Function at 0x100035f0
Capabilities:
Create pipe
Manipulate console buffer
Read .ini file
Swap mouse buttons

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
cmp dword [0x10037b08], 0x4d662ae5
jne 0x100037a8
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AllocateUserPhysicalPages]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextVolumeMountPointW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleMode]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetLocaleInfoW]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_BackupRead]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_EnableMenuItem]
push 0
call dword [sym.imp.USER32.dll_SwapMouseButton]
push 0
call dword [sym.imp.USER32.dll_GetDC]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_PeekMessageW]
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
push 0
call dword [sym.imp.USER32.dll_IsIconic]
push 0
call dword [sym.imp.USER32.dll_LoadMenuIndirectW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadSelectorEntry]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProfileIntW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
push 0
call dword [sym.imp.USER32.dll_DestroyIcon]
push 0
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SubtractRect]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_ToAscii]
push 0
push 0
call dword [sym.imp.USER32.dll_SetPhysicalCursorPos]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetUpdateRect]
push 0
push 0
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
push 0
call dword [sym.imp.KERNEL32.dll_SetProcessDEPPolicy]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
call dword [sym.imp.KERNEL32.dll_SetFileApisToOEM]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_ModifyMenuW]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreW]
push 0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
push 0
call dword [sym.imp.USER32.dll_GetMenuContextHelpId]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetUserObjectSecurity]
mov edx, 4
imul eax, edx, 0x1b
mov ecx, dword [0x10087b48]
mov dword [ecx + eax], 0x236e2
call fcn.10003c90
mov edx, 4
imul eax, edx, 0x43
mov ecx, dword [0x10087b48]
mov dword [ecx + eax], 0xee0
mov dword [ebp - 4], 0x3aa
mov dword [ebp - 8], 0x1851
mov edx, dword [ebp - 4]
add edx, dword [ebp - 8]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], 0
jmp 0x10003809
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0x52
jge 0x1000381a
mov edx, dword [ebp - 4]
sub edx, 7
mov dword [ebp - 4], edx
jmp 0x10003800
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 8]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0xee
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, 0x23e9
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x88c
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
and eax, 0x80000001
jns 0x10003882
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10003891
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
jmp 0x10003873
mov edx, dword [ebp - 4]
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 0x1bab
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0xa20
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, 0xb0e
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x3ce
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, 0x1f
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0x51a
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10003900
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x100038e6
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10003933
cmp dword [ebp - 8], 0
jle 0x10003933
mov edx, dword [ebp - 8]
sub edx, 0x130f
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
sub eax, 0x1552
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 8]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 0x1f88
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
and edx, 0x80000003
jns 0x1000398f
dec edx
or edx, 0xfffffffc
inc edx
test edx, edx
je 0x100039a4
cmp dword [ebp - 4], 0
jle 0x100039a4
mov eax, dword [ebp - 4]
add eax, 0x1ea8
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 8]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
and eax, 0x80000001
jns 0x100039c5
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x100039d5
mov ecx, dword [ebp - 4]
add ecx, 0x1aee
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, 0x1f97
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 8]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x201d
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, 0x13f5
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 0x888
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, 0x25bb
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x1286
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x2553
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x1486
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
and ecx, 0x80000001
jns 0x10003a95
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x10003aa5
mov edx, dword [ebp - 8]
sub edx, 0x144
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov dword [ebp - 0x10], 0
jmp 0x10003ac0
mov ecx, dword [ebp - 0x10]
add ecx, 1
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], 0x13
jge 0x10003ad1
mov edx, dword [ebp - 8]
sub edx, 3
mov dword [ebp - 8], edx
jmp 0x10003ab7
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
and ecx, 0x80000001
jns 0x10003b05
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x10003b14
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x10003af5
mov eax, dword [ebp - 4]
sub eax, 0xe12
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x260f
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
and edx, 0x80000003
jns 0x10003b3b
dec edx
or edx, 0xfffffffc
inc edx
test edx, edx
je 0x10003b4a
mov eax, dword [ebp - 4]
add eax, 0x146c
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x1093
mov dword [ebp - 4], ecx
mov dword [ebp - 0x14], 0
jmp 0x10003b68
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], 0x1b
jge 0x10003b79
mov eax, dword [ebp - 4]
sub eax, 9
mov dword [ebp - 4], eax
jmp 0x10003b5f
mov ecx, dword [ebp - 4]
sub ecx, 0x1595
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 8]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x2ca
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 0x22da
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x286
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
and edx, 0x80000003
jns 0x10003bd3
dec edx
or edx, 0xfffffffc
inc edx
test edx, edx
je 0x10003bea
cmp dword [ebp - 8], 0
jle 0x10003bea
mov eax, dword [ebp - 8]
add eax, 0x1e38
mov dword [ebp - 8], eax
jmp 0x10003bf6
mov ecx, dword [ebp - 8]
sub ecx, 0x1e38
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, 0x2047
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, 4
imul eax, edx, 0x35
mov ecx, dword [0x10087b5c]
mov dword [ecx + eax], str.RZepEvsRdn3jT9OJZKmOysV9SXNE0UZFDitqY0IqOSTZd6ODXaItdYjX7I6_sR2ckRijHTHOtaQxiWZkGcOKqsnuxGknsFM_4gNoBclate5V6oOMEDVogdkfqcSLEjRh2iBGpJ79G1QtFHgMDqR9ZfUK8aKqqb3vTr0EdHz0J1iJdsvG5IpLBTxjlc4qnOdgTIeP2AB6ea7BXz3U0rifAswytLhyF_CYSqlnRxC5LrCkx9l60icoZ5CWva49uyGTxapZz6esDt9AztQcnZJ1mmBTnFoJDX9swwQMZie54Pmqb0_saj2NRee1hQruYGOuk8Y_94IFZMZjGQKvaMZhFwqkJJ3irZpvB2OpvoYOC_F6C8tyIyBHJvXro2I87RNq9fQQUvwyNufSZpBIMV3xWAALzrPYIBe5JnPfnMHnpyirjvL_jMNvacOYvD1N10NnqWwmRXxyDp7ASwcNpTtZ4TdjjdUc9IwTzRKUWeGRRt0KAvqtbbS8KJzEl1T3fVYUE6SGWsKfYO9QZKpCWdj1UDFEolREYAkN4rbVN1MjpuFxr1CjGtbEpdV7cyVNd7W4Nw1PrWxEtnzH6ZASggT80p1zBLmuMPoYvHWzEHajzsb2ybtJk4zXY8DVAhFPDTj_LtxYwFiM6Xg0SMixaovzAPmGvOys9_AVT8eJgr6BYYZL77KOw3TWJsCbYnlNAlsSuMz0WORR5nkBH2qBxisbpjjm2OkjlUie3OsN01ibAm2J5wuvYfywh0ylCpJeL2NvjGn26Qh54EA4JKrRIkZuwYEb2dpNL173fa1yQKTn1juVcWg48wtFUCdCW9lQfAHVzPAt74OWqObW5MXT75pRMVdtQLIC3VZb4weovjZ7WKIRh1CgJTeGOdrRIRjuUzl9TIKNp765q1HJWonABdhR_xmoSpwPX07xtlTfB0WNaclpCePjUnl652eofKx5527XwcUmPzgtYBh5oWASWrlXg4zeBZiHEBdq2nq3t4UvCwDPiEKgFT4bJB6iMRrS8rU5w5eaaY9hulaNFjkHCLYWIhVkGeYuJLv9KqDgtCfG8AFH_Ew9WEg2fwxdNid_Ab6mwKClOvSFPMicQhQ32G4fIHalnGvOL6yQP3uOnihz6pPyhQTe5mYVe7MSGhZDtMIOWT0THOKCygiUCxmzAPtk0cjlurNrzeEXNd_5BBfMU_snXRq16dDOuO01VbiakdktOAiGcJrG_IRNMsbk_ijarlenfFFZrnyrhYzIY7b7HZwjA2Ea3w21JT8te2ZUOzld5ANX1C67Lw0NW7AoFA5yISq0hhFxS3kq_xu2P06qO4GcSGrOTtLPH8IiFEFf56xSlA8TBedCBkKuN3sciWtJh69Gs2vWa8dcO3xuD01kwu3pWg666Q9v_DTeR1seUfxQMs02K6BgYZ32aqi4ifA7gbapf420xdTAu8kMKeUoBKM9Be1KLCAHK2uRfCfX67z8KkBHPkURMtu812wdbNGjQhaOQhsDd_z4rk42Y5ZsAxLAbSJPBHz50QfInTCdXtC4zJ8IYadO5mLoQUg_7Du65fDiAelM_r28uUeV_QtJW6sOoMMJHne9mNqv9lA8TBedCBkI2BWcjRZCeL9XNku8tp8OSHTbRhLWiiJ7HKYd0bfNc8vAO1a9B0BqIIR7ARb1UpEUuQcnSGsntJAkeU_bgHmwcnqaiWtLHm8WiY8u9vyZlvuirPvEmH_haOdGplNKB6KR8J4k2ejUN_0PWmyhv2_ypOvILXSV7klna1QvGdc8kipo1_yro_lA8TBedCBkLEC_7zLZQFtoaxy8Q32GSg3VHJOvre2nWWXD8ZnfSRP7l6HF3Gyfa68wCFSbzS6ZCV23KKppC5JmCwmeO5QaYGo6QKKMrincGN8n4jVPqOvUWrkeb1j3YSWr75neOyt8hQbHwh5l2KpZMTHq5Gd_VEhlrCHzm1ibIJqm8GSK9agOrXUns9slA8TBedCBkI3Qu2SnMzBAQZ5quEfQDURrx1Dnf6TcoOJzItl3VfFC6kpt9bplMWqL6NvWZzXdV4phFX4pqfhNEW29kfAze8Tby1NFiPxzEUeYUHCa4OMZ48ojOaVlmm80e5DrufwnE2oHOisVMh0iE9YL1Yx1yk3MVPf23jNGQ_cqjHVPrxBGytvZnRRcZnfaK14Tbnc0XE1UuuJHWEjR9GZzVDWNRjhlt6xcPw_CAdArwlCiVCwDdkbjUW0B1xk0dg8VEt3JtZfcUtxQ7g57fbBJeiRH6ROTZZXzSlSAjP37UnrTODhpE79nspbdCFzb8efkA8DItOYX2GiTI0TfKGV0a0SEY7lM5fWk92lG6ES8UUUm7QQwQNBdu1WuBiWA4mCHGXyWE5LsQimYroJ9oQTt75ZGQW1XQPfMyaDn4SwlTblQYMH4_ofQ0473e1Rw_vy8UQoAq5q8i2NMYCIVRvrmLMaN3YrEXHvoU_IAawkDu4VUN33ZrlQqZLI7uVz0tvVKxkIvAlyZCJulghiMZYLBxiAjnVCj_0ZDKLnRIoxqo02eMQkPzypHpP_zR0J4r13057PvVaYed6QtrHP8ARufuamLwKPqkDPOODmDMU6cjBEf9lCquUbq61oydc31DAKscNxUoKatPT23jcKgUQBVgsLeB9XP8XlrmvFBJGFcvRSaFjAXRNo7XFuKYg3jyxH85KcY5QPEwXnQgZCc5QJ2Buy3zO9ehxaI8hZ4w7SIimd4UpYQuzJTfZCg9jeHg8Qp8p20XvkkxiibPO8Yx7S0feE_x9Pdw4QEZrIvGZ3j4wLwljeTVqWdBpyfMuXdUUVpweEKDoOxa2lu2fUNB3_JFVBpYBXSe0p7ROVw2x7AZ4cCg3npddTV1C7FLRR1p2uWCIl4GU7NGN1HeJVnjf4QeNIwhscpCaIzo8ucY5oZGU_5a2DQhdHDL8iNndFZ1JNHatfjUa3_4PPyx6L4RFhtEc6m7hkmVrxru6eDgvpBtEhfu9zE5WK6EzNCgrgqDuuaAHzAz_3jQYkta0SEY7lM5fWk92lG6ES8UUUm7QQwQNBd_h3xyIrkjZFcEE2BH0a97pLdZ8x1vs3LsNBu3A2aC_yIKqqRrTMiYXhWMNMIHIxTsJ_Yah6fuY603Be5yBMDtrQ7aVShTXtMeF3g6wJmgxVKB0HjUQKDZrD9H_AGRWxlA8TBedCBkJ6W0H0tl3YzMPwvltobOIAEefVVxIeD4mdX4VUgXH5vPQYcpivWtc94Z1d26J9hDbd7DS9nOq_dFFSdUDO541_7eVBukCLjuQCWPbnOnAHRudbBYBd77FCC1Bs1pmYmEzh9k_FeSVj3_MGHZGvSbiXjXB7n6X05abL6EzpNpKmuLUpdvqoHevmReX6HltYbfhqP7AiTm9UoASTQ3k5TahHYljWUcS_GoUGYZzWXVFyyXMbFjp_PchshT0neWWIpqdOcpk6foE3hirN9IGqyi8sPiVCVSa32XYTOjGq00H5C7OACuwECTZmBmGFGpfTmlZB7n4dACDr2FBxAtnGiDcggKwBj9f2fW9g2G5Vela7GNu4Nc30dy9qJ7Ixnn2RC6WJNf_nlQbpAiv6QRNre31HojzKXa351qpa0GTBCzwtWmipGno0zLpskyQqZZGDVx5Q160FlD24YRbt48Kfm7IJSIrMtd42OCMkiJKWocqCz7JU5wWzW3loBDoA989W1y2qgqcnfpUyGCB8_revbKrQnjrMD8xgdYggzmtYgoa6jYezvdvDHhraPJ__ndZaZTqEFr6n8erhBr1WiFeX4cskHR8b85FJTQ0MBpGSmfBdLq7bLnehlmZ6EZ61xs9ZMia3Xe4Ib9qUIW4r9WX2RKI2Q5r5e102ZRFd05QOaxQU_6QHcaPpySuOBlPn6LFLGjJrTGbkEBUI963D8lDA71gMPjZHjo3_TA54iVxzIHRPniZuEmx7E0O3vtWYWWW0FCmwrVIkl90npCZsgyqQY69gKFXQEKqVpL1rNauSUjSQWSrqjdmpxvB5wCm9JB9SdgiiiZQlx
mov esp, ebp
pop ebp
ret