Heh, all the references to this function are still expressed in db opcode form, because IDA couldn't process the self-modifying code in bfnt_entry_pat(). That's almost practical in our case!
nmlgc