Function at 0x494e6e
Capabilities:
Get number of processors

Disassembly:
pop edi
cmp dword [ebp - 0x1660], 0
jne 0x494c0d
mov dword [ebp - 0x2d0], 0
jmp 0x494eb4
mov ecx, dword [ebp - 0x1660]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xd18], eax
push edi
push ebx
add esp, 4
xor edi, 0x122af
and edi, 0xdd53
jmp 0x494c36
pop edi
push edi
sub edi, 0x124a5
and edi, 0xed4f
and edi, 0xbe8d
sub edi, 0xb6c1
pop edi
cmp dword [ebp - 0xd18], 0
jne 0x494c69
mov dword [ebp - 0x2d0], 0
jmp 0x494eb4
mov ecx, dword [ebp - 0xd18]
mov dword [ebp - 0x518], ecx
push edi
sub edi, 0x1775c
pop edi
push ebx
push edx
add esp, 4
les eax, [ecx + eax*4]
jecxz 0x494c96
cmp eax, dword [eax]
add byte [ecx + 0x1363eb], al
add byte [ecx + 0x4cc4e3], al
add byte [ebx + 0x56], bl
push esi
add esp, 4
add esi, 0x9cf7
and esi, 0x6737
pop esi
lea edx, [ebp - 0x1790]
mov dword [ebp - 0xd14], edx
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xd10], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
xor eax, eax
mov word [ebp - 0x38], ax
push eax
push eax
add esp, 4
and eax, 0xdf63
jmp 0x494ce2
or eax, 0x5c9
pop eax
push ecx
jmp 0x494cf3
jmp 0x494cfc
add ecx, 0x18ee
pop ecx
mov ecx, dword [ebp - 0xd10]
mov dx, word [ecx]
mov word [ebp - 0x108e], dx
mov eax, dword [ebp - 0xd10]
add eax, 2
mov dword [ebp - 0xd10], eax
mov cx, word [ebp - 0x108e]
mov word [ebp - 0x21c], cx
mov edx, dword [ebp - 0xd14]
mov ax, word [edx]
mov word [ebp - 0x1090], ax
mov ecx, dword [ebp - 0xd14]
add ecx, 2
mov dword [ebp - 0xd14], ecx
mov dx, word [ebp - 0x1090]
mov word [ebp - 0x38], dx
push edx
jmp 0x494d62
pop edx
push ecx
push ebx
add esp, 4
call 0x494d74
add byte [ebx + 0x49], al
cmp edi, dword [eax]
xor eax, 0xeb04c483
add al, 0x48
inc esi
xor al, 0x42
pop ecx
push ecx
xor ecx, 0x17e63
sub ecx, 0xa718
pop ecx
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x494da9
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1668], ecx
jmp 0x494e03
movzx eax, word [ebp - 0x21c]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x494cd1
movzx edx, word [ebp - 0x21c]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x494cd1
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x494ded
mov dword [ebp - 0x1664], 0xffffffff
jmp 0x494df7
mov dword [ebp - 0x1664], 1
mov eax, dword [ebp - 0x1664]
mov dword [ebp - 0x1668], eax
cmp dword [ebp - 0x1668], 0
jne 0x494e4c
push edi
push esi
add esp, 4
or edi, 0xf192
jmp 0x494e1f
xor edi, 0xbfe9
pop edi
push ecx
call 0x494e34
add byte [eax + 0x44], cl
dec ecx
xor al, 0x39
inc esi
xor al, byte [ebx - 0xe7efb3c]
mov dh, byte [0x8b590000]
invalid
push eax
or eax, 0x16ef0
sub eax, 0xbf82
pop eax
push esi
push ecx
add esp, 4
call 0x494e6e
add byte [ecx + 0x3f], cl
xor eax, 0x33343d48
inc ecx
inc ebx
add esp, 4
and esi, 0x614
sub esi, 0xab94
pop esi
mov edx, dword [ebp - 0x518]
mov eax, dword [edx]
mov dword [ebp - 0x518], eax
mov ecx, dword [ebp - 0x518]
cmp ecx, dword [ebp - 0xd18]
je 0x494eaa
mov edx, dword [ebp - 0x518]
cmp dword [edx + 0x30], 0
jne 0x494c75
mov dword [ebp - 0x2d0], 0
push edi
or edi, 0x4c7c
sub edi, 0x183cc
or edi, 0x13420
add edi, 0xdf36
pop edi
push ecx
push ebx
add esp, 4
and ecx, 0x1020b
and ecx, 0x155ad
add ecx, 0x15c39
sar dword [ecx], 0x5c
add dword [eax], eax
pop ecx
cmp dword [ebp - 0x2d0], 0
jne 0x4957eb
mov eax, 0x6b
mov word [ebp - 0x1830], ax
mov ecx, 0x65
mov word [ebp - 0x182e], cx
mov edx, 0x72
mov word [ebp - 0x182c], dx
mov eax, 0x6e
mov word [ebp - 0x182a], ax
mov ecx, 0x65
mov word [ebp - 0x1828], cx
mov edx, 0x6c
mov word [ebp - 0x1826], dx
mov eax, 0x33
mov word [ebp - 0x1824], ax
mov ecx, 0x32
mov word [ebp - 0x1822], cx
mov edx, 0x2e
mov word [ebp - 0x1820], dx
mov eax, 0x64
mov word [ebp - 0x181e], ax
mov ecx, 0x6c
mov word [ebp - 0x181c], cx
mov edx, 0x6c
mov word [ebp - 0x181a], dx
xor eax, eax
mov word [ebp - 0x1818], ax
push esi
push edi
add esp, 4
jmp 0x494f99
or esi, 0xde6b
and esi, 0x12cba
pop esi
push ecx
push edi
add esp, 4
add ecx, 0x17b0e
sub ecx, 0x9099
sub ecx, 0xd6d5
pop ecx
mov byte [ebp - 0x8a0], 0x4c
mov byte [ebp - 0x89f], 0x6f
mov byte [ebp - 0x89e], 0x61
mov byte [ebp - 0x89d], 0x64
mov byte [ebp - 0x89c], 0x4c
mov byte [ebp - 0x89b], 0x69
mov byte [ebp - 0x89a], 0x62
mov byte [ebp - 0x899], 0x72
mov byte [ebp - 0x898], 0x61
mov byte [ebp - 0x897], 0x72
mov byte [ebp - 0x896], 0x79
mov byte [ebp - 0x895], 0x57
mov byte [ebp - 0x894], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1a28], ecx
mov edx, dword [ebp - 0x1a28]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1a2c], eax
mov ecx, dword [ebp - 0x1a2c]
mov dword [ebp - 0x166c], ecx
push eax
push ebx
add esp, 4
add eax, 0x17960
pop eax
push edi
call 0x49505e
add byte [esi + 0x47], cl
inc edx
xor dh, byte [ebx]
cmp byte [eax + 0x4e], cl
cmp eax, 0x4c4834a
call 0x49506f
add byte [esi], dh
dec esp
dec edx
cmp eax, 0x393c4736
add esp, 4
pop edi
cmp dword [ebp - 0x166c], 0
jne 0x49508b
mov dword [ebp - 0x768], 0
jmp 0x495332
mov edx, dword [ebp - 0x166c]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xd24], ecx
push eax
push edi
add esp, 4
call 0x4950ae
add byte [esp + edi + 0x37], al
dec edi
inc esp
inc eax
add esp, 4
call 0x4950bf
add byte [edx + 0x47], al
dec esi
inc ecx
dec edx
dec edx
add esp, 4
pop eax
push edi
push esi
add esp, 4
add edi, 0xb909
pop edi
cmp dword [ebp - 0xd24], 0
jne 0x4950e7
mov dword [ebp - 0x768], 0
jmp 0x495332
mov edx, dword [ebp - 0xd24]
mov dword [ebp - 0x51c], edx
push edx
push ecx
add esp, 4
call 0x495107
add byte [ecx + 0x4a], cl
cmp al, byte [ebp + 0x4c]
inc eax
dec eax
dec esp
inc ebx
add esp, 4
or edx, 0xeee7
or edx, 0x68f9
pop edx
push edx
add edx, 0x59ce
add edx, 0x11e50
pop edx
lea eax, [ebp - 0x1830]
mov dword [ebp - 0xd20], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xd1c], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push ecx
push edi
add esp, 4
or ecx, 0x102e6
xor ecx, 0xdbc1
xor ecx, 0x10d20
or ecx, 0x10865
pop ecx
push eax
jmp 0x495174
or eax, 0xe7fa
sub eax, 0x153cd
pop eax
mov edx, dword [ebp - 0xd1c]
mov ax, word [edx]
mov word [ebp - 0x1092], ax
mov ecx, dword [ebp - 0xd1c]
add ecx, 2
mov dword [ebp - 0xd1c], ecx
mov dx, word [ebp - 0x1092]
mov word [ebp - 0x220], dx
mov eax, dword [ebp - 0xd20]
mov cx, word [eax]
mov word [ebp - 0x1094], cx
mov edx, dword [ebp - 0xd20]
add edx, 2
mov dword [ebp - 0xd20], edx
mov ax, word [ebp - 0x1094]
mov word [ebp - 0x3c], ax
push edi
sub edi, 0x14bff
call 0x4951ef
add byte [ebx], dh
cmp eax, 0x3f35393f
inc ebp
dec ebp
xor al, 0x3e
add esp, 4
pop edi
push ecx
push ecx
add esp, 4
jmp 0x495201
pop ecx
push esi
and esi, 0x2bd3
pop esi
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x495227
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x16b4], edx
jmp 0x495281
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x49514f
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x49514f
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x49526b
mov dword [ebp - 0x1670], 0xffffffff
jmp 0x495275
mov dword [ebp - 0x1670], 1
mov ecx, dword [ebp - 0x1670]
mov dword [ebp - 0x16b4], ecx
cmp dword [ebp - 0x16b4], 0
jne 0x4952ca
push edi
push edx
add esp, 4
add edi, 0x17b2c
sub edi, 0x8a39
sub edi, 0xa778
pop edi
push edx
and edx, 0x6183
sub edx, 0x161c9
and edx, 0x8343
and edx, 0x1208c
pop edx
mov edx, dword [ebp - 0x51c]
mov dword [ebp - 0x768], edx
jmp 0x495332
push ecx
push edx
add esp, 4
xor ecx, 0x16287
or ecx, 0x35eb
or ecx, 0x5512
pop ecx
push eax
push edx
add esp, 4
xor eax, 0x180e6
add eax, 0x1806f
pop eax
push edi
xor edi, 0x4eaa
pop edi
mov eax, dword [ebp - 0x51c]
mov ecx, dword [eax]
mov dword [ebp - 0x51c], ecx
mov edx, dword [ebp - 0x51c]
cmp edx, dword [ebp - 0xd24]
je 0x495328
mov eax, dword [ebp - 0x51c]
cmp dword [eax + 0x30], 0
jne 0x4950f3
mov dword [ebp - 0x768], 0
push ecx
push edi
add esp, 4
xor ecx, 0x811e
add ecx, 0x96a0
xor ecx, 0x159
or ecx, 0x13697
pop ecx
push esi
jmp 0x49535a
jmp 0x495363
pop esi
cmp dword [ebp - 0x768], 0
jne 0x4953ae
push ecx
push ebx
add esp, 4
call 0x495382
add byte [edx + 0x3a], cl
xor esi, dword [ecx + ecx*2]
inc esp
push eax
dec eax
xor eax, 0x4c48332
and ecx, 0x51d7
pop ecx
push eax
jmp 0x495392
sub eax, 0x17fd6
or eax, 0x92e1
pop eax
mov dword [ebp - 0xac4], 0
jmp 0x495ed6
push ecx
push ebx
add esp, 4
call 0x4953bf
add byte [ecx + 0x4b], al
dec ebx
inc esp
xor eax, 0x4c48337
xor ecx, 0x95e2
pop ecx
push eax
call 0x4953d6
add byte [ecx], bh
cmp edi, dword [edi]
cmp dword [edi], edi
cmp eax, dword [ebx - 0x377efb3c]
xchg esi, eax
mov bl, 0
add byte [eax - 0x75], bl
lea ebx, [eax - 0x74000008]
push ecx
sbb byte [ecx - 0x3236b], cl
inc edi
test dword [eax + 0xfffff8], ecx
add byte [eax], al
add byte [ebx - 0x3237b], cl
dec dword [ecx - 0x16b77b]
inc dword [ebx - 0x16b743]
inc dword [eax]
jne 0x49541f
mov ecx, dword [ebp - 0x778]
mov dword [ebp - 0x3f8], ecx
jmp 0x495710
mov edx, dword [ebp - 0x16b8]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x16bc], eax
jne 0x495447
mov ecx, dword [ebp - 0x778]
mov dword [ebp - 0x3f8], ecx
jmp 0x495710
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x16bc]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x16c0], edx
cmp dword [ebp - 0x16c0], 0
mov ebp, 0xffffe940
add byte [ebp + 0x11], dh
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x3f8], eax
jmp 0x495710
mov ecx, dword [ebp - 0x324]
add ecx, dword [ebp - 0x16c0]
mov dword [ebp - 0x76c], ecx
jne 0x49549e
mov edx, dword [ebp - 0x778]
mov dword [ebp - 0x3f8], edx
jmp 0x495710
mov eax, dword [ebp - 0x76c]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1a30], ecx
mov edx, dword [ebp - 0x76c]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1a34], eax
mov ecx, dword [ebp - 0x76c]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1a38], edx
mov dword [ebp - 0x770], 0
jmp 0x4954f8
mov eax, dword [ebp - 0x770]
add eax, 1
mov dword [ebp - 0x770], eax
mov ecx, dword [ebp - 0x76c]
mov edx, dword [ebp - 0x770]
cmp edx, dword [ecx + 0x18]
jae 0x495704
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0x1a30]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x774], edx
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0x1a34]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1a38]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1a3c], ecx
mov dword [ebp - 0x19c], 0
jmp 0x495568
mov edx, dword [ebp - 0x19c]
add edx, 1
mov dword [ebp - 0x19c], edx
mov eax, dword [ebp - 0x774]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x49561a
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x8a0]
test eax, eax
je 0x49561a
push edi
add edi, 0x7732
or edi, 0xafe4
sub edi, 0x165f1
or edi, 0xb108
pop edi
push eax
push edx
add esp, 4
add eax, 0xf126
jmp 0x4955c0
or eax, 0xe898
pop eax
mov ecx, dword [ebp - 0x774]
add ecx, dword [ebp - 0x19c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x8a0]
cmp edx, ecx
je 0x49560c
mov edx, dword [ebp - 0x774]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x8a0]
cmp eax, edx
jne 0x495613
jmp 0x495559
jmp 0x49561a
push esi
push ebx
add esp, 4
add esi, 0x789d
call 0x495633
add byte [ecx], bh
dec esi
aas
inc edx
aaa
inc ecx
dec esp
add esp, 4
call 0x495642
add byte [edi + 0x4d], al
xor al, byte [esi + 0x41]
dec edx
add esp, 4
or esi, 0x888e
pop esi
mov eax, dword [ebp - 0x774]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x8a0]
cmp ecx, eax
jne 0x495679
mov dword [ebp - 0xd28], 0
jmp 0x4956e8
push eax
push ebx
add esp, 4
xor eax, 0x17e49
pop eax
push edi
sub edi, 0xc213
and edi, 0x2d25
add edi, 0x8b39
pop edi
push ebx
push edi
add esp, 4
or ebx, 0x396e
add ebx, 0x7116
pop ebx
mov ecx, dword [ebp - 0x774]
add ecx, dword [ebp - 0x19c]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x8a0]
or ecx, 0x20
cmp edx, ecx
jge 0x4956de
mov dword [ebp - 0xd28], 0xffffffff
jmp 0x4956e8
mov dword [ebp - 0xd28], 1
cmp dword [ebp - 0xd28], 0
jne 0x4956ff
mov edx, dword [ebp - 0x1a3c]
mov dword [ebp - 0x3f8], edx
jmp 0x495710
jmp 0x4954e9
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0
je 0x4957eb
push ecx
xor ecx, 0xd894
sub ecx, 0x15a34
sub ecx, 0x1688e
pop ecx
push edi
push edx
add esp, 4
or edi, 0xebfa
and edi, 0xda8f
add edi, 0x164bb
jmp 0x49574e
pop edi
mov ecx, dword [ebp - 0x3f8]
mov dword [ebp - 0x1a40], ecx
push edx
push ecx
add esp, 4
and edx, 0xc6c9
sub edx, 0xca21
or edx, 0x18d2
add edx, 0x2204
pop edx
push ebx
add ebx, 0x16175
pop ebx
push edi
push eax
add esp, 4
or edi, 0x33fe
pop edi
mov edx, dword [ebp - 0x1a40]
mov dword [ebp - 0x1a44], edx
lea eax, [ebp - 0x1790]
push eax
call dword [ebp - 0x1a44]
test eax, eax
jne 0x4957eb
push ebx
push ecx
add esp, 4
and ebx, 0xe692
jmp 0x4957ba
xor ebx, 0xac67
pop ebx
push edx
push eax
add esp, 4
jmp 0x4957cf
add edx, 0x8715
or edx, 0x8444
pop edx
mov dword [ebp - 0xac4], 0
jmp 0x495ed6
push esi
push ecx
add esp, 4
sub esi, 0xb304
and esi, 0xc729
sub esi, 0x667
pop esi
push ecx
or ecx, 0x742c
jmp 0x49580f
jmp 0x495816
add ecx, 0xb978
pop ecx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1a48], ecx
mov edx, dword [ebp - 0x1a48]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1a4c], eax
mov ecx, dword [ebp - 0x1a4c]
mov dword [ebp - 0x16c8], ecx
push edi
push edi
add esp, 4
add edi, 0xa54b
sub edi, 0x8e51
and edi, 0x3fc9
pop edi
push esi
xor esi, 0x4bbf
xor esi, 0x503f
sub esi, 0x8ba6
add esi, 0x1571b
pop esi
cmp dword [ebp - 0x16c8], 0
jne 0x49588f
mov dword [ebp - 0x2d0], 0
jmp 0x495b36
mov edx, dword [ebp - 0x16c8]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xd34], ecx
push ecx
call 0x4958b1
add byte [edi + 0x37], cl
xor al, byte [ecx + 0x33]
cmp al, 0x4c
xor al, byte [esi - 0x7d]
les eax, [eax + ebp*8]
pop es
add byte [eax], al
add byte [eax], al
inc edi
dec ebx
aaa
inc edx
inc ebp
add esp, 4
pop ecx
push edx
and edx, 0x115ed
jmp 0x4958d2
pop edx
cmp dword [ebp - 0xd34], 0
jne 0x4958eb
mov dword [ebp - 0x2d0], 0
jmp 0x495b36
mov edx, dword [ebp - 0xd34]
mov dword [ebp - 0x520], edx
push edx
push esi
add esp, 4
or edx, 0x7bd4
call 0x495911
add byte [esp + edi], dh
dec edx
dec ebx
inc esp
dec ebx
cmp al, 0x48
add esp, 4
xor edx, 0x160ec
pop edx
push esi
add esi, 0xfe22
xor esi, 0x7056
pop esi
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xd30], eax
mov ecx, dword [ebp - 0x520]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xd2c], edx
xor eax, eax
mov word [ebp - 0x224], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push eax
call 0x495964
add byte [esi], dh
inc edx
aaa
inc esi
xor eax, 0x4a50474e
dec ecx
add esp, 4
add eax, 0x131ca
and eax, 0xb6e1
jmp 0x49597c
pop eax
push edx
jmp 0x495984
pop edx
mov edx, dword [ebp - 0xd2c]
mov ax, word [edx]
mov word [ebp - 0x1096], ax
mov ecx, dword [ebp - 0xd2c]
add ecx, 2
mov dword [ebp - 0xd2c], ecx
mov dx, word [ebp - 0x1096]
mov word [ebp - 0x224], dx
mov eax, dword [ebp - 0xd30]
mov cx, word [eax]
mov word [ebp - 0x1098], cx
mov edx, dword [ebp - 0xd30]
add edx, 2
mov dword [ebp - 0xd30], edx
mov ax, word [ebp - 0x1098]
mov word [ebp - 0x40], ax
push edi
sub edi, 0xfc0a
pop edi
push ecx
xor ecx, 0x31e9
or ecx, 0x16460
add ecx, 0x18494
sub ecx, 0x15a38
pop ecx
push eax
and eax, 0x1608c
pop eax
push eax
or eax, 0x15d1a
pop eax
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x495a2b
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x16d0], edx
jmp 0x495a85
movzx ecx, word [ebp - 0x224]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
invalid
invalid
invalid
invalid