Function at 0x10093b20
Capabilities:
Create thread

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x102c86f5
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xc0
mov eax, dword [0x1066bbc0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, dword [0x106d663c]
push 0xd
push 0x1034efa4
mov dword [ebp - 0x88], 0
mov eax, dword [ecx + 0x3e30]
mov dword [ebp - 0x84], 0
mov byte [eax + 0x9c], 1
mov eax, dword [ecx + 0x3e30]
lea ecx, [ebp - 0x98]
movss xmm0, dword [eax + 0x20]
subss xmm0, dword [eax + 0x6c]
movss xmm2, dword [eax + 0x1c]
subss xmm2, dword [eax + 0x68]
addss xmm0, dword [0x10654388]
addss xmm2, dword [0x1065436c]
movss dword [eax + 0xe4], xmm0
movss dword [eax + 0xe0], xmm2
movss xmm1, dword [eax + 0xfc]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0xf8]
maxss xmm0, xmm2
movss dword [eax + 0xfc], xmm1
movss dword [eax + 0xf8], xmm0
xorps xmm0, xmm0
movq qword [ebp - 0x5c], xmm0
mov dword [ebp - 0x54], 0
movups xmmword [ebp - 0x98], xmm0
call fcn.10057a20
lea eax, [ebp - 0x98]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x38]
call fcn.10057400
sub esp, 0x18
mov byte [ebp - 4], 1
lea eax, [ebp - 0x38]
mov ecx, esp
push eax
call fcn.10057400
lea ecx, [ebp - 0x50]
call fcn.100fb940
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd0]
call fcn.10056bd0
lea ecx, [ebp - 0x50]
call fcn.100575c0
lea ecx, [ebp - 0x38]
call fcn.100575c0
lea ecx, [ebp - 0x98]
call fcn.100575c0
lea ecx, [ebp - 0xd0]
mov dword [ebp - 4], 3
push ecx
lea eax, [ebp - 0xb8]
push eax
push ecx
lea ecx, [ebp - 0x5c]
call fcn.10096a80
push fcn.10052380
push 1
push 0x18
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 5
push eax
call fcn.102c1728
mov ecx, dword [ebp - 0x58]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0x5c]
xor edi, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x10093e2b
mov dword [ebp - 0x9c], edi
mov eax, 0xff5ba5f3
nop dword [eax]
nop word [eax + eax]
cmp edi, dword [0x106d5ccc]
mov edx, 0xff
mov ecx, 0x15
cmove edx, eax
call fcn.1010f2c0
mov esi, dword [0x106d663c]
lea eax, [ebp - 0x8c]
push eax
mov dword [ebp - 0x8c], 7
movss xmm0, dword [esi + 0x37dc]
lea ecx, [esi + 0x3f80]
movss dword [ebp - 0x88], xmm0
call fcn.10122460
mov ecx, dword [ebp - 0x9c]
mov dword [esi + 0x37dc], 0x41200000
add ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x80], 0x42e60000
mov dword [ebp - 0x7c], 0x41d80000
cmp dword [ecx + 0x14], 0xf
jbe 0x10093d53
mov ecx, dword [ecx]
push 0
lea edx, [ebp - 0x80]
call fcn.1013d350
add esp, 4
test al, al
je 0x10093d6a
mov dword [0x106d5ccc], edi
mov esi, dword [0x106d663c]
mov eax, dword [esi + 0x3f74]
mov ecx, dword [esi + 0x3f7c]
lea edx, [eax + eax*4]
mov eax, dword [ecx + edx*4 - 0x14]
movups xmm0, xmmword [ecx + edx*4 - 0x10]
add eax, eax
mov ecx, 1
movups xmmword [esi + eax*8 + 0x3878], xmm0
dec dword [esi + 0x3f74]
call fcn.1010f4f0
mov edx, dword [esi + 0x3e30]
cmp byte [edx + 0x9f], 0
jne 0x10093dfd
movss xmm1, dword [esi + 0x37fc]
addss xmm1, dword [edx + 0xe8]
movss xmm0, dword [edx + 0xec]
movss dword [edx + 0xe0], xmm1
movss dword [edx + 0xe4], xmm0
mov eax, dword [edx + 0x110]
mov ecx, dword [edx + 0x114]
mov dword [edx + 0x108], eax
mov eax, dword [edx + 0x11c]
mov dword [edx + 0x10c], ecx
mov dword [edx + 0x118], eax
mov ecx, dword [ebp - 0x58]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0x5c]
inc edi
add dword [ebp - 0x9c], 0x18
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
mov eax, 0xff5ba5f3
jb 0x10093ce0
jmp 0x10093e31
mov esi, dword [0x106d663c]
mov eax, dword [esi + 0x3e30]
mov byte [eax + 0x9c], 1
mov edi, dword [esi + 0x3e30]
cmp byte [edi + 0x9f], 0
jne 0x10093eb2
movss xmm1, dword [edi + 0x10c]
lea ecx, [ebp - 0x80]
mov eax, dword [edi + 0x188]
xorps xmm0, xmm0
comiss xmm1, xmm0
mov dword [ebp - 0x9c], eax
mov dword [edi + 0x188], 1
mov dword [ebp - 0x80], 0
movss xmm1, dword [0x10654448]
jbe 0x10093e8e
mov dword [ebp - 0x7c], 0
jmp 0x10093e9b
movss xmm0, dword [esi + 0x3bcc]
movss dword [ebp - 0x7c], xmm0
call fcn.1011b150
mov eax, dword [ebp - 0x9c]
mov esi, dword [0x106d663c]
mov dword [edi + 0x188], eax
mov eax, dword [esi + 0x3e30]
xor edx, edx
mov dword [ebp - 0x80], 0x442e8000
mov dword [ebp - 0x7c], 0x43930000
mov byte [eax + 0x9c], 1
mov eax, dword [esi + 0x3e30]
movss xmm0, dword [eax + 0x20]
movss xmm2, dword [eax + 0x1c]
subss xmm0, dword [eax + 0x6c]
subss xmm2, dword [eax + 0x68]
addss xmm0, dword [0x10654394]
addss xmm2, dword [0x10654364]
movss dword [eax + 0xe4], xmm0
movss dword [eax + 0xe0], xmm2
movss xmm1, dword [eax + 0xfc]
maxss xmm1, xmm0
movss xmm0, dword [eax + 0xf8]
maxss xmm0, xmm2
movss dword [eax + 0xfc], xmm1
movss dword [eax + 0xf8], xmm0
mov eax, dword [esi + 0x3e30]
mov byte [eax + 0x9c], 1
mov eax, dword [esi + 0x3e30]
mov ecx, dword [eax + 0xd4]
mov eax, dword [eax + 0xdc]
push dword [eax + ecx*4 - 4]
mov ecx, str.childsettings
call fcn.1010e6a0
mov edi, eax
add esp, 4
cmp dword [esi + 0x3e50], edi
jne 0x10093f80
push ecx
push str.childsettings
mov edx, 0xb
mov ecx, edi
call fcn.10121d60
add esp, 8
push 0
lea eax, [ebp - 0x80]
mov edx, edi
push 0
push eax
mov ecx, str.childsettings
call fcn.10114e80
add esp, 0xc
test al, al
je 0x1009541f
push 0xe
xorps xmm0, xmm0
mov dword [ebp - 0x68], 0
push 0x1034efc0
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x64], 0
movups xmmword [ebp - 0x78], xmm0
call fcn.10057a20
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x38]
call fcn.10057400
sub esp, 0x18
mov byte [ebp - 4], 7
lea eax, [ebp - 0x38]
mov ecx, esp
push eax
call fcn.10057400
lea ecx, [ebp - 0x50]
call fcn.100fb940
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x98]
call fcn.10056bd0
lea ecx, [ebp - 0x50]
call fcn.100575c0
lea ecx, [ebp - 0x38]
call fcn.100575c0
lea ecx, [ebp - 0x78]
call fcn.100575c0
mov byte [ebp - 4], 9
lea eax, [ebp - 0x98]
cmp dword [ebp - 0x84], 0xf
cmova eax, dword [ebp - 0x98]
push eax
call fcn.1013cad0
mov byte [ebp - 4], 5
add esp, 4
mov ecx, dword [ebp - 0x84]
cmp ecx, 0xf
jbe 0x1009407a
mov edx, dword [ebp - 0x98]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10094070
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10094070
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102c1b57
add esp, 8
mov eax, dword [0x106d663c]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
mov edx, dword [eax + 0x3e30]
cmp byte [edx + 0x9f], 0
jne 0x100940f5
movss xmm1, dword [eax + 0x37fc]
addss xmm1, dword [edx + 0xe8]
movss xmm0, dword [edx + 0xec]
movss dword [edx + 0xe0], xmm1
movss dword [edx + 0xe4], xmm0
mov eax, dword [edx + 0x110]
mov ecx, dword [edx + 0x114]
mov dword [edx + 0x108], eax
mov eax, dword [edx + 0x11c]
mov dword [edx + 0x10c], ecx
mov dword [edx + 0x118], eax
mov edx, 0x1066bd2c
mov ecx, str.English
call fcn.1005b0c0
test al, al
je 0x1009413c
cmp byte [0x1066bd2c], 0
mov byte [0x106d5bbd], 0
je 0x1009412b
mov dword [0x1070ca88], 0
mov byte [0x106d5bbf], 0
jmp 0x1009413c
mov dword [0x1070ca88], 1
mov byte [0x106d5bbf], 1
mov eax, dword [0x106d663c]
mov edx, dword [eax + 0x3e30]
cmp byte [edx + 0x9f], 0
jne 0x1009419c
movss xmm1, dword [eax + 0x37fc]
addss xmm1, dword [edx + 0xe8]
movss xmm0, dword [edx + 0xec]
movss dword [edx + 0xe0], xmm1
movss dword [edx + 0xe4], xmm0
mov eax, dword [edx + 0x110]
mov ecx, dword [edx + 0x114]
mov dword [edx + 0x108], eax
mov eax, dword [edx + 0x11c]
mov dword [edx + 0x10c], ecx
mov dword [edx + 0x118], eax
push 0xb
xorps xmm0, xmm0
mov dword [ebp - 0x68], 0
push 0x1034edcc
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x64], 0
movups xmmword [ebp - 0x78], xmm0
call fcn.10057a20
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x38]
call fcn.10057400
sub esp, 0x18
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x38]
mov ecx, esp
push eax
call fcn.10057400
lea ecx, [ebp - 0x50]
call fcn.100fb940
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x98]
call fcn.10056bd0
lea ecx, [ebp - 0x50]
call fcn.100575c0
lea ecx, [ebp - 0x38]
call fcn.100575c0
lea ecx, [ebp - 0x78]
call fcn.100575c0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x98]
cmp dword [ebp - 0x84], 0xf
mov edx, 0x106d5bbf
cmova ecx, dword [ebp - 0x98]
call fcn.1005b0c0
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x84]
mov byte [ebp - 0x5d], al
cmp ecx, 0xf
jbe 0x1009427e
mov edx, dword [ebp - 0x98]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10094271
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10094271
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102c1b57
mov al, byte [ebp - 0x5d]
add esp, 8
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
test al, al
je 0x100942d1
cmp byte [0x106d5bbf], 0
mov byte [0x106d5bbd], 0
je 0x100942c0
mov dword [0x1070ca88], 1
mov byte [0x1066bd2c], 0
jmp 0x100942d1
mov dword [0x1070ca88], 0
mov byte [0x1066bd2c], 1
mov eax, dword [0x106d663c]
mov edx, dword [eax + 0x3e30]
cmp byte [edx + 0x9f], 0
jne 0x10094331
movss xmm1, dword [eax + 0x37fc]
addss xmm1, dword [edx + 0xe8]
movss xmm0, dword [edx + 0xec]
movss dword [edx + 0xe0], xmm1
movss dword [edx + 0xe4], xmm0
mov eax, dword [edx + 0x110]
mov ecx, dword [edx + 0x114]
mov dword [edx + 0x108], eax
mov eax, dword [edx + 0x11c]
mov dword [edx + 0x10c], ecx
mov dword [edx + 0x118], eax
mov edx, 0x106d5bbd
mov ecx, 0x1034ede4
call fcn.1005b0c0
test al, al
je 0x10094378
cmp byte [0x106d5bbd], 0
mov byte [0x106d5bbf], 0
je 0x10094367
mov dword [0x1070ca88], 2
mov byte [0x1066bd2c], 0
jmp 0x10094378
mov dword [0x1070ca88], 0
mov byte [0x1066bd2c], 1
mov eax, dword [0x106d663c]
mov ecx, dword [eax + 0x3e30]
cmp byte [ecx + 0x9f], 0
jne 0x100943a3
mov ecx, dword [ecx + 0x188]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.1013f630
mov eax, dword [0x106d663c]
mov ecx, dword [eax + 0x3e30]
cmp byte [ecx + 0x9f], 0
jne 0x100943c4
mov ecx, dword [ecx + 0x188]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.1013f630
push 0xe
xorps xmm0, xmm0
mov dword [ebp - 0x68], 0
push 0x1034efe0
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x64], 0
movups xmmword [ebp - 0x78], xmm0
call fcn.10057a20
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x38]
call fcn.10057400
sub esp, 0x18
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x38]
mov ecx, esp
push eax
call fcn.10057400
lea ecx, [ebp - 0x50]
call fcn.100fb940
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x98]
call fcn.10056bd0
lea ecx, [ebp - 0x50]
call fcn.100575c0
lea ecx, [ebp - 0x38]
call fcn.100575c0
lea ecx, [ebp - 0x78]
call fcn.100575c0
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x98]
cmp dword [ebp - 0x84], 0xf
cmova eax, dword [ebp - 0x98]
push eax
call fcn.1013cad0
mov byte [ebp - 4], 5
add esp, 4
mov ecx, dword [ebp - 0x84]
cmp ecx, 0xf
jbe 0x1009449f
mov edx, dword [ebp - 0x98]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10094495
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10094495
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102c1b57
add esp, 8
mov edi, dword [0x106d663c]
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
mov edx, dword [edi + 0x3e30]
cmp byte [edx + 0x9f], 0
jne 0x1009451b
movss xmm1, dword [edi + 0x37fc]
addss xmm1, dword [edx + 0xe8]
movss xmm0, dword [edx + 0xec]
movss dword [edx + 0xe0], xmm1
movss dword [edx + 0xe4], xmm0
mov eax, dword [edx + 0x110]
mov ecx, dword [edx + 0x114]
mov dword [edx + 0x108], eax
mov eax, dword [edx + 0x11c]
mov dword [edx + 0x10c], ecx
mov dword [edx + 0x118], eax
mov eax, dword [edi + 0x3e30]
mov ecx, dword [eax + 0x198]
lea esi, [eax + 0x198]
mov dword [ebp - 0x9c], eax
mov eax, dword [esi + 4]
cmp ecx, eax
jne 0x1009455b
inc ecx
test eax, eax
je 0x10094549
cdq
sub eax, edx
sar eax, 1
add eax, dword [esi + 4]
jmp 0x1009454e
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.101225e0
mov ecx, dword [esi + 8]
mov edx, dword [esi]
mov eax, dword [ebp - 0x9c]
push ecx
push 2
mov eax, dword [eax + 0x190]
mov dword [ecx + edx*4], eax
mov edx, 0x1070cadc
mov eax, dword [ebp - 0x9c]
inc dword [esi]
mov dword [eax + 0x190], 0x43480000
lea eax, [ebp - 0x1c]
and dword [edi + 0x3ec4], 0xfffffffe
push eax
push ecx
mov ecx, str.Mode
mov dword [ebp - 0x1c], str.Safe_Mode
mov dword [ebp - 0x18], str.Risk_Mode
call fcn.10140680
mov eax, dword [0x106d663c]
add esp, 0x10
mov ecx, dword [eax + 0x3e30]
cmp byte [ecx + 0x9f], 0
jne 0x100945db
mov ecx, dword [ecx + 0x188]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.1013f630
mov eax, dword [0x106d663c]
mov ecx, dword [eax + 0x3e30]
cmp byte [ecx + 0x9f], 0
jne 0x10094601
mov ecx, dword [ecx + 0x188]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.1013f630
mov eax, dword [0x106d663c]
mov eax, dword [eax + 0x3e30]
lea ecx, [ebp - 0x78]
push 0xd
push 0x1034f000
mov dword [ebp - 0x7c], 0x41f00000
movss xmm0, dword [eax + 0x24]
subss xmm0, dword [0x10654318]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
movss dword [ebp - 0x80], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x78], xmm0
call fcn.10057a20
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x38]
call fcn.10057400
sub esp, 0x18
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x38]
mov ecx, esp
push eax
call fcn.10057400
lea ecx, [ebp - 0x50]
call fcn.100fb940
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x98]
call fcn.10056bd0
lea ecx, [ebp - 0x50]
call fcn.100575c0
lea ecx, [ebp - 0x38]
call fcn.100575c0
lea ecx, [ebp - 0x78]
call fcn.100575c0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x98]
cmp dword [ebp - 0x84], 0xf
lea edx, [ebp - 0x80]
push 0
cmova ecx, dword [ebp - 0x98]
call fcn.1013d350
mov byte [ebp - 4], 5
add esp, 4
mov ecx, dword [ebp - 0x84]
mov byte [ebp - 0x5d], al
cmp ecx, 0xf
jbe 0x10094705
mov edx, dword [ebp - 0x98]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100946f8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100946f8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102c1b57
mov al, byte [ebp - 0x5d]
add esp, 8
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
test al, al
je 0x1009475a
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 0x14
movups xmmword [ecx], xmm0
push str.C:Falcon_Config.ini
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.10053700
call fcn.10097e00
add esp, 0x18
mov byte [0x106d5cbf], 1
jmp 0x10094763
cmp byte [0x106d5cbf], 0
je 0x100947cc
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x9c], esp
push 0x1d
movups xmmword [ecx], xmm0
push str.Info_:_Config_Has_Been_Saved.
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.10053700
sub esp, 0x18
mov byte [ebp - 4], 0x16
mov ecx, esp
xorps xmm0, xmm0
push 0xf
movups xmmword [ecx], xmm0
push str.Falcon_Vip_Hack
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.10053700
mov byte [ebp - 4], 5
call fcn.10059f10
add esp, 0x30
test al, al
jne 0x100947cc
mov byte [0x106d5cbf], al
mov eax, dword [0x106d663c]
lea ecx, [ebp - 0x78]
push 0x11
push 0x1034f01c
mov dword [ebp - 0x9c], 0x41f00000
mov eax, dword [eax + 0x3e30]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
movss xmm0, dword [eax + 0x24]
subss xmm0, dword [0x10654318]
movss dword [ebp - 0xa0], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x78], xmm0
call fcn.10057a20
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x38]
call fcn.10057400
sub esp, 0x18
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x38]
mov ecx, esp
push eax
call fcn.10057400
lea ecx, [ebp - 0x50]
call fcn.100fb940
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x98]
call fcn.10056bd0
lea ecx, [ebp - 0x50]
call fcn.100575c0
lea ecx, [ebp - 0x38]
call fcn.100575c0
lea ecx, [ebp - 0x78]
call fcn.100575c0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x98]
cmp dword [ebp - 0x84], 0xf
lea edx, [ebp - 0xa0]
push 0
cmova ecx, dword [ebp - 0x98]
call fcn.1013d350
mov byte [ebp - 4], 5
add esp, 4
mov ecx, dword [ebp - 0x84]
mov byte [ebp - 0x5d], al
cmp ecx, 0xf
jbe 0x100948de
mov edx, dword [ebp - 0x98]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100948d1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100948d1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102c1b57
mov al, byte [ebp - 0x5d]
add esp, 8
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
test al, al
je 0x10094933
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 0x14
movups xmmword [ecx], xmm0
push str.C:Falcon_Config.ini
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.10053700
call fcn.100a7200
add esp, 0x18
mov byte [0x106d5bae], 1
jmp 0x1009493c
cmp byte [0x106d5bae], 0
je 0x100949a2
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
mov dword [ebp - 0x7c], esp
push 0x1e
movups xmmword [ecx], xmm0
push str.Info_:_Config_Has_Been_Loaded.
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.10053700
sub esp, 0x18
mov byte [ebp - 4], 0x1b
mov ecx, esp
xorps xmm0, xmm0
push 0xf
movups xmmword [ecx], xmm0
push str.Falcon_Vip_Hack
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.10053700
mov byte [ebp - 4], 5
call fcn.10059f10
add esp, 0x30
test al, al
jne 0x100949a2
mov byte [0x106d5bae], al
mov eax, dword [0x106d663c]
mov ecx, dword [eax + 0x3e30]
cmp byte [ecx + 0x9f], 0
jne 0x100949cd
mov ecx, dword [ecx + 0x188]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.1013f630
mov eax, dword [0x106d663c]
mov ecx, dword [eax + 0x3e30]
cmp byte [ecx + 0x9f], 0
jne 0x100949f3
mov ecx, dword [ecx + 0x188]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.1013f630
mov eax, dword [0x106d663c]
mov eax, dword [eax + 0x3e30]
lea ecx, [ebp - 0x78]
push 0xd
push 0x1034f040
mov dword [ebp - 0x9c], 0x41f00000
movss xmm0, dword [eax + 0x24]
subss xmm0, dword [0x10654318]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
movss dword [ebp - 0xa0], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0x78], xmm0
call fcn.10057a20
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0x38]
call fcn.10057400
sub esp, 0x18
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x38]
mov ecx, esp
push eax
call fcn.10057400
lea ecx, [ebp - 0x50]
call fcn.100fb940
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x98]
call fcn.10056bd0
lea ecx, [ebp - 0x50]
call fcn.100575c0
lea ecx, [ebp - 0x38]
call fcn.100575c0
lea ecx, [ebp - 0x78]
call fcn.100575c0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x98]
cmp dword [ebp - 0x84], 0xf
lea edx, [ebp - 0xa0]
push 0
cmova ecx, dword [ebp - 0x98]
call fcn.1013d350
mov byte [ebp - 4], 5
add esp, 4
mov ecx, dword [ebp - 0x84]
mov byte [ebp - 0x5d], al
cmp ecx, 0xf
jbe 0x10094b00
mov edx, dword [ebp - 0x98]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10094af3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10094af3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102c1b57
mov al, byte [ebp - 0x5d]
add esp, 8
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
test al, al
je 0x10094b6b
call fcn.100bbc90
xor cl, cl
mov byte [0x1070c948], 0
call fcn.10058640
sub esp, 0x18
xorps xmm0, xmm0
mov ecx, esp
push 0x14
movups xmmword [ecx], xmm0
push str.C:Falcon_Config.ini
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.10053700
call fcn.10097e00
add esp, 0x18
mov byte [0x106d5b97], 1
call fcn.1015a060
mov eax, dword [0x106d663c]
mov ecx, dword [eax + 0x3e30]
cmp byte [ecx + 0x9f], 0
jne 0x10094b96
mov ecx, dword [ecx + 0x188]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.1013f630
mov eax, dword [0x106d663c]
mov ecx, dword [eax + 0x3e30]
cmp byte [ecx + 0x9f], 0
jne 0x10094bb7
mov ecx, dword [ecx + 0x188]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.1013f630
push 0xf
xorps xmm0, xmm0
mov dword [ebp - 0x68], 0
push 0x1034f05c
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x64], 0
movups xmmword [ebp - 0x78], xmm0
call fcn.10057a20
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x20
push eax
lea ecx, [ebp - 0x38]
call fcn.10057400
sub esp, 0x18
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x38]
mov ecx, esp
push eax
call fcn.10057400
lea ecx, [ebp - 0x50]
call fcn.100fb940
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x98]
call fcn.10056bd0
lea ecx, [ebp - 0x50]
call fcn.100575c0
lea ecx, [ebp - 0x38]
call fcn.100575c0
lea ecx, [ebp - 0x78]
call fcn.100575c0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x98]
cmp dword [ebp - 0x84], 0xf
mov edx, 0x106cc151
cmova ecx, dword [ebp - 0x98]
call fcn.1005b0c0
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x84]
cmp ecx, 0xf
jbe 0x10094c93
mov edx, dword [ebp - 0x98]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10094c89
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10094c89
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102c1b57
add esp, 8
cmp dword [0x1070ca38], 1
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0xf
mov byte [ebp - 0x98], 0
jne 0x10094e0e
mov eax, dword [0x106d663c]
mov ecx, dword [eax + 0x3e30]
cmp byte [ecx + 0x9f], 0
jne 0x10094ce6
mov ecx, dword [ecx + 0x188]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.1013f630
mov eax, dword [0x106d663c]
mov ecx, dword [eax + 0x3e30]
cmp byte [ecx + 0x9f], 0
jne 0x10094d07
mov ecx, dword [ecx + 0x188]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.1013f630
push 0x12
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0
push 0x1034f07c
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x24], 0
movups xmmword [ebp - 0x38], xmm0
call fcn.10057a20
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x24
push eax
lea ecx, [ebp - 0x50]
call fcn.10057400
sub esp, 0x18
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.10057400
lea ecx, [ebp - 0xb8]
call fcn.100fb940
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x78]
call fcn.10056bd0
lea ecx, [ebp - 0xb8]
call fcn.100575c0
lea ecx, [ebp - 0x50]
call fcn.100575c0
lea ecx, [ebp - 0x38]
call fcn.100575c0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x78]
cmp dword [ebp - 0x64], 0xf
mov edx, 0x1070c968
cmova ecx, dword [ebp - 0x78]
call fcn.1005b0c0
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x64]
mov byte [ebp - 0x5d], al
cmp ecx, 0xf
jbe 0x10094ddd
mov edx, dword [ebp - 0x78]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10094dd0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10094dd0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102c1b57
mov al, byte [ebp - 0x5d]
add esp, 8
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
test al, al
je 0x10094e0e
cmp byte [0x1070c968], 0
je 0x10094e00
push 0x11
jmp 0x10094e02
push 0
push dword [0x106d5cc8]
call dword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
mov eax, dword [0x106d663c]
mov ecx, dword [eax + 0x3e30]
cmp byte [ecx + 0x9f], 0
jne 0x10094e39
mov ecx, dword [ecx + 0x188]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.1013f630
mov eax, dword [0x106d663c]
mov ecx, dword [eax + 0x3e30]
cmp byte [ecx + 0x9f], 0
jne 0x10094e5a
mov ecx, dword [ecx + 0x188]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.1013f630
push 0x1e
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0
push 0x1034f0a4
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x24], 0
movups xmmword [ebp - 0x38], xmm0
call fcn.10057a20
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x28
push eax
lea ecx, [ebp - 0x50]
call fcn.10057400
sub esp, 0x18
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.10057400
lea ecx, [ebp - 0xb8]
call fcn.100fb940
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x78]
call fcn.10056bd0
lea ecx, [ebp - 0xb8]
call fcn.100575c0
lea ecx, [ebp - 0x50]
call fcn.100575c0
lea ecx, [ebp - 0x38]
call fcn.100575c0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x78]
cmp dword [ebp - 0x64], 0xf
mov edx, 0x106cc391
cmova ecx, dword [ebp - 0x78]
call fcn.1013ebb0
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x64]
cmp ecx, 0xf
jbe 0x10094f2a
mov edx, dword [ebp - 0x78]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10094f20
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10094f20
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102c1b57
add esp, 8
mov eax, dword [0x106d663c]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
mov ecx, dword [eax + 0x3e30]
cmp byte [ecx + 0x9f], 0
jne 0x10094f67
mov ecx, dword [ecx + 0x188]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.1013f630
mov eax, dword [0x106d663c]
mov ecx, dword [eax + 0x3e30]
cmp byte [ecx + 0x9f], 0
jne 0x10094f88
mov ecx, dword [ecx + 0x188]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.1013f630
push 0x1c
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0
push 0x1034f0e4
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x24], 0
movups xmmword [ebp - 0x38], xmm0
call fcn.10057a20
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0x50]
call fcn.10057400
sub esp, 0x18
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.10057400
lea ecx, [ebp - 0xb8]
call fcn.100fb940
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x78]
call fcn.10056bd0
lea ecx, [ebp - 0xb8]
call fcn.100575c0
lea ecx, [ebp - 0x50]
call fcn.100575c0
lea ecx, [ebp - 0x38]
call fcn.100575c0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x78]
cmp dword [ebp - 0x64], 0xf
mov edx, 0x1070c9ef
cmova ecx, dword [ebp - 0x78]
call fcn.1013ebb0
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x64]
mov byte [ebp - 0x5d], al
cmp ecx, 0xf
jbe 0x1009505e
mov edx, dword [ebp - 0x78]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10095051
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10095051
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.102c1b57
mov al, byte [ebp - 0x5d]
add esp, 8
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
test al, al
je 0x100950a9
cmp byte [0x1070c9ef], 0
je 0x100950a9
cmp byte [0x106d5bbe], 0
jne 0x100950a9
push 0
push 0
push 0
push 0x10107f40
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [0x106d5bbe], 1
mov eax, dword [0x106d663c]
mov ecx, dword [eax + 0x3e30]
cmp byte [ecx + 0x9f], 0
jne 0x100950d4
mov ecx, dword [ecx + 0x188]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.1013f630
mov eax, dword [0x106d663c]
mov ecx, dword [eax + 0x3e30]
cmp byte [ecx + 0x9f], 0
jne 0x100950f5
mov ecx, dword [ecx + 0x188]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.1013f630
movups xmm0, xmmword [0x1070cc2c]
sub esp, 0x18
mov eax, esp
push str.Your_Lic_Expire_in:__s
movups xmmword [eax], xmm0
movq xmm0, qword [0x1070cc3c]
movq qword [eax + 0x10], xmm0
call fcn.1013cad0
mov eax, dword [0x106d663c]
add esp, 0x1c
mov edx, dword [eax + 0x3e30]
cmp byte [edx + 0x9f], 0
jne 0x1009517e
movss xmm1, dword [eax + 0x37fc]
addss xmm1, dword [edx + 0xe8]
movss xmm0, dword [edx + 0xec]
movss dword [edx + 0xe0], xmm1
movss dword [edx + 0xe4], xmm0
mov eax, dword [edx + 0x110]
mov ecx, dword [edx + 0x114]
mov dword [edx + 0x108], eax
mov eax, dword [edx + 0x11c]
mov dword [edx + 0x10c], ecx
mov dword [edx + 0x118], eax
cmp byte [0x1070c9c5], 0
je 0x1009518e
mov eax, str.Admin
jmp 0x100951a2
cmp byte [0x1070ca14], 0
mov eax, str.Safe
mov ecx, str.Normal
cmove eax, ecx
push eax
push str.Key_Level:__s
call fcn.1013cad0
add esp, 8
cmp byte [0x1070c9c5], 0
jne 0x100951c6
cmp byte [0x1070ca14], 0
je 0x100953c6
mov eax, dword [0x106d663c]
mov ecx, dword [eax + 0x3e30]
cmp byte [ecx + 0x9f], 0
jne 0x100951f1
mov ecx, dword [ecx + 0x188]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.1013f630
mov eax, dword [0x106d663c]
mov ecx, dword [eax + 0x3e30]
cmp byte [ecx + 0x9f], 0
jne 0x10095212
mov ecx, dword [ecx + 0x188]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.1013f630
cmp byte [0x106d5b96], 0
jne 0x10095312
cmp byte [0x106d5b99], 0
jne 0x10095312
push 0x17
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0
push 0x1034f150
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x24], 0
movups xmmword [ebp - 0x38], xmm0
call fcn.10057a20
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x34
push eax
lea ecx, [ebp - 0x50]
call fcn.10057400
sub esp, 0x18
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.10057400
lea ecx, [ebp - 0xb8]
call fcn.100fb940
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x78]
call fcn.10056bd0
lea ecx, [ebp - 0xb8]
call fcn.100575c0
lea ecx, [ebp - 0x50]
call fcn.100575c0
lea ecx, [ebp - 0x38]
call fcn.100575c0
mov byte [ebp - 4], 0x37
lea eax, [ebp - 0x78]
cmp dword [ebp - 0x64], 0xf
movaps xmm0, xmmword [0x106546a0]
cmova eax, dword [ebp - 0x78]
push eax
lea eax, [ebp - 0x90]
push eax
movups xmmword [ebp - 0x90], xmm0
call fcn.1013ca40
mov byte [ebp - 4], 5
add esp, 8
mov ecx, dword [ebp - 0x64]
cmp ecx, 0xf
jbe 0x100953b4
mov edx, dword [ebp - 0x78]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100953aa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100953aa
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push 0x16
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0
push 0x1034f120
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x24], 0
movups xmmword [ebp - 0x38], xmm0
call fcn.10057a20
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x30
push eax
lea ecx, [ebp - 0x50]
call fcn.10057400
sub esp, 0x18
mov byte [ebp - 4], 0x31
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.10057400
lea ecx, [ebp - 0xb8]
call fcn.100fb940
add esp, 0x18
mov edx, eax
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x78]
call fcn.10056bd0
lea ecx, [ebp - 0xb8]
call fcn.100575c0
lea ecx, [ebp - 0x50]
call fcn.100575c0
lea ecx, [ebp - 0x38]
call fcn.100575c0
mov byte [ebp - 4], 0x33
lea eax, [ebp - 0x78]
cmp dword [ebp - 0x64], 0xf
movaps xmm0, xmmword [0x106546b0]
cmova eax, dword [ebp - 0x78]
jmp 0x100952bf
push ecx
push edx
call fcn.102c1b57
add esp, 8
mov byte [ebp - 0x78], 0
mov dword [ebp - 0x64], 0xf
mov dword [ebp - 0x68], 0
mov eax, dword [0x106d663c]
mov ecx, dword [eax + 0x3e30]
cmp byte [ecx + 0x9f], 0
jne 0x100953f1
mov ecx, dword [ecx + 0x188]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.1013f630
mov eax, dword [0x106d663c]
mov ecx, dword [eax + 0x3e30]
cmp byte [ecx + 0x9f], 0
jne 0x10095412
mov ecx, dword [ecx + 0x188]
neg ecx
sbb ecx, ecx
add ecx, 6
call fcn.1013f630
push str.Insert:_Big_Menu___Home:_Small_Menu___End:Exit_Hack
call fcn.1013cad0
add esp, 4
call fcn.10115080
lea ecx, [ebp - 0x5c]
call fcn.10052c60
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.102c15f2
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret