Function at 0x100479af
Capabilities:
Encode data using base64

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10096879
mov eax, dword fs:[0]
push eax
sub esp, 0x6a8
mov eax, dword [0x100b3008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x34], esi
mov eax, dword [ebp + 8]
mov dword [ebp - 0x44], eax
lea eax, [esi + 4]
mov byte [esi], 0
mov dword [ebp - 0x2c], eax
mov eax, dword [esi + 4]
cmp eax, dword [esi + 8]
jne 0x100475f8
mov esi, dword [ebp - 0x2c]
mov edi, 1
push edi
call dword [0x100c02c0]
mov eax, dword [0x100bef2c]
mov dword [esp], 0x40c90fdb
push ecx
mov dword [ebp - 0x2c], eax
mov dword [esp], 0
call dword [ebp - 0x2c]
mov eax, dword [0x100bef2c]
fstp dword [ebp - 0x3c]
mov dword [ebp - 0x2c], eax
mov dword [esp + 4], 0x3f800000
mov dword [esp], 0
call dword [ebp - 0x2c]
fstp dword [ebp - 0x40]
mov eax, dword [esi + 4]
add esp, 8
cmp eax, dword [esi + 8]
je 0x100475dc
movss xmm0, dword [ebp - 0x40]
movss dword [eax], xmm0
movss xmm0, dword [ebp - 0x3c]
movss dword [eax + 4], xmm0
add eax, 8
mov dword [esi + 4], eax
jmp 0x100475ec
lea ecx, [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x40]
push ecx
push eax
mov ecx, esi
call fcn.10059270
inc edi
cmp edi, 0x100
jle 0x10047575
mov esi, dword [ebp - 0x34]
mov edx, dword [0x100c917c]
mov eax, edx
mov ecx, dword [0x100c9178]
sub eax, ecx
cmp eax, 8
jb 0x10047620
push ecx
call fcn.10011d40
mov eax, dword [0x100c9178]
add esp, 4
mov dword [0x100c917c], eax
cmp dword [0x100c060c], 0
je 0x10050177
cmp dword [0x100c0610], 0
je 0x10050177
mov ecx, dword [0x100b3570]
mov eax, 0x2aaaaaab
sub ecx, dword [0x100b356c]
mov edi, dword [0x104282f8]
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, edi
jbe 0x1005066d
lea eax, [edi + edi*2]
mov edi, dword [sym.imp.VCRUNTIME140.dll___std_type_info_compare]
shl eax, 4
add eax, dword [0x100b356c]
add eax, 8
mov dword [ebp - 0x2c], eax
je 0x1004769e
mov eax, dword [eax + 0x24]
and eax, 0xfffffffc
je 0x1004769e
add eax, 4
push 0x100b3834
push eax
call edi
add esp, 8
test eax, eax
jne 0x1004769e
mov eax, dword [ebp - 0x2c]
jmp 0x100476a0
xor eax, eax
cmp byte [eax], 0
je 0x10050177
mov edx, dword [0x100c060c]
cmp byte [edx + 0x32a5], 0
jne 0x10050177
mov eax, dword [0x100c0610]
mov ecx, dword [0x100bdbb8]
mov eax, dword [eax + 0xc8]
mov dword [ebp - 0x2c], eax
cmp eax, 7
jl 0x100476e3
mov eax, dword [ecx + 0x10]
cmp word [edx + eax], 0x1f
jne 0x10050177
mov ecx, dword [ecx + 0x34]
mov eax, dword [0x100c0608]
cmp byte [ecx + eax + 1], 9
je 0x10050177
mov eax, dword [0x100bdbb8]
mov eax, dword [eax + 0x10]
movsx eax, word [eax + edx]
mov dword [ebp - 0x34], eax
cmp eax, dword [esi + 0x1c]
jne 0x10047717
cmp byte [0x100b3028], 0
je 0x1005014c
mov ecx, dword [ebp - 0x2c]
mov dword [esi + 0x20], ecx
mov dword [esi + 0x1c], eax
cmp eax, 0x1f
jne 0x10047751
mov dword [esi + 0x50], 0x64
mov dword [esi + 0x54], 0x64
mov dword [esi + 0x58], 0x64
mov dword [esi + 0x48], 0x50
mov dword [esi + 0x4c], 0x50
mov byte [esi + 0x39], 0
jmp case.default.0x1004775e
dec ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 5
ja case.default.0x1004775e
jmp dword [ecx*4 + 0x10050674]
cmp eax, 1
je 0x100477e8
cmp eax, 0x40
je 0x100477e8
mov ecx, dword [0x100b3570]
mov eax, 0x2aaaaaab
sub ecx, dword [0x100b356c]
imul ecx
mov ecx, dword [0x1042856c]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, ecx
jbe 0x1005066d
lea eax, [ecx + ecx*2]
shl eax, 4
add eax, dword [0x100b356c]
add eax, 8
mov dword [ebp - 0x2c], eax
je 0x10047855
mov eax, dword [eax + 0x24]
and eax, 0xfffffffc
je 0x10047855
add eax, 4
push 0x100b3834
push eax
call edi
add esp, 8
test eax, eax
jne 0x10047855
mov eax, dword [ebp - 0x2c]
mov edx, 0x24
mov ecx, esi
mov al, byte [eax]
mov byte [ecx + edx], al
jmp 0x10047b65
mov ecx, dword [0x100b3570]
mov eax, 0x2aaaaaab
sub ecx, dword [0x100b356c]
imul ecx
mov ecx, dword [0x10428570]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, ecx
jbe 0x1005066d
lea eax, [ecx + ecx*2]
shl eax, 4
add eax, dword [0x100b356c]
add eax, 8
mov dword [ebp - 0x2c], eax
je 0x10047855
mov eax, dword [eax + 0x24]
and eax, 0xfffffffc
je 0x10047855
add eax, 4
push 0x100b3834
push eax
call edi
add esp, 8
test eax, eax
jne 0x10047855
mov eax, dword [ebp - 0x2c]
mov edx, 0x24
mov ecx, esi
mov al, byte [eax]
mov byte [ecx + edx], al
jmp 0x10047b65
xor eax, eax
mov edx, 0x24
mov ecx, esi
mov al, byte [eax]
mov byte [ecx + edx], al
jmp 0x10047b65
mov ecx, dword [0x100b3570]
mov eax, 0x2aaaaaab
sub ecx, dword [0x100b356c]
imul ecx
mov ecx, dword [0x10428574]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, ecx
jbe 0x1005066d
lea eax, [ecx + ecx*2]
shl eax, 4
add eax, dword [0x100b356c]
add eax, 8
mov dword [ebp - 0x2c], eax
je 0x10047b5e
mov eax, dword [eax + 0x24]
and eax, 0xfffffffc
je 0x10047b5e
add eax, 4
push 0x100b3834
push eax
call edi
add esp, 8
test eax, eax
jne 0x10047b5e
mov eax, dword [ebp - 0x2c]
jmp 0x10047b60
mov ecx, dword [0x100b3570]
mov eax, 0x2aaaaaab
sub ecx, dword [0x100b356c]
imul ecx
mov ecx, dword [0x10428578]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, ecx
jbe 0x1005066d
lea eax, [ecx + ecx*2]
shl eax, 4
add eax, dword [0x100b356c]
add eax, 8
mov dword [ebp - 0x2c], eax
je 0x10047b5e
mov eax, dword [eax + 0x24]
and eax, 0xfffffffc
je 0x10047b5e
add eax, 4
push 0x100b3834
push eax
call edi
add esp, 8
test eax, eax
jne 0x10047b5e
mov eax, dword [ebp - 0x2c]
jmp 0x10047b60
mov ecx, dword [0x100b3570]
mov eax, 0x2aaaaaab
sub ecx, dword [0x100b356c]
imul ecx
mov ecx, dword [0x1042857c]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, ecx
jbe 0x1005066d
lea eax, [ecx + ecx*2]
shl eax, 4
add eax, dword [0x100b356c]
add eax, 8
mov dword [ebp - 0x2c], eax
je 0x10047b5e
mov eax, dword [eax + 0x24]
and eax, 0xfffffffc
je 0x10047b5e
add eax, 4
push 0x100b3834
push eax
call edi
add esp, 8
test eax, eax
jne 0x10047b5e
mov eax, dword [ebp - 0x2c]
jmp 0x10047b60
mov ecx, dword [0x100b3570]
sub ecx, dword [0x100b356c]
cmp eax, 9
jne 0x10047a2d
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [0x10428580]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, ecx
jbe 0x1005066d
lea eax, [ecx + ecx*2]
shl eax, 4
add eax, dword [0x100b356c]
add eax, 8
mov dword [ebp - 0x2c], eax
je 0x10047af0
mov eax, dword [eax + 0x24]
and eax, 0xfffffffc
je 0x10047af0
add eax, 4
push 0x100b3834
push eax
call edi
add esp, 8
test eax, eax
jne 0x10047af0
mov eax, dword [ebp - 0x2c]
mov ecx, esi
mov edx, 0x24
mov al, byte [eax]
mov byte [ecx + edx], al
jmp 0x10047b65
cmp eax, 0x28
mov eax, 0x2aaaaaab
jne 0x10047a97
imul ecx
mov ecx, dword [0x10428584]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, ecx
jbe 0x1005066d
lea eax, [ecx + ecx*2]
shl eax, 4
add eax, dword [0x100b356c]
add eax, 8
mov dword [ebp - 0x2c], eax
je 0x10047af0
mov eax, dword [eax + 0x24]
and eax, 0xfffffffc
je 0x10047af0
add eax, 4
push 0x100b3834
push eax
call edi
add esp, 8
test eax, eax
jne 0x10047af0
mov eax, dword [ebp - 0x2c]
mov ecx, esi
mov edx, 0x24
mov al, byte [eax]
mov byte [ecx + edx], al
jmp 0x10047b65
imul ecx
mov ecx, dword [0x10428588]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, ecx
jbe 0x1005066d
lea eax, [ecx + ecx*2]
shl eax, 4
add eax, dword [0x100b356c]
add eax, 8
mov dword [ebp - 0x2c], eax
je 0x10047af0
mov eax, dword [eax + 0x24]
and eax, 0xfffffffc
je 0x10047af0
add eax, 4
push 0x100b3834
push eax
call edi
add esp, 8
test eax, eax
jne 0x10047af0
mov eax, dword [ebp - 0x2c]
mov ecx, esi
mov edx, 0x24
mov al, byte [eax]
mov byte [ecx + edx], al
jmp 0x10047b65
xor eax, eax
mov ecx, esi
mov edx, 0x24
mov al, byte [eax]
mov byte [ecx + edx], al
jmp 0x10047b65
mov ecx, dword [0x100b3570]
mov eax, 0x2aaaaaab
sub ecx, dword [0x100b356c]
imul ecx
mov ecx, dword [0x1042858c]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, ecx
jbe 0x1005066d
lea eax, [ecx + ecx*2]
shl eax, 4
add eax, dword [0x100b356c]
add eax, 8
mov dword [ebp - 0x2c], eax
je 0x10047b5e
mov eax, dword [eax + 0x24]
and eax, 0xfffffffc
je 0x10047b5e
add eax, 4
push 0x100b3834
push eax
call edi
add esp, 8
test eax, eax
jne 0x10047b5e
mov eax, dword [ebp - 0x2c]
jmp 0x10047b60
xor eax, eax
mov al, byte [eax]
mov byte [esi + 0x24], al
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
jmp dword [ecx*4 + 0x1005068c]
mov ecx, esi
call fcn.10047190
mov edx, dword [0x100c060c]
mov ecx, edx
call fcn.1008f1a0
test al, al
je 0x10050194
mov ecx, dword [0x10428530]
call fcn.10011c80
cmp byte [eax], 0
je 0x10050177
cmp byte [ebp + 0xc], 0
je 0x10050177
push dword [ebp - 0x44]
mov ecx, esi
call fcn.10043660
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10093318
mov esp, ebp
pop ebp
ret 8
mov eax, dword [0x100bdbb8]
mov eax, dword [eax + 0x10]
cmp word [edx + eax], 0x1f
jne 0x100501b3
mov ecx, dword [0x1042852c]
call fcn.10011c80
cmp byte [eax], 0
je 0x10050177
mov eax, dword [esi + 0x10]
lea ecx, [esi + 0x10]
mov dword [ebp - 0x50], ecx
cmp eax, dword [ecx + 4]
je 0x10050177
push 0x3c050
call fcn.10093326
add esp, 4
mov dword [ebp - 0x38], eax
mov ecx, eax
mov dword [ebp - 4], 0
call fcn.10050ad0
push 0x3c050
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], 0xffffffff
call fcn.10093326
add esp, 4
mov dword [ebp - 0x38], eax
mov ecx, eax
mov dword [ebp - 4], 1
call fcn.10050ad0
mov edx, 1
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x2c], edx
nop dword [eax]
mov ecx, dword [0x100bdbcc]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov edi, eax
test edi, edi
je 0x1005055b
mov edx, dword [edi + 8]
lea ecx, [edi + 8]
mov edx, dword [edx + 0x24]
call edx
test al, al
jne 0x1005055b
mov ecx, edi
call fcn.1008e800
test al, al
jne 0x1005055b
mov eax, dword [0x100bdbb8]
mov eax, dword [eax + 0xf0]
cmp byte [edi + eax], 0
jne 0x1005055b
push 0
call fcn.1008e740
test al, al
jne 0x1005055b
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x28]
call eax
push 0x100c697c
lea ecx, [ebp - 0x64]
push ecx
mov ecx, eax
call fcn.1002c290
lea ecx, [ebp - 0x64]
call fcn.1002c360
movaps xmm1, xmm0
xorps xmm2, xmm2
comiss xmm1, xmm2
movss xmm0, dword [ebp - 0x5c]
jbe 0x100502e9
xorps xmm0, xmmword [0x100a4f00]
call fcn.10033fe0
mulss xmm0, dword [0x100a4d0c]
movss xmm1, dword [ebp - 0x64]
movss dword [ebp - 0x38], xmm0
movss xmm0, dword [ebp - 0x60]
call fcn.10033fe0
movaps xmm1, xmm0
movss xmm0, dword [ebp - 0x38]
mulss xmm1, dword [0x100a4d0c]
jmp 0x10050303
comiss xmm0, xmm2
mov eax, 0x5a
mov ecx, 0x10e
xorps xmm1, xmm1
cmova eax, ecx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
lea eax, [ebp - 0x98]
movss dword [ebp - 0x70], xmm0
push eax
lea ecx, [ebp - 0x70]
movss dword [ebp - 0x6c], xmm1
mov dword [ebp - 0x68], 0
call fcn.10034020
push 0x100c6970
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x70]
call fcn.1002c290
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x7c]
call fcn.10034020
movss xmm1, dword [0x100a4c60]
movss xmm0, dword [ebp - 0x78]
mov dword [ebp - 0x48], 0x43340000
call fcn.1003c740
movss xmm1, dword [0x100a4c60]
movss dword [ebp - 0x38], xmm0
movss xmm0, dword [ebp - 0x7c]
call fcn.1003c740
addss xmm0, dword [ebp - 0x38]
call fcn.1002c1a0
comiss xmm0, dword [0x100a4d6c]
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x4c]
movss dword [ebp - 0x4c], xmm0
movd xmm0, dword [esi + 0x44]
cmovbe eax, ecx
cvtdq2ps xmm0, xmm0
movss xmm1, dword [eax]
comiss xmm1, xmm0
ja 0x1005055b
mov eax, dword [ebp - 0x2c]
dec eax
push eax
call fcn.100100a0
mov dword [ebp - 0x38], eax
cmp dword [eax], edi
jne 0x100504da
mov ecx, dword [eax + 0xa6f0]
cmp ecx, dword [eax + 0xa6f4]
je 0x100504da
push dword [edi + 0x64]
lea eax, [ebp - 0x294]
push eax
call fcn.1002c440
add eax, 0x10
lea ecx, [ebp - 0x28]
push eax
call fcn.100105e0
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 5
push ecx
mov dword [ebp - 0x58], 0
lea ecx, [eax + 0x40]
mov dword [ebp - 0x54], 0
call fcn.10058e50
lea ecx, [ebp - 0x58]
call fcn.10010070
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
push ecx
mov eax, dword [ecx + 0xd750]
mov ecx, edx
mov dword [edx + 0x18], eax
mov dword [edx + 0x10], edi
call fcn.10057a50
mov eax, dword [ebp - 0x34]
cmp dword [eax + 0x48], 0
jne 0x100504a3
mov eax, dword [eax + 0x40]
mov dword [ebp - 0x38], eax
test eax, eax
je 0x1005049b
push dword [edi + 0x64]
lea eax, [ebp - 0x3f4]
push eax
call fcn.1002c440
add eax, 0x10
lea ecx, [ebp - 0xd4]
push eax
call fcn.100105e0
push eax
mov edx, str.___
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xbc]
call fcn.1003c1a0
add esp, 4
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x38]
push eax
call fcn.100105c0
lea ecx, [ebp - 0xbc]
call fcn.1000ea30
lea ecx, [ebp - 0xd4]
call fcn.1000ea30
lea ecx, [ebp - 0x28]
jmp 0x1005054f
mov ecx, dword [0x104282fc]
call fcn.10011c80
mov edi, dword [ebp - 0x34]
cmp byte [eax], 0
jne 0x100504bd
mov dword [edi + 0x18], 0
mov ecx, dword [ebp - 0x30]
push edi
call fcn.10053250
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0xffffffff
call fcn.1000ea30
jmp 0x1005055e
push dword [edi + 0x64]
lea eax, [ebp - 0x554]
push eax
call fcn.1002c440
add eax, 0x10
lea ecx, [ebp - 0x104]
push eax
call fcn.100105e0
push eax
mov edx, str.ZE___
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xec]
call fcn.1003c1a0
add esp, 4
mov edx, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x84]
call fcn.10059420
push eax
mov ecx, 0x100c9178
mov byte [ebp - 4], 4
call fcn.10050a70
lea ecx, [ebp - 0x84]
call fcn.10010070
lea ecx, [ebp - 0xec]
call fcn.1000ea30
lea ecx, [ebp - 0x104]
mov dword [ebp - 4], 0xffffffff
call fcn.1000ea30
mov edi, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
inc edx
mov dword [ebp - 0x2c], edx
cmp edx, 0x40
jl 0x10050220
test edi, edi
je 0x1005057a
push ecx
mov ecx, edi
call fcn.10050bd0
mov edi, dword [ebp - 0x30]
cmp dword [edi + 0x10], 0
je 0x10050660
cmp dword [edi + 0x40], 0
jne 0x100505c5
lea ecx, [ebp - 0x8c]
call fcn.100594f0
push eax
mov ecx, 0x100c9178
mov dword [ebp - 4], 8
call fcn.10050a70
push eax
lea ecx, [edi + 0x40]
call fcn.10058eb0
lea ecx, [ebp - 0x8c]
mov dword [ebp - 4], 0xffffffff
call fcn.10010070
mov ecx, dword [edi + 0x40]
push 0x1009fa48
call fcn.10010cd0
push dword [ebp - 0x50]
mov ecx, edi
call fcn.10053820
cmp byte [edi + 0x3c], 0
je 0x100505ff
cmp byte [ebp + 0xc], 0
je 0x100505ff
mov ecx, dword [edi + 0x40]
push 0x1009fa4c
call fcn.10010cd0
push dword [ebp - 0x44]
mov ecx, edi
call fcn.10051440
mov eax, dword [edi + 0x10]
mov esi, dword [edi + 0x40]
push dword [eax + 0x64]
lea eax, [ebp - 0x6b4]
push eax
call fcn.1002c440
add eax, 0x10
lea ecx, [ebp - 0x134]
push eax
call fcn.100105e0
push eax
mov edx, str.___
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x11c]
call fcn.1003c1a0
add esp, 4
push eax
mov ecx, esi
mov byte [ebp - 4], 0xa
call fcn.100105c0
lea ecx, [ebp - 0x11c]
call fcn.1000ea30
lea ecx, [ebp - 0x134]
call fcn.1000ea30
push ecx
mov ecx, edi
call fcn.10050bd0
jmp 0x10050177
invalid
call fcn.10012510
nop
ja 0x1005067b
adc byte [eax + 0x78], ch
add al, 0x10
aad 0x78
add al, 16
inc edx
jns 268764807
adc ch, dl
js 0x10050683
adc byte [edx + 0x79], al
add al, 0x10
scasd eax, dword es:[edi]
jns 268764811
adc byte [edi + 0x100479], ch
adc byte [eax], al
jnp 0x1005068f
adc byte [edx + 0x7b], dh
add al, 0x10
jne 0x1005070e
adc byte [ebp + 0x7c], dh
add al, 0x10
loop 0x10050712
add al, 0x10
dec edi
jge 0x1005069f
adc byte [ebp + edi*2 + 0x7f0d1004], bh
add al, 0x10
jl 0x10050725
adc byte [0x7c10047f], cl
jg 0x100506ab
add al, 0x10
add byte [eax - 0x7f10effc], 4
adc byte [ecx + eax*4 + 4], bl
adc cl, cl
add dword [eax + edx], 0x1004831d
mov word [ebx - 0x7b6deffc], es
add al, 0x10
adc byte [edx - 0x10effb80], al
adc bh, ch
add byte [eax + edx], 0x5c
add dword [eax + edx], 0x100481c9
sbb eax, 0x8c100483
add dword [eax + edx], 0xffffff92
test byte [eax + edx], al
inc dword [esp + eax + 0x4856c10]
adc cl, bl
test dword [eax + edx], eax
sub eax, 0x9c100487
xchg dword [eax + edx], eax
mov byte [0xf100488], al
mov dword [eax + edx], eax
jl 0x1005066b
add al, 0x10
jmp 0x4d150b72
add al, 0x10
pushfd
xchg ecx, eax
add al, 0x10
or dword [edx - 0x6ca2effc], edx
add al, 0x10
int3
xchg ebp, eax
add al, 0x10
lodsb al, byte [esi]
xchg ebp, eax
add al, 0x10
sbb dword [esi - 0x6892effc], edx
add al, 0x10
fcom qword [edi - 0x671deffc]
add al, 0x10
dec edi
cdq
add al, 0x10
mov esp, 0x29100499
lcall 0x1004, 0x9b7d1004
in al, dx
wait
add al, 0x10
pushfd
add al, 0x10
pop edi
popfd
add al, 0x10
int3