Function Graph 0Basic Block 0Opcode: 55sub_80482eb:Opcode: 55push    ebpOpcode: 89 e5mov     ebpespOpcode: 57push    ediOpcode: 56push    esiOpcode: 81 ec 90 00 00 00sub     esp0x90 {var_9c}Opcode: 8b 45 0cmov     eaxdword [ebp+0xc {arg_8}]Opcode: 8b 4d 08mov     ecxdword [ebp+0x8 {arg_4}]Opcode: 89 4d f0mov     dword [ebp-0x10 {var_14}]ecxOpcode: 89 45 ecmov     dword [ebp-0x14 {var_18}]eaxOpcode: 8b 45 f0mov     eaxdword [ebp-0x10 {var_14}]Opcode: c6 45 eb 00mov     byte [ebp-0x15 {var_19}]0x0Opcode: 83 7d ec 00cmp     dword [ebp-0x14 {var_18}]0x0Opcode: 89 45 b8mov     dword [ebp-0x48 {var_4c}]eaxOpcode: 75 09jne     0x804831bBasic Block 1Opcode: 8b 45 ecmov     eaxdword [ebp-0x14 {var_18}]Opcode: 89 04 24mov     dword [esp {var_9c}]eaxOpcode: e8 69 28 00 00call    sub_804ab8fOpcode: 83 f8 10cmp     eax0x10Opcode: 73 09jae     0x8048334Basic Block 2Opcode: c6 45 f7 00mov     byte [ebp-0x9 {var_d}]0x0Opcode: e9 94 04 00 00jmp     0x80487afBasic Block 3Opcode: 8b 45 ecmov     eaxdword [ebp-0x14 {var_18}]Opcode: 8b 4d b8mov     ecxdword [ebp-0x48 {var_4c}]Opcode: 89 81 00 02 00 00mov     dword [ecx+0x200]eaxOpcode: c7 45 e4 00 00 00 00mov     dword [ebp-0x1c {var_20}]0x0Basic Block 4Opcode: c6 45 f7 00mov     byte [ebp-0x9 {var_d}]0x0Opcode: e9 7b 04 00 00jmp     0x80487afBasic Block 5Opcode: 8a 45 f7mov     albyte [ebp-0x9 {var_d}]Opcode: 24 01and     al0x1Opcode: 0f b6 c0movzx   eaxalOpcode: 81 c4 90 00 00 00add     esp0x90 {var_c}Opcode: 5epop     esiOpcode: 5fpop     ediOpcode: 5dpop     ebpOpcode: e9 e7 f8 ff ffjmp     0x80480acBasic Block 6Opcode: b8 00 00 00 00mov     eax0x0Opcode: b9 05 00 00 00mov     ecx0x5Opcode: 8d 55 d8lea     edx[ebp-0x28] {var_2c}Opcode: 8b 75 b8mov     esidword [ebp-0x48 {var_4c}]Opcode: 66 c7 86 84 02 00 00 00 00mov     word [esi+0x284]0x0Opcode: 8b be 00 02 00 00mov     edidword [esi+0x200]Opcode: 89 3c 24mov     dword [esp {var_9c}]ediOpcode: c7 44 24 04 00 00 00 00mov     dword [esp+0x4 {var_98}]0x0Opcode: 89 54 24 08mov     dword [esp+0x8 {var_94}]edxOpcode: c7 44 24 0c 05 00 00 00mov     dword [esp+0xc {var_90}]0x5Opcode: 89 45 b4mov     dword [ebp-0x4c {var_50}]eaxOpcode: 89 4d b0mov     dword [ebp-0x50 {var_54}]ecxOpcode: e8 6b 2a 00 00call    sub_804ae22Opcode: 83 f8 05cmp     eax0x5Opcode: 74 09je      0x80483c5Basic Block 7Opcode: 8b 45 e4mov     eaxdword [ebp-0x1c {var_20}]Opcode: 8b 4d b8mov     ecxdword [ebp-0x48 {var_4c}]Opcode: c7 84 c1 08 02 00 00 00 00 00 00mov     dword [ecx+eax*8+0x208]0x0Opcode: 8b 45 e4mov     eaxdword [ebp-0x1c {var_20}]Opcode: 66 c7 84 c1 04 02 00 00 ff ffmov     word [ecx+eax*8+0x204]0xffffOpcode: 8b 45 e4mov     eaxdword [ebp-0x1c {var_20}]Opcode: 83 c0 01add     eax0x1Opcode: 89 45 e4mov     dword [ebp-0x1c {var_20}]eaxOpcode: eb d1jmp     0x8048347Basic Block 8Opcode: a3 a8 52 05 08mov     dword [data_80552a8]eaxOpcode: 89 15 ac 52 05 08mov     dword [data_80552ac]edxOpcode: 8d 15 60 37 05 08lea     edx[data_8053760]Opcode: a1 40 37 05 08mov     eaxdword [data_8053740]  {0xb40}Opcode: 66 0f 6e 14 24movd    xmm2dword [esp] {__return_addr}Opcode: 66 0f 6f damovdqa  xmm3xmm2Opcode: 66 0f 73 fa 04pslldq  xmm20x4Opcode: 66 0f eb d3por     xmm2xmm3Opcode: 66 0f 73 fa 04pslldq  xmm20x4Opcode: 66 0f eb d3por     xmm2xmm3Opcode: 66 0f 73 fa 04pslldq  xmm20x4Opcode: 66 0f eb d3por     xmm2xmm3Opcode: 66 0f ef e4pxor    xmm4xmm4Opcode: 8d 14 02lea     edx[edx+eax]  {data_80542a0}Opcode: f7 d8neg     eax  {0xfffff4c0}Basic Block 9Opcode: 0f b6 45 d8movzx   eaxbyte [ebp-0x28 {var_2c}]Opcode: 3d ff 00 00 00cmp     eax0xffOpcode: 75 5ajne     0x804842aBasic Block 10Opcode: c6 45 f7 00mov     byte [ebp-0x9 {var_d}]0x0Opcode: e9 ea 03 00 00jmp     0x80487afBasic Block 11Opcode: 83 7d e4 10cmp     dword [ebp-0x1c {var_20}]0x10Opcode: 73 29jae     0x8048376Basic Block 12Opcode: 66 0f 6f 1c 02movdqa  xmm3oword [edx+eax]Opcode: 66 0f 76 dapcmpeqd xmm3xmm2Opcode: 83 c0 10add     eax0x10Opcode: 66 0f eb e3por     xmm4xmm3Opcode: 78 eejs      0x80480efBasic Block 13Opcode: 66 0f d7 c4pmovmskb eaxxmm4Opcode: 85 c0test    eaxeaxOpcode: 74 97je      0x80480a0Basic Block 14Opcode: b8 05 00 00 00mov     eax0x5Opcode: 8d 4d d8lea     ecx[ebp-0x28] {var_2c}Opcode: 8b 55 b8mov     edxdword [ebp-0x48 {var_4c}]Opcode: 81 c2 86 02 00 00add     edx0x286Opcode: 89 14 24mov     dword [esp {var_9c}]edxOpcode: 89 4c 24 04mov     dword [esp+0x4 {var_98}]ecxOpcode: c7 44 24 08 05 00 00 00mov     dword [esp+0x8 {var_94}]0x5Opcode: 89 45 a4mov     dword [ebp-0x5c {var_60}]eaxOpcode: e8 7b 98 00 00call    sub_8051ccdOpcode: 0f b7 4d d9movzx   ecxword [ebp-0x27 {var_2b}]Opcode: 8b 55 b8mov     edxdword [ebp-0x48 {var_4c}]Opcode: 8b b2 00 02 00 00mov     esidword [edx+0x200]Opcode: 89 34 24mov     dword [esp {var_9c}]esiOpcode: 89 45 a0mov     dword [ebp-0x60 {var_64}]eaxOpcode: 89 4d 9cmov     dword [ebp-0x64 {var_68}]ecxOpcode: e8 37 27 00 00call    sub_804aba4Opcode: 8b 4d 9cmov     ecxdword [ebp-0x64 {var_68}]Opcode: 0f af c8imul    ecxeaxOpcode: 0f b7 45 dbmovzx   eaxword [ebp-0x25 {var_29}]Opcode: 01 c1add     ecxeaxOpcode: 8b 45 b8mov     eaxdword [ebp-0x48 {var_4c}]Opcode: 89 88 8c 02 00 00mov     dword [eax+0x28c]ecxOpcode: 8b 88 00 02 00 00mov     ecxdword [eax+0x200]Opcode: 89 0c 24mov     dword [esp {var_9c}]ecxOpcode: e8 14 27 00 00call    sub_804aba4Opcode: 8b 4d b8mov     ecxdword [ebp-0x48 {var_4c}]Opcode: 8b 91 00 02 00 00mov     edxdword [ecx+0x200]Opcode: 89 14 24mov     dword [esp {var_9c}]edxOpcode: 89 45 98mov     dword [ebp-0x68 {var_6c}]eaxOpcode: e8 15 27 00 00call    sub_804abb9Opcode: b9 03 00 00 00mov     ecx0x3Opcode: 8b 55 98mov     edxdword [ebp-0x68 {var_6c}]Opcode: 0f af d0imul    edxeaxOpcode: 8b 45 b8mov     eaxdword [ebp-0x48 {var_4c}]Opcode: 2b 90 8c 02 00 00sub     edxdword [eax+0x28c]Opcode: 89 d0mov     eaxedxOpcode: 31 d2xor     edxedx  {0x0}Opcode: f7 f1div     ecxOpcode: 66 89 c7mov     diaxOpcode: 8b 45 b8mov     eaxdword [ebp-0x48 {var_4c}]Opcode: 66 89 b8 94 04 00 00mov     word [eax+0x494]diOpcode: 8b 88 00 02 00 00mov     ecxdword [eax+0x200]Opcode: 89 0c 24mov     dword [esp {var_9c}]ecxOpcode: e8 cb 26 00 00call    sub_804aba4Opcode: 8b 4d b8mov     ecxdword [ebp-0x48 {var_4c}]Opcode: 8b 91 00 02 00 00mov     edxdword [ecx+0x200]Opcode: 89 14 24mov     dword [esp {var_9c}]edxOpcode: 89 45 94mov     dword [ebp-0x6c {var_70}]eaxOpcode: e8 cc 26 00 00call    sub_804abb9Opcode: 8b 4d 94mov     ecxdword [ebp-0x6c {var_70}]Opcode: 0f af c8imul    ecxeaxOpcode: 6b c1 03imul    eaxecx0x3Opcode: c1 e8 03shr     eax0x3Opcode: 66 89 c7mov     diaxOpcode: 8b 45 b8mov     eaxdword [ebp-0x48 {var_4c}]Opcode: 66 89 b8 96 04 00 00mov     word [eax+0x496]diOpcode: 8b 88 00 02 00 00mov     ecxdword [eax+0x200]Opcode: 89 0c 24mov     dword [esp {var_9c}]ecxOpcode: e8 7b 26 00 00call    sub_804ab8fOpcode: 83 e8 04sub     eax0x4Opcode: 66 89 c7mov     diaxOpcode: 8b 45 b8mov     eaxdword [ebp-0x48 {var_4c}]Opcode: 66 89 b8 9a 04 00 00mov     word [eax+0x49a]diOpcode: 8b 88 00 02 00 00mov     ecxdword [eax+0x200]Opcode: 89 0c 24mov     dword [esp {var_9c}]ecxOpcode: e8 87 26 00 00call    sub_804abb9Opcode: 8b 4d b8mov     ecxdword [ebp-0x48 {var_4c}]Opcode: 8b 91 00 02 00 00mov     edxdword [ecx+0x200]Opcode: 89 14 24mov     dword [esp {var_9c}]edxOpcode: 89 45 90mov     dword [ebp-0x70 {var_74}]eaxOpcode: e8 49 26 00 00call    sub_804ab8fOpcode: 83 e8 04sub     eax0x4Opcode: 8b 4d 90mov     ecxdword [ebp-0x70 {var_74}]Opcode: 0f af c8imul    ecxeaxOpcode: 66 89 cfmov     dicxOpcode: 8b 45 b8mov     eaxdword [ebp-0x48 {var_4c}]Opcode: 66 89 b8 9e 04 00 00mov     word [eax+0x49e]diOpcode: 8b 88 00 02 00 00mov     ecxdword [eax+0x200]Opcode: 0f b7 90 9a 04 00 00movzx   edxword [eax+0x49a]Opcode: 89 0c 24mov     dword [esp {var_9c}]ecxOpcode: 89 54 24 04mov     dword [esp+0x4 {var_98}]edxOpcode: e8 a5 29 00 00call    sub_804af1aOpcode: 8b 4d b8mov     ecxdword [ebp-0x48 {var_4c}]Opcode: 66 c7 81 90 04 00 00 00 00mov     word [ecx+0x490]0x0Opcode: 66 c7 81 92 04 00 00 00 00mov     word [ecx+0x492]0x0Opcode: 66 c7 81 98 04 00 00 00 00mov     word [ecx+0x498]0x0Opcode: c7 45 d4 00 00 00 00mov     dword [ebp-0x2c {var_30}]0x0Opcode: 89 45 8cmov     dword [ebp-0x74 {var_78}]eaxBasic Block 15Opcode: b8 00 00 00 00mov     eax0x0Opcode: b9 05 00 00 00mov     ecx0x5Opcode: 8d 55 d8lea     edx[ebp-0x28] {var_2c}Opcode: c6 45 d8 c1mov     byte [ebp-0x28 {var_2c}]0xc1Opcode: 66 c7 45 d9 00 00mov     word [ebp-0x27 {var_2b}]0x0Opcode: 66 c7 45 db 05 00mov     word [ebp-0x25 {var_29}]0x5Opcode: 8b 75 b8mov     esidword [ebp-0x48 {var_4c}]Opcode: 8b be 00 02 00 00mov     edidword [esi+0x200]Opcode: 89 3c 24mov     dword [esp {var_9c}]ediOpcode: c7 44 24 04 00 00 00 00mov     dword [esp+0x4 {var_98}]0x0Opcode: 89 54 24 08mov     dword [esp+0x8 {var_94}]edxOpcode: c7 44 24 0c 05 00 00 00mov     dword [esp+0xc {var_90}]0x5Opcode: 89 45 acmov     dword [ebp-0x54 {var_58}]eaxOpcode: 89 4d a8mov     dword [ebp-0x58 {var_5c}]ecxOpcode: e8 56 29 00 00call    sub_804ad6eOpcode: 83 f8 05cmp     eax0x5Opcode: 74 09je      0x8048426Basic Block 16Opcode: b8 01 00 00 00mov     eax0x1Opcode: bb ad 00 00 00mov     ebx0xadOpcode: cd 80int     0x80Opcode: cd 80{ Does not return }Basic Block 17Opcode: 8b 15 ac 52 05 08mov     edxdword [data_80552ac]Opcode: a1 a8 52 05 08mov     eaxdword [data_80552a8]Opcode: c3retn    Basic Block 18Opcode: 8b 45 b8mov     eaxdword [ebp-0x48 {var_4c}]Opcode: 8b 88 8c 02 00 00mov     ecxdword [eax+0x28c]Opcode: 89 4d d0mov     dword [ebp-0x30 {var_34}]ecxBasic Block 19Opcode: 8b 45 d4mov     eaxdword [ebp-0x2c {var_30}]Opcode: 8b 4d b8mov     ecxdword [ebp-0x48 {var_4c}]Opcode: 66 c7 84 81 90 02 00 00 ff ffmov     word [ecx+eax*4+0x290]0xffffOpcode: 8b 45 d4mov     eaxdword [ebp-0x2c {var_30}]Opcode: 66 c7 84 81 92 02 00 00 ff ffmov     word [ecx+eax*4+0x292]0xffffOpcode: 8b 45 d4mov     eaxdword [ebp-0x2c {var_30}]Opcode: 83 c0 01add     eax0x1Opcode: 89 45 d4mov     dword [ebp-0x2c {var_30}]eaxOpcode: eb cfjmp     0x804859dBasic Block 20Opcode: c6 45 eb 01mov     byte [ebp-0x15 {var_19}]0x1Basic Block 21Opcode: c6 45 f7 00mov     byte [ebp-0x9 {var_d}]0x0Opcode: e9 89 03 00 00jmp     0x80487afBasic Block 22Opcode: 0f b6 45 c8movzx   eaxbyte [ebp-0x38 {var_3c}]Opcode: 3d ff 00 00 00cmp     eax0xffOpcode: 75 05jne     0x8048627Basic Block 23Opcode: c6 45 f7 00mov     byte [ebp-0x9 {var_d}]0x0Opcode: e9 98 01 00 00jmp     0x80487afBasic Block 24Opcode: 81 7d d4 80 00 00 00cmp     dword [ebp-0x2c {var_30}]0x80Opcode: 73 28jae     0x80485ceBasic Block 25Opcode: 0f b6 45 c8movzx   eaxbyte [ebp-0x38 {var_3c}]Opcode: 83 f8 01cmp     eax0x1Opcode: 75 05jne     0x8048635Basic Block 26Opcode: e9 b4 00 00 00jmp     0x80486dbBasic Block 27Opcode: 0f b6 45 c8movzx   eaxbyte [ebp-0x38 {var_3c}]Opcode: 83 f8 02cmp     eax0x2Opcode: 75 78jne     0x80486b6Basic Block 28Opcode: e9 8c 00 00 00jmp     0x80486c1Basic Block 29Opcode: f6 45 eb 01test    byte [ebp-0x15 {var_19}]0x1Opcode: 74 11je      0x80486f2Basic Block 30Opcode: c6 45 f7 00mov     byte [ebp-0x9 {var_d}]0x0Opcode: e9 f0 00 00 00jmp     0x80487afBasic Block 31Opcode: 66 8b 45 c9mov     axword [ebp-0x37 {var_3b}]Opcode: 8b 4d b8mov     ecxdword [ebp-0x48 {var_4c}]Opcode: 0f b7 91 90 04 00 00movzx   edxword [ecx+0x490]Opcode: 66 89 84 91 92 02 00 00mov     word [ecx+edx*4+0x292]axOpcode: 66 8b 81 92 04 00 00mov     axword [ecx+0x492]Opcode: 0f b7 91 90 04 00 00movzx   edxword [ecx+0x490]Opcode: 66 89 84 91 90 02 00 00mov     word [ecx+edx*4+0x290]axOpcode: 66 8b 81 90 04 00 00mov     axword [ecx+0x490]Opcode: 66 83 c0 01add     ax0x1Opcode: 66 89 81 90 04 00 00mov     word [ecx+0x490]axOpcode: 0f b7 55 c9movzx   edxword [ebp-0x37 {var_3b}]Opcode: 0f b7 b1 98 04 00 00movzx   esiword [ecx+0x498]Opcode: 39 f2cmp     edxesiOpcode: 7e 0ejle     0x8048699Basic Block 32Opcode: 8b 45 b8mov     eaxdword [ebp-0x48 {var_4c}]Opcode: 66 8b 88 92 04 00 00mov     cxword [eax+0x492]Opcode: 66 83 c1 01add     cx0x1Opcode: 66 89 88 92 04 00 00mov     word [eax+0x492]cxOpcode: e9 ff fe ff ffjmp     0x80485daBasic Block 33Opcode: 66 c7 45 c6 00 00mov     word [ebp-0x3a {var_3e}]0x0Basic Block 34Opcode: 8b 45 b8mov     eaxdword [ebp-0x48 {var_4c}]Opcode: 66 c7 80 9c 04 00 00 00 00mov     word [eax+0x49c]0x0Opcode: e9 a4 00 00 00jmp     0x8048796Basic Block 35Opcode: 8b 45 b8mov     eaxdword [ebp-0x48 {var_4c}]Opcode: 0f b7 88 90 04 00 00movzx   ecxword [eax+0x490]Opcode: 81 f9 80 00 00 00cmp     ecx0x80Opcode: 7c 09jl      0x80486b4Basic Block 36Opcode: 66 8b 45 c9mov     axword [ebp-0x37 {var_3b}]Opcode: 8b 4d b8mov     ecxdword [ebp-0x48 {var_4c}]Opcode: 66 89 81 98 04 00 00mov     word [ecx+0x498]axBasic Block 37Opcode: b8 03 00 00 00mov     eax0x3Opcode: 8d 4d c8lea     ecx[ebp-0x38] {var_3c}Opcode: 8b 55 b8mov     edxdword [ebp-0x48 {var_4c}]Opcode: 8b b2 00 02 00 00mov     esidword [edx+0x200]Opcode: 8b 7d d0mov     edidword [ebp-0x30 {var_34}]Opcode: 89 34 24mov     dword [esp {var_9c}]esiOpcode: 89 7c 24 04mov     dword [esp+0x4 {var_98}]ediOpcode: 89 4c 24 08mov     dword [esp+0x8 {var_94}]ecxOpcode: c7 44 24 0c 03 00 00 00mov     dword [esp+0xc {var_90}]0x3Opcode: 89 45 88mov     dword [ebp-0x78 {var_7c}]eaxOpcode: e8 19 28 00 00call    sub_804ae22Opcode: 83 f8 03cmp     eax0x3Opcode: 74 09je      0x8048617Basic Block 38Opcode: 8b 45 b8mov     eaxdword [ebp-0x48 {var_4c}]Opcode: 89 04 24mov     dword [esp {var_9c}]eaxOpcode: 0f b7 4d c6movzx   ecxword [ebp-0x3a {var_3e}]Opcode: 89 4c 24 04mov     dword [esp+0x4 {var_98}]ecxOpcode: e8 9f 00 00 00call    sub_80487c5Opcode: 8d 4d bflea     ecx[ebp-0x41] {var_45}Opcode: ba 01 00 00 00mov     edx0x1Opcode: 89 45 c0mov     dword [ebp-0x40 {var_44}]eaxOpcode: 8b 45 b8mov     eaxdword [ebp-0x48 {var_4c}]Opcode: 8b b0 00 02 00 00mov     esidword [eax+0x200]Opcode: 8b 7d c0mov     edidword [ebp-0x40 {var_44}]Opcode: 89 34 24mov     dword [esp {var_9c}]esiOpcode: 89 7c 24 04mov     dword [esp+0x4 {var_98}]ediOpcode: 89 4c 24 08mov     dword [esp+0x8 {var_94}]ecxOpcode: c7 44 24 0c 01 00 00 00mov     dword [esp+0xc {var_90}]0x1Opcode: 89 55 84mov     dword [ebp-0x7c {var_80}]edxOpcode: e8 ca 26 00 00call    sub_804ae22Opcode: 83 f8 01cmp     eax0x1Opcode: 74 06je      0x8048763Basic Block 39Opcode: c6 45 f7 00mov     byte [ebp-0x9 {var_d}]0x0Opcode: e9 9c 00 00 00jmp     0x80487afBasic Block 40Opcode: 8b 45 b8mov     eaxdword [ebp-0x48 {var_4c}]Opcode: 66 8b 88 98 04 00 00mov     cxword [eax+0x498]Opcode: 66 83 c1 01add     cx0x1Opcode: 66 89 88 98 04 00 00mov     word [eax+0x498]cxOpcode: c6 45 f7 01mov     byte [ebp-0x9 {var_d}]0x1Basic Block 41Opcode: eb 09jmp     0x80486bfBasic Block 42Opcode: c6 45 f7 00mov     byte [ebp-0x9 {var_d}]0x0Opcode: e9 fb 00 00 00jmp     0x80487afBasic Block 43Opcode: 0f b6 45 bfmovzx   eaxbyte [ebp-0x41 {var_45}]Opcode: 3d ff 00 00 00cmp     eax0xffOpcode: 75 02jne     0x8048770Basic Block 44Opcode: c6 45 f7 00mov     byte [ebp-0x9 {var_d}]0x0Opcode: eb 4cjmp     0x80487afBasic Block 45Opcode: eb 00jmp     0x80486c1Basic Block 46Opcode: 66 8b 45 c6mov     axword [ebp-0x3a {var_3e}]Opcode: 66 83 c0 01add     ax0x1Opcode: 66 89 45 c6mov     word [ebp-0x3a {var_3e}]axOpcode: b0 01mov     al0x1Opcode: a8 01test    al0x1Opcode: 0f 85 72 ff ff ffjne     0x80486f8Basic Block 47Opcode: eb 18jmp     0x8048788Basic Block 48Opcode: 0f b7 45 c6movzx   eaxword [ebp-0x3a {var_3e}]Opcode: 8b 4d b8mov     ecxdword [ebp-0x48 {var_4c}]Opcode: 0f b7 91 9e 04 00 00movzx   edxword [ecx+0x49e]Opcode: 39 d0cmp     eaxedxOpcode: 7c 09jl      0x8048713Basic Block 49Opcode: eb 00jmp     0x8048788Basic Block 50Opcode: 66 8b 45 c6mov     axword [ebp-0x3a {var_3e}]Opcode: 8b 4d b8mov     ecxdword [ebp-0x48 {var_4c}]Opcode: 66 89 81 9c 04 00 00mov     word [ecx+0x49c]ax