Function at 0x737e70
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x756768
mov eax, dword fs:[0]
push eax
sub esp, 0x810
push esi
push edi
push ecx
lea edi, [ebp - 0x81c]
mov ecx, 0x204
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
pop ecx
mov eax, dword [0x85e00c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], 1
push 0x400
push 0
lea eax, [ebp - 0x418]
push eax
call fcn.005c1f30
add esp, 0xc
push str.3h6PBU0DAcDnkQBv
lea ecx, [ebp - 0x454]
call fcn.00409910
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x454]
push ecx
lea edx, [ebp + 8]
push edx
lea eax, [ebp - 0x438]
push eax
call fcn.0040d960
mov ecx, eax
call fcn.0073a4f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x454]
call fcn.00409780
lea ecx, [ebp - 0x45c]
call fcn.00432249
push 0x70
lea ecx, [ebp - 0x4d4]
call fcn.00403460
lea ecx, [ebp - 0x45c]
push ecx
lea ecx, [ebp - 0x4d4]
call fcn.00432251
mov byte [ebp - 4], 5
push 0x10
lea ecx, [ebp - 0x4ec]
call fcn.00403460
push 0
lea ecx, [ebp - 0x4ec]
call fcn.00434c44
mov byte [ebp - 4], 6
push 1
lea edx, [ebp - 0x4ec]
push edx
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0x4d4]
call fcn.00433a9b
movzx ecx, al
test ecx, ecx
je 0x738bdf
lea ecx, [ebp - 0x4ec]
call fcn.00435ad4
movzx edx, al
test edx, edx
jne 0x738bdf
push str.user
lea ecx, [ebp - 0x4ec]
call fcn.00434f44
mov dword [ebp - 0x4f4], eax
mov ecx, dword [ebp - 0x4f4]
call fcn.00435ad4
movzx eax, al
test eax, eax
jne 0x738149
push 0x7fa8f4
mov ecx, dword [ebp - 0x4f4]
call fcn.00434fc4
mov dword [ebp - 0x4f8], eax
mov ecx, dword [ebp - 0x4f8]
call fcn.00435ad4
movzx ecx, al
test ecx, ecx
jne 0x73801e
mov ecx, dword [ebp - 0x4f8]
call fcn.00435aed
movzx edx, al
test edx, edx
je 0x73801e
mov ecx, dword [ebp - 0x4f8]
call fcn.00435523
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x11c]
push ecx
call fcn.005d13e0
add esp, 8
push 0x7fa994
mov ecx, dword [ebp - 0x4f4]
call fcn.00434fc4
mov dword [ebp - 0x4fc], eax
mov ecx, dword [ebp - 0x4fc]
call fcn.00435ad4
movzx edx, al
test edx, edx
jne 0x7380d1
mov ecx, dword [ebp - 0x4fc]
call fcn.00435aed
movzx eax, al
test eax, eax
je 0x7380d1
mov ecx, dword [ebp - 0x4fc]
call fcn.00435523
push eax
lea ecx, [ebp - 0x518]
call fcn.00409910
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x518]
push ecx
lea edx, [ebp - 0x534]
push edx
call fcn.0042eec2
add esp, 8
mov dword [ebp - 0x7ec], eax
mov ecx, dword [ebp - 0x7ec]
call fcn.00409600
push eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x11c]
add ecx, 0x104
push ecx
call fcn.005d13e0
add esp, 8
lea ecx, [ebp - 0x534]
call fcn.00409780
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x518]
call fcn.00409780
push 0x7fbce4
mov ecx, dword [ebp - 0x4f4]
call fcn.00434fc4
mov dword [ebp - 0x538], eax
mov ecx, dword [ebp - 0x538]
call fcn.00435ad4
movzx edx, al
test edx, edx
jne 0x738149
mov ecx, dword [ebp - 0x538]
call fcn.00435aed
movzx eax, al
test eax, eax
je 0x738149
mov ecx, dword [ebp - 0x538]
call fcn.00435523
push eax
lea ecx, [ebp - 0x418]
push ecx
call fcn.005d13e0
add esp, 8
mov ecx, dword [ebp - 0x538]
call fcn.00435523
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x11c]
add eax, 0x410
push eax
call fcn.005d13e0
add esp, 8
push str.rights
lea ecx, [ebp - 0x4ec]
call fcn.00434f44
mov dword [ebp - 0x53c], eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x544], xmm0
xorps xmm0, xmm0
movlpd qword [ebp - 0x54c], xmm0
mov ecx, dword [ebp - 0x53c]
call fcn.00435ad4
movzx ecx, al
test ecx, ecx
jne 0x7383ec
mov ecx, dword [ebp - 0x53c]
call fcn.00435ab3
movzx edx, al
test edx, edx
je 0x7383ec
push str.productType
push 0
mov ecx, dword [ebp - 0x53c]
call fcn.00434f6d
mov ecx, eax
call fcn.00434fc4
mov dword [ebp - 0x550], eax
mov ecx, dword [ebp - 0x550]
call fcn.00435ad4
movzx eax, al
test eax, eax
jne 0x7383ec
mov ecx, dword [ebp - 0x550]
call fcn.00435aed
movzx ecx, al
test ecx, ecx
je 0x7383ec
lea edx, [ebp - 0x56c]
push edx
mov ecx, dword [ebp - 0x550]
call fcn.0043573c
mov byte [ebp - 4], 8
push str.MEMBER
lea eax, [ebp - 0x56c]
push eax
call fcn.0040b570
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x7383dd
push str.endTime
push 0
mov ecx, dword [ebp - 0x53c]
call fcn.00434f6d
mov ecx, eax
call fcn.00434fc4
mov dword [ebp - 0x574], eax
mov ecx, dword [ebp - 0x574]
call fcn.00435ad4
movzx edx, al
test edx, edx
jne 0x73833e
mov ecx, dword [ebp - 0x574]
call fcn.00435af5
movzx eax, al
test eax, eax
je 0x73833e
mov ecx, dword [ebp - 0x574]
call fcn.004357ab
mov dword [ebp - 0x544], eax
mov dword [ebp - 0x540], edx
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x11c]
mov eax, dword [ebp - 0x544]
mov dword [edx + 0x518], eax
mov ecx, dword [ebp - 0x540]
mov dword [edx + 0x51c], ecx
push 0
push 0x3e8
mov edx, dword [ebp - 0x540]
push edx
mov eax, dword [ebp - 0x544]
push eax
call fcn.005f0680
push edx
push eax
lea ecx, [ebp - 0x58c]
push ecx
call fcn.0043c95a
add esp, 0xc
mov dword [ebp - 0x7f0], eax
mov edx, dword [ebp - 0x7f0]
mov dword [ebp - 0x7f4], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x7f4]
push eax
lea ecx, [ebp - 0x5a4]
push ecx
call fcn.0042ef95
add esp, 8
mov dword [ebp - 0x7f8], eax
mov ecx, dword [ebp - 0x7f8]
call fcn.00409600
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x11c]
add eax, 0x30c
push eax
call fcn.005d13e0
add esp, 8
lea ecx, [ebp - 0x5a4]
call fcn.00409780
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x58c]
call fcn.00409350
push str.nowTime
push 0
mov ecx, dword [ebp - 0x53c]
call fcn.00434f6d
mov ecx, eax
call fcn.00434fc4
mov dword [ebp - 0x5a8], eax
mov ecx, dword [ebp - 0x5a8]
call fcn.00435ad4
movzx ecx, al
test ecx, ecx
jne 0x7383dd
mov ecx, dword [ebp - 0x5a8]
call fcn.00435af5
movzx edx, al
test edx, edx
je 0x7383dd
mov ecx, dword [ebp - 0x5a8]
call fcn.004357ab
mov dword [ebp - 0x54c], eax
mov dword [ebp - 0x548], edx
cmp dword [ebp - 0x540], 0
ja 0x7383aa
cmp dword [ebp - 0x544], 0
jbe 0x7383dd
mov eax, dword [ebp - 0x540]
push eax
mov ecx, dword [ebp - 0x544]
push ecx
mov edx, dword [ebp - 0x548]
push edx
mov eax, dword [ebp - 0x54c]
push eax
call fcn.0043c8f6
add esp, 0x10
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x11c]
mov dword [edx + 0x520], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x56c]
call fcn.00409780
lea eax, [ebp - 0x418]
push eax
call fcn.005c5710
add esp, 4
test eax, eax
jbe 0x738765
call fcn.0040b4b0
mov ecx, eax
call fcn.00738e30
push eax
lea ecx, [ebp - 0x5c4]
push ecx
call fcn.0043cc61
add esp, 8
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x11c]
push eax
lea ecx, [ebp - 0x5e0]
call fcn.00409910
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x5e0]
push ecx
lea edx, [ebp - 0x5f8]
push edx
call fcn.0042ec8a
add esp, 8
mov dword [ebp - 0x7fc], eax
mov eax, dword [ebp - 0x7fc]
mov dword [ebp - 0x800], eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x800]
push ecx
lea ecx, [ebp - 0x5c4]
call fcn.0040d5a0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x5f8]
call fcn.00409350
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x5e0]
call fcn.00409780
push str..png
lea ecx, [ebp - 0x610]
call fcn.00409910
mov byte [ebp - 4], 0xd
lea edx, [ebp - 0x610]
push edx
lea eax, [ebp - 0x628]
push eax
call fcn.0042ec8a
add esp, 8
mov dword [ebp - 0x804], eax
mov ecx, dword [ebp - 0x804]
mov dword [ebp - 0x808], ecx
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x808]
push edx
lea ecx, [ebp - 0x5c4]
call fcn.0040d5a0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x628]
call fcn.00409350
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x610]
call fcn.00409780
lea eax, [ebp - 0x418]
push eax
lea ecx, [ebp - 0x644]
push ecx
call fcn.0043bc19
add esp, 8
mov byte [ebp - 4], 0xf
push 0x7faae4
push 0x7fbd14
push 0x7faba4
lea edx, [ebp - 0x664]
push edx
call fcn.0040b4b0
mov ecx, eax
call fcn.00739390
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x664]
call fcn.00409240
push eax
lea ecx, [ebp - 0x644]
call fcn.00409240
push eax
call fcn.005c5a49
add esp, 8
test eax, eax
jne 0x738608
lea ecx, [ebp - 0x5c4]
call fcn.00409240
mov esi, esp
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp esi, esp
call fcn.00740732
test eax, eax
je 0x738608
lea ecx, [ebp - 0x5c4]
call fcn.00409240
push eax
lea ecx, [ebp - 0x680]
call fcn.00409440
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x680]
push eax
lea ecx, [ebp - 0x698]
push ecx
call fcn.0042ef95
add esp, 8
mov dword [ebp - 0x80c], eax
mov ecx, dword [ebp - 0x80c]
call fcn.00409600
push eax
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x11c]
add eax, 0x208
push eax
call fcn.005d13e0
add esp, 8
lea ecx, [ebp - 0x698]
call fcn.00409780
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x680]
call fcn.00409350
jmp 0x738738
lea ecx, [ebp - 0x664]
call fcn.00409240
push eax
lea ecx, [ebp - 0x644]
call fcn.00409240
push eax
call fcn.005c5a49
add esp, 8
test eax, eax
je 0x73864e
lea ecx, [ebp - 0x644]
call fcn.00409240
push eax
push str.iconUrlTime
push 0x7fac5c
call fcn.0040b4b0
mov ecx, eax
call fcn.00739330
lea ecx, [ebp - 0x5c4]
push ecx
lea edx, [ebp - 0x6b0]
push edx
call fcn.0042ef95
add esp, 8
mov dword [ebp - 0x810], eax
mov eax, dword [ebp - 0x810]
mov dword [ebp - 0x814], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x814]
call fcn.00409600
push eax
lea ecx, [ebp - 0x418]
push ecx
call fcn.0043bae8
add esp, 8
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x6b0]
call fcn.00409780
lea ecx, [ebp - 0x5c4]
call fcn.00409240
mov esi, esp
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp esi, esp
call fcn.00740732
test eax, eax
je 0x738738
lea ecx, [ebp - 0x5c4]
call fcn.00409240
push eax
lea ecx, [ebp - 0x6c8]
call fcn.00409440
mov byte [ebp - 4], 0x13
lea edx, [ebp - 0x6c8]
push edx
lea eax, [ebp - 0x6e0]
push eax
call fcn.0042ef95
add esp, 8
mov dword [ebp - 0x818], eax
mov ecx, dword [ebp - 0x818]
call fcn.00409600
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x11c]
add edx, 0x208
push edx
call fcn.005d13e0
add esp, 8
lea ecx, [ebp - 0x6e0]
call fcn.00409780
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x6c8]
call fcn.00409350
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x664]
call fcn.00409350
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x644]
call fcn.00409350
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5c4]
call fcn.00409350
cmp dword [ebp + 0x38], 0x2711
je 0x738bdf
push 0x10
lea ecx, [ebp - 0x6f4]
call fcn.00403460
push 0
lea ecx, [ebp - 0x6f4]
call fcn.00434c44
mov byte [ebp - 4], 0x14
mov eax, dword [ebp + 0x38]
push eax
lea ecx, [ebp - 0x740]
call fcn.00434be6
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x740]
push ecx
push 0x7fbd44
lea ecx, [ebp - 0x6f4]
call fcn.00434f44
mov ecx, eax
call fcn.00434df7
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x740]
call fcn.00434da5
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x11c]
push eax
lea ecx, [ebp - 0x750]
call fcn.00434c1a
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x750]
push ecx
push 0x7fad14
lea ecx, [ebp - 0x6f4]
call fcn.00434f44
mov ecx, eax
call fcn.00434df7
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x750]
call fcn.00434da5
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x11c]
add eax, 0x104
push eax
lea ecx, [ebp - 0x760]
call fcn.00434c1a
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x760]
push ecx
push 0x7fadb4
lea ecx, [ebp - 0x6f4]
call fcn.00434f44
mov ecx, eax
call fcn.00434df7
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x760]
call fcn.00434da5
lea edx, [ebp - 0x418]
push edx
lea ecx, [ebp - 0x770]
call fcn.00434c1a
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x770]
push eax
push str.uiconUrl
lea ecx, [ebp - 0x6f4]
call fcn.00434f44
mov ecx, eax
call fcn.00434df7
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x770]
call fcn.00434da5
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x11c]
add edx, 0x208
push edx
lea ecx, [ebp - 0x780]
call fcn.00434c1a
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x780]
push eax
push str.localUiconPath
lea ecx, [ebp - 0x6f4]
call fcn.00434f44
mov ecx, eax
call fcn.00434df7
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x780]
call fcn.00434da5
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x11c]
add edx, 0x30c
push edx
lea ecx, [ebp - 0x790]
call fcn.00434c1a
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x790]
push eax
push 0x7faf24
lea ecx, [ebp - 0x6f4]
call fcn.00434f44
mov ecx, eax
call fcn.00434df7
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x790]
call fcn.00434da5
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x11c]
mov eax, dword [edx + 0x520]
push eax
lea ecx, [ebp - 0x7a0]
call fcn.00434be6
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x7a0]
push ecx
push str.vipTermOfValidity
lea ecx, [ebp - 0x6f4]
call fcn.00434f44
mov ecx, eax
call fcn.00434df7
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x7a0]
call fcn.00434da5
lea edx, [ebp + 0x20]
push edx
lea ecx, [ebp - 0x7b0]
call fcn.00434bb1
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x7b0]
push eax
push 0x7fbd64
lea ecx, [ebp - 0x6f4]
call fcn.00434f44
mov ecx, eax
call fcn.00434df7
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x7b0]
call fcn.00434da5
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx + 0x11c]
call fcn.0040d500
movzx edx, al
push edx
lea ecx, [ebp - 0x7c0]
call fcn.00434d02
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x7c0]
push eax
push str.isLogin
lea ecx, [ebp - 0x6f4]
call fcn.00434f44
mov ecx, eax
call fcn.00434df7
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x7c0]
call fcn.00434da5
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx + 0x11c]
call fcn.0040d4b0
movzx edx, al
push edx
lea ecx, [ebp - 0x7d0]
call fcn.00434d02
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x7d0]
push eax
push str.isVip
lea ecx, [ebp - 0x6f4]
call fcn.00434f44
mov ecx, eax
call fcn.00434df7
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x7d0]
call fcn.00434da5
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx + 0x11c]
call fcn.0040d450
movzx edx, al
push edx
lea ecx, [ebp - 0x7e0]
call fcn.00434d02
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x7e0]
push eax
push str.isSuperVip
lea ecx, [ebp - 0x6f4]
call fcn.00434f44
mov ecx, eax
call fcn.00434df7
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x7e0]
call fcn.00434da5
lea ecx, [ebp - 0x714]
push ecx
lea ecx, [ebp - 0x6f4]
call fcn.00435d67
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x714]
call fcn.00409210
add eax, 1
push eax
call fcn.00419a86
add esp, 4
mov dword [ebp - 0x7e4], eax
mov edx, dword [ebp - 0x7e4]
mov dword [ebp - 0x71c], edx
lea ecx, [ebp - 0x714]
call fcn.00409210
add eax, 1
push eax
push 0
mov eax, dword [ebp - 0x71c]
push eax
call fcn.005c1f30
add esp, 0xc
lea ecx, [ebp - 0x714]
call fcn.00409600
push eax
mov ecx, dword [ebp - 0x71c]
push ecx
call fcn.005d13e0
add esp, 8
mov dword [ebp - 0x72c], 0x5220
mov edx, dword [ebp - 0x71c]
push edx
call fcn.005c5710
add esp, 4
mov dword [ebp - 0x728], eax
mov eax, dword [ebp - 0x71c]
mov dword [ebp - 0x724], eax
mov esi, esp
lea ecx, [ebp - 0x72c]
push ecx
push 0
push 0x4a
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x120]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp esi, esp
call fcn.00740732
mov ecx, dword [ebp - 0x71c]
mov dword [ebp - 0x7e8], ecx
mov edx, dword [ebp - 0x7e8]
push edx
call fcn.00419975
add esp, 4
cmp dword [ebp - 0x7e8], 0
jne 0x738bab
mov dword [ebp - 0x81c], 0
jmp 0x738bc1
mov dword [ebp - 0x71c], 0x8123
mov eax, dword [ebp - 0x71c]
mov dword [ebp - 0x81c], eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x714]
call fcn.00409780
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6f4]
call fcn.00434da5
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x4ec]
call fcn.00434da5
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4d4]
call fcn.00408d30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x438]
call fcn.00409780
mov byte [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.00409780
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x20]
call fcn.00409780
push edx
mov ecx, ebp
push eax
lea edx, [0x738c64]
call fcn.007406de
pop eax
pop edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00419933
add esp, 0x81c
cmp ebp, esp
call fcn.00740732
mov esp, ebp
pop ebp
ret 0x34