Function at 0x4077b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x144
push ebx
mov ebx, dword [ecx]
push esi
push edi
mov edi, dword [ebp + 8]
mov eax, edx
mov edi, dword [edi]
mov edx, dword [eax]
mov dword [ebp - 0x118], ecx
xor ecx, ecx
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0x8c], 0
mov dword [ebp - 8], edx
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0xb8], edx
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 4], edi
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x40], ecx
test ebx, 0x800
je 0x40875e
mov dword [ebp - 0x24], 1
test ebx, 0x200
jne 0x408766
xor eax, eax
mov dword [ebp - 0xa0], eax
xor eax, 1
mov dword [ebp - 0xe4], eax
movsx eax, bl
and eax, 1
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x68], 0xfffffffe
mov dword [ebp - 0x74], 0xfffffffe
mov dword [ebp - 0x58], 0xfffffffe
mov dword [ebp - 0x30], 0xfffffffe
mov dword [ebp - 0x90], eax
movzx esi, word [edi]
fld qword [0x4b69f8]
test esi, esi
je 0x407cd4
mov eax, dword [ebp + 0x28]
mov ecx, dword [eax + 0x3c]
mov eax, dword [eax + 0x10]
lea eax, [eax + ecx*2]
add eax, 0xffffff38
cmp dword [ebp + 0x2c], 0
je 0x407a39
cmp edx, eax
ja 0x482315
mov eax, dword [ebp - 0xb0]
cmp edx, eax
jb 0x408770
mov ecx, edx
sub ecx, eax
mov eax, dword [ebp + 0x2c]
sar ecx, 1
mov edx, dword [eax]
mov eax, 0x7fffffeb
sub eax, edx
cmp eax, ecx
jl 0x482012
lea eax, [edx + ecx]
mov ecx, dword [ebp + 0x2c]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x407b9f
cmp ecx, dword [ebp - 0xb8]
jbe 0x407bad
mov eax, dword [ebp - 8]
fstp st(0)
mov edi, dword [ebp - 0xb8]
sub eax, ecx
and eax, 0xfffffffe
push eax
push ecx
push edi
call fcn.00425f80
fld qword [0x4b69f8]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 8]
sub ecx, edi
sar ecx, 1
add esp, 0xc
neg ecx
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 4]
lea edx, [edx + ecx*2]
mov dword [ebp - 8], edx
mov dword [ebp - 0xb0], edx
cmp dword [ebp - 0x34], 0
jne 0x47f59f
and ebx, 8
jne 0x47f626
cmp esi, 0x2a
je 0x407f5d
cmp esi, 0x3f
je 0x407f5d
cmp esi, 0x2b
je 0x407f5d
cmp esi, 0x7b
je 0x47f71f
xor ecx, ecx
cmp dword [ebp - 0x88], ecx
jne 0x47f737
mov eax, dword [ebp - 0xc]
test eax, 0x4000
jne 0x47f77d
cmp esi, 0x5f
jae 0x407a4a
cmp esi, 0x2f
jae 0x407b91
cmp esi, 0x28
je 0x407bb5
test esi, esi
je case.0x4079d2.41
lea eax, [esi - 0x24]
cmp eax, 0x58
ja case.0x4079d2.37
movzx eax, byte [eax + 0x408824]
jmp dword [eax*4 + 0x4087f4]
add byte [ebx - 0x2722efbb], cl
mov eax, dword [ebp + 0x10]
fstp st(0)
mov ecx, dword [ebp - 0x70]
mov ebx, dword [ebp + 0x2c]
mov dword [eax], ecx
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 0x30]
mov dword [eax], ecx
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp - 0x60]
mov dword [eax], ecx
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp - 0x58]
mov dword [eax], ecx
mov eax, dword [ebp - 0x114]
mov dword [eax], edx
mov eax, dword [ebp + 8]
mov dword [eax], edi
test ebx, ebx
je 0x407a2d
sub edx, dword [ebp - 0xb0]
mov eax, dword [ebx]
mov ecx, 0x7fffffeb
sar edx, 1
sub ecx, eax
cmp ecx, edx
jl 0x4820db
lea ecx, [eax + edx]
mov dword [ebx], ecx
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 0x28]
cmp dword [ecx + 0x20], eax
jbe 0x40794d
jmp 0x482315
cmp esi, 0x7b
jae 0x4079a9
fstp st(0)
cmp dword [ebp - 0x24], 0
mov bx, si
mov dword [ebp - 0x10], 1
mov word [ebp - 0x108], bx
je 0x4087c4
and esi, 0xfc00
cmp esi, 0xd800
je 0x480e5b
mov esi, dword [ebp - 0x10]
cmp dword [ebp - 0x24], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], edx
je 0x407af0
hlt
push ebp
loopne 0x407b04
pop edi
test al, 1
je 0x407d0f
movzx ecx, bx
mov eax, ecx
and eax, 0xfc00
cmp eax, 0xd800
je 0x480e92
mov eax, ecx
cdq
and edx, 0x7f
add eax, edx
sar eax, 7
movzx eax, byte [eax + 0x4ac4a0]
les ecx, [edx]
shl eax, 7
and ecx, 0x8000007f
jns 0x407ad0
dec ecx
or ecx, 0xffffff80
inc ecx
mov edx, dword [ebp - 8]
add eax, ecx
movzx eax, word [eax*2 + 0x49e608]
movzx eax, byte [eax*8 + 0x4ab10b]
test eax, eax
jne 0x407ce1
ror byte [edi], 0x85
hlt
mov eax, dword [ebp - 0xc]
test al, 1
je 0x407d0f
mov eax, 0x1e
mov word [edx], ax
add edx, 2
mov dword [ebp - 8], edx
push ebp
clc
test esi, esi
je 0x407b26
mov ecx, esi
shr ecx, 1
mov edi, edx
lea esi, [ebp - 0x108]
rep movsd dword es:[edi], dword [esi]
adc ecx, ecx
rep movsw word es:[edi], word [esi]
mov esi, dword [ebp - 0x10]
lea edx, [edx + esi*2]
mov dword [ebp - 8], edx
cmp bx, 0xd
je 0x480ec9
cmp bx, 0xa
je 0x480ec9
mov ecx, dword [ebp + 0x28]
mov eax, dword [ebp - 0x30]
cmp eax, 0xfffffffe
je 0x407f67
mov ebx, dword [ebp - 0x70]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x68], eax
cmp esi, 1
jne 0x480f0b
movzx eax, word [edx - 2]
mov edi, dword [ebp - 4]
mov dword [ebp - 0x60], eax
mov eax, dword [ecx + 0x68]
or eax, dword [ebp - 0x90]
mov dword [ebp - 0x58], eax
inc ecx
push 0xff70850b
invalid
mov ebx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x7c]
add edi, 2
mov dword [ebp - 4], edi
jmp 0x407893
cmp esi, 0x3f
jb case.0x4079d2.37
jmp 0x4079b2
mov edx, dword [ebp - 0xb8]
mov dword [ebp - 8], edx
jmp 0x407947
mov edx, dword [ebp - 8]
jmp 0x407947
mov ecx, dword [ebp + 0x28]
fstp st(0)
add edi, 2
mov edx, dword [ecx + 0x20]
mov dword [ebp - 0x40], edx
mov dword [ebp - 4], edi
movzx edx, word [edi]
mov dword [edx], 0x8920518b
push ebp
ror byte [ecx - 0x48f00383], 0x17
mov ebx, eax
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x10], 0
mov esi, 0x85
mov dword [ebp - 0x50], 0
cmp edx, 0x2a
je 0x480f20
cmp edx, 0x3f
jne 0x408233
add edi, 2
mov dword [ebp - 4], edi
movzx edx, word [edi]
mov eax, edx
cmp eax, 0x53
jl 0x481151
cmp eax, 0x7c
jge 0x481151
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xf8], ebx
lea ecx, [ebp - 0xf8]
cmp dx, 0x29
je 0x407c5f
lea esp, [esp]
cmp dx, 0x3a
je 0x407c53
movzx eax, dx
add edi, 2
mov dword [ebp - 4], edi
cmp eax, 0x69
jne 0x481e7d
or dword [ecx], 1
movzx edx, word [edi]
cmp edx, 0x29
jne 0x407c30
mov ebx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xe0]
or ebx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
not eax
and ebx, eax
cmp word [edi], 0x29
jne 0x481f09
mov ecx, dword [ebp + 0x28]
mov eax, dword [ecx + 0x14]
add eax, 4
cmp edx, eax
je 0x481ee2
add bh, dh
ret
test ebx, 0x200
jne 0x4087ce
xor eax, eax
mov dword [ebp - 0xa0], eax
xor eax, 1
mov dword [ebp - 0xe4], eax
test bl, 1
je 0x481efa
mov dword [ebp - 0x90], 1
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x7c]
add edi, 2
mov dword [ebp - 0xc], ebx
mov dword [eax], ebx
mov dword [ebp - 0x20], 0
mov dword [ebp - 4], edi
jmp 0x407893
test ecx, ecx
je 0x4078a4
jmp 0x47f58b
mov ebx, dword [ebp - 0xc]
mov dword [edx], 0x90010
mov word [edx + 4], ax
add edx, 6
cmp dword [ebp - 0x30], 0xfffffffe
mov dword [ebp - 8], edx
je 0x480eb3
inc edx
add al, 0x83
ret 0x8306
mov edi, dword [ebp - 4]
mov ecx, dword [ebp - 0x7c]
add edi, 2
mov dword [ebp - 4], edi
jmp 0x407893
mov eax, 0x1d
jmp 0x407afd
push 6
fstp st(0)
mov edx, 0x4b26c8
lea ecx, [edi + 2]
call fcn.004088f3
add esp, 4
test eax, eax
je 0x47f85b
push 6
push es
mov edx, 0x4b26d0
lea ecx, [edi + 2]
call fcn.004088f3
add esp, 4
test eax, eax
je 0x47f871
movzx eax, word [edi + 2]
mov esi, dword [ebp - 8]
mov dword [ebp - 0x20], esi
cmp eax, 0x3a
je 0x47f887
cmp eax, 0x2e
je 0x47f887
cmp eax, 0x3d
je 0x47f887
xor eax, eax
mov dword [ebp - 0x2c], eax
lea esp, [esp]
add edi, 2
mov dword [ebp - 4], edi
movzx ebx, word [edi]
cmp ebx, 0x5c
je 0x4086c6
test eax, eax
jne 0x407d9f
cmp ebx, 0x5e
je 0x40878b
cmp ebx, 0x5d
je 0x47f8bb
xor eax, eax
push 0x20
push eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00420d50
mov edi, dword [ebp - 4]
add esi, 6
xor eax, eax
add esp, 0xc
mov edx, esi
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x14], edx
test ebx, ebx
je 0x47ff7e
cmp dword [ebp - 0x24], 0
je 0x407dfb
mov eax, ebx
and eax, 0xfc00
cmp eax, 0xd800
je 0x47f907
mov ecx, dword [ebp + 0x2c]
test ecx, ecx
je 0x407e0a
cmp esi, edx
ja 0x47f941
cmp dword [ebp - 0x34], 0
jne 0x47f95b
cmp ebx, 0x5b
je 0x47f983
cmp ebx, 0x5c
je 0x4086f6
mov edx, dword [ebp - 0x10]
cmp word [edi + 2], 0x5c
mov esi, dword [ebp - 0x34]
je 0x47fe0d
salc
jg 0x407e3d
add byte [ebx + 0xdfb83c7], cl
mov eax, edi
cmp ebx, 0xd
je 0x47fe2b
test cl, ch
jg 0x407e48
add byte [ebx - 0x7bf0f505], al
loopne 0x407ec8
cmp ebx, 0xa
je 0x47fe2b
jg 0x407e51
pop es
add byte [ebp + 0x660b75f6], al
cmp dword [edi + 2], 0x2d
test esi, esi
jne 0x407e5a
cmp word [edi + 2], 0x2d
jg 0x407e55
sub eax, 0x6b5840f
add byte [eax], al
je 0x40850f
test byte [ebp - 0x7cfffffa], dh
cli
add cl, byte [edi]
invalid
cmp edx, 2
jl 0x407f54
add byte [eax], al
cmp edx, 1
je 0x4080a4
push ebx
push ebx
push dword [ebp + 0x28]
push dword [ebp - 0xc]
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0xd8]
call 0x40887d
mov ecx, dword [ebp - 0x28]
add esp, 0x10
add ecx, eax
mov dword [ebp - 0x28], ecx
mov esi, dword [ebp - 0x5c]
mov edi, dword [ebp - 4]
mov dword [ebp - 0x18], esi
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x14]
add edi, 2
mov dword [ebp - 4], edi
movzx ebx, word [edi]
test ebx, ebx
je 0x47ff5f
cmp ebx, 0x5d
jne 0x407de3
test eax, eax
jne 0x407de3
cmp esi, edx
ja 0x40879f
mov eax, dword [ebp - 0x50]
mov al, 0x8b
push ebp
rol byte [ebx + 0x675fefa], 1
mov edx, dword [ebp - 0x30]
cmp edx, 0xfffffffe
jne 0x407ed7
invalid
or edx, 0xffffffff
mov dword [ebp - 0x30], edx
mov ebx, dword [ebp - 0x70]
mov dword [ebp - 0x74], edx
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x58]
mov dword [ebp - 0x84], ebx
mov ebx, dword [ebp - 0xc]
test eax, eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x68], edx
jne 0x4800a4
test al, 0x89
popfd
jl 0x407ee9
invalid
invalid
mov edi, dword [ebp - 0x2c]
cmp edi, eax
jne 0x4087a9
mov eax, 0x6e
mov edx, dword [ebp - 8]
add edx, 2
cmp dword [ebp + 0x2c], 0
mov word [edx - 2], ax
mov dword [ebp - 8], edx
jne 0x407f3d
test edi, edi
jne 0x4087b3
push 0x20
lea eax, [ebp - 0xd8]
push eax
push edx
call fcn.0041ee80
mov edx, dword [ebp - 8]
add esp, 0xc
mov edi, dword [ebp - 4]
mov ecx, dword [ebp - 0x7c]
add edx, 0x20
add edi, 2
mov dword [ebp - 8], edx
mov dword [ebp - 4], edi
jmp 0x407893
inc edx
mov dword [ebp - 0x10], edx
jmp 0x407e63
mov ecx, 1
jmp 0x407992
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x74], 0xffffffff
cmp esi, 1
jne 0x480ed8
movzx ebx, bx
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
cmp esi, 1
je 0x407cfe
jmp 0x480ef6
mov ebx, dword [ebp - 0xc]
fstp st(0)
push 0
mov dword [ebp - 0x80], edi
mov edi, dword [ebp + 0x28]
push ebx
push dword [edi + 0x40]
lea edx, [ebp - 0xac]
push dword [ebp + 0xc]
lea ecx, [ebp - 4]
call fcn.00408e6e
mov edx, dword [ebp + 0xc]
add esp, 0x10
cmp dword [edx], 0
mov esi, eax
jne 0x4087ec
test esi, esi
je 0x4084c5
cmp esi, 0x1a
je 0x480c5b
cmp esi, 0x19
je 0x480e50
mov ecx, dword [ebp - 0x30]
cmp ecx, 0xfffffffe
jne 0x408006
lea eax, [esi - 6]
cmp eax, 0x10
ja 0x408006
or ecx, 0xffffffff
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x68], eax
cmp esi, 0x1b
je 0x480c86
cmp esi, 0x1c
je 0x480d16
test esi, esi
js 0x480d6c
cmp esi, 0xf
je 0x480dd1
cmp esi, 0x10
je 0x480dd1
cmp esi, 5
je 0x480d78
cmp esi, 4
je 0x480d78
cmp esi, 1
je 0x480d78
cmp esi, 0x1d
jge 0x480d8e
mov edx, dword [ebp - 8]
lea eax, [esi - 6]
cmp eax, 0x10
ja 0x480db2
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x24], 0
je 0x480dbe
mov ecx, dword [ebp - 0x7c]
mov word [edx], si
mov edi, dword [ebp - 4]
add edx, 2
add edi, 2
mov dword [ebp - 8], edx
mov dword [ebp - 4], edi
jmp 0x407893
cmp word [edi + 2], 0x5d
jg 0x4080aa
pop ebp
jne 0x407e6c
test dword [ebp - 0x16000003], edi
fistp qword [esi + 7]
add byte [ebx], dh
xor esi, esi
or eax, 0xffffffff
mov dword [ebp - 0x54], esi
jmp 0x47ff93
xor esi, esi
or eax, 0xffffffff
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x4820c4
test esi, esi
jne 0x4080ec
mov esi, dword [ebp - 0x84]
mov dword [ebp - 0x70], esi
mov esi, dword [ebp - 0x74]
mov dword [ebp - 0x30], esi
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0x60], esi
mov esi, dword [ebp - 0x68]
mov dword [ebp - 0x58], esi
mov esi, dword [ebp - 0x54]
cmp esi, eax
je 0x48018d
mov dword [ebp - 0x78], 2
add al, byte [eax]
add byte [eax], al
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x4c], ecx
test ebx, ebx
jne 0x480199
movzx eax, word [edi + 2]
cmp eax, 0x2b
je 0x480285
cmp eax, 0x3f
jne 0x408477
mov eax, dword [ebp - 0xe4]
add edi, 2
mov dword [ebp - 4], edi
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
cmp word [ebx], 0x75
je 0x480299
movzx ecx, word [ebx]
cmp ecx, 0x1d
je 0x480894
cmp ecx, 0x1e
je 0x480894
cmp ecx, 0x1f
je 0x480894
cmp ecx, 0x20
je 0x480894
cmp ecx, 0x17
jae 0x408482
fstp st(0)
mov esi, 0x34
mov ebx, ecx
mov ecx, dword [ebp - 0x20]
movzx eax, word [ecx]
cmp eax, 0x10
je 0x480959
invalid
cmp eax, 0xf
je 0x480959
or eax, 0xffffffff
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x3c], 0
mov ecx, edx
mov edx, dword [ebp - 0x20]
mov dword [ebp - 8], edx
je 0x408212
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x54]
lodsb al, byte [esi]
add edx, esi
mov dword [ebp - 0x10], edx
test eax, eax
jne 0x4809a4
mov ecx, dword [ebp - 0x3c]
cmp ecx, 0xffffffff
jne 0x48096c
lea eax, [edx + 0x21]
mov ecx, dword [ebp - 0x20]
mov word [ecx], ax
lea edx, [ecx + 2]
mov dword [ebp - 8], edx
mov edi, dword [ebp - 0x14]
mov esi, dword [ebp - 0x18]
cmp dword [ebp - 0x24], 0
je 0x4081f1
test ebx, 0x10000000
jne 0x480aff
mov word [edx], bx
add edx, 2
mov ebx, dword [ebp + 0x28]
mov dword [ebp - 8], edx
test esi, esi
jns 0x480b21
mov edi, dword [ebp - 4]
cmp dword [ebp - 0x2c], 0
jne 0x480b33
mov ecx, dword [ebp + 0x28]
mov eax, dword [ebp - 0x78]
or dword [ecx + 0x68], eax
mov ebx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x7c]
add edi, 2
mov dword [ebp - 0x20], 0
mov dword [ebp - 4], edi
jmp 0x407893
mov byte [ecx], cl
inc ecx
push 0x8bf45d8b
dec ebp
test byte [ebx + 0x45c702c7], al
loopne 0x408228
add byte [eax], al
add byte [ecx + 0x60e9fc7d], cl
pushal
idiv bh
dec dword [ebx + 0xa92c4d]
adc byte [eax], al
add byte [edi], cl
test ebx, ebx
pushfd
pop es
add byte [ebx + 0x40ff2845], cl
inc eax
mov ecx, dword [ebp + 0x2c]
test eax, 0x1000
jne 0x481f1c
mov eax, dword [ebp + 0x28]
inc dword [eax + 0x40]
mov edx, dword [ebp - 8]
mov ax, word [eax + 0x40]
mov word [edx + 4], ax
mov edi, dword [ebp - 4]
mov dword [ebp - 0x10], 1
mov eax, dword [ebp + 0x28]
inc dword [eax + 0x58]
cmp dword [eax + 0x58], 0xfa
jg 0x482300
mov word [edx], si
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x4c], edx
mov edx, eax
neg ecx
mov eax, dword [edx + 0x68]
mov edi, dword [edx + 0x40]
mov dword [ebp - 0x44], eax
sbb eax, eax
lea ecx, [ebp - 0x8c]
and eax, ecx
mov dword [ebp - 0x8c], 0
cmp esi, 0x87
je 0x4087d8
inc dword [eax]
add byte [eax], al
add byte [ecx + 0x87fe], al
add byte [edi], cl
test byte [ebx], dh
add eax, 0xd2330000
xor edx, edx
cmp esi, 0x7f
je 0x4087e2
cmp esi, 0x80
je 0x4087e2
xor ecx, ecx
push eax
push dword [ebp + 0x28]
lea eax, [ebp - 0x94]
push dword [ebp + 0x20]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xec]
push eax
mov eax, dword [ebp + 0x24]
add eax, edx
push eax
push dword [ebp - 0x10]
lea eax, [ebp - 4]
push dword [ebp - 0x50]
lea edx, [ebp - 0x4c]
push ecx
push dword [ebp + 0xc]
mov ecx, ebx
push eax
call fcn.00407474
add esp, 0x34
test eax, eax
je 0x4087ec
mov eax, dword [ebp + 0x28]
dec dword [eax + 0x58]
cmp esi, 0x81
je 0x481f29
cmp esi, 0x80
jle 0x481f45
mov ebx, dword [ebp + 0x2c]
mov edx, dword [ebp - 8]
cmp esi, 0x87
je 0x481f56
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0xa4]
mov edi, dword [ebp - 4]
cmp word [edi], 0x29
jne 0x4822eb
test ebx, ebx
je 0x4083fe
mov esi, dword [ebx]
mov ebx, dword [ebp - 0x8c]
mov ecx, 0x7fffffeb
sub ecx, esi
lea eax, [ebx - 4]
cmp ecx, eax
jl 0x4820db
popfd
pop es
add byte [ebx + 0x438d2c4d], cl
cld
mov ecx, dword [ebp + 0x2c]
lea eax, [ebx - 4]
mov ebx, dword [ebp - 0xc]
add eax, esi
mov dword [ecx], eax
mov ecx, dword [ebp - 0x7c]
mov dword [edx + 2], 0x780002
mov eax, 2
mov word [edx + 6], ax
mov edi, dword [ebp - 4]
add edx, 8
add edi, eax
mov dword [ebp - 8], edx
mov dword [ebp - 4], edi
jmp 0x407893
mov eax, dword [ebp - 0x30]
fstp st(0)
cmp eax, 0xfffffffe
jne 0x4083b8
or eax, 0xffffffff
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x20], edx
test bl, 4
jne 0x40877a
mov eax, 0xc
mov ecx, dword [ebp - 0x7c]
mov word [edx], ax
mov edi, dword [ebp - 4]
add edx, 2
add edi, 2
mov dword [ebp - 8], edx
mov dword [ebp - 4], edi
jmp 0x407893
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 8], edx
cmp esi, 0x91
je 0x407b80
mov ebx, dword [ebp - 0x60]
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x58]
mov dword [ebp - 0x68], ebx
mov ebx, dword [ebp - 0x70]
mov dword [ebp - 0x84], ebx
mov ebx, dword [ebp - 0x30]
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x9c], 0
cmp esi, 0x81
jl 0x481fed
cmp ebx, 0xfffffffe
je 0x481fb4
test ecx, ecx
jns 0x40873a
test eax, eax
js 0x407b80
mov ecx, dword [ebp - 0xb4]
mov ebx, dword [ebp - 0xc]
add edi, 2
mov dword [ebp - 0x60], ecx
mov ecx, dword [ebp - 0x7c]
mov dword [ebp - 0x58], eax
mov dword [ebp - 4], edi
jmp 0x407893
mov eax, dword [ebp - 0xa0]
jmp 0x40812f
cmp ecx, 0x6e
jne 0x4085a5
add byte [ebx - 0x27223bb3], cl
mov ecx, dword [ebp - 0x3c]
fstp st(0)
test ecx, ecx
je 0x4087ba
test esi, esi
jne 0x480860
cmp ecx, 0xffffffff
je 0x4084f8
cmp ecx, 1
jne 0x480872
mov ebx, dword [ebp + 0x28]
add eax, 0x66
mov word [edx], ax
mov edi, dword [ebp - 4]
add edx, 2
mov dword [ebp - 8], edx
jmp 0x408208
mov ebx, dword [ebp - 0xac]
cmp ebx, 0xffff
ja 0x480079
mov edx, dword [ebp - 8]
mov esi, 1
mov word [ebp - 0x108], bx
mov dword [ebp - 0x10], esi
jmp 0x407a85
xor esi, esi
lea eax, [esi + 1]
jmp 0x4080b9
add eax, 0x62
mov word [edx], ax
add edx, 2
mov dword [ebp - 8], edx
mov edi, dword [ebp - 4]
mov ebx, dword [ebp + 0x28]
jmp 0x408208
add edi, 4
mov dword [ebp - 4], edi
cmp word [edi], 0x5c
aas
pop esp
je 0x47fe3a
movzx ecx, word [edi]
test cx, cx
je 0x408795
test esi, esi
jne 0x408538
cmp ecx, 0x5d
je 0x408795
test byte [ebp + 2], bl
add byte [eax], al
cmp dword [ebp - 0x24], 0
mov esi, ecx
mov dword [ebp - 0x98], esi
je 0x408558
jge 0x408517
add byte [ebx + 0x68b589f1], cl
invalid
mov eax, esi
and eax, 0xfc00
cmp eax, 0xd800
je 0x47fe98
add byte [ebx + 0x7500cc7d], al
adc al, byte [ebx - 0x7bf0a302]
pop esp
jns 0x40856d
cmp dword [ebp - 0x34], 0
jne 0x408570
cmp esi, 0x5c
je 0x47fec3
add byte [ebx - 0x7bf0a402], al
scasd eax, dword es:[edi]
cmp esi, 0x5b
je 0x47ff1f
jns 0x408576
add byte [ebx - 0xcc4f3b3], cl
mov ecx, dword [ebp + 0xc]
cmp esi, ebx
jb 0x48209a
sbb byte [edi], 0x9b
pop es
add byte [edi], cl
test cl, bl
clc
invalid
je 0x407e5a
mov dword [ebp - 0x10], 2
cmp esi, 0xd
je 0x47ff50
cmp esi, 0xa
je 0x47ff50
mov eax, dword [ebp + 0x28]
push esi
push ebx
push eax
jmp 0x407e71
cmp ecx, 0x6f
je 0x40848b
cmp ecx, 0x70
je 0x40848b
cmp ecx, 0x71
je 0x40848b
cmp ecx, 0x72
je 0x40848b
cmp ecx, 0x73
je 0x40848b
cmp ecx, 0x74
je 0x40848b
cmp ecx, 0x7d
jb 0x48083b
mov eax, 0x87
cmp cx, ax
ja 0x48083b
mov esi, edx
sub esi, ebx
xor ebx, ebx
sar esi, 1
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
cmp cx, ax
je 0x48030d
mov eax, 0x81
cmp cx, ax
mov eax, dword [ebp - 0x54]
jb 0x480329
mov ecx, dword [ebp - 0x3c]
test eax, eax
jne 0x4803a7
push dword [ebp - 0x40]
fstp st(0)
mov edi, dword [ebp - 0x20]
push dword [ebp + 0x28]
cmp ecx, 1
push dword [ebp - 0x24]
mov word [edx], ax
mov ecx, edi
jg 0x48035a
lea edx, [eax + 1]
call 0x41e3f9
mov edx, dword [ebp - 0x14]
add esp, 0xc
lea eax, [edx + edx]
push eax
lea esi, [edi + 2]
push edi
push esi
call fcn.00425f80
mov edx, dword [ebp - 8]
add edx, 2
add esp, 0xc
mov dword [ebp - 8], edx
cmp dword [ebp - 0x3c], ebx
je 0x48034a
mov eax, dword [ebp - 0x10]
mov ecx, edi
add eax, 0x92
mov dword [ebp - 0x20], esi
mov esi, dword [ebp - 0x14]
mov dword [ebp - 0x1c], ecx
mov word [edi], ax
mov eax, dword [ebp - 0x3c]
mov edi, dword [ebp - 4]
dec eax
mov dword [ebp - 0x3c], eax
test eax, eax
js 0x4806e7
cmp dword [ebp + 0x2c], 0
je 0x4086ab
test eax, eax
jg 0x48052f
lea ebx, [eax - 1]
test ebx, ebx
jns 0x480586
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x408507
jmp 0x4806ac
jg 0x4086cc
add byte [esi - 0x7d], ah
jg 0x4086cc
cmp word [edi + 2], 0x45
inc ebp
lea ecx, [edi + 2]
je 0x408784
dec edi
add cl, byte [edi]
test byte [eax + 0x6a000000], dh
add edi, dword [edx + 0x4b26d8]
push 3
mov edx, 0x4b26d8
call fcn.004088f3
add esp, 4
test eax, eax
jne 0x407da8
mov eax, dword [ebp - 0x2c]
add edi, 6
jmp 0x407d80
mov ebx, dword [ebp - 0xc]
mov edi, dword [ebp + 0x28]
push 1
push ebx
push dword [edi + 0x40]
lea edx, [ebp - 0xac]
push dword [ebp + 0xc]
lea ecx, [ebp - 4]
call fcn.00408e6e
mov esi, eax
mov eax, dword [ebp + 0xc]
add esp, 0x10
cmp dword [eax], 0
jne 0x4087ec
test esi, esi
jne 0x47fb5e
mov ebx, dword [ebp - 0xac]
mov edi, dword [ebp - 4]
jmp 0x407e26
test eax, eax
jns 0x40845a
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xb4], eax
mov eax, ecx
or eax, dword [ebp - 0x44]
mov dword [ebp - 0x94], eax
jmp 0x408452
mov dword [ebp - 0x24], ecx
jmp 0x40783f
mov eax, 1
jmp 0x40784d
mov edx, eax
mov dword [ebp - 8], edx
jmp 0x4078d5
mov eax, 0xd
jmp 0x4083e4
mov edi, ecx
jmp 0x407d80
mov eax, 1
jmp 0x407d76
mov edi, eax
mov dword [ebp - 4], edi
jmp 0x407e5a
mov eax, 1
jmp 0x407ec9
mov eax, 0x6f
jmp 0x407f0d
xor ecx, ecx
jmp 0x480134
mov edx, ebx
mov dword [ebp - 8], edx
jmp 0x408212
mov esi, 1
jmp 0x407a85
mov eax, 1
jmp 0x407c92
mov edx, 1
jmp 0x4082bc
mov ecx, 1
jmp 0x4082be
mov edi, dword [ebp - 4]
jmp 0x482320
add byte [ebx], cl
or ecx, dword [ebx]
or eax, dword [ecx]
add al, byte [ebx]
or ecx, dword [ebx]
add al, 11
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or eax, dword [185273099]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or eax, dword [esi]
pop es
or byte [ecx], cl
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or ecx, dword [ebx]
or al, byte [ecx]
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0x10]
mov dword [ebp - 0xc], ecx
xor ecx, ecx
push edi
mov edi, dword [ebp + 0x14]
mov dword [ebp - 8], edx
mov dword [ebp - 4], ecx
test bl, 1
jne 0x47e6e0
and ebx, 0x800
je 0x4088e6
cmp edi, 0x100
jae 0x47e7b6
pop es
invalid
cmp esi, edi
ja 0x4088de
mov eax, edi
sub eax, esi
inc ecx
add ecx, eax
mov dword [ebp - 4], ecx
mov ecx, esi
and ecx, 7
mov al, 1
shl al, cl
mov ecx, dword [ebp - 0xc]
mov edx, esi
shr edx, 3
or byte [edx + ecx], al
inc esi
cmp esi, edi
jbe 0x4088c5
div dword [esi - 0x19]
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
leave
ret
mov eax, 0xffff
cmp edi, eax
jbe 0x4088ab
mov edi, eax
jmp 0x4088ab
test dword [eax], esp
invalid
or dh, byte [ebp - 0x12]
or byte [eax], al
movzx ecx, word [ebp + 0x14]
movzx eax, word [ebp + 0x10]
shl ecx, 0x10
or ecx, eax
push ecx
test byte [esp + ecx], ah
push 0x20
push esi
call dword [0x48d564]
pop edi
pop esi
leave
mov ebx, 0x8b550010
in al, dx
sub eax, 0x32
int1
xor edi, edi
push 0xc
cmp dword [esi + 4], edi
je 0x41b627
call fcn.0041f522
pop ecx
std
push cs
je 0x41b60f
push dword [ebp + 8]
mov ecx, eax
call 0x7465b641
invalid
mov eax, dword [esi + 4]
mov dword [edi + 8], eax
mov eax, dword [esi + 4]
mov dword [eax + 4], edi
inc dword [esi + 8]
mov dword [esi + 4], edi
pop edi
pop esi
mov esp, ebp
into
call 0x80ad13
add byte [ecx - 3], bl
call fcn.0041f522
pop ecx
std
push cs
je 0x41b63d
push dword [ebp + 8]
mov ecx, eax
call 0x7465b641
invalid
mov dword [esi], edi
jmp 0x41b61b
push dword [edi + 0x10]
call fcn.0046d1ed
xor eax, eax
inc eax
jmp 0x41b5e3
dec eax
add byte [ebp + 0x5650f845], cl
call dword [0x48d654]
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x18]
jl 0x41b5c9
cmp eax, dword [ebp - 0x10]
jg 0x41b5c9
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x14]
jl 0x41b5c9
cmp eax, dword [ebp - 0xc]
jle 0x47e6bd
jmp 0x41b5c9
cmp edx, 0xcc000100
jae 0x47e7e6
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 4]
movzx ecx, byte [eax + edx]
mov edx, ecx
and ecx, 7
shr edx, 3
mov al, 1
shl al, cl
mov ecx, dword [ebp - 0xc]
or byte [edx + ecx], al
mov ecx, dword [ebp - 4]
mov edx, dword [ebp + 8]
inc ecx
inc edx
mov dword [ebp - 4], ecx
cmp edx, edi
mov dword [ebp + 8], edx
jbe 0x47e7ab
jmp 0x47e7e6
mov edx, dword [ebp - 8]
jmp 0x4088db
or eax, 0xf46fff8b
inc edi
add ch, ah
inc edi
add al, bh
inc edi
add byte [0x330047f3], cl
inc edi
add byte [eax - 0xd], al
inc edi
add byte [esi - 0x1fffb80d], dl
inc edi
add byte [esi], bl
hlt
int3
cmp esi, 0xccccff
ja 0x47f689
mov eax, dword [ecx + 0xc]
test byte [eax + esi], 1
je 0x47f686
add edi, 2
mov dword [ebp - 4], edi
movzx esi, word [edi]
cmp esi, 0xccccff
jbe 0x47f66f
mov eax, dword [ebp - 0x24]
cmp esi, 0x23
jne 0x48c34f
add edi, 2
mov dword [ebp - 4], edi
movzx edx, word [edi]
test dx, dx
je 0x47f6dd
mov esi, dword [ecx + 0x7c]
test esi, esi
je 0x47f6e2
mov ecx, dword [ecx + 0x1c]
cmp edi, ecx
jae 0x114c34a
push eax
mov eax, dword [ebp + 0x28]
sub eax, 0xffffff80
push eax
push ecx
mov edx, esi
mov ecx, edi
call fcn.00409036
mov ecx, dword [ebp + 0x28]
add esp, 0xc
test eax, eax
je 0x47f712
mov eax, dword [ecx + 0xcccc80]
lea edi, [edi + eax*2]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 4], edi
movzx esi, word [edi]
jmp 0x47f664
mov esi, dword [ecx + 0xcccc80]
mov ecx, dword [ecx + 0x1c]
lea eax, [esi + esi]
sub ecx, eax
cmp edi, ecx
mov ecx, dword [ebp + 0x28]
ja 0x47f712
cmp dx, word [ecx + 0x84]
jne 0x47f712
cmp esi, 1
je 0x47f6ce
mov ax, word [edi + 2]
cmp ax, word [ecx + 0x86]
je 0x47f6ce
mov eax, dword [ebp - 0x24]
add edi, 2
mov dword [ebp - 4], edi
test eax, eax
je 0x47f73d
mov ax, word [edi]
mov edx, 0x24fc00
and ax, dx
mov edx, 0x24dc00
cmp ax, dx
mov eax, dword [ebp - 0x24]
jne 0x47f73d
add edi, 2
mov dword [ebp - 4], edi
movzx edx, word [edi]
test dx, dx
je 0x47f6dd
jmp 0x47f6a0
invalid
test byte [edi], cl
test dword [edx], edx
cmp al, 0xff
mov dword [edx], 0xff0076
lea eax, [edx + 4]
mov dword [ebp - 0x88], edx
mov edx, dword [ebp + 0x28]
sub edi, dword [edx + 0x18]
sar edi, 1
xor edx, edx
mov word [eax + 2], dx
lea edx, [eax + 4]
mov word [eax], di
mov edi, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 8], edx
jmp 0x4079d8
jge 0x47f7db
invalid
add cl, byte [ebx - 0x3d7c0383]
add cl, byte [ecx + 0x7ae9f855]
cmp eax, 0xffffffff
mov ebx, dword [ebp - 0xc]
fstp st(0)
test bl, 2
mov eax, 0xcccc
setne al
mov dword [ebp - 0x20], 0xcccc
add eax, 0x19
jge 0x47f832
add edx, 2
mov dword [ebp - 8], edx
jmp 0x407bbb
mov word [edx], ax
mov edi, dword [ebp - 4]
add edx, 2
mov dword [ebp - 8], edx
jmp 0x407bbb
test dword [eax + 0x60], 0x2002400
je 0x407a8d
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x40
mov eax, dword [ebp + 8]
mov dword [eax], edi
xor eax, eax
jmp 0x407a6a
stc
cmp al, 0xff
lea edx, [ebp - 0x80]
mov ecx, edi
call fcn.00470a14
test eax, eax
je 0x407dac
mov ecx, dword [ebp + 0xc]
xor eax, eax
cmp word [edi + 2], 0x3a
setne al
dec eax
and eax, 0xffffffee
add eax, 0x1f
mov dword [ecx], eax
mov eax, dword [ebp + 8]
mov dword [eax], edi
xor eax, eax
jmp 0x407a6a
fcomp dword [ebx]
shl byte [0xffffff70], 5
popfd
int3
pop ds
mov eax, ebx
and eax, 0x24fc00
cmp eax, 0xcc00d800
jne 0x407e33
movzx eax, word [edi + 2]
add edi, 2
and ebx, 0x3ff
shl ebx, 0xa
and eax, 0x3ff
or ebx, eax
add ebx, 0x1cc00
mov dword [ebp - 4], edi
jmp 0x407e33
mov al, 1
add ah, cl
add byte [ecx + 0x7589e875], cl
movsb byte es:[edi], byte [esi]
jmp 0x407e42
mov al, byte [ebp + ecx - 0x138]
not al
or byte [ebp + ecx - 0xd8], al
inc ecx
cmp ecx, 0x20
jb 0x47fb4d
jmp 0x47fb79
mov edi, dword [ebp - 0x80]
mov esi, dword [ebp - 0x18]
mov ecx, 0xcc0001
add edi, 2
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x10], 0x742402
jmp 0x407ece
mov dword [esi - 2], eax
dec ecx
mov dword [ebp - 0x28], ecx
jmp 0x407ec8
dec ecx
sub edx, 2
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x10], edx
jmp 0x407e61
mov edi, dword [ebp - 4]
mov esi, dword [ebp - 0x18]
jmp 0x407ece
cmp word [edi + 2], 0x51
push ecx
jne 0x408557
add edi, 4
mov dword [ebp - 4], edi
cmp word [edi], 0x5c
jne 0x47fec3
cmp word [edi + 2], 0x45
jne 0x47fec3
add edi, 4
mov dword [ebp - 4], edi
cmp word [edi], 0x5c
je 0x47fe94
jmp 0x408557
mov esi, 0xcc0001
mov dword [ebp - 0x34], esi
jmp 0x408557
int3
push ebp
invalid
push cs
cmp eax, 0x2e
je 0x47ff6e
cmp eax, 0x3d
jne 0x4085a8
lea edx, [ebp - 0x80]
mov ecx, edi
call fcn.00470a14
test dword [esi], ecx
jne 0x4820bd
add byte [eax], al
mov edx, dword [ebp - 0x10]
jmp 0x4085a8
xchg al, bh
dec dword [ebx - 0x247a7ba3]
je 0x47ffb6
lea edi, [ebx + 2]
mov dword [ebp - 4], edi
movzx ebx, word [edi]
mov dword [ebp - 0x7c], 0
test ebx, ebx
jne 0x407ee5
mov eax, dword [ebp + 0xc]
mov dword [eax], 6
mov eax, dword [ebp + 8]
mov dword [eax], edi
xor eax, eax
jmp 0x407a6a
rcr byte [edi], 0x66
mov dword [edx - 2], eax
test esi, esi
je 0x4800a0
cmp ebx, 0xccccffff
jbe 0x4800a0
mov ecx, ebx
call fcn.00471851
mov edi, dword [ebp - 4]
lea edx, [edx + eax*2]
mov dword [ebp - 8], edx
jmp 0x407bb8
mov word [edx], bx
mov edi, dword [ebp - 4]
sbb cl, byte [ebx - 0x3d7c0383]
jge 0x4800a2
add edx, 2
mov dword [ebp - 8], edx
jmp 0x407bb8
add cl, byte [ecx + 0x7e9f855]
jnp 0x4800a8
inc dword [ebx + 0xf00dc7d]
test byte [esp + eax*4 - 8], dl
dec dword [ebp - 0x1076b]
dec dword [ebx + 0x1789e8cb]
invalid
les ecx, [ecx*4 - 0xd77b]
jmp [edx + 0x20]
dec dword [ebp - 0x3b7cdfaa]
or al, 0x89
push ebp
clc
jmp 0x480157
mov ecx, dword [ebp - 0x20]
mov eax, edx
sub eax, ecx
sar eax, 1
mov word [ecx + 2], ax
mov edi, dword [ebp - 4]
jmp 0x407bbb
je 0x407a8b
mov esi, dword [ebp + 0xc]
lea eax, [ebp - 0x3c]
push esi
push eax
lea ecx, [edi + 2]
lea edx, [ebp - 0x54]
call fcn.00471044
add esp, 8
cmp dword [esi], 0
mov edi, eax
mov dword [ebp - 4], edi
jne 0x482356
mov edx, dword [ebp - 8]
mov esi, dword [ebp - 0x54]
mov eax, dword [ebp - 0x3c]
jmp 0x4080f7
movzx eax, word [edi]
mov ecx, 0x24bfff
cmp ax, cx
ja 0x480201
mov ecx, dword [ebx + 0xc]
movzx eax, ax
test byte [eax + ecx], 1
je 0x480201
movzx eax, word [edi + 2]
add edi, 2
mov edx, 0x24bfff
cmp ax, dx
jbe 0x4801e7
cmp word [edi], 0x23
jne 0x48ceac
movzx edx, word [edi + 2]
add edi, 2
test dx, dx
je 0x4801d7
mov eax, dword [ebp - 0x24]
mov esi, dword [ebx + 0x7c]
mov ecx, dword [ebx + 0x1c]
test esi, esi
je 0x48024c
cmp edi, ecx
jae 0x480279
push eax
lea eax, [ebx + 0xcc80]
push eax
push ecx
mov edx, esi
mov ecx, edi
call fcn.00409036
add esp, 0xc
test eax, eax
je 0x480276
mov eax, dword [ebx + 0xcc80]
lea edi, [edi + eax*2]
jmp 0x4801d7
mov esi, dword [ebx + 0x80]
lea eax, [esi + esi]
sub ecx, eax
cmp edi, ecx
ja 0x480276
cmp dx, word [ebx + 0x84]
jne 0x480276
cmp esi, 1
je 0x480241
mov ax, word [edi + 2]
cmp ax, word [ebx + 0x86]
je 0x480241
mov eax, dword [ebp - 0x24]
add edi, 2
test eax, eax
je 0x48029b
mov ax, word [edi]
mov ecx, 0x24fc00
cld
and al, 0
and ax, cx
mov ecx, 0x24dc00
cmp ax, cx
mov eax, dword [ebp - 0x24]
jne 0x48029b
add edi, 2
mov dword [edx], 0x6617b70f
test edx, edx
movzx edx, word [edi]
test dx, dx
je 0x4801d7
jmp 0x48021a
adc byte [ebx - 0x3f7cdfb1], cl
add bh, byte [ebx]
enter 0x1c72, 0xf
mov bh, 0x71
dec byte [ebx + 0x14472bc3]
add eax, 2
sar eax, 1
cmp esi, eax
jne 0x480331
pop es
lea eax, [esi + 2]
mov word [ecx - 2], ax
mov esi, dword [ebp - 0x54]
mov eax, dword [ebp - 0x10]
fld qword [0x4b69f8]
mov edi, dword [ebp - 4]
jmp 0x408177
mov edi, 0x39660024
jo 0x480355
mov esi, dword [ebp - 0x14]
jne 0x408644
test edx, ebp
cmp al, 0xff
fstp st(0)
jmp 0x40824a
push eax
call fcn.00425fb8
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x1c]
add eax, 0xcccc92
mov word [edi], ax
add edx, 6
lea ebx, [edi + 4]
add esp, 0xc
mov dword [edi + 2], 0xcc0083
add edi, 6
mov dword [ebp - 8], edx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x20], edi
jmp 0x4086c3
mov esi, dword [ecx + 0x20]
push edi
push dword [ebp - 0x20]
push edx
call fcn.0041eeb8
mov eax, dword [ebp + 0x28]
mov ecx, esi
sub ecx, dword [ebp - 0x40]
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x3c]
sar ecx, 1
sub eax, ecx
mov ecx, dword [ebp + 0x28]
add eax, 0xffffff9c
add esp, 0xc
lea eax, [edx + eax*2]
cmp dword [ecx + 0x20], eax
jbe 0x4804f6
mov eax, dword [ebp - 0x40]
sub eax, edx
sar eax, 1
sub esi, edx
mov dword [ebp - 0x40], eax
sar esi, 1
call fcn.00470acd
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
test dword [esi], ecx
jne 0x408824
mov eax, dword [ebp + 0x28]
mov ecx, dword [ebp - 0x40]
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x3c]
lea ecx, [edx + ecx*2]
mov dword [ebp - 0x40], ecx
lea esi, [edx + esi*2]
mov ecx, esi
sub ecx, dword [ebp - 0x40]
sar ecx, 1
sub eax, ecx
mov ecx, dword [ebp + 0x28]
add eax, 0xffffff9c
lea eax, [edx + eax*2]
cmp dword [ecx + 0x20], eax
ja 0x4804aa
cmp dword [ebp - 0x40], esi
jae 0x480523
mov edx, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x40]
mov cx, word [ebx]
mov edi, dword [ebp + 0x28]
add cx, dx
mov eax, dword [edi + 0x20]
add ebx, 2
mov word [eax], cx
mov ecx, edi
add dword [ecx + 0x20], 2
cmp ebx, esi
jb 0x480501
mov ebx, dword [ebp - 0x50]
mov edi, dword [ebp - 0x44]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x40], esi
mov esi, dword [ebp - 0x14]
inc ebx
lea edx, [edx + esi*2]
mov dword [ebp - 8], edx
mov dword [ebp - 0x50], ebx
cmp ebx, eax
jl 0x48047a
mov edi, dword [ebp - 4]
mov ebx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x3c]
jmp 0x480553
test ecx, ecx
jle 0x48055c
sub ecx, eax
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x1c]
jmp 0x4086cd
sub ecx, 4
fmul qword [ebp - 0x48]
fcomp qword [0x4b69f8]
fnstsw ax
test ah, 0x41
je 0x4820e4
mov edi, dword [ebp + 0x2c]
mov eax, 0x7fffffeb
mov esi, dword [edi]
sub eax, esi
cmp eax, ecx
jl 0x4820e4
lea eax, [ecx + esi]
mov dword [edi], eax
mov edi, dword [ebp - 4]
jmp 0x4086f1
mov eax, dword [ebp + 0x28]
add edx, 2
mov esi, dword [eax + 0x20]
mov word [edx - 2], di
mov dword [ebp - 8], edx
test ebx, ebx
je 0x48060c
mov eax, 0xcccc83
mov word [edx], ax
add edx, 2
cmp dword [ebp - 0x18], 0
jne 0x4805f9
xor eax, eax
jmp 0x480600
mov eax, edx
sub eax, dword [ebp - 0x18]
sar eax, 1
mov dword [ebp - 0x18], edx
mov word [edx], ax
add edx, 2
mov dword [ebp - 8], edx
push ecx
push dword [ebp - 0x20]
push edx
call fcn.0041eeb8
mov eax, dword [ebp + 0x28]
mov ecx, esi
sub ecx, dword [ebp - 0x40]
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x3c]
sar ecx, 1
sub eax, ecx
mov ecx, dword [ebp + 0x28]
add eax, 0xffffff9c
add esp, 0xc
lea eax, [edx + eax*2]
cmp dword [ecx + 0x20], eax
jbe 0x480685
mov eax, dword [ebp - 0x40]
sub eax, edx
sar eax, 1
sub esi, edx
mov dword [ebp - 0x40], eax
sar esi, 1
call fcn.00470acd
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
test dword [esi], ecx
jne 0x408824
mov eax, dword [ebp + 0x28]
mov ecx, dword [ebp - 0x40]
mov edx, dword [eax + 0x10]
mov eax, dword [eax + 0x3c]
lea ecx, [edx + ecx*2]
mov dword [ebp - 0x40], ecx
lea esi, [edx + esi*2]
mov ecx, esi
sub ecx, dword [ebp - 0x40]
sar ecx, 1
sub eax, ecx
mov ecx, dword [ebp + 0x28]
add eax, 0xffffff9c
lea eax, [edx + eax*2]
cmp dword [ecx + 0x20], eax
ja 0x480639
mov ecx, dword [ebp - 0x40]
cmp ecx, esi
jae 0x4806c3
mov edx, dword [ebp - 0x14]
mov edi, dword [ebp + 0x28]
mov cx, word [ecx]
xor eax, eax
test ebx, ebx
setne al
lea eax, [eax*2 + 0xcc0001]
add cx, ax
mov eax, dword [edi + 0x20]
add cx, dx
mov word [eax], cx
mov ecx, dword [ebp - 0x40]
add dword [edi + 0x20], 2
add ecx, 2
mov dword [ebp - 0x40], ecx
cmp ecx, esi
jb 0x480692
mov edi, dword [ebp - 0x44]
dec ebx
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x50]
lea edx, [edx + eax*2]
mov dword [ebp - 0x40], esi
mov dword [ebp - 8], edx
jns 0x4805d0
mov edi, dword [ebp - 4]
jmp 0x4086ee
retf
xchg esp, eax
int3
jmp 0x40824a
invalid
sal byte [ecx - 8], cl
inc dword [ebx + 0xd7501fe]
cmp ecx, 0xffffffff
jne 0x4808aa
add eax, 0x64
jmp 0x408533
add eax, 0x68
mov word [edx], ax
lea eax, [ecx + 1]
neg eax
sbb eax, eax
and eax, ecx
mov word [edx + 2], si
mov word [edx + 4], ax
mov dword [ebp - 0x3c], eax
add edx, 6
jmp 0x408539
retf
cmp ecx, 0x1e
ja 0x4081b0
inc eax
js 0x480967
inc dword [ebx + 0xf01ac7d]
invalid
cmp dword [ebp - 0x54], 1
jle 0x4081b0
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x60], ebx
mov eax, dword [eax + 0x68]
or eax, dword [ebp - 0x90]
mov dword [ebp - 0x58], eax
jmp 0x4081b0
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x14]
cmp ecx, 1
jne 0x4809c3
mov ecx, dword [ebp - 0x20]
lea eax, [edx + 0x25]
lea edx, [ecx + 2]
mov word [ecx], ax
mov dword [ebp - 8], edx
jmp 0x408217
lea eax, [edx + 0x27]
mov edx, dword [ebp - 0x20]
add edx, 4
mov word [edx - 4], ax
mov word [edx - 2], cx
mov dword [ebp - 8], edx
jmp 0x408217
jp 0x480b03
add edx, 4
sub ecx, eax
mov eax, dword [ebp - 0x10]
add al, 0x2b
enter 0x458b, 0xfffffffffffffff0
mov dword [ebp - 0x3c], ecx
cmp ecx, 1
jne 0x480b22
add eax, 0x25
mov word [edx], ax
add edx, 2
mov dword [ebp - 8], edx
jmp 0x408217
inc dword [ebx - 0x7699d840]
add ah, byte [esi - 0x77]
dec edx
add al, byte [ebx + 0x558904c2]
clc
add eax, 0x27
mov word [edx], ax
mov word [edx + 2], cx
add edx, 4
mov dword [ebp - 8], edx
jmp 0x408217
loopne 0x480bab
clc
inc dword [ebx + 0x48d07e3]
sbb edx, dword [eax - 0x73]
test dword [esi + edi*8 + 0x5250ffff], edi
call fcn.0041eeb8
mov edx, dword [ebp - 8]
add esp, 0xc
lea edx, [edx + ebx*2]
jmp 0x40822f
mov dword [eax - 0x1b], esp
dec ecx
add byte [eax + 0x742402], bh
add ecx, eax
jmp 0x480bf8
mov eax, dword [ebp - 0x4c]
lea eax, [eax + ecx*2]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x4c]
mov esi, edx
sub esi, ecx
sar esi, 1
test esi, esi
jle 0x40824a
movzx eax, word [ecx]
cmp eax, 0x76
jae 0x480c32
mov al, byte [eax + 0x4b60e0]
test al, al
je 0x480c32
movzx eax, al
mov word [ecx], ax
mov edi, dword [ebp - 4]
jmp 0x40824a
push dword [ebp - 0x40]
xor eax, eax
mov word [edx], ax
mov ecx, dword [ebp - 0x4c]
push ebx
push dword [ebp - 0x24]
lea edx, [eax + 2]
call fcn.0041e431
add esp, 0xc
lea eax, [esi + esi]
push eax
mov eax, dword [ebp - 0x4c]
push eax
add eax, 4
push eax
call fcn.00425fb8
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 8]
cli
dec dword [ebx + 0x558bb445]
clc
mov ecx, 0xcc81
mov word [eax], cx
add esi, 2
mov eax, 0xcccc78
mov word [edx + 4], ax
mov word [edx + 6], si
mov eax, dword [ebp - 0x4c]
add esp, 0xc
add edx, 8
mov word [eax + 2], si
jo 0x480c8a
mov edi, dword [ebp - 4]
cld
mov dword [ebp - 8], edx
jmp 0x40824a
xor byte [edx + 0x12], dh
cmp cx, 0x39
ja 0x480d2b
movzx ecx, word [eax + 2]
add eax, 2
cmp ecx, 0x30
jae 0x480d19
cmp word [eax], bx
je 0x480d40
mov eax, edx
mov edx, dword [ebp - 8]
mov dword [eax], 0x24bf39
jmp 0x407bb8
mov ecx, dword [ebp + 0x28]
add edi, 2
mov dword [ebp - 4], edi
jmp 0x481ce5
clc
jmp 0x407bbb
mov dword [ebp - 4], edi
movzx eax, word [edi]
xor edx, edx
mov dword [ebp - 0x1c], edx
cmp eax, 0x3c
jne 0x480d90
lea ebx, [edx + 0x3e]
jmp 0x481a14
add byte [eax], al
xor ebx, ebx
cmp eax, 0x27
setne bl
dec ebx
and ebx, 0xffffffaa
add ebx, 0x7d
jmp 0x481a14
dec eax
int3
add dword [eax], eax
int3
add ah, cl
add cl, ch
xlatb
jb 0x480dbd
inc dword [ebx - 0x70f0dd02]
xlatb
jb 0x480dc6
cmp esi, 0x22
jg 0x4080a6
dec dword [ebx + 0x3c8bfc45]
mov ch, 0xfc
dec byte [ebx]
mov eax, dword [ebp - 4]
cld
mov edi, dword [esi*4 + 0x4bfefc]
mov edx, dword [ebp - 8]
add eax, 2
mov dword [ebp - 0x7c], eax
sub edi, 2
jmp 0x407bbb
xor ecx, ecx
mov dword [ebp - 0x20], edx
cmp eax, dword [ebp - 0x110]
movzx eax, word [ebp - 0xf0]
setne cl
add ecx, 0xf
mov word [edx], cx
mov word [edx + 2], ax
movzx eax, word [ebp - 0xdc]
mov word [edx + 4], ax
mov edi, dword [ebp - 4]
add edx, 6
mov dword [ebp - 8], edx
jmp 0x407bbb
jmp dword [esi - 0x75]
mov ax, word [edi]
mov esi, 0xcccc02
mov word [ebp - 0x106], ax
mov dword [ebp - 0x10], esi
jmp 0x407abd
dec dword [ebx - 0x1057b]
inc dword [ecx + 0x3ffe1]
add byte [0x3ff], ah
shl ecx, 0xa
add eax, dword [eax]
add cl, al
loope 0x480ee8
or ecx, eax
add ecx, 0x1cc00
jmp 0x407ae6
imul edi, eax, 0xffffffff
mov edi, dword [ebp - 4]
mov dword [ebp - 0x74], 0xffffffff
mov dword [ebp - 0x30], 0xffffffff
jmp 0x407bbb
inc ebp
sar bh, 1
invalid
jmp 0x407b75
invalid
mov ebx, dword [ebp - 0xc]
jmp 0x407d36
add cl, byte [ecx - 0x387e07ab]
push 0xffffffffffffffff
invalid
add edi, 2
mov dword [ebp - 4], edi
movzx eax, word [edi]
mov esi, edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x6c], esi
cmp eax, 0x30
jb 0x481a33
cmp eax, 0x39
jbe 0xbc2167
mov dword [ebp - 0x44], 0x24bfff
cmp ax, word [ebp - 0x44]
ja 0x481a68
mov ecx, dword [ecx + 0xc]
movzx eax, ax
test byte [eax + ecx], 0x10
je 0x481a62
add edi, 2
mov dword [ebp - 4], edi
movzx eax, word [edi]
mov dword [ebp - 0x44], 0x24bfff
cmp ax, word [ebp - 0x44]
jbe 0x481a43
mov ecx, dword [ebp + 0x28]
mov dword [ebp - 0x18], edi
mov eax, edi
sub eax, esi
sar eax, 1
cmp dword [ebp + 0x2c], 0
mov dword [ebp - 0x64], eax
je 0x481ae6
test dword [esi], ecx
je 0xbc226c
cmp word [edi], bx
jne 0x1142257
cmp eax, 0x20
jg 0x482200
mov ebx, dword [ecx + 0x30]
mov esi, dword [ecx + 0x28]
xor edi, edi
test ebx, ebx
jle 0x481ac5
cmp eax, dword [esi + 4]
jne 0x481ab7
mov edx, dword [esi]
mov ecx, dword [ebp - 0x6c]
push eax
call fcn.0047135f
add esp, 4
test eax, eax
je 0x481abf
mov eax, dword [ebp - 0x64]
inc edi
add esi, 0xc
cmp edi, ebx
jl 0x481a9d
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0x28]
cmp edi, ebx
jge 0x481ace
mov edi, dword [esi + 8]
jmp 0x481ad0
xor edi, edi
mov dword [ebp - 0x38], edi
test edx, edx
jne 0x746c1dc1
inc dword [ecx + 0x54]
mov ebx, dword [ebp - 0xc]
jmp 0x481c57
mov eax, dword [ecx + 0x30]
mov ebx, dword [ecx + 0x2c]
xor esi, esi
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x44], eax
test eax, eax
jle 0x481b3a
mov edi, dword [ebp + 0x28]
push dword [ebp - 0x64]
mov ecx, dword [ebp - 0x6c]
lea edx, [ebx + 2]
call fcn.0047135f
add esp, 4
test eax, eax
jne 0x481b20
mov eax, dword [ebp - 0x64]
cmp word [ebx + eax*2 + 2], 0
jne 0x481b20
mov eax, dword [ebp - 0x44]
jmp 0x481b2e
mov eax, dword [edi + 0x34]
inc esi
lea ebx, [ebx + eax*2]
mov eax, dword [ebp - 0x44]
cmp esi, eax
jl 0x481afb
mov edi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0x28]
mov dword [ebp - 0x78], ebx
cmp esi, eax
jge 0x1141d91
movzx edi, word [ebx]
mov dword [ebp - 0x38], edi
test edx, edx
jne 0x1141dc1
cmp dword [ecx + 0x78], edx
je 0x481ade
mov ecx, 0xcc0001
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp + 0x28]
mov dword [ebp - 0x50], esi
mov edi, dword [ecx + 0x34]
add edi, edi
inc esi
lea ecx, [ebx + edi]
mov dword [ebp - 0x1c], ecx
cmp esi, eax
jge 0x1141c4e
lea eax, [ebx + 2]
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 0x44], eax
lea edx, [ecx + 2]
mov ecx, eax
call fcn.0047132f
test dword [esi], ecx
jne 0x481ba3
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0x28]
add ecx, edi
inc esi
inc ebx
cmp esi, dword [eax + 0x30]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x1c], ecx
jl 0x481b80
mov dword [ebp - 0x2c], ebx
cmp ebx, 1
mov ebx, dword [ebp - 0x78]
jle 0x481c4e
cmp dword [ebp - 0x30], 0xfffffffe
jne 0x481bbf
mov dword [ebp - 0x30], 0xffffffff
test byte [ebp - 0xc], 1
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x1c]
mov eax, 0xcccc
setne al
mov dword [ebp - 0x20], edx
add edx, 6
mov dword [ebp - 8], edx
add eax, 0x73
mov word [edx - 6], ax
mov eax, dword [ebp - 0x50]
mov word [edx - 4], ax
mov word [edx - 2], cx
cmp ebx, esi
jae 0x480f50
mov edi, dword [ebp + 0x28]
movzx edx, word [ebx]
mov dword [ebp - 0x38], edx
mov eax, 0xcc0001
cmp edx, 0x20
jge 0x481c0e
mov ecx, edx
shl eax, cl
or dword [edi + 0x50], eax
cmp edx, dword [edi + 0x4c]
jle 0x481c19
mov dword [edi + 0x4c], edx
mov ecx, dword [edi + 0x24]
test ecx, ecx
je 0x481c39
movzx eax, word [ecx + 4]
cmp eax, edx
je 0x481c30
mov ecx, dword [ecx]
test ecx, ecx
jne 0x481c20
jmp 0x481c39
mov eax, 0xcc0001
mov word [ecx + 6], ax
mov eax, dword [edi + 0x34]
lea ebx, [ebx + eax*2]
cmp ebx, esi
jb 0x481bfa
mov edi, dword [ebp - 4]
mov edx, dword [ebp - 8]
jmp 0x407bb8
mov edi, dword [ebp - 0x38]
mov ebx, dword [ebp - 0xc]
mov ecx, dword [ebp + 0x28]
cmp dword [ebp - 0x30], 0xfffffffe
jne 0x481c64
mov dword [ebp - 0x30], 0xffffffff
mov edx, dword [ebp - 8]
test bl, 1
mov eax, 0xcccc
setne al
mov dword [ebp - 0x20], edx
add edx, 4
mov dword [ebp - 8], edx
add eax, 0x71
mov word [edx - 4], ax
mov word [edx - 2], di
cmp edi, 0x20
jge 0x481c9b
mov esi, 0xcc0001
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, dword [ebp + 0x28]
jmp 0x481ca2
mov eax, 0xcc0001
mov esi, eax
or dword [ecx + 0x50], eax
cmp edi, dword [ecx + 0x4c]
jle 0x481cad
mov dword [ecx + 0x4c], edi
mov ecx, dword [ecx + 0x24]
test ecx, ecx
je 0x407d36
movzx eax, word [ecx + 4]
cmp eax, edi
je 0x481cce
mov ecx, dword [ecx]
test ecx, ecx
jne 0x481cb8
mov edi, dword [ebp - 4]
jmp 0x407bbb
mov word [ecx + 6], si
mov edi, dword [ebp - 4]
jmp 0x407bbb
movzx edx, word [edi]
mov esi, edx
cmp esi, 0x2b
jne 0x481d17
add edi, 2
mov dword [ebp - 4], edi
movzx eax, word [edi]
cmp eax, 0x30
jb 0x481d02
cmp eax, 0x39
jbe 0x481d3b
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x3f
mov eax, dword [ebp + 8]
mov dword [eax], edi
xor eax, eax
jmp 0x407a6a
cmp esi, 0x2d
jne 0x481d3b
movzx ecx, word [edi + 2]
cmp ecx, 0x30
jb 0x407c48
cmp ecx, 0x39
ja 0x407c48
mov ecx, dword [ebp + 0x28]
add edi, 2
mov dword [ebp - 4], edi
movzx eax, word [edi]
xor edx, edx
mov dword [ebp - 0x38], edx
cmp eax, 0x30
jb 0x481d6e
cmp ax, 0x39
ja 0x481d68
lea edx, [edx + edx*4]
movzx eax, ax
add edi, 2
lea edx, [edx - 0x18]
mov dword [ebp - 4], edi
lea edx, [eax + edx*2]
movzx eax, word [edi]
cmp eax, 0x30
jae 0x481d48
mov ecx, dword [ebp + 0x28]
mov dword [ebp - 0x38], edx
cmp word [edi], bx
jne 0xcc4822c6
cmp esi, 0x2d
jne 0x481da6
test edx, edx
je 0x482281
mov eax, dword [ecx + 0x40]
sub eax, edx
inc eax
mov dword [ebp - 0x38], eax
test eax, eax
jg 0x481dbe
mov eax, dword [ebp + 0xc]
mov dword [eax], 0xf
mov eax, dword [ebp + 8]
mov dword [eax], edi
xor eax, eax
jmp 0x407a6a
cmp esi, 0x2b
jne 0x481dbe
test edx, edx
je 0x482281
mov edi, dword [ebp - 0x38]
add edi, dword [ecx + 0x40]
mov dword [ebp - 0x38], edi
jmp 0x481dc1
mov edi, dword [ebp - 0x38]
cmp dword [ebp + 0x2c], 0
mov edx, dword [ebp - 8]
mov esi, dword [ecx + 0x14]
mov dword [ebp - 0x20], edx
jne 0xcc489278
mov ebx, dword [ebp - 0x24]
xor eax, eax
mov word [edx], ax
test edi, edi
je 0x481df6
mov ecx, dword [ecx + 0x14]
push edi
mov edx, ebx
call fcn.00470537
mov edx, dword [ebp - 8]
mov ecx, dword [ebp + 0x28]
add esp, 4
mov esi, eax
test esi, esi
jne 0x481e4e
cmp edi, dword [ecx + 0x44]
jg 0x482296
mov eax, dword [ecx + 0x14]
mov ebx, dword [ebp + 0x28]
mov ecx, dword [ecx + 0x3c]
lea esi, [eax + edi*2]
mov eax, dword [ebx + 0x10]
lea eax, [eax + ecx*2]
add eax, 0xffffff38
cmp dword [ebx + 0x20], eax
jb 0x481e36
mov ecx, ebx
call fcn.00470acd
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
test dword [esi], ecx
jne 0x408824
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x20]
mov ecx, edx
sub ecx, dword [ebx + 0x14]
add ecx, 2
sar ecx, 1
mov word [eax], cx
mov ecx, ebx
add dword [ecx + 0x20], 2
jmp 0x481e78
cmp word [esi + 2], 0
jne 0x481e78
cmp dword [ebp + 0x24], 0
jg 0x481e78
push ecx
push ebx
push dword [ebp + 0x20]
mov ecx, esi
call fcn.00470a8f
add esp, 0xc
test eax, eax
jne 0x4822ae
mov edx, dword [ebp - 8]
mov ecx, dword [ebp + 0x28]
mov ebx, dword [ebp - 0xc]
mov eax, 0xcccc75
mov word [edx], ax
sub esi, dword [ecx + 0x14]
add edx, 4
sar esi, 1
cmp dword [ebp - 0x30], 0xfffffffe
mov word [edx - 2], si
mov dword [ebp - 8], edx
mov dword [ebp - 0x9c], 0xcccc
jne 0x407d36
int3
mov edi, dword [ebp - 4]
mov dword [ebp - 0x30], 0xffffffff
jmp 0x407bbb
add byte [ecx + 0x4006448], al
add byte [eax], al
jmp 0x407c83
jmp 0x407c83
add byte [edx], al
int3
sub al, 0x85
sal byte [ecx + ecx - 0x7d], 0x38
add al, 0xf
test dword [edx - 0x760007a3], edx
pop ecx
pushal
jmp 0x407cec
dec dword [ecx - 0x45169fa7]
pop ebp
clc
inc edi
test dword [eax - 1], esi
invalid
mov dword [edx], 0xcccc83be
add byte [ecx + 0x40e9fc7d], cl
arpl ax, di
dec dword [ebx - 0x7c4107ab]
int3
clc
mov esi, 0xcccc83
jmp 0x408294
cmp ecx, 1
jg 0x11422f3
mov esi, eax
jmp 0x408372
leave
js 0x482012
mov ebx, dword [ebp - 0xec]
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x9c], 0xcc0001
mov dword [ebp - 0x74], 0xffffffff
jmp 0x40848a
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x74], 0xffffffff
jmp 0x40848a
shr cl, 0xca
pop ecx
clc
inc edi
add byte [edi - 0x34], al
int3
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x53
add byte [eax], al
mov eax, dword [ebp + 8]
mov dword [eax], edi
xor eax, eax
jmp 0x407a6a
mov dword [eax], edi
xor eax, eax
jmp 0x407a6a
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp - 4]
mov dword [eax], 0x14
mov eax, dword [ebp + 8]
mov dword [eax], edi
xor eax, eax
jmp 0x407a6a
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x30
mov eax, dword [ebp + 8]
mov dword [eax], edi
xor eax, eax
jmp 0x407a6a
mov eax, dword [ebp + 0xc]
mov dword [eax], 0x3a
mov eax, dword [ebp + 8]
mov dword [eax], edi
xor eax, eax
jmp 0x407a6a
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp - 4]
mov dword [eax], 0xf
mov eax, dword [ebp + 8]
mov dword [eax], edi
xor eax, eax
jmp 0x407a6a
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp - 4]
mov dword [eax], 0x28
mov eax, dword [ebp + 8]
mov dword [eax], edi
xor eax, eax
jmp 0x407a6a
cmp byte [ebx], dh
shr cl, 0x77
push edi
clc
dec dword [ebx + 0x7d8b0c45]
cld
mov dword [eax], 0x36
mov eax, dword [ebp + 8]
mov dword [eax], edi
xor eax, eax
jmp 0x407a6a
inc ebp
or byte [ecx - 0x163fccc8], cl
pop edi
push edi
clc
dec dword [ebx + 0x7d8b0c45]
cld
mov dword [eax], 0x1b
add byte [eax], al
mov eax, dword [ebp + 8]
mov dword [eax], edi
xor eax, eax
jmp 0x407a6a
push edi
clc
dec dword [ebx + 0xc70c45]
push cs
add byte [eax], al
add byte [ebx + 0x38890845], cl
xor eax, eax
jmp 0x407a6a
fstp st(0)
mov eax, dword [ebp + 8]
mov dword [eax], edi
xor eax, eax
jmp 0x407a6a
idiv edi
movzx edi, si
jge 0x48c2a9
mov edx, dword [ebp - 4]
cmp edi, edx
jbe 0x40a0a4
jmp 0x40a30d
shr al, 1
loope 0x48c31f
idiv edi
mov ecx, dword [ebp + 0x10]
add esp, 0xc
test eax, eax
jne 0x40a1cd
mov eax, dword [ebp - 0xe0]
jmp 0x40a0ec
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
fcom qword [ebp - 0x695dfff5]
or eax, dword [eax]
nop
xchg esi, eax
or eax, dword [eax]
adc byte [esi - 0x698ffff5], 0xb
add byte [esi - 0x6a], bl
or eax, dword [eax]
dec esp
xchg esi, eax
or eax, dword [eax]
cmp al, 0x96
or eax, dword [eax]
xor byte [ebx + ecx + 0xb944000], dl
add byte [esi - 0x6c], cl
or eax, dword [eax]
bound edx, qword [ebx + ecx + 0xb947800]
add byte [eax - 0x57fff46c], bl
xchg esp, eax
or eax, dword [eax]
rcl byte [ebx + ecx + 0xb94d200], 0
out 0x94, al
or eax, dword [eax]
invalid