Function at 0x406c22
Capabilities:
Contain obfuscated stackstrings
Get number of processors

Disassembly:
add esp, 4
jmp 0x406860
sub ebx, 0x16108
pop ebx
push ecx
jmp 0x40686d
and ecx, 0x8bed
pop ecx
cmp dword [ebp - 0x150c], 0
jne 0x40688c
mov dword [ebp - 0x2a8], 0
jmp 0x406b33
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push ecx
push esi
add esp, 4
xor ecx, 0x2fad
and ecx, 0x985
and ecx, 0x9f29
xor ecx, 0x6a71
pop ecx
push eax
sub eax, 0x293
and eax, 0x327e
sub eax, 0x13090
pop eax
cmp dword [ebp - 0xc4c], 0
jne 0x4068e8
mov dword [ebp - 0x2a8], 0
jmp 0x406b33
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push esi
xor esi, 0x1095a
and esi, 0xae53
pop esi
push ecx
add ecx, 0x3ba1
sub ecx, 0x8069
pop ecx
push eax
push edi
add esp, 4
call 0x406922
add byte [ecx + 0x48], al
aas
inc ebx
dec eax
dec edx
cmp eax, dword [ebx - 0x72a7fb3c]
xchg ebp, eax
fsubr st(1)
invalid
push edx
and edx, 0x11117
call 0x406b49
add byte [ebx], bh
inc edx
dec ebx
dec edi
aaa
inc edi
inc edx
inc ebp
inc edi
add esp, 4
call 0x406b59
add byte [eax + 0x43], al
cmp byte [edx], dh
push eax
dec ebp
inc edi
add esp, 4
pop edx
push ebx
and ebx, 0x17392
pop ebx
cmp dword [ebp - 0x2a8], 0
jne 0x40746a
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push edi
xor edi, 0x12b2f
pop edi
push edx
call 0x406c22
add byte [edx], bh
xor esi, dword [edx]
inc edi
dec esi
dec esi
cmp byte [edi - 0x7d], cl
les eax, [edx + ebx*2]
push ebx
push edx
add esp, 4
jmp 0x406c30
or ebx, 0xef2f
sub ebx, 0x180b
pop ebx
mov byte [ebp - 0x830], 0x4c
mov byte [ebp - 0x82f], 0x6f
mov byte [ebp - 0x82e], 0x61
mov byte [ebp - 0x82d], 0x64
mov byte [ebp - 0x82c], 0x4c
mov byte [ebp - 0x82b], 0x69
mov byte [ebp - 0x82a], 0x62
mov byte [ebp - 0x829], 0x72
mov byte [ebp - 0x828], 0x61
mov byte [ebp - 0x827], 0x72
mov byte [ebp - 0x826], 0x79
mov byte [ebp - 0x825], 0x57
mov byte [ebp - 0x824], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18d8], ecx
mov edx, dword [ebp - 0x18d8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
mov dword [ebp - 0x1518], ecx
push esi
push esi
add esp, 4
or esi, 0x1179c
and esi, 0xa43f
pop esi
push esi
push esi
add esp, 4
and esi, 0x49f1
pop esi
push ebx
add ebx, 0x13e62
jmp 0x406ceb
add ebx, 0x478e
pop ebx
cmp dword [ebp - 0x1518], 0
jne 0x406d0a
mov dword [ebp - 0x710], 0
jmp 0x406fb1
mov edx, dword [ebp - 0x1518]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc58], ecx
push ecx
sub ecx, 0x5ac2
and ecx, 0x16655
pop ecx
push ecx
xor ecx, 0x5086
call 0x406d3e
add byte [ebp + 0x3e], al
dec esp
inc ebx
inc ebx
aaa
xor al, byte [ebx - 0x3e7efb3c]
fidivr word [edx]
add dword [eax], eax
xor ecx, 0x1c7d
pop ecx
cmp dword [ebp - 0xc58], 0
jne 0x406d66
mov dword [ebp - 0x710], 0
jmp 0x406fb1
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
push esi
call 0x406d81
add byte [eax], bh
aas
inc ebx
aas
dec esp
inc esp
inc ebx
aaa
add esp, 4
sub esi, 0xd0a6
pop esi
push eax
sub eax, 0x274c
pop eax
push edx
push edx
add esp, 4
sub edx, 0x4e27
jmp 0x406da3
pop edx
lea eax, [ebp - 0x16e8]
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc50], edx
xor eax, eax
mov word [ebp - 0x208], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push edx
jmp 0x406dd7
pop edx
push ebx
push esi
add esp, 4
sub ebx, 0x58c5
call 0x406df0
add byte [edi + 0x44], cl
dec ecx
cmp al, byte [edx + 0x43]
xor eax, dword [ebx - 0x147efb3c]
add byte [edx], ah
add byte [eax], al
add ebx, 0x5023
pop ebx
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xf8e], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xf8e]
mov word [ebp - 0x208], dx
mov eax, dword [ebp - 0xc54]
mov cx, word [eax]
mov word [ebp - 0xf90], cx
mov edx, dword [ebp - 0xc54]
add edx, 2
mov dword [ebp - 0xc54], edx
mov ax, word [ebp - 0xf90]
mov word [ebp - 0x3c], ax
push ebx
call 0x406e66
add byte [ecx + ecx*2], dh
dec esi
xor al, 0x48
inc esi
cmp al, 0x3e
add esp, 4
add ebx, 0x4d1e
add ebx, 0xafc5
and ebx, 0x182e4
pop ebx
push ecx
or ecx, 0x12980
jmp 0x406e88
pop ecx
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x406ea6
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1560], edx
jmp 0x406f00
movzx ecx, word [ebp - 0x208]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x406dce
movzx eax, word [ebp - 0x208]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x406dce
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x406eea
mov dword [ebp - 0x151c], 0xffffffff
jmp 0x406ef4
mov dword [ebp - 0x151c], 1
mov ecx, dword [ebp - 0x151c]
mov dword [ebp - 0x1560], ecx
cmp dword [ebp - 0x1560], 0
jne 0x406f49
push ecx
xor ecx, 0x2f04
or ecx, 0x15c29
or ecx, 0x3383
pop ecx
push edx
push eax
add esp, 4
add edx, 0xa43f
pop edx
push edx
push esi
add esp, 4
xor edx, 0x14165
sub edx, 0x3083
pop edx
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x710], edx
jmp 0x406fb1
push esi
push edi
add esp, 4
sub esi, 0xe4af
sub esi, 0x10050
xor esi, 0xe83c
pop esi
push edi
or edi, 0x853b
and edi, 0x1456f
add edi, 0x151c5
or edi, 0x17885
pop edi
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x4e8]
cmp edx, dword [ebp - 0xc58]
je 0x406fa7
mov eax, dword [ebp - 0x4e8]
cmp dword [eax + 0x30], 0
jne 0x406d72
mov dword [ebp - 0x710], 0
push ebx
push edi
add esp, 4
xor ebx, 0xeb75
pop ebx
push eax
push esi
add esp, 4
sub eax, 0xf9e1
or eax, 0x124ab
or eax, 0x2cd5
pop eax
push edi
add edi, 0xb02c
add edi, 0x102a9
pop edi
cmp dword [ebp - 0x710], 0
jne 0x40702d
push ebx
add ebx, 0x9003
sub ebx, 0x15611
add ebx, 0x14aaa
or ebx, 0x2f04
pop ebx
push eax
push ebx
add esp, 4
xor eax, 0xa131
or eax, 0x16138
sub eax, 0x16411
pop eax
mov dword [ebp - 0xa58], 0
jmp 0x407b55
push edi
jmp 0x407035
and edi, 0x163d5
pop edi
push eax
or eax, 0x26a1
pop eax
push esi
push ecx
add esp, 4
add esi, 0x5934
call 0x40705b
add byte [edi + 0x3f], al
xor eax, 0x83394c3e
les eax, [esi + ebx*2]
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x300], edx
mov dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x1564], eax
cmp dword [ebp - 0x1564], 0
jne 0x40709e
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x40738f
mov edx, dword [ebp - 0x1564]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1568], eax
jne 0x4070c6
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x40738f
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1568]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1570], edx
cmp dword [ebp - 0x1570], 0
jne 0x4070f8
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
jmp 0x40738f
mov ecx, dword [ebp - 0x300]
add ecx, dword [ebp - 0x1570]
mov dword [ebp - 0x714], ecx
jne 0x40711d
mov edx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], edx
jmp 0x40738f
mov eax, dword [ebp - 0x714]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x18e0], ecx
mov edx, dword [ebp - 0x714]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x18e4], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x18e8], edx
mov dword [ebp - 0x718], 0
jmp 0x407177
mov eax, dword [ebp - 0x718]
add eax, 1
mov dword [ebp - 0x718], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x718]
cmp edx, dword [ecx + 0x18]
jae 0x407383
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e0]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x71c], edx
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e4]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x18e8]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x18ec], ecx
mov dword [ebp - 0x188], 0
jmp 0x4071e7
mov edx, dword [ebp - 0x188]
add edx, 1
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
test ecx, ecx
je 0x407299
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
test eax, eax
je 0x407299
push eax
push edx
add esp, 4
or eax, 0x15ea2
add eax, 0x1741
and eax, 0xd5c8
add eax, 0x6c5c
pop eax
push ecx
or ecx, 0x72f3
pop ecx
push eax
push ecx
add esp, 4
or eax, 0x82ce
pop eax
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
cmp edx, ecx
je 0x40728b
mov edx, dword [ebp - 0x71c]
add edx, dword [ebp - 0x188]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x188]
movsx edx, byte [ebp + ecx - 0x830]
cmp eax, edx
jne 0x407292
jmp 0x4071d8
jmp 0x407299
push esi
push ecx
add esp, 4
or esi, 0x9085
pop esi
push esi
and esi, 0x4ff8
sub esi, 0xda99
xor esi, 0xe8da
pop esi
push edi
push edx
add esp, 4
xor edi, 0x17b81
xor edi, 0x17b93
pop edi
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
cmp ecx, eax
jne 0x4072f8
mov dword [ebp - 0xc5c], 0
jmp 0x407367
push ebx
call 0x407308
add byte [eax*2 + 0x4b4e3d34], dh
cmp al, 0x4f
dec ebp
add esp, 4
or ebx, 0x1593c
call 0x407320
add byte [eax + 0x32], cl
dec edx
aaa
cmp eax, 0x37324647
add esp, 4
sub ebx, 0xae47
pop ebx
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
or ecx, 0x20
cmp edx, ecx
jge 0x40735d
mov dword [ebp - 0xc5c], 0xffffffff
jmp 0x407367
mov dword [ebp - 0xc5c], 1
cmp dword [ebp - 0xc5c], 0
jne 0x40737e
mov edx, dword [ebp - 0x18ec]
mov dword [ebp - 0x3c8], edx
jmp 0x40738f
jmp 0x407168
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0
je 0x40746a
push ecx
push eax
add esp, 4
or ecx, 0x1815f
jmp 0x4073af
pop ecx
push edx
push eax
add esp, 4
xor edx, 0x8b50
and edx, 0x1426f
pop edx
push ebx
push eax
add esp, 4
add ebx, 0x10434
pop ebx
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x18f0], ecx
push edi
push esi
add esp, 4
and edi, 0xd89d
xor edi, 0x1451a
pop edi
push esi
push eax
add esp, 4
call 0x407400
add byte [eax + 0x50], al
inc eax
aaa
xor eax, 0x834a4339
les eax, [esi + ebx*2]
push edx
add edx, 0x57d0
pop edx
mov edx, dword [ebp - 0x18f0]
mov dword [ebp - 0x18f4], edx
lea eax, [ebp - 0x1628]
push eax
call dword [ebp - 0x18f4]
test eax, eax
jne 0x40746a
push edx
sub edx, 0x60da
pop edx
push eax
push ecx
add esp, 4
add eax, 0x132b7
sub eax, 0x13667
pop eax
push edx
push ebx
add esp, 4
and edx, 0x1458e
add edx, 0xef1d
sbb eax, 0x810000ef
bnd jno 0x407465
add byte [eax], al
pop edx
mov dword [ebp - 0xa58], 0
jmp 0x407b55
push edi
xor edi, 0xecee
xor edi, 0x17722
or edi, 0xbac4
and edi, 0x2ebb
pop edi
push ecx
push edx
add esp, 4
add ecx, 0xf56d
jmp 0x407495
add ecx, 0x4e84
pop ecx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18f8], ecx
mov edx, dword [ebp - 0x18f8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18fc], eax
mov ecx, dword [ebp - 0x18fc]
mov dword [ebp - 0x1574], ecx
push eax
jmp 0x4074cc
jmp 0x4074d2
jmp 0x4074d7
or eax, 0x7858
pop eax
push eax
push edx
add esp, 4
xor eax, 0xe890
xor eax, 0x114b0
add eax, 0x11e58
pop eax
cmp dword [ebp - 0x1574], 0
jne 0x40750e
mov dword [ebp - 0x2a8], 0
jmp 0x4077b5
mov edx, dword [ebp - 0x1574]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc68], ecx
push esi
add esi, 0x147c4
pop esi
push esi
push ebx
add esp, 4
call 0x40753c
add byte [0x374a3c32], dh
dec ebx
xor cl, byte [edi + 0x44]
add esp, 4
and esi, 0x16e2d
xor esi, 0x8cce
and esi, 0x16d3e
pop esi
cmp dword [ebp - 0xc68], 0
jne 0x40756a
mov dword [ebp - 0x2a8], 0
jmp 0x4077b5
mov edx, dword [ebp - 0xc68]
mov dword [ebp - 0x4ec], edx
push ebx
call 0x407586
add byte [edx + 0x50], cl
inc ebp
dec ebx
dec esp
cmp bh, byte [ecx]
cmp eax, 0x4c48340
pop ebx
push ecx
push ebx
add esp, 4
call 0x40759e
or al, byte [eax]
add byte [eax], al
add byte [ebp + 0x3d], al
dec ecx
cmp al, byte [eax + 0x43]
cmp byte [ecx + edi], bh
add esp, 4
xor ecx, 0xef1
pop ecx
lea eax, [ebp - 0x1628]
mov dword [ebp - 0xc64], eax
mov ecx, dword [ebp - 0x4ec]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc60], edx
xor eax, eax
mov word [ebp - 0x20c], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push edi
push edi
add esp, 4
call 0x4075e6
add byte [0x3e423733], dh
inc edx
dec ebx
xor eax, 0x4c48334
xor edi, 0x428e
jmp 0x4075f5
or edi, 0x9579
pop edi
push ebx
or ebx, 0x1862f
pop ebx
mov edx, dword [ebp - 0xc60]
mov ax, word [edx]
mov word [ebp - 0xf92], ax
mov ecx, dword [ebp - 0xc60]
add ecx, 2
mov dword [ebp - 0xc60], ecx
mov dx, word [ebp - 0xf92]
mov word [ebp - 0x20c], dx
mov eax, dword [ebp - 0xc64]
mov cx, word [eax]
mov word [ebp - 0xf94], cx
mov edx, dword [ebp - 0xc64]
add edx, 2
mov dword [ebp - 0xc64], edx
mov ax, word [ebp - 0xf94]
mov word [ebp - 0x40], ax
push ebx
or ebx, 0x1342a
or ebx, 0x1495e
pop ebx
push edx
push edx
add esp, 4
or edx, 0xcfca
pop edx
push edx
push eax
add esp, 4
xor edx, 0x2e46
xor edx, 0x3b7
add edx, 0x10288
pop edx
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x4076aa
movzx edx, word [ebp - 0x20c]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x157c], edx
jmp 0x407704
movzx ecx, word [ebp - 0x20c]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x4075d2
movzx eax, word [ebp - 0x20c]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x4075d2
movzx edx, word [ebp - 0x20c]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x4076ee
mov dword [ebp - 0x1578], 0xffffffff
jmp 0x4076f8
mov dword [ebp - 0x1578], 1
mov ecx, dword [ebp - 0x1578]
mov dword [ebp - 0x157c], ecx
cmp dword [ebp - 0x157c], 0
jne 0x40774d
push ecx
push edi
add esp, 4
and ecx, 0x184b9
sub ecx, 0x1356b
add ecx, 0x4ef4
pop ecx
push ecx
push esi
add esp, 4
xor ecx, 0xc225
pop ecx
push esi
or esi, 0x134e4
and esi, 0xa615
pop esi
mov edx, dword [ebp - 0x4ec]
mov dword [ebp - 0x2a8], edx
jmp 0x4077b5
push edx
push ecx
add esp, 4
or edx, 0x1426e
sub edx, 0xe67
add edx, 0xb9c8
sub edx, 0xa79c
pop edx
push ecx
sub ecx, 0xbdab
sub ecx, 0x81ff
jmp 0x40777e
pop ecx
mov eax, dword [ebp - 0x4ec]
test dword [ebx + edi*8], edx
invalid
dec dword [ebx + 0x148d8908]
sti
invalid
dec dword [ebx - 0x4eb6b]
invalid
cmp edx, dword [ebp - 0xc68]
je 0x4077ab
mov eax, dword [ebp - 0x4ec]
cmp dword [eax + 0x30], 0
jne 0x407576
mov dword [ebp - 0x2a8], 0
push eax
push ecx
add esp, 4
jmp 0x4077c0
jmp 0x4077c9
add eax, 0x169db
pop eax
push ebx
push edx
add esp, 4
call 0x4077e3
add byte [ebx], bh
cmp eax, dword [ebx + 0x3d]
dec ebx
dec ebx
inc edx
add esp, 4
pop ebx
mov ecx, dword [ebp - 0x2a8]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x304], edx
push eax
push eax
add esp, 4
add eax, 0x41d9
or eax, 0x16897
and eax, 0xd0db
pop eax
push ecx
xor ecx, 0xd4b4
xor ecx, 0x11a29
or ecx, 0x3e7d
and ecx, 0x1492c
pop ecx
mov dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x1580], eax
cmp dword [ebp - 0x1580], 0
jne 0x407858
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], ecx
jmp 0x407b49
mov edx, dword [ebp - 0x1580]
mov eax, dword [ebp - 0x304]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1584], eax
jne 0x407880
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], ecx
jmp 0x407b49
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1584]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1588], edx
cmp dword [ebp - 0x1588], 0
jne 0x4078b2
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], eax
jmp 0x407b49
mov ecx, dword [ebp - 0x304]
add ecx, dword [ebp - 0x1588]
mov dword [ebp - 0x724], ecx
jne 0x4078d7
mov edx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], edx
jmp 0x407b49
mov eax, dword [ebp - 0x724]
mov ecx, dword [ebp - 0x304]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1900], ecx
invalid
xchg ebp, eax
fdiv st(0), st(0)