Function at 0x43b0f0
Capabilities:
Get keyboard layout

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b6f75
mov eax, dword fs:[0]
push eax
mov eax, 0x8118
mov dword fs:[0], esp
call fcn.004b5cc0
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x14], edi
cmp dword [edi + 0x44], 0
jne 0x43b12a
cmp dword [edi + 0x58], 0
mov byte [ebp - 0x3e], 0
je 0x43b12e
mov byte [ebp - 0x3e], 1
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0x1000
mov dword [ebp - 0x28], 3
mov dword [ebp - 4], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0x1000
mov dword [ebp - 0x5c], 3
mov eax, dword [ebp + 0xc]
mov byte [ebp - 4], 1
push 0x2000
push 0
mov dword [edi + 0x27c], eax
mov dword [ebp - 0x58], 0
call fcn.0049f4c8
add esp, 8
test eax, eax
je 0x43c6fb
mov esi, dword [ebp - 0x64]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x30], 0x1000
test esi, esi
je 0x43b1bb
add esi, esi
jmp 0x43b1be
mov esi, dword [ebp - 0x60]
lea eax, [esi + esi]
push eax
push dword [ebp - 0x6c]
call fcn.0049f4c8
add esp, 8
test eax, eax
je 0x43c6fb
mov dword [ebp - 0x6c], eax
xor ecx, ecx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x64], esi
mov word [eax], cx
cmp dword [ebp - 0x34], 0xffffffff
je 0x43c652
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x48], eax
mov al, byte [ebp - 0x15]
mov byte [ebp - 0xd], al
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x70], eax
nop
mov eax, dword [ebp - 0x58]
mov ecx, edi
mov dword [edi + 0x280], eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x58]
mov dword [edi + 0x644], 0
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x38]
push eax
push dword [ebp + 8]
call fcn.0043d0e0
test eax, eax
je 0x43c6bc
cmp dword [ebp - 0x34], 0
je 0x43bca6
lea eax, [edi + 0x58]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x38]
xor esi, esi
xor ebx, ebx
cmp word [eax], 0x3a
jne 0x43b353
movzx edx, word [eax + 2]
test dx, dx
je 0x43b353
lea edi, [eax + 2]
mov dword [ebp - 0x48], edi
cmp edx, 0x3a
je 0x43b28c
push 0x3a
push edi
call fcn.0049cf2f
mov esi, eax
add esp, 8
mov eax, dword [ebp - 0x38]
lea ecx, [esi + 2]
neg esi
sbb esi, esi
and esi, ecx
mov dword [ebp - 0x20], esi
jmp 0x43b29e
cmp word [eax + 4], bx
lea ecx, [eax + 4]
je 0x43b353
mov esi, ecx
mov dword [ebp - 0x20], ecx
test esi, esi
je 0x43b353
mov al, byte [0x4e8d30]
mov byte [ebp - 0xd], al
cmp edi, esi
jae 0x43b2e7
movzx eax, word [edi]
add edi, 2
mov edx, eax
mov esi, eax
and eax, 0xffdf
add edx, 0xffffff9f
movzx ecx, ax
cmp dx, 0x19
mov eax, esi
mov esi, dword [ebp - 0x20]
cmova ecx, eax
cmp cx, 0x58
je 0x43b2df
cmp edi, esi
jb 0x43b2b2
jmp 0x43b2e7
cmp word [edi], 0x30
setne byte [ebp - 0xd]
movzx eax, word [esi]
mov edx, eax
test ax, ax
je 0x43b315
mov ecx, eax
movzx edx, cx
cmp cx, 0x60
je 0x43b31a
movzx edx, cx
cmp cx, 0x3a
je 0x43b315
movzx eax, word [esi + 2]
add esi, 2
mov ecx, eax
mov edx, eax
test ax, ax
jne 0x43b2f3
test dx, dx
je 0x43b346
lea edi, [esi + 2]
cmp dx, 0x3a
jne 0x43b3ba
test ebx, ebx
jne 0x43b435
cmp word [edi], dx
jne 0x43b435
cmp byte [ebp - 0xd], 0
mov ebx, esi
mov esi, edi
je 0x43b435
test ebx, ebx
jne 0x43b46f
mov eax, dword [ebp - 0x38]
xor esi, esi
push 0x4d7040
push eax
mov dword [ebp - 0x20], esi
call fcn.0049d91e
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x43b478
mov ecx, dword [ebp - 0x38]
cmp ebx, ecx
jne 0x43b37f
cmp word [ebx + 4], 0x3a
jne 0x43b37f
add ebx, 2
mov esi, ebx
cmp ebx, ecx
jbe 0x43b399
movzx eax, word [esi]
cmp eax, 0x20
je 0x43b392
cmp eax, 9
jne 0x43b399
sub esi, 2
cmp esi, ecx
ja 0x43b385
movzx edi, word [esi]
xor eax, eax
mov word [esi], ax
mov ecx, dword [ebp - 0x38]
movzx eax, word [ecx]
cmp eax, 0x20
je 0x43b3b5
cmp eax, 9
jne 0x43b43d
add ecx, 2
jmp 0x43b3a4
movzx eax, word [edi]
add eax, 0xffffff9f
cmp eax, 0x15
ja case.0x43b3cc.99
movzx eax, byte [eax + 0x43c764]
jmp dword [eax*4 + 0x43c740]
mov eax, 7
jmp 0x43b409
mov eax, 8
jmp 0x43b409
mov eax, 0xc
jmp 0x43b409
mov eax, 0xa
jmp 0x43b409
mov eax, 0xd
jmp 0x43b409
mov eax, 9
jmp 0x43b409
mov eax, 0xb
jmp 0x43b409
mov eax, 0x20
mov word [edi], ax
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43b411
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
push eax
push edi
push esi
call fcn.0049cfe0
add esp, 0xc
dec dword [ebp - 0x34]
add esi, 2
jmp 0x43b2e7
push 0
xor edx, edx
call fcn.00415570
add esp, 4
mov dword [ebp - 0x70], eax
test eax, eax
je 0x43c6bc
xor ecx, ecx
mov word [esi], di
cmp eax, 4
cmove ebx, ecx
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x48], ecx
mov cl, byte [ebp - 0xd]
mov byte [ebp - 0xd], cl
test ebx, ebx
je 0x43b478
cmp ebx, dword [ebp - 0x38]
ja 0x43b720
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov ebx, dword [ebp - 0x14]
cmp word [ecx + eax*2 - 2], 0x3a
jne 0x43b4da
cmp dword [ebx + 0x58], 0
lea eax, [ebx + 0x58]
mov dword [ebp - 0x20], eax
je 0x43b4a0
mov eax, dword [0x4e4788]
cmp dword [eax + 0x18], 0
je 0x43b4da
mov esi, dword [ebp - 0x38]
movzx eax, word [esi]
cmp eax, 0x7f
ja 0x43b4be
push eax
call fcn.004a36d0
add esp, 4
test eax, eax
jne 0x43b4be
cmp word [esi], 0x5f
jne 0x43b4c3
add esi, 2
jmp 0x43b4a3
mov edi, dword [ebp - 0x38]
mov eax, esi
sub eax, edi
sar eax, 1
inc eax
cmp eax, dword [ebp - 0x34]
jne 0x43b4da
cmp esi, edi
ja 0x43c049
mov edi, dword [ebp - 0x38]
cmp word [edi], 0x23
jne 0x43b563
push 6
push 0x4d2d38
push edi
call fcn.0049f522
add esp, 0xc
test eax, eax
jne 0x43b52e
mov eax, dword [ebp - 0x38]
movzx ecx, word [eax + 0xc]
cmp ecx, 0x20
je 0x43b50c
cmp ecx, 9
jne 0x43b531
lea eax, [ebp - 0x74]
mov ecx, ebx
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x38]
push eax
push dword [ebp + 8]
call fcn.0043c950
test eax, eax
je 0x43c6bc
mov eax, dword [ebp - 0x38]
mov edi, dword [ebp - 0x14]
mov ecx, edi
push eax
mov esi, dword [edi + 0x280]
call fcn.0043dbb0
test eax, eax
je 0x43c6bc
cmp eax, 3
jne 0x43b566
mov eax, dword [ebp + 0xc]
mov dword [edi + 0x27c], eax
mov dword [edi + 0x280], esi
jmp 0x43bca6
mov edi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
movzx ecx, word [eax]
cmp ecx, 0x7b
je 0x43b57a
cmp ecx, 0x7d
jne 0x43c1d1
mov edx, dword [edi + 0x58]
lea ebx, [edi + 0x58]
test edx, edx
je 0x43b6a1
mov eax, dword [0x4e4788]
cmp dword [eax + 0x18], 0
jne 0x43b6a1
cmp ecx, 0x7b
je 0x43c645
cmp dword [edi + 0x274], 0
je 0x43b5d9
mov eax, dword [edi + 0x278]
mov dword [edi + 0x274], 0
test eax, eax
je 0x43b6c4
push eax
call fcn.0049f4a2
add esp, 4
mov dword [edi + 0x278], 0
jmp 0x43b6c4
lea eax, [edx - 1]
mov dword [ebx], eax
mov ebx, dword [edi + eax*4 + 0x5c]
lea eax, [ebp - 0x1c]
push eax
push 0x4d8020
mov ecx, ebx
call fcn.00479310
test eax, eax
je 0x43b603
cmp dword [eax + 8], 5
jne 0x43b603
mov ecx, dword [eax]
mov dword [ebp - 0x1c], ecx
jmp 0x43b60a
mov dword [ebp - 0x1c], 0
mov eax, dword [ebx + 0x10]
mov esi, dword [eax + 4]
test esi, esi
je 0x43b63f
lea edi, [esi + esi*2]
shl edi, 3
nop word [eax + eax]
mov eax, dword [ebx + 0x10]
lea edi, [edi - 0x18]
dec esi
cmp dword [eax + edi + 0x10], 3
jne 0x43b638
push ecx
push esi
lea ecx, [ebx + 0x10]
call fcn.0044ddb0
test esi, esi
jne 0x43b620
mov edi, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebx + 0x10]
mov esi, dword [eax + 4]
test esi, esi
je 0x43b671
lea edi, [esi + esi*2]
shl edi, 3
mov eax, dword [ebx + 0x10]
lea edi, [edi - 0x18]
dec esi
cmp dword [edi + eax + 0x10], 3
jne 0x43b66a
push ecx
push esi
lea ecx, [ebx + 0x10]
call fcn.0044ddb0
test esi, esi
jne 0x43b652
mov edi, dword [ebp - 0x14]
mov eax, dword [edi + 0x58]
lea ebx, [edi + 0x58]
mov eax, dword [edi + eax*4 + 0x5c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea esi, [edi + 0x70]
push 0x2e
push esi
call fcn.0049ce8e
add esp, 8
test eax, eax
je 0x43b69a
xor ecx, ecx
mov word [eax], cx
jmp 0x43b6c4
xor eax, eax
mov word [esi], ax
jmp 0x43b6c4
push 0
cmp ecx, 0x7b
mov ecx, edi
push 0
setne al
push 0
add al, 3
push 0
movzx eax, al
push eax
call fcn.004401c0
test eax, eax
je 0x43c6bc
mov ecx, dword [ebp - 0x38]
movzx eax, word [ecx + 2]
add ecx, 2
cmp eax, 0x20
je 0x43b6c7
cmp eax, 9
je 0x43b6c7
test ax, ax
je 0x43bca9
mov edi, dword [ebp - 0x38]
mov eax, ecx
mov edx, dword [ebp - 0x34]
sub eax, edi
sar eax, 1
sub edx, eax
mov dword [ebp - 0x34], edx
lea eax, [edx*2 + 2]
push eax
push ecx
push edi
call fcn.0049cfe0
mov edi, dword [ebp - 0x14]
add esp, 0xc
cmp dword [ebp - 0x34], 0
mov dword [edi + 0x644], 0
jne 0x43b245
jmp 0x43bca6
mov eax, dword [0x4e4788]
mov esi, dword [ebp - 0x14]
mov eax, dword [eax + 0x18]
test eax, eax
je 0x43b738
cmp eax, dword [esi + 0x1c]
jne 0x43c5de
cmp dword [esi + 0x58], 0
jne 0x43c5de
xor eax, eax
mov word [ebx], ax
add ebx, 4
mov dword [ebp - 0x3c], ebx
mov ecx, ebx
nop
movzx eax, word [ecx]
cmp eax, 0x20
je 0x43b75d
cmp eax, 9
jne 0x43b762
add ecx, 2
jmp 0x43b750
cmp eax, 0x7b
jne 0x43b773
cmp word [ecx + 2], 0
jne 0x43b773
lea edx, [eax - 0x7a]
jmp 0x43b775
xor dl, dl
mov eax, dword [ebp - 0x20]
mov bh, byte [ebp - 0xd]
mov dword [ebp - 0x1c], edx
test eax, eax
je 0x43b78a
test bh, bh
je 0x43beac
mov edi, ecx
mov dword [ebp - 0x3c], edi
test eax, eax
jne 0x43beaf
cmp word [ecx], 0x60
mov ebx, ecx
mov dword [ebp - 0x3c], ecx
jne 0x43b7b0
cmp word [ecx + 2], 0x7b
lea eax, [ecx + 2]
cmove ebx, eax
mov dword [ebp - 0x3c], ebx
mov edi, ebx
test dl, dl
jne 0x43bcd5
cmp word [ebx], 0
je 0x43bcd5
movzx eax, word [ebx + 2]
mov ecx, eax
test ax, ax
je 0x43b849
nop
cmp ax, 0x20
je case.0x43b7e8.34
movzx eax, word [edi]
add eax, 0xffffffdf
cmp eax, 0x5d
ja case.0x43b7e8.34
movzx eax, byte [eax + 0x43c784]
jmp dword [eax*4 + 0x43c77c]
movzx eax, word [edi + 4]
add edi, 2
test ax, ax
jne 0x43b7d0
push 0
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
push eax
push ecx
push 0
xor edx, edx
mov ecx, edi
call fcn.0041cb00
mov bh, al
add esp, 0xc
mov byte [ebp - 0x15], bh
test bh, bh
jne 0x43b84f
mov ebx, dword [ebp - 0x3c]
cmp word [ebx], 0
je 0x43bcdd
push 0x4d5b18
push ebx
call fcn.0049f3a1
add esp, 8
test eax, eax
jne 0x43bd34
mov edi, 0x7ffe
jmp 0x43bcdf
or bh, 0xff
mov byte [ebp - 0x15], bh
mov esi, dword [ebp - 0x38]
cmp word [esi], 0
je case.0x43b87b.34
cmp word [esi + 2], 0
je case.0x43b87b.34
movzx eax, word [esi + 2]
cmp ax, 0x20
je case.0x43b87b.34
movzx eax, word [esi]
add eax, 0xffffffdf
cmp eax, 0x5d
ja case.0x43b87b.34
movzx eax, byte [eax + 0x43c7ec]
jmp dword [eax*4 + 0x43c7e4]
movzx eax, word [esi + 4]
add esi, 2
test ax, ax
jne 0x43b863
push 0
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
push eax
push ecx
push 0
xor edx, edx
mov ecx, esi
call fcn.0041cb00
add esp, 0xc
mov bl, al
mov byte [ebp - 0x49], bl
push 0x4d413c
push esi
call fcn.0049d91e
lea ecx, [ebx - 1]
mov dword [ebp - 0x50], eax
add esp, 8
cmp cl, 5
ja 0x43b8c9
cmp bl, 3
jne 0x43b8d1
mov al, bl
add al, 0x66
cmp al, 5
ja 0x43b8d5
mov cl, 1
jmp 0x43b8d7
xor cl, cl
mov al, bh
dec al
cmp al, 5
ja 0x43b8e4
cmp bh, 3
jne 0x43b8ec
mov al, bh
add al, 0x66
cmp al, 5
ja 0x43b8f0
mov bl, 1
jmp 0x43b8f2
xor bl, bl
test cl, cl
jne 0x43b8fe
mov byte [ebp - 0x3d], 1
test bl, bl
jne 0x43b902
mov byte [ebp - 0x3d], 0
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43b907
sub ecx, edx
sar ecx, 1
cmp ecx, 1
jne 0x43b92e
movzx eax, word [esi]
push eax
call dword [sym.imp.USER32.dll_IsCharUpperW]
test eax, eax
mov eax, 0x4d70c8
jne 0x43b933
mov eax, 0x4cee98
push dword [ebp - 0x38]
cmp dword [ebp - 0x50], 0
mov ecx, 0x4d2afc
push eax
mov eax, 0x4cee98
cmove eax, ecx
push eax
push 0x4d5918
lea eax, [ebp - 0x118]
push 0x20
push eax
call fcn.00481920
movzx eax, word [edi]
add esp, 0x18
cmp eax, 0x22
je 0x43b989
cmp eax, 0x60
je 0x43b989
push 0x1f
lea eax, [ebp - 0xd8]
push edi
push eax
call fcn.004aa9a4
add esp, 0xc
xor eax, eax
mov word [ebp - 0x9a], ax
jmp 0x43b9a5
mov word [ebp - 0xd6], ax
mov ecx, 0x60
xor eax, eax
mov word [ebp - 0xd8], cx
mov word [ebp - 0xd4], ax
mov esi, dword [ebp - 0x3c]
lea eax, [ebp - 0x88]
push 7
push esi
push eax
call fcn.004aa9a4
sub edi, esi
xor eax, eax
sar edi, 1
add esp, 0xc
mov word [ebp - 0x7a], ax
cmp edi, 8
jae 0x43b9d1
mov word [ebp + edi*2 - 0x88], ax
cmp word [ebp - 0x88], 0
jne 0x43b9fc
cmp bh, 0x13
jne 0x43b9fc
lea eax, [ebp - 0xd8]
push 0x4d01e0
push eax
call fcn.0049f3a1
add esp, 8
test eax, eax
je 0x43b81c
mov esi, dword [ebp - 0x14]
mov ecx, esi
cmp dword [esi + 0x1c], 0
jne 0x43c59e
call fcn.0044f580
test eax, eax
je 0x43c6bc
lea eax, [ebp - 0x21]
push eax
lea edx, [ebp - 0x42]
lea ecx, [ebp - 0x118]
call fcn.00415df0
mov ecx, dword [esi + 0x1c]
add esp, 4
push dword [ebp - 0x42]
test eax, eax
je 0x43ba41
push ecx
mov ecx, eax
call fcn.00415480
jmp 0x43ba52
lea eax, [ebp - 0x118]
xor edx, edx
push eax
call fcn.00414b60
add esp, 8
test eax, eax
je 0x43c6bc
test bl, bl
mov ecx, 0x4d0474
mov eax, 0x4d048c
cmove eax, ecx
push eax
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x8120]
push 0x4d7134
push eax
call fcn.00406670
add esp, 0xc
lea ebx, [ebp - 0x8120]
cmp byte [ebp - 0x3d], 0
lea ebx, [ebx + eax*2]
je 0x43baa8
lea eax, [ebp - 0xd8]
push eax
push 0x4d7144
push ebx
call fcn.00406670
add esp, 0xc
lea ebx, [ebx + eax*2]
mov eax, dword [ebp - 0x48]
lea edi, [ebp - 0x94]
mov dword [ebp - 0x48], eax
mov esi, 0x4d7170
mov al, byte [ebp - 0xd]
mov ecx, 0x21
mov byte [ebp - 0xd], al
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x70], eax
nop word [eax + eax]
push ecx
lea eax, [ebp - 0x118]
push eax
call fcn.0049cf2f
add esp, 8
test eax, eax
je 0x43bb0b
cmp word [eax + 2], 0
je 0x43bb0b
movzx eax, word [esi]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0049cf2f
add esp, 8
test eax, eax
jne 0x43bb0b
mov ax, word [esi]
mov word [edi], ax
add edi, 2
movzx eax, word [esi + 2]
add esi, 2
mov ecx, eax
test ax, ax
jne 0x43bad0
xor eax, eax
mov ecx, 0x4cee98
mov word [edi], ax
movzx eax, byte [ebp - 0x15]
sub eax, 0x12
je 0x43bb38
sub eax, 0x92
je 0x43bb38
sub eax, 1
jne 0x43bb59
movzx eax, byte [ebp - 0x49]
sub eax, 0x11
je 0x43bb54
sub eax, 0x91
je 0x43bb54
sub eax, 1
jne 0x43bb59
mov ecx, 0x4d7194
jmp 0x43bb59
mov ecx, 0x4d717c
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x88]
push eax
push ecx
lea eax, [ebp - 0x94]
push eax
push 0x4d71b0
push ebx
call fcn.00406670
mov edi, dword [ebp - 0x14]
add esp, 0x18
mov ecx, edi
push 0
push 0
push 0
push 0
push 3
call fcn.004401c0
test eax, eax
je 0x43c6bc
push 0
push 0
push 0
lea eax, [ebp - 0x8120]
mov ecx, edi
push eax
call fcn.0043ec60
test eax, eax
je 0x43c6bc
push 0
push 0
push 0
push 0
push 4
mov ecx, edi
call fcn.004401c0
test eax, eax
je 0x43c6bc
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x8120]
push 0x4d71f0
push eax
call fcn.00406670
add esp, 0xc
mov ecx, edi
call fcn.0044f580
test eax, eax
je 0x43c6bc
lea eax, [ebp - 0x21]
push eax
lea edx, [ebp - 0x42]
lea ecx, [ebp - 0x8120]
call fcn.00415df0
mov ecx, dword [edi + 0x1c]
add esp, 4
push dword [ebp - 0x42]
test eax, eax
je 0x43bc21
push ecx
mov ecx, eax
call fcn.00415480
jmp 0x43bc32
lea eax, [ebp - 0x8120]
xor edx, edx
push eax
call fcn.00414b60
add esp, 8
test eax, eax
je 0x43c6bc
lea eax, [ebp - 0xd8]
push eax
push dword [ebp - 0x50]
lea eax, [ebp - 0x8120]
push 0x4d71fc
push eax
call fcn.00406670
add esp, 0x10
mov ecx, edi
push 0
push 0
push 0
push 0
push 3
call fcn.004401c0
test eax, eax
je 0x43c6bc
push 0
push 0
push 0
lea eax, [ebp - 0x8120]
push eax
mov ecx, edi
call fcn.0043ec60
test eax, eax
je 0x43c6bc
push 0
push 0
push 0
push 0
push 4
mov ecx, edi
call fcn.004401c0
test eax, eax
je 0x43c6bc
lea ebx, [edi + 0x58]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x34], eax
cmp eax, 0xffffffff
jne 0x43b200
jmp 0x43c655
test ebx, ebx
jne 0x43b81f
xor edi, edi
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x21]
push eax
lea edx, [ebp - 0x42]
mov dword [ebp - 0x54], edi
call fcn.00415df0
mov esi, eax
add esp, 4
test esi, esi
je 0x43be10
test di, di
je 0x43bda8
mov word [esi + 6], di
mov edi, dword [ebp - 0x20]
cmp word [ebx], 0
je 0x43c039
cmp byte [ebp - 0x1c], 0
je 0x43bfac
mov edi, dword [ebp - 0x14]
push 0
push 0
push 0
push 0
push 3
jmp 0x43bc97
push 0x4d5b28
push ebx
call fcn.0049f3a1
add esp, 8
test eax, eax
jne 0x43bd4d
mov edi, 0x7ffd
jmp 0x43bcdf
push 0x4d5b40
push ebx
call fcn.0049f3a1
add esp, 8
test eax, eax
jne 0x43bd69
mov edi, 0x7ffc
jmp 0x43bcdf
push 0x4d5b58
push ebx
call fcn.0049f3a1
add esp, 8
test eax, eax
jne 0x43bd85
mov edi, 0x7ffb
jmp 0x43bcdf
push 0x4d5b74
push ebx
call fcn.0049f3a1
add esp, 8
neg eax
sbb edi, edi
and edi, 0xffff8006
add edi, 0x7ffa
jmp 0x43bcdf
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x43bdc7
mov eax, dword [0x4e4788]
mov eax, dword [eax + 0x58]
cmp dword [ecx + 8], eax
je 0x43c5ad
mov ecx, dword [ecx + 0xc]
test ecx, ecx
jne 0x43bdb7
mov edi, dword [ebp - 0x14]
cmp dword [edi + 0x1c], 0
jne 0x43bddf
mov ecx, edi
call fcn.0044f580
test eax, eax
je 0x43c6bc
push dword [ebp - 0x42]
mov ecx, esi
push dword [edi + 0x1c]
call fcn.00415480
test eax, eax
je 0x43c5c7
cmp byte [ebp - 0x21], 0
jne 0x43be07
cmp byte [0x4e8c6f], 0
je 0x43bd0b
mov byte [esi + 0x14], 1
jmp 0x43bd0b
mov esi, dword [ebp - 0x14]
mov eax, dword [esi + 0x1c]
test di, di
je 0x43be30
test eax, eax
je 0x43be43
push 0x4cee98
push 0x4d70d0
mov ecx, esi
jmp 0x43c707
test eax, eax
jne 0x43be43
mov ecx, esi
call fcn.0044f580
test eax, eax
je 0x43c6bc
push dword [ebp - 0x42]
mov ecx, dword [esi + 0x1c]
mov edx, edi
push dword [ebp - 0x38]
call fcn.00414b60
add esp, 8
test eax, eax
jne 0x43bd0b
cmp dword [ebp - 0x70], 3
jne 0x43c6bc
cmp byte [esi + 0x6dc], al
jne 0x43bd0b
push dword [ebp - 0x38]
lea eax, [ebp - 0x220]
push 0x4d72c0
push 0x80
push eax
call fcn.00481920
push 0
push 0
xorps xmm3, xmm3
lea ecx, [ebp - 0x220]
mov edx, 0x10000
call fcn.00486d90
add esp, 0x18
jmp 0x43bd0b
mov edi, dword [ebp - 0x3c]
cmp word [eax], 0
je 0x43c5cf
test dl, dl
je 0x43bf11
cmp byte [0x4e8d35], 0
mov esi, dword [ebp - 0x48]
setne bl
cmp esi, eax
jae 0x43bf04
mov edi, dword [ebp - 0x20]
movzx eax, word [esi]
mov ecx, eax
add eax, 0xffffff9f
mov edx, ecx
and edx, 0xffffffdf
cmp ax, 0x19
cmova edx, ecx
sub edx, 0x52
je 0x43beef
sub edx, 2
jne 0x43bef7
cmp word [esi + 2], 0x30
setne bl
add esi, 2
cmp esi, edi
jb 0x43bed1
mov edx, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x3c]
xor eax, eax
movzx edx, dl
test bl, bl
cmovne edx, eax
mov dword [ebp - 0x1c], edx
cmp word [edi], 0
je 0x43bf42
test dl, dl
jne 0x43bf42
test bh, bh
jne 0x43bf42
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x1c], 0
lea esi, [eax + 0x1c]
je 0x43bf68
dec dword [eax + 0x280]
mov ecx, eax
push 0x4cee98
push 0x4d70d0
jmp 0x43c707
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x1c], 0
lea esi, [eax + 0x1c]
jne 0x43bf60
mov ecx, eax
call fcn.0044f580
test eax, eax
je 0x43c6bc
mov edx, dword [ebp - 0x1c]
test bh, bh
jne 0x43bf6c
test dl, dl
jne 0x43bf6c
mov eax, edi
jmp 0x43bf71
mov eax, 0x4cee98
mov ecx, dword [esi]
mov edi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x48]
push 0
push dword [ebp - 0x74]
push eax
push edi
push ecx
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebp - 0x38]
call fcn.00416390
add esp, 0x14
test eax, eax
je 0x43c6bc
cmp dword [esi], 0
mov ebx, dword [ebp - 0x50]
je 0x43c041
mov ebx, dword [ebp - 0x3c]
jmp 0x43bd0e
test edi, edi
je 0x43bfb6
movzx eax, byte [ebp - 0xd]
jmp 0x43bfbf
xor eax, eax
cmp word [ebp - 0x54], ax
sete al
test eax, eax
je 0x43c039
mov edx, dword [ebp - 0x38]
mov ecx, ebx
mov eax, dword [ebp - 0x34]
sub ecx, edx
sar ecx, 1
sub eax, ecx
mov dword [ebp - 0x34], eax
add eax, eax
push eax
push ebx
push edx
call fcn.0049cfe0
mov ecx, dword [ebp - 0x34]
add esp, 0xc
mov eax, dword [ebp - 0x38]
xor edx, edx
mov edi, dword [ebp - 0x14]
mov word [eax + ecx*2], dx
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x58]
mov ecx, edi
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x38]
push eax
push dword [ebp + 8]
call fcn.0043c950
test eax, eax
je 0x43c6bc
push 0
push 0
push 0
push 0
push 3
mov ecx, edi
call fcn.004401c0
test eax, eax
je 0x43c6bc
push 0
push 0
push 0
push dword [ebp - 0x38]
jmp 0x43bc7e
mov edi, dword [ebp - 0x14]
jmp 0x43bca6
mov edi, dword [ebp - 0x14]
jmp 0x43bca9
mov edx, dword [ebp - 0x34]
xor ecx, ecx
mov eax, dword [ebp - 0x38]
dec edx
mov dword [ebp - 0x34], edx
push 0x4d4618
mov word [eax + edx*2], cx
push dword [ebp - 0x38]
call fcn.0049f3a1
add esp, 8
mov edi, ebx
test eax, eax
jne 0x43c0a3
mov eax, dword [edi + 0x44]
test eax, eax
je 0x43c0a3
mov eax, dword [eax + 0x10]
test eax, eax
je 0x43c0a3
cmp byte [eax], 0x1a
jne 0x43c0a3
push 0
push 0
push 0
push 0
push 0x1b
mov ecx, edi
call fcn.004401c0
test eax, eax
je 0x43c6bc
mov ebx, dword [ebp - 0x20]
jmp 0x43bca9
cmp dword [edi + 0x1c], 0
jne 0x43c5ed
mov edi, dword [ebp - 0x38]
cmp word [edi], 0
je 0x43c6bc
mov eax, dword [0x4e4788]
lea esi, [ebx + 8]
mov eax, dword [eax + 0x18]
test eax, eax
lea ecx, [eax + 0x34]
mov edx, ecx
cmove edx, esi
mov dword [ebp - 0x50], edx
je 0x43c0db
mov esi, dword [ecx]
add eax, 0x38
jmp 0x43c0e0
mov esi, dword [esi]
lea eax, [ebx + 0xc]
mov dword [ebp - 0x3c], eax
test esi, esi
je 0x43c0fd
push edi
push dword [esi]
call fcn.0049f3a1
add esp, 8
test eax, eax
je 0x43c151
mov esi, dword [esi + 0xc]
test esi, esi
jne 0x43c0e7
cmp word [edi], 0
je 0x43c170
mov esi, edi
lea ecx, [esi + 2]
nop dword [eax + eax]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x43c110
sub esi, ecx
sar esi, 1
lea eax, [esi + esi]
lea ecx, [eax + 2]
mov dword [ebp - 0x1c], eax
call fcn.0047e730
mov ebx, eax
test ebx, ebx
je 0x43c739
test esi, esi
mov esi, dword [ebp - 0x1c]
je 0x43c149
push esi
push edi
push ebx
call fcn.0049cfe0
add esp, 0xc
xor eax, eax
mov word [esi + ebx], ax
jmp 0x43c175
push edi
mov edi, ebx
push 0x4d79f0
mov ecx, edi
call fcn.0040d780
test eax, eax
je 0x43c6bc
mov ebx, dword [ebp - 0x20]
jmp 0x43bca9
mov ebx, 0x4cee98
mov ecx, 0x10
call fcn.0047e730
mov ecx, eax
test ecx, ecx
je 0x43c739
mov edx, dword [ebp - 0x3c]
mov dword [ecx + 8], 0
mov dword [ecx], ebx
mov dword [ecx + 4], 0
mov dword [ecx + 0xc], 0
mov eax, dword [edx]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x50]
cmp dword [eax], 0
jne 0x43c1bf
mov edi, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x20]
mov dword [eax], ecx
mov dword [edx], ecx
jmp 0x43bca9
mov eax, dword [edx]
mov edi, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x20]
mov dword [eax + 0xc], ecx
mov dword [edx], ecx
jmp 0x43bca9
mov edi, dword [ebp - 0x38]
push 5
push 0x4d6f64
push edi
call fcn.0049f522
add esp, 0xc
test eax, eax
jne 0x43c2c3
movzx eax, word [edi + 0xa]
cmp eax, 0x20
je 0x43c1fe
cmp eax, 9
jne 0x43c2c3
add edi, 0xc
movzx eax, word [edi]
cmp eax, 0x20
je 0x43c20e
cmp eax, 9
jne 0x43c213
add edi, 2
jmp 0x43c201
push eax
push 0x4d6f70
call fcn.0049cf2f
add esp, 8
test eax, eax
jne 0x43c2c3
mov eax, dword [0x4e4788]
cmp dword [eax + 0x18], 0
jne 0x43c60a
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
cmp word [eax + edx*2 - 2], 0x7b
jne 0x43c25e
dec edx
mov ecx, eax
call fcn.00438260
push edi
mov edi, dword [ebp - 0x14]
mov ecx, edi
call fcn.00442200
jmp 0x43bc9e
mov edx, dword [ebp - 0x6c]
cmp word [edx], 0x7b
jne 0x43c5fc
lea esi, [edx + 2]
mov eax, esi
movzx ecx, word [eax]
cmp ecx, 0x20
je 0x43c27d
cmp ecx, 9
jne 0x43c282
add eax, 2
jmp 0x43c270
mov ecx, dword [ebp - 0x68]
sub eax, edx
sar eax, 1
sub ecx, eax
mov dword [ebp - 0x68], ecx
je 0x43c2ae
lea eax, [ecx + ecx]
push eax
push esi
push edx
call fcn.0049cfe0
add esp, 0xc
push edi
mov edi, dword [ebp - 0x14]
mov ecx, edi
call fcn.00442200
jmp 0x43bc9e
push edi
mov edi, dword [ebp - 0x14]
xor eax, eax
mov ecx, edi
mov word [edx], ax
call fcn.00442200
jmp 0x43bc9e
mov edi, dword [ebp - 0x14]
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x58]
mov ecx, edi
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x38]
push eax
push dword [ebp + 8]
call fcn.0043c950
test eax, eax
je 0x43c6bc
cmp dword [edi + 0x274], 0
mov eax, dword [0x4e4788]
je 0x43c3a8
cmp dword [eax + 0x18], 0
jne 0x43c3a8
push 3
push 0x4d7404
push dword [ebp - 0x38]
call fcn.0049f522
add esp, 0xc
test eax, eax
je 0x43c334
push 3
push 0x4d740c
push dword [ebp - 0x38]
call fcn.0049f522
add esp, 0xc
test eax, eax
jne 0x43c61a
mov edx, dword [ebp - 0x38]
lea esi, [edx + 6]
nop word [eax + eax]
movzx ecx, word [esi]
cmp ecx, 0x20
je 0x43c34d
cmp ecx, 9
jne 0x43c352
add esi, 2
jmp 0x43c340
test cx, cx
jne 0x43c360
mov eax, dword [ebp - 0x6c]
cmp word [eax], 0x7b
je 0x43c380
cmp ecx, 0x7b
jne 0x43c36c
cmp word [esi + 2], 0
jmp 0x43c37a
cmp ecx, 0x3d
jne 0x43c61d
cmp word [esi + 2], 0x3e
jne 0x43c61d
push 0x2e
push dword [edi + 0x278]
call fcn.0049cf2f
mov ecx, dword [ebp - 0x38]
add esp, 8
mov cx, word [ecx]
push esi
mov word [eax + 2], cx
push ecx
mov ecx, edi
call fcn.00442d50
jmp 0x43bc9e
cmp dword [edi + 0x58], 0
lea ebx, [edi + 0x58]
je 0x43c55d
cmp dword [eax + 0x18], 0
jne 0x43c55d
mov edi, dword [ebp - 0x38]
push 6
push 0x4d2d28
push edi
mov byte [ebp - 0x78], 0
call fcn.0049f522
add esp, 0xc
test eax, eax
jne 0x43c423
movzx eax, word [edi + 0xc]
cmp eax, 0x20
je 0x43c3e8
cmp eax, 9
jne 0x43c423
add edi, 0xe
nop dword [eax + eax]
movzx eax, word [edi]
cmp eax, 0x20
je 0x43c3fd
cmp eax, 9
jne 0x43c402
add edi, 2
jmp 0x43c3f0
cmp eax, 0x7f
ja 0x43c41f
push eax
call fcn.004a36d0
add esp, 4
test eax, eax
jne 0x43c41f
cmp word [edi], 0x5f
je 0x43c41f
mov edi, dword [ebp - 0x38]
jmp 0x43c423
mov byte [ebp - 0x78], 1
mov edx, dword [ebp - 0x6c]
mov ecx, edi
call fcn.0043a850
test al, al
je 0x43c44e
push 0
push dword [ebp - 0x78]
push edi
mov edi, dword [ebp - 0x14]
mov ecx, edi
call fcn.004416c0
test eax, eax
je 0x43c6bc
jmp 0x43bca9
mov esi, edi
movzx eax, word [esi]
cmp eax, 0x7f
ja 0x43c472
push eax
call fcn.004a36d0
add esp, 4
test eax, eax
jne 0x43c472
movzx eax, word [esi]
cmp eax, 0x5f
je 0x43c472
cmp eax, 0x2e
jne 0x43c477
add esi, 2
jmp 0x43c450
cmp esi, edi
jbe 0x43c635
nop
cmp ax, 0x20
je 0x43c48c
cmp ax, 9
jne 0x43c495
movzx eax, word [esi + 2]
add esi, 2
jmp 0x43c480
cmp ax, 0x3a
jne 0x43c4c1
cmp word [esi + 2], 0x3d
jne 0x43c635
push dword [ebp - 0x78]
push edi
mov edi, dword [ebp - 0x14]
mov ecx, edi
call fcn.00442e40
test eax, eax
je 0x43c6bc
jmp 0x43bca9
test ax, ax
je 0x43c4e7
cmp ax, 0x5b
je 0x43c4e7
cmp ax, 0x7b
je 0x43c4e7
cmp ax, 0x3d
jne 0x43c635
cmp word [esi + 2], 0x3e
jne 0x43c635
lea eax, [ebp - 0x4a]
push eax
push dword [ebp - 0x78]
push edi
mov edi, dword [ebp - 0x14]
mov ecx, edi
call fcn.00442a20
test eax, eax
je 0x43c6bc
cmp byte [ebp - 0x4a], 0
jne 0x43bca9
mov edx, dword [ebp - 0x6c]
cmp word [edx], 0x7b
jne 0x43c628
lea esi, [edx + 2]
mov eax, esi
nop dword [eax]
movzx ecx, word [eax]
cmp ecx, 0x20
je 0x43c52d
cmp ecx, 9
jne 0x43c532
add eax, 2
jmp 0x43c520
mov ecx, dword [ebp - 0x68]
sub eax, edx
sar eax, 1
sub ecx, eax
mov dword [ebp - 0x68], ecx
je 0x43c553
lea eax, [ecx + ecx]
push eax
push esi
push edx
call fcn.0049cfe0
add esp, 0xc
jmp 0x43bca9
xor eax, eax
mov word [edx], ax
jmp 0x43bca9
mov edx, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x38]
call fcn.0043a850
mov ecx, edi
push 0
push 0
test al, al
je 0x43c587
push dword [ebp - 0x38]
call fcn.004416c0
test eax, eax
je 0x43c6bc
jmp 0x43bca9
push 0
push dword [ebp - 0x38]
call fcn.0043ec60
test eax, eax
je 0x43c6bc
jmp 0x43bca9
push 0x4cee98
push 0x4d70d0
jmp 0x43c707
mov ecx, dword [ebp - 0x14]
push dword [ebp - 0x38]
push 0x4d7298
mov dword [ecx + 0x644], 0
jmp 0x43c707
push dword [ebp - 0x38]
jmp 0x43c700
push dword [ebp - 0x38]
mov ecx, esi
push 0x4d7240
jmp 0x43c707
push dword [ebp - 0x38]
mov ecx, esi
push 0x4d7048
jmp 0x43c707
push 0x4cee98
push 0x4d70d0
jmp 0x43c705
mov ecx, dword [ebp - 0x14]
push eax
push 0x4d73ec
jmp 0x43c707
push dword [ebp - 0x38]
mov ecx, dword [ebp - 0x14]
push 0x4d73a8
jmp 0x43c707
mov edx, dword [ebp - 0x38]
push edx
push 0x4d7418
jmp 0x43c705
push dword [ebp - 0x38]
push 0x4d7460
jmp 0x43c705
push dword [ebp - 0x38]
mov ecx, dword [ebp - 0x14]
push 0x4d74c0
jmp 0x43c707
push dword [ebp - 0x38]
push 0x4d7384
jmp 0x43c705
lea ebx, [edi + 0x58]
cmp byte [ebp - 0x3e], 0
jne 0x43c6d6
mov eax, dword [edi + 0x44]
test eax, eax
jne 0x43c678
cmp dword [ebx], eax
je 0x43c6d6
lea eax, [edi + 0x70]
push eax
push 0x4d7524
jmp 0x43c705
cmp byte [0x4ea594], 0
mov ecx, 0x4e9ec0
je 0x43c69c
push 0
push eax
push 0
push 0x4cee98
push 0x4d7524
call fcn.0040c990
jmp 0x43c70c
cmp byte [0x4ea597], 0
je 0x43c6c0
push dword [eax + 4]
movzx eax, word [eax + 2]
push eax
push 0x4cee98
push 0x4d7524
call fcn.0040c890
xor esi, esi
jmp 0x43c70e
push 0
push eax
push 0x4cee98
push 0
push 0x4d7524
call fcn.0040d580
jmp 0x43c70c
mov ecx, dword [edi + 0x48]
test ecx, ecx
je 0x43c6e4
call fcn.0040da80
jmp 0x43c70c
cmp dword [edi + 0x1c], 0
jne 0x43c5ed
inc dword [edi + 0x280]
mov esi, 1
jmp 0x43c70e
push 0x4cee98
push 0x4d27e0
mov ecx, edi
call fcn.0040d780
mov esi, eax
push dword [ebp - 0x6c]
call fcn.0049f4a2
add esp, 4
push dword [ebp - 0x38]
call fcn.0049f4a2
mov ecx, dword [ebp - 0xc]
add esp, 4
mov eax, esi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
call fcn.0040dcc0
nop
sal dword [ebx - 0x4c25ffbd], cl
inc ebx
add cl, ah
mov bl, 0x43
add al, ch
mov bl, 0x43
add bh, ch
mov bl, 0x43
add byte [esp + esi*4], al
inc ebx
add dh, dh
mov bl, 0x43
add ch, bh
mov bl, 0x43
add byte [esp + esi*4], cl
inc ebx
add byte [eax], al
add dword [eax], ecx
or byte [eax], cl
add cl, byte [eax]
or byte [eax], cl
or byte [eax], cl
or byte [eax], cl
add ecx, dword [eax]
or byte [eax], cl
add al, 5
push es
or byte [edi], al
nop
out dx, eax
mov bh, 67
add bl, bh
mov bh, 0x43
add byte [eax], al
add dword [eax], eax
add byte [ecx], al
add dword [ecx], eax
add dword [ecx], eax
add byte [eax], al
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add byte [ecx], al
add byte [ecx], al
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add byte [ecx], al
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add byte [esi - 112], ah
cmp byte [eax - 1198653373], 0x43
add byte [eax], al
add dword [eax], eax
add byte [ecx], al
add dword [ecx], eax
add dword [ecx], eax
add byte [eax], al
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add byte [ecx], al
add byte [ecx], al
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add byte [ecx], al
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add dword [ecx], eax
add ah, cl
int3