portugalfuturista/rizin
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
rizin/test/db/asm/x86_32
NOT XVilka ba8c170852
Migrate from Capstone to Zydis (x86 architecture) (#5164) 
* Added build files [Capstone to Zydis]

* x86 Analysis [Capstone to Zydis]

* Changed x86 RzIL [Capstone to Zydis]

* Changed asm and arch files [Capstone to Zydis]

* Compilation, build error and test fixes [Capstone to Zydis]

* Test changes [Capstone to Zydis]

* Remaining changes [Capstone to Zydis]

* Added BE support [Capstone to Zydis]

---------

Co-authored-by: tushar3q34 <tushar3q34@gmail.com>
2025-05-23 13:03:46 +00:00

2328 lines
292 KiB
Text
Raw Blame History

d "lea edx, dword [0x2c4b]" 8d154b2c0000 0x0 (set edx (cast 32 false (bv 32 0x2c4b)))
d "aaa" 37 0x0 (seq (branch (|| (! (ule (& (cast 8 false (var eax)) (bv 8 0xf)) (bv 8 0x9))) (var af)) (seq (set eax (| (& (var eax) (~ (bv 32 0xffff))) (cast 32 false (+ (cast 16 false (var eax)) (bv 16 0x106))))) (set af true) (set cf true)) (seq (set af false) (set cf false))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (& (cast 8 false (var eax)) (bv 8 0xf))))))
d "aad 0x0a" d50a 0x0 (seq (set temp_al (cast 8 false (var eax))) (set temp_ah (cast 8 false (>> (var eax) (bv 8 0x8) false))) (set adjusted (& (+ (var temp_al) (* (var temp_ah) (bv 8 0xa))) (bv 8 0xff))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var adjusted)))) (set eax (| (& (var eax) (~ (bv 32 0xff00))) (<< (cast 32 false (bv 8 0x0)) (bv 8 0x8) false))) (set _result (var adjusted)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "aad 0x69" d569 0x0 (seq (set temp_al (cast 8 false (var eax))) (set temp_ah (cast 8 false (>> (var eax) (bv 8 0x8) false))) (set adjusted (& (+ (var temp_al) (* (var temp_ah) (bv 8 0x69))) (bv 8 0xff))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var adjusted)))) (set eax (| (& (var eax) (~ (bv 32 0xff00))) (<< (cast 32 false (bv 8 0x0)) (bv 8 0x8) false))) (set _result (var adjusted)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "aam 0x0a" d40a 0x0 (seq (set temp_al (cast 8 false (var eax))) (set eax (| (& (var eax) (~ (bv 32 0xff00))) (<< (cast 32 false (div (var temp_al) (bv 8 0xa))) (bv 8 0x8) false))) (set adjusted (mod (var temp_al) (bv 8 0xa))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var adjusted)))) (set _result (var adjusted)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "aam 0x42" d442 0x0 (seq (set temp_al (cast 8 false (var eax))) (set eax (| (& (var eax) (~ (bv 32 0xff00))) (<< (cast 32 false (div (var temp_al) (bv 8 0x42))) (bv 8 0x8) false))) (set adjusted (mod (var temp_al) (bv 8 0x42))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var adjusted)))) (set _result (var adjusted)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "aas" 3f 0x0 (seq (branch (|| (! (ule (& (cast 8 false (var eax)) (bv 8 0xf)) (bv 8 0x9))) (var af)) (seq (set eax (| (& (var eax) (~ (bv 32 0xffff))) (cast 32 false (- (cast 16 false (var eax)) (bv 16 0x6))))) (set eax (| (& (var eax) (~ (bv 32 0xff00))) (<< (cast 32 false (- (cast 8 false (>> (var eax) (bv 8 0x8) false)) (bv 8 0x1))) (bv 8 0x8) false))) (set af true) (set cf true)) (seq (set af false) (set cf false))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (& (cast 8 false (var eax)) (bv 8 0xf))))))
d "adc al, 0x00" 1400 0x0 (seq (set op1 (cast 8 false (var eax))) (set op2 (bv 8 0x0)) (set sum (+ (+ (var op1) (var op2)) (ite (var cf) (bv 8 0x1) (bv 8 0x0)))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var sum)))) (set _result (var sum)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))))
d "adc al, byte [eax]" 1200 0x0 (seq (set op1 (cast 8 false (var eax))) (set op2 (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set sum (+ (+ (var op1) (var op2)) (ite (var cf) (bv 8 0x1) (bv 8 0x0)))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var sum)))) (set _result (var sum)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))))
d "adc byte [eax], al" 1000 0x0 (seq (set op1 (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set op2 (cast 8 false (var eax))) (set sum (+ (+ (var op1) (var op2)) (ite (var cf) (bv 8 0x1) (bv 8 0x0)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var sum)) (set _result (var sum)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))))
d "adc dword [eax], eax" 1100 0x0 (seq (set op1 (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set op2 (var eax)) (set sum (+ (+ (var op1) (var op2)) (ite (var cf) (bv 32 0x1) (bv 32 0x0)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var sum)) (set _result (var sum)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))))
d "adc eax, dword [eax]" 1300 0x0 (seq (set op1 (var eax)) (set op2 (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set sum (+ (+ (var op1) (var op2)) (ite (var cf) (bv 32 0x1) (bv 32 0x0)))) (set eax (var sum)) (set _result (var sum)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))))
d "add al, 0x00" 0400 0x0 (seq (set op1 (cast 8 false (var eax))) (set op2 (bv 8 0x0)) (set sum (+ (var op1) (var op2))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var sum)))) (set _result (var sum)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))))
d "add al, byte [eax]" 0200 0x0 (seq (set op1 (cast 8 false (var eax))) (set op2 (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set sum (+ (var op1) (var op2))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var sum)))) (set _result (var sum)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))))
d "add byte [bx+si*1], al" 670000 0x0 (seq (set op1 (loadw 0 8 (+ (+ (cast 32 false (cast 16 false (var ebx))) (* (cast 32 false (cast 16 false (var esi))) (bv 32 0x1))) (bv 32 0x0)))) (set op2 (cast 8 false (var eax))) (set sum (+ (var op1) (var op2))) (storew 0 (+ (+ (cast 32 false (cast 16 false (var ebx))) (* (cast 32 false (cast 16 false (var esi))) (bv 32 0x1))) (bv 32 0x0)) (var sum)) (set _result (var sum)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))))
d "add byte [eax], 0x00" 800000 0x0 (seq (set op1 (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set op2 (bv 8 0x0)) (set sum (+ (var op1) (var op2))) (storew 0 (+ (var eax) (bv 32 0x0)) (var sum)) (set _result (var sum)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))))
d "add byte [eax], 0x00" 820000 0x0 (seq (set op1 (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set op2 (bv 8 0x0)) (set sum (+ (var op1) (var op2))) (storew 0 (+ (var eax) (bv 32 0x0)) (var sum)) (set _result (var sum)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))))
d "add byte [eax], al" 0000 0x0 (seq (set op1 (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set op2 (cast 8 false (var eax))) (set sum (+ (var op1) (var op2))) (storew 0 (+ (var eax) (bv 32 0x0)) (var sum)) (set _result (var sum)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))))
d "add byte [eax], al" 0000 0x0 (seq (set op1 (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set op2 (cast 8 false (var eax))) (set sum (+ (var op1) (var op2))) (storew 0 (+ (var eax) (bv 32 0x0)) (var sum)) (set _result (var sum)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))))
d "add dword [eax], 0x00" 810000000000 0x0 (seq (set op1 (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set op2 (bv 32 0x0)) (set sum (+ (var op1) (var op2))) (storew 0 (+ (var eax) (bv 32 0x0)) (var sum)) (set _result (var sum)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))))
d "add dword [eax], 0x00" 830000 0x0 (seq (set op1 (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set op2 (bv 32 0x0)) (set sum (+ (var op1) (var op2))) (storew 0 (+ (var eax) (bv 32 0x0)) (var sum)) (set _result (var sum)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))))
d "add dword [eax], eax" 0100 0x0 (seq (set op1 (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set op2 (var eax)) (set sum (+ (var op1) (var op2))) (storew 0 (+ (var eax) (bv 32 0x0)) (var sum)) (set _result (var sum)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))))
d "add eax, dword [eax]" 0300 0x0 (seq (set op1 (var eax)) (set op2 (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set sum (+ (var op1) (var op2))) (set eax (var sum)) (set _result (var sum)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sum)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (msb (var _x)) (msb (var _y))) (&& (! (msb (var _result))) (msb (var _y)))) (&& (msb (var _x)) (! (msb (var _result)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))))
d "addsd xmm0, qword [eax]" f20f5800
d "addss xmm0, dword [eax]" f30f5800
d "addsubpd xmm0, xmmword [eax]" 660fd000
d "addsubps xmm0, xmmword [eax]" f20fd000
d "and al, 0x00" 2400 0x0 (seq (set and_ (& (cast 8 false (var eax)) (bv 8 0x0))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var and_)))) (set of false) (set cf false) (set _result (var and_)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "and al, byte [eax]" 2200 0x0 (seq (set and_ (& (cast 8 false (var eax)) (loadw 0 8 (+ (var eax) (bv 32 0x0))))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var and_)))) (set of false) (set cf false) (set _result (var and_)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "and byte [eax], al" 2000 0x0 (seq (set and_ (& (loadw 0 8 (+ (var eax) (bv 32 0x0))) (cast 8 false (var eax)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var and_)) (set of false) (set cf false) (set _result (var and_)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "and dword [eax], eax" 2100 0x0 (seq (set and_ (& (loadw 0 32 (+ (var eax) (bv 32 0x0))) (var eax))) (storew 0 (+ (var eax) (bv 32 0x0)) (var and_)) (set of false) (set cf false) (set _result (var and_)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "and eax, dword [eax]" 2300 0x0 (seq (set and_ (& (var eax) (loadw 0 32 (+ (var eax) (bv 32 0x0))))) (set eax (var and_)) (set of false) (set cf false) (set _result (var and_)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "arpl word [eax], ax" 6300
d "bound eax, qword [eax]" 6200 0x0 (seq (set _index (var eax)) (set _lower (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set _upper (loadw 0 32 (+ (var eax) (bv 32 0x8)))) (branch (|| (&& (ule (var _index) (var _lower)) (! (== (var _index) (var _lower)))) (! (ule (var _index) (var _upper)))) (goto int) nop))
d "bsf eax, dword [eax]" 0fbc00
d "bsr eax, dword [eax]" 0fbd00
d "bswap eax" 0fc8
d "bswap ebp" 0fcd
d "bswap ebx" 0fcb
d "bswap ecx" 0fc9
d "bswap edi" 0fcf
d "bswap edx" 0fca
d "bswap esi" 0fce
d "bswap esp" 0fcc
d "bt dword [eax], eax" 0fa300
d "btc dword [eax], eax" 0fbb00
d "btr dword [eax], eax" 0fb300
d "bts dword [eax], eax" 0fab00
d "call 0x4" 66e80000
d "call 0x5" e800000000
d "call dword [eax]" ff10
d "cbw" 6698 0x0 (set eax (| (& (var eax) (~ (bv 32 0xffff))) (cast 32 false (cast 16 false (cast 8 false (var eax))))))
d "cdq" 99
d "clc" f8 0x0 (set cf false)
d "cld" fc 0x0 (set df false)
d "clflush zmmword [eax]" 0fae38
d "clgi" 0f01dd
d "cli" fa 0x0 (set if false)
d "clts" 0f06
d "cmc" f5 0x0 (set cf (! (var cf)))
d "cmovnbe eax, dword [eax]" 0f4700
d "cmovnb eax, dword [eax]" 0f4300
d "cmovb eax, dword [eax]" 0f4200
d "cmovbe eax, dword [eax]" 0f4600
d "cmovz eax, dword [eax]" 0f4400
d "cmovnle eax, dword [eax]" 0f4f00
d "cmovnl eax, dword [eax]" 0f4d00
d "cmovl eax, dword [eax]" 0f4c00
d "cmovle eax, dword [eax]" 0f4e00
d "cmovnz eax, dword [eax]" 0f4500
d "cmovno eax, dword [eax]" 0f4100
d "cmovnp eax, dword [eax]" 0f4b00
d "cmovns eax, dword [eax]" 0f4900
d "cmovo eax, dword [eax]" 0f4000
d "cmovp eax, dword [eax]" 0f4a00
d "cmovs eax, dword [eax]" 0f4800
d "cmp al, 0x00" 3c00 0x0 (seq (set op1 (cast 8 false (var eax))) (set op2 (bv 8 0x0)) (set sub (- (var op1) (var op2))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "cmp al, byte [eax]" 3a00 0x0 (seq (set op1 (cast 8 false (var eax))) (set op2 (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set sub (- (var op1) (var op2))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "cmp byte [eax], al" 3800 0x0 (seq (set op1 (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set op2 (cast 8 false (var eax))) (set sub (- (var op1) (var op2))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "cmp dword [eax], eax" 3900 0x0 (seq (set op1 (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set op2 (var eax)) (set sub (- (var op1) (var op2))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "cmp eax, dword [eax]" 3b00 0x0 (seq (set op1 (var eax)) (set op2 (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set sub (- (var op1) (var op2))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "cmppd xmm0, xmmword [eax], 0x00" 660fc20000
d "cmpps xmm0, xmmword [eax], 0x00" 0fc20000
d "cmpsd xmm0, qword [eax], 0x00" f20fc20000
d "cmpss xmm0, dword [eax], 0x00" f30fc20000
d "cmppd xmm0, xmmword [eax], 0x02" 660fc20002
d "cmpps xmm0, xmmword [eax], 0x02" 0fc20002
d "cmpsd xmm0, qword [eax], 0x02" f20fc20002
d "cmpss xmm0, dword [eax], 0x02" f30fc20002
d "cmppd xmm0, xmmword [eax], 0x01" 660fc20001
d "cmpps xmm0, xmmword [eax], 0x01" 0fc20001
d "cmpsd xmm0, qword [eax], 0x01" f20fc20001
d "cmpss xmm0, dword [eax], 0x01" f30fc20001
d "cmppd xmm0, xmmword [eax], 0x04" 660fc20004
d "cmpps xmm0, xmmword [eax], 0x04" 0fc20004
d "cmpsd xmm0, qword [eax], 0x04" f20fc20004
d "cmpss xmm0, dword [eax], 0x04" f30fc20004
d "cmppd xmm0, xmmword [eax], 0x06" 660fc20006
d "cmpps xmm0, xmmword [eax], 0x06" 0fc20006
d "cmpsd xmm0, qword [eax], 0x06" f20fc20006
d "cmpss xmm0, dword [eax], 0x06" f30fc20006
d "cmppd xmm0, xmmword [eax], 0x05" 660fc20005
d "cmpps xmm0, xmmword [eax], 0x05" 0fc20005
d "cmpsd xmm0, qword [eax], 0x05" f20fc20005
d "cmpss xmm0, dword [eax], 0x05" f30fc20005
d "cmppd xmm0, xmmword [eax], 0x07" 660fc20007
d "cmpps xmm0, xmmword [eax], 0x07" 0fc20007
d "cmpsd xmm0, qword [eax], 0x07" f20fc20007
d "cmpss xmm0, dword [eax], 0x07" f30fc20007
d "cmppd xmm0, xmmword [eax], 0x03" 660fc20003
d "cmpps xmm0, xmmword [eax], 0x03" 0fc20003
d "cmpsd xmm0, qword [eax], 0x03" f20fc20003
d "cmpss xmm0, dword [eax], 0x03" f30fc20003
d "cmpxchg byte [eax], al" 0fb000
d "cmpxchg dword [eax], eax" 0fb100
d "cpuid" 0fa2
d "crc32 eax, byte [eax]" f20f38f000
d "crc32 eax, dword [eax]" f20f38f100
d "cwd" 6699
d "cwde" 98
d "daa" 27 0x0 (seq (set old_al (cast 8 false (var eax))) (set old_cf (var cf)) (set cf false) (branch (|| (! (ule (& (cast 8 false (var eax)) (bv 8 0xf)) (bv 8 0x9))) (var af)) (seq (set _al (cast 8 false (var eax))) (set _sum (+ (var _al) (bv 8 0x6))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var _sum)))) (set cf (|| (var old_cf) (|| (|| (&& (! (msb (var _al))) (msb (bv 8 0x6))) (&& (msb (bv 8 0x6)) (msb (var _sum)))) (&& (msb (var _sum)) (! (msb (var _al))))))) (set af true)) (set af false)) (branch (|| (! (ule (var old_al) (bv 8 0x99))) (var old_cf)) (seq (set _al (cast 8 false (var eax))) (set _sum (+ (var _al) (bv 8 0x60))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var _sum)))) (set cf true)) (set cf false)) (set _result (cast 8 false (var eax))) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "das" 2f 0x0 (seq (set old_al (cast 8 false (var eax))) (set old_cf (var cf)) (set cf false) (branch (|| (! (ule (& (cast 8 false (var eax)) (bv 8 0xf)) (bv 8 0x9))) (var af)) (seq (set _al (cast 8 false (var eax))) (set _sum (- (var _al) (bv 8 0x6))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var _sum)))) (set cf (|| (var old_cf) (|| (|| (&& (! (msb (var _al))) (msb (bv 8 0x6))) (&& (msb (bv 8 0x6)) (msb (var _sum)))) (&& (msb (var _sum)) (! (msb (var _al))))))) (set af true)) (set af false)) (branch (|| (! (ule (var old_al) (bv 8 0x99))) (var old_cf)) (seq (set _al (cast 8 false (var eax))) (set _sum (- (var _al) (bv 8 0x60))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var _sum)))) (set cf true)) nop) (set _result (cast 8 false (var eax))) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "dec byte [eax]" fe08 0x0 (seq (set _op (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set _dec (- (var _op) (bv 8 0x1))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dec)) (set _result (var _dec)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
d "dec dword [eax]" ff08 0x0 (seq (set _op (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set _dec (- (var _op) (bv 32 0x1))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dec)) (set _result (var _dec)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
d "dec eax" 48 0x0 (seq (set _op (var eax)) (set _dec (- (var _op) (bv 32 0x1))) (set eax (var _dec)) (set _result (var _dec)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
d "dec ebp" 4d 0x0 (seq (set _op (var ebp)) (set _dec (- (var _op) (bv 32 0x1))) (set ebp (var _dec)) (set _result (var _dec)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
d "dec ebx" 4b 0x0 (seq (set _op (var ebx)) (set _dec (- (var _op) (bv 32 0x1))) (set ebx (var _dec)) (set _result (var _dec)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
d "dec ecx" 49 0x0 (seq (set _op (var ecx)) (set _dec (- (var _op) (bv 32 0x1))) (set ecx (var _dec)) (set _result (var _dec)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
d "dec edi" 4f 0x0 (seq (set _op (var edi)) (set _dec (- (var _op) (bv 32 0x1))) (set edi (var _dec)) (set _result (var _dec)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
d "dec edx" 4a 0x0 (seq (set _op (var edx)) (set _dec (- (var _op) (bv 32 0x1))) (set edx (var _dec)) (set _result (var _dec)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
d "dec esi" 4e 0x0 (seq (set _op (var esi)) (set _dec (- (var _op) (bv 32 0x1))) (set esi (var _dec)) (set _result (var _dec)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
d "dec esp" 4c 0x0 (seq (set _op (var esp)) (set _dec (- (var _op) (bv 32 0x1))) (set esp (var _dec)) (set _result (var _dec)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _dec)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
d "div byte [eax]" f630 0x0 (seq (set _src (cast 16 false (loadw 0 8 (+ (var eax) (bv 32 0x0))))) (branch (is_zero (var _src)) nop (seq (set _ax (cast 16 false (var eax))) (set _temp (cast 8 false (div (var _ax) (var _src)))) (branch (! (ule (var _temp) (bv 8 0xff))) nop (seq (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var _temp)))) (set eax (| (& (var eax) (~ (bv 32 0xff00))) (<< (cast 32 false (mod (var _ax) (var _src))) (bv 8 0x8) false))))))))
ad "div ax" 66f7f0 0x0 (seq (set _src (cast 32 false (cast 16 false (var eax)))) (branch (is_zero (var _src)) nop (seq (set _dxax (| (<< (cast 32 false (cast 16 false (var edx))) (bv 8 0x10) false) (cast 32 false (cast 16 false (var eax))))) (set _temp (cast 16 false (div (var _dxax) (var _src)))) (branch (! (ule (var _temp) (bv 16 0xffff))) nop (seq (set eax (| (& (var eax) (~ (bv 32 0xffff))) (cast 32 false (var _temp)))) (set edx (| (& (var edx) (~ (bv 32 0xffff))) (cast 32 false (mod (var _dxax) (var _src))))))))))
ad "div eax" f7f0 0x0 (seq (set _src (cast 64 false (var eax))) (branch (is_zero (var _src)) nop (seq (set _edxeax (| (<< (cast 64 false (var edx)) (bv 8 0x20) false) (cast 64 false (var eax)))) (set _temp (cast 32 false (div (var _edxeax) (var _src)))) (branch (! (ule (var _temp) (bv 32 0xffffffff))) nop (seq (set eax (| (& (var eax) (~ (bv 32 0xffff))) (cast 32 false (var _temp)))) (set edx (| (& (var edx) (~ (bv 32 0xffff))) (cast 32 false (mod (var _edxeax) (var _src))))))))))
d "divsd xmm0, qword [eax]" f20f5e00
d "divss xmm0, dword [eax]" f30f5e00
d "emms" 0f77
ad "endbr32" f30f1efb
d "enter 0x02, 0x00" c8020000 0x0 (seq (set _alloc_sz (cast 16 false (bv 16 0x2))) (set _nest_lvl (mod (cast 8 false (bv 8 0x0)) (bv 8 0x20))) (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var ebp))) (set esp (var final)) (set _frame_tmp (var esp)) (branch (is_zero (var _nest_lvl)) nop (seq (branch (! (ule (var _nest_lvl) (bv 8 0x1))) (seq (set _itr (bv 8 0x1)) (repeat (&& (ule (var _itr) (var _nest_lvl)) (! (== (var _itr) (var _nest_lvl)))) (seq (set ebp (- (var ebp) (bv 32 0x4))) (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (loadw 0 32 (var ebp)))) (set esp (var final)) (set _itr (+ (var _itr) (bv 8 0x1)))))) nop) (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var _frame_tmp))) (set esp (var final)))) (set esp (- (var esp) (cast 32 false (var _alloc_sz)))) (set ebp (var _frame_tmp)))
d "enter 0x08, 0x00" 66c8080000 0x0 (seq (set _alloc_sz (cast 16 false (bv 16 0x8))) (set _nest_lvl (mod (cast 8 false (bv 8 0x0)) (bv 8 0x20))) (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var ebp))) (set esp (var final)) (set _frame_tmp (var esp)) (branch (is_zero (var _nest_lvl)) nop (seq (branch (! (ule (var _nest_lvl) (bv 8 0x1))) (seq (set _itr (bv 8 0x1)) (repeat (&& (ule (var _itr) (var _nest_lvl)) (! (== (var _itr) (var _nest_lvl)))) (seq (set ebp (- (var ebp) (bv 32 0x4))) (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (loadw 0 32 (var ebp)))) (set esp (var final)) (set _itr (+ (var _itr) (bv 8 0x1)))))) nop) (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var _frame_tmp))) (set esp (var final)))) (set esp (- (var esp) (cast 32 false (var _alloc_sz)))) (set ebp (var _frame_tmp)))
d "femms" 0f0e
d "fxrstor [eax]" 0fae08
d "fxsave [eax]" 0fae00
d "getsec" 0f37
d "haddpd xmm0, xmmword [eax]" 660f7c00
d "haddps xmm0, xmmword [eax]" f20f7c00
d "hlt" f4 0x0 (goto halt)
d "hsubpd xmm0, xmmword [eax]" 660f7d00
d "hsubps xmm0, xmmword [eax]" f20f7d00
d "idiv byte [eax]" f638 0x0 (seq (set _src (cast 16 false (loadw 0 8 (+ (var eax) (bv 32 0x0))))) (branch (is_zero (var _src)) nop (seq (set _ax (cast 16 false (var eax))) (set _temp (cast 8 false (sdiv (var _ax) (var _src)))) (branch (|| (! (sle (var _temp) (bv 8 0x7f))) (&& (sle (var _temp) (bv 8 0x80)) (! (== (var _temp) (bv 8 0x80))))) nop (seq (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var _temp)))) (set eax (| (& (var eax) (~ (bv 32 0xff00))) (<< (cast 32 false (smod (var _ax) (var _src))) (bv 8 0x8) false))))))))
d "idiv ax" 66f7f8 0x0 (seq (set _src (cast 32 false (cast 16 false (var eax)))) (branch (is_zero (var _src)) nop (seq (set _dxax (| (<< (cast 32 false (cast 16 false (var edx))) (bv 8 0x10) false) (cast 32 false (cast 16 false (var eax))))) (set _temp (cast 16 false (sdiv (var _dxax) (var _src)))) (branch (|| (! (sle (var _temp) (bv 16 0x7fff))) (&& (sle (var _temp) (bv 16 0x8000)) (! (== (var _temp) (bv 16 0x8000))))) nop (seq (set eax (| (& (var eax) (~ (bv 32 0xffff))) (cast 32 false (var _temp)))) (set edx (| (& (var edx) (~ (bv 32 0xffff))) (cast 32 false (smod (var _dxax) (var _src))))))))))
d "idiv eax" f7f8 0x0 (seq (set _src (cast 64 false (var eax))) (branch (is_zero (var _src)) nop (seq (set _edxeax (| (<< (cast 64 false (var edx)) (bv 8 0x20) false) (cast 64 false (var eax)))) (set _temp (cast 32 false (sdiv (var _edxeax) (var _src)))) (branch (|| (! (sle (var _temp) (bv 32 0x7fffffff))) (&& (sle (var _temp) (bv 32 0x80000000)) (! (== (var _temp) (bv 32 0x80000000))))) nop (seq (set eax (| (& (var eax) (~ (bv 32 0xffff))) (cast 32 false (var _temp)))) (set edx (| (& (var edx) (~ (bv 32 0xffff))) (cast 32 false (smod (var _edxeax) (var _src))))))))))
d "imul byte [eax]" f628 0x0 (seq (set _tmp_xp (* (cast 16 (msb (cast 8 false (var eax))) (cast 8 false (var eax))) (cast 16 (msb (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (loadw 0 8 (+ (var eax) (bv 32 0x0)))))) (set eax (| (& (var eax) (~ (bv 32 0xffff))) (cast 32 false (var _tmp_xp)))) (branch (== (cast 16 (msb (cast 8 false (var _tmp_xp))) (cast 8 false (var _tmp_xp))) (var _tmp_xp)) (seq (set cf false) (set of false)) (seq (set cf true) (set of true))))
d "imul eax, dword [eax]" 0faf00 0x0 (seq (set _dest (var eax)) (set _tmp_xp (* (cast 64 (msb (var _dest)) (var _dest)) (cast 64 (msb (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (loadw 0 32 (+ (var eax) (bv 32 0x0)))))) (set _dest (cast 32 false (var _tmp_xp))) (set eax (var _dest)) (branch (== (cast 64 (msb (var _dest)) (var _dest)) (var _tmp_xp)) (seq (set cf false) (set of false)) (seq (set cf true) (set of true))))
d "imul eax, dword [eax], 0x00" 690000000000 0x0 (seq (set _tmp_xp (* (cast 64 (msb (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (cast 64 (msb (bv 32 0x0)) (bv 32 0x0)))) (set _dest (cast 32 false (var _tmp_xp))) (set eax (var _dest)) (branch (== (cast 64 (msb (var _dest)) (var _dest)) (var _tmp_xp)) (seq (set cf false) (set of false)) (seq (set cf true) (set of true))))
d "imul eax, dword [eax], 0x00" 6b0000 0x0 (seq (set _tmp_xp (* (cast 64 (msb (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (cast 64 (msb (bv 8 0x0)) (bv 8 0x0)))) (set _dest (cast 32 false (var _tmp_xp))) (set eax (var _dest)) (branch (== (cast 64 (msb (var _dest)) (var _dest)) (var _tmp_xp)) (seq (set cf false) (set of false)) (seq (set cf true) (set of true))))
ad "imul ax" 66f7e8 0x0 (seq (set _tmp_xp (* (cast 32 (msb (cast 16 false (var eax))) (cast 16 false (var eax))) (cast 32 (msb (cast 16 false (var eax))) (cast 16 false (var eax))))) (set eax (| (& (var eax) (~ (bv 32 0xffff))) (cast 32 false (cast 16 false (var _tmp_xp))))) (set edx (| (& (var edx) (~ (bv 32 0xffff))) (cast 32 false (cast 32 false (>> (var _tmp_xp) (bv 8 0x10) false))))) (branch (== (cast 32 (msb (cast 16 false (var _tmp_xp))) (cast 16 false (var _tmp_xp))) (var _tmp_xp)) (seq (set cf false) (set of false)) (seq (set cf true) (set of true))))
d "in al, 0x00" e400 0x0 (goto port)
d "in al, dx" ec 0x0 (goto port)
d "in eax, 0x00" e500 0x0 (goto port)
d "in eax, 0x8c" e58c 0x0 (goto port)
d "in eax, dx" ed 0x0 (goto port)
d "inc byte [eax]" fe00 0x0 (seq (set _op (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set _result (+ (var _op) (bv 8 0x1))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "inc dword [eax]" ff00 0x0 (seq (set _op (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "inc eax" 40 0x0 (seq (set _op (var eax)) (set _result (+ (var _op) (bv 32 0x1))) (set eax (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "inc ebp" 45 0x0 (seq (set _op (var ebp)) (set _result (+ (var _op) (bv 32 0x1))) (set ebp (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "inc ebx" 43 0x0 (seq (set _op (var ebx)) (set _result (+ (var _op) (bv 32 0x1))) (set ebx (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "inc ecx" 41 0x0 (seq (set _op (var ecx)) (set _result (+ (var _op) (bv 32 0x1))) (set ecx (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "inc edi" 47 0x0 (seq (set _op (var edi)) (set _result (+ (var _op) (bv 32 0x1))) (set edi (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "inc edx" 42 0x0 (seq (set _op (var edx)) (set _result (+ (var _op) (bv 32 0x1))) (set edx (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "inc esi" 46 0x0 (seq (set _op (var esi)) (set _result (+ (var _op) (bv 32 0x1))) (set esi (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "inc esp" 44 0x0 (seq (set _op (var esp)) (set _result (+ (var _op) (bv 32 0x1))) (set esp (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "insb" 6c
d "insd" 6d
d "int 0x01" cd01 0x0 (goto int)
d "int 0x03" cd03 0x0 (goto int)
d "int1" F1
d "int3" CC
d "into" ce 0x0 (branch (var of) (goto int) nop)
d "invd" 0f08
d "invlpg byte [eax]" 0f0138
d "iret" 66cf 0x0 empty
d "iretd" CF
d "jnbe 0x2" 7700 0x0 (branch (&& (! (var cf)) (! (var zf))) (jmp (bv 32 0x2)) nop)
d "jnbe 0x6" 0f8700000000 0x0 (branch (&& (! (var cf)) (! (var zf))) (jmp (bv 32 0x6)) nop)
d "jnb 0x2" 7300 0x0 (branch (! (var cf)) (jmp (bv 32 0x2)) nop)
d "jnb 0x6" 0f8300000000 0x0 (branch (! (var cf)) (jmp (bv 32 0x6)) nop)
d "jb 0x2" 7200 0x0 (branch (var cf) (jmp (bv 32 0x2)) nop)
d "jb 0x6" 0f8200000000 0x0 (branch (var cf) (jmp (bv 32 0x6)) nop)
d "jbe 0x2" 7600 0x0 (branch (|| (var cf) (var zf)) (jmp (bv 32 0x2)) nop)
d "jbe 0x6" 0f8600000000 0x0 (branch (|| (var cf) (var zf)) (jmp (bv 32 0x6)) nop)
d "jz 0x2" 7400 0x0 (branch (var zf) (jmp (bv 32 0x2)) nop)
d "jz 0x6" 0f8400000000 0x0 (branch (var zf) (jmp (bv 32 0x6)) nop)
d "jnle 0x2" 7f00 0x0 (branch (&& (! (var zf)) (! (^^ (var sf) (var of)))) (jmp (bv 32 0x2)) nop)
d "jnle 0x6" 0f8f00000000 0x0 (branch (&& (! (var zf)) (! (^^ (var sf) (var of)))) (jmp (bv 32 0x6)) nop)
d "jnl 0x2" 7d00 0x0 (branch (! (^^ (var sf) (var of))) (jmp (bv 32 0x2)) nop)
d "jnl 0x6" 0f8d00000000 0x0 (branch (! (^^ (var sf) (var of))) (jmp (bv 32 0x6)) nop)
d "jl 0x2" 7c00 0x0 (branch (^^ (var sf) (var of)) (jmp (bv 32 0x2)) nop)
d "jl 0x6" 0f8c00000000 0x0 (branch (^^ (var sf) (var of)) (jmp (bv 32 0x6)) nop)
d "jle 0x2" 7e00 0x0 (branch (|| (var zf) (^^ (var sf) (var of))) (jmp (bv 32 0x2)) nop)
d "jle 0x6" 0f8e00000000 0x0 (branch (|| (var zf) (^^ (var sf) (var of))) (jmp (bv 32 0x6)) nop)
d "jmp 0x3" 66EB00
d "jnz 0x2" 7500 0x0 (branch (! (var zf)) (jmp (bv 32 0x2)) nop)
d "jnz 0x6" 0f8500000000 0x0 (branch (! (var zf)) (jmp (bv 32 0x6)) nop)
d "jno 0x2" 7100 0x0 (branch (! (var of)) (jmp (bv 32 0x2)) nop)
d "jno 0x6" 0f8100000000 0x0 (branch (! (var of)) (jmp (bv 32 0x6)) nop)
d "jnp 0x2" 7b00 0x0 (branch (! (var pf)) (jmp (bv 32 0x2)) nop)
d "jnp 0x6" 0f8b00000000 0x0 (branch (! (var pf)) (jmp (bv 32 0x6)) nop)
d "jns 0x2" 7900 0x0 (branch (! (var sf)) (jmp (bv 32 0x2)) nop)
d "jns 0x6" 0f8900000000 0x0 (branch (! (var sf)) (jmp (bv 32 0x6)) nop)
d "jo 0x2" 7000 0x0 (branch (var of) (jmp (bv 32 0x2)) nop)
d "jo 0x6" 0f8000000000 0x0 (branch (var of) (jmp (bv 32 0x6)) nop)
d "jp 0x2" 7a00 0x0 (branch (var pf) (jmp (bv 32 0x2)) nop)
d "jp 0x6" 0f8a00000000 0x0 (branch (var pf) (jmp (bv 32 0x6)) nop)
d "js 0x2" 7800 0x0 (branch (var sf) (jmp (bv 32 0x2)) nop)
d "js 0x6" 0f8800000000 0x0 (branch (var sf) (jmp (bv 32 0x6)) nop)
d "jecxz 0x72" e308 0x68 (branch (is_zero (var ecx)) (jmp (bv 32 0x72)) nop)
d "jcxz 0x4d" 67e308 0x42 (branch (is_zero (cast 16 false (var ecx))) (jmp (bv 32 0x4d)) nop)
d "lahf" 9f 0x0 (set eax (| (& (var eax) (~ (bv 32 0xff00))) (<< (cast 32 false (| (<< (| (<< (| (<< (| (<< (| (<< (ite (var sf) (bv 8 0x1) (bv 8 0x0)) (bv 8 0x1) false) (ite (var zf) (bv 8 0x1) (bv 8 0x0))) (bv 8 0x2) false) (ite (var af) (bv 8 0x1) (bv 8 0x0))) (bv 8 0x2) false) (ite (var pf) (bv 8 0x1) (bv 8 0x0))) (bv 8 0x1) false) (bv 8 0x1)) (bv 8 0x1) false) (ite (var cf) (bv 8 0x1) (bv 8 0x0)))) (bv 8 0x8) false)))
d "lar eax, word [eax]" 0f0200
d "call far fword [0x0]" ff1c2500000000
d "call far fword [eax]" ff18
d "lddqu xmm0, xmmword [eax]" f20ff000
d "ldmxcsr dword [eax]" 0fae10
d "lds eax, fword [eax]" c500 0x0 (set eax (+ (var eax) (bv 32 0x0)))
d "lea eax, dword [eax]" 8d00 0x0 (set eax (cast 32 false (+ (var eax) (bv 32 0x0))))
ad "leave" c9 0x0 (seq (set esp (var ebp)) (set esp (+ (var esp) (bv 32 0x4))) (set ebp (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))))
d "leave" 66c9 0x0 (seq (set esp (var ebp)) (set esp (+ (var esp) (bv 32 0x4))) (set ebp (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))))
d "les eax, fword [eax]" c400 0x0 (set eax (+ (+ (var eax) (bv 32 0x0)) (<< (cast 32 false (var es)) (bv 8 0x4) false)))
d "lfence" 0faee8
d "lgdt fword [eax]" 0f0110
d "lidt fword [eax]" 0f0118
d "lldt ax" 0f00d0
d "lldt word [eax]" 0f0010
d "lmsw ax" 0f01f0
d "lmsw word [eax]" 0f0130
d "lock and word fs:[bx+si*1], si" 646766f02130
d "lodsb" ac 0x0 (seq (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (loadw 0 8 (+ (var esi) (bv 32 0x0)))))) (branch (var df) (set esi (- (var esi) (bv 32 0x1))) (set esi (+ (var esi) (bv 32 0x1)))))
d "lodsd" ad 0x0 (seq (set eax (loadw 0 32 (+ (var esi) (bv 32 0x0)))) (branch (var df) (set esi (- (var esi) (bv 32 0x4))) (set esi (+ (var esi) (bv 32 0x4)))))
d "lodsd" 67ad 0x0 (seq (set eax (loadw 0 32 (+ (var esi) (bv 32 0x0)))) (branch (var df) (set esi (- (var esi) (bv 32 0x4))) (set esi (+ (var esi) (bv 32 0x4)))))
d "loop 0x3" 66e200 0x0 (seq (set ecx (- (var ecx) (bv 32 0x1))) (branch (! (is_zero (var ecx))) (jmp (bv 32 0x6)) nop))
d "loope 0x3" 66e100 0x0 (seq (set ecx (- (var ecx) (bv 32 0x1))) (branch (&& (! (is_zero (var ecx))) (var zf)) (jmp (bv 32 0x6)) nop))
d "loopne 0x3" 66e000 0x0 (seq (set ecx (- (var ecx) (bv 32 0x1))) (branch (&& (! (is_zero (var ecx))) (! (var zf))) (jmp (bv 32 0x6)) nop))
d "lsl eax, word [eax]" 0f0300
d "ltr ax" 0f00d8
d "ltr word [eax]" 0f0018
d "lzcnt eax, dword [eax]" f30fbd00
d "mfence" 0faef0
d "monitor" 0f01c8
d "mov ah, 0x00" b400 0x0 (set eax (| (& (var eax) (~ (bv 32 0xff00))) (<< (cast 32 false (bv 8 0x0)) (bv 8 0x8) false)))
d "mov ah, 0x00" b400 0x0 (set eax (| (& (var eax) (~ (bv 32 0xff00))) (<< (cast 32 false (bv 8 0x0)) (bv 8 0x8) false)))
d "mov al, 0x00" b000 0x0 (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (bv 8 0x0))))
d "mov al, 0x00" b000 0x0 (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (bv 8 0x0))))
d "mov al, byte [0x0]" a000000000 0x0 (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (loadw 0 8 (bv 32 0x0)))))
d "mov al, byte [eax]" 8a00 0x0 (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (loadw 0 8 (+ (var eax) (bv 32 0x0))))))
d "mov bh, 0x00" b700 0x0 (set ebx (| (& (var ebx) (~ (bv 32 0xff00))) (<< (cast 32 false (bv 8 0x0)) (bv 8 0x8) false)))
d "mov bh, 0x00" b700 0x0 (set ebx (| (& (var ebx) (~ (bv 32 0xff00))) (<< (cast 32 false (bv 8 0x0)) (bv 8 0x8) false)))
d "mov bl, 0x00" b300 0x0 (set ebx (| (& (var ebx) (~ (bv 32 0xff))) (cast 32 false (bv 8 0x0))))
d "mov bl, 0x00" b300 0x0 (set ebx (| (& (var ebx) (~ (bv 32 0xff))) (cast 32 false (bv 8 0x0))))
d "mov byte [0x0], al" a200000000 0x0 (storew 0 (bv 32 0x0) (cast 8 false (var eax)))
d "mov byte [eax], 0x00" c60000 0x0 (storew 0 (+ (var eax) (bv 32 0x0)) (bv 8 0x0))
d "mov byte [eax], al" 8800 0x0 (storew 0 (+ (var eax) (bv 32 0x0)) (cast 8 false (var eax)))
d "mov ch, 0x00" b500 0x0 (set ecx (| (& (var ecx) (~ (bv 32 0xff00))) (<< (cast 32 false (bv 8 0x0)) (bv 8 0x8) false)))
d "mov ch, 0x00" b500 0x0 (set ecx (| (& (var ecx) (~ (bv 32 0xff00))) (<< (cast 32 false (bv 8 0x0)) (bv 8 0x8) false)))
d "mov cl, 0x00" b100 0x0 (set ecx (| (& (var ecx) (~ (bv 32 0xff))) (cast 32 false (bv 8 0x0))))
d "mov cl, 0x00" b100 0x0 (set ecx (| (& (var ecx) (~ (bv 32 0xff))) (cast 32 false (bv 8 0x0))))
d "mov dh, 0x00" b600 0x0 (set edx (| (& (var edx) (~ (bv 32 0xff00))) (<< (cast 32 false (bv 8 0x0)) (bv 8 0x8) false)))
d "mov dh, 0x00" b600 0x0 (set edx (| (& (var edx) (~ (bv 32 0xff00))) (<< (cast 32 false (bv 8 0x0)) (bv 8 0x8) false)))
d "mov dl, 0x00" b200 0x0 (set edx (| (& (var edx) (~ (bv 32 0xff))) (cast 32 false (bv 8 0x0))))
d "mov dl, 0x00" b200 0x0 (set edx (| (& (var edx) (~ (bv 32 0xff))) (cast 32 false (bv 8 0x0))))
d "mov dr0, eax" 0f2300 0x0 (set dr0 (var eax))
d "mov dword [0x0], eax" a300000000 0x0 (storew 0 (bv 32 0x0) (var eax))
d "mov dword [eax], 0x00" c70000000000 0x0 (storew 0 (+ (var eax) (bv 32 0x0)) (bv 32 0x0))
d "mov dword [eax], eax" 8900 0x0 (storew 0 (+ (var eax) (bv 32 0x0)) (var eax))
d "mov dword cs:[eax], eax" 2e8900 0x0 (storew 0 (+ (+ (var eax) (bv 32 0x0)) (<< (cast 32 false (var cs)) (bv 8 0x4) false)) (var eax))
d "mov dword ds:[eax], eax" 3e8900 0x0 (storew 0 (+ (var eax) (bv 32 0x0)) (var eax))
d "mov dword es:[eax], eax" 268900 0x0 (storew 0 (+ (+ (var eax) (bv 32 0x0)) (<< (cast 32 false (var es)) (bv 8 0x4) false)) (var eax))
d "mov dword fs:[eax], eax" 648900 0x0 (storew 0 (+ (+ (var eax) (bv 32 0x0)) (<< (cast 32 false (var fs)) (bv 8 0x4) false)) (var eax))
d "mov dword gs:[eax], eax" 658900 0x0 (storew 0 (+ (+ (var eax) (bv 32 0x0)) (<< (cast 32 false (var gs)) (bv 8 0x4) false)) (var eax))
d "mov dword ss:[eax], eax" 368900 0x0 (storew 0 (+ (+ (var eax) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (var eax))
d "mov eax, 0x00" b800000000 0x0 (set eax (bv 32 0x0))
d "mov eax, cr0" 0f2000 0x0 (set eax (var cr0))
d "mov eax, dr0" 0f2100 0x0 (set eax (var dr0))
d "mov cr0, eax" 0f2200 0x0 (set cr0 (var eax))
d "mov eax, dword [0x0]" a100000000 0x0 (set eax (loadw 0 32 (bv 32 0x0)))
d "mov eax, dword [eax]" 8b00 0x0 (set eax (loadw 0 32 (+ (var eax) (bv 32 0x0))))
d "mov eax, dword [ebp]" 8b4500 0x0 (set eax (loadw 0 32 (+ (+ (var ebp) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false))))
d "mov eax, dword [esp]" 8b0424 0x0 (set eax (loadw 0 32 (+ (+ (var esp) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false))))
d "mov eax, dword fs:[ebp]" 648b4500 0x0 (set eax (loadw 0 32 (+ (+ (var ebp) (bv 32 0x0)) (<< (cast 32 false (var fs)) (bv 8 0x4) false))))
d "mov ebp, 0x00" bd00000000 0x0 (set ebp (bv 32 0x0))
d "mov ebx, 0x00" bb00000000 0x0 (set ebx (bv 32 0x0))
d "mov ecx, 0x00" b900000000 0x0 (set ecx (bv 32 0x0))
d "mov edi, 0x00" bf00000000 0x0 (set edi (bv 32 0x0))
d "mov edx, 0x00" ba00000000 0x0 (set edx (bv 32 0x0))
d "mov es, word [eax]" 8e00 0x0 (set es (loadw 0 16 (+ (var eax) (bv 32 0x0))))
d "mov esi, 0x00" be00000000 0x0 (set esi (bv 32 0x0))
d "mov esp, 0x00" bc00000000 0x0 (set esp (bv 32 0x0))
d "mov word [eax], es" 8c00 0x0 (storew 0 (+ (var eax) (bv 32 0x0)) (var es))
a "mov al, [0xbeef]" a0efbe0000 0x0 (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (loadw 0 8 (bv 32 0xbeef)))))
a "mov ax, [0xbeef]" 66a1efbe0000 0x0 (set eax (| (& (var eax) (~ (bv 32 0xffff))) (cast 32 false (loadw 0 16 (bv 32 0xbeef)))))
a "mov eax, [0xbeef]" a1efbe0000 0x0 (set eax (loadw 0 32 (bv 32 0xbeef)))
a "mov eax, [0x12345678]" a178563412 0x0 (set eax (loadw 0 32 (bv 32 0x12345678)))
d "movapd xmm0, xmmword [eax]" 660f2800
d "movapd xmmword [eax], xmm0" 660f2900
d "movhpd qword [eax], xmm0" 660f1700
d "movhpd xmm0, qword [eax]" 660f1600
d "movlpd qword [eax], xmm0" 660f1300
d "movlpd xmm0, qword [eax]" 660f1200
d "movntdq xmmword [eax], xmm0" 660fe700
d "movnti dword [eax], eax" 0fc300
d "movntq qword [eax], mm0" 0fe700
d "movq qword [eax], xmm0" 660fd600
d "movsb" a4 0x0 (seq (storew 0 (+ (+ (var edi) (bv 32 0x0)) (<< (cast 32 false (var es)) (bv 8 0x4) false)) (loadw 0 8 (+ (var esi) (bv 32 0x0)))) (branch (var df) (seq (set esi (- (var esi) (bv 32 0x1))) (set edi (- (var edi) (bv 32 0x1)))) (seq (set esi (+ (var esi) (bv 32 0x1))) (set edi (+ (var edi) (bv 32 0x1))))))
d "movsd" a5 0x0 (seq (storew 0 (+ (+ (var edi) (bv 32 0x0)) (<< (cast 32 false (var es)) (bv 8 0x4) false)) (loadw 0 32 (+ (var esi) (bv 32 0x0)))) (branch (var df) (seq (set esi (- (var esi) (bv 32 0x4))) (set edi (- (var edi) (bv 32 0x4)))) (seq (set esi (+ (var esi) (bv 32 0x4))) (set edi (+ (var edi) (bv 32 0x4))))))
d "movshdup xmm0, xmmword [eax]" f30f1600
d "movsldup xmm0, xmmword [eax]" f30f1200
d "movss dword [eax], xmm0" f30f1100
d "movss xmm0, dword [eax]" f30f1000
d "movsx eax, byte [eax]" 0fbe00
d "movsx eax, word [eax]" 0fbf00
d "movupd xmm0, xmmword [eax]" 660f1000
d "movupd xmmword [eax], xmm0" 660f1100
d "movzx eax, byte [eax]" 0fb600
d "movzx eax, word [eax]" 0fb700
ad "mov byte [esp+eax*1+0x0f], 0x00" c644040f00 0x0 (storew 0 (+ (+ (+ (var esp) (* (var eax) (bv 32 0x1))) (bv 32 0xf)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 8 0x0))
ad "mov byte [eax+ecx*1+0x0f], 0x00" c644080f00 0x0 (storew 0 (+ (+ (var eax) (* (var ecx) (bv 32 0x1))) (bv 32 0xf)) (bv 8 0x0))
ad "mov byte [edx+ecx*1+0x02], 0x04" c6440a0204 0x0 (storew 0 (+ (+ (var edx) (* (var ecx) (bv 32 0x1))) (bv 32 0x2)) (bv 8 0x4))
d "mulsd xmm0, qword [eax]" f20f5900
d "mulss xmm0, dword [eax]" f30f5900
d "mwait" 0f01c9
ad "fwait" 9b 0x0 nop
d "neg byte [eax]" f618 0x0 (seq (set _op (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (branch (is_zero (var _op)) (set cf false) (set cf true)) (storew 0 (+ (var eax) (bv 32 0x0)) (~- (var _op))))
d "neg eax" f7d8 0x0 (seq (set _op (var eax)) (branch (is_zero (var _op)) (set cf false) (set cf true)) (set eax (~- (var _op))))
a "neg eax" f7d8 0x0 (seq (set _op (var eax)) (branch (is_zero (var _op)) (set cf false) (set cf true)) (set eax (~- (var _op))))
ad "nop" 90 0x0 nop
d "not byte [eax]" f610 0x0 (storew 0 (+ (var eax) (bv 32 0x0)) (~ (loadw 0 8 (+ (var eax) (bv 32 0x0)))))
d "not al" f6d0 0x0 (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (~ (cast 8 false (var eax))))))
d "or al, 0x00" 0c00 0x0 (seq (set _or (| (cast 8 false (var eax)) (bv 8 0x0))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var _or)))) (set of false) (set cf false) (set _result (var _or)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "or byte [eax], al" 0800 0x0 (seq (set _or (| (loadw 0 8 (+ (var eax) (bv 32 0x0))) (cast 8 false (var eax)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _or)) (set of false) (set cf false) (set _result (var _or)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "or dword [eax], eax" 0900 0x0 (seq (set _or (| (loadw 0 32 (+ (var eax) (bv 32 0x0))) (var eax))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _or)) (set of false) (set cf false) (set _result (var _or)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "or eax, dword [eax]" 0b00 0x0 (seq (set _or (| (var eax) (loadw 0 32 (+ (var eax) (bv 32 0x0))))) (set eax (var _or)) (set of false) (set cf false) (set _result (var _or)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "out 0x00, al" e600 0x0 (goto port)
d "out 0x00, eax" e700 0x0 (goto port)
d "out 0x84, eax" e784 0x0 (goto port)
ad "out dx, al" ee 0x0 (goto port)
ad "out dx, eax" ef 0x0 (goto port)
d "outsb" 6e
d "outsd" 6f
d "paddq xmm0, xmmword [eax]" 660fd400
d "paddsb mm0, qword [eax]" 0fec00
d "paddsw mm0, qword [eax]" 0fed00
d "paddusb mm0, qword [eax]" 0fdc00
d "paddusw mm0, qword [eax]" 0fdd00
d "pand mm0, qword [eax]" 0fdb00
d "pandn mm0, qword [eax]" 0fdf00
d "pause" f390
d "pavgb mm0, qword [eax]" 0fe000
d "pavgb mm0, qword [eax]" 0fe000
d "pavgw mm0, qword [eax]" 0fe300
d "pextrb eax, xmm0, 0x00" 660f3a14c000
d "pextrd eax, xmm0, 0x00" 660f3a16c000
d "pextrw eax, mm0, 0x00" 0fc5c000
d "pextrw eax, xmm0, 0x00" 660fc5c000
d "pinsrd xmm0, dword [eax], 0x00" 660f3a220000
d "pinsrw mm0, word [eax], 0x00" 0fc40000
d "pinsrw xmm0, word [eax], 0x00" 660fc40000
d "pmaxsw mm0, qword [eax]" 0fee00
d "pmaxub mm0, qword [eax]" 0fde00
d "pminsw mm0, qword [eax]" 0fea00
d "pminub mm0, qword [eax]" 0fda00
d "pop ds" 1f 0x0 (seq (set ds (loadw 0 16 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x2))))
d "pop dword [eax]" 8f00 0x0 (seq (storew 0 (+ (var eax) (bv 32 0x0)) (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
d "pop eax" 58 0x0 (seq (set eax (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
d "pop ebp" 5d 0x0 (seq (set ebp (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
d "pop ebx" 5b 0x0 (seq (set ebx (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
d "pop ecx" 59 0x0 (seq (set ecx (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
d "pop edi" 5f 0x0 (seq (set edi (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
d "pop edx" 5a 0x0 (seq (set edx (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
d "pop es" 07 0x0 (seq (set es (loadw 0 16 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x2))))
d "pop esi" 5e 0x0 (seq (set esi (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
d "pop esp" 5c 0x0 (seq (set esp (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
d "pop fs" 0fa1 0x0 (seq (set fs (loadw 0 16 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x2))))
d "pop gs" 0fa9 0x0 (seq (set gs (loadw 0 16 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x2))))
d "pop ss" 17 0x0 (seq (set ss (loadw 0 16 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x2))))
d "popad" 61
d "popa" 6661
d "popfd" 9d 0x0 (seq (set _flags (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set cf (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x2) false)) (set pf (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x2) false)) (set af (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x2) false)) (set zf (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x1) false)) (set sf (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x1) false)) (set tf (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x1) false)) (set if (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x1) false)) (set df (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x1) false)) (set of (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x3) false)) (set nt (lsb (var _flags))) (set esp (+ (var esp) (bv 32 0x4))))
d "por mm0, qword [eax]" 0feb00
d "prefetchnta byte [eax]" 0f1800
d "prefetcht0 byte [eax]" 0f1808
d "prefetcht1 byte [eax]" 0f1810
d "prefetcht2 byte [eax]" 0f1818
d "psrad mm0, 0x00" 0f72e000
d "psrad mm0, qword [eax]" 0fe200
d "psrad xmm0, 0x00" 660f72e000
d "psrad xmm0, xmmword [eax]" 660fe200
d "psraw mm0, 0x00" 0f71e000
d "psraw mm0, qword [eax]" 0fe100
d "psraw xmm0, 0x00" 660f71e000
d "psraw xmm0, xmmword [eax]" 660fe100
d "psubsb mm0, qword [eax]" 0fe800
d "psubsw mm0, qword [eax]" 0fe900
d "psubusb mm0, qword [eax]" 0fd800
d "psubusw mm0, qword [eax]" 0fd900
d "punpckhqdq xmm0, xmmword [eax]" 660f6d00
d "punpcklqdq xmm0, xmmword [eax]" 660f6c00
d "push 0x00" 6a00 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (bv 8 0x0))) (set esp (var final)))
d "push cs" 0e 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var cs))) (set esp (var final)))
d "push ds" 1e 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var ds))) (set esp (var final)))
d "push dword [eax]" ff30 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (loadw 0 32 (+ (var eax) (bv 32 0x0))))) (set esp (var final)))
d "push eax" 50 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var eax))) (set esp (var final)))
d "push ebp" 55 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var ebp))) (set esp (var final)))
d "push ebx" 53 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var ebx))) (set esp (var final)))
d "push ecx" 51 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var ecx))) (set esp (var final)))
d "push edi" 57 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var edi))) (set esp (var final)))
d "push edx" 52 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var edx))) (set esp (var final)))
d "push es" 06 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var es))) (set esp (var final)))
d "push esi" 56 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var esi))) (set esp (var final)))
d "push esp" 54 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var esp))) (set esp (var final)))
d "push fs" 0fa0 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var fs))) (set esp (var final)))
d "push gs" 0fa8 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var gs))) (set esp (var final)))
d "push ss" 16 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var ss))) (set esp (var final)))
d "pushfd" 9c 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (| (<< (| (<< (| (<< (| (<< (| (<< (| (<< (| (<< (| (<< (| (<< (| (<< (| (<< (| (<< (ite false (bv 32 0x1) (bv 32 0x0)) (bv 32 0x1) false) (ite (var nt) (bv 32 0x1) (bv 32 0x0))) (bv 32 0x2) false) (bv 32 0x3)) (bv 32 0x1) false) (ite (var of) (bv 32 0x1) (bv 32 0x0))) (bv 32 0x1) false) (ite (var df) (bv 32 0x1) (bv 32 0x0))) (bv 32 0x1) false) (ite (var if) (bv 32 0x1) (bv 32 0x0))) (bv 32 0x1) false) (ite (var tf) (bv 32 0x1) (bv 32 0x0))) (bv 32 0x1) false) (ite (var zf) (bv 32 0x1) (bv 32 0x0))) (bv 32 0x1) false) (ite (var zf) (bv 32 0x1) (bv 32 0x0))) (bv 32 0x2) false) (ite (var af) (bv 32 0x1) (bv 32 0x0))) (bv 32 0x2) false) (ite (var pf) (bv 32 0x1) (bv 32 0x0))) (bv 32 0x1) false) (bv 32 0x1)) (bv 32 0x1) false) (ite (var cf) (bv 32 0x1) (bv 32 0x0))))) (set esp (var final)))
d "pxor mm0, qword [eax]" 0fef00
d "rdmsr" 0f32
d "rdpmc" 0f33
d "rdtsc" 0f31
d "rdtscp" 0f01f9
d "repne movsb" f2a4
d "ret" c3 0x0 (seq (set tgt (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))) (jmp (var tgt)))
d "ret far 0x00" ca0000 0x0 (seq (set tgt (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))) (set esp (+ (var esp) (bv 32 0x0))) (jmp (var tgt)))
d "ret far" cb 0x0 (seq (set tgt (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))) (jmp (var tgt)))
d "rol byte [eax], 0x00" c00000
d "rol byte [eax], 0x01" d000
d "rol byte [eax], cl" d200
d "rol dword [eax], 0x00" c10000
d "rol dword [eax], 0x01" d100
d "rol dword [eax], cl" d300
d "rsm" 0faa
ad "sahf" 9e 0x0 (seq (set _flags (cast 8 false (>> (var eax) (bv 8 0x8) false))) (set cf (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x2) false)) (set pf (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x2) false)) (set af (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x2) false)) (set zf (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x1) false)) (set sf (lsb (var _flags))))
d "salc" D6
ad "sbb al, 0x00" 1c00 0x0 (seq (set _op1 (cast 8 false (var eax))) (set _op2 (bv 8 0x0)) (set _diff (- (- (var _op1) (var _op2)) (ite (var cf) (bv 8 0x1) (bv 8 0x0)))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var _diff)))) (set _result (var _diff)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _diff)) (set _x (var _op1)) (set _y (var _op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
ad "sbb al, byte [eax]" 1a00 0x0 (seq (set _op1 (cast 8 false (var eax))) (set _op2 (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set _diff (- (- (var _op1) (var _op2)) (ite (var cf) (bv 8 0x1) (bv 8 0x0)))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var _diff)))) (set _result (var _diff)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _diff)) (set _x (var _op1)) (set _y (var _op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
ad "sbb byte [eax], al" 1800 0x0 (seq (set _op1 (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set _op2 (cast 8 false (var eax))) (set _diff (- (- (var _op1) (var _op2)) (ite (var cf) (bv 8 0x1) (bv 8 0x0)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _diff)) (set _result (var _diff)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _diff)) (set _x (var _op1)) (set _y (var _op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
ad "sbb dword [eax], eax" 1900 0x0 (seq (set _op1 (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set _op2 (var eax)) (set _diff (- (- (var _op1) (var _op2)) (ite (var cf) (bv 32 0x1) (bv 32 0x0)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _diff)) (set _result (var _diff)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _diff)) (set _x (var _op1)) (set _y (var _op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
ad "sbb eax, dword [eax]" 1b00 0x0 (seq (set _op1 (var eax)) (set _op2 (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set _diff (- (- (var _op1) (var _op2)) (ite (var cf) (bv 32 0x1) (bv 32 0x0)))) (set eax (var _diff)) (set _result (var _diff)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var _diff)) (set _x (var _op1)) (set _y (var _op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
ad "scasb" ae 0x0 (seq (set _reg (cast 8 false (var eax))) (set _src (loadw 0 8 (+ (+ (var edi) (bv 32 0x0)) (<< (cast 32 false (var es)) (bv 8 0x4) false)))) (set _temp (- (var _reg) (var _src))) (set _result (var _temp)) (set _x (var _reg)) (set _y (var _src)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))) (set _result (var _temp)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (branch (var df) (set edi (- (var edi) (bv 32 0x1))) (set edi (+ (var edi) (bv 32 0x1)))))
ad "scasd" af 0x0 (seq (set _reg (var eax)) (set _src (loadw 0 32 (+ (+ (var edi) (bv 32 0x0)) (<< (cast 32 false (var es)) (bv 8 0x4) false)))) (set _temp (- (var _reg) (var _src))) (set _result (var _temp)) (set _x (var _reg)) (set _y (var _src)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))) (set _result (var _temp)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (branch (var df) (set edi (- (var edi) (bv 32 0x4))) (set edi (+ (var edi) (bv 32 0x4)))))
d "scasd" 67af 0x0 (seq (set _reg (var eax)) (set _src (loadw 0 32 (+ (+ (var edi) (bv 32 0x0)) (<< (cast 32 false (var es)) (bv 8 0x4) false)))) (set _temp (- (var _reg) (var _src))) (set _result (var _temp)) (set _x (var _reg)) (set _y (var _src)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))) (set _result (var _temp)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (branch (var df) (set edi (- (var edi) (bv 32 0x4))) (set edi (+ (var edi) (bv 32 0x4)))))
d "setnbe byte [eax]" 660f9700
d "setnb byte [eax]" 660f9300
d "setb byte [eax]" 660f9200
d "setbe byte [eax]" 660f9600
d "setz byte [eax]" 660f9400
d "setnle byte [eax]" 660f9f00
d "setnl byte [eax]" 660f9d00
d "setl byte [eax]" 660f9c00
d "setle byte [eax]" 660f9e00
d "setnz byte [eax]" 660f9500
d "setno byte [eax]" 660f9100
d "setnp byte [eax]" 660f9b00
d "setns byte [eax]" 660f9900
d "seto byte [eax]" 660f9000
d "setp byte [eax]" 660f9a00
d "sets byte [eax]" 660f9800
d "sfence" 0faef8
d "sgdt fword [eax]" 0f0100
d "shld dword [eax], eax, 0x00" 0fa40000
d "shld dword [eax], eax, cl" 0fa500
d "shrd dword [eax], eax, 0x00" 0fac0000
d "shrd dword [eax], eax, cl" 0fad00
d "shufpd xmm0, xmmword [eax], 0x00" 660fc60000
d "shufps xmm0, xmmword [eax], 0x00" 0fc60000
d "sidt fword [eax]" 0f0108
d "sldt word [eax]" 0f0000
d "smsw ax" 660f01e0
d "smsw eax" 0f01e0
d "smsw word [eax]" 0f0120
d "stac" 0f01cb 0x0 (set ac true)
ad "stc" f9 0x0 (set cf true)
ad "std" fd 0x0 (set df true)
d "stgi" 0f01dc
ad "sti" fb 0x0 (set if true)
d "stmxcsr dword [eax]" 0fae18
ad "stosb" aa 0x0 (seq (storew 0 (+ (+ (var edi) (bv 32 0x0)) (<< (cast 32 false (var es)) (bv 8 0x4) false)) (cast 8 false (var eax))) (branch (var df) (set edi (- (var edi) (bv 32 0x1))) (set edi (+ (var edi) (bv 32 0x1)))))
ad "stosd" ab 0x0 (seq (storew 0 (+ (+ (var edi) (bv 32 0x0)) (<< (cast 32 false (var es)) (bv 8 0x4) false)) (var eax)) (branch (var df) (set edi (- (var edi) (bv 32 0x4))) (set edi (+ (var edi) (bv 32 0x4)))))
d "stosd" 67ab 0x0 (seq (storew 0 (+ (+ (var edi) (bv 32 0x0)) (<< (cast 32 false (var es)) (bv 8 0x4) false)) (var eax)) (branch (var df) (set edi (- (var edi) (bv 32 0x4))) (set edi (+ (var edi) (bv 32 0x4)))))
d "str word [eax]" 0f0008
d "sub al, 0x00" 2c00 0x0 (seq (set op1 (cast 8 false (var eax))) (set op2 (bv 8 0x0)) (set sub (- (var op1) (var op2))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var sub)))) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
d "sub al, byte [eax]" 2a00 0x0 (seq (set op1 (cast 8 false (var eax))) (set op2 (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set sub (- (var op1) (var op2))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var sub)))) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
d "sub byte [eax], al" 2800 0x0 (seq (set op1 (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set op2 (cast 8 false (var eax))) (set sub (- (var op1) (var op2))) (storew 0 (+ (var eax) (bv 32 0x0)) (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
d "sub dword [eax], eax" 2900 0x0 (seq (set op1 (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set op2 (var eax)) (set sub (- (var op1) (var op2))) (storew 0 (+ (var eax) (bv 32 0x0)) (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
d "sub eax, dword [eax]" 2b00 0x0 (seq (set op1 (var eax)) (set op2 (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set sub (- (var op1) (var op2))) (set eax (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
d "subsd xmm0, qword [eax]" f20f5c00
d "subss xmm0, dword [eax]" f30f5c00
d "syscall" 0f05
d "sysenter" 0f34
d "sysexit" 0f35
d "sysret" 0f07
d "test al, 0x00" a800 0x0 (seq (set _result (& (cast 8 false (var eax)) (bv 8 0x0))) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false))
d "test byte [eax], 0x00" f60000 0x0 (seq (set _result (& (loadw 0 8 (+ (var eax) (bv 32 0x0))) (bv 8 0x0))) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false))
d "test byte [eax], 0x00" f60800 0x0 (seq (set _result (& (loadw 0 8 (+ (var eax) (bv 32 0x0))) (bv 8 0x0))) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false))
d "test byte [eax], al" 8400 0x0 (seq (set _result (& (loadw 0 8 (+ (var eax) (bv 32 0x0))) (cast 8 false (var eax)))) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false))
d "test dword [eax], 0x00" f70000000000 0x0 (seq (set _result (& (loadw 0 32 (+ (var eax) (bv 32 0x0))) (bv 32 0x0))) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false))
d "test dword [eax], 0x00" f70000000000 0x0 (seq (set _result (& (loadw 0 32 (+ (var eax) (bv 32 0x0))) (bv 32 0x0))) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false))
d "test dword [eax], 0x00" f70800000000 0x0 (seq (set _result (& (loadw 0 32 (+ (var eax) (bv 32 0x0))) (bv 32 0x0))) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false))
d "test dword [eax], eax" 8500 0x0 (seq (set _result (& (loadw 0 32 (+ (var eax) (bv 32 0x0))) (var eax))) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false))
d "test eax, 0x00" a900000000 0x0 (seq (set _result (& (var eax) (bv 32 0x0))) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false))
d "ud2" 0f0b
d "unpckhpd xmm0, xmmword [eax]" 660f1500
d "unpcklpd xmm0, xmmword [eax]" 660f1400
d "verr ax" 0f00e0
d "verr word [eax]" 0f0020
d "verw ax" 0f00e8
d "verw word [eax]" 0f0028
d "vmcall" 0f01c1
d "vmclear qword [eax]" 660fc730
d "vmlaunch" 0f01c2
d "vmmcall" 0f01d9
d "vmptrld qword [eax]" 0fc730
d "vmptrst qword [eax]" 0fc738
d "vmresume" 0f01c3
d "vmxoff" 0f01c4
d "vmxon qword [eax]" f30fc730
d "vzeroall" c5fc77
d "vzeroupper" c5f877
d "wbinvd" 0f09
d "wrmsr" 0f30
d "xadd byte [eax], al" 0fc000
d "xadd dword [eax], eax" 0fc100
d "xchg byte [eax], al" 8600 0x0 (seq (set _temp (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (storew 0 (+ (var eax) (bv 32 0x0)) (cast 8 false (var eax))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var _temp)))))
d "xchg dword [eax], eax" 8700 0x0 (seq (set _temp (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var eax)) (set eax (var _temp)))
d "xgetbv" 0f01d0
a "xlatb" d7 0x0 (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (loadw 0 8 (+ (+ (var ebx) (bv 32 0x0)) (cast 32 false (cast 8 false (var eax))))))))
d "xlat" d7 0x0 (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (loadw 0 8 (+ (+ (var ebx) (bv 32 0x0)) (cast 32 false (cast 8 false (var eax))))))))
d "xor al, 0x00" 3400 0x0 (seq (set _xor (^ (cast 8 false (var eax)) (bv 8 0x0))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var _xor)))) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "xor al, byte [eax]" 3200 0x0 (seq (set _xor (^ (cast 8 false (var eax)) (loadw 0 8 (+ (var eax) (bv 32 0x0))))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var _xor)))) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "xor byte [eax], al" 3000 0x0 (seq (set _xor (^ (loadw 0 8 (+ (var eax) (bv 32 0x0))) (cast 8 false (var eax)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _xor)) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "xor byte [eax], 0xff" 8030ff 0x0 (seq (set _xor (^ (loadw 0 8 (+ (var eax) (bv 32 0x0))) (bv 8 0xff))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _xor)) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "xor dword [eax], eax" 3100 0x0 (seq (set _xor (^ (loadw 0 32 (+ (var eax) (bv 32 0x0))) (var eax))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _xor)) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "xor eax, dword [eax]" 3300 0x0 (seq (set _xor (^ (var eax) (loadw 0 32 (+ (var eax) (bv 32 0x0))))) (set eax (var _xor)) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
d "xrstor [eax]" 0fae28
d "xsave [eax]" 0fae20
d "xsetbv" 0f01d1
d "xsaves [ecx]" 0fc729
d "xsaveopt [ecx]" 0fae31
d "xrstors [ecx]" 0fc719
dB "adx" d4
dB "amx" d5
d "cwde" 98
dB "cmpxchg16b [eax]" 67480f0c70
dB "cmpxchg8b dword [eax]" 0fc7c0
dB "extrq xmm0, 0x00, 0x00" 660f78000000
dB "extrq xmm0, xmm0" 660f7900
dB "invlpga" 0f01df
dB "lcall 0x00, 0x00" 9a
dB "lfs eax, dword [eax]" 0fb400
dB "lgs eax, dword [eax]" 0fb500
dB "lock mov dword [eax], eax" f08900
dB "lock mov eax, eax" f089c0
dB "lock" f00fc7c0
dB "lss eax, dword [eax]" 0fb200
dB "maskmovdqu xmm0, xmm0" 660ff7
dB "maskmovq mm0, mm0" 0ff7
dB "movdq2q mm0, xmm0" f20fd6
dB "movq2dq xmm0, mm0" f30fd6
dB "pextrq dword [eax], xmm0, 0x00" 660f3a16
dB "pinsrq xmm0, dword [eax], 0x00" 660f3a22
dB "pmovmskb eax, mm0" 0fd7
dB "popcnt eax, qword [eax]" f30fb8
d "prefetch byte [eax]" 0f0d00
d "rep movsb" f3a4
dB "retw" 66c3
dB "skinit" 0f01de
dB "swapgs" 0f1ff8
dB "vmload" 0f01da
dB "vmrun" 0f01d8
dB "vmsave" 0f01db
d "vaddpd ymm0, ymm0, ymm0" c5fd58c0
d "aesdec xmm0, xmm0" 660f38dec0
d "aesdeclast xmm0, xmm0" 660f38dfc0
d "aesenc xmm0, xmm0" 660f38dcc0
d "aesenclast xmm0, xmm0" 660f38ddc0
d "aesimc xmm0, xmm0" 660f38dbc0
d "aeskeygenassist xmm0, xmm0, 0x00" 660f3adfc000
d "vaesdec xmm0, xmm0, xmm0" c4e279dec0
d "vaesdeclast xmm0, xmm0, xmm0" c4e279dfc0
d "vaesenc xmm0, xmm0, xmm0" c4e279dcc0
d "vaesenclast xmm0, xmm0, xmm0" c4e279ddc0
d "vaesimc xmm0, xmm0" c4e279dbc0
d "vaeskeygenassist xmm0, xmm0, 0x00" c4e379dfc000
d "vextractf128 xmm0, ymm0, 0x00" c4e37d19c000
d "vbroadcastf128 ymm0, xmmword [0x0]" c4e27d1a0500000000
d "vbroadcastsd ymm0, qword [0x0]" c4e27d190500000000
d "vinsertf128 ymm0, ymm0, xmm0, 0x00" c4e37d18c000
d "vperm2f128 ymm0, ymm0, ymm0, 0x00" c4e37d06c000
d "vpermilpd ymm0, ymm0, ymmword [0x0]" c4e27d0d0500000000
d "vpermilps ymm0, ymm0, ymmword [0x0]" c4e27d0c0500000000
d "vfmadd132pd xmm0, xmm0, xmm0" c4e2f998c0
d "vfmadd213pd xmm0, xmm0, xmm0" c4e2f9a8c0
d "vfmadd231pd xmm0, xmm0, xmm0" c4e2f9b8c0
d "addpd xmm0, xmmword [eax]" 660f5800
d "vaeskeygenassist xmm0, xmm0, 0x00" c4e379dfc000
d "vextractf128 xmm0, ymm0, 0x00" c4e37d19c000
d "vbroadcastf128 ymm0, xmmword [0x0]" c4e27d1a0500000000
d "vbroadcastsd ymm0, qword [0x0]" c4e27d190500000000
d "vbroadcastss ymm0, dword [eax]" c4e27d1800
d "vinsertf128 ymm0, ymm0, xmm0, 0x00" c4e37d18c000
d "vperm2f128 ymm0, ymm0, ymm0, 0x00" c4e37d06c000
d "vmaskmovps ymm0, ymm0, ymmword [0x0]" c4e27d2c0500000000
d "vmaskmovpd ymm0, ymm0, ymmword [0x0]" c4e27d2d0500000000
d "vpermilpd ymm0, ymm0, ymmword [0x0]" c4e27d0d0500000000
d "vpermilps ymm0, ymm0, ymmword [0x0]" c4e27d0c0500000000
d "pclmulqdq xmm0, xmm0, 0x00" 660f3a44c000
d "vtestps ymm0, ymm0" c4e27d0ec0
d "vtestpd ymm0, ymm0" c4e27d0fc0
d "pshufb xmm0, xmmword [eax]" 660f380000
d "phaddw xmm0, xmmword [eax]" 660f380100
d "phaddd xmm0, xmmword [eax]" 660f380200
d "phaddsw xmm0, xmmword [eax]" 660f380300
d "pmaddubsw xmm0, xmmword [eax]" 660f380400
d "phsubw xmm0, xmmword [eax]" 660f380500
d "phsubd xmm0, xmmword [eax]" 660f380600
d "phsubsw xmm0, xmmword [eax]" 660f380700
d "pblendvb xmm0, xmm0" 660f3810c0
d "blendvps xmm0, xmm0" 660f3814c0
d "blendvpd xmm0, xmm0" 660f3815c0
d "ptest xmm0, xmm0" 660f3817c0
d "pcmpgtq xmm0, xmm0" 660f3837c0
d "pmulld xmm0, xmm0" 660f3840c0
d "phminposuw xmm0, xmm0" 660f3841c0
d "movbe dword [eax], eax" 0f38f100
d "movbe eax, dword [eax]" 0f38f000
d "mulsd xmm7, xmm7" 66f3f20f59ff
dB "mulss xmm7, xmm7" 66f2f0f59ff0
d "mulpd xmm7, xmm7" 660f59ff
d "mulsd xmm7, xmm7" f2660f59ff
d "mulps xmm7, xmm7" 0f59ff
d "mpsadbw xmm0, xmm0, 0x00" 660f3a42c000
d "pcmpestrm xmm0, xmm0, 0x00" 660f3a60c000
d "pcmpestri xmm0, xmm0, 0x00" 660f3a61c000
d "pcmpistrm xmm0, xmm0, 0x00" 660f3a62c000
d "pcmpistri xmm0, xmm0, 0x00" 660f3a63c000
d "roundps xmm0, xmm0, 0x00" 660f3a08c000
d "roundpd xmm0, xmm0, 0x00" 660f3a09c000
d "roundss xmm0, xmm0, 0x00" 660f3a0ac000
d "roundsd xmm0, xmm0, 0x00" 660f3a0bc000
d "blendps xmm0, xmm0, 0x00" 660f3a0cc000
d "blendpd xmm0, xmm0, 0x00" 660f3a0dc000
d "pblendw xmm0, xmm0, 0x00" 660f3a0ec000
d "palignr xmm0, xmm0, 0x00" 660f3a0fc000
d "palignr mm0, mm0, 0x00" 0f3a0fc000
d "psrlw mm0, 0x00" 0f71d000
d "psrld mm0, 0x00" 0f72d000
d "psrlq mm0, 0x00" 0f73d000
d "psllw mm0, 0x00" 0f71f000
d "psllq mm0, 0x00" 0f73f000
d "psrlw xmm0, 0x00" 660f71d000
d "psrld xmm0, 0x00" 660f72d000
d "psrlq xmm0, 0x00" 660f73d000
d "psllw xmm0, 0x00" 660f71f000
d "pslld xmm0, 0x00" 660f72f000
d "psllq xmm0, 0x00" 660f73f000
d "psrldq xmm0, 0x00" 660f73d800
d "pslldq xmm0, 0x00" 660f73f800
d "sqrtps xmm0, xmmword [eax]" 0f5100
d "sqrtpd xmm0, xmmword [eax]" 660f5100
d "sqrtsd xmm0, qword [eax]" f20f5100
d "sqrtss xmm0, dword [eax]" f30f5100
d "rsqrtps xmm0, xmmword [eax]" 0f5200
d "rsqrtss xmm0, dword [eax]" f30f5200
d "rcpps xmm0, xmmword [eax]" 0f5300
d "rcpss xmm0, dword [eax]" f30f5300
d "andps xmm0, xmmword [eax]" 0f5400
d "andnps xmm0, xmmword [eax]" 0f5500
d "andpd xmm0, xmmword [eax]" 660f5400
d "andnpd xmm0, xmmword [eax]" 660f5500
d "orps xmm0, xmmword [eax]" 0f5600
d "xorps xmm0, xmmword [eax]" 0f5700
d "orpd xmm0, xmmword [eax]" 660f5600
d "xorpd xmm0, xmmword [eax]" 660f5700
d "addps xmm0, xmmword [eax]" 0f5800
d "subps xmm0, xmmword [eax]" 0f5c00
d "mulps xmm0, xmmword [eax]" 0f5900
d "divps xmm0, xmmword [eax]" 0f5e00
d "addpd xmm0, xmmword [eax]" 660f5800
d "subpd xmm0, xmmword [eax]" 660f5c00
d "mulpd xmm0, xmmword [eax]" 660f5900
d "divpd xmm0, xmmword [eax]" 660f5e00
d "minps xmm0, xmmword [eax]" 0f5d00
d "maxps xmm0, xmmword [eax]" 0f5f00
d "minpd xmm0, xmmword [eax]" 660f5d00
d "maxpd xmm0, xmmword [eax]" 660f5f00
d "minsd xmm0, qword [eax]" f20f5d00
d "maxsd xmm0, qword [eax]" f20f5f00
d "minss xmm0, dword [eax]" f30f5d00
d "maxss xmm0, dword [eax]" f30f5f00
d "punpcklbw mm0, dword [eax]" 0f6000
d "punpcklwd mm0, dword [eax]" 0f6100
d "punpckldq mm0, dword [eax]" 0f6200
d "punpcklbw xmm0, xmmword [eax]" 660f6000
d "punpcklwd xmm0, xmmword [eax]" 660f6100
d "punpckldq xmm0, xmmword [eax]" 660f6200
d "packsswb mm0, qword [eax]" 0f6300
d "packuswb mm0, qword [eax]" 0f6700
d "packsswb xmm0, xmmword [eax]" 660f6300
d "packuswb xmm0, xmmword [eax]" 660f6700
d "pcmpgtb mm0, qword [eax]" 0f6400
d "pcmpgtw mm0, qword [eax]" 0f6500
d "pcmpgtd mm0, qword [eax]" 0f6600
d "pcmpgtb xmm0, xmmword [eax]" 660f6400
d "pcmpgtw xmm0, xmmword [eax]" 660f6500
d "pcmpgtd xmm0, xmmword [eax]" 660f6600
d "punpckhbw mm0, qword [eax]" 0f6800
d "punpckhwd mm0, qword [eax]" 0f6900
d "punpckhdq mm0, qword [eax]" 0f6a00
d "punpckhbw xmm0, xmmword [eax]" 660f6800
d "punpckhwd xmm0, xmmword [eax]" 660f6900
d "punpckhdq xmm0, xmmword [eax]" 660f6a00
d "packssdw mm0, qword [eax]" 0f6b00
d "packssdw xmm0, xmmword [eax]" 660f6b00
d "pshufb mm0, qword [eax]" 0f380000
d "pshufw mm0, qword [eax], 0x00" 0f700000
d "pshufb xmm0, xmmword [eax]" 660f380000
d "pshufd xmm0, xmmword [eax], 0x00" 660f700000
d "pshuflw xmm0, xmmword [eax], 0x00" f20f700000
d "pshufhw xmm0, xmmword [eax], 0x00" f30f700000
d "pcmpeqb mm0, qword [eax]" 0f7400
d "pcmpeqw mm0, qword [eax]" 0f7500
d "pcmpeqd mm0, qword [eax]" 0f7600
d "pcmpeqb xmm0, xmmword [eax]" 660f7400
d "pcmpeqw xmm0, xmmword [eax]" 660f7500
d "pcmpeqd xmm0, xmmword [eax]" 660f7600
d "movd mm0, dword [eax]" 0f6e00
d "movq mm0, qword [eax]" 0f6f00
d "movd dword [eax], mm0" 0f7e00
d "movq qword [eax], mm0" 0f7f00
d "movd xmm0, dword [eax]" 660f6e00
d "movdqa xmm0, xmmword [eax]" 660f6f00
d "movd dword [eax], xmm0" 660f7e00
d "movdqa xmmword [eax], xmm0" 660f7f00
d "movdqu xmm0, xmmword [eax]" f30f6f00
d "movq xmm0, qword [eax]" f30f7e00
d "movdqu xmmword [eax], xmm0" f30f7f00
d "pmovsxbw xmm0, xmm0" 660f3820c0
d "pmovsxbd xmm0, xmm0" 660f3821c0
d "pmovsxbq xmm0, xmm0" 660f3822c0
d "pmovsxwd xmm0, xmm0" 660f3823c0
d "pmovsxwq xmm0, xmm0" 660f3824c0
d "pmovsxdq xmm0, xmm0" 660f3825c0
d "pmovzxbw xmm0, xmm0" 660f3830c0
d "pmovzxbd xmm0, xmm0" 660f3831c0
d "pmovzxbq xmm0, xmm0" 660f3832c0
d "pmovzxwd xmm0, xmm0" 660f3833c0
d "pmovzxwq xmm0, xmm0" 660f3834c0
d "pmovzxdq xmm0, xmm0" 660f3835c0
d "pminsb xmm0, xmm0" 660f3838c0
d "pminsd xmm0, xmm0" 660f3839c0
d "pminuw xmm0, xmm0" 660f383ac0
d "pminud xmm0, xmm0" 660f383bc0
d "pmaxsb xmm0, xmm0" 660f383cc0
d "pmaxsd xmm0, xmm0" 660f383dc0
d "pmaxuw xmm0, xmm0" 660f383ec0
d "pmaxud xmm0, xmm0" 660f383fc0
d "psignb xmm0, xmm0" 660f3808c0
d "psignw xmm0, xmm0" 660f3809c0
d "psignd xmm0, xmm0" 660f380ac0
d "pmulhrsw xmm0, xmm0" 660f380bc0
d "pabsb xmm0, xmm0" 660f381cc0
d "pabsw xmm0, xmm0" 660f381dc0
d "pabsd xmm0, xmm0" 660f381ec0
d "pmuldq xmm0, xmm0" 660f3828c0
d "pcmpeqq xmm0, xmm0" 660f3829c0
d "movntdqa xmm0, xmmword [eax]" 660f382a00
d "packusdw xmm0, xmm0" 660f382bc0
d "extractps eax, xmm0, 0x00" 660f3a17c000
d "pinsrb xmm0, eax, 0x00" 660f3a20c000
d "insertps xmm0, xmm0, 0x00" 660f3a21c000
d "dpps xmm0, xmm0, 0x00" 660f3a40c000
d "dppd xmm0, xmm0, 0x00" 660f3a41c000
d "pslld mm0, 0x00" 0f72f000
d "movups xmm0, xmmword [eax]" 0f1000
d "movups xmmword [eax], xmm0" 0f1100
d "unpcklps xmm0, xmmword [eax]" 0f1400
d "unpckhps xmm0, xmmword [eax]" 0f1500
d "movlps xmm0, qword [eax]" 0f1200
d "movlps qword [eax], xmm0" 0f1300
dB "movhlps xmm0, xmm0" 0f1200
dB "movlhps xmm0, xmm0" 0f1600
d "movhps xmm0, qword [eax]" 0f1600
d "movhps qword [eax], xmm0" 0f1700
d "movmskps eax, xmm0" 0f50c0
d "movmskpd eax, xmm0" 660f50c0
d "vfmsubpd xmm0, xmm0, xmm0, xmm0" c4e3796dc000
d "vfmsubps xmm0, xmm0, xmm0, xmm0" c4e3796cc000
d "vfmsubsd xmm0, xmm0, xmm0, xmm0" c4e3796fc000
d "vfmsubss xmm0, xmm0, xmm0, xmm0" c4e3796ec000
d "vfnmaddpd xmm0, xmm0, xmm0, xmm0" c4e37979c000
d "vfnmaddps xmm0, xmm0, xmm0, xmm0" c4e37978c000
d "vfnmaddsd xmm0, xmm0, xmm0, xmm0" c4e3797bc000
d "vfnmaddss xmm0, xmm0, xmm0, xmm0" c4e3797ac000
d "vfnmaddpd ymm0, ymm0, ymm0, ymm0" c4e37d79c000
d "vfnmaddps ymm0, ymm0, ymm0, ymm0" c4e37d78c000
d "vfnmsubpd xmm0, xmm0, xmm0, xmm0" c4e3797dc000
d "vfnmsubps xmm0, xmm0, xmm0, xmm0" c4e3797cc000
d "vfnmsubsd xmm0, xmm0, xmm0, xmm0" c4e3797fc000
d "vfnmsubss xmm0, xmm0, xmm0, xmm0" c4e3797ec000
d "vfnmsubpd ymm0, ymm0, ymm0, ymm0" c4e37d7dc000
d "vfnmsubps ymm0, ymm0, ymm0, ymm0" c4e37d7cc000
d "vfnmsubss xmm0, xmm0, xmm0, xmm0" c4e3797ec000
d "vfnmsubsd xmm0, xmm0, xmm0, xmm0" c4e3797fc000
d "movsd xmm0, qword [eax]" f20f1000 0x0 (seq (storew 0 (+ (+ (var edi) (bv 32 0x0)) (<< (cast 32 false (var es)) (bv 8 0x4) false)) (loadw 0 32 (+ (var esi) (bv 32 0x0)))) (branch (var df) (seq (set esi (- (var esi) (bv 32 0x4))) (set edi (- (var edi) (bv 32 0x4)))) (seq (set esi (+ (var esi) (bv 32 0x4))) (set edi (+ (var edi) (bv 32 0x4))))))
d "movsd qword [eax], xmm0" f20f1100 0x0 (seq (storew 0 (+ (+ (var edi) (bv 32 0x0)) (<< (cast 32 false (var es)) (bv 8 0x4) false)) (loadw 0 32 (+ (var esi) (bv 32 0x0)))) (branch (var df) (seq (set esi (- (var esi) (bv 32 0x4))) (set edi (- (var edi) (bv 32 0x4)))) (seq (set esi (+ (var esi) (bv 32 0x4))) (set edi (+ (var edi) (bv 32 0x4))))))
d "movddup xmm0, qword [eax]" f20f1200
d "cvtps2pd xmm0, qword [eax]" 0f5a00
d "cvtpd2ps xmm0, xmmword [eax]" 660f5a00
d "cvtsd2ss xmm0, qword [eax]" f20f5a00
d "cvtss2sd xmm0, dword [eax]" f30f5a00
d "cvtdq2ps xmm0, xmmword [eax]" 0f5b00
d "cvtps2dq xmm0, xmmword [eax]" 660f5b00
d "cvttps2dq xmm0, xmmword [eax]" f30f5b00
d "cvttpd2dq xmm0, xmmword [eax]" 660fe600
d "cvtpd2dq xmm0, xmmword [eax]" f20fe600
d "cvtdq2pd xmm0, qword [eax]" f30fe600
d "cvttps2pi mm0, qword [eax]" 0f2c00
d "cvttpd2pi mm0, xmmword [eax]" 660f2c00
d "cvttsd2si eax, qword [eax]" f20f2c00
d "cvttss2si eax, dword [eax]" f30f2c00
d "cvtpi2ps xmm0, qword [eax]" 0f2a00
d "cvtpi2pd xmm0, qword [eax]" 660f2a00
d "cvtsi2sd xmm0, dword [eax]" f20f2a00
d "cvtsi2ss xmm0, dword [eax]" f30f2a00
d "cvtps2pi mm0, qword [eax]" 0f2d00
d "cvtsd2si eax, qword [eax]" f20f2d00
d "cvtss2si eax, dword [eax]" f30f2d00
d "cvtpd2pi mm0, xmmword [eax]" 660f2d00
d "movaps xmm0, xmmword [eax]" 0f2800
d "movaps xmmword [eax], xmm0" 0f2900
d "movntps xmmword [eax], xmm0" 0f2b00
d "movntpd xmmword [eax], xmm0" 660f2b00
d "ucomiss xmm0, dword [eax]" 0f2e00
d "comiss xmm0, dword [eax]" 0f2f00
d "ucomisd xmm0, qword [eax]" 660f2e00
d "comisd xmm0, qword [eax]" 660f2f00
d "psubb mm0, qword [eax]" 0ff800
d "psubw mm0, qword [eax]" 0ff900
d "psubd mm0, qword [eax]" 0ffa00
d "psubq mm0, qword [eax]" 0ffb00
d "paddb mm0, qword [eax]" 0ffc00
d "paddw mm0, qword [eax]" 0ffd00
d "paddd mm0, qword [eax]" 0ffe00
d "psrlw mm0, qword [eax]" 0fd100
d "psrld mm0, qword [eax]" 0fd200
d "psrlq mm0, qword [eax]" 0fd300
d "psrlw xmm0, xmmword [eax]" 660fd100
d "psrld xmm0, xmmword [eax]" 660fd200
d "psrlq xmm0, xmmword [eax]" 660fd300
d "psllw mm0, qword [eax]" 0ff100
d "pslld mm0, qword [eax]" 0ff200
d "psllq mm0, qword [eax]" 0ff300
d "psllw xmm0, xmmword [eax]" 660ff100
d "pslld xmm0, xmmword [eax]" 660ff200
d "psllq xmm0, xmmword [eax]" 660ff300
d "pmullw mm0, qword [eax]" 0fd500
d "pmullw xmm0, xmmword [eax]" 660fd500
d "pmulhuw mm0, qword [eax]" 0fe400
d "pmulhuw xmm0, xmmword [eax]" 660fe400
d "pmulhw mm0, qword [eax]" 0fe500
d "pmulhw xmm0, xmmword [eax]" 660fe500
d "pmuludq mm0, qword [eax]" 0ff400
d "pmuludq xmm0, xmmword [eax]" 660ff400
d "pmaddwd mm0, qword [eax]" 0ff500
d "pmaddwd xmm0, xmmword [eax]" 660ff500
d "psadbw mm0, qword [eax]" 0ff600
d "psadbw xmm0, xmmword [eax]" 660ff600
d "psubusb xmm0, xmmword [eax]" 660fd800
d "psubusw xmm0, xmmword [eax]" 660fd900
d "pminub xmm0, xmmword [eax]" 660fda00
d "pmaxub xmm0, xmmword [eax]" 660fde00
d "pand xmm0, xmmword [eax]" 660fdb00
d "pandn xmm0, xmmword [eax]" 660fdf00
d "paddusb xmm0, xmmword [eax]" 660fdc00
d "paddusw xmm0, xmmword [eax]" 660fdd00
d "pavgb xmm0, xmmword [eax]" 660fe000
d "pavgw xmm0, xmmword [eax]" 660fe300
d "psubsb xmm0, xmmword [eax]" 660fe800
d "psubsw xmm0, xmmword [eax]" 660fe900
d "pminsw xmm0, xmmword [eax]" 660fea00
d "pmaxsw xmm0, xmmword [eax]" 660fee00
d "por xmm0, xmmword [eax]" 660feb00
d "paddsb xmm0, xmmword [eax]" 660fec00
d "paddsw xmm0, xmmword [eax]" 660fed00
d "pxor xmm0, xmmword [eax]" 660fef00
d "psubb xmm0, xmmword [eax]" 660ff800
d "psubw xmm0, xmmword [eax]" 660ff900
d "psubd xmm0, xmmword [eax]" 660ffa00
d "psubq xmm0, xmmword [eax]" 660ffb00
d "paddb xmm0, xmmword [eax]" 660ffc00
d "paddw xmm0, xmmword [eax]" 660ffd00
d "paddd xmm0, xmmword [eax]" 660ffe00
d "vpmadcsswd xmm0, xmm0, xmm0, xmm0" 8fe878a6c000
d "vfrczpd xmm0, xmm0" 8fe97881c0
dB "vcvtph2ps xmm0, xmm0, 0x00" 8fe878a0c000
dB "vcvtps2ph xmm0, xmm0, 0x00" 8fe878a1c000
d "vfrczps xmm0, xmm0" 8fe97880c0
d "vfrczsd xmm0, xmm0" 8fe97883c0
d "vfrczss xmm0, xmm0" 8fe97882c0
d "vphaddbd xmm0, xmm0" 8fe978c2c0
d "vphaddbq xmm0, xmm0" 8fe978c3c0
d "vphaddbw xmm0, xmm0" 8fe978c1c0
d "vphadddq xmm0, xmm0" 8fe978cbc0
d "vphaddwd xmm0, xmm0" 8fe978c6c0
d "vphaddwq xmm0, xmm0" 8fe978c7c0
d "vphsubbw xmm0, xmm0" 8fe978e1c0
d "vphsubdq xmm0, xmm0" 8fe978e3c0
d "vphsubwd xmm0, xmm0" 8fe978e2c0
d "vfmaddpd xmm0, xmm0, xmm0, xmm0" c4e37969c000
d "vfmaddps xmm0, xmm0, xmm0, xmm0" c4e37968c000
d "vfmaddsd xmm0, xmm0, xmm0, xmm0" c4e3796bc000
d "vfmaddss xmm0, xmm0, xmm0, xmm0" c4e3796ac000
d "vfmaddpd ymm0, ymm0, ymm0, ymm0" c4e37d69c000
d "vfmaddps ymm0, ymm0, ymm0, ymm0" c4e37d68c000
d "vfmsubpd ymm0, ymm0, ymm0, ymm0" c4e37d6dc000
d "vfmsubps ymm0, ymm0, ymm0, ymm0" c4e37d6cc000
d "vfmaddsubpd xmm0, xmm0, xmm0, xmm0" c4e3795dc000
d "vfmaddsubps xmm0, xmm0, xmm0, xmm0" c4e3795cc000
d "vfmsubaddpd xmm0, xmm0, xmm0, xmm0" c4e3795fc000
d "vfmsubaddps xmm0, xmm0, xmm0, xmm0" c4e3795ec000
d "vfmaddsubpd ymm0, ymm0, ymm0, ymm0" c4e37d5dc000
d "vfmaddsubps ymm0, ymm0, ymm0, ymm0" c4e37d5cc000
d "vfmsubaddps ymm0, ymm0, ymm0, ymm0" c4e37d5ec000
d "vfmsubaddpd ymm0, ymm0, ymm0, ymm0" c4e37d5fc000
d "vpcmov xmm0, xmm0, xmm0, xmm0" 8fe878a2c000
dB "vpcomb xmm0, xmm0, xmm0, 0x00" 8fe878ccc000
dB "vpcomd xmm0, xmm0, xmm0, 0x00" 8fe878cec000
dB "vpcomq xmm0, xmm0, xmm0, 0x00" 8fe878cfc000
dB "vpcomub xmm0, xmm0, xmm0, 0x00" 8fe878ecc000
dB "vpcomud xmm0, xmm0, xmm0, 0x00" 8fe878eec000
dB "vpcomuq xmm0, xmm0, xmm0, 0x00" 8fe878efc000
dB "vpcomuw xmm0, xmm0, xmm0, 0x00" 8fe878edc000
dB "vpcomw xmm0, xmm0, xmm0, 0x00" 8fe878cdc000
d "vpmacsdd xmm0, xmm0, xmm0, xmm0" 8fe8789ec000
d "vpmacsdqh xmm0, xmm0, xmm0, xmm0" 8fe8789fc000
d "vpmacsdql xmm0, xmm0, xmm0, xmm0" 8fe87897c000
d "vpmacssdd xmm0, xmm0, xmm0, xmm0" 8fe8788ec000
d "vpmacssdqh xmm0, xmm0, xmm0, xmm0" 8fe8788fc000
d "vpmacssdql xmm0, xmm0, xmm0, xmm0" 8fe87887c000
d "vpmacsswd xmm0, xmm0, xmm0, xmm0" 8fe87886c000
d "vpmacssww xmm0, xmm0, xmm0, xmm0" 8fe87885c000
d "vpmacswd xmm0, xmm0, xmm0, xmm0" 8fe87896c000
d "vpmacsww xmm0, xmm0, xmm0, xmm0" 8fe87895c000
d "vpmadcswd xmm0, xmm0, xmm0, xmm0" 8fe878b6c000
d "vpperm xmm0, xmm0, xmm0, xmm0" 8fe878a3c000
d "vprotb xmm0, xmm0, xmm0" 8fe97890c0
d "vprotd xmm0, xmm0, xmm0" 8fe97892c0
d "vprotq xmm0, xmm0, xmm0" 8fe97893c0
d "vprotw xmm0, xmm0, xmm0" 8fe97891c0
d "vpshab xmm0, xmm0, xmm0" 8fe97898c0
d "vpshad xmm0, xmm0, xmm0" 8fe9789ac0
d "vpshaq xmm0, xmm0, xmm0" 8fe9789bc0
d "vpshaw xmm0, xmm0, xmm0" 8fe97899c0
d "vpshlb xmm0, xmm0, xmm0" 8fe97894c0
d "vpshld xmm0, xmm0, xmm0" 8fe97896c0
d "vpshlq xmm0, xmm0, xmm0" 8fe97897c0
d "vpshlw xmm0, xmm0, xmm0" 8fe97895c0
d "vphaddubd xmm0, xmm0" 8fe978d2c0
d "vphaddubq xmm0, xmm0" 8fe978d3c0
d "vphaddubw xmm0, xmm0" 8fe978d1c0
d "vphaddudq xmm0, xmm0" 8fe978dbc0
d "vphadduwd xmm0, xmm0" 8fe978d6c0
d "vphadduwq xmm0, xmm0" 8fe978d7c0
d "vpmadcsswd xmm0, xmm0, xmm0, xmm0" 8fe878a6c000
a "aaa" 37
a "aad" d50a
a "aam" d40a
a "aam 12" d40c
a "aas" 3f
a "adc al, 0x00" 1400
a "adc al, byte [eax]" 1200
a "adc byte [eax], al" 1000
a "adc dword [eax], eax" 1100
a "adc eax, dword [eax]" 1300
a "add al, 0x00" 0400
a "add ax, 0x4" 6683c004
a "add ax, 0x96" 66059600
a "add cx, 0x4" 6683c104
a "add al, byte [eax]" 0200
aB "add byte [bx + si], al" 670001
a "add byte [eax], 0x00" 800000
a "add byte [eax], al" 0000
a "add dword [eax], 1" 830001
a "add dword [eax+8], 1" 83400801
a "add dword [eax], eax" 0100
a "add dword [ebp+4], 1" 83450401
a "add dword [ebp+8], 1" 83450801
a "add dword [ebx], 1" 830301
a "add dword [ebx+8], 1" 83430801
a "add dword [esp+8], 1" 8344240801
a "add eax, 1" 83c001
a "add eax, 3" 83c003
a "add eax, dword [eax]" 0300
a "add [eax], eax" 0100
a "add esi,-334" 81c6b2feffff
a "add byte [0x45342], al" 000542530400
a "add byte [0x45a42], 0x24" 8005425a040024
a "add byte [eax + eax], bl" 001c
aB "addpd xmm0, xmmword [eax]" 660f5800
aB "addps xmm0, xmmword [eax]" 0f5800
aB "addsd xmm0, qword [eax]" F20F5800
aB "addss xmm0, dword [eax]" F30F5800
aB "addsubpd xmm0, xmmword [eax]" 660fd000
aB "addsubps xmm0, xmmword [eax]" f20fd000
a "adx" d4
aB "aesdeclast xmm0, xmm0" 660f38dfc0
aB "aesdec xmm0, xmm0" 660f38dec0
aB "aesenclast xmm0, xmm0" 660f38ddc0
aB "aesenc xmm0, xmm0" 660f38dcc0
aB "aesimc xmm0, xmm0" 660f38dbc0
aB "aeskeygenassist xmm0, xmm0, 0x0" 660f3adfc000
a "amx" d5
a "and al, 0x00" 2400
a "and ax, 0x6" 6683e006
a "and ax, 0x97" 66259700
a "and bx, 0x7" 6683e307
a "and bx, 0x97" 6681e39700
a "and al, byte [eax]" 2200
a "and byte [eax], al" 2000
a "and dword [eax], eax" 2100
a "and eax, dword [eax]" 2300
aB "andnpd xmm0, xmmword [eax]" 660f55
aB "andnps xmm0, xmmword [eax]" 0f5500
aB "andpd xmm0, xmmword [eax]" 660f54
aB "andps xmm0, xmmword [eax]" 0f5400
aB "arpl word [eax], ax" 6300
aB "blendpd xmm0, xmm0, 0x00" 660f3a0dc000
aB "blendps xmm0, xmm0, 0x00" 660f3a0cc000
aB "blendvpd xmm0, xmm0" 660f3815c0
aB "blendvps xmm0, xmm0" 660f3814c0
aB "bound eax, qword [eax]" 6200
a "bsf eax, dword [eax]" 0fbc00
a "bsr eax, dword [eax]" 0fbd00
a "bswap eax" 0fc8
a "bswap ebp" 0fcd
a "bswap ebx" 0fcb
a "bswap ecx" 0fc9
a "bswap edi" 0fcf
a "bswap edx" 0fca
a "bswap esi" 0fce
a "bswap esp" 0fcc
aB "btc dword [eax], eax" 0fbb00
aB "bt dword [eax], eax" 0fa300
aB "bt ecx, esp" 0fa3e1
aB "bt edx, 59" 0fbae23b
aB "bt ebp, -20" 0fbae5e0
aB "btr dword [eax], eax" 0fb300
aB "bts dword [eax], eax" 0fab00
a "call 0x8049100" e8fb900408 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (bv 32 0x5))) (set esp (var final)) (jmp (bv 32 0x8049100)))
a "call 4" e8ffffffff 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (bv 32 0x5))) (set esp (var final)) (jmp (bv 32 0x4)))
a "call 5" e800000000 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (bv 32 0x5))) (set esp (var final)) (jmp (bv 32 0x5)))
a "call dword [eax]" ff10 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (bv 32 0x2))) (set esp (var final)) (jmp (loadw 0 32 (+ (var eax) (bv 32 0x0)))))
a "call ebx" ffd3 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (bv 32 0x2))) (set esp (var final)) (jmp (var ebx)))
a "bnd call ebx" f2ffd3
a "cbw" 6698
a "cdq" 99
a "cdqe" 98
a "clc" f8
a "cld" fc
a "clflush byte [eax]" 0fae38
a "clgi" 0f01dd
a "cli" fa
a "clts" 0f06
a "cmc" f5
a "cmovnbe eax, dword [eax]" 0f4700
a "cmovnb eax, dword [eax]" 0f4300
a "cmovb eax, dword [eax]" 0f4200
a "cmovbe eax, dword [eax]" 0f4600
a "cmovz eax, dword [eax]" 0f4400
a "cmovnle eax, [eax]" 0f4f00
a "cmovnl eax, dword [eax]" 0f4d00
a "cmovl eax, dword [eax]" 0f4c00
a "cmovle eax, dword [eax]" 0f4e00
a "cmovnz eax, dword [eax]" 0f4500
a "cmovno eax, dword [eax]" 0f4100
a "cmovnp eax, dword [eax]" 0f4b00
a "cmovns eax, dword [eax]" 0f4900
a "cmovo eax, dword [eax]" 0f4000
a "cmovp eax, dword [eax]" 0f4a00
a "cmovs eax, dword [eax]" 0f4800
a "cmovnbe eax, dword eax" 0f47c0
a "cmovnb eax, dword eax" 0f43c0
a "cmovb eax, dword eax" 0f42c0
a "cmovbe eax, dword eax" 0f46c0
a "cmovz eax, dword eax" 0f44c0
a "cmovnle eax, eax" 0f4fc0
a "cmovnl eax, dword eax" 0f4dc0
a "cmovl eax, dword eax" 0f4cc0
a "cmovle eax, dword eax" 0f4ec0
a "cmovnz eax, dword eax" 0f45c0
a "cmovno eax, dword eax" 0f41c0
a "cmovnp eax, dword eax" 0f4bc0
a "cmovns eax, dword eax" 0f49c0
a "cmovo eax, dword eax" 0f40c0
a "cmovp eax, dword eax" 0f4ac0
a "cmovs eax, dword eax" 0f48c0
a "cmovnbe eax, [eax*2]" 0f470400
a "cmovnb eax, [ecx+4]" 0f434104
a "cmovb eax, [edx*4+edx]" 0f420492
a "cmovbe eax, [ecx*8]" 0f4604cd
a "cmovz eax, [ebx*2+44]" 0f44441b2c
a "cmovnle ecx, [eax*4+656]" 0f4f0c8590020000
a "cmovnl edx, [ebp]" 0f4d5500
a "cmovl eax, [ebp*2+88]" 0f4c442d58
a "cmp al, 0x00" 3c00
a "cmp al, byte [eax]" 3a00
a "cmp byte [eax], al" 3800
a "cmp dword [eax], eax" 3900
a "cmp eax, 33" 83f821
a "cmp eax, dword [eax]" 3b00
a "cmp eax, ebx" 39d8
a "cmp ebx, eax" 39c3
a "cmp edx, esi" 39f2
aB "cmppd xmm0, xmmword [eax], 0x00" 660fc20000
aB "cmpps xmm0, xmmword [eax], 0x00" 0fc20000
aB "cmpss xmm0, dword [eax], 0x00" f30fc20000
aB "cmppd xmm0, xmmword [eax], 0x02" 660fc20002
aB "cmpps xmm0, xmmword [eax], 0x02" 0fc20002
aB "cmpsd xmm0, qword [eax], 0x02" f20fc20002
aB "cmpss xmm0, dword [eax], 0x02" f30fc20002
aB "cmppd xmm0, xmmword [eax], 0x01" 660fc20001
aB "cmpps xmm0, xmmword [eax], 0x01" 0fc20001
aB "cmpsd xmm0, qword [eax], 0x01" f20fc20001
aB "cmpss xmm0, dword [eax], 0x01" f30fc20001
aB "cmppd xmm0, xmmword [eax], 0x04" 660fc20004
aB "cmpps xmm0, xmmword [eax], 0x04" 0fc20004
aB "cmpsd xmm0, qword [eax], 0x04" f20fc20004
aB "cmpss xmm0, dword [eax], 0x04" f30fc20004
aB "cmppd xmm0, xmmword [eax], 0x06" 660fc20006
aB "cmpps xmm0, xmmword [eax], 0x06" 0fc20006
aB "cmpsd xmm0, qword [eax], 0x06" f20fc20006
aB "cmpss xmm0, dword [eax], 0x06" f30fc20006
aB "cmppd xmm0, xmmword [eax], 0x05" 660fc20005
aB "cmpps xmm0, xmmword [eax], 0x05" 0fc20005
aB "cmpsd xmm0, qword [eax], 0x05" f20fc20005
aB "cmpss xmm0, dword [eax], 0x05" f30fc20005
aB "cmppd xmm0, xmmword [eax], 0x07" 660fc20007
aB "cmpps xmm0, xmmword [eax], 0x07" 0fc20007
aB "cmpsd xmm0, qword [eax], 0x07" f20fc20007
aB "cmpss xmm0, dword [eax], 0x07" f30fc20007
ad "cmpsb" a6 0x0 (seq (set _src1 (loadw 0 8 (+ (var esi) (bv 32 0x0)))) (set _src2 (loadw 0 8 (+ (+ (var edi) (bv 32 0x0)) (<< (cast 32 false (var es)) (bv 8 0x4) false)))) (set _temp (- (var _src1) (var _src2))) (set _result (var _temp)) (set _x (var _src1)) (set _y (var _src2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))) (set _result (var _temp)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (branch (var df) (seq (set esi (+ (var esi) (bv 32 0x1))) (set edi (+ (var edi) (bv 32 0x1)))) (seq (set esi (- (var esi) (bv 32 0x1))) (set edi (- (var edi) (bv 32 0x1))))))
ad "cmpsd" a7 0x0 (seq (set _src1 (loadw 0 32 (+ (var esi) (bv 32 0x0)))) (set _src2 (loadw 0 32 (+ (+ (var edi) (bv 32 0x0)) (<< (cast 32 false (var es)) (bv 8 0x4) false)))) (set _temp (- (var _src1) (var _src2))) (set _result (var _temp)) (set _x (var _src1)) (set _y (var _src2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))) (set _result (var _temp)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (branch (var df) (seq (set esi (+ (var esi) (bv 32 0x4))) (set edi (+ (var edi) (bv 32 0x4)))) (seq (set esi (- (var esi) (bv 32 0x4))) (set edi (- (var edi) (bv 32 0x4))))))
aB "cmpsd xmm0, qword [eax]" f20fc20000
aB "cmppd xmm0, xmmword [eax], 0x03" 660fc20003
aB "cmpps xmm0, xmmword [eax], 0x03" 0fc20003
aB "cmpsd xmm0, qword [eax], 0x03" f20fc20003
aB "cmpss xmm0, dword [eax], 0x03" f30fc20003
aB "cmpxchg16b [eax]" 67480f0c70
aB "cmpxchg8b dword [eax]" 0fc7c0
aB "cmpxchg byte [eax], al" 0fb000
aB "cmpxchg dword [eax], eax" 0fb100
aB "comisd xmm0, xmmword [eax]" 660f2f00
aB "comiss xmm0, xmmword [eax]" 0f2f00
a "cpuid" 0fa2
aB "crc32 eax, byte [eax]" f20f38f0
aB "crc32 eax, dword [eax]" f20f38f1
aB "cvtdq2pd xmm0, qword [eax]" f30fe600
aB "cvtdq2ps xmm0, xmmword [eax]" 0f5b00
aB "cvtpd2dq xmm0, xmmword [eax]" f20fe600
aB "cvtpd2pi mm0, xmmword [eax]" 660f2d00
aB "cvtpd2ps xmm0, xmmword [eax]" 660f5a00
aB "cvtpi2pd xmm0, qword [eax]" 660f2a00
aB "cvtpi2ps xmm0, qword [eax]" 0f2a00
aB "cvtps2dq xmm0, xmmword [eax]" 660f5b00
aB "cvtps2pd xmm0, qword [eax]" 0f5a00
aB "cvtps2pi mm0, qword [eax]" 0f2d00
aB "cvtsd2si eax, qword [eax]" f20f2d00
aB "cvtsd2ss xmm0, qword [eax]" f20f5a00
aB "cvtsi2sd xmm0, dword [eax]" f20f2a00
aB "cvtsi2ss xmm0, dword [eax]" f30f2a00
aB "cvtss2sd xmm0, dword [eax]" f30f5a00
aB "cvtss2si eax, dword [eax]" f30f2d00
aB "cvttpd2dq xmm0, xmmword [eax]" 660fe600
aB "cvttpd2pi mm0, xmmword [eax]" 660f2c00
aB "cvttps2dq xmm0, xmmword [eax]" f30f5b00
aB "cvttps2pi mm0, qword [eax]" 0f2c00
aB "cvttsd2si eax, qword [eax]" f20f2c00
aB "cvttss2si eax, dword [eax]" f30f2c00
a "cwd" 6699
a "cwde" 98
a "daa" 27
a "das" 2f
a "dec byte [eax]" fe08
a "dec dword [eax]" ff08
a "dec eax" 48
a "dec ebp" 4d
a "dec ebx" 4b
a "dec ecx" 49
a "dec edi" 4f
a "dec edx" 4a
a "dec esi" 4e
a "dec esp" 4c
a "div byte [eax]" f630
aB "divpd xmm0, xmmword [eax]" 660f5e00
aB "divps xmm0, xmmword [eax]" 0f5e00
aB "divsd xmm0, qword [eax]" f20f5e00
aB "divss xmm0, dword [eax]" f30f5e00
aB "dppd xmm0, xmm0, 0x00" 660f3a41c000
aB "dpps xmm0, xmm0, 0x00" 660f3a40c000
a "emms" 0f77
aB "extractps eax, xmm0, 0x00" 660f3a17c000
aB "extrq xmm0, 0x0, 0x0" 660f78c00000
aB "extrq xmm0, xmm0" 660f7900
a "femms" 0f0e
a "fsincos" d9fb
a "fxrstor [eax]" 0fae08
a "fxsave [eax]" 0fae00
a "getsec" 0f37
aB "haddpd xmm0, xmmword [eax]" 660f7c00
aB "haddps xmm0, xmmword [eax]" f20f7c00
a "hlt" f4
aB "hsubpd xmm0, xmmword [eax]" 660f7d00
aB "hsubps xmm0, xmmword [eax]" f20f7d00
a "idiv byte [eax]" f638
a "imul eax" f7e8 0x0 (seq (set _tmp_xp (* (cast 64 (msb (var eax)) (var eax)) (cast 64 (msb (var eax)) (var eax)))) (set eax (cast 32 false (var _tmp_xp))) (set edx (cast 32 false (>> (var _tmp_xp) (bv 8 0x20) false))) (branch (== (cast 64 (msb (cast 32 false (var _tmp_xp))) (cast 32 false (var _tmp_xp))) (var _tmp_xp)) (seq (set cf false) (set of false)) (seq (set cf true) (set of true))))
a "imul edx" f7ea 0x0 (seq (set _tmp_xp (* (cast 64 (msb (var eax)) (var eax)) (cast 64 (msb (var edx)) (var edx)))) (set eax (cast 32 false (var _tmp_xp))) (set edx (cast 32 false (>> (var _tmp_xp) (bv 8 0x20) false))) (branch (== (cast 64 (msb (cast 32 false (var _tmp_xp))) (cast 32 false (var _tmp_xp))) (var _tmp_xp)) (seq (set cf false) (set of false)) (seq (set cf true) (set of true))))
a "imul edx, eax" 0fafd0 0x0 (seq (set _dest (var edx)) (set _tmp_xp (* (cast 64 (msb (var _dest)) (var _dest)) (cast 64 (msb (var eax)) (var eax)))) (set _dest (cast 32 false (var _tmp_xp))) (set edx (var _dest)) (branch (== (cast 64 (msb (var _dest)) (var _dest)) (var _tmp_xp)) (seq (set cf false) (set of false)) (seq (set cf true) (set of true))))
a "imul ecx, 23" 6bc917 0x0 (seq (set _tmp_xp (* (cast 64 (msb (var ecx)) (var ecx)) (cast 64 (msb (bv 8 0x17)) (bv 8 0x17)))) (set _dest (cast 32 false (var _tmp_xp))) (set ecx (var _dest)) (branch (== (cast 64 (msb (var _dest)) (var _dest)) (var _tmp_xp)) (seq (set cf false) (set of false)) (seq (set cf true) (set of true))))
a "imul edx, ecx, 34" 6bd122 0x0 (seq (set _tmp_xp (* (cast 64 (msb (var ecx)) (var ecx)) (cast 64 (msb (bv 8 0x22)) (bv 8 0x22)))) (set _dest (cast 32 false (var _tmp_xp))) (set edx (var _dest)) (branch (== (cast 64 (msb (var _dest)) (var _dest)) (var _tmp_xp)) (seq (set cf false) (set of false)) (seq (set cf true) (set of true))))
a "imul byte [eax]" f628 0x0 (seq (set _tmp_xp (* (cast 16 (msb (cast 8 false (var eax))) (cast 8 false (var eax))) (cast 16 (msb (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (loadw 0 8 (+ (var eax) (bv 32 0x0)))))) (set eax (| (& (var eax) (~ (bv 32 0xffff))) (cast 32 false (var _tmp_xp)))) (branch (== (cast 16 (msb (cast 8 false (var _tmp_xp))) (cast 8 false (var _tmp_xp))) (var _tmp_xp)) (seq (set cf false) (set of false)) (seq (set cf true) (set of true))))
a "imul dword [eax]" f728 0x0 (seq (set _tmp_xp (* (cast 64 (msb (var eax)) (var eax)) (cast 64 (msb (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (loadw 0 32 (+ (var eax) (bv 32 0x0)))))) (set eax (cast 32 false (var _tmp_xp))) (set edx (cast 32 false (>> (var _tmp_xp) (bv 8 0x20) false))) (branch (== (cast 64 (msb (cast 32 false (var _tmp_xp))) (cast 32 false (var _tmp_xp))) (var _tmp_xp)) (seq (set cf false) (set of false)) (seq (set cf true) (set of true))))
a "imul ebx, [edx + ecx]" 0faf1c0a 0x0 (seq (set _dest (var ebx)) (set _tmp_xp (* (cast 64 (msb (var _dest)) (var _dest)) (cast 64 (msb (loadw 0 32 (+ (+ (var edx) (* (var ecx) (bv 32 0x1))) (bv 32 0x0)))) (loadw 0 32 (+ (+ (var edx) (* (var ecx) (bv 32 0x1))) (bv 32 0x0)))))) (set _dest (cast 32 false (var _tmp_xp))) (set ebx (var _dest)) (branch (== (cast 64 (msb (var _dest)) (var _dest)) (var _tmp_xp)) (seq (set cf false) (set of false)) (seq (set cf true) (set of true))))
a "imul ebx, dword [edx], 0x00" 6b1a00 0x0 (seq (set _tmp_xp (* (cast 64 (msb (loadw 0 32 (+ (var edx) (bv 32 0x0)))) (loadw 0 32 (+ (var edx) (bv 32 0x0)))) (cast 64 (msb (bv 8 0x0)) (bv 8 0x0)))) (set _dest (cast 32 false (var _tmp_xp))) (set ebx (var _dest)) (branch (== (cast 64 (msb (var _dest)) (var _dest)) (var _tmp_xp)) (seq (set cf false) (set of false)) (seq (set cf true) (set of true))))
a "imul ebx, edx, 4" 6bda04 0x0 (seq (set _tmp_xp (* (cast 64 (msb (var edx)) (var edx)) (cast 64 (msb (bv 8 0x4)) (bv 8 0x4)))) (set _dest (cast 32 false (var _tmp_xp))) (set ebx (var _dest)) (branch (== (cast 64 (msb (var _dest)) (var _dest)) (var _tmp_xp)) (seq (set cf false) (set of false)) (seq (set cf true) (set of true))))
a "imul eax, dword [eax]" 0faf00 0x0 (seq (set _dest (var eax)) (set _tmp_xp (* (cast 64 (msb (var _dest)) (var _dest)) (cast 64 (msb (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (loadw 0 32 (+ (var eax) (bv 32 0x0)))))) (set _dest (cast 32 false (var _tmp_xp))) (set eax (var _dest)) (branch (== (cast 64 (msb (var _dest)) (var _dest)) (var _tmp_xp)) (seq (set cf false) (set of false)) (seq (set cf true) (set of true))))
a "imul eax, [eax], 0x00" 6b0000 0x0 (seq (set _tmp_xp (* (cast 64 (msb (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (cast 64 (msb (bv 8 0x0)) (bv 8 0x0)))) (set _dest (cast 32 false (var _tmp_xp))) (set eax (var _dest)) (branch (== (cast 64 (msb (var _dest)) (var _dest)) (var _tmp_xp)) (seq (set cf false) (set of false)) (seq (set cf true) (set of true))))
a "in al,0" e400 0x0 (goto port)
a "in al,dx" ec 0x0 (goto port)
a "inc byte [eax]" fe00 0x0 (seq (set _op (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set _result (+ (var _op) (bv 8 0x1))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc dword [eax]" ff00 0x0 (seq (set _op (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc eax" 40 0x0 (seq (set _op (var eax)) (set _result (+ (var _op) (bv 32 0x1))) (set eax (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc ebp" 45 0x0 (seq (set _op (var ebp)) (set _result (+ (var _op) (bv 32 0x1))) (set ebp (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc ebx" 43 0x0 (seq (set _op (var ebx)) (set _result (+ (var _op) (bv 32 0x1))) (set ebx (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc ecx" 41 0x0 (seq (set _op (var ecx)) (set _result (+ (var _op) (bv 32 0x1))) (set ecx (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc edi" 47 0x0 (seq (set _op (var edi)) (set _result (+ (var _op) (bv 32 0x1))) (set edi (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc edx" 42 0x0 (seq (set _op (var edx)) (set _result (+ (var _op) (bv 32 0x1))) (set edx (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc esi" 46 0x0 (seq (set _op (var esi)) (set _result (+ (var _op) (bv 32 0x1))) (set esi (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc esp" 44 0x0 (seq (set _op (var esp)) (set _result (+ (var _op) (bv 32 0x1))) (set esp (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "in eax, 0x00" e500 0x0 (goto port)
a "in eax, 0x8c" e58c 0x0 (goto port)
a "in eax, dx" ed 0x0 (goto port)
a "insb" 6c
a "insd" 6d
aB "insertps xmm0, xmm0, 0x00" 660f3a21c000
a "int 0x21" cd21 0x0 (goto int)
a "int 1" cd01 0x0 (goto int)
a "int1" f1
a "int3" cc
a "int 3" cd03 0x0 (goto int)
a "into" ce
a "invd" 0f08
aB "invlpga" 0f01df
aB "invlpg byte [eax]" 0f0138
a "iret" 66cf
a "iretd" cf
a "jnbe 0x8049300" 0f87fa920408 0x0 (branch (&& (! (var cf)) (! (var zf))) (jmp (bv 32 0x8049300)) nop)
a "jnbe 2" 7700 0x0 (branch (&& (! (var cf)) (! (var zf))) (jmp (bv 32 0x2)) nop)
a "jnbe 6" 7704 0x0 (branch (&& (! (var cf)) (! (var zf))) (jmp (bv 32 0x6)) nop)
a "jnb 2" 7300 0x0 (branch (! (var cf)) (jmp (bv 32 0x2)) nop)
a "jnb 6" 7304 0x0 (branch (! (var cf)) (jmp (bv 32 0x6)) nop)
a "jb 0x8049300" 0f82fa920408 0x0 (branch (var cf) (jmp (bv 32 0x8049300)) nop)
a "jb 2" 7200 0x0 (branch (var cf) (jmp (bv 32 0x2)) nop)
a "jb 6" 7204 0x0 (branch (var cf) (jmp (bv 32 0x6)) nop)
a "jbe 2" 7600 0x0 (branch (|| (var cf) (var zf)) (jmp (bv 32 0x2)) nop)
a "jbe 6" 7604 0x0 (branch (|| (var cf) (var zf)) (jmp (bv 32 0x6)) nop)
a "jz 2" 7400 0x0 (branch (var zf) (jmp (bv 32 0x2)) nop)
a "jz 6" 7404 0x0 (branch (var zf) (jmp (bv 32 0x6)) nop)
a "jnle 0x8049300" 0f8ffa920408 0x0 (branch (&& (! (var zf)) (! (^^ (var sf) (var of)))) (jmp (bv 32 0x8049300)) nop)
a "jnle 2" 7f00 0x0 (branch (&& (! (var zf)) (! (^^ (var sf) (var of)))) (jmp (bv 32 0x2)) nop)
a "jnle 6" 7f04 0x0 (branch (&& (! (var zf)) (! (^^ (var sf) (var of)))) (jmp (bv 32 0x6)) nop)
a "jnl 0x8048010" 0f8d0a800408 0x0 (branch (! (^^ (var sf) (var of))) (jmp (bv 32 0x8048010)) nop)
a "jnl 0x8049300" 0f8dfa920408 0x0 (branch (! (^^ (var sf) (var of))) (jmp (bv 32 0x8049300)) nop)
a "jnl 2" 7d00 0x0 (branch (! (^^ (var sf) (var of))) (jmp (bv 32 0x2)) nop)
a "jnl 6" 7d04 0x0 (branch (! (^^ (var sf) (var of))) (jmp (bv 32 0x6)) nop)
a "jl 0x8048010" 0f8c0a800408 0x0 (branch (^^ (var sf) (var of)) (jmp (bv 32 0x8048010)) nop)
a "jl 0x8049300" 0f8cfa920408 0x0 (branch (^^ (var sf) (var of)) (jmp (bv 32 0x8049300)) nop)
a "jl 2" 7c00 0x0 (branch (^^ (var sf) (var of)) (jmp (bv 32 0x2)) nop)
a "jl 6" 7c04 0x0 (branch (^^ (var sf) (var of)) (jmp (bv 32 0x6)) nop)
a "jle 0x8048010" 0f8e0a800408 0x0 (branch (|| (var zf) (^^ (var sf) (var of))) (jmp (bv 32 0x8048010)) nop)
a "jle 0x8049300" 0f8efa920408 0x0 (branch (|| (var zf) (^^ (var sf) (var of))) (jmp (bv 32 0x8049300)) nop)
a "jle 2" 7e00 0x0 (branch (|| (var zf) (^^ (var sf) (var of))) (jmp (bv 32 0x2)) nop)
a "jle 6" 7e04 0x0 (branch (|| (var zf) (^^ (var sf) (var of))) (jmp (bv 32 0x6)) nop)
a "jmp 0" ebfe 0x0 (jmp (cast 32 false (bv 32 0x0)))
a "jmp 0x42" eb40 0x0 (jmp (cast 32 false (bv 32 0x42)))
a "jmp -0x7e" eb80 0x0 (jmp (cast 32 false (bv 32 0xffffff82)))
a "jmp -0x7f" e97cffffff 0x0 (jmp (cast 32 false (bv 32 0xffffff81)))
a "jmp 0x8049200" e9fb910408 0x0 (jmp (cast 32 false (bv 32 0x8049200)))
a "jmp 0x81" eb7f 0x0 (jmp (cast 32 false (bv 32 0x81)))
a "jmp 0x82" e97d000000 0x0 (jmp (cast 32 false (bv 32 0x82)))
a "jmp 2" eb00 0x0 (jmp (cast 32 false (bv 32 0x2)))
a "jmp 3" eb01 0x0 (jmp (cast 32 false (bv 32 0x3)))
a "jmp ecx" ffe1 0x0 (jmp (cast 32 false (var ecx)))
a "jmp [ecx]" ff21 0x0 (jmp (cast 32 false (loadw 0 32 (+ (var ecx) (bv 32 0x0)))))
a "jmp [ebx+43]" ff632b 0x0 (jmp (cast 32 false (loadw 0 32 (+ (var ebx) (bv 32 0x2b)))))
a "jmp [ecx+200]" ffa1c8000000 0x0 (jmp (cast 32 false (loadw 0 32 (+ (var ecx) (bv 32 0xc8)))))
a "jmp [edx-10]" ff62f6 0x0 (jmp (cast 32 false (loadw 0 32 (+ (var edx) (bv 32 0xfffffff6)))))
a "jmp [eax-140]" ffa074ffffff 0x0 (jmp (cast 32 false (loadw 0 32 (+ (var eax) (bv 32 0xffffff74)))))
a "bnd jmp 0x82" f2e97d000000
a "jnz 0x6" 7504 0x0 (branch (! (var zf)) (jmp (bv 32 0x6)) nop)
a "jno 0x2" 7100 0x0 (branch (! (var of)) (jmp (bv 32 0x2)) nop)
a "jno 0x6" 7104 0x0 (branch (! (var of)) (jmp (bv 32 0x6)) nop)
a "jnp 0x2" 7b00 0x0 (branch (! (var pf)) (jmp (bv 32 0x2)) nop)
a "jnp 0x6" 7b04 0x0 (branch (! (var pf)) (jmp (bv 32 0x6)) nop)
a "jns 0x2" 7900 0x0 (branch (! (var sf)) (jmp (bv 32 0x2)) nop)
a "jns 0x6" 7904 0x0 (branch (! (var sf)) (jmp (bv 32 0x6)) nop)
a "jnz 0x2" 7500 0x0 (branch (! (var zf)) (jmp (bv 32 0x2)) nop)
a "jo 0x2" 7000 0x0 (branch (var of) (jmp (bv 32 0x2)) nop)
a "jo 0x6" 7004 0x0 (branch (var of) (jmp (bv 32 0x6)) nop)
a "jp 0x2" 7a00 0x0 (branch (var pf) (jmp (bv 32 0x2)) nop)
a "jp 0x6" 7a04 0x0 (branch (var pf) (jmp (bv 32 0x6)) nop)
a "jpo 599" 0f8b51020000 0x0 (branch (! (var pf)) (jmp (bv 32 0x257)) nop)
a "js 0x2" 7800 0x0 (branch (var sf) (jmp (bv 32 0x2)) nop)
a "js 0x6" 7804 0x0 (branch (var sf) (jmp (bv 32 0x6)) nop)
a "jz 0x6" 7404 0x0 (branch (var zf) (jmp (bv 32 0x6)) nop)
a "jz short 2" 7400 0x0 (branch (var zf) (jmp (bv 32 0x2)) nop)
a "jnz short 6" 7504 0x0 (branch (! (var zf)) (jmp (bv 32 0x6)) nop)
a "jz short 5" 7403 0x0 (branch (var zf) (jmp (bv 32 0x5)) nop)
a "jnz short -2" 75fc 0x0 (branch (! (var zf)) (jmp (bv 32 0xfffffffe)) nop)
a "jz short -52" 74ca 0x0 (branch (var zf) (jmp (bv 32 0xffffffcc)) nop)
a "jnz short 23" 7515 0x0 (branch (! (var zf)) (jmp (bv 32 0x17)) nop)
a "jo short 32" 701e 0x0 (branch (var of) (jmp (bv 32 0x20)) nop)
a "jo short -62" 70c0 0x0 (branch (var of) (jmp (bv 32 0xffffffc2)) nop)
a "jno short 52" 7132 0x0 (branch (! (var of)) (jmp (bv 32 0x34)) nop)
a "jno short -33" 71dd 0x0 (branch (! (var of)) (jmp (bv 32 0xffffffdf)) nop)
a "js short 43" 7829 0x0 (branch (var sf) (jmp (bv 32 0x2b)) nop)
a "js short -73" 78b5 0x0 (branch (var sf) (jmp (bv 32 0xffffffb7)) nop)
a "jns short -41" 79d5 0x0 (branch (! (var sf)) (jmp (bv 32 0xffffffd7)) nop)
a "jns short 63" 793d 0x0 (branch (! (var sf)) (jmp (bv 32 0x3f)) nop)
a "jz short 24" 7416 0x0 (branch (var zf) (jmp (bv 32 0x18)) nop)
a "jnz SHORT 84" 7552 0x0 (branch (! (var zf)) (jmp (bv 32 0x54)) nop)
a "jb short 23" 7215 0x0 (branch (var cf) (jmp (bv 32 0x17)) nop)
a "jnae short 65" 723f 0x0 (branch (var cf) (jmp (bv 32 0x41)) nop)
a "jc SHORT 37" 7223 0x0 (branch (var cf) (jmp (bv 32 0x25)) nop)
a "jnb short 97" 735f 0x0 (branch (! (var cf)) (jmp (bv 32 0x61)) nop)
a "jnb short 10" 7308 0x0 (branch (! (var cf)) (jmp (bv 32 0xa)) nop)
a "jnc short 0" 73fe 0x0 (branch (! (var cf)) (jmp (bv 32 0x0)) nop)
a "jbe short -12" 76f2 0x0 (branch (|| (var cf) (var zf)) (jmp (bv 32 0xfffffff4)) nop)
a "jna short 24" 7616 0x0 (branch (|| (var cf) (var zf)) (jmp (bv 32 0x18)) nop)
a "jnbe short 86" 7754 0x0 (branch (&& (! (var cf)) (! (var zf))) (jmp (bv 32 0x56)) nop)
a "jnbe short 31" 771d 0x0 (branch (&& (! (var cf)) (! (var zf))) (jmp (bv 32 0x1f)) nop)
a "jl short 16" 7c0e 0x0 (branch (^^ (var sf) (var of)) (jmp (bv 32 0x10)) nop)
a "jnge short -40" 7cd6 0x0 (branch (^^ (var sf) (var of)) (jmp (bv 32 0xffffffd8)) nop)
a "jnl short 52" 7d32 0x0 (branch (! (^^ (var sf) (var of))) (jmp (bv 32 0x34)) nop)
a "jnl short 76" 7d4a 0x0 (branch (! (^^ (var sf) (var of))) (jmp (bv 32 0x4c)) nop)
a "jle short 54" 7e34 0x0 (branch (|| (var zf) (^^ (var sf) (var of))) (jmp (bv 32 0x36)) nop)
a "jng short -80" 7eae 0x0 (branch (|| (var zf) (^^ (var sf) (var of))) (jmp (bv 32 0xffffffb0)) nop)
a "jnle short 56" 7f36 0x0 (branch (&& (! (var zf)) (! (^^ (var sf) (var of)))) (jmp (bv 32 0x38)) nop)
a "jnle short 2" 7f00 0x0 (branch (&& (! (var zf)) (! (^^ (var sf) (var of)))) (jmp (bv 32 0x2)) nop)
a "jp short -7" 7af7 0x0 (branch (var pf) (jmp (bv 32 0xfffffff9)) nop)
a "jpe short 22" 7a14 0x0 (branch (var pf) (jmp (bv 32 0x16)) nop)
a "jnp short 64" 7b3e 0x0 (branch (! (var pf)) (jmp (bv 32 0x40)) nop)
a "jpo short 88" 7b56 0x0 (branch (! (var pf)) (jmp (bv 32 0x58)) nop)
a "lahf" 9f
aB "lar eax, word [eax]" 0f02
aB "lcall 0x00, 0x00" 9a
aB "lcall [0x0]" ff1c2500000000
aB "lcall [eax]" ff18
aB "lddqu xmm0, xmmword [eax]" f20ff000
aB "ldmxcsr [eax]" 0fae10
aB "lds eax, fword [eax]" c500
a "lea eax, [4]" 8d0504000000 0x0 (set eax (cast 32 false (bv 32 0x4)))
a "lea eax, [eax+4]" 8d4004 0x0 (set eax (cast 32 false (+ (var eax) (bv 32 0x4))))
a "lea eax, [eax]" 8d00 0x0 (set eax (cast 32 false (+ (var eax) (bv 32 0x0))))
a "lea eax, [ebp+24]" 8d4518 0x0 (set eax (cast 32 false (+ (+ (var ebp) (bv 32 0x18)) (<< (cast 32 false (var ss)) (bv 8 0x4) false))))
a "lea eax, [ebx+24]" 8d4318 0x0 (set eax (cast 32 false (+ (var ebx) (bv 32 0x18))))
a "lea eax, [ebx+4]" 8d4304 0x0 (set eax (cast 32 false (+ (var ebx) (bv 32 0x4))))
a "lea eax, [ecx]" 8d01 0x0 (set eax (cast 32 false (+ (var ecx) (bv 32 0x0))))
a "lea eax, [esp]" 8d0424 0x0 (set eax (cast 32 false (+ (+ (var esp) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false))))
a "lea ebx, [4]" 8d1d04000000 0x0 (set ebx (cast 32 false (bv 32 0x4)))
a "lea ebx, [eax+24]" 8d5818 0x0 (set ebx (cast 32 false (+ (var eax) (bv 32 0x18))))
a "lea ebx, [eax+4]" 8d5804 0x0 (set ebx (cast 32 false (+ (var eax) (bv 32 0x4))))
a "lea ebx, [ebp+324]" 8d9d44010000 0x0 (set ebx (cast 32 false (+ (+ (var ebp) (bv 32 0x144)) (<< (cast 32 false (var ss)) (bv 8 0x4) false))))
a "lea ebx, [ebp]" 8d5d00 0x0 (set ebx (cast 32 false (+ (+ (var ebp) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false))))
a "lea edx, [0x4422221d]" 8d151d222244 0x0 (set edx (cast 32 false (bv 32 0x4422221d)))
a "lea edx, 0x2c4b" 8d154b2c0000 0x0 (set edx (cast 32 false (bv 32 0x2c4b)))
a "les eax, [eax]" c400 0x0 (set eax (+ (+ (var eax) (bv 32 0x0)) (<< (cast 32 false (var es)) (bv 8 0x4) false)))
a "les eax, [eax+12]" c4400c 0x0 (set eax (+ (+ (var eax) (bv 32 0xc)) (<< (cast 32 false (var es)) (bv 8 0x4) false)))
a "les eax, [eax-233]" c48017ffffff 0x0 (set eax (+ (+ (var eax) (bv 32 0xffffff17)) (<< (cast 32 false (var es)) (bv 8 0x4) false)))
a "lfence" 0faee8
aB "lfs eax, dword [eax]" 0fb400
a "lgdt [eax]" 0f0110
aB "lgs eax, dword [eax]" 0fb500
a "lidt [eax]" 0f0118
a "lldt ax" 0f00d0
a "lldt word [eax]" 0f0010
a "lmsw ax" 0f01f0
a "lmsw word [eax]" 0f0130
aB "lock and word [fs:bx + si], si" 646766f02130
aB "lock cmpxchg8b" f00fc7c0
aB "lock mov dword [eax], eax" f08900
aB "lock mov eax, eax" f089c0
a "lodsb" ac
a "lodsd" ad
aB "loop 3" 66e200
aB "lsl eax, dword [eax]" 0f03
aB "lss eax, dword [eax]" 0fb200
aB "ltr ax" 0f00d8
aB "ltr word [eax]" 0f0018
aB "lzcnt eax, dword [eax]" f30fbd00
aB "maskmovdqu xmm0, xmm0" 660ff7
aB "maskmovq mm0, mm0" 0ff7
aB "maxpd xmm0, xmmword [eax]" 660f5f00
aB "maxps xmm0, xmmword [eax]" 0f5f00
aB "maxsd xmm0, qword [eax]" f20f5f00
aB "maxss xmm0, dword [eax]" f30f5f00
a "mfence" 0faef0
aB "minpd xmm0, xmmword [eax]" 660f5d00
aB "minps xmm0, xmmword [eax]" 0f5d00
aB "minsd xmm0, qword [eax]" f20f5d00
aB "minss xmm0, dword [eax]" f30f5d00
a "monitor" 0f01c8
a "mov [33], ebp" 892d21000000 0x0 (storew 0 (bv 32 0x21) (var ebp))
a "mov [33], ebx" 891d21000000 0x0 (storew 0 (bv 32 0x21) (var ebx))
a "mov [33], ecx" 890d21000000 0x0 (storew 0 (bv 32 0x21) (var ecx))
a "mov [33], edi" 893d21000000 0x0 (storew 0 (bv 32 0x21) (var edi))
a "mov [33], edx" 891521000000 0x0 (storew 0 (bv 32 0x21) (var edx))
a "mov [33], esi" 893521000000 0x0 (storew 0 (bv 32 0x21) (var esi))
a "mov [33], esp" 892521000000 0x0 (storew 0 (bv 32 0x21) (var esp))
a "mov ah, 0x00" b400 0x0 (set eax (| (& (var eax) (~ (bv 32 0xff00))) (<< (cast 32 false (bv 8 0x0)) (bv 8 0x8) false)))
a "mov al, 0x00" b000 0x0 (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (bv 8 0x0))))
a "mov al, byte [0x0]" a000000000 0x0 (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (loadw 0 8 (bv 32 0x0)))))
a "mov al, byte [eax]" 8a00 0x0 (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (loadw 0 8 (+ (var eax) (bv 32 0x0))))))
a "mov al, [eax]" 8a00 0x0 (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (loadw 0 8 (+ (var eax) (bv 32 0x0))))))
aB "movapd xmm0, xmmword [eax]" 660f2800
aB "movapd xmmword [eax], xmm0" 660f2900
aB "movaps xmm0, xmmword [eax]" 0f2800
aB "movaps xmmword [eax], xmm0" 0f2900
aB "movbe dword [eax], eax" 0f38f100
aB "movbe eax, dword [eax]" 0f38f000
a "mov bh, 0x00" b700 0x0 (set ebx (| (& (var ebx) (~ (bv 32 0xff00))) (<< (cast 32 false (bv 8 0x0)) (bv 8 0x8) false)))
a "mov bl, 0x00" b300 0x0 (set ebx (| (& (var ebx) (~ (bv 32 0xff))) (cast 32 false (bv 8 0x0))))
a "mov byte [0x0], al" 880500000000 0x0 (storew 0 (bv 32 0x0) (cast 8 false (var eax)))
a "mov ch, 0x00" b500 0x0 (set ecx (| (& (var ecx) (~ (bv 32 0xff00))) (<< (cast 32 false (bv 8 0x0)) (bv 8 0x8) false)))
a "mov cl, 0x00" b100 0x0 (set ecx (| (& (var ecx) (~ (bv 32 0xff))) (cast 32 false (bv 8 0x0))))
a "mov cr0, eax" 0f22c0 0x0 (set cr0 (var eax))
aB "movddup xmm0, qword [eax]" f20f1200
aB "movd dword [eax], mm0" 0f7e00
aB "movd dword [eax], xmm0" 660f7e00
a "mov dh, 0x00" b600 0x0 (set edx (| (& (var edx) (~ (bv 32 0xff00))) (<< (cast 32 false (bv 8 0x0)) (bv 8 0x8) false)))
a "mov dl, 0x00" b200 0x0 (set edx (| (& (var edx) (~ (bv 32 0xff))) (cast 32 false (bv 8 0x0))))
aB "movd mm0, dword [eax]" 0f6e00
aB "movdq2q mm0, xmm0" f20fd6
aB "movdqa xmm0, xmmword [eax]" 660f6f00
aB "movdqa xmmword [eax], xmm0" 660f7f00
aB "movdqu xmm0, xmmword [eax]" f30f6f00
aB "movdqu xmmword [eax], xmm0" f30f7f00
a "mov dr0, eax" 0f23c0 0x0 (set dr0 (var eax))
a "mov dword [0x0], eax" 890500000000 0x0 (storew 0 (bv 32 0x0) (var eax))
aB "mov dword cs:[eax], eax" 2e8900
aB "mov dword ds:[eax], eax" 3e8900
a "mov dword [eax], 0x00" c70000000000 0x0 (storew 0 (+ (var eax) (bv 32 0x0)) (bv 32 0x0))
a "mov dword [eax], 0x6f77206f" c7006f20776f 0x0 (storew 0 (+ (var eax) (bv 32 0x0)) (bv 32 0x6f77206f))
a "mov dword [eax+16], 0x6f77206f" c740106f20776f 0x0 (storew 0 (+ (var eax) (bv 32 0x10)) (bv 32 0x6f77206f))
a "mov dword [eax], 3" c70003000000 0x0 (storew 0 (+ (var eax) (bv 32 0x0)) (bv 32 0x3))
a "mov dword [eax+4], 1" c7400401000000 0x0 (storew 0 (+ (var eax) (bv 32 0x4)) (bv 32 0x1))
a "mov dword [eax+4], 3" c7400403000000 0x0 (storew 0 (+ (var eax) (bv 32 0x4)) (bv 32 0x3))
a "mov dword [eax+450], 0x6f77206f" c780c20100006f20776f 0x0 (storew 0 (+ (var eax) (bv 32 0x1c2)) (bv 32 0x6f77206f))
a "mov dword [eax+4], 666" c740049a020000 0x0 (storew 0 (+ (var eax) (bv 32 0x4)) (bv 32 0x29a))
a "mov dword [eax-512], 421" c78000feffffa5010000 0x0 (storew 0 (+ (var eax) (bv 32 0xfffffe00)) (bv 32 0x1a5))
a "mov dword [eax], 666" c7009a020000 0x0 (storew 0 (+ (var eax) (bv 32 0x0)) (bv 32 0x29a))
a "mov dword [eax], eax" 8900 0x0 (storew 0 (+ (var eax) (bv 32 0x0)) (var eax))
a "mov dword [ebp-12], 1" c745f401000000 0x0 (storew 0 (+ (+ (var ebp) (bv 32 0xfffffff4)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 32 0x1))
a "mov dword [ebp+16], 0x6f77206f" c745106f20776f 0x0 (storew 0 (+ (+ (var ebp) (bv 32 0x10)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 32 0x6f77206f))
a "mov dword [ebp-312], 3" c785c8feffff03000000 0x0 (storew 0 (+ (+ (var ebp) (bv 32 0xfffffec8)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 32 0x3))
a "mov dword [ebp+4], 1" c7450401000000 0x0 (storew 0 (+ (+ (var ebp) (bv 32 0x4)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 32 0x1))
a "mov dword [ebp+450], 0x6f77206f" c785c20100006f20776f 0x0 (storew 0 (+ (+ (var ebp) (bv 32 0x1c2)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 32 0x6f77206f))
aB "mov dword es:[eax], eax" 268900
a "mov dword [esi+4], 33" c7460421000000 0x0 (storew 0 (+ (var esi) (bv 32 0x4)) (bv 32 0x21))
a "mov dword [esp-312], 321" c78424c8feffff41010000 0x0 (storew 0 (+ (+ (var esp) (bv 32 0xfffffec8)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 32 0x141))
a "mov dword [esp], 3" c7042403000000 0x0 (storew 0 (+ (+ (var esp) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 32 0x3))
a "mov dword [esp+4], 1" c744240401000000 0x0 (storew 0 (+ (+ (var esp) (bv 32 0x4)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 32 0x1))
aB "mov dword fs:[eax], eax" 648900
aB "mov dword gs:[eax], eax" 658900
aB "mov dword ss:[eax], eax" 368900
aB "mov eax, dword fs:[1]" 648b042501000000
aB "movd xmm0, dword [eax]" 660f6e00
a "mov eax, 0x00" b800000000 0x0 (set eax (bv 32 0x0))
a "mov [eax], 0x00" c70000000000 0x0 (storew 0 (+ (var eax) (bv 32 0x0)) (bv 32 0x0))
a "mov eax, 0x8049000" b800900408 0x0 (set eax (bv 32 0x8049000))
a "mov eax, 1" b801000000 0x0 (set eax (bv 32 0x1))
a "mov [eax+2], ebx" 895802 0x0 (storew 0 (+ (var eax) (bv 32 0x2)) (var ebx))
a "mov [eax+345], ebx" 899859010000 0x0 (storew 0 (+ (var eax) (bv 32 0x159)) (var ebx))
a "mov eax, 300" b82c010000 0x0 (set eax (bv 32 0x12c))
a "mov eax, 3" b803000000 0x0 (set eax (bv 32 0x3))
a "mov [eax+4], eax" 894004 0x0 (storew 0 (+ (var eax) (bv 32 0x4)) (var eax))
a "mov [eax+4], ecx" 894804 0x0 (storew 0 (+ (var eax) (bv 32 0x4)) (var ecx))
a "mov eax, cr0" 0f20c0 0x0 (set eax (var cr0))
a "mov eax, dr0" 0f21c0 0x0 (set eax (var dr0))
a "mov eax, dword [0x0]" a100000000 0x0 (set eax (loadw 0 32 (bv 32 0x0)))
a "mov ecx, dword [0x0]" 8b0d00000000 0x0 (set ecx (loadw 0 32 (bv 32 0x0)))
a "mov ecx, dword [1]" 8b0d01000000 0x0 (set ecx (loadw 0 32 (bv 32 0x1)))
a "mov eax, dword [eax]" 8b00 0x0 (set eax (loadw 0 32 (+ (var eax) (bv 32 0x0))))
a "mov eax, dword [ebp]" 8b4500 0x0 (set eax (loadw 0 32 (+ (+ (var ebp) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false))))
a "mov eax, dword [esp]" 8b0424 0x0 (set eax (loadw 0 32 (+ (+ (var esp) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false))))
aB "mov eax, dword fs:[ebp]" 648b4500
a "mov eax, [eax+1337]" 8b8039050000 0x0 (set eax (loadw 0 32 (+ (var eax) (bv 32 0x539))))
a "mov ecx, [eip+1337]" 8b0d39050000 0x0 (set ecx (loadw 0 32 (bv 32 0x539)))
a "mov ecx, [eip+13]" 8b0d0d000000 0x0 (set ecx (loadw 0 32 (bv 32 0xd)))
a "mov eax, [eax-1337]" 8b80c7faffff 0x0 (set eax (loadw 0 32 (+ (var eax) (bv 32 0xfffffac7))))
a "mov eax,[eax*4+32]" 8b048520000000 0x0 (set eax (loadw 0 32 (+ (* (var eax) (bv 32 0x4)) (bv 32 0x20))))
a "mov eax,[eax*4-32]" 8b0485e0ffffff 0x0 (set eax (loadw 0 32 (+ (* (var eax) (bv 32 0x4)) (bv 32 0xffffffe0))))
a "mov eax,[eax*4+332]" 8b04854c010000 0x0 (set eax (loadw 0 32 (+ (* (var eax) (bv 32 0x4)) (bv 32 0x14c))))
a "mov eax,[eax*4-332]" 8b0485b4feffff 0x0 (set eax (loadw 0 32 (+ (* (var eax) (bv 32 0x4)) (bv 32 0xfffffeb4))))
a "mov eax, [eax+4]" 8b4004 0x0 (set eax (loadw 0 32 (+ (var eax) (bv 32 0x4))))
a "mov eax, [eax-4]" 8b40fc 0x0 (set eax (loadw 0 32 (+ (var eax) (bv 32 0xfffffffc))))
a "mov [eax], eax" 8900 0x0 (storew 0 (+ (var eax) (bv 32 0x0)) (var eax))
a "mov byte [eax], al" 8800 0x0 (storew 0 (+ (var eax) (bv 32 0x0)) (cast 8 false (var eax)))
a "mov eax, eax" 89c0 0x0 (set eax (var eax))
a "mov eax, [eax]" 8b00 0x0 (set eax (loadw 0 32 (+ (var eax) (bv 32 0x0))))
a "mov [eax+eax], eax" 890400 0x0 (storew 0 (+ (+ (var eax) (* (var eax) (bv 32 0x1))) (bv 32 0x0)) (var eax))
aB "mov eax,[eax+ebx*4+32]" 8b449820
a "mov [eax+eax], ebx" 891c00 0x0 (storew 0 (+ (+ (var eax) (* (var eax) (bv 32 0x1))) (bv 32 0x0)) (var ebx))
a "mov [eax+eax], ecx" 890c00 0x0 (storew 0 (+ (+ (var eax) (* (var eax) (bv 32 0x1))) (bv 32 0x0)) (var ecx))
a "mov eax, [ebp]" 8b4500 0x0 (set eax (loadw 0 32 (+ (+ (var ebp) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false))))
a "mov [eax], ebx" 8918 0x0 (storew 0 (+ (var eax) (bv 32 0x0)) (var ebx))
a "mov eax, ebx" 89d8 0x0 (set eax (var ebx))
a "mov eax, [ebx]" 8b03 0x0 (set eax (loadw 0 32 (+ (var ebx) (bv 32 0x0))))
a "mov eax,[ecx*8+64]" 8b04cd40000000 0x0 (set eax (loadw 0 32 (+ (* (var ecx) (bv 32 0x8)) (bv 32 0x40))))
a "mov [ecx*8+64], eax" 8904CD40000000
a "mov [eax+ecx], eax" 890408 0x0 (storew 0 (+ (+ (var eax) (* (var ecx) (bv 32 0x1))) (bv 32 0x0)) (var eax))
a "mov eax, [esi]" 8b06 0x0 (set eax (loadw 0 32 (+ (var esi) (bv 32 0x0))))
a "mov eax, [esp+4]" 8b442404 0x0 (set eax (loadw 0 32 (+ (+ (var esp) (bv 32 0x4)) (<< (cast 32 false (var ss)) (bv 8 0x4) false))))
a "mov eax, esp" 89e0 0x0 (set eax (var esp))
a "mov eax, [esp]" 8b0424 0x0 (set eax (loadw 0 32 (+ (+ (var esp) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false))))
a "mov ebp, 0x00" bd00000000 0x0 (set ebp (bv 32 0x0))
a "mov [ebp+4], eax" 898504000000 0x0 (storew 0 (+ (+ (var ebp) (bv 32 0x4)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (var eax))
a "mov [ebp+4], ebx" 899d04000000 0x0 (storew 0 (+ (+ (var ebp) (bv 32 0x4)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (var ebx))
a "mov [ebp+4], ecx" 898d04000000 0x0 (storew 0 (+ (+ (var ebp) (bv 32 0x4)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (var ecx))
a "mov ebx, 0x00" bb00000000 0x0 (set ebx (bv 32 0x0))
a "mov [ebx+2], ebx" 895b02 0x0 (storew 0 (+ (var ebx) (bv 32 0x2)) (var ebx))
a "mov [ebx-2], ecx" 894bfe 0x0 (storew 0 (+ (var ebx) (bv 32 0xfffffffe)) (var ecx))
a "mov ebx, -3" bbfdffffff 0x0 (set ebx (bv 32 0xfffffffd))
a "mov [ebx+454], ebx" 899bc6010000 0x0 (storew 0 (+ (var ebx) (bv 32 0x1c6)) (var ebx))
a "mov [ebx-552], edx" 8993d8fdffff 0x0 (storew 0 (+ (var ebx) (bv 32 0xfffffdd8)) (var edx))
a "mov [ebx], eax" 8903 0x0 (storew 0 (+ (var ebx) (bv 32 0x0)) (var eax))
a "mov ebx, eax" 89c3 0x0 (set ebx (var eax))
a "mov ebx, [eax]" 8b18 0x0 (set ebx (loadw 0 32 (+ (var eax) (bv 32 0x0))))
a "mov [ebx+eax], eax" 890403 0x0 (storew 0 (+ (+ (var ebx) (* (var eax) (bv 32 0x1))) (bv 32 0x0)) (var eax))
a "mov ebx, [ecx + edx]" 8b1c11 0x0 (set ebx (loadw 0 32 (+ (+ (var ecx) (* (var edx) (bv 32 0x1))) (bv 32 0x0))))
a "mov ecx, 0x00" b900000000 0x0 (set ecx (bv 32 0x0))
a "mov ecx, -432" b950feffff 0x0 (set ecx (bv 32 0xfffffe50))
a "mov ecx, [eax]" 8b08 0x0 (set ecx (loadw 0 32 (+ (var eax) (bv 32 0x0))))
a "mov edi, 0x00" bf00000000 0x0 (set edi (bv 32 0x0))
a "mov edx, 0x00" ba00000000 0x0 (set edx (bv 32 0x0))
a "mov esi, 0x00" be00000000 0x0 (set esi (bv 32 0x0))
a "mov esi, [esi + 8]" 8b7608 0x0 (set esi (loadw 0 32 (+ (var esi) (bv 32 0x8))))
a "mov esp, 0x00" bc00000000 0x0 (set esp (bv 32 0x0))
a "mov [esp-12], eax" 894424f4 0x0 (storew 0 (+ (+ (var esp) (bv 32 0xfffffff4)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (var eax))
a "mov [esp+2], ebx" 895c2402 0x0 (storew 0 (+ (+ (var esp) (bv 32 0x2)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (var ebx))
a "mov [esp-2], ebx" 895c24fe 0x0 (storew 0 (+ (+ (var esp) (bv 32 0xfffffffe)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (var ebx))
a "mov [esp-233], ebx" 899c2417ffffff 0x0 (storew 0 (+ (+ (var esp) (bv 32 0xffffff17)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (var ebx))
a "mov [esp+454], ebx" 899c24c6010000 0x0 (storew 0 (+ (+ (var esp) (bv 32 0x1c6)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (var ebx))
aB "mov es, word [eax]" 8e00
aB "movhlps xmm0, xmm0" 0f12
aB "movhpd qword [eax], xmm0" 660f1700
aB "movhpd xmm0, qword [eax]" 660f1600
aB "movhps qword [eax], xmm0" 0f17
aB "movhps xmm0, qword [eax]" 0f16
aB "movlhps xmm0, xmm0" 0f16
aB "movlpd qword [eax], xmm0" 660f1300
aB "movlpd xmm0, qword [eax]" 660f1200
aB "movlps qword [eax], xmm0" 0f13
aB "movlps xmm0, qword [eax]" 0f12
aB "movmskpd eax, xmm0" 660f50c0
aB "movmskps eax, xmm0" 0f50c0
aB "movntdqa xmm0, xmmword [eax]" 660f382a00
aB "movntdq xmmword [eax], xmm0" 660fe700
aB "movnti dword [eax], eax" 0fc300
aB "movntpd xmmword [eax], xmm0" 660f2b00
aB "movntps xmmword [eax], xmm0" 0f2b00
aB "movntq qword [eax], mm0" 0fe700
aB "movq2dq xmm0, mm0" f30fd6
aB "movq mm0, qword [eax]" 0f6f00
aB "movq qword [eax], mm0" 0f7f00
aB "movq qword [eax], xmm0" 660fd600
aB "movq xmm0, qword [eax]" f30f7e00
a "movsb" a4 0x0 (seq (storew 0 (+ (+ (var edi) (bv 32 0x0)) (<< (cast 32 false (var es)) (bv 8 0x4) false)) (loadw 0 8 (+ (var esi) (bv 32 0x0)))) (branch (var df) (seq (set esi (- (var esi) (bv 32 0x1))) (set edi (- (var edi) (bv 32 0x1)))) (seq (set esi (+ (var esi) (bv 32 0x1))) (set edi (+ (var edi) (bv 32 0x1))))))
a "movsd" a5 0x0 (seq (storew 0 (+ (+ (var edi) (bv 32 0x0)) (<< (cast 32 false (var es)) (bv 8 0x4) false)) (loadw 0 32 (+ (var esi) (bv 32 0x0)))) (branch (var df) (seq (set esi (- (var esi) (bv 32 0x4))) (set edi (- (var edi) (bv 32 0x4)))) (seq (set esi (+ (var esi) (bv 32 0x4))) (set edi (+ (var edi) (bv 32 0x4))))))
aB "movsd dword es:[edi], dword ptr fs:[esi]" 64a5
aB "movsd qword [eax], xmm0" f20f1100
aB "movsd xmm0, qword [eax]" f20f1000
aB "movshdup xmm0, xmmword [eax]" f30f1600
aB "movsldup xmm0, xmmword [eax]" f30f1200
aB "movss dword [eax], xmm0" f30f1100
aB "movss xmm0, dword [eax]" f30f1000
a "movsx eax, byte [eax]" 0fbe00
a "movsx eax, word [eax]" 0fbf00
aB "movupd xmm0, xmmword [eax]" 660f1000
aB "movupd xmmword [eax], xmm0" 660f1100
aB "movups xmm0, xmmword [eax]" 0f10
aB "movups xmmword [eax], xmm0" 0f11
a "mov word [eax], es" 8c00 0x0 (storew 0 (+ (var eax) (bv 32 0x0)) (var es))
a "movzx eax, byte [eax]" 0fb600
a "movzx ecx, byte [esp]" 0fb60c24
a "movzx eax, word [eax]" 0fb700
a "movzx edx, word [esp]" 0fb71424
aB "mpsadbw xmm0, xmm0, 0x00" 660f3a42c000
ad "mul byte [eax]" f620 0x0 (seq (set _mul (* (cast 16 false (cast 8 false (var eax))) (cast 16 false (loadw 0 8 (+ (var eax) (bv 32 0x0)))))) (set eax (| (& (var eax) (~ (bv 32 0xffff))) (cast 32 false (var _mul)))) (branch (is_zero (>> (var _mul) (bv 8 0x8) false)) (seq (set of false) (set cf false)) (seq (set of true) (set cf true))))
ad "mul word [eax]" 66f720 0x0 (seq (set _mul (* (cast 32 false (cast 16 false (var eax))) (cast 32 false (loadw 0 16 (+ (var eax) (bv 32 0x0)))))) (set edx (| (& (var edx) (~ (bv 32 0xffff))) (cast 32 false (cast 16 false (>> (var _mul) (bv 8 0x10) false))))) (set eax (| (& (var eax) (~ (bv 32 0xffff))) (cast 32 false (cast 16 false (var _mul))))) (branch (is_zero (>> (var _mul) (bv 8 0x10) false)) (seq (set of false) (set cf false)) (seq (set of true) (set cf true))))
ad "mul dword [eax]" f720 0x0 (seq (set _mul (* (cast 64 false (var eax)) (cast 64 false (loadw 0 32 (+ (var eax) (bv 32 0x0)))))) (set edx (cast 32 false (>> (var _mul) (bv 8 0x20) false))) (set eax (cast 32 false (var _mul))) (branch (is_zero (>> (var _mul) (bv 8 0x20) false)) (seq (set of false) (set cf false)) (seq (set of true) (set cf true))))
aB "mulpd xmm0, xmmword [eax]" 660f5900
aB "mulpd xmm7, xmm7" 660f59ff
aB "mulps xmm0, xmmword [eax]" 0f5900
aB "mulps xmm7, xmm7" 0f59ff
aB "mulsd xmm0, qword [eax]" f20f5900
aB "mulsd xmm7, xmm7" 66f3f20f59ff
aB "mulsd xmm7, xmm7" f2660f59ff
aB "mulss xmm0, dword [eax]" f30f5900
aB "mulss xmm7, xmm7" 66f2f0f59ff0
a "mwait" 0f01c9
aB "neg byte [eax]" f618
aB "not byte [eax]" f610
aB "not al" f6d0
a "or al, 0x00" 0c00 0x0 (seq (set _or (| (cast 8 false (var eax)) (bv 8 0x0))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var _or)))) (set of false) (set cf false) (set _result (var _or)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "or byte [eax], al" 0800 0x0 (seq (set _or (| (loadw 0 8 (+ (var eax) (bv 32 0x0))) (cast 8 false (var eax)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _or)) (set of false) (set cf false) (set _result (var _or)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "or dword [eax], eax" 0900 0x0 (seq (set _or (| (loadw 0 32 (+ (var eax) (bv 32 0x0))) (var eax))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _or)) (set of false) (set cf false) (set _result (var _or)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "or eax, dword [eax]" 0b00 0x0 (seq (set _or (| (var eax) (loadw 0 32 (+ (var eax) (bv 32 0x0))))) (set eax (var _or)) (set of false) (set cf false) (set _result (var _or)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
aB "orpd xmm0, xmmword [eax]" 660f5600
aB "orps xmm0, xmmword [eax]" 0f5600
a "out 0, al" e600 0x0 (goto port)
a "out 0, eax" e700 0x0 (goto port)
a "out 0x84, eax" e784 0x0 (goto port)
a "outsb" 6e
a "outsd" 6f
aB "pabsb xmm0, xmm0" 660f381cc0
aB "pabsd xmm0, xmm0" 660f381ec0
aB "pabsw xmm0, xmm0" 660f381dc0
aB "packssdw mm0, qword [eax]" 0f6b00
aB "packssdw xmm0, xmmword [eax]" 660f6b00
aB "packsswb mm0, qword [eax]" 0f6300
aB "packsswb xmm0, xmmword [eax]" 660f6300
aB "packusdw xmm0, xmm0" 660f382bc0
aB "packuswb mm0, qword [eax]" 0f6700
aB "packuswb xmm0, xmmword [eax]" 660f6700
aB "paddb mm0, qword [eax]" 0ffc00
aB "paddb xmm0, xmmword [eax]" 660ffc00
aB "paddd mm0, qword [eax]" 0ffe00
aB "paddd xmm0, xmmword [eax]" 660ffe00
aB "paddq xmm0, xmmword [eax]" 660fd400
aB "paddsb mm0, qword [eax]" 0fec00
aB "paddsb xmm0, xmmword [eax]" 660fec00
aB "paddsw mm0, qword [eax]" 0fed00
aB "paddsw xmm0, xmmword [eax]" 660fed00
aB "paddusb mm0, qword [eax]" 0fdc00
aB "paddusb xmm0, xmmword [eax]" 660fdc00
aB "paddusw mm0, qword [eax]" 0fdd00
aB "paddusw xmm0, xmmword [eax]" 660fdd00
aB "paddw mm0, qword [eax]" 0ffd00
aB "paddw xmm0, xmmword [eax]" 660ffd00
aB "palignr mm0, mm0, 0x00" 0f3a0fc000
aB "palignr xmm0, xmm0, 0x00" 660f3a0fc000
aB "pand mm0, qword [eax]" 0fdb00
aB "pandn mm0, qword [eax]" 0fdf00
aB "pandn xmm0, xmmword [eax]" 660fdf00
aB "pand xmm0, xmmword [eax]" 660fdb00
aB "pause" f390
aB "pavgb mm0, qword [eax]" 0fe000
aB "pavgb mm0, qword [eax]" 0fe0
aB "pavgb xmm0, xmmword [eax]" 660fe000
aB "pavgw mm0, qword [eax]" 0fe300
aB "pavgw xmm0, xmmword [eax]" 660fe300
aB "pblendvb xmm0, xmm0" 660f3810c0
aB "pblendw xmm0, xmm0, 0x00" 660f3a0ec000
aB "pclmulqdq xmm0, xmm0, 0x00" 660f3a44c000
aB "pcmpeqb mm0, qword [eax]" 0f7400
aB "pcmpeqb xmm0, xmmword [eax]" 660f7400
aB "pcmpeqd mm0, qword [eax]" 0f7600
aB "pcmpeqd xmm0, xmmword [eax]" 660f7600
aB "pcmpeqq xmm0, xmm0" 660f3829c0
aB "pcmpeqw mm0, qword [eax]" 0f7500
aB "pcmpeqw xmm0, xmmword [eax]" 660f7500
aB "pcmpestri xmm0, xmm0, 0x00" 660f3a61c000
aB "pcmpestrm xmm0, xmm0, 0x00" 660f3a60c000
aB "pcmpgtb mm0, qword [eax]" 0f6400
aB "pcmpgtb xmm0, xmmword [eax]" 660f6400
aB "pcmpgtd mm0, qword [eax]" 0f6600
aB "pcmpgtd xmm0, xmmword [eax]" 660f6600
aB "pcmpgtq xmm0, xmm0" 660f3837c0
aB "pcmpgtw mm0, qword [eax]" 0f6500
aB "pcmpgtw xmm0, xmmword [eax]" 660f6500
aB "pcmpistri xmm0, xmm0, 0x00" 660f3a63c000
aB "pcmpistrm xmm0, xmm0, 0x00" 660f3a62c000
aB "pextrb eax, xmm0, 0x00" 660f3a14c000
aB "pextrd eax, xmm0, 0x00" 660f3a16c000
aB "pextrq dword [eax], xmm0, 0x00" 660f3a16
aB "pextrw eax, mm0, 0x00" 0fc5c000
aB "pextrw eax, xmm0, 0x00" 660fc5c000
aB "phaddd xmm0, xmmword [eax]" 660f380200
aB "phaddsw xmm0, xmmword [eax]" 660f380300
aB "phaddw xmm0, xmmword [eax]" 660f380100
aB "phminposuw xmm0, xmm0" 660f3841c0
aB "phsubd xmm0, xmmword [eax]" 660f380600
aB "phsubsw xmm0, xmmword [eax]" 660f380700
aB "phsubw xmm0, xmmword [eax]" 660f380500
aB "pinsrb xmm0, eax, 0x00" 660f3a20c000
aB "pinsrd xmm0, dword [eax], 0x00" 660f3a22
aB "pinsrq xmm0, dword [eax], 0x00" 660f3a22
aB "pinsrw mm0, word [eax], 0x0" 0fc40000
aB "pinsrw xmm0, word [eax], 0x0" 660fc40000
aB "pmaddubsw xmm0, xmmword [eax]" 660f380400
aB "pmaddwd mm0, qword [eax]" 0ff500
aB "pmaddwd xmm0, xmmword [eax]" 660ff500
aB "pmaxsb xmm0, xmm0" 660f383cc0
aB "pmaxsd xmm0, xmm0" 660f383dc0
aB "pmaxsw mm0, qword [eax]" 0fee00
aB "pmaxsw xmm0, xmmword [eax]" 660fee00
aB "pmaxub mm0, qword [eax]" 0fde00
aB "pmaxub xmm0, xmmword [eax]" 660fde00
aB "pmaxud xmm0, xmm0" 660f383fc0
aB "pmaxuw xmm0, xmm0" 660f383ec0
aB "pminsb xmm0, xmm0" 660f3838c0
aB "pminsd xmm0, xmm0" 660f3839c0
aB "pminsw mm0, qword [eax]" 0fea00
aB "pminsw xmm0, xmmword [eax]" 660fea00
aB "pminub mm0, qword [eax]" 0fda00
aB "pminub xmm0, xmmword [eax]" 660fda00
aB "pminud xmm0, xmm0" 660f383bc0
aB "pminuw xmm0, xmm0" 660f383ac0
aB "pmovmskb eax, mm0" 0fd7
aB "pmovsxbd xmm0, xmm0" 660f3821c0
aB "pmovsxbq xmm0, xmm0" 660f3822c0
aB "pmovsxbw xmm0, xmm0" 660f3820c0
aB "pmovsxdq xmm0, xmm0" 660f3825c0
aB "pmovsxwd xmm0, xmm0" 660f3823c0
aB "pmovsxwq xmm0, xmm0" 660f3824c0
aB "pmovzxbd xmm0, xmm0" 660f3831c0
aB "pmovzxbq xmm0, xmm0" 660f3832c0
aB "pmovzxbw xmm0, xmm0" 660f3830c0
aB "pmovzxdq xmm0, xmm0" 660f3835c0
aB "pmovzxwd xmm0, xmm0" 660f3833c0
aB "pmovzxwq xmm0, xmm0" 660f3834c0
aB "pmuldq xmm0, xmm0" 660f3828c0
aB "pmulhrsw xmm0, xmm0" 660f380bc0
aB "pmulhuw mm0, qword [eax]" 0fe400
aB "pmulhuw xmm0, xmmword [eax]" 660fe400
aB "pmulhw mm0, qword [eax]" 0fe500
aB "pmulhw xmm0, xmmword [eax]" 660fe500
aB "pmulld xmm0, xmm0" 660f3840c0
aB "pmullw mm0, qword [eax]" 0fd500
aB "pmullw xmm0, xmmword [eax]" 660fd500
aB "pmuludq mm0, qword [eax]" 0ff400
aB "pmuludq xmm0, xmmword [eax]" 660ff400
a "popad" 61
aB "popcnt eax, qword [eax]" f30fb8
a "pop ds" 1f 0x0 (seq (set ds (loadw 0 16 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x2))))
a "pop dword [eax+4]" 8f4004 0x0 (seq (storew 0 (+ (var eax) (bv 32 0x4)) (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
a "pop dword [eax]" 8f00 0x0 (seq (storew 0 (+ (var eax) (bv 32 0x0)) (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
a "pop dword [ebp+4]" 8f4504 0x0 (seq (storew 0 (+ (+ (var ebp) (bv 32 0x4)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
a "pop dword [ebp]" 8f4500 0x0 (seq (storew 0 (+ (+ (var ebp) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
a "pop dword [ecx]" 8f01 0x0 (seq (storew 0 (+ (var ecx) (bv 32 0x0)) (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
a "pop dword [edi]" 8f07 0x0 (seq (storew 0 (+ (var edi) (bv 32 0x0)) (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
a "pop dword [esi]" 8f06 0x0 (seq (storew 0 (+ (var esi) (bv 32 0x0)) (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
a "pop dword [esp]" 8f0424 0x0 (seq (storew 0 (+ (+ (var esp) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
a "pop eax" 58 0x0 (seq (set eax (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
a "pop ebp" 5d 0x0 (seq (set ebp (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
a "pop ebx" 5b 0x0 (seq (set ebx (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
a "pop ecx" 59 0x0 (seq (set ecx (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
a "pop edi" 5f 0x0 (seq (set edi (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
a "pop edx" 5a 0x0 (seq (set edx (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
a "pop es" 07 0x0 (seq (set es (loadw 0 16 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x2))))
a "pop esi" 5e 0x0 (seq (set esi (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
a "pop esp" 5c 0x0 (seq (set esp (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))))
a "popfd" 9d 0x0 (seq (set _flags (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set cf (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x2) false)) (set pf (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x2) false)) (set af (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x2) false)) (set zf (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x1) false)) (set sf (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x1) false)) (set tf (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x1) false)) (set if (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x1) false)) (set df (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x1) false)) (set of (lsb (var _flags))) (set _flags (>> (var _flags) (bv 8 0x3) false)) (set nt (lsb (var _flags))) (set esp (+ (var esp) (bv 32 0x4))))
a "pop fs" 0fa1 0x0 (seq (set fs (loadw 0 16 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x2))))
a "pop gs" 0fa9 0x0 (seq (set gs (loadw 0 16 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x2))))
a "pop ss" 17 0x0 (seq (set ss (loadw 0 16 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x2))))
aB "por mm0, qword [eax]" 0feb00
aB "por xmm0, xmmword [eax]" 660feb00
aB "prefetch byte [eax]" 0f0d00
aB "prefetchnta byte [eax]" 0f1800
aB "prefetcht0 byte [eax]" 0f1808
aB "prefetcht1 byte [eax]" 0f1810
aB "prefetcht2 byte [eax]" 0f1818
aB "psadbw mm0, qword [eax]" 0ff600
aB "psadbw xmm0, xmmword [eax]" 660ff600
aB "pshufb mm0, qword [eax]" 0f380000
aB "pshufb xmm0, xmmword [eax]" 660f380000
aB "pshufd xmm0, xmmword [eax], 0x00" 660f700000
aB "pshufhw xmm0, xmmword [eax], 0x00" f30f700000
aB "pshuflw xmm0, xmmword [eax], 0x00" f20f700000
aB "pshufw mm0, qword [eax], 0x00" 0f700000
aB "psignb xmm0, xmm0" 660f3808c0
aB "psignd xmm0, xmm0" 660f380ac0
aB "psignw xmm0, xmm0" 660f3809c0
aB "pslld mm0, 0x00" 0f72f000
aB "pslld mm0, qword [eax]" 0ff200
aB "pslldq xmm0, 0x00" 660f73f800
aB "pslld xmm0, 0x00" 660f72f000
aB "pslld xmm0, xmmword [eax]" 660ff200
aB "psllq mm0, 0x00" 0f73f000
aB "psllq mm0, qword [eax]" 0ff300
aB "psllq xmm0, 0x00" 660f73f000
aB "psllq xmm0, xmmword [eax]" 660ff300
aB "psllw mm0, 0x00" 0f71f000
aB "psllw mm0, qword [eax]" 0ff100
aB "psllw xmm0, 0x00" 660f71f000
aB "psllw xmm0, xmmword [eax]" 660ff100
aB "psrad mm0, 0x00" 0f72e000
aB "psrad mm0, qword [eax]" 0fe200
aB "psrad xmm0, 0x00" 660f72e000
aB "psrad xmm0, xmmword [eax]" 660fe200
aB "psraw mm0, 0x00" 0f71e000
aB "psraw mm0, qword [eax]" 0fe100
aB "psraw xmm0, 0x00" 660f71e000
aB "psraw xmm0, xmmword [eax]" 660fe100
aB "psrld mm0, 0x00" 0f72d000
aB "psrld mm0, qword [eax]" 0fd200
aB "psrldq xmm0, 0x00" 660f73d800
aB "psrld xmm0, 0x00" 660f72d000
aB "psrld xmm0, xmmword [eax]" 660fd200
aB "psrlq mm0, 0x00" 0f73d000
aB "psrlq mm0, qword [eax]" 0fd300
aB "psrlq xmm0, 0x00" 660f73d000
aB "psrlq xmm0, xmmword [eax]" 660fd300
aB "psrlw mm0, 0x00" 0f71d000
aB "psrlw mm0, qword [eax]" 0fd100
aB "psrlw xmm0, 0x00" 660f71d000
aB "psrlw xmm0, xmmword [eax]" 660fd100
aB "psubb mm0, qword [eax]" 0ff800
aB "psubb xmm0, xmmword [eax]" 660ff800
aB "psubd mm0, qword [eax]" 0ffa00
aB "psubd xmm0, xmmword [eax]" 660ffa00
aB "psubq mm0, qword [eax]" 0ffb00
aB "psubq xmm0, xmmword [eax]" 660ffb00
aB "psubsb mm0, xmmword [eax]" 0fe800
aB "psubsb xmm0, xmmword [eax]" 660fe800
aB "psubsw mm0, xmmword [eax]" 0fe900
aB "psubsw xmm0, xmmword [eax]" 660fe900
aB "psubusb mm0, qword [eax]" 0fd800
aB "psubusb xmm0, xmmword [eax]" 660fd800
aB "psubusw mm0, qword [eax]" 0fd900
aB "psubusw xmm0, xmmword [eax]" 660fd900
aB "psubw mm0, qword [eax]" 0ff900
aB "psubw xmm0, xmmword [eax]" 660ff900
aB "ptest xmm0, xmm0" 660f3817c0
aB "punpckhbw mm0, qword [eax]" 0f6800
aB "punpckhbw xmm0, xmmword [eax]" 660f6800
aB "punpckhdq mm0, qword [eax]" 0f6a00
aB "punpckhdq xmm0, xmmword [eax]" 660f6a00
aB "punpckhqdq xmm0, xmmword [eax]" 660f6d00
aB "punpckhwd mm0, qword [eax]" 0f6900
aB "punpckhwd xmm0, xmmword [eax]" 660f6900
aB "punpcklbw mm0, qword [eax]" 0f6000
aB "punpcklbw xmm0, xmmword [eax]" 660f6000
aB "punpckldq mm0, qword [eax]" 0f6200
aB "punpckldq xmm0, xmmword [eax]" 660f6200
aB "punpcklqdq xmm0, xmmword [eax]" 660f6c00
aB "punpcklwd mm0, qword [eax]" 0f6100
aB "punpcklwd xmm0, xmmword [eax]" 660f6100
a "push 0" 6a00 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (bv 8 0x0))) (set esp (var final)))
a "push cs" 0e 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var cs))) (set esp (var final)))
a "push ds" 1e 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var ds))) (set esp (var final)))
a "push dword [eax+8]" ff7008 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (loadw 0 32 (+ (var eax) (bv 32 0x8))))) (set esp (var final)))
a "push dword [eax]" ff30 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (loadw 0 32 (+ (var eax) (bv 32 0x0))))) (set esp (var final)))
a "push dword [ebp+4]" ff7504 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (loadw 0 32 (+ (+ (var ebp) (bv 32 0x4)) (<< (cast 32 false (var ss)) (bv 8 0x4) false))))) (set esp (var final)))
a "push dword [ebp]" ff7500 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (loadw 0 32 (+ (+ (var ebp) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false))))) (set esp (var final)))
a "push dword [ebx+4]" ff7304 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (loadw 0 32 (+ (var ebx) (bv 32 0x4))))) (set esp (var final)))
a "push dword [ecx]" ff31 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (loadw 0 32 (+ (var ecx) (bv 32 0x0))))) (set esp (var final)))
a "push dword [edi]" ff37 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (loadw 0 32 (+ (var edi) (bv 32 0x0))))) (set esp (var final)))
a "push dword [esi+4]" ff7604 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (loadw 0 32 (+ (var esi) (bv 32 0x4))))) (set esp (var final)))
a "push dword [esi]" ff36 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (loadw 0 32 (+ (var esi) (bv 32 0x0))))) (set esp (var final)))
a "push dword [esp+4]" ff742404 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (loadw 0 32 (+ (+ (var esp) (bv 32 0x4)) (<< (cast 32 false (var ss)) (bv 8 0x4) false))))) (set esp (var final)))
a "push dword [esp]" ff3424 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (loadw 0 32 (+ (+ (var esp) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false))))) (set esp (var final)))
a "push [esp+4]" ff742404 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (loadw 0 32 (+ (+ (var esp) (bv 32 0x4)) (<< (cast 32 false (var ss)) (bv 8 0x4) false))))) (set esp (var final)))
a "push [esp]" ff3424 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (loadw 0 32 (+ (+ (var esp) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false))))) (set esp (var final)))
a "push eax" 50 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var eax))) (set esp (var final)))
a "push ebp" 55 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var ebp))) (set esp (var final)))
a "push ebx" 53 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var ebx))) (set esp (var final)))
a "push ecx" 51 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var ecx))) (set esp (var final)))
a "push edi" 57 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var edi))) (set esp (var final)))
a "push edx" 52 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var edx))) (set esp (var final)))
a "push es" 06 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var es))) (set esp (var final)))
a "push esi" 56 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var esi))) (set esp (var final)))
a "push esp" 54 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var esp))) (set esp (var final)))
a "pushfd" 9c 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (| (<< (| (<< (| (<< (| (<< (| (<< (| (<< (| (<< (| (<< (| (<< (| (<< (| (<< (| (<< (ite false (bv 32 0x1) (bv 32 0x0)) (bv 32 0x1) false) (ite (var nt) (bv 32 0x1) (bv 32 0x0))) (bv 32 0x2) false) (bv 32 0x3)) (bv 32 0x1) false) (ite (var of) (bv 32 0x1) (bv 32 0x0))) (bv 32 0x1) false) (ite (var df) (bv 32 0x1) (bv 32 0x0))) (bv 32 0x1) false) (ite (var if) (bv 32 0x1) (bv 32 0x0))) (bv 32 0x1) false) (ite (var tf) (bv 32 0x1) (bv 32 0x0))) (bv 32 0x1) false) (ite (var zf) (bv 32 0x1) (bv 32 0x0))) (bv 32 0x1) false) (ite (var zf) (bv 32 0x1) (bv 32 0x0))) (bv 32 0x2) false) (ite (var af) (bv 32 0x1) (bv 32 0x0))) (bv 32 0x2) false) (ite (var pf) (bv 32 0x1) (bv 32 0x0))) (bv 32 0x1) false) (bv 32 0x1)) (bv 32 0x1) false) (ite (var cf) (bv 32 0x1) (bv 32 0x0))))) (set esp (var final)))
a "push fs" 0fa0 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var fs))) (set esp (var final)))
a "push gs" 0fa8 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var gs))) (set esp (var final)))
a "push ss" 16 0x0 (seq (set final (- (var esp) (bv 32 0x4))) (storew 0 (var final) (cast 32 false (var ss))) (set esp (var final)))
aB "pxor mm0, qword [eax]" 0fef00
aB "pxor xmm0, xmmword [eax]" 660fef00
aB "rcpps xmm0, xmmword [eax]" 0f5300
aB "rcpss xmm0, dword [eax]" f30f5300
a "rdmsr" 0f32
a "rdpmc" 0f33
a "rdtsc" 0f31
a "rdtscp" 0f01f9
a "repne movsb" f2a4
a "repz movsb" f3a4
a "ret" c3 0x0 (seq (set tgt (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))) (jmp (var tgt)))
ad "ret 0xff" c2ff00 0x0 (seq (set tgt (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))) (set esp (+ (var esp) (bv 32 0xff))) (jmp (var tgt)))
a "bnd ret" f2c3
a "ret far 0" c3
a "ret far" c3 0x0 (seq (set tgt (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))) (jmp (var tgt)))
a "retw" 66c3 0x0 (seq (set tgt (loadw 0 32 (+ (+ (cast 32 false (var esp)) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set esp (+ (var esp) (bv 32 0x4))) (jmp (var tgt)))
ad "rcl byte [eax], cl" d210 0x0 (seq (set _pre_dest (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set _shift (mod (cast 5 false (cast 8 false (var ecx))) (bv 5 0x9))) (set _rotated (let _cf_dest (append (ite (var cf) (bv 1 0x1) (bv 1 0x0)) (var _pre_dest)) (| (<< (var _cf_dest) (var _shift) false) (>> (var _cf_dest) (- (bv 5 0x9) (var _shift)) false)))) (set _dest (cast 8 false (var _rotated))) (set cf (msb (var _rotated))) (set of (^^ (var cf) (msb (var _dest)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dest)))
# capstone v5 removes the `, 1` and makes it implicit.
ad "rcl byte [eax], 0x01" d010 0x0 (seq (set _pre_dest (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set _shift (mod (cast 5 false (bv 8 0x1)) (bv 5 0x9))) (set _rotated (let _cf_dest (append (ite (var cf) (bv 1 0x1) (bv 1 0x0)) (var _pre_dest)) (| (<< (var _cf_dest) (var _shift) false) (>> (var _cf_dest) (- (bv 5 0x9) (var _shift)) false)))) (set _dest (cast 8 false (var _rotated))) (set cf (msb (var _rotated))) (set of (^^ (var cf) (msb (var _dest)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dest)))
ad "rcl dword [eax], cl" d310 0x0 (seq (set _pre_dest (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set _shift (cast 5 false (cast 8 false (var ecx)))) (set _rotated (let _cf_dest (append (ite (var cf) (bv 1 0x1) (bv 1 0x0)) (var _pre_dest)) (| (<< (var _cf_dest) (var _shift) false) (>> (var _cf_dest) (- (bv 5 0x1) (var _shift)) false)))) (set _dest (cast 32 false (var _rotated))) (set cf (msb (var _rotated))) (set of (^^ (var cf) (msb (var _dest)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dest)))
# capstone v5 removes the `, 1` and makes it implicit.
ad "rcl dword [eax], 0x01" d110 0x0 (seq (set _pre_dest (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set _shift (cast 5 false (bv 8 0x1))) (set _rotated (let _cf_dest (append (ite (var cf) (bv 1 0x1) (bv 1 0x0)) (var _pre_dest)) (| (<< (var _cf_dest) (var _shift) false) (>> (var _cf_dest) (- (bv 5 0x1) (var _shift)) false)))) (set _dest (cast 32 false (var _rotated))) (set cf (msb (var _rotated))) (set of (^^ (var cf) (msb (var _dest)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dest)))
ad "rcr byte [eax], cl" d218 0x0 (seq (set _pre_dest (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set _shift (mod (cast 5 false (cast 8 false (var ecx))) (bv 5 0x9))) (set _rotated (let _cf_dest (append (ite (var cf) (bv 1 0x1) (bv 1 0x0)) (var _pre_dest)) (| (>> (var _cf_dest) (var _shift) false) (<< (var _cf_dest) (- (bv 5 0x9) (var _shift)) false)))) (set _dest (cast 8 false (var _rotated))) (set of (^^ (var cf) (msb (var _pre_dest)))) (set cf (msb (var _rotated))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dest)))
ad "rcr byte [eax], 0x01" d018 0x0 (seq (set _pre_dest (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set _shift (mod (cast 5 false (bv 8 0x1)) (bv 5 0x9))) (set _rotated (let _cf_dest (append (ite (var cf) (bv 1 0x1) (bv 1 0x0)) (var _pre_dest)) (| (>> (var _cf_dest) (var _shift) false) (<< (var _cf_dest) (- (bv 5 0x9) (var _shift)) false)))) (set _dest (cast 8 false (var _rotated))) (set of (^^ (var cf) (msb (var _pre_dest)))) (set cf (msb (var _rotated))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dest)))
ad "rcr dword [eax], cl" d318 0x0 (seq (set _pre_dest (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set _shift (cast 5 false (cast 8 false (var ecx)))) (set _rotated (let _cf_dest (append (ite (var cf) (bv 1 0x1) (bv 1 0x0)) (var _pre_dest)) (| (>> (var _cf_dest) (var _shift) false) (<< (var _cf_dest) (- (bv 5 0x1) (var _shift)) false)))) (set _dest (cast 32 false (var _rotated))) (set of (^^ (var cf) (msb (var _pre_dest)))) (set cf (msb (var _rotated))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dest)))
ad "rcr dword [eax], 0x01" d118 0x0 (seq (set _pre_dest (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set _shift (cast 5 false (bv 8 0x1))) (set _rotated (let _cf_dest (append (ite (var cf) (bv 1 0x1) (bv 1 0x0)) (var _pre_dest)) (| (>> (var _cf_dest) (var _shift) false) (<< (var _cf_dest) (- (bv 5 0x1) (var _shift)) false)))) (set _dest (cast 32 false (var _rotated))) (set of (^^ (var cf) (msb (var _pre_dest)))) (set cf (msb (var _rotated))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dest)))
ad "rol byte [eax], 0x00" c00000 0x0 (seq (set _pre_dest (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set _shift (mod (cast 5 false (bv 8 0x0)) (bv 5 0x8))) (set _rotated (| (<< (var _pre_dest) (var _shift) false) (>> (var _pre_dest) (- (bv 5 0x8) (var _shift)) false))) (set _dest (cast 8 false (var _rotated))) (set cf (ite (is_zero (var _shift)) (var cf) (lsb (var _rotated)))) (set of (^^ (var cf) (msb (var _dest)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dest)))
ad "rol byte [eax], 0x01" d000 0x0 (seq (set _pre_dest (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set _shift (mod (cast 5 false (bv 8 0x1)) (bv 5 0x8))) (set _rotated (| (<< (var _pre_dest) (var _shift) false) (>> (var _pre_dest) (- (bv 5 0x8) (var _shift)) false))) (set _dest (cast 8 false (var _rotated))) (set cf (ite (is_zero (var _shift)) (var cf) (lsb (var _rotated)))) (set of (^^ (var cf) (msb (var _dest)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dest)))
ad "rol byte [eax], cl" d200 0x0 (seq (set _pre_dest (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set _shift (mod (cast 5 false (cast 8 false (var ecx))) (bv 5 0x8))) (set _rotated (| (<< (var _pre_dest) (var _shift) false) (>> (var _pre_dest) (- (bv 5 0x8) (var _shift)) false))) (set _dest (cast 8 false (var _rotated))) (set cf (ite (is_zero (var _shift)) (var cf) (lsb (var _rotated)))) (set of (^^ (var cf) (msb (var _dest)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dest)))
ad "rol dword [eax], 0x00" c10000 0x0 (seq (set _pre_dest (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set _shift (mod (cast 5 false (bv 8 0x0)) (bv 5 0x0))) (set _rotated (| (<< (var _pre_dest) (var _shift) false) (>> (var _pre_dest) (- (bv 5 0x0) (var _shift)) false))) (set _dest (cast 32 false (var _rotated))) (set cf (ite (is_zero (var _shift)) (var cf) (lsb (var _rotated)))) (set of (^^ (var cf) (msb (var _dest)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dest)))
ad "rol dword [eax], 0x01" d100 0x0 (seq (set _pre_dest (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set _shift (mod (cast 5 false (bv 8 0x1)) (bv 5 0x0))) (set _rotated (| (<< (var _pre_dest) (var _shift) false) (>> (var _pre_dest) (- (bv 5 0x0) (var _shift)) false))) (set _dest (cast 32 false (var _rotated))) (set cf (ite (is_zero (var _shift)) (var cf) (lsb (var _rotated)))) (set of (^^ (var cf) (msb (var _dest)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dest)))
ad "rol dword [eax], cl" d300 0x0 (seq (set _pre_dest (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set _shift (mod (cast 5 false (cast 8 false (var ecx))) (bv 5 0x0))) (set _rotated (| (<< (var _pre_dest) (var _shift) false) (>> (var _pre_dest) (- (bv 5 0x0) (var _shift)) false))) (set _dest (cast 32 false (var _rotated))) (set cf (ite (is_zero (var _shift)) (var cf) (lsb (var _rotated)))) (set of (^^ (var cf) (msb (var _dest)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dest)))
ad "ror byte [eax], 0x00" c00800 0x0 (seq (set _pre_dest (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set _shift (mod (cast 5 false (bv 8 0x0)) (bv 5 0x8))) (set _rotated (| (>> (var _pre_dest) (var _shift) false) (<< (var _pre_dest) (- (bv 5 0x8) (var _shift)) false))) (set _dest (cast 8 false (var _rotated))) (set of (^^ (var cf) (msb (var _pre_dest)))) (set cf (ite (is_zero (var _shift)) (var cf) (msb (var _rotated)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dest)))
ad "ror byte [eax], 0x01" d008 0x0 (seq (set _pre_dest (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set _shift (mod (cast 5 false (bv 8 0x1)) (bv 5 0x8))) (set _rotated (| (>> (var _pre_dest) (var _shift) false) (<< (var _pre_dest) (- (bv 5 0x8) (var _shift)) false))) (set _dest (cast 8 false (var _rotated))) (set of (^^ (var cf) (msb (var _pre_dest)))) (set cf (ite (is_zero (var _shift)) (var cf) (msb (var _rotated)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dest)))
ad "ror byte [eax], cl" d208 0x0 (seq (set _pre_dest (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set _shift (mod (cast 5 false (cast 8 false (var ecx))) (bv 5 0x8))) (set _rotated (| (>> (var _pre_dest) (var _shift) false) (<< (var _pre_dest) (- (bv 5 0x8) (var _shift)) false))) (set _dest (cast 8 false (var _rotated))) (set of (^^ (var cf) (msb (var _pre_dest)))) (set cf (ite (is_zero (var _shift)) (var cf) (msb (var _rotated)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dest)))
ad "ror dword [eax], 0x00" c10800 0x0 (seq (set _pre_dest (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set _shift (mod (cast 5 false (bv 8 0x0)) (bv 5 0x0))) (set _rotated (| (>> (var _pre_dest) (var _shift) false) (<< (var _pre_dest) (- (bv 5 0x0) (var _shift)) false))) (set _dest (cast 32 false (var _rotated))) (set of (^^ (var cf) (msb (var _pre_dest)))) (set cf (ite (is_zero (var _shift)) (var cf) (msb (var _rotated)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dest)))
ad "ror dword [eax], 0x01" d108 0x0 (seq (set _pre_dest (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set _shift (mod (cast 5 false (bv 8 0x1)) (bv 5 0x0))) (set _rotated (| (>> (var _pre_dest) (var _shift) false) (<< (var _pre_dest) (- (bv 5 0x0) (var _shift)) false))) (set _dest (cast 32 false (var _rotated))) (set of (^^ (var cf) (msb (var _pre_dest)))) (set cf (ite (is_zero (var _shift)) (var cf) (msb (var _rotated)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dest)))
ad "ror dword [eax], cl" d308 0x0 (seq (set _pre_dest (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set _shift (mod (cast 5 false (cast 8 false (var ecx))) (bv 5 0x0))) (set _rotated (| (>> (var _pre_dest) (var _shift) false) (<< (var _pre_dest) (- (bv 5 0x0) (var _shift)) false))) (set _dest (cast 32 false (var _rotated))) (set of (^^ (var cf) (msb (var _pre_dest)))) (set cf (ite (is_zero (var _shift)) (var cf) (msb (var _rotated)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _dest)))
aB "roundpd xmm0, xmm0, 0x00" 660f3a09c000
aB "roundps xmm0, xmm0, 0x00" 660f3a08c000
aB "roundsd xmm0, xmm0, 0x00" 660f3a0bc000
aB "roundss xmm0, xmm0, 0x00" 660f3a0ac000
a "rsm" 0faa
aB "rsqrtps xmm0, xmmword [eax]" 0f5200
aB "rsqrtss xmm0, dword [eax]" f30f5200
a "salc" d6
a "setnbe byte [eax]" 0f9700
a "setnb byte [eax]" 0f9300
a "setb byte [eax]" 0f9200
a "setbe byte [eax]" 0f9600
a "setz byte [eax]" 0f9400
a "setnle byte [eax]" 0f9f00
a "setnl byte [eax]" 0f9d00
a "setl byte [eax]" 0f9c00
a "setle byte [eax]" 0f9e00
a "setnz byte [eax]" 0f9500
a "setno byte [eax]" 0f9100
a "setnp byte [eax]" 0f9b00
a "setns byte [eax]" 0f9900
a "seto byte [eax]" 0f9000
a "setp byte [eax]" 0f9a00
a "sets byte [eax]" 0f9800
a "sfence" 0faef8
a "sgdt [eax]" 0f0100
aB "shld dword [eax], eax, 0x00" 0fa40000
aB "shld dword [eax], eax, cl" 0fa500
ad "sar edx, 0x05" c1fa05 0x0 (seq (set _pre_dest (var edx)) (set _shift (& (bv 8 0x5) (bv 8 0x1f))) (set _shifted (>> (append (var _pre_dest) (ite (var cf) (bv 1 0x1) (bv 1 0x0))) (var _shift) (msb (var _pre_dest)))) (set _dest (cast 32 false (>> (var _shifted) (bv 8 0x1) false))) (set cf (lsb (var _shifted))) (set of false) (branch (is_zero (var _shift)) nop (seq (set _result (var _dest)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))) (set edx (var _dest)))
ad "shl edx, 0x05" c1e205 0x0 (seq (set _pre_dest (var edx)) (set _shift (& (bv 8 0x5) (bv 8 0x1f))) (set _shifted (<< (cast 33 false (var _pre_dest)) (var _shift) false)) (set _dest (cast 32 false (var _shifted))) (set cf (msb (var _shifted))) (set of (^^ (var cf) (msb (var _dest)))) (branch (is_zero (var _shift)) nop (seq (set _result (var _dest)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))) (set edx (var _dest)))
ad "shr edx, 0x05" c1ea05 0x0 (seq (set _pre_dest (var edx)) (set _shift (& (bv 8 0x5) (bv 8 0x1f))) (set _shifted (>> (append (var _pre_dest) (ite (var cf) (bv 1 0x1) (bv 1 0x0))) (var _shift) false)) (set _dest (cast 32 false (>> (var _shifted) (bv 8 0x1) false))) (set cf (lsb (var _shifted))) (set of (msb (var _pre_dest))) (branch (is_zero (var _shift)) nop (seq (set _result (var _dest)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))) (set edx (var _dest)))
aB "shrd dword [eax], eax, 0x00" 0fac0000
aB "shrd dword [eax], eax, cl" 0fad00
aB "shufpd xmm0, xmmword [eax], 0x00" 660fc60000
aB "shufps xmm0, xmmword [eax], 0x00" 0fc60000
a "sidt [eax]" 0f0108
aB "skinit" 0f01de
a "sldt word [eax]" 0f0000
aB "smsw ax" 660f01e0
a "smsw eax" 0f01e0
a "smsw word [eax]" 0f0120
aB "sqrtpd xmm0, xmmword [eax]" 660f5100
aB "sqrtps xmm0, xmmword [eax]" 0f5100
aB "sqrtsd xmm0, qword [eax]" f20f5100
aB "sqrtss xmm0, dword [eax]" f30f5100
a "stgi" 0f01dc
a "stmxcsr dword [eax]" 0fae18
a "str word [eax]" 0f0008
a "sub al, 0x00" 2c00 0x0 (seq (set op1 (cast 8 false (var eax))) (set op2 (bv 8 0x0)) (set sub (- (var op1) (var op2))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var sub)))) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub al, byte [eax]" 2a00 0x0 (seq (set op1 (cast 8 false (var eax))) (set op2 (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set sub (- (var op1) (var op2))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var sub)))) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub byte [eax], al" 2800 0x0 (seq (set op1 (loadw 0 8 (+ (var eax) (bv 32 0x0)))) (set op2 (cast 8 false (var eax))) (set sub (- (var op1) (var op2))) (storew 0 (+ (var eax) (bv 32 0x0)) (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub dword [eax], 1" 832801 0x0 (seq (set op1 (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set op2 (bv 32 0x1)) (set sub (- (var op1) (var op2))) (storew 0 (+ (var eax) (bv 32 0x0)) (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub dword [eax+4], -666" 81680466fdffff 0x0 (seq (set op1 (loadw 0 32 (+ (var eax) (bv 32 0x4)))) (set op2 (bv 32 0xfffffd66)) (set sub (- (var op1) (var op2))) (storew 0 (+ (var eax) (bv 32 0x4)) (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub dword [eax+4], 666" 8168049a020000 0x0 (seq (set op1 (loadw 0 32 (+ (var eax) (bv 32 0x4)))) (set op2 (bv 32 0x29a)) (set sub (- (var op1) (var op2))) (storew 0 (+ (var eax) (bv 32 0x4)) (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub dword [eax+666], 666" 81a89a0200009a020000 0x0 (seq (set op1 (loadw 0 32 (+ (var eax) (bv 32 0x29a)))) (set op2 (bv 32 0x29a)) (set sub (- (var op1) (var op2))) (storew 0 (+ (var eax) (bv 32 0x29a)) (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub dword [eax], 666" 81289a020000 0x0 (seq (set op1 (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set op2 (bv 32 0x29a)) (set sub (- (var op1) (var op2))) (storew 0 (+ (var eax) (bv 32 0x0)) (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub dword [eax], eax" 2900 0x0 (seq (set op1 (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set op2 (var eax)) (set sub (- (var op1) (var op2))) (storew 0 (+ (var eax) (bv 32 0x0)) (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub dword [ebp+4], 1" 836d0401 0x0 (seq (set op1 (loadw 0 32 (+ (+ (var ebp) (bv 32 0x4)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set op2 (bv 32 0x1)) (set sub (- (var op1) (var op2))) (storew 0 (+ (+ (var ebp) (bv 32 0x4)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub dword [ebp+555], 1" 83ad2b02000001 0x0 (seq (set op1 (loadw 0 32 (+ (+ (var ebp) (bv 32 0x22b)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set op2 (bv 32 0x1)) (set sub (- (var op1) (var op2))) (storew 0 (+ (+ (var ebp) (bv 32 0x22b)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub dword [ebp+555], 7357" 81ad2b020000bd1c0000 0x0 (seq (set op1 (loadw 0 32 (+ (+ (var ebp) (bv 32 0x22b)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set op2 (bv 32 0x1cbd)) (set sub (- (var op1) (var op2))) (storew 0 (+ (+ (var ebp) (bv 32 0x22b)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub dword [ebp-555], 7357" 81add5fdffffbd1c0000 0x0 (seq (set op1 (loadw 0 32 (+ (+ (var ebp) (bv 32 0xfffffdd5)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set op2 (bv 32 0x1cbd)) (set sub (- (var op1) (var op2))) (storew 0 (+ (+ (var ebp) (bv 32 0xfffffdd5)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub dword [ebx], 1" 832b01 0x0 (seq (set op1 (loadw 0 32 (+ (var ebx) (bv 32 0x0)))) (set op2 (bv 32 0x1)) (set sub (- (var op1) (var op2))) (storew 0 (+ (var ebx) (bv 32 0x0)) (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub eax, 3" 83e803 0x0 (seq (set op1 (var eax)) (set op2 (bv 32 0x3)) (set sub (- (var op1) (var op2))) (set eax (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub eax, -666" 2d66fdffff 0x0 (seq (set op1 (var eax)) (set op2 (bv 32 0xfffffd66)) (set sub (- (var op1) (var op2))) (set eax (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub eax, 666" 2d9a020000 0x0 (seq (set op1 (var eax)) (set op2 (bv 32 0x29a)) (set sub (- (var op1) (var op2))) (set eax (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub eax, dword [eax]" 2b00 0x0 (seq (set op1 (var eax)) (set op2 (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set sub (- (var op1) (var op2))) (set eax (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub eax, eax" 29c0 0x0 (seq (set op1 (var eax)) (set op2 (var eax)) (set sub (- (var op1) (var op2))) (set eax (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub eax, ebx" 29d8 0x0 (seq (set op1 (var eax)) (set op2 (var ebx)) (set sub (- (var op1) (var op2))) (set eax (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub ebx, 3" 83eb03 0x0 (seq (set op1 (var ebx)) (set op2 (bv 32 0x3)) (set sub (- (var op1) (var op2))) (set ebx (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub ebx, -3" 83ebfd 0x0 (seq (set op1 (var ebx)) (set op2 (bv 32 0xfffffffd)) (set sub (- (var op1) (var op2))) (set ebx (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub ebx, 666" 81eb9a020000 0x0 (seq (set op1 (var ebx)) (set op2 (bv 32 0x29a)) (set sub (- (var op1) (var op2))) (set ebx (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub [ebx], eax" 2903 0x0 (seq (set op1 (loadw 0 32 (+ (var ebx) (bv 32 0x0)))) (set op2 (var eax)) (set sub (- (var op1) (var op2))) (storew 0 (+ (var ebx) (bv 32 0x0)) (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub ebx, eax" 29c3 0x0 (seq (set op1 (var ebx)) (set op2 (var eax)) (set sub (- (var op1) (var op2))) (set ebx (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub ecx, 666" 81e99a020000 0x0 (seq (set op1 (var ecx)) (set op2 (bv 32 0x29a)) (set sub (- (var op1) (var op2))) (set ecx (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
a "sub esi,-334" 81eeb2feffff 0x0 (seq (set op1 (var esi)) (set op2 (bv 32 0xfffffeb2)) (set sub (- (var op1) (var op2))) (set esi (var sub)) (set _result (var sub)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set _result (var sub)) (set _x (var op1)) (set _y (var op2)) (set cf (|| (|| (&& (! (msb (var _x))) (msb (var _y))) (&& (msb (var _y)) (msb (var _result)))) (&& (msb (var _result)) (! (msb (var _x)))))) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (! (msb (var _y)))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (msb (var _y))))) (set af (|| (|| (&& (! (msb (cast 4 false (var _x)))) (msb (cast 4 false (var _y)))) (&& (msb (cast 4 false (var _y))) (msb (cast 4 false (var _result))))) (&& (msb (cast 4 false (var _result))) (! (msb (cast 4 false (var _x))))))))
aB "subpd xmm0, xmmword [eax]" 660f5c00
aB "subps xmm0, xmmword [eax]" 0f5c00
aB "subsd xmm0, qword [eax]" f20f5c00
aB "subss xmm0, dword [eax]" f30f5c00
a "swapgs" 0f1ff8
a "syscall" 0f05
a "sysenter" 0f34
a "sysexit" 0f35
a "sysret" 0f07
a "test al, 0x00" f6c000 0x0 (seq (set _result (& (cast 8 false (var eax)) (bv 8 0x0))) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false))
a "test byte [eax], 0x00" f60000 0x0 (seq (set _result (& (loadw 0 8 (+ (var eax) (bv 32 0x0))) (bv 8 0x0))) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false))
a "test byte [eax], al" 8400 0x0 (seq (set _result (& (loadw 0 8 (+ (var eax) (bv 32 0x0))) (cast 8 false (var eax)))) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false))
a "test dword [eax], 0x00" f70000000000 0x0 (seq (set _result (& (loadw 0 32 (+ (var eax) (bv 32 0x0))) (bv 32 0x0))) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false))
a "test dword [eax], eax" 8500 0x0 (seq (set _result (& (loadw 0 32 (+ (var eax) (bv 32 0x0))) (var eax))) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false))
a "test eax, 0x00" f7c000000000 0x0 (seq (set _result (& (var eax) (bv 32 0x0))) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false))
a "test eax, ebx" 85d8 0x0 (seq (set _result (& (var eax) (var ebx))) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false))
a "test edx, esi" 85f2 0x0 (seq (set _result (& (var edx) (var esi))) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))) (set cf false) (set of false))
aB "ucomisd xmm0, qword [eax]" 660f2e00
aB "ucomiss xmm0, dword [eax]" 0f2e00
a "ud2" 0f0b
aB "unpckhpd xmm0, xmmword [eax]" 660f1500
aB "unpckhps xmm0, xmmword [eax]" 0f15
aB "unpcklpd xmm0, xmmword [eax]" 660f1400
aB "unpcklps xmm0, xmmword [eax]" 0f14
aB "vaddpd ymm0, ymm0, ymm0" c5fd58c0
aB "vaesdeclast xmm0, xmm0, xmm0" c4e279dfc0
aB "vaesdec xmm0, xmm0, xmm0" c4e279dec0
aB "vaesenclast xmm0, xmm0, xmm0" c4e279ddc0
aB "vaesenc xmm0, xmm0, xmm0" c4e279dcc0
aB "vaesimc xmm0, xmm0" c4e279dbc0
aB "vaeskeygenassist xmm0, xmm0, 0x00" c4e379dfc000
aB "vaeskeygenassist xmm0, xmm0, 0x0" c4e379dfc000
aB "vbroadcastf128 ymm0, xmmword [0x0]" c4e27d1a0500000000
aB "vbroadcastsd ymm0, qword [0x0]" c4e27d190500000000
aB "vbroadcastss ymm0, dword [eax]" c4e27d1800
aB "vcvtph2ps xmm0, xmm0, 0x00" 8fe878a0c000
aB "vcvtps2ph xmm0, xmm0, 0x00" 8fe878a1c000
a "verr ax" 0f00e0
aB "verr [eax]" 0f0020
a "verw ax" 0f00e8
a "verw word [eax]" 0f0028
aB "vextractf128 xmm0, ymm0, 0x00" c4e37d19c000
aB "vextractf128 xmm0, ymm0, 0x0" c4e37d19c000
aB "vfmadd132pd xmm0, xmm0, xmm0" c4e2f998c0
aB "vfmadd213pd xmm0, xmm0, xmm0" c4e2f9a8c0
aB "vfmadd231pd xmm0, xmm0, xmm0" c4e2f9b8c0
aB "vfmaddpd xmm0, xmm0, xmm0, xmm0" c4e37969c000
aB "vfmaddpd ymm0, ymm0, ymm0, ymm0" c4e37d69c000
aB "vfmaddps xmm0, xmm0, xmm0, xmm0" c4e37968c000
aB "vfmaddps ymm0, ymm0, ymm0, ymm0" c4e37d68c000
aB "vfmaddsd xmm0, xmm0, xmm0, xmm0" c4e3796bc000
aB "vfmaddss xmm0, xmm0, xmm0, xmm0" c4e3796ac000
aB "vfmaddsubpd xmm0, xmm0, xmm0, xmm0" c4e3795dc000
aB "vfmaddsubpd ymm0, ymm0, ymm0, ymm0" c4e37d5dc000
aB "vfmaddsubps xmm0, xmm0, xmm0, xmm0" c4e3795cc000
aB "vfmaddsubps ymm0, ymm0, ymm0, ymm0" c4e37d5cc000
aB "vfmsubaddpd xmm0, xmm0, xmm0, xmm0" c4e3795fc000
aB "vfmsubaddpd ymm0, ymm0, ymm0, ymm0" c4e37d5fc000
aB "vfmsubaddps xmm0, xmm0, xmm0, xmm0" c4e3795ec000
aB "vfmsubaddps ymm0, ymm0, ymm0, ymm0" c4e37d5ec000
aB "vfmsubpd xmm0, xmm0, xmm0, xmm0" c4e3796dc000
aB "vfmsubpd ymm0, ymm0, ymm0, ymm0" c4e37d6dc000
aB "vfmsubps xmm0, xmm0, xmm0, xmm0" c4e3796cc000
aB "vfmsubps ymm0, ymm0, ymm0, ymm0" c4e37d6cc000
aB "vfmsubsd xmm0, xmm0, xmm0, xmm0" c4e3796fc000
aB "vfmsubss xmm0, xmm0, xmm0, xmm0" c4e3796ec000
aB "vfnmaddpd xmm0, xmm0, xmm0, xmm0" c4e37979c000
aB "vfnmaddpd ymm0, ymm0, ymm0, ymm0" c4e37d79c000
aB "vfnmaddps xmm0, xmm0, xmm0, xmm0" c4e37978c000
aB "vfnmaddps ymm0, ymm0, ymm0, ymm0" c4e37d78c000
aB "vfnmaddsd xmm0, xmm0, xmm0, xmm0" c4e3797bc000
aB "vfnmaddss xmm0, xmm0, xmm0, xmm0" c4e3797ac000
aB "vfnmsubpd xmm0, xmm0, xmm0, xmm0" c4e3797dc000
aB "vfnmsubpd ymm0, ymm0, ymm0, ymm0" c4e37d7dc000
aB "vfnmsubps xmm0, xmm0, xmm0, xmm0" c4e3797cc000
aB "vfnmsubps ymm0, ymm0, ymm0, ymm0" c4e37d7cc000
aB "vfnmsubsd xmm0, xmm0, xmm0, xmm0" c4e3797fc000
aB "vfnmsubss xmm0, xmm0, xmm0, xmm0" c4e3797ec000
aB "vfrczpd xmm0, xmm0" 8fe97881c0
aB "vfrczps xmm0, xmm0" 8fe97880c0
aB "vfrczsd xmm0, xmm0" 8fe97883c0
aB "vfrczss xmm0, xmm0" 8fe97882c0
aB "vinsertf128 ymm0, ymm0, xmm0, 0x00" c4e37d18c000
aB "vinsertf128 ymm0, ymm0, xmm0, 0x00" c4e37d18c000
aB "vmaskmovpd ymm0, ymm0, ymmword [0x0]" c4e27d2d0500000000
aB "vmaskmovps ymm0, ymm0, ymmword [0x0]" c4e27d2c0500000000
a "vmcall" 0f01c1
a "vmclear qword [eax]" 660fc730
a "vmlaunch" 0f01c2
a "vmload" 0f01da
a "vmmcall" 0f01d9
a "vmptrld qword [eax]" 0fc730
a "vmptrst qword [eax]" 0fc738
a "vmresume" 0f01c3
a "vmrun" 0f01d8
a "vmsave" 0f01db
a "vmxoff" 0f01c4
a "vmxon qword [eax]" f30fc730
aB "vpcmov xmm0, xmm0, xmm0, xmm0" 8fe878a2c000
aB "vpcomb xmm0, xmm0, xmm0, 0x00" 8fe878ccc000
aB "vpcomd xmm0, xmm0, xmm0, 0x00" 8fe878cec000
aB "vpcomq xmm0, xmm0, xmm0, 0x00" 8fe878cfc000
aB "vpcomub xmm0, xmm0, xmm0, 0x00" 8fe878ecc000
aB "vpcomud xmm0, xmm0, xmm0, 0x00" 8fe878eec000
aB "vpcomuq xmm0, xmm0, xmm0, 0x00" 8fe878efc000
aB "vpcomuw xmm0, xmm0, xmm0, 0x00" 8fe878edc000
aB "vpcomw xmm0, xmm0, xmm0, 0x00" 8fe878cdc000
aB "vperm2f128 ymm0, ymm0, ymm0, 0x00" c4e37d06c000
aB "vperm2f128 ymm0, ymm0, ymm0, 0x00" c4e37d06c000
aB "vpermilpd ymm0, ymm0, ymmword [0x0]" c4e27d0d0500000000
aB "vpermilps ymm0, ymm0, ymmword [0x0]" c4e27d0c0500000000
aB "vphaddbd xmm0, xmm0" 8fe978c2c0
aB "vphaddbq xmm0, xmm0" 8fe978c3c0
aB "vphaddbw xmm0, xmm0" 8fe978c1c0
aB "vphadddq xmm0, xmm0" 8fe978cbc0
aB "vphaddubd xmm0, xmm0" 8fe978d2c0
aB "vphaddubq xmm0, xmm0" 8fe978d3c0
aB "vphaddubw xmm0, xmm0" 8fe978d1c0
aB "vphaddudq xmm0, xmm0" 8fe978dbc0
aB "vphadduwd xmm0, xmm0" 8fe978d6c0
aB "VPHADDUWQ XMM0, XMM0" 8fe978d7c0
aB "vphaddwd xmm0, xmm0" 8fe978c6c0
aB "vphaddwq xmm0, xmm0" 8fe978c7c0
aB "vphsubbw xmm0, xmm0" 8fe978e1c0
aB "vphsubdq xmm0, xmm0" 8fe978e3c0
aB "vphsubwd xmm0, xmm0" 8fe978e2c0
aB "vpmacsddxmm0, xmm0, xmm0, xmm0" 8fe8789ec000
aB "vpmacsdqh xmm0, xmm0, xmm0, xmm0" 8fe8789fc000
aB "vpmacsdql xmm0, xmm0, xmm0, xmm0" 8fe87897c000
aB "vpmacssdd xmm0, xmm0, xmm0, xmm0" 8fe8788ec000
aB "vpmacssdqh xmm0, xmm0, xmm0, xmm0" 8fe8788fc000
aB "vpmacssdql xmm0, xmm0, xmm0, xmm0" 8fe87887c000
aB "vpmacsswd xmm0, xmm0, xmm0, xmm0" 8fe87886c000
aB "vpmacssww xmm0, xmm0, xmm0, xmm0" 8fe87885c000
aB "vpmacswd xmm0, xmm0, xmm0, xmm0" 8fe87896c000
aB "vpmacsww xmm0, xmm0, xmm0, xmm0" 8fe87895c000
aB "vpmadcsswd xmm0, xmm0, xmm0, xmm0" 8fe878a6c000
aB "VPMADCSSWD XMM0, XMM0, XMM0, XMM0" 8fe878a6c000
aB "vpmadcswd xmm0, xmm0, xmm0, xmm0" 8fe878b6c000
aB "vpperm xmm0, xmm0, xmm0, xmm0" 8fe878a3c000
aB "vprotb xmm0, xmm0, xmm0" 8fe97890c0
aB "vprotd xmm0, xmm0, xmm0" 8fe97892c0
aB "vprotq xmm0, xmm0, xmm0" 8fe97893c0
aB "vprotw xmm0, xmm0, xmm0" 8fe97891c0
aB "vpshab xmm0, xmm0, xmm0" 8fe97898c0
aB "vpshad xmm0, xmm0, xmm0" 8fe9789ac0
aB "vpshaq xmm0, xmm0, xmm0" 8fe9789bc0
aB "vpshaw xmm0, xmm0, xmm0" 8fe97899c0
aB "vpshlb xmm0, xmm0, xmm0" 8fe97894c0
aB "vpshld xmm0, xmm0, xmm0" 8fe97896c0
aB "vpshlq xmm0, xmm0, xmm0" 8fe97897c0
aB "vpshlw xmm0, xmm0, xmm0" 8fe97895c0
aB "vtestpd ymm0, ymm0" c4e27d0fc0
aB "vtestps ymm0, ymm0" c4e27d0ec0
a "vzeroall" c5fc77
a "vzeroupper" c5f877
a "wbinvd" 0f09
a "wrmsr" 0f30
aB "xadd byte [eax], al" 0fc000
aB "xadd dword [eax], eax" 0fc100
aB "xchg byte [eax], al" 8600
a "xchg dword [eax], eax" 8700 0x0 (seq (set _temp (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var eax)) (set eax (var _temp)))
ad "xchg al, dl" 86d0 0x0 (seq (set _temp (cast 8 false (var eax))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (cast 8 false (var edx))))) (set edx (| (& (var edx) (~ (bv 32 0xff))) (cast 32 false (var _temp)))))
ad "xchg dl, al" 86c2 0x0 (seq (set _temp (cast 8 false (var edx))) (set edx (| (& (var edx) (~ (bv 32 0xff))) (cast 32 false (cast 8 false (var eax))))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var _temp)))))
ad "xchg dx, ax" 6692 0x0 (seq (set _temp (cast 16 false (var edx))) (set edx (| (& (var edx) (~ (bv 32 0xffff))) (cast 32 false (cast 16 false (var eax))))) (set eax (| (& (var eax) (~ (bv 32 0xffff))) (cast 32 false (var _temp)))))
a "xchg ax, dx" 6692 0x0 (seq (set _temp (cast 16 false (var edx))) (set edx (| (& (var edx) (~ (bv 32 0xffff))) (cast 32 false (cast 16 false (var eax))))) (set eax (| (& (var eax) (~ (bv 32 0xffff))) (cast 32 false (var _temp)))))
ad "xchg ah, dh" 86f4 0x0 (seq (set _temp (cast 8 false (>> (var eax) (bv 8 0x8) false))) (set eax (| (& (var eax) (~ (bv 32 0xff00))) (<< (cast 32 false (cast 8 false (>> (var edx) (bv 8 0x8) false))) (bv 8 0x8) false))) (set edx (| (& (var edx) (~ (bv 32 0xff00))) (<< (cast 32 false (var _temp)) (bv 8 0x8) false))))
ad "xchg dh, ah" 86e6 0x0 (seq (set _temp (cast 8 false (>> (var edx) (bv 8 0x8) false))) (set edx (| (& (var edx) (~ (bv 32 0xff00))) (<< (cast 32 false (cast 8 false (>> (var eax) (bv 8 0x8) false))) (bv 8 0x8) false))) (set eax (| (& (var eax) (~ (bv 32 0xff00))) (<< (cast 32 false (var _temp)) (bv 8 0x8) false))))
a "xchg eax, eax" 90 0x0 nop
ad "xchg ebp, eax" 95 0x0 (seq (set _temp (var ebp)) (set ebp (var eax)) (set eax (var _temp)))
ad "xchg ebx, eax" 93 0x0 (seq (set _temp (var ebx)) (set ebx (var eax)) (set eax (var _temp)))
ad "xchg ebx, eax" 93 0x0 (seq (set _temp (var ebx)) (set ebx (var eax)) (set eax (var _temp)))
ad "xchg ecx, eax" 91 0x0 (seq (set _temp (var ecx)) (set ecx (var eax)) (set eax (var _temp)))
ad "xchg edi, eax" 97 0x0 (seq (set _temp (var edi)) (set edi (var eax)) (set eax (var _temp)))
ad "xchg edx, eax" 92 0x0 (seq (set _temp (var edx)) (set edx (var eax)) (set eax (var _temp)))
ad "xchg esi, eax" 96 0x0 (seq (set _temp (var esi)) (set esi (var eax)) (set eax (var _temp)))
ad "xchg esp, eax" 94 0x0 (seq (set _temp (var esp)) (set esp (var eax)) (set eax (var _temp)))
ad "xchg ebx, ecx" 87cb 0x0 (seq (set _temp (var ebx)) (set ebx (var ecx)) (set ecx (var _temp)))
ad "xchg ecx, ebp" 87e9 0x0 (seq (set _temp (var ecx)) (set ecx (var ebp)) (set ebp (var _temp)))
ad "xchg ecx, ebx" 87d9 0x0 (seq (set _temp (var ecx)) (set ecx (var ebx)) (set ebx (var _temp)))
ad "xchg ecx, ecx" 87c9 0x0 (seq (set _temp (var ecx)) (set ecx (var ecx)) (set ecx (var _temp)))
a "xgetbv" 0f01d0
a "xor al, 0x00" 3400 0x0 (seq (set _xor (^ (cast 8 false (var eax)) (bv 8 0x0))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var _xor)))) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "xor al, 0x80" 3480 0x0 (seq (set _xor (^ (cast 8 false (var eax)) (bv 8 0x80))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var _xor)))) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "xor ax, 0x8080" 66358080 0x0 (seq (set _xor (^ (cast 16 false (var eax)) (bv 16 0x8080))) (set eax (| (& (var eax) (~ (bv 32 0xffff))) (cast 32 false (var _xor)))) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "xor ax, 0x8" 6683f008 0x0 (seq (set _xor (^ (cast 16 false (var eax)) (bv 16 0x8))) (set eax (| (& (var eax) (~ (bv 32 0xffff))) (cast 32 false (var _xor)))) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "xor cx, 0x8080" 6681f18080 0x0 (seq (set _xor (^ (cast 16 false (var ecx)) (bv 16 0x8080))) (set ecx (| (& (var ecx) (~ (bv 32 0xffff))) (cast 32 false (var _xor)))) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "xor sp, 0x8080" 6681f48080 0x0 (seq (set _xor (^ (cast 16 false (var esp)) (bv 16 0x8080))) (set esp (| (& (var esp) (~ (bv 32 0xffff))) (cast 32 false (var _xor)))) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "xor bp, 0x8080" 6681f58080 0x0 (seq (set _xor (^ (cast 16 false (var ebp)) (bv 16 0x8080))) (set ebp (| (& (var ebp) (~ (bv 32 0xffff))) (cast 32 false (var _xor)))) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "xor si, 0x8" 6683f608 0x0 (seq (set _xor (^ (cast 16 false (var esi)) (bv 16 0x8))) (set esi (| (& (var esi) (~ (bv 32 0xffff))) (cast 32 false (var _xor)))) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "xor al, byte [eax]" 3200 0x0 (seq (set _xor (^ (cast 8 false (var eax)) (loadw 0 8 (+ (var eax) (bv 32 0x0))))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var _xor)))) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "xor byte [eax], al" 3000 0x0 (seq (set _xor (^ (loadw 0 8 (+ (var eax) (bv 32 0x0))) (cast 8 false (var eax)))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _xor)) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "xor byte [eax], 0xff" 8030ff 0x0 (seq (set _xor (^ (loadw 0 8 (+ (var eax) (bv 32 0x0))) (bv 8 0xff))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _xor)) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "xor dword [eax], eax" 3100 0x0 (seq (set _xor (^ (loadw 0 32 (+ (var eax) (bv 32 0x0))) (var eax))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _xor)) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "xor eax, dword [eax]" 3300 0x0 (seq (set _xor (^ (var eax) (loadw 0 32 (+ (var eax) (bv 32 0x0))))) (set eax (var _xor)) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "xor [eax], eax" 3100 0x0 (seq (set _xor (^ (loadw 0 32 (+ (var eax) (bv 32 0x0))) (var eax))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _xor)) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "xor eax, eax" 31c0 0x0 (seq (set _xor (^ (var eax) (var eax))) (set eax (var _xor)) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "xor eax, ebx" 31d8 0x0 (seq (set _xor (^ (var eax) (var ebx))) (set eax (var _xor)) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "xor ebx, eax" 31c3 0x0 (seq (set _xor (^ (var ebx) (var eax))) (set ebx (var _xor)) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "xor esi, ebp" 31ee 0x0 (seq (set _xor (^ (var esi) (var ebp))) (set esi (var _xor)) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "xor esp,esp" 31e4 0x0 (seq (set _xor (^ (var esp) (var esp))) (set esp (var _xor)) (set of false) (set cf false) (set _result (var _xor)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
aB "xorpd xmm0, xmmword [eax]" 660f5700
aB "xorps xmm0, xmmword [eax]" 0f5700
aB "xrstor [eax]" 0fae28
aB "xsave [eax]" 0fae20
a "xsetbv" 0f01d1
a "int 0x80" cd80 0x0 (goto int)
a "mov eax, 33" b821000000 0x0 (set eax (bv 32 0x21))
aB "mov rax, 33" 48c7c021000000 0x0 (set eax (bv 32 0x21))
a "mov [ebp+4],0" c7450400000000 0x0 (storew 0 (+ (+ (var ebp) (bv 32 0x4)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 32 0x0))
a "jmp 0x1b" eb05 0x14 (jmp (cast 32 false (bv 32 0x1b)))
ad "setz al" 0f94c0
a "mov byte ptr [bp+di],0x0" 67c60300 0x0 (storew 0 (+ (+ (+ (cast 32 false (cast 16 false (var ebp))) (* (cast 32 false (cast 16 false (var edi))) (bv 32 0x1))) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 8 0x0))
a "mov byte ptr [bp+di-0x1],0x20" 67c643ff20 0x0 (storew 0 (+ (+ (+ (cast 32 false (cast 16 false (var ebp))) (* (cast 32 false (cast 16 false (var edi))) (bv 32 0x1))) (bv 32 0xffffffff)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 8 0x20))
a "mov byte ptr [bp+di],0x25" 67c60325 0x0 (storew 0 (+ (+ (+ (cast 32 false (cast 16 false (var ebp))) (* (cast 32 false (cast 16 false (var edi))) (bv 32 0x1))) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 8 0x25))
a "mov byte ptr [bp+di],0x30" 67c60330 0x0 (storew 0 (+ (+ (+ (cast 32 false (cast 16 false (var ebp))) (* (cast 32 false (cast 16 false (var edi))) (bv 32 0x1))) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 8 0x30))
a "mov byte ptr [bp+si-0x1],0x30" 67c642ff30 0x0 (storew 0 (+ (+ (+ (cast 32 false (cast 16 false (var ebp))) (* (cast 32 false (cast 16 false (var esi))) (bv 32 0x1))) (bv 32 0xffffffff)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 8 0x30))
a "mov byte ptr [bx],0x0" 67c60700 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var ebx))) (bv 32 0x0)) (bv 8 0x0))
a "mov byte ptr [bx+si+0x3e06],0x0" 67c680063e00 0x0 (storew 0 (+ (+ (cast 32 false (cast 16 false (var ebx))) (* (cast 32 false (cast 16 false (var esi))) (bv 32 0x1))) (bv 32 0x3e06)) (bv 8 0x0))
a "mov byte ptr [esi],0x7f" c6067f 0x0 (storew 0 (+ (var esi) (bv 32 0x0)) (bv 8 0x7f))
a "mov byte ptr [esi],0x86" c60686 0x0 (storew 0 (+ (var esi) (bv 32 0x0)) (bv 8 0x86))
a "mov byte ptr [esp+0x25],0xc0" c6442425c0 0x0 (storew 0 (+ (+ (var esp) (bv 32 0x25)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 8 0xc0))
a "mov byte ptr [si],0x11" 67c60411 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x0)) (bv 8 0x11))
a "mov byte ptr [si],0x13" 67c60413 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x0)) (bv 8 0x13))
a "mov byte ptr [si+0x24],0x14" 67c6442414 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x24)) (bv 8 0x14))
a "mov byte ptr [si+0x24],0x18" 67c6442418 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x24)) (bv 8 0x18))
a "mov byte ptr [si+0x24],0x1a" 67c644241a 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x24)) (bv 8 0x1a))
a "mov byte ptr [si+0x24],0x25" 67c6442425 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x24)) (bv 8 0x25))
a "mov byte ptr [si+0x24],0x2e" 67c644242e 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x24)) (bv 8 0x2e))
a "mov byte ptr [si+0x24],0x44" 67c6442444 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x24)) (bv 8 0x44))
a "mov byte ptr [si],0x24" 67c60424 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x0)) (bv 8 0x24))
a "mov dword ptr [bx+si+0x6],0x8b640000" 67c740060000648b 0x0 (storew 0 (+ (+ (cast 32 false (cast 16 false (var ebx))) (* (cast 32 false (cast 16 false (var esi))) (bv 32 0x1))) (bv 32 0x6)) (bv 32 0x8b640000))
a "mov dword ptr [eax+eax*1],0xa740000" c704000000740a 0x0 (storew 0 (+ (+ (var eax) (* (var eax) (bv 32 0x1))) (bv 32 0x0)) (bv 32 0xa740000))
a "mov dword ptr [ebp-0x44],0x31660305" c745bc05036631 0x0 (storew 0 (+ (+ (var ebp) (bv 32 0xffffffbc)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 32 0x31660305))
a "mov dword ptr [ebp-0x4c],0x47534943" c745b443495347 0x0 (storew 0 (+ (+ (var ebp) (bv 32 0xffffffb4)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 32 0x47534943))
a "mov dword ptr [edx],0x74000000" c70200000074 0x0 (storew 0 (+ (var edx) (bv 32 0x0)) (bv 32 0x74000000))
a "mov dword ptr [esi],0x15078" c70678500100 0x0 (storew 0 (+ (var esi) (bv 32 0x0)) (bv 32 0x15078))
a "mov dword ptr [esi],0x404020" c70620404000 0x0 (storew 0 (+ (var esi) (bv 32 0x0)) (bv 32 0x404020))
a "mov dword ptr [esi],0xb0003e04" c706043e00b0 0x0 (storew 0 (+ (var esi) (bv 32 0x0)) (bv 32 0xb0003e04))
a "mov dword ptr [esi],0xb8003e04" c706043e00b8 0x0 (storew 0 (+ (var esi) (bv 32 0x0)) (bv 32 0xb8003e04))
a "mov dword ptr [esp+0x1c],0x534d4150" c744241c50414d53 0x0 (storew 0 (+ (+ (var esp) (bv 32 0x1c)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 32 0x534d4150))
a "mov dword ptr [esp+0x1c],0xc6670001" c744241c010067c6 0x0 (storew 0 (+ (+ (var esp) (bv 32 0x1c)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 32 0xc6670001))
a "mov dword ptr [esp],0x1" c7042401000000 0x0 (storew 0 (+ (+ (var esp) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 32 0x1))
a "mov dword ptr [esp+0x20],0x66670014" c744242014006766 0x0 (storew 0 (+ (+ (var esp) (bv 32 0x20)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 32 0x66670014))
a "mov dword ptr [esp+0x24],0x66670f00" c7442424000f6766 0x0 (storew 0 (+ (+ (var esp) (bv 32 0x24)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 32 0x66670f00))
a "mov dword ptr [esp+0x24],0x66671a00" c7442424001a6766 0x0 (storew 0 (+ (+ (var esp) (bv 32 0x24)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 32 0x66671a00))
a "mov dword ptr [esp+0x4],0x0" c744240400000000 0x0 (storew 0 (+ (+ (var esp) (bv 32 0x4)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 32 0x0))
a "mov dword ptr [esp+0xc],0x1" c744240c01000000 0x0 (storew 0 (+ (+ (var esp) (bv 32 0xc)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 32 0x1))
a "mov dword ptr [esp+0xc],0x3" c744240c03000000 0x0 (storew 0 (+ (+ (var esp) (bv 32 0xc)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 32 0x3))
a "mov dword ptr [si+0x24],0x6606071c" 67c744241c070666 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x24)) (bv 32 0x6606071c))
a "mov dword ptr [si+0x24],0x660b0c1c" 67c744241c0c0b66 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x24)) (bv 32 0x660b0c1c))
a "mov dword ptr [si+0x24],0x66111120" 67c7442420111166 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x24)) (bv 32 0x66111120))
a "mov dword ptr [si+0x24],0x66111220" 67c7442420121166 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x24)) (bv 32 0x66111220))
a "mov dword ptr [si+0x24],0x66240120" 67c7442420012466 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x24)) (bv 32 0x66240120))
a "mov dword ptr [si+0x24],0x6700002a" 67c744242a000067 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x24)) (bv 32 0x6700002a))
a "mov dword ptr [si+0x24],0x67000714" 67c7442414070067 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x24)) (bv 32 0x67000714))
a "mov dword ptr [si+0x24],0x674f0134" 67c7442434014f67 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x24)) (bv 32 0x674f0134))
a "mov dword ptr [si+0x24],0x67e80124" 67c744242401e867 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x24)) (bv 32 0x67e80124))
a "mov dword ptr [si+0x24],0x67e82024" 67c744242420e867 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x24)) (bv 32 0x67e82024))
a "mov word ptr [bp+di+0x10],0x0" 6766c743100000 0x0 (storew 0 (+ (+ (+ (cast 32 false (cast 16 false (var ebp))) (* (cast 32 false (cast 16 false (var edi))) (bv 32 0x1))) (bv 32 0x10)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 16 0x0))
a "mov word ptr [bx+si],0x5" 6766c7000500 0x0 (storew 0 (+ (+ (cast 32 false (cast 16 false (var ebx))) (* (cast 32 false (cast 16 false (var esi))) (bv 32 0x1))) (bv 32 0x0)) (bv 16 0x5))
a "mov word ptr [esi],0x3d04" 66c706043d 0x0 (storew 0 (+ (var esi) (bv 32 0x0)) (bv 16 0x3d04))
a "mov word ptr [esi],0x4020" 66c7062040 0x0 (storew 0 (+ (var esi) (bv 32 0x0)) (bv 16 0x4020))
a "mov word ptr [esi],0x5078" 66c7067850 0x0 (storew 0 (+ (var esi) (bv 32 0x0)) (bv 16 0x5078))
a "mov word ptr [esi],0x5084" 66c7068450 0x0 (storew 0 (+ (var esi) (bv 32 0x0)) (bv 16 0x5084))
a "mov word ptr [esp+0x10],0x0" 66c74424100000 0x0 (storew 0 (+ (+ (var esp) (bv 32 0x10)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 16 0x0))
a "mov word ptr [esp+0x14],0x0" 66c74424140000 0x0 (storew 0 (+ (+ (var esp) (bv 32 0x14)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (bv 16 0x0))
a "mov word ptr [si+0x24],0x4" 6766c744240400 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x24)) (bv 16 0x4))
a "mov word ptr [si+0x24],0x8" 6766c744240800 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x24)) (bv 16 0x8))
a "mov word ptr [si+0x24],0xff04" 6766c7442404ff 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x24)) (bv 16 0xff04))
a "mov word ptr [si],0x24" 6766c7042400 0x0 (storew 0 (+ (cast 32 false (cast 16 false (var esi))) (bv 32 0x0)) (bv 16 0x24))
a "mov eax, [eax * 2 + 8]" 8b044508000000 0x0 (set eax (loadw 0 32 (+ (* (var eax) (bv 32 0x2)) (bv 32 0x8))))
a "inc al" fec0 0x0 (seq (set _op (cast 8 false (var eax))) (set _result (+ (var _op) (bv 8 0x1))) (set eax (| (& (var eax) (~ (bv 32 0xff))) (cast 32 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc ax" 6640 0x0 (seq (set _op (cast 16 false (var eax))) (set _result (+ (var _op) (bv 16 0x1))) (set eax (| (& (var eax) (~ (bv 32 0xffff))) (cast 32 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 16 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc BYTE PTR [ebx+0x18]" fe4318 0x0 (seq (set _op (loadw 0 8 (+ (var ebx) (bv 32 0x18)))) (set _result (+ (var _op) (bv 8 0x1))) (storew 0 (+ (var ebx) (bv 32 0x18)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc BYTE PTR [edi+0x18]" fe4718 0x0 (seq (set _op (loadw 0 8 (+ (var edi) (bv 32 0x18)))) (set _result (+ (var _op) (bv 8 0x1))) (storew 0 (+ (var edi) (bv 32 0x18)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc BYTE PTR [esi+0x1a]" fe461a 0x0 (seq (set _op (loadw 0 8 (+ (var esi) (bv 32 0x1a)))) (set _result (+ (var _op) (bv 8 0x1))) (storew 0 (+ (var esi) (bv 32 0x1a)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc cl" fec1 0x0 (seq (set _op (cast 8 false (var ecx))) (set _result (+ (var _op) (bv 8 0x1))) (set ecx (| (& (var ecx) (~ (bv 32 0xff))) (cast 32 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc dl" fec2 0x0 (seq (set _op (cast 8 false (var edx))) (set _result (+ (var _op) (bv 8 0x1))) (set edx (| (& (var edx) (~ (bv 32 0xff))) (cast 32 false (var _result)))) (set _result (var _result)) (set _x (var _op)) (set _y (bv 8 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc DWORD PTR [eax]" ff00 0x0 (seq (set _op (loadw 0 32 (+ (var eax) (bv 32 0x0)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var eax) (bv 32 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc DWORD PTR [eax+0x14c]" ff804c010000 0x0 (seq (set _op (loadw 0 32 (+ (var eax) (bv 32 0x14c)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var eax) (bv 32 0x14c)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc DWORD PTR [ebp+0x10]" ff4510 0x0 (seq (set _op (loadw 0 32 (+ (+ (var ebp) (bv 32 0x10)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (+ (var ebp) (bv 32 0x10)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc DWORD PTR [ebx]" ff03 0x0 (seq (set _op (loadw 0 32 (+ (var ebx) (bv 32 0x0)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var ebx) (bv 32 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc DWORD PTR [ebx+0x18]" ff4318 0x0 (seq (set _op (loadw 0 32 (+ (var ebx) (bv 32 0x18)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var ebx) (bv 32 0x18)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc DWORD PTR [ebx+0x20]" ff4320 0x0 (seq (set _op (loadw 0 32 (+ (var ebx) (bv 32 0x20)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var ebx) (bv 32 0x20)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc DWORD PTR [ecx]" ff01 0x0 (seq (set _op (loadw 0 32 (+ (var ecx) (bv 32 0x0)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var ecx) (bv 32 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc DWORD PTR [ecx+0x4]" ff4104 0x0 (seq (set _op (loadw 0 32 (+ (var ecx) (bv 32 0x4)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var ecx) (bv 32 0x4)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc DWORD PTR [edi]" ff07 0x0 (seq (set _op (loadw 0 32 (+ (var edi) (bv 32 0x0)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var edi) (bv 32 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc DWORD PTR [edi+0x28]" ff4728 0x0 (seq (set _op (loadw 0 32 (+ (var edi) (bv 32 0x28)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var edi) (bv 32 0x28)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc DWORD PTR [edx]" ff02 0x0 (seq (set _op (loadw 0 32 (+ (var edx) (bv 32 0x0)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var edx) (bv 32 0x0)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc DWORD PTR [edx+0x10]" ff4210 0x0 (seq (set _op (loadw 0 32 (+ (var edx) (bv 32 0x10)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var edx) (bv 32 0x10)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc DWORD PTR [esi+0x8]" ff4608 0x0 (seq (set _op (loadw 0 32 (+ (var esi) (bv 32 0x8)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (var esi) (bv 32 0x8)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc DWORD PTR [esp]" ff0424 0x0 (seq (set _op (loadw 0 32 (+ (+ (var esp) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (+ (var esp) (bv 32 0x0)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc DWORD PTR [esp+0x10]" ff442410 0x0 (seq (set _op (loadw 0 32 (+ (+ (var esp) (bv 32 0x10)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)))) (set _result (+ (var _op) (bv 32 0x1))) (storew 0 (+ (+ (var esp) (bv 32 0x10)) (<< (cast 32 false (var ss)) (bv 8 0x4) false)) (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc eax" 40 0x0 (seq (set _op (var eax)) (set _result (+ (var _op) (bv 32 0x1))) (set eax (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc ebp" 45 0x0 (seq (set _op (var ebp)) (set _result (+ (var _op) (bv 32 0x1))) (set ebp (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc ebx" 43 0x0 (seq (set _op (var ebx)) (set _result (+ (var _op) (bv 32 0x1))) (set ebx (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc ecx" 41 0x0 (seq (set _op (var ecx)) (set _result (+ (var _op) (bv 32 0x1))) (set ecx (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc edi" 47 0x0 (seq (set _op (var edi)) (set _result (+ (var _op) (bv 32 0x1))) (set edi (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "inc edx" 42 0x0 (seq (set _op (var edx)) (set _result (+ (var _op) (bv 32 0x1))) (set edx (var _result)) (set _result (var _result)) (set _x (var _op)) (set _y (bv 32 0x1)) (set of (|| (&& (&& (! (msb (var _result))) (msb (var _x))) (msb (var _y))) (&& (&& (msb (var _result)) (! (msb (var _x)))) (! (msb (var _y)))))) (set af (|| (|| (&& (msb (cast 4 false (var _x))) (msb (cast 4 false (var _y)))) (&& (! (msb (cast 4 false (var _result)))) (msb (cast 4 false (var _y))))) (&& (msb (cast 4 false (var _x))) (! (msb (cast 4 false (var _result))))))) (set _result (var _result)) (set pf (! (lsb (let _val (cast 8 false (var _result)) (let _c4 (^ (var _val) (>> (var _val) (bv 8 0x4) false)) (let _c2 (^ (var _c4) (>> (var _c4) (bv 8 0x2) false)) (^ (var _c2) (>> (var _c2) (bv 8 0x1) false)))))))) (set zf (is_zero (var _result))) (set sf (msb (var _result))))
a "dec al" fec8
a "dec ax" 6648
a "dec BYTE PTR [ebx+0x18]" fe4b18
a "dec BYTE PTR [edi+0x18]" fe4f18
a "dec BYTE PTR [esi+0x1a]" fe4e1a
a "dec cl" fec9
a "dec dl" feca
a "dec DWORD PTR [eax]" ff08
a "dec DWORD PTR [eax+0x14c]" ff884c010000
a "dec DWORD PTR [ebp+0x10]" ff4d10
a "dec DWORD PTR [ebx]" ff0b
a "dec DWORD PTR [ebx+0x18]" ff4b18
a "dec DWORD PTR [ebx+0x20]" ff4b20
a "dec DWORD PTR [ecx]" ff09
a "dec DWORD PTR [ecx+0x4]" ff4904
a "dec DWORD PTR [edi]" ff0f
a "dec DWORD PTR [edi+0x28]" ff4f28
a "dec DWORD PTR [edx]" ff0a
a "dec DWORD PTR [edx+0x10]" ff4a10
a "dec DWORD PTR [esi+0x8]" ff4e08
a "dec DWORD PTR [esp]" ff0c24
a "dec DWORD PTR [esp+0x10]" ff4c2410
a "dec eax" 48
a "dec ebp" 4d
a "dec ebx" 4b
a "dec ecx" 49
a "dec edi" 4f
a "dec edx" 4a
Reference in a new issue View git blame Copy permalink