Function at 0x478fc0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xf8
mov edi, dword [ebp + 8]
mov eax, dword [edi + 8]
cmp eax, 0x41
mov dword [esp + 0x2c], ecx
mov edx, eax
mov dword [esp + 0x20], eax
jae 0x479030
bsr edx, dword [edi]
mov ebx, eax
mov eax, 0x3f
cmovne eax, edx
mov esi, dword [edi + 4]
xor eax, 0x1f
add eax, 0x20
bsr edx, esi
xor edx, 0x1f
test esi, esi
cmove edx, eax
add edx, ebx
neg edx
lea eax, [ebx + edx]
add eax, 0x40
cmp eax, 5
ja 0x4790fe
mov eax, dword [edi]
movzx eax, byte [eax + 0x514be8]
mov dword [esp], 0
mov dword [ecx + 8], ebx
jmp 0x4790c2
xor ebx, ebx
add eax, 0x3f
setb bl
shld ebx, eax, 0x1a
mov eax, dword [edi]
mov ecx, ebx
shl ecx, 6
mov dword [esp], ecx
inc ebx
xor edx, edx
nop dword [eax]
mov ecx, dword [eax + ebx*8 - 0x10]
mov esi, dword [eax + ebx*8 - 0xc]
mov edi, ecx
or edi, esi
jne 0x47906c
add edx, 0x40
dec ebx
cmp ebx, 1
ja 0x479050
mov esi, dword [esp]
jmp 0x479084
bsr edi, esi
xor edi, 0x1f
bsr ecx, ecx
xor ecx, 0x1f
add ecx, 0x20
test esi, esi
mov esi, ecx
cmovne esi, edi
add esi, edx
mov ebx, dword [esp + 0x20]
mov ecx, ebx
and ecx, 0x3f
mov edx, ebx
or edx, 0xffffffc0
test ecx, ecx
cmove edx, ecx
add edx, esi
mov ecx, ebx
sub ecx, edx
cmp ecx, 6
mov esi, dword [esp + 0x2c]
jae 0x47910c
mov eax, dword [eax]
movzx eax, byte [eax + 0x514be8]
mov dword [esi + 8], ebx
cmp ebx, 0x40
ja 0x479210
mov dword [esp], 0
mov ecx, ebx
neg cl
mov esi, 0xffffffff
shr esi, cl
xor edi, edi
test cl, 0x20
mov ecx, esi
cmovne ecx, edi
mov edx, ebx
mov ebx, 0xffffffff
cmove esi, ebx
test edx, edx
je 0x47a889
mov edi, ecx
mov ebx, dword [esp + 0x2c]
and esi, eax
and edi, dword [esp]
mov dword [ebx], esi
mov dword [ebx + 4], edi
jmp 0x47a4fa
cmp eax, 0x33
ja 0x479295
mov eax, dword [ebp + 8]
jmp 0x479115
cmp ecx, 0x34
jae 0x47928a
movsd xmm0, qword [eax]
unpcklps xmm0, xmmword [0x514bc0]
subpd xmm0, xmmword [0x514bd0]
movapd xmm1, xmm0
unpckhpd xmm1, xmm0
addsd xmm1, xmm0
xorps xmm0, xmm0
sqrtsd xmm0, xmm1
sub esp, 8
movsd qword [esp], xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_round
add esp, 8
fstp qword [esp + 0xe8]
movsd xmm0, qword [esp + 0xe8]
movsd xmm1, qword [0x514be0]
ucomisd xmm0, xmm1
jae 0x47916d
xorpd xmm1, xmm1
subsd xmm0, xmm1
movsd qword [esp + 0xb8], xmm0
setae al
fld qword [esp + 0xb8]
fnstcw word [esp + 0x5e]
movzx ecx, word [esp + 0x5e]
or ecx, 0xc00
mov word [esp + 0x76], cx
fldcw word [esp + 0x76]
fistp qword [esp + 0xb8]
fldcw word [esp + 0x5e]
movzx ebx, al
shl ebx, 0x1f
xor ebx, dword [esp + 0xbc]
mov eax, dword [esp + 0xb8]
mov dword [esp], eax
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x20]
mov dword [ecx + 8], eax
cmp eax, 0x40
ja 0x479566
mov ecx, eax
neg cl
mov edi, eax
mov eax, 0xffffffff
shr eax, cl
xor edx, edx
test cl, 0x20
mov ecx, eax
cmovne ecx, edx
mov esi, 0xffffffff
cmove eax, esi
test edi, edi
je 0x47a89e
mov edx, ecx
mov ecx, dword [esp]
and edx, ebx
and eax, ecx
mov ebx, dword [esp + 0x2c]
mov dword [ebx], eax
mov dword [ebx + 4], edx
jmp 0x47a4fa
movzx eax, al
mov dword [esp + 0xc], eax
xor eax, eax
mov edi, ebx
add edi, 0x3f
setb al
mov dword [esp], eax
mov ebx, eax
shld ebx, edi, 0x1d
and ebx, 0xfffffff8
push ebx
call sub.libc.dll_operator_new___unsigned_int_
add esp, 4
mov esi, eax
push ebx
mov ebx, dword [esp + 0x30]
push 0
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
add esp, 0xc
mov eax, dword [esp + 0xc]
mov dword [esi], eax
mov ecx, dword [esp + 0x20]
neg cl
mov eax, 0xffffffff
mov edx, ecx
shr eax, cl
xor ecx, ecx
test dl, 0x20
mov edx, 0xffffffff
cmovne edx, eax
cmove ecx, eax
mov eax, dword [esp]
shrd edi, eax, 6
mov dword [esi + 4], 0
and dword [esi + edi*8 - 4], ecx
and dword [esi + edi*8 - 8], edx
mov dword [ebx], esi
jmp 0x47a4fa
cmp dword [esp + 0x20], 0x40
ja 0x479753
mov edx, dword [esp + 0x20]
mov ecx, edx
neg cl
mov eax, 0xffffffff
mov esi, 0xffffffff
shr esi, cl
test cl, 0x20
cmove esi, eax
mov eax, edx
test edx, edx
je 0x47a897
and esi, 0x10
mov dword [esp + 0x40], eax
xor ecx, ecx
test eax, eax
setne cl
mov dword [esp + 0x28], ecx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], 0
mov cl, 1
mov dword [esp + 4], ecx
mov dword [esp + 0x10], eax
mov ebx, eax
mov dword [esp + 0xd0], ebx
mov dword [esp + 0x34], 0
mov dword [esp + 0x30], ebx
mov ecx, ebx
neg cl
mov edx, 0xffffffff
mov eax, 0xffffffff
shr eax, cl
test cl, 0x20
cmove eax, edx
xor ecx, ecx
test ebx, ebx
je 0x47a890
and eax, 2
mov ebx, dword [esp + 4]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], ecx
mov edi, 4
cmp dword [esp + 0x20], 5
jb 0x4795ea
xor eax, eax
mov edx, dword [esp + 0x20]
add edx, 0x3f
setb al
mov ecx, eax
shld ecx, edx, 0x1d
shrd edx, eax, 6
and ecx, 0xfffffff8
mov dword [esp + 0x58], ecx
mov eax, dword [esp + 0x20]
mov ecx, eax
neg cl
mov edi, 0xffffffff
shr edi, cl
test cl, 0x20
mov eax, 0xffffffff
mov ecx, edi
cmove edi, eax
mov dword [esp + 0x24], edi
mov dword [esp + 0x14], 0
mov eax, 0
cmovne ecx, eax
mov dword [esp + 0x50], ecx
lea eax, [edx - 1]
mov dword [esp + 0x54], eax
mov dword [esp + 0x18], edx
lea eax, [edx - 2]
mov dword [esp + 0x4c], eax
mov edi, 4
mov dword [esp + 4], ebx
jmp 0x4793cb
mov ecx, dword [esp + 0x14]
shld ecx, esi, 2
shl esi, 2
and esi, dword [esp + 0x24]
and ecx, dword [esp + 0x50]
mov dword [esp + 0x14], ecx
add edi, 2
cmp edi, eax
jae 0x4795ea
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
cmp edx, 0x40
ja 0x4793f0
cmp esi, dword [ecx]
mov eax, dword [esp + 0x14]
sbb eax, dword [ecx + 4]
jb 0x47945a
jmp 0x4795ea
mov dword [esp + 8], edi
mov dword [esp + 0x1c], esi
mov eax, dword [ecx]
mov dword [esp], eax
xor ecx, ecx
add edx, 0x3f
setb cl
shld ecx, edx, 0x1a
mov edx, ecx
nop dword [eax + eax]
sub edx, 1
jb 0x4795de
mov eax, dword [esp]
mov edi, dword [eax + ecx*8 - 8]
mov ebx, dword [eax + ecx*8 - 4]
mov esi, dword [esp + 0x1c]
mov eax, dword [esi + ecx*8 - 8]
mov esi, dword [esi + ecx*8 - 4]
mov dword [esp + 0xc], ebx
mov ecx, ebx
xor ecx, esi
mov ebx, edi
xor ebx, eax
or ebx, ecx
mov ecx, edx
je 0x479410
cmp eax, edi
sbb esi, dword [esp + 0xc]
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 4]
mov edi, dword [esp + 8]
jae 0x4795ea
mov eax, dword [esp + 0x20]
cmp eax, 0x40
jbe 0x4793a9
mov dword [esp + 8], edi
mov ebx, dword [esp + 0x58]
push ebx
call sub.libc.dll_operator_new___unsigned_int_
add esp, 4
mov edi, eax
push ebx
mov dword [esp + 0x20], esi
push esi
push eax
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
add esp, 0xc
mov ebx, dword [esp + 0x54]
mov ecx, dword [edi + ebx*8]
mov eax, dword [edi + ebx*8 + 4]
shld eax, ecx, 2
shl ecx, 2
lea edx, [edi + ebx*8]
mov dword [edi + ebx*8], ecx
mov dword [edi + ebx*8 + 4], eax
test bl, 1
je 0x4794d3
mov esi, dword [edx - 4]
shr esi, 0x1e
or esi, ecx
mov dword [edx + 4], eax
mov dword [edx], esi
mov ebx, dword [esp + 0x4c]
lea edx, [edi + ebx*8]
mov eax, dword [edi + ebx*8 + 4]
mov ecx, dword [edi + ebx*8]
shld eax, ecx, 2
shl ecx, 2
mov dword [edi + ebx*8], ecx
mov dword [edi + ebx*8 + 4], eax
cmp dword [esp + 0x18], 2
je 0x479523
nop word [eax + eax]
mov esi, dword [edx - 4]
shr esi, 0x1e
or esi, ecx
mov dword [edx], esi
mov dword [edx + 4], eax
mov ecx, dword [edi + ebx*8 - 0x10]
mov edx, dword [edi + ebx*8 - 8]
mov eax, dword [edi + ebx*8 - 0xc]
shld dword [edi + ebx*8 - 4], edx, 2
shld edx, eax, 2
mov dword [edi + ebx*8 - 8], edx
lea edx, [edi + ebx*8]
add edx, 0xfffffff0
shld eax, ecx, 2
shl ecx, 2
mov dword [edi + ebx*8 - 0x10], ecx
mov dword [edi + ebx*8 - 0xc], eax
add ebx, 0xfffffffe
test ebx, ebx
jne 0x4794e0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x24]
and dword [edi + eax*8 - 8], ecx
mov ecx, dword [esp + 0x50]
and dword [edi + eax*8 - 4], ecx
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x479548
push eax
call sub.libc.dll_operator_delete___void_
add esp, 4
mov esi, edi
mov eax, dword [esp + 0x20]
mov ebx, dword [esp + 4]
mov edi, dword [esp + 8]
add edi, 2
cmp edi, eax
jb 0x4793cb
jmp 0x4795ea
xor edx, edx
mov esi, eax
add esi, 0x3f
mov dword [esp + 4], esi
setb dl
mov dword [esp + 0xc], edx
mov edi, edx
shld edi, esi, 0x1d
and edi, 0xfffffff8
push edi
call sub.libc.dll_operator_new___unsigned_int_
add esp, 4
mov esi, eax
push edi
push 0
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
add esp, 0xc
mov dword [esi + 4], ebx
mov ecx, dword [esp + 0x20]
neg cl
mov eax, 0xffffffff
mov edx, ecx
shr eax, cl
xor ecx, ecx
test dl, 0x20
mov edx, 0xffffffff
cmovne edx, eax
cmove ecx, eax
mov eax, dword [esp + 4]
mov edi, dword [esp + 0xc]
shrd eax, edi, 6
mov edi, dword [esp]
mov dword [esi], edi
and dword [esi + eax*8 - 4], ecx
and dword [esi + eax*8 - 8], edx
mov ebx, dword [esp + 0x2c]
mov dword [ebx], esi
jmp 0x47a4fa
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 4]
mov edi, dword [esp + 8]
mov dword [esp + 0x1c], esi
mov ecx, edi
shr ecx, 1
test bl, bl
je 0x479652
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
mov esi, edx
shl esi, cl
shld eax, edx, cl
xor edx, edx
test cl, 0x20
cmovne eax, esi
cmovne esi, edx
mov ebx, dword [esp + 0x10]
cmp ebx, ecx
cmove eax, edx
cmove esi, edx
mov dword [esp], esi
mov ecx, ebx
neg cl
mov esi, 0xffffffff
shr esi, cl
test cl, 0x20
mov ecx, esi
mov edi, 0xffffffff
cmove esi, edi
cmovne ecx, edx
test ebx, ebx
je 0x47a8a5
mov edx, ecx
and eax, edx
mov edi, dword [esp]
and edi, esi
mov esi, edi
jmp 0x4798de
mov dword [esp + 0xc], ecx
xor eax, eax
mov ebx, dword [esp + 0x10]
add ebx, 0x3f
setb al
mov dword [esp + 4], eax
mov esi, eax
shld esi, ebx, 0x1d
and esi, 0xfffffff8
push esi
call sub.libc.dll_operator_new___unsigned_int_
add esp, 4
push esi
mov esi, eax
push dword [esp + 0x2c]
push eax
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 4]
shrd ebx, eax, 6
test edi, edi
je 0x4798a6
shr edi, 7
cmp edi, ebx
mov ecx, ebx
cmovb ecx, edi
mov eax, dword [esp + 0xc]
and eax, 0x3f
mov edx, ecx
mov dword [esp + 0x18], ecx
mov dword [esp], esi
mov dword [esp + 0x4c], ebx
je 0x479872
cmp edi, ebx
mov dword [esp + 0xc], eax
jae 0x47988b
mov eax, dword [esp + 0x4c]
dec eax
mov dword [esp + 4], eax
sub eax, dword [esp + 0x18]
mov esi, dword [esp]
mov edi, dword [esi + eax*8]
mov ebx, dword [esi + eax*8 + 4]
mov eax, edi
mov edx, dword [esp + 0xc]
mov ecx, edx
shl eax, cl
shld ebx, edi, cl
mov ecx, dword [esp + 4]
xor edi, edi
test dl, 0x20
cmovne ebx, eax
cmove edi, eax
mov eax, dword [esp + 0x4c]
mov dword [esi + eax*8 - 8], edi
mov dword [esi + eax*8 - 4], ebx
cmp ecx, dword [esp + 0x18]
jbe 0x47988b
mov dword [esp + 0x24], edi
mov esi, 0x40
sub esi, dword [esp + 0xc]
mov eax, dword [esp + 0x18]
not eax
mov edi, dword [esp + 0x4c]
mov edx, dword [esp]
lea ecx, [edx + edi*8 - 8]
mov dword [esp + 8], ecx
lea edx, [eax + edi]
lea ecx, [edi - 2]
test dl, 1
mov dword [esp + 0x14], esi
mov dword [esp + 0x50], eax
jne 0x47a6a2
mov edi, dword [esp + 4]
jmp 0x47a71c
xor eax, eax
mov edi, dword [esp + 0x20]
add edi, 0x3f
setb al
mov dword [esp], eax
mov esi, eax
shld esi, edi, 0x1d
and esi, 0xfffffff8
push esi
call sub.libc.dll_operator_new___unsigned_int_
add esp, 4
mov ebx, eax
push esi
push 0
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
add esp, 0xc
mov eax, dword [esp + 0x20]
mov ecx, eax
neg cl
mov eax, 0xffffffff
shr eax, cl
xor edx, edx
test cl, 0x20
mov ecx, eax
cmovne ecx, edx
mov edx, 0xffffffff
cmove eax, edx
mov edx, dword [esp]
shrd edi, edx, 6
mov dword [ebx], 0x10
mov dword [ebx + 4], 0
and dword [ebx + edi*8 - 8], eax
mov dword [esp + 0x1c], ebx
and dword [ebx + edi*8 - 4], ecx
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov dword [esp + 0x40], eax
cmp eax, 0x40
ja 0x4797db
mov esi, dword [esp + 0x1c]
jmp 0x4792c0
xor ebx, ebx
mov edi, eax
add edi, 0x3f
setb bl
mov dword [esp], ebx
shld ebx, edi, 0x1d
and ebx, 0xfffffff8
push ebx
mov dword [esp + 0x14], eax
call sub.libc.dll_operator_new___unsigned_int_
add esp, 4
mov esi, eax
push ebx
push 0
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
add esp, 0xc
mov eax, dword [esp + 0x10]
mov ecx, eax
neg cl
mov eax, 0xffffffff
shr eax, cl
test cl, 0x20
mov ecx, eax
mov edx, 0xffffffff
cmove eax, edx
mov edx, 0
cmovne ecx, edx
mov edx, dword [esp]
shrd edi, edx, 6
mov dword [esi], 1
mov dword [esi + 4], 0
and dword [esi + edi*8 - 8], eax
and dword [esi + edi*8 - 4], ecx
mov eax, dword [ebp + 8]
mov dword [esp + 0x28], esi
mov dword [esp + 0x38], esi
mov ebx, dword [eax + 8]
cmp ebx, 0x40
ja 0x47a58c
mov dword [esp + 4], 0
mov esi, dword [esp + 0x1c]
jmp 0x4792e3
mov eax, dword [esp + 0x18]
lea eax, [esi + eax*8]
sub ebx, dword [esp + 0x18]
shl ebx, 3
push ebx
push esi
push eax
call sub.api_ms_win_crt_private_l1_1_0.dll_memmove
add esp, 0xc
mov eax, dword [esp + 0x18]
shl eax, 3
push eax
push 0
mov esi, dword [esp + 8]
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
add esp, 0xc
mov ebx, dword [esp + 0x4c]
mov eax, dword [esp + 0x10]
mov ecx, eax
neg cl
mov eax, 0xffffffff
shr eax, cl
xor edx, edx
test cl, 0x20
mov ecx, 0xffffffff
cmove edx, eax
cmove eax, ecx
and dword [esi + ebx*8 - 8], eax
and dword [esi + ebx*8 - 4], edx
mov eax, dword [esp + 0x28]
test eax, eax
je 0x4798de
push eax
call sub.libc.dll_operator_delete___void_
add esp, 4
mov edx, dword [ebp + 8]
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x40], eax
jmp 0x479917
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x40], eax
mov dword [esp + 0x10], eax
mov edx, dword [ebp + 8]
lea ecx, [esp + 0x78]
lea eax, [esp + 0x38]
push eax
push edx
call fcn.0047a8d0
mov edx, dword [esp + 0x80]
cmp edx, 0x40
ja 0x479950
mov edi, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
add dword [esp + 0x78], edi
adc dword [esp + 0x7c], eax
jmp 0x479ab2
mov esi, dword [esp + 0x78]
mov eax, dword [esp + 0x38]
mov dword [esp + 0xc], eax
xor eax, eax
add edx, 0x3f
setb al
shld eax, edx, 0x1a
cmp eax, 1
jne 0x479980
xor ebx, ebx
xor edx, edx
xor edi, edi
test al, 1
jne 0x479a8a
jmp 0x479aa7
mov dword [esp + 0x24], eax
and eax, 0xfffffffe
mov dword [esp + 0x18], eax
mov dword [esp + 0x28], 0
xor ebx, ebx
xor edi, edi
mov dword [esp], esi
nop word [eax + eax]
mov dword [esp + 8], ebx
mov ecx, dword [esi + edi*8]
mov dword [esp + 0x14], ecx
mov eax, dword [esp]
mov esi, dword [eax + edi*8 + 4]
mov eax, dword [esp + 0xc]
mov edx, dword [eax + edi*8]
add edx, ecx
mov eax, dword [eax + edi*8 + 4]
adc eax, esi
cmp edx, ecx
mov ecx, eax
sbb ecx, esi
setae byte [esp + 4]
mov ebx, edx
add ebx, 1
mov ecx, eax
adc ecx, 0
cmp dword [esp + 0x14], ebx
sbb esi, ecx
setb byte [esp + 0x14]
mov esi, dword [esp + 8]
or esi, dword [esp + 0x28]
cmove ecx, eax
cmove ebx, edx
movzx eax, byte [esp + 4]
movzx edx, byte [esp + 0x14]
cmove edx, eax
mov dword [esp + 4], edx
mov eax, dword [esp]
mov dword [eax + edi*8], ebx
mov eax, dword [esp]
mov dword [eax + edi*8 + 4], ecx
mov eax, dword [esp]
mov ebx, dword [eax + edi*8 + 0xc]
mov eax, dword [esp]
mov ecx, dword [eax + edi*8 + 8]
mov dword [esp + 0x14], ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + edi*8 + 8]
add edx, ecx
mov ecx, dword [eax + edi*8 + 0xc]
adc ecx, ebx
setb byte [esp + 8]
mov eax, edx
add eax, 1
mov esi, ecx
adc esi, 0
cmp dword [esp + 0x14], eax
sbb ebx, esi
setae bl
cmp byte [esp + 4], 0
cmovne esi, ecx
cmovne eax, edx
movzx ecx, bl
movzx edx, byte [esp + 8]
cmove edx, ecx
mov ecx, dword [esp]
mov dword [ecx + edi*8 + 8], eax
mov eax, dword [esp]
mov dword [eax + edi*8 + 0xc], esi
mov esi, dword [esp]
movzx ebx, dl
add edi, 2
cmp dword [esp + 0x18], edi
jne 0x4799a0
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
test al, 1
je 0x479aa7
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + edi*8]
add eax, dword [esi + edi*8]
mov ecx, dword [ecx + edi*8 + 4]
adc ecx, dword [esi + edi*8 + 4]
add eax, ebx
adc ecx, edx
mov dword [esi + edi*8], eax
mov dword [esi + edi*8 + 4], ecx
mov edx, dword [esp + 0x80]
mov edi, dword [esp + 0xc]
mov ecx, edx
neg cl
mov eax, 0xffffffff
shr eax, cl
xor esi, esi
test cl, 0x20
mov ecx, eax
cmovne ecx, esi
mov ebx, 0xffffffff
cmove eax, ebx
test edx, edx
je 0x479d0f
cmp edx, 0x41
jae 0x479af0
lea edx, [esp + 0x78]
jmp 0x479b06
mov esi, dword [esp + 0x78]
xor ebx, ebx
add edx, 0x3f
setb bl
shld ebx, edx, 0x1a
lea edx, [esi + ebx*8]
add edx, 0xfffffff8
mov esi, ecx
and dword [edx], eax
and dword [edx + 4], esi
mov esi, dword [esp + 0x78]
mov ebx, dword [esp + 0x80]
mov dword [esp + 0xb0], ebx
mov eax, dword [esp + 0x7c]
mov dword [esp + 0xa8], esi
mov dword [esp + 0xac], eax
mov dword [esp + 0x80], 0
lea ecx, [esp + 0x60]
lea eax, [esp + 0xc8]
push eax
lea eax, [esp + 0xac]
push eax
call fcn.0047a8d0
cmp dword [esp + 0x30], 0x41
mov eax, dword [esp + 0x34]
jb 0x479b6d
test eax, eax
je 0x479b6d
push eax
call sub.libc.dll_operator_delete___void_
add esp, 4
mov eax, dword [esp + 0x60]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x30], eax
mov dword [esp + 0x68], 0
cmp ebx, 0x41
jb 0x479b9f
test esi, esi
je 0x479b9f
push esi
call sub.libc.dll_operator_delete___void_
add esp, 4
cmp dword [esp + 0x80], 0x41
jb 0x479bba
mov eax, dword [esp + 0x78]
test eax, eax
je 0x479bba
push eax
call sub.libc.dll_operator_delete___void_
add esp, 4
mov eax, dword [esp + 0x10]
cmp eax, 0x40
ja 0x479c20
mov edi, dword [esp + 0x38]
mov esi, dword [esp + 0x3c]
mov ecx, dword [esp + 0x34]
cmp edi, ecx
mov eax, esi
mov edx, dword [esp + 4]
sbb eax, edx
jb 0x47a506
cmp ecx, edi
mov eax, edx
sbb eax, esi
jae 0x47a506
mov eax, dword [esp + 0x30]
cmp eax, 0x40
jbe 0x479900
mov ecx, eax
xor eax, eax
mov edi, ecx
add edi, 0x3f
setb al
mov esi, eax
shld esi, edi, 0x1a
mov dword [esp + 0x40], ecx
shrd edi, eax, 3
jmp 0x479ce5
mov dword [esp + 0xc], edi
xor edx, edx
add eax, 0x3f
setb dl
mov dword [esp + 8], edx
mov dword [esp + 0x28], eax
shld edx, eax, 0x1a
mov dword [esp + 0x14], edx
mov eax, edx
nop
sub eax, 1
jb 0x479d1a
mov esi, dword [esp + 0xc]
mov ecx, dword [esi + edx*8 - 8]
mov ebx, dword [esi + edx*8 - 4]
mov edi, dword [esp + 0x34]
mov esi, dword [edi + edx*8 - 8]
mov edi, dword [edi + edx*8 - 4]
mov dword [esp], ebx
mov edx, ebx
xor edx, edi
mov ebx, ecx
xor ebx, esi
or ebx, edx
mov edx, eax
je 0x479c40
cmp esi, ecx
sbb edi, dword [esp]
jae 0x479d1a
xor ecx, ecx
mov eax, dword [esp + 0x30]
mov ebx, eax
add ebx, 0x3f
setb cl
mov edi, ecx
mov esi, ecx
shld esi, ebx, 0x1a
cmp dword [esp + 0x14], esi
jne 0x479cac
mov dword [esp + 0x40], eax
cmp eax, 0x40
jbe 0x479ccc
shld edi, ebx, 0x1d
mov eax, dword [esp + 0xc]
jmp 0x479cf5
cmp dword [esp + 0x10], 0x41
jb 0x479cc3
push dword [esp + 0xc]
call sub.libc.dll_operator_delete___void_
mov eax, dword [esp + 0x34]
add esp, 4
mov dword [esp + 0x40], eax
cmp eax, 0x41
jae 0x479ce1
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 4]
mov dword [esp + 0x3c], ecx
jmp 0x479910
shld edi, ebx, 0x1d
shl esi, 3
push esi
call sub.libc.dll_operator_new___unsigned_int_
add esp, 4
mov dword [esp + 0x38], eax
and edi, 0xfffffff8
push edi
push dword [esp + 0x38]
push eax
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x30]
jmp 0x479910
lea edx, [esp + 0x78]
xor eax, eax
jmp 0x479b08
lea ecx, [esp + 0x60]
lea eax, [esp + 0x38]
push eax
push eax
call fcn.0046f920
mov esi, dword [esp + 8]
mov eax, dword [esp + 0x28]
shld esi, eax, 0x1d
and esi, 0xfffffff8
push esi
call sub.libc.dll_operator_new___unsigned_int_
add esp, 4
mov edi, eax
mov dword [esp + 8], esi
push esi
push dword [esp + 0x10]
push eax
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
add esp, 0xc
add dword [edi], 1
adc dword [edi + 4], 0
jae 0x479da3
xor eax, eax
mov ecx, dword [esp + 0x10]
add ecx, 0x3f
setb al
shld eax, ecx, 0x1a
add eax, 0xfffffffe
xor ecx, ecx
nop word cs:[eax + eax]
mov edx, dword [edi + ecx*8 + 8]
mov esi, dword [edi + ecx*8 + 0xc]
add edx, 1
adc esi, 0
mov dword [edi + ecx*8 + 8], edx
mov dword [edi + ecx*8 + 0xc], esi
or esi, edx
jne 0x479da3
lea edx, [ecx + 1]
cmp eax, ecx
mov ecx, edx
jne 0x479d80
mov edx, dword [esp + 0x10]
mov ecx, edx
neg cl
mov esi, 0xffffffff
shr esi, cl
mov eax, 0xffffffff
xor ebx, ebx
test cl, 0x20
mov ecx, esi
cmove esi, eax
cmovne ecx, ebx
mov eax, dword [esp + 0x14]
mov dword [esp], esi
and dword [edi + eax*8 - 8], esi
mov dword [esp + 4], ecx
and dword [edi + eax*8 - 4], ecx
mov dword [esp + 0xa0], edx
mov dword [esp + 0x98], edi
push dword [esp + 8]
call sub.libc.dll_operator_new___unsigned_int_
add esp, 4
mov esi, eax
mov dword [esp + 0x90], eax
push dword [esp + 8]
push dword [esp + 0x10]
push eax
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
add esp, 0xc
add dword [esi], 1
adc dword [esi + 4], 0
jae 0x479e53
xor eax, eax
mov ecx, dword [esp + 0x10]
add ecx, 0x3f
setb al
shld eax, ecx, 0x1a
add eax, 0xfffffffe
nop word [eax + eax]
mov ecx, dword [esi + ebx*8 + 8]
mov edx, dword [esi + ebx*8 + 0xc]
add ecx, 1
adc edx, 0
mov dword [esi + ebx*8 + 8], ecx
mov dword [esi + ebx*8 + 0xc], edx
or edx, ecx
jne 0x479e53
lea ecx, [ebx + 1]
cmp eax, ebx
mov ebx, ecx
jne 0x479e30
mov ecx, dword [esp + 0x14]
lea eax, [esi + ecx*8]
add eax, 0xfffffff8
mov ebx, dword [esp]
and ebx, dword [esi + ecx*8 - 8]
mov edx, dword [esp + 4]
and edx, dword [esi + ecx*8 - 4]
mov ecx, edx
mov edx, dword [esp + 0x10]
mov dword [eax], ebx
mov dword [eax + 4], ecx
mov dword [esp + 0xe0], edx
mov eax, dword [esp + 0x94]
mov esi, dword [esp + 0x90]
mov dword [esp + 0xd8], esi
mov dword [esp + 0xdc], eax
lea ebx, [esp + 0xd8]
lea eax, [esp + 0x98]
lea ecx, [esp + 0xa8]
push ebx
push eax
mov ebx, edx
call fcn.0046f920
cmp ebx, 0x41
jb 0x479ed7
test esi, esi
je 0x479eca
push esi
call sub.libc.dll_operator_delete___void_
add esp, 4
test edi, edi
je 0x479ed7
push edi
call sub.libc.dll_operator_delete___void_
add esp, 4
mov eax, dword [ebp + 8]
mov edx, dword [eax + 8]
cmp edx, 0x40
ja 0x479ef9
mov ecx, dword [esp + 0x60]
mov dword [esp], ecx
cmp dword [eax], ecx
mov eax, dword [eax + 4]
sbb eax, dword [esp + 0x64]
jae 0x479f5e
jmp 0x479fd3
mov eax, dword [eax]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x60]
mov dword [esp], eax
xor ecx, ecx
add edx, 0x3f
setb cl
shld ecx, edx, 0x1a
mov edx, ecx
nop word cs:[eax + eax]
sub edx, 1
jb 0x479f5e
mov eax, dword [esp + 8]
mov esi, dword [eax + ecx*8 - 8]
mov dword [esp + 4], esi
mov esi, dword [eax + ecx*8 - 4]
mov edi, dword [esp]
mov eax, dword [edi + ecx*8 - 8]
mov ebx, dword [edi + ecx*8 - 4]
mov dword [esp + 0x14], esi
mov ecx, esi
mov esi, dword [esp + 4]
xor ecx, ebx
mov edi, esi
xor edi, eax
or edi, ecx
mov ecx, edx
je 0x479f20
cmp eax, esi
sbb ebx, dword [esp + 0x14]
jae 0x479fd3
mov ebx, dword [esp + 0xb0]
cmp ebx, 0x41
mov dword [esp + 0x28], ebx
jae 0x47a009
mov edi, dword [esp + 0xa8]
mov edx, dword [esp + 0xac]
mov eax, dword [esp + 0x60]
mov dword [esp], eax
sub edi, eax
sbb edx, dword [esp + 0x64]
mov ecx, ebx
neg cl
mov eax, 0xffffffff
shr eax, cl
xor ebx, ebx
test cl, 0x20
mov esi, 0xffffffff
mov ecx, eax
cmove eax, esi
mov esi, edi
mov dword [esp + 0x88], edi
mov dword [esp + 0x8c], edx
cmovne ecx, ebx
cmp dword [esp + 0x28], 0
je 0x47a8ac
mov ebx, ecx
lea ecx, [esp + 0x88]
jmp 0x47a0de
mov ebx, dword [esp + 0x2c]
mov eax, dword [esp + 0x10]
mov dword [ebx + 8], eax
movsd xmm0, qword [esp + 0x38]
movsd qword [ebx], xmm0
mov dword [esp + 0x40], 0
mov eax, dword [esp + 0xb0]
mov esi, dword [esp + 0x1c]
cmp eax, 0x41
jae 0x47a46c
jmp 0x47a480
add ebx, 0x3f
mov eax, 0
setb al
mov dword [esp + 4], eax
mov esi, eax
shld esi, ebx, 0x1d
and esi, 0xfffffff8
push esi
call sub.libc.dll_operator_new___unsigned_int_
add esp, 4
mov edi, eax
mov dword [esp + 0x88], eax
push esi
push dword [esp + 0xac]
push eax
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 4]
shrd ebx, eax, 6
mov dword [esp + 4], ebx
xor ecx, ecx
xor edx, edx
xor eax, eax
jmp 0x47a085
sub esi, edx
sbb ebx, ecx
setb byte [esp + 8]
mov edx, esi
mov ecx, ebx
movzx ebx, byte [esp + 8]
mov dword [edi + eax*8], edx
mov dword [edi + eax*8 + 4], ecx
movzx ecx, bl
xor edx, edx
inc eax
cmp dword [esp + 4], eax
je 0x47a0ad
mov esi, dword [edi + eax*8]
mov ebx, dword [edi + eax*8 + 4]
or ecx, edx
mov ecx, dword [esp]
mov edx, dword [ecx + eax*8]
mov ecx, dword [ecx + eax*8 + 4]
je 0x47a060
not ecx
not edx
add edx, esi
adc ecx, ebx
cmp edx, esi
mov esi, ecx
sbb esi, ebx
setae bl
jmp 0x47a072
mov eax, dword [esp + 0x28]
mov ecx, eax
neg cl
mov eax, 0xffffffff
shr eax, cl
xor ebx, ebx
test cl, 0x20
mov ecx, 0xffffffff
cmove ebx, eax
cmove eax, ecx
mov edx, dword [esp + 4]
lea ecx, [edi + edx*8]
add ecx, 0xfffffff8
mov esi, dword [edi + edx*8 - 8]
mov edx, dword [edi + edx*8 - 4]
and esi, eax
and edx, ebx
mov dword [ecx], esi
mov dword [ecx + 4], edx
mov edi, dword [esp + 0x28]
mov dword [esp + 0xe0], edi
mov eax, dword [esp + 0x8c]
mov dword [esp + 0xdc], eax
mov esi, dword [esp + 0x88]
mov dword [esp + 0xd8], esi
lea ecx, [esp + 0x98]
lea eax, [esp + 0xc8]
push eax
lea eax, [esp + 0xdc]
push eax
call fcn.0047a8d0
cmp edi, 0x41
jb 0x47a13c
test esi, esi
je 0x47a13c
push esi
call sub.libc.dll_operator_delete___void_
add esp, 4
mov eax, dword [ebp + 8]
mov edx, dword [eax + 8]
cmp edx, 0x41
mov dword [esp + 0x18], edx
jae 0x47a1b3
mov esi, dword [eax]
mov eax, dword [eax + 4]
mov ecx, dword [esp + 0x60]
mov dword [esp], ecx
sub esi, ecx
mov dword [esp + 8], esi
sbb eax, dword [esp + 0x64]
mov ecx, edx
neg cl
mov edi, edx
mov edx, 0xffffffff
shr edx, cl
xor esi, esi
test cl, 0x20
mov ecx, edx
mov ebx, 0xffffffff
cmove edx, ebx
cmovne ecx, esi
test edi, edi
mov ebx, dword [esp + 0x2c]
je 0x47a8b3
mov esi, ecx
mov edi, dword [esp + 8]
and edi, edx
and eax, esi
mov dword [esp + 8], edi
cmp edi, dword [esp + 0x98]
sbb eax, dword [esp + 0x9c]
jae 0x47a2cb
jmp 0x47a32e
xor ebx, ebx
mov esi, edx
add esi, 0x3f
setb bl
mov edi, ebx
shld edi, esi, 0x1d
and edi, 0xfffffff8
push edi
call sub.libc.dll_operator_new___unsigned_int_
add esp, 4
mov ecx, eax
push edi
mov eax, dword [ebp + 8]
push dword [eax]
mov edi, ecx
push ecx
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
add esp, 0xc
shrd esi, ebx, 6
mov ebx, edi
xor ecx, ecx
xor edx, edx
xor eax, eax
mov dword [esp + 8], edi
jmp 0x47a224
sub edi, edx
sbb ebx, ecx
setb byte [esp + 4]
mov edx, edi
mov ecx, ebx
mov ebx, dword [esp + 8]
mov dword [ebx + eax*8], edx
mov dword [ebx + eax*8 + 4], ecx
movzx ecx, byte [esp + 4]
xor edx, edx
inc eax
cmp esi, eax
je 0x47a24e
mov edi, dword [ebx + eax*8]
mov ebx, dword [ebx + eax*8 + 4]
or ecx, edx
mov ecx, dword [esp]
mov edx, dword [ecx + eax*8]
mov ecx, dword [ecx + eax*8 + 4]
je 0x47a200
not ecx
not edx
add edx, edi
adc ecx, ebx
cmp edx, edi
mov edi, ecx
sbb edi, ebx
setae byte [esp + 4]
jmp 0x47a20d
mov eax, dword [esp + 0x18]
mov ecx, eax
neg cl
mov eax, 0xffffffff
shr eax, cl
xor edx, edx
test cl, 0x20
mov ecx, 0xffffffff
cmove edx, eax
cmove eax, ecx
and dword [ebx + esi*8 - 8], eax
and dword [ebx + esi*8 - 4], edx
mov eax, dword [esp + 0x98]
mov dword [esp + 4], eax
mov ecx, esi
nop word cs:[eax + eax]
sub ecx, 1
jb 0x47a2cb
mov eax, dword [esp + 8]
mov edx, dword [eax + esi*8 - 8]
mov ebx, esi
mov esi, dword [eax + esi*8 - 4]
mov edi, dword [esp + 4]
mov eax, dword [edi + ebx*8 - 8]
mov ebx, dword [edi + ebx*8 - 4]
mov dword [esp + 0x14], esi
xor esi, ebx
mov edi, edx
xor edi, eax
or edi, esi
mov esi, ecx
je 0x47a290
cmp eax, edx
sbb ebx, dword [esp + 0x14]
mov ebx, dword [esp + 0x2c]
jae 0x47a32e
mov ebx, dword [esp + 0x10]
cmp ebx, 0x41
jae 0x47a350
mov eax, dword [esp + 0x38]
mov dword [esp + 0x10], ebx
mov edx, dword [esp + 0x3c]
add eax, 1
adc edx, 0
mov ecx, ebx
neg cl
mov ebx, 0xffffffff
shr ebx, cl
xor edi, edi
test cl, 0x20
mov ecx, ebx
mov esi, 0xffffffff
cmove ebx, esi
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], edx
cmovne ecx, edi
cmp dword [esp + 0x10], 0
je 0x47a8ba
mov edi, ecx
mov esi, dword [esp + 0x1c]
lea ecx, [esp + 0xc0]
jmp 0x47a408
mov eax, dword [esp + 0x10]
mov dword [ebx + 8], eax
movsd xmm0, qword [esp + 0x38]
movsd qword [ebx], xmm0
mov dword [esp + 0x40], 0
mov esi, dword [esp + 0x1c]
jmp 0x47a429
add ebx, 0x3f
mov eax, 0
setb al
mov dword [esp + 4], eax
mov edi, eax
shld edi, ebx, 0x1d
and edi, 0xfffffff8
push edi
call sub.libc.dll_operator_new___unsigned_int_
add esp, 4
mov esi, eax
mov dword [esp + 0xc0], eax
push edi
push dword [esp + 0x10]
push eax
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 4]
shrd ebx, eax, 6
mov dword [esp + 0xc], ebx
add dword [esi], 1
adc dword [esi + 4], 0
jae 0x47a3d3
mov eax, dword [esp + 0xc]
add eax, 0xfffffffe
xor ecx, ecx
nop word cs:[eax + eax]
mov edx, dword [esi + ecx*8 + 8]
mov edi, dword [esi + ecx*8 + 0xc]
add edx, 1
adc edi, 0
mov dword [esi + ecx*8 + 8], edx
mov dword [esi + ecx*8 + 0xc], edi
or edi, edx
jne 0x47a3d3
lea edx, [ecx + 1]
cmp eax, ecx
mov ecx, edx
jne 0x47a3b0
mov eax, dword [esp + 0x10]
mov ecx, eax
neg cl
mov ebx, 0xffffffff
shr ebx, cl
xor edi, edi
test cl, 0x20
mov eax, 0xffffffff
cmove edi, ebx
cmove ebx, eax
mov edx, dword [esp + 0xc]
lea ecx, [esi + edx*8]
add ecx, 0xfffffff8
mov eax, dword [esi + edx*8 - 8]
mov edx, dword [esi + edx*8 - 4]
mov esi, dword [esp + 0x1c]
and eax, ebx
and edx, edi
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov ebx, dword [esp + 0x2c]
mov eax, dword [esp + 0x10]
mov dword [ebx + 8], eax
movsd xmm0, qword [esp + 0xc0]
movsd qword [ebx], xmm0
mov eax, dword [esp + 0x18]
cmp eax, 0x41
jb 0x47a445
cmp dword [esp + 8], 0
je 0x47a445
push dword [esp + 8]
call sub.libc.dll_operator_delete___void_
add esp, 4
cmp dword [esp + 0xa0], 0x41
jb 0x47a463
mov eax, dword [esp + 0x98]
test eax, eax
je 0x47a463
push eax
call sub.libc.dll_operator_delete___void_
add esp, 4
mov eax, dword [esp + 0x28]
cmp eax, 0x41
jb 0x47a480
mov eax, dword [esp + 0xa8]
test eax, eax
je 0x47a480
push eax
call sub.libc.dll_operator_delete___void_
add esp, 4
cmp dword [esp + 0x68], 0x41
jb 0x47a498
cmp dword [esp], 0
je 0x47a498
push dword [esp]
call sub.libc.dll_operator_delete___void_
add esp, 4
cmp dword [esp + 0xd0], 0x41
jb 0x47a4b6
mov eax, dword [esp + 0xc8]
test eax, eax
je 0x47a4b6
push eax
call sub.libc.dll_operator_delete___void_
add esp, 4
cmp dword [esp + 0x30], 0x41
mov eax, dword [esp + 0x34]
jb 0x47a4ce
test eax, eax
je 0x47a4ce
push eax
call sub.libc.dll_operator_delete___void_
add esp, 4
cmp dword [esp + 0x40], 0x41
jb 0x47a4e6
mov eax, dword [esp + 0x38]
test eax, eax
je 0x47a4e6
push eax
call sub.libc.dll_operator_delete___void_
add esp, 4
cmp dword [esp + 0x20], 0x41
jb 0x47a4fa
test esi, esi
je 0x47a4fa
push esi
call sub.libc.dll_operator_delete___void_
add esp, 4
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4
lea ecx, [esp + 0x60]
lea eax, [esp + 0x38]
push eax
push eax
call fcn.0046f920
mov eax, edi
add eax, 1
mov dword [esp], eax
adc esi, 0
mov ebx, dword [esp + 0x10]
mov ecx, ebx
neg cl
mov edx, 0xffffffff
mov eax, 0xffffffff
shr eax, cl
test cl, 0x20
mov ecx, eax
cmove eax, edx
mov edx, ebx
mov ebx, 0
cmovne ecx, ebx
test edx, edx
mov dword [esp + 0xc], edi
je 0x47a8c1
and ecx, esi
mov ebx, eax
mov eax, dword [esp]
and ebx, eax
mov dword [esp + 0xa0], edx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ecx
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], esi
lea eax, [esp + 0x90]
mov edi, ebx
jmp 0x479e72
xor edx, edx
mov esi, ebx
add esi, 0x3f
setb dl
mov dword [esp], edx
mov edi, edx
shld edi, esi, 0x1d
and edi, 0xfffffff8
push edi
mov dword [esp + 0x34], ebx
call sub.libc.dll_operator_new___unsigned_int_
add esp, 4
mov ebx, eax
push edi
push 0
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
add esp, 0xc
mov eax, dword [esp + 0x30]
mov ecx, eax
neg cl
mov eax, 0xffffffff
shr eax, cl
xor edx, edx
test cl, 0x20
mov ecx, eax
cmovne ecx, edx
mov edx, 0xffffffff
cmove eax, edx
mov edx, dword [esp]
shrd esi, edx, 6
mov dword [ebx], 0
mov dword [ebx + 4], 0
and dword [ebx + esi*8 - 8], eax
mov dword [esp + 0x34], ebx
and dword [ebx + esi*8 - 4], ecx
mov eax, dword [ebp + 8]
mov ebx, dword [eax + 8]
mov dword [esp + 0xd0], ebx
cmp ebx, 0x41
jae 0x47a621
mov dword [esp + 4], 0
mov esi, dword [esp + 0x1c]
jmp 0x4792f6
xor eax, eax
mov ecx, ebx
add ecx, 0x3f
mov dword [esp + 0xc], ecx
setb al
mov dword [esp], eax
mov edi, eax
shld edi, ecx, 0x1d
and edi, 0xfffffff8
push edi
call sub.libc.dll_operator_new___unsigned_int_
add esp, 4
mov esi, eax
push edi
push 0
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
add esp, 0xc
neg bl
mov eax, 0xffffffff
mov ecx, ebx
shr eax, cl
test bl, 0x20
mov edi, 0xffffffff
cmovne edi, eax
mov ecx, 0
cmovne eax, ecx
mov ecx, dword [esp + 0xc]
mov edx, dword [esp]
shrd ecx, edx, 6
mov dword [esi + 4], 0
mov dword [esi], 2
and dword [esi + ecx*8 - 4], eax
and dword [esi + ecx*8 - 8], edi
mov dword [esp + 0xc8], esi
mov esi, dword [esp + 0x1c]
xor ebx, ebx
jmp 0x47933b
mov dword [esp + 4], ecx
mov ecx, dword [esp + 8]
mov edx, dword [ecx + eax*8]
mov eax, dword [ecx + eax*8 + 4]
mov ecx, esi
mov esi, eax
shr esi, cl
shrd edx, eax, cl
xor eax, eax
test cl, 0x20
cmovne edx, esi
cmovne esi, eax
or edx, dword [esp + 0x24]
or esi, ebx
mov eax, dword [esp]
mov dword [eax + edi*8 - 8], edx
mov edx, dword [esp]
mov dword [edx + edi*8 - 4], esi
mov eax, dword [esp + 0x18]
neg eax
add eax, edi
add eax, 0xfffffffe
mov esi, dword [edx + eax*8]
mov ebx, dword [edx + eax*8 + 4]
mov ecx, dword [esp + 0xc]
shld ebx, esi, cl
shl esi, cl
test cl, 0x20
mov ecx, dword [esp + 4]
cmovne ebx, esi
mov eax, 0
cmovne esi, eax
lea eax, [edx + edi*8 - 0x10]
mov dword [esp + 8], eax
mov dword [edx + edi*8 - 0xc], ebx
mov dword [esp + 0x24], esi
mov dword [edx + edi*8 - 0x10], esi
mov edi, ecx
cmp ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x50]
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 8]
je 0x47988b
mov eax, dword [esp + 0x18]
lea eax, [eax*8]
mov dword [esp + 8], ecx
mov ecx, dword [esp]
sub ecx, eax
add ecx, 0xfffffff8
mov dword [esp + 4], ecx
mov ecx, dword [esp + 8]
mov dword [esp + 0x24], esi
mov dword [esp + 0x58], ebx
mov dword [esp + 8], ecx
mov eax, dword [ecx + edx*8 + 4]
mov dword [esp + 0x54], eax
mov edx, edi
mov edi, eax
mov ebx, dword [esp + 0x14]
mov ecx, ebx
shr edi, cl
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 8]
mov eax, dword [ecx + eax*8]
mov ecx, ebx
mov esi, dword [esp + 0x54]
shrd eax, esi, cl
test bl, 0x20
cmovne eax, edi
mov ecx, 0
cmovne edi, ecx
or eax, dword [esp + 0x24]
or edi, dword [esp + 0x58]
mov ecx, dword [esp + 8]
mov dword [ecx], eax
mov dword [ecx + 4], edi
mov ecx, dword [esp + 4]
mov eax, dword [ecx + edx*8]
mov ebx, dword [ecx + edx*8 + 4]
mov edi, ecx
mov ecx, dword [esp + 0xc]
shld ebx, eax, cl
shl eax, cl
test cl, 0x20
cmovne ebx, eax
mov dword [esp + 8], ebx
mov ecx, 0
cmovne eax, ecx
mov esi, dword [esp]
mov dword [esi + edx*8 - 4], ebx
mov edi, dword [edi + edx*8 - 4]
mov dword [esp + 0x24], edi
mov ebx, dword [esp + 0x14]
mov ecx, ebx
shr edi, cl
test bl, 0x20
mov dword [esi + edx*8 - 8], eax
mov esi, edi
mov ecx, 0
cmovne esi, ecx
mov dword [esp + 0x58], esi
mov ecx, dword [esp + 4]
mov esi, dword [ecx + edx*8 - 8]
mov ecx, ebx
mov ebx, dword [esp + 0x24]
shrd esi, ebx, cl
test byte [esp + 0x14], 0x20
cmovne esi, edi
or esi, eax
mov eax, dword [esp]
mov dword [eax + edx*8 - 8], esi
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov edi, dword [ecx + edx*8 - 8]
mov dword [esp + 0x24], edi
mov esi, edi
mov ecx, dword [esp + 0xc]
shl esi, cl
mov dword [esp + 0x54], esi
test cl, 0x20
mov edi, 0
cmovne esi, edi
mov edi, dword [esp + 0x58]
or edi, dword [esp + 8]
mov dword [eax + edx*8 - 4], edi
mov ebx, dword [esp + 4]
mov ebx, dword [ebx + edx*8 - 4]
mov edi, dword [esp + 0x24]
shld ebx, edi, cl
test byte [esp + 0xc], 0x20
cmovne ebx, dword [esp + 0x54]
lea ecx, [eax + edx*8 - 0x10]
mov dword [eax + edx*8 - 0xc], ebx
mov dword [eax + edx*8 - 0x10], esi
lea eax, [edx - 2]
mov edx, dword [esp + 0x50]
cmp eax, dword [esp + 0x18]
mov edi, eax
ja 0x47a751
jmp 0x47988b
xor esi, esi
jmp 0x4790eb
xor eax, eax
jmp 0x479319
xor esi, esi
jmp 0x4792bc
xor eax, eax
jmp 0x4791fb
xor esi, esi
jmp 0x479644
xor eax, eax
jmp 0x479fc7
xor edx, edx
jmp 0x47a18e
xor ebx, ebx
jmp 0x47a31e
xor eax, eax
xor ecx, ecx
jmp 0x47a552