax+08] 
004BA479 - D9 00  - fld dword ptr [eax] 
004973A2 - D9 43 04  - fld dword ptr [ebx+04] 
004973A9 - D9 5B 04  - fstp dword ptr [ebx+04] 
004973AC - D9 43 08  - fld dword ptr [ebx+08] 
004973B3 - D9 5B 08  - fstp dword ptr [ebx+08] 
004973B6 - D9 43 0C  - fld dword ptr [ebx+0C] 
004973BD - D9 5B 0C  - fstp dword ptr [ebx+0C] 
004973EA - D9 43 14  - fld dword ptr [ebx+14] 
004973F4 - D9 5B 14  - fstp dword ptr [ebx+14] 
004973F7 - D9 43 18  - fld dword ptr [ebx+18] 
004973FE - D9 5B 18  - fstp dword ptr [ebx+18] 
00497401 - D9 43 1C  - fld dword ptr [ebx+1C] 
00497408 - D9 5B 1C  - fstp dword ptr [ebx+1C] 
00497435 - D9 43 24  - fld dword ptr [ebx+24] 
0049743F - D9 5B 24  - fstp dword ptr [ebx+24] 
00497442 - D9 43 28  - fld dword ptr [ebx+28] 
00497449 - D9 5B 28  - fstp dword ptr [ebx+28] 
0049744C - D9 43 2C  - fld dword ptr [ebx+2C] 
00497453 - D9 5B 2C  - fstp dword ptr [ebx+2C] 
00496F13 - 8A 43 51  - mov al,[ebx+51] 
00496F19 - 88 43 51  - mov [ebx+51],al 
00496F3E - 8B AB E4000000  - mov ebp,[ebx+000000E4] 
0049B81D - 8A 83 22010000  - mov al,[ebx+00000122] 
0049B825 - 88 83 22010000  - mov [ebx+00000122],al 
0049BDF8 - 8A 43 51  - mov al,[ebx+51] 
0049BE78 - 8B 39  - mov edi,[ecx] 
004CBBFF - 8A 43 51  - mov al,[ebx+51] 
004CBC2E - 80 BB EF000000 00 - cmp byte ptr [ebx+000000EF],00 
004CBC3B - 8A 83 22010000  - mov al,[ebx+00000122] 
004CBC4C - 8A 43 51  - mov al,[ebx+51] 
004CBC59 - 8A 83 54010000  - mov al,[ebx+00000154] 
004CBC63 - 8A 83 54010000  - mov al,[ebx+00000154] 
004CBC6B - 88 83 54010000  - mov [ebx+00000154],al 
004CBC71 - 8A 83 54010000  - mov al,[ebx+00000154] 
004CBC7B - 88 83 54010000  - mov [ebx+00000154],al 
004CBC81 - 8A 43 51  - mov al,[ebx+51] 
004CBC88 - 88 43 51  - mov [ebx+51],al 
004CBC8B - D9 43 7C  - fld dword ptr [ebx+7C] 
004CBC92 - D9 43 78  - fld dword ptr [ebx+78] 
004CBCB1 - D8 83 50010000  - fadd dword ptr [ebx+00000150] 
004CBCB7 - D9 9B 50010000  - fstp dword ptr [ebx+00000150] 
004CBCBD - 8A 83 5A010000  - mov al,[ebx+0000015A] 
004CBCC7 - 88 83 5A010000  - mov [ebx+0000015A],al 
004CBDE1 - C6 83 4C010000 00 - mov byte ptr [ebx+0000014C],00 
004CBDE8 - C7 83 50010000 00000000 - mov [ebx+00000150],00000000 
004CBDF2 - 8A 83 5B010000  - mov al,[ebx+0000015B] 
004CBDFC - 88 83 5B010000  - mov [ebx+0000015B],al 
004CBE02 - 8A 83 5A010000  - mov al,[ebx+0000015A] 
004CBE10 - D9 43 38  - fld dword ptr [ebx+38] 
004CBE17 - D9 43 34  - fld dword ptr [ebx+34] 
004CBE1E - D9 43 3C  - fld dword ptr [ebx+3C] 
004CBE40 - 8A 83 54010000  - mov al,[ebx+00000154] 
004CBEF1 - D9 43 34  - fld dword ptr [ebx+34] 
004CBEF8 - D9 43 38  - fld dword ptr [ebx+38] 
004CBEFF - D9 43 3C  - fld dword ptr [ebx+3C] 
004CBF06 - D9 43 34  - fld dword ptr [ebx+34] 
004CBF10 - D9 43 38  - fld dword ptr [ebx+38] 
004CBF1A - D9 43 3C  - fld dword ptr [ebx+3C] 
004CBF2A - 8A 83 54010000  - mov al,[ebx+00000154] 
004CC337 - 8A 83 5A010000  - mov al,[ebx+0000015A] 
004CC341 - 88 83 5A010000  - mov [ebx+0000015A],al 
004CC34B - 0FBF 4B 5C  - movsx ecx,word ptr [ebx+5C] 
004B9E6F - D8 48 04  - fmul dword ptr [eax+04] 
004B9E74 - D8 08  - fmul dword ptr [eax] 
004B9E7B - D8 48 08  - fmul dword ptr [eax+08] 
004B9E86 - D8 48 04  - fmul dword ptr [eax+04] 
004B9E8C - D8 08  - fmul dword ptr [eax] 
004B9E93 - D8 48 08  - fmul dword ptr [eax+08] 
004B9E9F - D8 48 04  - fmul dword ptr [eax+04] 
004B9EA5 - D8 08  - fmul dword ptr [eax] 
004B9EAC - D8 48 08  - fmul dword ptr [eax+08] 
004B9EB8 - D8 48 14  - fmul dword ptr [eax+14] 
004B9EBD - D8 48 10  - fmul dword ptr [eax+10] 
004B9EC5 - D8 48 18  - fmul dword ptr [eax+18] 
004B9ED1 - D8 48 14  - fmul dword ptr [eax+14] 
004B9ED7 - D8 48 10  - fmul dword ptr [eax+10] 
004B9EDF - D8 48 18  - fmul dword ptr [eax+18] 
004B9EEB - D8 48 14  - fmul dword ptr [eax+14] 
004B9EF1 - D8 48 10  - fmul dword ptr [eax+10] 
004B9EF9 - D8 48 18  - fmul dword ptr [eax+18] 
004B9F05 - D8 48 24  - fmul dword ptr [eax+24] 
004B9F0A - D8 48 20  - fmul dword ptr [eax+20] 
004B9F12 - D8 48 28  - fmul dword ptr [eax+28] 
004B9F1E - D8 48 24  - fmul dword ptr [eax+24] 
004B9F24 - D8 48 20  - fmul dword ptr [eax+20] 
004B9F2C - D8 48 28  - fmul dword ptr [eax+28] 
004B9F38 - D8 48 24  - fmul dword ptr [eax+24] 
004B9F3E - D8 48 20  - fmul dword ptr [eax+20] 
004B9F46 - D8 48 28  - fmul dword ptr [eax+28] 
004B9F52 - D8 48 34  - fmul dword ptr [eax+34] 
004B9F57 - D8 48 30  - fmul dword ptr [eax+30] 
004B9F5F - D8 48 38  - fmul dword ptr [eax+38] 
004B9F6E - D8 48 34  - fmul dword ptr [eax+34] 
004B9F74 - D8 48 30  - fmul dword ptr [eax+30] 
004B9F7C - D8 48 38  - fmul dword ptr [eax+38] 
004B9F8B - D8 48 34  - fmul dword ptr [eax+34] 
004B9F91 - D8 48 30  - fmul dword ptr [eax+30] 
004B9F99 - D8 48 38  - fmul dword ptr [eax+38] 
004B9D3D - D9 41 3C  - fld dword ptr [ecx+3C] 
004B9D43 - D9 01  - fld dword ptr [ecx] 
004B9D47 - D9 41 10  - fld dword ptr [ecx+10] 
004B9D4D - D9 41 20  - fld dword ptr [ecx+20] 
004B9D53 - D9 41 30  - fld dword ptr [ecx+30] 
004B9D59 - D9 41 04  - fld dword ptr [ecx+04] 
004B9D5F - D9 41 14  - fld dword ptr [ecx+14] 
004B9D65 - D9 41 24  - fld dword ptr [ecx+24] 
004B9D6B - D9 41 34  - fld dword ptr [ecx+34] 
004B9D71 - D9 41 08  - fld dword ptr [ecx+08] 
004B9D77 - D9 41 18  - fld dword ptr [ecx+18] 
004B9D7D - D9 41 28  - fld dword ptr [ecx+28] 
004B9D83 - D9 41 38  - fld dword ptr [ecx+38] 
004B9D8B - D8 49 30  - fmul dword ptr [ecx+30] 
004B9D97 - D8 49 30  - fmul dword ptr [ecx+30] 
004B9DA3 - D8 49 30  - fmul dword ptr [ecx+30] 
004B9DAF - D8 49 30  - fmul dword ptr [ecx+30] 
004B9DBB - D8 49 34  - fmul dword ptr [ecx+34] 
004B9DC7 - D8 49 34  - fmul dword ptr [ecx+34] 
004B9DD3 - D8 49 34  - fmul dword ptr [ecx+34] 
004B9DDF - D8 49 34  - fmul dword ptr [ecx+34] 
004B9DEB - D8 49 38  - fmul dword ptr [ecx+38] 
004B9DF7 - D8 49 38  - fmul dword ptr [ecx+38] 
004B9E03 - D8 49 38  - fmul dword ptr [ecx+38] 
004B9E0F - D8 49 38  - fmul dword ptr [ecx+38] 
004B9E3C - D9 41 3C  - fld dword ptr [ecx+3C] 
004CC3E3 - 8A 83 54010000  - mov al,[ebx+00000154] 
00410422 - D9 18  - fstp dword ptr [eax] 
00410431 - D9 58 04  - fstp dword ptr [eax+04] 
00410441 - D9 58 08  - fstp dword ptr [eax+08] 
00410451 - D9 58 0C  - fstp dword ptr [eax+0C] 
00410461 - D9 58 10  - fstp dword ptr [eax+10] 
00410471 - D9 58 14  - fstp dword ptr [eax+14] 
00410481 - D9 58 18  - fstp dword ptr [eax+18] 
00410491 - D9 58 1C  - fstp dword ptr [eax+1C] 
004104A1 - D9 58 20  - fstp dword ptr [eax+20] 
004104B2 - 88 48 24  - mov [eax+24],cl 
004BA5CF - D9 40 04  - fld dword ptr [eax+04] 
004BA5E1 - D9 00  - fld dword ptr [eax] 
004BA5EB - D9 40 08  - fld dword ptr [eax+08] 
004104CE - D9 18  - fstp dword ptr [eax] 
004104DB - D9 58 04  - fstp dword ptr [eax+04] 
004104E9 - D9 58 08  - fstp dword ptr [eax+08] 
00410510 - D9 58 0C  - fstp dword ptr [eax+0C] 
0041051E - D9 58 10  - fstp dword ptr [eax+10] 
0041052C - D9 58 14  - fstp dword ptr [eax+14] 
00410553 - D9 58 18  - fstp dword ptr [eax+18] 
00410561 - D9 58 1C  - fstp dword ptr [eax+1C] 
0041056F - D9 58 20  - fstp dword ptr [eax+20] 
004CC032 - 8A 83 54010000  - mov al,[ebx+00000154] 
004CC122 - 89 B3 FC020000  - mov [ebx+000002FC],esi 
004CC136 - 8A 83 5B010000  - mov al,[ebx+0000015B] 
004CC13E - 88 83 5B010000  - mov [ebx+0000015B],al 
004CC144 - 8A 83 5A010000  - mov al,[ebx+0000015A] 
004CC14C - 88 83 5A010000  - mov [ebx+0000015A],al 
004CC15C - D9 5B 3C  - fstp dword ptr [ebx+3C] 
004CC163 - 88 83 23010000  - mov [ebx+00000123],al 
004CC169 - 80 BB 23010000 1A - cmp byte ptr [ebx+00000123],1A 
004CC1AA - 8B 43 4C  - mov eax,[ebx+4C] 
004CC1B8 - 8A 93 54010000  - mov dl,[ebx+00000154] 
004CC31B - C7 83 80000000 00000000 - mov [ebx+00000080],00000000 
004CC325 - 8A 83 54010000  - mov al,[ebx+00000154] 
004CC32F - 88 83 54010000  - mov [ebx+00000154],al 
004971E4 - 89 56 70  - mov [esi+70],edx 
0049721F - 89 56 6C  - mov [esi+6C],edx 
0049724E - 8A 45 52  - mov al,[ebp+52] 
00497255 - 88 45 52  - mov [ebp+52],al 
00497262 - 8A 4D 50  - mov cl,[ebp+50] 
004972A4 - 8A 45 51  - mov al,[ebp+51] 
004972B3 - 8A 95 EE000000  - mov dl,[ebp+000000EE] 
004972DD - 89 9C 85 F0000000  - mov [ebp+eax*4+000000F0],ebx 
004972E4 - FE 85 EE000000  - inc byte ptr [ebp+000000EE] 
004972EF - 89 45 74  - mov [ebp+74],eax 
0049D990 - 8A 4B 50  - mov cl,[ebx+50] 
0049D9DF - 39 83 4C030000  - cmp [ebx+0000034C],eax 
00496C30 - 8A 45 50  - mov al,[ebp+50] 
00496C3F - D8 9D 80000000  - fcomp dword ptr [ebp+00000080] 
00496C4F - 8A 07  - mov al,[edi] 
004B9043 - 83 7B 40 00 - cmp dword ptr [ebx+40],00 
004B8FB0 - 8B 41 40  - mov eax,[ecx+40] 
004B8FB8 - D9 01  - fld dword ptr [ecx] 
004B8FBC - D9 41 04  - fld dword ptr [ecx+04] 
004B8FBF - 8B 41 40  - mov eax,[ecx+40] 
004B8FC5 - D9 41 08  - fld dword ptr [ecx+08] 
004B8FC8 - 8B 41 40  - mov eax,[ecx+40] 
004B8FCE - D9 41 10  - fld dword ptr [ecx+10] 
004B8FD1 - 8B 41 40  - mov eax,[ecx+40] 
004B8FD7 - D9 41 14  - fld dword ptr [ecx+14] 
004B8FDA - 8B 41 40  - mov eax,[ecx+40] 
004B8FE0 - D9 41 18  - fld dword ptr [ecx+18] 
004B8FE3 - 8B 41 40  - mov eax,[ecx+40] 
004B8FE9 - D9 41 20  - fld dword ptr [ecx+20] 
004B8FEC - 8B 41 40  - mov eax,[ecx+40] 
004B8FF2 - D9 41 24  - fld dword ptr [ecx+24] 
004B8FF5 - 8B 41 40  - mov eax,[ecx+40] 
004B8FFB - D9 41 28  - fld dword ptr [ecx+28] 
004B8FFE - 8B 41 40  - mov eax,[ecx+40] 
004B9004 - D9 41 30  - fld dword ptr [ecx+30] 
004B9007 - 8B 41 40  - mov eax,[ecx+40] 
004B900D - D9 41 34  - fld dword ptr [ecx+34] 
004B9010 - 8B 41 40  - mov eax,[ecx+40] 
004B9016 - D9 41 38  - fld dword ptr [ecx+38] 
004B9019 - 8B 41 40  - mov eax,[ecx+40] 
004B901F - 8B 41 40  - mov eax,[ecx+40] 
00496C7E - 8A 45 50  - mov al,[ebp+50] 
004B9B7D - D9 41 14  - fld dword ptr [ecx+14] 
004B9B82 - D9 41 08  - fld dword ptr [ecx+08] 
004B9B8B - D9 41 18  - fld dword ptr [ecx+18] 
004B9B90 - D9 41 04  - fld dword ptr [ecx+04] 
004B9B9F - D9 41 10  - fld dword ptr [ecx+10] 
004B9BA8 - D9 01  - fld dword ptr [ecx] 
004B9BFA - D9 41 14  - fld dword ptr [ecx+14] 
004B9C07 - D9 41 18  - fld dword ptr [ecx+18] 
004B9C16 - D9 41 10  - fld dword ptr [ecx+10] 
004B9C83 - D9 19  - fstp dword ptr [ecx] 
004B9C87 - D9 59 04  - fstp dword ptr [ecx+04] 
004B9C8C - D9 59 08  - fstp dword ptr [ecx+08] 
004B9C99 - D9 59 10  - fstp dword ptr [ecx+10] 
004B9CA8 - D9 59 14  - fstp dword ptr [ecx+14] 
004B9CB7 - D9 59 18  - fstp dword ptr [ecx+18] 
004B9CBE - D9 59 20  - fstp dword ptr [ecx+20] 
004B9CC1 - D9 51 24  - fst dword ptr [ecx+24] 
004B9CC6 - D9 59 28  - fstp dword ptr [ecx+28] 
00496D0F - C6 85 EF000000 00 - mov byte ptr [ebp+000000EF],00 
00496D16 - 8A 85 22010000  - mov al,[ebp+00000122] 
00496D1E - 88 85 22010000  - mov [ebp+00000122],al 
00496D2A - D8 5D 78  - fcomp dword ptr [ebp+78] 
00496D41 - D8 5D 7C  - fcomp dword ptr [ebp+7C] 
00496D58 - D8 9D 80000000  - fcomp dword ptr [ebp+00000080] 
00496D6E - D8 9D 84000000  - fcomp dword ptr [ebp+00000084] 
00496D84 - D8 9D 88000000  - fcomp dword ptr [ebp+00000088] 
00496D9A - D8 9D 8C000000  - fcomp dword ptr [ebp+0000008C] 
00496DAA - 8A 85 22010000  - mov al,[ebp+00000122] 
00496DB7 - 8A 4D 50  - mov cl,[ebp+50] 
00496DC4 - 8A 45 50  - mov al,[ebp+50] 
00496DD8 - 8A 45 50  - mov al,[ebp+50] 
004972C0 - 39 9C 8D F0000000  - cmp [ebp+ecx*4+000000F0],ebx 
00496E20 - 8A 45 51  - mov al,[ebp+51] 
00496E25 - 88 45 51  - mov [ebp+51],al 
00496E28 - 8A 45 51  - mov al,[ebp+51] 
00496E2F - 88 45 51  - mov [ebp+51],al 
00496E32 - 8A 85 22010000  - mov al,[ebp+00000122] 
00496E3A - 88 85 22010000  - mov [ebp+00000122],al 
00496E50 - D9 40 08  - fld dword ptr [eax+08] 
00496E58 - D9 40 04  - fld dword ptr [eax+04] 
00496E60 - D9 00  - fld dword ptr [eax] 
00496E92 - D9 9D 08010000  - fstp dword ptr [ebp+00000108] 
00496E9A - 8A 85 22010000  - mov al,[ebp+00000122] 
00496EA4 - 88 85 22010000  - mov [ebp+00000122],al 
0049560B - 8B 29  - mov ebp,[ecx] 
00495610 - 8B B3 E4000000  - mov esi,[ebx+000000E4] 
00474290 - 0FBF 41 5C  - movsx eax,word ptr [ecx+5C] 
004957DB - 8A 4B 50  - mov cl,[ebx+50] 
00474330 - 8B 51 4C  - mov edx,[ecx+4C] 
004B1D55 - 8A 45 51  - mov al,[ebp+51] 
004B1D95 - 8A 46 51  - mov al,[esi+51] 
004B1DED - 8A 46 51  - mov al,[esi+51] 
004B1E45 - 8A 46 51  - mov al,[esi+51] 
004B1F35 - 8A 4E 50  - mov cl,[esi+50] 
004B1F49 - 80 B9 14030000 00 - cmp byte ptr [ecx+00000314],00 
004B1F5B - 8B 81 24020000  - mov eax,[ecx+00000224] 
0049FFBB - 8A 81 5C010000  - mov al,[ecx+0000015C] 
004A09BC - D8 80 08010000  - fadd dword ptr [eax+00000108] 
00430D89 - D9 42 08  - fld dword ptr [edx+08] 
00430DD2 - D9 42 04  - fld dword ptr [edx+04] 
00430DE5 - D9 02  - fld dword ptr [edx] 
00430CAC - D9 41 08  - fld dword ptr [ecx+08] 
00430CF3 - D9 41 04  - fld dword ptr [ecx+04] 
00430D06 - D9 01  - fld dword ptr [ecx] 
00425500 - D9 02  - fld dword ptr [edx] 
00518F89 - 0FBE 98 98040000  - movsx ebx,byte ptr [eax+00000498] 
00518FA7 - 8B 03  - mov eax,[ebx] 
00471316 - 8B 88 24020000  - mov ecx,[eax+00000224] 
00471382 - 8B 8A 10030000  - mov ecx,[edx+00000310] 
004713A9 - 83 B9 24020000 34 - cmp dword ptr [ecx+00000224],34 
00471402 - 8B 91 24020000  - mov edx,[ecx+00000224] 
00471462 - 83 B8 24020000 36 - cmp dword ptr [eax+00000224],36 
00471486 - 83 B8 24020000 33 - cmp dword ptr [eax+00000224],33 
0047149F - 8A 42 50  - mov al,[edx+50] 
0046835E - 8A 58 52  - mov bl,[eax+52] 
00468367 - 88 58 52  - mov [eax+52],bl 
004683E1 - 8A 47 50  - mov al,[edi+50] 
00468E38 - 8A 46 50  - mov al,[esi+50] 
00468F5D - D9 80 44050000  - fld dword ptr [eax+00000544] 
00469224 - 83 B8 24020000 11 - cmp dword ptr [eax+00000224],11 
00469245 - 0FBE 82 98040000  - movsx eax,byte ptr [edx+00000498] 
0046924F - 83 BC C2 5C030000 01 - cmp dword ptr [edx+eax*8+0000035C],01 
0046931D - FF 70 08  - push [eax+08] 
00469320 - FF 70 04  - push [eax+04] 
00469323 - FF 30  - push [eax] 
0045858B - 8A 43 50  - mov al,[ebx+50] 
00458594 - 8A 83 22010000  - mov al,[ebx+00000122] 
00469F1E - 83 BE 24020000 38 - cmp dword ptr [esi+00000224],38 
00469F55 - 8B 86 24020000  - mov eax,[esi+00000224] 
0046A041 - 83 BE 24020000 38 - cmp dword ptr [esi+00000224],38 
0046A067 - 83 B8 24020000 31 - cmp dword ptr [eax+00000224],31 
0046A286 - 8A 47 50  - mov al,[edi+50] 
0046AE85 - 8A 48 52  - mov cl,[eax+52] 
0046AE8E - 88 48 52  - mov [eax+52],cl 
00459708 - 8A 42 50  - mov al,[edx+50] 
00459916 - D9 00  - fld dword ptr [eax] 
0045991C - D9 40 04  - fld dword ptr [eax+04] 
00459923 - D9 40 08  - fld dword ptr [eax+08] 
0045993B - D8 58 10  - fcomp dword ptr [eax+10] 
00459963 - FF 76 14  - push [esi+14] 
00459966 - FF 76 10  - push [esi+10] 
0045FF98 - 8A 45 50  - mov al,[ebp+50] 
004B0DB8 - 66 8B 4D 58  - mov cx,[ebp+58] 
00460BA6 - 8B 45 4C  - mov eax,[ebp+4C] 
00460BBF - 8B 45 4C  - mov eax,[ebp+4C] 
00460BD0 - 8B 45 4C  - mov eax,[ebp+4C] 
00460BE1 - 8B 45 4C  - mov eax,[ebp+4C] 
00460D3C - D9 90 DC020000  - fst dword ptr [eax+000002DC] 
00460D48 - D9 90 E0020000  - fst dword ptr [eax+000002E0] 
0049FB01 - A5 - movsd  
0049FB02 - A5 - movsd  
0049FB03 - A5 - movsd  
0049FB10 - D9 45 34  - fld dword ptr [ebp+34] 
0049FB17 - D9 5D 34  - fstp dword ptr [ebp+34] 
0049FB1A - D9 45 38  - fld dword ptr [ebp+38] 
0049FB21 - D9 5D 38  - fstp dword ptr [ebp+38] 
0049FB24 - D9 45 3C  - fld dword ptr [ebp+3C] 
0049FB2B - D9 5D 3C  - fstp dword ptr [ebp+3C] 
00459F18 - 8A 42 50  - mov al,[edx+50] 
0046745B - D9 07  - fld dword ptr [edi] 
00467466 - D9 47 04  - fld dword ptr [edi+04] 
0046747A - D9 47 08  - fld dword ptr [edi+08] 
0046753C - 8A 47 50  - mov al,[edi+50] 
0046754E - 83 B8 FC020000 00 - cmp dword ptr [eax+000002FC],00 
0046755C - 8B B0 FC020000  - mov esi,[eax+000002FC] 
004676D1 - 0FB7 83 1C050000  - movzx eax,word ptr [ebx+0000051C] 
004675A6 - 8B 84 AB F4040000  - mov eax,[ebx+ebp*4+000004F4] 
004675CC - 8B BC AB F4040000  - mov edi,[ebx+ebp*4+000004F4] 
00467700 - 8B 94 8B F4040000  - mov edx,[ebx+ecx*4+000004F4] 
00467E0D - 0FB6 87 23010000  - movzx eax,byte ptr [edi+00000123] 
00421442 - 83 B9 24020000 31 - cmp dword ptr [ecx+00000224],31 
00421459 - 83 B9 24020000 38 - cmp dword ptr [ecx+00000224],38 
0042F8B8 - D9 00  - fld dword ptr [eax] 
0042F8BE - D9 40 04  - fld dword ptr [eax+04] 
00416634 - D9 00  - fld dword ptr [eax] 
0041663D - D9 40 04  - fld dword ptr [eax+04] 
00416647 - D9 40 08  - fld dword ptr [eax+08] 
004A1191 - 80 B9 14030000 00 - cmp byte ptr [ecx+00000314],00 
00416657 - D9 00  - fld dword ptr [eax] 
00416664 - D9 40 04  - fld dword ptr [eax+04] 
004184C1 - D9 00  - fld dword ptr [eax] 
004184C7 - D9 40 04  - fld dword ptr [eax+04] 
004184CE - D9 40 08  - fld dword ptr [eax+08] 
00569B88 - 8B 90 24020000  - mov edx,[eax+00000224] 
00569B98 - 80 B8 14030000 00 - cmp byte ptr [eax+00000314],00 
00569D23 - 8A 53 50  - mov dl,[ebx+50] 
0056F7C1 - D9 00  - fld dword ptr [eax] 
0056F7C8 - D9 40 04  - fld dword ptr [eax+04] 
0056F7CE - D9 40 08  - fld dword ptr [eax+08] 
0056F7EE - 0FBF 42 5C  - movsx eax,word ptr [edx+5C] 
0057F4A5 - 8B 80 3C050000  - mov eax,[eax+0000053C] 
004A9F58 - 66 8B 7D 58  - mov di,[ebp+58] 
004A9F6F - 66 89 45 58  - mov [ebp+58],ax 
004AAAF4 - 8A 42 53  - mov al,[edx+53] 
004AAB01 - 8A 4A 50  - mov cl,[edx+50] 
004AAB21 - 80 B8 14030000 00 - cmp byte ptr [eax+00000314],00 
004AAB43 - 8B 90 FC020000  - mov edx,[eax+000002FC] 
004A944B - 0FBF 45 5C  - movsx eax,word ptr [ebp+5C] 
004A9541 - 83 7D 4C 00 - cmp dword ptr [ebp+4C],00 
004A9547 - 8A 45 52  - mov al,[ebp+52] 
004A9575 - 8A 45 54  - mov al,[ebp+54] 
004A9CD8 - 66 8B 7D 58  - mov di,[ebp+58] 
004A7947 - 8B 19  - mov ebx,[ecx] 
00513E64 - 8A 41 52  - mov al,[ecx+52] 
00513E6E - 80 B9 14030000 00 - cmp byte ptr [ecx+00000314],00 
00513EDB - A5 - movsd  
00513EDE - A5 - movsd  
00513EDF - A5 - movsd  
004CFEBE - 8A 80 56010000  - mov al,[eax+00000156] 
004A79CA - 8A 45 50  - mov al,[ebp+50] 
004A7A47 - 8A 46 50  - mov al,[esi+50] 
004A7A5F - 8A 46 50  - mov al,[esi+50] 
004A7A70 - 8B 46 4C  - mov eax,[esi+4C] 
004A7C9B - 8A 43 50  - mov al,[ebx+50] 
004A7CA4 - 83 BB 24020000 2C - cmp dword ptr [ebx+00000224],2C 
004A7CB7 - 8B 31  - mov esi,[ecx] 
004A7E36 - 8A 03  - mov al,[ebx] 
004A7E5E - A5 - movsd  
004A7E5F - A5 - movsd  
004A7E60 - A5 - movsd  
004A7E6F - 8A 03  - mov al,[ebx] 
004A7CC0 - 8A 43 50  - mov al,[ebx+50] 
004A7CCE - 8A 43 50  - mov al,[ebx+50] 
004A7D14 - 8B 29  - mov ebp,[ecx] 
004D0490 - 80 B9 14030000 00 - cmp byte ptr [ecx+00000314],00 
00474BD3 - 83 7B 4C 00 - cmp dword ptr [ebx+4C],00 
00474BE0 - 8A 43 54  - mov al,[ebx+54] 
00474BE7 - 88 43 54  - mov [ebx+54],al 
00474BEA - 8B 73 4C  - mov esi,[ebx+4C] 
00474BFF - 8A 43 54  - mov al,[ebx+54] 
00474C04 - 88 43 54  - mov [ebx+54],al 
004A7D19 - 8A 43 50  - mov al,[ebx+50] 
004A7D3B - 8B 29  - mov ebp,[ecx] 
004A7DE4 - 8A 41 52  - mov al,[ecx+52] 
0048E20C - 0FBE 90 98040000  - movsx edx,byte ptr [eax+00000498] 
0048E216 - 8B 9C D0 5C030000  - mov ebx,[eax+edx*8+0000035C] 
005054CF - 8B 86 24020000  - mov eax,[esi+00000224] 
005054DF - 0FBE 86 98040000  - movsx eax,byte ptr [esi+00000498] 
005054E9 - 8B AC C6 5C030000  - mov ebp,[esi+eax*8+0000035C] 
00506111 - 0FBE 8E 98040000  - movsx ecx,byte ptr [esi+00000498] 
00506118 - 8B 82 3C050000  - mov eax,[edx+0000053C] 
0050612B - 8B 84 0E 5C030000  - mov eax,[esi+ecx+0000035C] 
00506132 - 8B 9C 0E 68030000  - mov ebx,[esi+ecx+00000368] 
00506228 - 0FBE 86 98040000  - movsx eax,byte ptr [esi+00000498] 
00506241 - 8B 9C C6 5C030000  - mov ebx,[esi+eax*8+0000035C] 
005063BB - 0FBE 86 98040000  - movsx eax,byte ptr [esi+00000498] 
005063C5 - 8B 8C C6 5C030000  - mov ecx,[esi+eax*8+0000035C] 
00506551 - D9 80 C0020000  - fld dword ptr [eax+000002C0] 
005065F5 - D9 80 C0020000  - fld dword ptr [eax+000002C0] 
00506917 - D9 80 C4020000  - fld dword ptr [eax+000002C4] 
004A43B3 - D9 40 04  - fld dword ptr [eax+04] 
004A43B6 - D9 00  - fld dword ptr [eax] 
004A1373 - D9 41 14  - fld dword ptr [ecx+14] 
004A1378 - D9 41 18  - fld dword ptr [ecx+18] 
0051B6C7 - D8 60 04  - fsub dword ptr [eax+04] 
0051B6D9 - D8 60 04  - fsub dword ptr [eax+04] 
0051B6EE - D8 20  - fsub dword ptr [eax] 
0051B704 - D8 20  - fsub dword ptr [eax] 
004C8E4D - 8B 83 30020000  - mov eax,[ebx+00000230] 
004C76CE - D9 83 D4020000  - fld dword ptr [ebx+000002D4] 
004C76D6 - D9 9B D4020000  - fstp dword ptr [ebx+000002D4] 
004C76DC - D9 83 D8020000  - fld dword ptr [ebx+000002D8] 
0043AA71 - 80 B9 14030000 00 - cmp byte ptr [ecx+00000314],00 
0049FB80 - D9 41 34  - fld dword ptr [ecx+34] 
004F5F42 - 80 BB 24010000 00 - cmp byte ptr [ebx+00000124],00 
004F5F4F - 80 BB 14030000 00 - cmp byte ptr [ebx+00000314],00 
004F5F67 - A5 - movsd  
004F5F68 - A5 - movsd  
004F5F69 - A5 - movsd  
004C7A64 - D9 9B E8050000  - fstp dword ptr [ebx+000005E8] 
004F1AA5 - D9 9D E0020000  - fstp dword ptr [ebp+000002E0] 
004F1AC0 - D8 A5 44050000  - fsub dword ptr [ebp+00000544] 
004F1AD1 - D9 85 44050000  - fld dword ptr [ebp+00000544] 
004F1ADB - D9 9D 44050000  - fstp dword ptr [ebp+00000544] 
004F0D97 - 8B 45 4C  - mov eax,[ebp+4C] 
004F0D9A - 8B 8D D4010000  - mov ecx,[ebp+000001D4] 
004F0DFA - 8B 45 4C  - mov eax,[ebp+4C] 
004F0E17 - 8B 45 4C  - mov eax,[ebp+4C] 
004F0E46 - C7 85 2C020000 02000000 - mov [ebp+0000022C],00000002 
004F0E95 - 8B 45 4C  - mov eax,[ebp+4C] 
004F0E98 - 8B 95 D4010000  - mov edx,[ebp+000001D4] 
004F0EB9 - 8B 45 4C  - mov eax,[ebp+4C] 
004F0EBC - 8B B5 D4010000  - mov esi,[ebp+000001D4] 
004F0F0F - 83 BD 2C020000 04 - cmp dword ptr [ebp+0000022C],04 
004C78B3 - D8 A3 DC020000  - fsub dword ptr [ebx+000002DC] 
004C7937 - 8B 83 C0010000  - mov eax,[ebx+000001C0] 
004EDEC2 - 8B 03  - mov eax,[ebx] 
004EDEC4 - D9 80 DC020000  - fld dword ptr [eax+000002DC] 
004EDEE6 - 8B 03  - mov eax,[ebx] 
004EDEEF - D9 80 DC020000  - fld dword ptr [eax+000002DC] 
004EDF1C - 8B 03  - mov eax,[ebx] 
004EDF1E - D9 80 DC020000  - fld dword ptr [eax+000002DC] 
004EDF40 - 8B 03  - mov eax,[ebx] 
004EDF49 - D9 80 DC020000  - fld dword ptr [eax+000002DC] 
004EDF76 - 8B 03  - mov eax,[ebx] 
004EDF78 - D9 80 DC020000  - fld dword ptr [eax+000002DC] 
004EDF9A - 8B 03  - mov eax,[ebx] 
004EDFA3 - D9 80 DC020000  - fld dword ptr [eax+000002DC] 
004C794C - 8B 83 C4010000  - mov eax,[ebx+000001C4] 
004F0A05 - 8B 45 4C  - mov eax,[ebp+4C] 
004F0A1C - 8B 45 4C  - mov eax,[ebp+4C] 
0049FF33 - 80 BA 14030000 00 - cmp byte ptr [edx+00000314],00 
0049FF55 - FF 70 04  - push [eax+04] 
0049FF58 - FF 32  - push [edx] 
004B41A2 - D9 47 08  - fld dword ptr [edi+08] 
004679C8 - D9 00  - fld dword ptr [eax] 
004679CE - D9 40 04  - fld dword ptr [eax+04] 
004679D5 - D9 40 08  - fld dword ptr [eax+08] 
004AFAAA - D9 00  - fld dword ptr [eax] 
004AFAEC - D9 40 04  - fld dword ptr [eax+04] 
0040B325 - D9 03  - fld dword ptr [ebx] 
0040B32F - D9 43 04  - fld dword ptr [ebx+04] 
0040B335 - D9 43 08  - fld dword ptr [ebx+08] 
00467F07 - D8 2B  - fsubr dword ptr [ebx] 
00467F1A - D8 6B 04  - fsubr dword ptr [ebx+04] 
00467F3B - D8 6B 08  - fsubr dword ptr [ebx+08] 
004C5A14 - D8 20  - fsub dword ptr [eax] 
004C5A1D - D8 60 04  - fsub dword ptr [eax+04] 
004C5A2B - D8 60 08  - fsub dword ptr [eax+08] 
004F1116 - 83 BD 2C020000 04 - cmp dword ptr [ebp+0000022C],04 
004F1190 - D9 85 44050000  - fld dword ptr [ebp+00000544] 
004F11F1 - D9 85 44050000  - fld dword ptr [ebp+00000544] 
004F1200 - C7 85 2C020000 03000000 - mov [ebp+0000022C],00000003 
004CC899 - 8B 43 64  - mov eax,[ebx+64] 
004CC8C9 - 8B 83 C8010000  - mov eax,[ebx+000001C8] 
004CC8FE - A5 - movsd  
004CC903 - A5 - movsd  
004CC904 - A5 - movsd  
004CC90E - A5 - movsd  
004CC90F - A5 - movsd  
004CC910 - A5 - movsd  
004CC95D - 8A 83 58010000  - mov al,[ebx+00000158] 
004CC678 - 0FB6 82 23010000  - movzx eax,byte ptr [edx+00000123] 
004ADE4D - 0FBF 6B 5C  - movsx ebp,word ptr [ebx+5C] 
004F0141 - 0FBE 98 98040000  - movsx ebx,byte ptr [eax+00000498] 
004F015F - 83 BE 24020000 0C - cmp dword ptr [esi+00000224],0C 
004F0166 - 8B 03  - mov eax,[ebx] 
004F20F7 - 83 BB 2C020000 04 - cmp dword ptr [ebx+0000022C],04 
004F2104 - 8A 83 98040000  - mov al,[ebx+00000498] 
004F210A - 38 83 54050000  - cmp [ebx+00000554],al 
004F2116 - 8B 93 9C040000  - mov edx,[ebx+0000049C] 
004F2143 - D9 83 44050000  - fld dword ptr [ebx+00000544] 
004E62F6 - 8B 45 4C  - mov eax,[ebp+4C] 
004E6317 - 8B 95 D4040000  - mov edx,[ebp+000004D4] 
004E6330 - 83 BD 38020000 0B - cmp dword ptr [ebp+00000238],0B 
004E6343 - 8B 45 4C  - mov eax,[ebp+4C] 
004E6370 - 8B 45 4C  - mov eax,[ebp+4C] 
004E63C8 - 0FBE 8D 98040000  - movsx ecx,byte ptr [ebp+00000498] 
004E63D2 - 8B 84 CD 5C030000  - mov eax,[ebp+ecx*8+0000035C] 
004E6422 - 0FBE 85 98040000  - movsx eax,byte ptr [ebp+00000498] 
004E642C - 8B 8C C5 5C030000  - mov ecx,[ebp+eax*8+0000035C] 
004E6484 - 83 BD 24020000 10 - cmp dword ptr [ebp+00000224],10 
004E648D - C7 85 24020000 10000000 - mov [ebp+00000224],00000010 
004E6497 - 8A 85 54010000  - mov al,[ebp+00000154] 
004E649F - 88 85 54010000  - mov [ebp+00000154],al 
004E64AF - 8B 45 4C  - mov eax,[ebp+4C] 
0056FAFF - 8A 83 55010000  - mov al,[ebx+00000155] 
0056FB4F - 0FB6 81 23010000  - movzx eax,byte ptr [ecx+00000123] 
0056FC92 - 8B 81 2C020000  - mov eax,[ecx+0000022C] 
0056FC98 - 8B 91 2C020000  - mov edx,[ecx+0000022C] 
004CB19F - 8B 43 4C  - mov eax,[ebx+4C] 
004E6C59 - 0FBE 93 98040000  - movsx edx,byte ptr [ebx+00000498] 
004E6C63 - 8B 84 D3 5C030000  - mov eax,[ebx+edx*8+0000035C] 
004E6C77 - 8B 43 4C  - mov eax,[ebx+4C] 
004E6C91 - 8A 83 54010000  - mov al,[ebx+00000154] 
004E6D0A - 8A 83 58010000  - mov al,[ebx+00000158] 
004E6D52 - 8B 83 D8040000  - mov eax,[ebx+000004D8] 
004E6E08 - 83 A3 14020000 FB - and dword ptr [ebx+00000214],-05 
004E7100 - 0FBE 83 98040000  - movsx eax,byte ptr [ebx+00000498] 
004E710A - 8B 8C C3 5C030000  - mov ecx,[ebx+eax*8+0000035C] 
004E7459 - 8A 83 54010000  - mov al,[ebx+00000154] 
004E746F - 88 83 54010000  - mov [ebx+00000154],al 

 

 

Причем последовательность инструкций идет в порядке вызова, но RIP всегда уникальный (RIP не дублируются). Здесь RIP, т.к. CE 64 разрядный

Если последовательность к данным структуры примерно сохраняется, то можно обратить внимание на обращение к адресам в структуре рядом со здоровьем по смещению 2с0: до обращения к адресу здоровья, во время и после. Я выделил их стрелками. Эти смещения могут быть связаны со здоровьем

image.png

 

Интересные моменты могут быть с так называемыми switch-case операциями. Можно пытаться их подменить

image.png

  • Понравилось 1

0 Комментариев


Рекомендуемые комментарии

Комментариев нет

Пожалуйста, войдите, чтобы комментировать

Вы сможете оставить комментарий после входа в



Войти
×
×
  • Создать...

Важная информация

Находясь на нашем сайте, Вы автоматически соглашаетесь соблюдать наши Условия использования.