Function at 0x430f70
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Connect udp socket
Create tcp socket
Create udp socket
Receive data
Receive data on socket
Reference http user-agent string
Send data
Send data on socket
Send http request
Send http request with host header
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b4011
mov eax, dword fs:[0]
push eax
mov eax, 0x79e4
call fcn.005788a0
mov eax, dword [0x62d330]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x79a4], edx
mov ebx, ecx
mov dword [ebp - 0x799c], ebx
mov dword [ebp - 0x79ec], 0
lea ecx, [ebp - 0x7888]
mov dword [ebp - 4], 1
call fcn.0040c0b0
sub esp, 0x18
mov byte [ebp - 4], 2
mov ecx, esp
mov dword [ebp - 0x79a0], 0x50
xorps xmm0, xmm0
lea eax, [ebp + 8]
movlpd qword [ebp - 0x79e8], xmm0
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
movlpd qword [ebp - 0x79e0], xmm0
mov byte [ecx], 0
call fcn.004047b0
lea edx, [ebp - 0x79a0]
lea ecx, [ebp - 0x7840]
call fcn.00431dd0
add esp, 0x18
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x7828]
push 0
push 0x6009d2
mov dword [ebp - 0x7814], 0xf
mov dword [ebp - 0x7818], 0
mov byte [ebp - 0x7828], 0
call fcn.00404be0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x7840]
mov esi, dword [ebp - 0x782c]
mov edx, 0x6009d3
mov edi, dword [ebp - 0x7840]
cmp esi, 0x10
push 0
cmovae ecx, edi
call fcn.00405ec0
add esp, 4
test eax, eax
jne 0x43108f
cmp dword [ebp - 0x7830], eax
setne al
test eax, eax
sete al
test al, al
jne 0x431c82
cmp word [ebp - 0x79a0], 0
je 0x431c82
cmp esi, 0x10
lea ecx, [ebp - 0x7840]
cmovae ecx, edi
call fcn.004323b0
test al, al
je 0x4310d8
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x7840]
push eax
lea ecx, [ebp - 0x7828]
call fcn.004047b0
jmp 0x431180
xorps xmm0, xmm0
mov dword [ebp - 0x78a8], 0
movq qword [ebp - 0x78b0], xmm0
mov dword [ebp - 0x78b0], 0
mov dword [ebp - 0x78ac], 0
mov dword [ebp - 0x78a8], 0
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
lea eax, [ebp - 0x7840]
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.004047b0
lea ecx, [ebp - 0x78b0]
call fcn.00432160
mov esi, dword [ebp - 0x78b0]
add esp, 0x18
test al, al
je 0x431163
lea eax, [ebp - 0x7828]
cmp eax, esi
je 0x431163
push 0xffffffffffffffff
push 0
push esi
mov ecx, eax
call fcn.004047b0
mov byte [ebp - 4], 4
test esi, esi
je 0x431180
push dword [ebp - 0x78ac]
push esi
call fcn.00406d80
push esi
call fcn.0044ea28
add esp, 4
mov edx, 0x6009e1
lea ecx, [ebp - 0x7828]
call fcn.00406dc0
test al, al
je 0x43129b
push 0x601874
lea edx, [ebp - 0x7840]
mov byte [ebp - 0x7888], 0
lea ecx, [ebp - 0x78bc]
call fcn.00409970
mov esi, eax
add esp, 4
lea eax, [ebp - 0x7884]
cmp eax, esi
je 0x431202
cmp dword [ebp - 0x7870], 0x10
jb 0x4311db
push dword [ebp - 0x7884]
call fcn.0044ea28
add esp, 4
push esi
lea ecx, [ebp - 0x7884]
mov dword [ebp - 0x7870], 0xf
mov dword [ebp - 0x7874], 0
mov byte [ebp - 0x7884], 0
call fcn.004045a0
cmp dword [ebp - 0x78a8], 0x10
jb 0x431219
push dword [ebp - 0x78bc]
call fcn.0044ea28
add esp, 4
lea eax, [ebp - 0x7888]
mov ecx, ebx
push eax
call fcn.004102a0
cmp dword [ebp - 0x7814], 0x10
jb 0x43123e
push dword [ebp - 0x7828]
call fcn.0044ea28
add esp, 4
cmp dword [ebp - 0x782c], 0x10
mov dword [ebp - 0x7814], 0xf
mov dword [ebp - 0x7818], 0
mov byte [ebp - 0x7828], 0
jb 0x431270
push dword [ebp - 0x7840]
call fcn.0044ea28
add esp, 4
lea ecx, [ebp - 0x7888]
mov dword [ebp - 0x782c], 0xf
mov dword [ebp - 0x7830], 0
mov byte [ebp - 0x7840], 0
call fcn.00406710
jmp 0x431d71
push 0
push 1
push 2
call dword [sym.imp.WS2_32.dll_socket]
mov esi, dword [sym.imp.WS2_32.dll_setsockopt]
mov edi, eax
push 4
lea eax, [ebp - 0x78a4]
mov dword [ebp - 0x7994], edi
push eax
push 0x1005
push 0xffff
push edi
mov dword [ebp - 0x78a4], 0x1388
call esi
push 4
lea eax, [ebp - 0x78a4]
push eax
push 0x1006
push 0xffff
push edi
call esi
mov esi, dword [ebp - 0x79a0]
xorps xmm0, xmm0
mov eax, 2
movq qword [ebp - 0x78e2], xmm0
push esi
mov dword [ebp - 0x78da], 0
mov word [ebp - 0x78d6], 0
mov word [ebp - 0x78e4], ax
call dword [sym.imp.WS2_32.dll_htons]
cmp dword [ebp - 0x7814], 0x10
mov word [ebp - 0x78e2], ax
lea eax, [ebp - 0x7828]
cmovae eax, dword [ebp - 0x7828]
push eax
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [ebp - 0x78e0], eax
lea eax, [ebp - 0x78e4]
push 0x10
push eax
push edi
call dword [sym.imp.WS2_32.dll_connect]
test eax, eax
je 0x431405
mov byte [ebp - 0x7888], 0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x79bc]
call fcn.004157c0
push eax
mov edx, 0x601884
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x78bc]
call fcn.00405a50
add esp, 4
lea ecx, [ebp - 0x7884]
push eax
call fcn.00409850
lea ecx, [ebp - 0x78bc]
call fcn.00404540
lea ecx, [ebp - 0x79bc]
mov byte [ebp - 4], 4
call fcn.00404540
push edi
call dword [sym.imp.WS2_32.dll_closesocket]
lea eax, [ebp - 0x7888]
mov ecx, ebx
push eax
call fcn.004102a0
lea ecx, [ebp - 0x7828]
call fcn.00404540
lea ecx, [ebp - 0x7840]
call fcn.00404540
lea ecx, [ebp - 0x7888]
call fcn.00406710
lea ecx, [ebp + 8]
call fcn.00404540
lea ecx, [ebp + 0x20]
call fcn.00404540
jmp 0x431da5
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x7840]
mov dword [ebp - 0x78c0], 0xf
push eax
lea ecx, [ebp - 0x78d4]
mov dword [ebp - 0x78c4], 0
mov byte [ebp - 0x78d4], 0
call fcn.004047b0
mov byte [ebp - 4], 7
cmp si, 0x50
je 0x4314a7
movzx edx, si
lea ecx, [ebp - 0x79d4]
call fcn.004057c0
mov esi, eax
push 0x601898
lea edx, [ebp - 0x78d4]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x78bc]
call fcn.00409970
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x79bc]
call fcn.00405b80
add esp, 4
lea ecx, [ebp - 0x79bc]
call fcn.00404540
lea ecx, [ebp - 0x78bc]
call fcn.00404540
lea ecx, [ebp - 0x79d4]
mov byte [ebp - 4], 7
call fcn.00404540
push 0x6009e2
lea ecx, [ebp - 0x78a0]
call fcn.00404470
push 0x60189c
sub esp, 0x18
mov byte [ebp - 4], 0xa
mov ecx, esp
lea eax, [ebp + 8]
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.004047b0
lea ecx, [ebp - 0x78bc]
call fcn.00430df0
push eax
mov edx, str.GET
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x79bc]
call fcn.00405a50
add esp, 0x1c
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x79d4]
call fcn.00405ae0
add esp, 4
lea ecx, [ebp - 0x78a0]
push eax
call fcn.00409850
lea ecx, [ebp - 0x79d4]
call fcn.00404540
lea ecx, [ebp - 0x79bc]
call fcn.00404540
lea ecx, [ebp - 0x78bc]
mov byte [ebp - 4], 0xa
call fcn.00404540
lea eax, [ebp - 0x78d4]
mov edx, 0x6018b4
push eax
lea ecx, [ebp - 0x79bc]
call fcn.00408180
add esp, 4
push 0x6018b0
mov edx, eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x79d4]
call fcn.00405ae0
add esp, 4
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x78a0]
mov byte [ebp - 4], 0xe
call fcn.00404600
lea ecx, [ebp - 0x79d4]
call fcn.00404540
lea ecx, [ebp - 0x79bc]
mov byte [ebp - 4], 0xa
call fcn.00404540
push 0x6018bc
lea ecx, [ebp - 0x78a0]
call fcn.00408270
push 0x6018d0
lea ecx, [ebp - 0x78a0]
call fcn.00408270
push 0x601908
lea ecx, [ebp - 0x78a0]
call fcn.00408270
push 0x601960
lea ecx, [ebp - 0x78a0]
call fcn.00408270
push 0x6018ec
lea ecx, [ebp - 0x78a0]
call fcn.00408270
push 0x6019dc
lea ecx, [ebp - 0x78a0]
call fcn.00408270
push 0x601a00
lea ecx, [ebp - 0x78a0]
call fcn.00408270
cmp dword [ebp - 0x788c], 0x10
lea eax, [ebp - 0x78a0]
push 0
push dword [ebp - 0x7890]
cmovae eax, dword [ebp - 0x78a0]
push eax
push edi
call dword [sym.imp.WS2_32.dll_send]
test eax, eax
jne 0x4316cf
mov byte [ebp - 0x7888], al
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x79bc]
call fcn.004157c0
push eax
mov edx, 0x601a04
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x79d4]
call fcn.00405a50
add esp, 4
lea ecx, [ebp - 0x7884]
push eax
call fcn.00409850
lea ecx, [ebp - 0x79d4]
call fcn.00404540
lea ecx, [ebp - 0x79bc]
mov byte [ebp - 4], 0xa
call fcn.00404540
push edi
call dword [sym.imp.WS2_32.dll_closesocket]
lea eax, [ebp - 0x7888]
mov ecx, ebx
push eax
call fcn.004102a0
lea ecx, [ebp - 0x78a0]
call fcn.00404540
lea ecx, [ebp - 0x78d4]
call fcn.00404540
jmp 0x4313cf
push 0x7800
lea eax, [ebp - 0x7810]
push 0
push eax
call fcn.005787d0
add esp, 0xc
lea eax, [ebp - 0x7990]
xor edi, edi
push 0xa8
push edi
push eax
call fcn.005787d0
add esp, 8
lea ecx, [ebp - 0x7990]
call fcn.0042fbd0
push edi
push 0x7800
lea eax, [ebp - 0x7810]
mov byte [ebp - 4], 0x10
push eax
push dword [ebp - 0x7994]
call dword [sym.imp.WS2_32.dll_recv]
test eax, eax
jle 0x431c41
mov ebx, dword [ebp - 0x79dc]
mov esi, dword [ebp - 0x79e0]
jmp 0x431740
add edi, eax
lea eax, [ebp - 0x7810]
push str._r_n_r_n
push eax
call fcn.005771a0
add esp, 8
mov dword [ebp - 0x79a0], eax
test eax, eax
je 0x431887
lea eax, [ebp - 0x7810]
push 0x601a2c
push eax
call fcn.005771a0
add esp, 8
test eax, eax
je 0x431adf
cmp eax, dword [ebp - 0x79a0]
ja 0x431a4d
add eax, 0xf
push eax
call fcn.00577420
mov ebx, edx
add esp, 4
mov esi, eax
test ebx, ebx
jl 0x4319bb
jg 0x4317ae
test esi, esi
je 0x4319bb
mov eax, dword [ebp - 0x79a4]
test eax, eax
je 0x4317c3
push 0
push 0
push ebx
push esi
call eax
add esp, 0x10
mov eax, dword [ebp - 0x79a0]
lea ecx, [ebp - 0x7810]
sub eax, ecx
add eax, 4
cmp edi, eax
jle 0x431893
sub edi, eax
lea ecx, [ebp + 0x20]
cmp dword [ebp + 0x34], 0x10
mov eax, edi
cdq
cmovae ecx, dword [ebp + 0x20]
mov edi, eax
push ecx
push 0x22
push ecx
lea ecx, [ebp - 0x7990]
mov dword [ebp - 0x7998], edx
call fcn.0042fd70
mov eax, dword [ebp - 0x7990]
mov eax, dword [eax + 4]
test byte [ebp + eax - 0x7984], 6
je 0x4318ce
lea eax, [ebp + 0x20]
mov byte [ebp - 0x7888], 0
push eax
mov edx, 0x601a94
lea ecx, [ebp - 0x79bc]
call fcn.00408180
add esp, 4
mov byte [ebp - 4], 0x11
push 0x601a8c
mov edx, eax
lea ecx, [ebp - 0x79d4]
call fcn.00405ae0
add esp, 4
lea ecx, [ebp - 0x7884]
push eax
call fcn.00409850
lea ecx, [ebp - 0x79d4]
call fcn.00404540
lea ecx, [ebp - 0x79bc]
mov byte [ebp - 4], 0x10
call fcn.00404540
lea ecx, [ebp - 0x7990]
call fcn.0042fdd0
jmp 0x431a64
cmp edi, 0x7800
jge 0x431c31
push 0
mov eax, 0x7800
sub eax, edi
push eax
lea eax, [ebp - 0x7810]
add eax, edi
push eax
push dword [ebp - 0x7994]
call dword [sym.imp.WS2_32.dll_recv]
test eax, eax
jg 0x431740
mov ecx, dword [ebp - 0x79e4]
mov edi, dword [ebp - 0x79e8]
mov dword [ebp - 0x7998], ecx
jmp 0x431947
push dword [ebp - 0x7998]
mov eax, dword [ebp - 0x79a0]
lea ecx, [ebp - 0x7990]
push edi
add eax, 4
push eax
call fcn.0042ee80
mov eax, dword [ebp - 0x7990]
mov eax, dword [eax + 4]
test byte [ebp + eax - 0x7984], 6
je 0x431929
lea eax, [ebp + 0x20]
mov byte [ebp - 0x7888], 0
push eax
mov edx, 0x601aa8
lea ecx, [ebp - 0x79bc]
call fcn.00408180
add esp, 4
mov byte [ebp - 4], 0x12
push 0x601aa0
jmp 0x431841
mov edx, dword [ebp - 0x79a4]
test edx, edx
je 0x431941
push dword [ebp - 0x7998]
push edi
push ebx
push esi
call edx
add esp, 0x10
mov ecx, dword [ebp - 0x7998]
cmp dword [ebp - 0x79a0], 0
je 0x431c3b
mov eax, edi
or eax, ecx
jne 0x431ae9
cmp dword [ebp + 0x34], 0x10
lea eax, [ebp + 0x20]
push ecx
cmovae eax, dword [ebp + 0x20]
lea ecx, [ebp - 0x7990]
push 0x22
push eax
call fcn.0042fd70
mov eax, dword [ebp - 0x7990]
mov eax, dword [eax + 4]
test byte [ebp + eax - 0x7984], 6
je 0x431ae9
lea eax, [ebp + 0x20]
mov byte [ebp - 0x7888], 0
push eax
mov edx, 0x601b30
lea ecx, [ebp - 0x79bc]
call fcn.00408180
add esp, 4
mov byte [ebp - 4], 0x13
push 0x601b28
jmp 0x431841
push 0x601a64
lea ecx, [ebp - 0x7884]
mov byte [ebp - 0x7888], 0
call fcn.00405a10
push dword [ebp - 0x7994]
call dword [sym.imp.WS2_32.dll_closesocket]
mov ecx, dword [ebp - 0x799c]
lea eax, [ebp - 0x7888]
push eax
call fcn.004102a0
lea ecx, [ebp - 0x7990]
call fcn.0042d9f0
lea ecx, [ebp - 0x78a0]
call fcn.00404540
lea ecx, [ebp - 0x78d4]
call fcn.00404540
lea ecx, [ebp - 0x7828]
call fcn.00404540
lea ecx, [ebp - 0x7840]
call fcn.00404540
lea ecx, [ebp - 0x7888]
call fcn.00406710
lea ecx, [ebp + 8]
call fcn.00404540
lea ecx, [ebp + 0x20]
call fcn.00404540
mov eax, dword [ebp - 0x799c]
jmp 0x431da7
push 0x601a3c
lea ecx, [ebp - 0x7884]
mov byte [ebp - 0x7888], 0
call fcn.00405a10
push dword [ebp - 0x7994]
call dword [sym.imp.WS2_32.dll_closesocket]
mov ecx, dword [ebp - 0x799c]
lea eax, [ebp - 0x7888]
push eax
call fcn.004102a0
lea ecx, [ebp - 0x7990]
call fcn.0042d9f0
lea ecx, [ebp - 0x78a0]
call fcn.00404540
lea ecx, [ebp - 0x78d4]
call fcn.00404540
lea ecx, [ebp - 0x7828]
call fcn.00404540
lea ecx, [ebp - 0x7840]
call fcn.00404540
lea ecx, [ebp - 0x7888]
call fcn.00406710
lea ecx, [ebp + 8]
call fcn.00404540
lea ecx, [ebp + 0x20]
call fcn.00404540
mov eax, dword [ebp - 0x799c]
jmp 0x431da7
push 0x601ab0
jmp 0x431a52
push 0
push 0x7800
lea eax, [ebp - 0x7810]
push eax
push dword [ebp - 0x7994]
call dword [sym.imp.WS2_32.dll_recv]
test eax, eax
jle 0x431b9c
jmp 0x431b10
cdq
mov ecx, eax
mov eax, dword [ebp - 0x7998]
add edi, ecx
adc eax, edx
mov dword [ebp - 0x7998], eax
cmp eax, ebx
jg 0x431ba2
jl 0x431b2d
cmp edi, esi
ja 0x431ba2
push edx
push ecx
lea eax, [ebp - 0x7810]
push eax
lea ecx, [ebp - 0x7990]
call fcn.0042ee80
mov eax, dword [ebp - 0x7990]
mov eax, dword [eax + 4]
test byte [ebp + eax - 0x7984], 6
jne 0x431bba
mov eax, dword [ebp - 0x79a4]
test eax, eax
je 0x431b6c
push dword [ebp - 0x7998]
push edi
push ebx
push esi
call eax
add esp, 0x10
cmp edi, esi
jne 0x431b7a
mov eax, dword [ebp - 0x7998]
cmp ebx, eax
je 0x431ba8
push 0
push 0x7800
lea eax, [ebp - 0x7810]
push eax
push dword [ebp - 0x7994]
call dword [sym.imp.WS2_32.dll_recv]
test eax, eax
jg 0x431b10
mov eax, dword [ebp - 0x7998]
cmp ebx, eax
jl 0x431be6
jg 0x431bac
cmp esi, edi
jbe 0x431be6
mov byte [ebp - 0x7888], 0
push 0x601b4c
jmp 0x431c0a
lea eax, [ebp + 0x20]
mov byte [ebp - 0x7888], 0
push eax
mov edx, 0x601b44
lea ecx, [ebp - 0x79bc]
call fcn.00408180
add esp, 4
mov byte [ebp - 4], 0x14
push 0x601b3c
jmp 0x431841
cmp eax, ebx
jl 0x431bfe
jg 0x431bf0
cmp edi, esi
jbe 0x431bfe
mov byte [ebp - 0x7888], 0
push 0x601b74
jmp 0x431c0a
mov byte [ebp - 0x7888], 1
push 0x601b9c
lea ecx, [ebp - 0x7884]
call fcn.00405a10
push dword [ebp - 0x7994]
call dword [sym.imp.WS2_32.dll_closesocket]
lea ecx, [ebp - 0x7990]
call fcn.0042fdd0
jmp 0x431a70
push 0x601ad0
jmp 0x431a52
mov ebx, dword [ebp - 0x799c]
push 0x601afc
lea ecx, [ebp - 0x7884]
mov byte [ebp - 0x7888], 0
call fcn.00405a10
push dword [ebp - 0x7994]
call dword [sym.imp.WS2_32.dll_closesocket]
lea eax, [ebp - 0x7888]
mov ecx, ebx
push eax
call fcn.004102a0
lea ecx, [ebp - 0x7990]
call fcn.0042d9f0
jmp 0x4316b4
push 7
push 0x60186c
lea ecx, [ebp - 0x7884]
mov byte [ebp - 0x7888], 0
call fcn.00404be0
lea eax, [ebp - 0x7888]
mov ecx, ebx
push eax
call fcn.004102a0
cmp dword [ebp - 0x7814], 0x10
jb 0x431cc0
push dword [ebp - 0x7828]
call fcn.0044ea28
add esp, 4
cmp dword [ebp - 0x782c], 0x10
mov dword [ebp - 0x7814], 0xf
mov dword [ebp - 0x7818], 0
mov byte [ebp - 0x7828], 0
jb 0x431cf2
push dword [ebp - 0x7840]
call fcn.0044ea28
add esp, 4
cmp dword [ebp - 0x7858], 0x10
mov dword [ebp - 0x782c], 0xf
mov dword [ebp - 0x7830], 0
mov byte [ebp - 0x7840], 0
jb 0x431d24
push dword [ebp - 0x786c]
call fcn.0044ea28
add esp, 4
cmp dword [ebp - 0x7870], 0x10
mov dword [ebp - 0x7858], 0xf
mov dword [ebp - 0x785c], 0
mov byte [ebp - 0x786c], 0
jb 0x431d56
push dword [ebp - 0x7884]
call fcn.0044ea28
add esp, 4
mov dword [ebp - 0x7870], 0xf
mov dword [ebp - 0x7874], 0
mov byte [ebp - 0x7884], 0
cmp dword [ebp + 0x1c], 0x10
jb 0x431d82
push dword [ebp + 8]
call fcn.0044ea28
add esp, 4
cmp dword [ebp + 0x34], 0x10
mov byte [ebp + 8], 0
mov dword [ebp + 0x18], 0
mov dword [ebp + 0x1c], 0xf
jb 0x431da5
push dword [ebp + 0x20]
call fcn.0044ea28
add esp, 4
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005743c4
mov esp, ebp
pop ebp
ret