Function at 0x406740
Capabilities:
Query environment variable

Disassembly:
push ebp
xor eax, eax
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4c
mov edx, dword [0x40d018]
test edx, edx
setle al
or dword [0x417f88], eax
je 0x406a10
mov dword [0x40d018], 1
xor edx, edx
mov dword [0x417f88], 0
mov dword [0x417f9c], edx
mov edi, edx
mov ebx, edx
mov dword [0x417fa0], edx
mov dword [0x417f98], edx
mov dword [0x417f94], 0
cmp ebx, edx
jl 0x406a89
mov ebx, dword [ebp + 0xc]
add edi, 1
mov esi, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
mov dword [0x417fa0], edi
cmp ebx, edi
mov dword [0x417f9c], edi
jle 0x406827
mov eax, dword [esi + edi*4]
mov dword [0x417f98], edi
cmp byte [eax], 0x2d
mov dword [0x417f94], eax
je 0x406870
movsx eax, byte [ecx]
cmp al, 0x2d
je 0x406c66
mov edx, dword [0x417f90]
test edx, edx
jne 0x406840
test ah, 0x10
jne 0x406860
cmp eax, 0x2b
mov dword [ebp - 0x2c], ecx
mov dword [0x417f90], 0x1000
je 0x406a06
mov dword [esp], str.POSIXLY_CORRECT
call sym._getenv
mov ecx, dword [ebp - 0x2c]
test eax, eax
je 0x406c23
mov eax, dword [0x417f90]
or eax, 0x10
mov dword [0x417f90], eax
mov eax, dword [0x417fa0]
mov dword [0x40d018], eax
mov eax, 0xffffffff
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
test ah, 0x10
jne 0x406860
and edx, 0x10
test edx, edx
jne 0x406827
mov eax, dword [0x417f9c]
lea edi, [eax + 1]
jmp 0x4067b2
or eax, edx
mov dword [0x417f90], eax
and eax, 0x10
mov edx, eax
jmp 0x406848
lea edx, [eax + 1]
mov dword [0x417f94], edx
movzx edx, byte [eax + 1]
test dl, dl
je 0x4067d3
cmp dl, 0x2d
jne 0x406b4f
cmp byte [eax + 2], 0
je 0x406ef3
mov ebx, dword [ebp + 8]
test ebx, ebx
jle 0x406b60
add eax, 2
mov dword [0x417f94], eax
mov dword [ebp + 8], 1
mov edi, dword [ebp + 0x18]
mov eax, dword [ebp + 0x1c]
mov dword [0x417f8c], 0
test edi, edi
mov dword [ebp - 0x3c], eax
je 0x406d68
mov eax, dword [edi]
test eax, eax
je 0x406d68
mov esi, dword [0x417f94]
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x2c], 0
lea ebx, [esi + 1]
mov dword [ebp - 0x30], esi
mov esi, edi
mov dword [ebp - 0x34], ebx
lea ebx, [edi + 0x10]
mov ecx, dword [ebp - 0x30]
movzx edx, byte [ecx]
test dl, dl
je 0x4069a7
mov ecx, dword [ebp - 0x34]
jmp 0x406922
add ecx, 1
movzx edx, byte [ecx - 1]
add eax, 1
test dl, dl
je 0x4069a7
cmp dl, byte [eax]
je 0x406910
cmp dl, 0x3d
je 0x4069a1
mov esi, ebx
add ebx, 0x10
mov eax, dword [ebx - 0x10]
add dword [ebp - 0x2c], 1
test eax, eax
jne 0x4068f9
cmp dword [ebp - 0x38], 0xffffffff
je 0x406d68
mov eax, dword [ebp - 0x3c]
mov dword [0x417f94], 0
test eax, eax
je 0x40695b
mov ebx, dword [ebp - 0x38]
mov dword [eax], ebx
mov ecx, dword [0x417f9c]
mov edx, dword [0x417f8c]
lea eax, [ecx + 1]
test edx, edx
mov dword [0x40d018], eax
je 0x407229
mov eax, dword [ebp - 0x38]
shl eax, 4
add edi, eax
mov eax, dword [edi + 4]
test eax, eax
je 0x4071b8
mov eax, dword [edi + 8]
test eax, eax
je 0x4071b0
mov edx, dword [edi + 0xc]
mov dword [eax], edx
xor eax, eax
jmp 0x406836
mov dword [0x417f8c], ecx
cmp byte [eax], 0
jne 0x406a22
mov eax, dword [ebp - 0x3c]
mov dword [0x417f94], 0
test eax, eax
je 0x4069c5
mov eax, dword [ebp - 0x3c]
mov ebx, dword [ebp - 0x2c]
mov dword [eax], ebx
mov edx, dword [0x417f9c]
mov ecx, dword [0x417f8c]
lea eax, [edx + 1]
test ecx, ecx
mov dword [0x40d018], eax
je 0x406e9c
mov edi, dword [esi + 4]
test edi, edi
je 0x406ca2
mov eax, dword [esi + 8]
test eax, eax
je 0x406d13
mov edx, dword [esi + 0xc]
mov dword [eax], edx
lea esp, [ebp - 0xc]
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x1010
jmp 0x406822
mov ecx, dword [0x417fa0]
cmp edx, ecx
jge 0x406a50
sub edx, 1
jmp 0x406778
cmp dword [ebp - 0x38], 0xffffffff
jne 0x406f39
mov eax, dword [ebp - 0x2c]
mov esi, ebx
add ebx, 0x10
add dword [ebp - 0x2c], 1
mov dword [ebp - 0x38], eax
mov eax, dword [ebx - 0x10]
test eax, eax
jne 0x4068f9
jmp 0x40693b
mov edi, dword [0x417f9c]
lea eax, [edi + 1]
cmp edx, eax
mov dword [ebp - 0x30], eax
jg 0x406b88
mov esi, dword [0x417f94]
test esi, esi
je 0x406a79
movzx ebx, byte [esi]
test bl, bl
jne 0x406ba8
mov edx, dword [0x417f98]
mov ebx, ecx
cmp ebx, edx
jge 0x4067a0
sub edi, edx
lea ecx, [edi + 1]
lea eax, [ecx*4 + 0x12]
and eax, 0xfffffff0
mov dword [ebp - 0x30], esp
mov dword [ebp - 0x34], edi
call fcn.00405a30
sub esp, eax
mov eax, dword [ebp + 0x10]
lea esi, [esp + 0x10]
lea edi, [eax + edx*4]
xor eax, eax
test ecx, ecx
jle 0x406ac8
mov dword [ebp - 0x2c], edx
mov edx, dword [edi + eax*4]
mov dword [esi + eax*4], edx
add eax, 1
cmp ecx, eax
jne 0x406ab8
mov edx, dword [ebp - 0x2c]
lea eax, [edx - 1]
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ebx
mov dword [0x417f98], eax
lea eax, [edi + edx*4]
lea edi, [edi + ebx*4]
jl 0x406b0f
mov dword [ebp - 0x38], edx
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x34], ecx
lea esi, [esi]
mov ecx, dword [eax - 4]
mov dword [eax + edx*4], ecx
sub eax, 4
cmp eax, edi
jne 0x406af0
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
sub eax, edx
add eax, ebx
mov dword [0x417f98], eax
mov eax, dword [ebp + 0x10]
lea edx, [eax + ebx*4]
xor eax, eax
test ecx, ecx
jle 0x406b2d
nop
lea esi, [esi]
mov edi, dword [esi + eax*4]
mov dword [edx + eax*4], edi
add eax, 1
cmp ecx, eax
jne 0x406b20
add ecx, ebx
mov dword [0x417fa0], ecx
mov edi, dword [0x417f9c]
mov esp, dword [ebp - 0x30]
mov ebx, dword [ebp + 0xc]
mov esi, dword [ebp + 0x10]
add edi, 1
mov ecx, dword [ebp + 0x14]
jmp 0x4067b2
cmp dword [ebp + 8], 1
jg 0x4068b2
mov dword [ebp + 8], 0
mov eax, dword [ebp + 0x14]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sym._getopt_parse
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
lea edi, [edx - 1]
mov ebx, ecx
mov edx, dword [0x417f98]
mov dword [0x417f9c], edi
mov dword [0x417f94], 0
jmp 0x406798
movsx eax, bl
mov dword [0x40d010], eax
lea ecx, [esi + 1]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0x14]
mov dword [0x417f94], ecx
movzx edx, byte [eax]
mov eax, dword [ebp + 0x14]
cmp dl, 0x2d
je 0x406bcf
cmp dl, 0x2b
jne 0x406bd9
mov edx, dword [ebp + 0x14]
add eax, 1
movzx edx, byte [edx + 1]
cmp dl, 0x3a
jne 0x406bed
jmp 0x406c96
add eax, 1
movzx edx, byte [eax]
test dl, dl
je 0x406c31
cmp bl, dl
jne 0x406be3
cmp byte [eax + 1], 0x3a
je 0x406d1b
test ecx, ecx
mov dword [0x417f8c], 0
je 0x406c0f
cmp byte [esi + 1], 0
jne 0x406c12
mov edi, dword [ebp - 0x30]
mov dword [0x40d018], edi
mov eax, dword [ebp - 0x2c]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov edx, dword [0x417f90]
and edx, 0x10
jmp 0x406848
cmp dword [ebp + 8], 2
je 0x406ecd
mov esi, dword [0x40d014]
test esi, esi
jne 0x406e1d
test ecx, ecx
je 0x406c54
cmp byte [ecx], 0
mov eax, edi
jne 0x406c57
lea eax, [edi + 1]
mov dword [0x40d018], eax
mov eax, 0x3f
jmp 0x406836
mov ebx, dword [ebp + 0x10]
mov eax, dword [0x417f9c]
mov dword [0x417f94], 0
lea edx, [eax + 1]
mov eax, dword [ebx + eax*4]
mov dword [0x40d018], edx
mov dword [0x417f8c], eax
lea esp, [ebp - 0xc]
mov eax, 1
pop ebx
pop esi
pop edi
pop ebp
ret
movzx edx, byte [eax + 1]
add eax, 1
jmp 0x406bed
mov ebx, dword [0x40d014]
mov eax, dword [ebp + 0x10]
test ebx, ebx
mov eax, dword [eax]
je 0x406d01
cmp dword [ebp + 8], 1
mov ecx, 0x2d2d
mov word [ebp - 0x1b], cx
mov byte [ebp - 0x19], 0
je 0x406cc8
mov byte [ebp - 0x1a], 0
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 4], str._s:
lea ebx, [eax + 0x40]
mov dword [esp], ebx
call sym._fprintf
mov eax, dword [esi]
mov dword [esp + 4], str.option___s_s_doesnt_accept_an_argument_n
mov dword [esp], ebx
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1b]
mov dword [esp + 8], eax
call sym._fprintf
mov eax, dword [esi + 0xc]
mov dword [0x40d010], eax
mov eax, 0x3f
jmp 0x406836
mov eax, dword [esi + 0xc]
jmp 0x406836
mov dword [0x417f8c], ecx
cmp byte [esi + 1], 0
jne 0x406e15
cmp byte [eax + 2], 0x3a
je 0x406fa3
mov eax, dword [ebp + 0xc]
sub eax, edi
cmp eax, 1
jle 0x407079
mov eax, dword [ebp - 0x30]
add edi, 2
mov ebx, dword [ebp + 0x10]
mov dword [0x417f9c], eax
mov eax, dword [ebx + eax*4]
mov dword [0x417f8c], eax
mov dword [0x417f94], 0
jmp 0x406c12
cmp dword [ebp + 8], 1
je 0x406e56
mov ebx, dword [0x417f94]
test ebx, ebx
je 0x406e56
movzx ecx, byte [ebx]
test cl, cl
je 0x406e56
mov esi, dword [ebp + 0x14]
test esi, esi
je 0x406e56
mov eax, dword [ebp + 0x14]
movzx edi, byte [eax]
mov eax, edi
test al, al
je 0x406e56
mov eax, edi
mov esi, dword [ebp + 0x14]
cmp al, 0x2d
sete dl
cmp al, 0x2b
mov eax, dword [ebp + 0x14]
sete byte [ebp - 0x2c]
add eax, 1
or dl, byte [ebp - 0x2c]
mov byte [ebp - 0x2c], dl
je 0x406dc6
mov esi, eax
lea eax, [esi + 1]
mov dword [ebp - 0x30], eax
lea esi, [esi]
add ebx, 1
mov edx, edi
cmp byte [ebp - 0x2c], 0
je 0x406de2
mov eax, dword [ebp + 0x14]
movzx edx, byte [eax + 1]
cmp dl, 0x3a
mov eax, esi
jne 0x406dfa
jmp 0x406e90
add eax, 1
movzx edx, byte [eax]
test dl, dl
je 0x406e56
cmp dl, cl
jne 0x406df0
cmp byte [eax + 1], 0x3a
je 0x406b60
movzx ecx, byte [ebx]
test cl, cl
jne 0x406dd0
nop
jmp 0x406b60
mov edi, dword [ebp - 0x30]
jmp 0x406d59
mov eax, dword [ebp - 0x2c]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov dword [esp + 4], str._s:_invalid_option_____c_n
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call sym._fprintf
mov ecx, dword [0x417f94]
mov edi, dword [0x417f9c]
jmp 0x406c49
mov eax, dword [0x417f9c]
mov dword [0x40d010], 0
mov dword [0x417f94], 0
lea edx, [eax + 1]
mov dword [0x40d018], edx
mov edx, dword [0x40d014]
test edx, edx
jne 0x407190
mov eax, 0x3f
jmp 0x406836
movzx edx, byte [esi + 1]
mov eax, dword [ebp - 0x30]
jmp 0x406dfa
cmp dword [esi + 4], 1
jne 0x4069ec
cmp dword [ebp + 0xc], eax
jle 0x406fb5
mov ebx, dword [ebp + 0x10]
add edx, 2
mov dword [0x417f9c], eax
mov dword [0x40d018], edx
mov eax, dword [ebx + eax*4]
mov dword [0x417f8c], eax
jmp 0x4069ec
mov eax, dword [0x40d014]
test eax, eax
jne 0x407043
mov dword [0x417f94], 0
mov dword [0x40d010], 0
jmp 0x406c54
mov ecx, dword [0x417fa0]
cmp ecx, edi
jge 0x406f20
mov edx, edi
mov ebx, dword [ebp + 0x10]
jmp 0x406f06
mov edi, edx
mov esi, dword [ebx + edx*4 - 4]
cmp ecx, edi
mov dword [ebx + edx*4], esi
lea edx, [edi - 1]
jl 0x406f04
mov ebx, dword [ebp + 0x10]
mov dword [0x417f98], edx
mov dword [ebx + ecx*4], eax
add ecx, 1
mov eax, 0xffffffff
mov dword [0x417fa0], ecx
mov dword [0x40d018], ecx
jmp 0x406836
cmp dword [ebp + 8], 2
je 0x4070d2
mov eax, dword [0x417f9c]
mov ecx, dword [0x40d014]
mov dword [0x40d010], 0
mov dword [0x417f94], 0
lea edx, [eax + 1]
test ecx, ecx
mov dword [0x40d018], edx
je 0x406e86
mov ebx, dword [ebp + 0x10]
mov eax, dword [ebx + eax*4]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov dword [esp + 4], str._s:_option___s_is_ambiguous_n
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call sym._fprintf
jmp 0x406e86
mov dword [0x417f8c], 0
mov edi, dword [ebp - 0x30]
jmp 0x406d59
mov eax, dword [ebp + 0x14]
movzx eax, byte [eax]
cmp al, 0x2d
je 0x406fc3
cmp al, 0x2b
jne 0x406fca
mov eax, dword [ebp + 0x14]
movzx eax, byte [eax + 1]
mov edx, dword [0x40d014]
xor ebx, ebx
cmp al, 0x3a
mov eax, dword [ebp + 0x10]
setne bl
lea ebx, [ebx + ebx*4 + 0x3a]
test edx, edx
mov eax, dword [eax]
je 0x407034
cmp dword [ebp + 8], 1
mov edi, 0x2d2d
mov word [ebp - 0x1b], di
mov byte [ebp - 0x19], 0
je 0x406ffb
mov byte [ebp - 0x1a], 0
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 4], str._s:
lea edi, [eax + 0x40]
mov dword [esp], edi
call sym._fprintf
mov eax, dword [esi]
mov dword [esp + 4], str.option___s_s_requires_an_argument_n
mov dword [esp], edi
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1b]
mov dword [esp + 8], eax
call sym._fprintf
mov eax, dword [esi + 0xc]
mov dword [0x40d010], eax
mov eax, ebx
jmp 0x406836
mov dword [0x417f94], esi
mov dword [esp + 0xc], esi
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov dword [esp + 4], str._s:_unrecognised_option____s_n
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call sym._fprintf
mov edi, dword [0x417f9c]
jmp 0x406eda
mov eax, dword [0x40d014]
test eax, eax
jne 0x4070a8
mov eax, dword [ebp + 0x14]
movzx eax, byte [eax]
cmp al, 0x2d
je 0x407090
cmp al, 0x2b
jne 0x407097
mov eax, dword [ebp + 0x14]
movzx eax, byte [eax + 1]
cmp al, 0x3a
setne al
movzx eax, al
lea eax, [eax + eax*4 + 0x3a]
jmp 0x406836
mov eax, dword [ebp - 0x2c]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov dword [esp + 4], str._s:_option_requires_an_argument_____c_n
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call sym._fprintf
jmp 0x407082
mov eax, dword [ebp - 0x30]
movzx ecx, byte [eax]
test cl, cl
je 0x406f43
mov ebx, dword [ebp + 0x14]
test ebx, ebx
je 0x406f43
mov eax, dword [ebp + 0x14]
movzx esi, byte [eax]
mov eax, esi
test al, al
je 0x406f43
mov eax, esi
mov ebx, dword [ebp + 0x14]
cmp al, 0x2d
sete dl
cmp al, 0x2b
sete al
mov edi, eax
mov eax, dword [ebp + 0x14]
add eax, 1
mov dword [ebp - 0x34], eax
mov eax, edi
or al, dl
mov byte [ebp - 0x2c], al
je 0x407121
mov ebx, dword [ebp - 0x34]
lea edi, [ebx + 1]
cmp byte [ebp - 0x2c], 0
mov edx, esi
je 0x407133
mov eax, dword [ebp + 0x14]
movzx edx, byte [eax + 1]
cmp dl, 0x3a
mov eax, ebx
jne 0x407150
movzx edx, byte [ebx + 1]
mov eax, edi
jmp 0x407150
add eax, 1
movzx edx, byte [eax]
test dl, dl
je 0x406f43
cmp cl, dl
jne 0x407142
cmp byte [eax + 1], 0x3a
je 0x407168
add dword [ebp - 0x30], 1
mov eax, dword [ebp - 0x30]
movzx ecx, byte [eax]
test cl, cl
jne 0x407124
mov eax, dword [ebp + 0x14]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], 2
mov dword [esp + 4], eax
call sym._getopt_parse
jmp 0x406836
mov ebx, dword [ebp + 0x10]
mov eax, dword [ebx + eax*4]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov dword [esp + 4], str._s:_unrecognised_option___s_n
mov dword [esp + 8], eax
jmp 0x406f8e
mov eax, dword [edi + 0xc]
jmp 0x406836
mov esi, dword [0x40d014]
mov eax, dword [ebp + 0x10]
test esi, esi
mov eax, dword [eax]
je 0x407217
cmp dword [ebp + 8], 1
mov ebx, 0x2d2d
mov word [ebp - 0x1b], bx
mov byte [ebp - 0x19], 0
je 0x4071de
mov byte [ebp - 0x1a], 0
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 4], str._s:
lea ebx, [eax + 0x40]
mov dword [esp], ebx
call sym._fprintf
mov eax, dword [edi]
mov dword [esp + 4], str.option___s_s_doesnt_accept_an_argument_n
mov dword [esp], ebx
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1b]
mov dword [esp + 8], eax
call sym._fprintf
mov eax, dword [edi + 0xc]
mov dword [0x40d010], eax
mov eax, 0x3f
jmp 0x406836
mov edx, dword [ebp - 0x38]
shl edx, 4
add edi, edx
cmp dword [edi + 4], 1
jne 0x40698a
cmp dword [ebp + 0xc], eax
jle 0x40725e
mov ebx, dword [ebp + 0x10]
add ecx, 2
mov dword [0x417f9c], eax
mov dword [0x40d018], ecx
mov eax, dword [ebx + eax*4]
mov dword [0x417f8c], eax
jmp 0x40698a
mov eax, dword [ebp + 0x14]
movzx eax, byte [eax]
cmp al, 0x2d
je 0x40726c
cmp al, 0x2b
jne 0x407273
mov eax, dword [ebp + 0x14]
movzx eax, byte [eax + 1]
mov ecx, dword [0x40d014]
xor ebx, ebx
cmp al, 0x3a
mov eax, dword [ebp + 0x10]
setne bl
lea ebx, [ebx + ebx*4 + 0x3a]
test ecx, ecx
mov eax, dword [eax]
je 0x4072dd
cmp dword [ebp + 8], 1
mov edx, 0x2d2d
mov word [ebp - 0x1b], dx
mov byte [ebp - 0x19], 0
je 0x4072a4
mov byte [ebp - 0x1a], 0
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 4], str._s:
lea esi, [eax + 0x40]
mov dword [esp], esi
call sym._fprintf
mov eax, dword [edi]
mov dword [esp + 4], str.option___s_s_requires_an_argument_n
mov dword [esp], esi
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x1b]
mov dword [esp + 8], eax
call sym._fprintf
mov eax, dword [edi + 0xc]
mov dword [0x40d010], eax
mov eax, ebx
jmp 0x406836