Function at 0x4b2b70
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x628200
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1f8
push ebx
push ebp
push esi
xor ebx, ebx
mov esi, 1
push edi
mov ecx, 0x68d9e0
mov dword [0xcea2c8], ebx
mov dword [0xc94478], ebx
mov dword [0x6573ac], esi
call fcn.004038f0
push ebx
mov dword [0x6d7194], ebx
call fcn.0043f550
mov eax, dword [esp + 0x21c]
add esp, 4
mov dword [0xce8254], esi
lea ebp, [eax + 0x14]
mov eax, dword [0x6d620c]
push eax
mov dword [esp + 0x7c], ebp
mov ecx, dword [eax]
push ecx
lea ecx, [esp + 0x34]
push ecx
mov ecx, 0x6d6208
call fcn.0045b310
mov byte [0x6d6794], bl
mov edx, dword [ebp + 4]
mov dword [0x6d68a4], edx
mov eax, dword [ebp]
mov dword [0x6d68a0], eax
mov ecx, dword [ebp + 0x14]
mov dword [0x6d68a8], ecx
mov edx, dword [ebp + 0xc]
mov dword [0x6d68b0], edx
mov ecx, dword [ebp + 8]
mov dword [0x6d68ac], ecx
mov edx, dword [ebp + 0x10]
mov dword [0xa26fe8], eax
xor eax, eax
mov dword [0x6d68b4], edx
mov ax, word [ebp + 0xb1]
mov dword [0x6d6868], eax
xor eax, eax
mov ax, word [ebp + 0x5a]
mov ecx, eax
and eax, 0xff
and cl, bl
shl ecx, 8
or ecx, eax
xor edx, edx
mov dword [0x6d6808], ecx
mov dx, word [ebp + 0x5c]
mov dword [0x6d680c], edx
mov eax, dword [ebp + 0xce]
mov dword [0x6d68d0], eax
mov ecx, dword [ebp + 0xe2]
mov dword [0x6d6880], ecx
mov edx, dword [ebp + 0xe6]
mov dword [0x6d6884], edx
mov eax, dword [ebp + 0xea]
mov dword [0x6d6888], eax
mov ecx, dword [ebp + 0xf2]
mov dword [0x6d6890], ecx
mov eax, dword [ebp + 0xee]
mov dword [0x6d688c], eax
mov edx, dword [ebp + 0xf6]
mov dword [0x6d6894], edx
mov edi, dword [ebp + 0xb46]
mov dword [0x6d6c4c], edi
mov edi, dword [ebp + 0xb4a]
mov dword [0x6d6c50], edi
mov edi, dword [ebp + 0xb4e]
mov dword [0x6d6c54], edi
mov edi, dword [ebp + 0xb52]
mov dword [0x6d6c58], edi
mov edi, dword [ebp + 0xb56]
mov dword [0x6d716c], edi
mov edi, dword [ebp + 0xb42]
mov dword [0x6d689c], edi
mov edi, dword [ebp + 0xb3]
cmp eax, 0xc350
mov dword [0x6d6898], edi
mov edi, dword [ebp + 0xb7]
mov dword [0x6d6870], edi
jle 0x4b2d25
mov dword [0x6d688c], 0xc350
jmp 0x4b2d2f
cmp eax, esi
jge 0x4b2d2f
mov dword [0x6d688c], esi
mov eax, 0x270f
cmp ecx, eax
jle 0x4b2d3f
mov dword [0x6d6890], eax
jmp 0x4b2d49
cmp ecx, esi
jge 0x4b2d49
mov dword [0x6d6890], esi
cmp edx, eax
jle 0x4b2d54
mov dword [0x6d6894], eax
jmp 0x4b2d5e
cmp edx, esi
jge 0x4b2d5e
mov dword [0x6d6894], esi
lea edi, [ebp + 0x22]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, 0x1c9c380
mov edx, ecx
mov esi, edi
mov edi, 0x6d67cc
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
cmp dword [0x6d68d0], eax
jle 0x4b2d93
mov dword [0x6d68d0], eax
cmp dword [0x6d6870], ebx
je 0x4b2de5
lea eax, [ebp + 0xbb]
mov ecx, dword [ebp + 0xbb]
mov dword [0x6d6794], ecx
mov edx, dword [eax + 4]
mov dword [0x6d6798], edx
mov ecx, dword [eax + 8]
mov dword [0x6d679c], ecx
mov edx, dword [eax + 0xc]
mov dword [0x6d67a0], edx
mov cx, word [eax + 0x10]
mov word [0x6d67a4], cx
mov dl, byte [eax + 0x12]
mov byte [0x6d67a6], dl
mov byte [0x6d67a6], 0
jmp 0x4b2dec
mov byte [0x6d6794], 0
xor eax, eax
xor ecx, ecx
mov ax, word [ebp + 0xab]
mov dword [0x6d6860], eax
mov cx, word [ebp + 0xdc]
mov dword [0x6d6878], ecx
mov edx, dword [ebp + 0x778]
mov dword [0x6d68f8], edx
mov ecx, dword [ebp + 0xb5a]
cmp eax, 1
mov dword [0x6d6c70], ecx
jge 0x4b2e32
mov dword [0x6d6860], 1
jmp 0x4b2e43
cmp eax, 0xc8
jle 0x4b2e43
mov dword [0x6d6860], 0xc8
mov eax, dword [ebp + 0xad]
cmp eax, 0xfa56ea00
mov dword [0x6d6864], eax
jbe 0x4b2e5f
mov dword [0x6d6864], 0xfa56ea00
mov edx, dword [ebp + 0xde]
mov dword [0x6d68dc], edx
call fcn.004ae520
call fcn.0056f150
mov ax, word [ebp + 0x836]
xor edx, edx
mov word [0x6d6fc8], ax
mov ecx, dword [ebp + 0x83a]
mov eax, ecx
mov dword [0x6d6a00], ecx
mov esi, dword [ebp + 0x83e]
and eax, 0x800000
or eax, edx
mov dword [0x6d6a04], esi
mov dword [0x6d6a10], ebx
mov dword [0x6d6a14], ebx
je 0x4b2ebd
mov dword [0x6c4a04], 1
or ecx, esi
jne 0x4b2ee3
mov esi, dword [0x6d6fc0]
cmp esi, ebx
je 0x4b2f3e
mov ecx, esi
call fcn.005a07e0
push esi
call fcn.006066eb
add esp, 4
mov dword [0x6d6fc0], ebx
jmp 0x4b2f3e
mov eax, dword [0x6d6fc0]
cmp eax, ebx
jne 0x4b2f32
push 0xec
call fcn.00613321
add esp, 4
mov dword [esp + 0x2c], eax
cmp eax, ebx
mov dword [esp + 0x210], ebx
je 0x4b2f11
mov ecx, eax
call fcn.0041d6c0
jmp 0x4b2f13
xor eax, eax
cmp eax, ebx
mov dword [esp + 0x210], 0xffffffff
je 0x4b2f29
mov dword [0x6d6fc0], eax
jmp 0x4b2f2e
mov eax, dword [0x6d6fc0]
cmp eax, ebx
je 0x4b2f3e
push 0x6d67a8
mov ecx, eax
call fcn.0041d730
mov ecx, dword [ebp + 0x832]
push ecx
call fcn.004cff10
mov edx, dword [ebp + 0x832]
add esp, 4
mov dword [0x6d6a08], edx
mov eax, dword [ebp + 0xfa]
sub eax, dword [ebp + 0x11a]
mov dword [0x6d68b8], eax
mov ecx, dword [ebp + 0xfe]
mov edi, dword [ebp + 0x11e]
sub ecx, edi
lea edi, [ebp + 0x13c]
mov dword [0x6d68bc], ecx
mov edx, dword [ebp + 0x102]
mov esi, dword [ebp + 0x122]
sub edx, esi
mov esi, 0x68e348
mov dword [0x6d68c0], edx
mov eax, dword [ebp + 0x106]
sub eax, dword [ebp + 0x126]
mov dword [0x6d68c4], eax
mov ecx, dword [ebp + 0x10a]
sub ecx, dword [ebp + 0x12a]
mov dword [0x6d68c8], ecx
mov edx, dword [ebp + 0x11a]
mov dword [0x68e324], edx
mov eax, dword [ebp + 0x122]
mov dword [0x68e328], eax
mov ecx, dword [ebp + 0x11e]
mov dword [0x68e32c], ecx
mov edx, dword [ebp + 0x126]
mov dword [0x68e330], edx
mov eax, dword [ebp + 0x12a]
mov dword [0x68e334], eax
mov cx, word [ebp + 0xd8]
mov word [0x6d687c], cx
mov dx, word [ebp + 0xda]
mov word [0x6d687e], dx
mov eax, dword [edi - 4]
mov dword [esi], eax
mov ecx, dword [edi]
mov dword [esi + 4], ecx
mov edx, dword [edi + 4]
mov dword [esi + 8], edx
mov eax, dword [esi]
cmp eax, ebx
je 0x4b303f
mov ecx, dword [edi + 8]
mov edx, dword [edi + 4]
push ecx
push edx
push eax
mov ecx, 0xcf65c0
call fcn.00548600
add esi, 0xc
add edi, 0x10
cmp esi, 0x68e618
jl 0x4b3016
lea edi, [ebp + 0x5e]
or ecx, 0xffffffff
xor eax, eax
push ebx
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 1
mov eax, ecx
mov esi, edi
mov edi, 0x6d6810
push 1
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
push 1
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp + 0x71]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 1
mov edx, ecx
mov esi, edi
mov edi, 0x6d6823
push 0x6d67a8
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.00456a80
mov eax, dword [0x6d6bcc]
add esp, 0x18
and eax, reloc.WS2_32.dll_closesocket
jns 0x4b30ba
dec eax
or eax, 0xfffffffc
inc eax
lea esi, [eax + eax*4]
mov eax, dword [0x6d6860]
lea ecx, [eax - 1]
mov eax, 0x66666667
imul ecx
sar edx, 3
mov ecx, edx
xor eax, eax
shr ecx, 0x1f
add edx, ecx
or ecx, 0xffffffff
lea edi, [edx + esi*2]
shl edi, 4
add edi, 0x62eb04
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, dword [0xa4f274]
mov edx, ecx
mov esi, edi
mov edi, 0x6d6836
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
cmp eax, ebx
rep movsb byte es:[edi], byte [esi]
je 0x4b3119
push ebx
push 0x6d6836
call fcn.00586e90
add esp, 8
lea edi, [ebp + 0x97]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, 0x6d6849
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [0xa4f274]
and ecx, 3
cmp eax, ebx
rep movsb byte es:[edi], byte [esi]
mov cl, byte [ebp + 0xaa]
mov byte [0x6d685c], cl
jne 0x4b3183
push ebx
push 0x6d6810
call fcn.00586da0
push ebx
push 0x6d6823
call fcn.00586da0
push ebx
push 0x6d6849
call fcn.00586da0
push ebx
push 0x6d6794
call fcn.00586da0
add esp, 0x20
xor edi, edi
lea esi, [ebp + 0x4f8]
xor ebx, ebx
mov dword [esp + 0x14], ebx
push ebx
push edi
mov ecx, 0x68d9e0
call fcn.00404320
mov ax, word [esi]
test ax, ax
jbe 0x4b31c6
mov ecx, dword [esp + 0x14]
xor edx, edx
mov dx, word [esi + 2]
and eax, 0xffff
push edx
push ecx
push edi
push eax
mov ecx, 0x68d9e0
call fcn.00404390
inc dword [esp + 0x14]
inc ebx
add esi, 4
cmp ebx, 7
jl 0x4b3191
mov edx, dword [esp + 0x14]
mov ecx, 0x68d9e0
push edx
push edi
call fcn.004044e0
inc edi
cmp edi, 4
jl 0x4b318b
call fcn.0054e450
xor eax, eax
mov ecx, 0x68d9e0
mov ax, word [ebp + 0x568]
push eax
call fcn.00403d60
mov ebx, 0x69f860
lea esi, [ebp + 0x56a]
mov al, byte [esi + 9]
test al, al
mov eax, dword [0xa4f274]
jne 0x4b3235
test eax, eax
jne 0x4b3224
push 0
push esi
call fcn.00586da0
add esp, 8
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
push 0
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
jmp 0x4b3248
test eax, eax
jne 0x4b3244
push 0
push esi
call fcn.00586da0
add esp, 8
push 0
push 0xa
push esi
mov ecx, ebx
call fcn.004294b0
add ebx, 0x64
add esi, 0xb
cmp ebx, 0x69f9f0
jl 0x4b3209
mov eax, dword [0x6d6214]
mov ecx, dword [ebp + 0x18]
test eax, eax
mov dword [0x6d67ac], ecx
je 0x4b36f4
mov eax, dword [0x6d620c]
mov ecx, dword [eax]
cmp ecx, eax
mov dword [esp + 0x14], ecx
je 0x4b36e1
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0x10]
test eax, eax
mov dword [esp + 0x10], eax
je 0x4b366b
mov ecx, dword [eax]
cmp ecx, 0xe000
jb 0x4b33b8
cmp ecx, 0xffff
ja 0x4b33b8
push eax
mov ebx, eax
call fcn.00455e10
mov eax, dword [esp + 0x14]
add esp, 4
test eax, eax
je 0x4b33b2
mov ecx, dword [0x6d6214]
test ecx, ecx
je 0x4b33b2
mov edi, dword [0x6d620c]
push eax
mov ecx, 0x6d6208
mov esi, eax
call fcn.00409380
mov ecx, dword [0x6d620c]
mov dword [esp + 0x30], eax
cmp eax, ecx
je 0x4b3309
mov edx, dword [esi]
mov esi, dword [eax + 0xc]
cmp edx, esi
jb 0x4b3309
lea eax, [esp + 0x30]
jmp 0x4b3311
mov dword [esp + 0x34], ecx
lea eax, [esp + 0x34]
cmp dword [eax], edi
je 0x4b33b2
mov eax, dword [esp + 0x10]
mov ecx, 0xa24690
push eax
call fcn.0047a980
mov ecx, dword [esp + 0x10]
push ecx
call fcn.0041dbd0
mov edx, dword [esp + 0x14]
push edx
call fcn.00435650
mov eax, dword [esp + 0x18]
mov ecx, dword [0xd11138]
add esp, 8
cmp ecx, eax
jne 0x4b3357
mov dword [0xd11138], 0
mov esi, eax
push eax
lea eax, [esp + 0x114]
mov ecx, 0x6d6208
push eax
call fcn.0045bf90
lea ecx, [esp + 0x70]
push esi
push ecx
mov ecx, 0x6d6208
mov edi, eax
call fcn.0045b820
mov esi, dword [eax]
mov edx, dword [esp + 0x70]
mov edi, dword [edi]
lea eax, [esp + 0x38]
push edx
push eax
push edi
push esi
mov dword [esp + 0x48], 0
call fcn.004e5060
add esp, 0x10
lea ecx, [esp + 0x10c]
push edi
push esi
push ecx
mov ecx, 0x6d6208
call fcn.0045b310
push ebx
jmp 0x4b3663
cmp ecx, 0xa000
jb 0x4b34e3
cmp ecx, 0xdfff
ja 0x4b34e3
push eax
mov ebx, eax
call fcn.00455e10
mov eax, dword [esp + 0x14]
add esp, 4
test eax, eax
je 0x4b34dd
mov ecx, dword [0x6d6214]
test ecx, ecx
je 0x4b34dd
mov edi, dword [0x6d620c]
push eax
mov ecx, 0x6d6208
mov esi, eax
call fcn.00409380
mov ecx, dword [0x6d620c]
mov dword [esp + 0x30], eax
cmp eax, ecx
je 0x4b3425
mov edx, dword [esi]
mov esi, dword [eax + 0xc]
cmp edx, esi
jb 0x4b3425
lea eax, [esp + 0x30]
jmp 0x4b3433
mov dword [esp + 0x80], ecx
lea eax, [esp + 0x80]
cmp dword [eax], edi
je 0x4b34dd
mov eax, dword [esp + 0x10]
mov ecx, 0xa24690
push eax
call fcn.0047a980
mov ecx, dword [esp + 0x10]
push ecx
call fcn.0041dbd0
mov edx, dword [esp + 0x14]
push edx
call fcn.00435650
mov eax, dword [esp + 0x18]
mov ecx, dword [0xd11138]
add esp, 8
cmp ecx, eax
jne 0x4b3479
mov dword [0xd11138], 0
mov esi, eax
push eax
lea eax, [esp + 0x108]
mov ecx, 0x6d6208
push eax
call fcn.0045bf90
lea ecx, [esp + 0x8c]
push esi
push ecx
mov ecx, 0x6d6208
mov edi, eax
call fcn.0045b820
mov esi, dword [eax]
mov edx, dword [esp + 0x8c]
mov edi, dword [edi]
lea eax, [esp + 0x74]
push edx
push eax
push edi
push esi
mov dword [esp + 0x84], 0
call fcn.004e5060
add esp, 0x10
lea ecx, [esp + 0x108]
push edi
push esi
push ecx
mov ecx, 0x6d6208
call fcn.0045b310
push ebx
jmp 0x4b3663
push eax
call fcn.004568f0
mov edx, dword [esp + 0x14]
push edx
call fcn.00455e10
mov ecx, dword [esp + 0x18]
add esp, 8
test ecx, ecx
je 0x4b35eb
mov eax, dword [0x6d6214]
test eax, eax
je 0x4b35eb
mov edi, dword [0x6d620c]
mov esi, ecx
push ecx
mov ecx, 0x6d6208
call fcn.00409380
mov ecx, dword [0x6d620c]
mov dword [esp + 0x30], eax
cmp eax, ecx
je 0x4b353f
mov edx, dword [esi]
mov esi, dword [eax + 0xc]
cmp edx, esi
jb 0x4b353f
lea eax, [esp + 0x30]
jmp 0x4b3547
mov dword [esp + 0x7c], ecx
lea eax, [esp + 0x7c]
cmp dword [eax], edi
je 0x4b35e7
mov eax, dword [esp + 0x10]
mov ecx, 0xa24690
push eax
call fcn.0047a980
mov ecx, dword [esp + 0x10]
push ecx
call fcn.0041dbd0
mov edx, dword [esp + 0x14]
push edx
call fcn.00435650
mov eax, dword [esp + 0x18]
mov ecx, dword [0xd11138]
add esp, 8
cmp ecx, eax
jne 0x4b358d
mov dword [0xd11138], 0
push eax
mov ecx, 0x6d6208
mov edi, eax
call fcn.0045c990
mov esi, eax
lea eax, [esp + 0x88]
push edi
push eax
mov ecx, 0x6d6208
call fcn.0045b820
mov ecx, dword [esp + 0x88]
mov edi, dword [eax]
lea edx, [esp + 0x84]
push ecx
push edx
push esi
push edi
mov dword [esp + 0x94], 0
call fcn.004e5060
add esp, 0x10
lea eax, [esp + 0x4c]
mov ecx, 0x6d6208
push esi
push edi
push eax
call fcn.0045b310
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx]
mov eax, dword [0x6d67a8]
cmp edx, eax
je 0x4b366b
push 0
push 2
call fcn.0059d890
lea eax, [esp + 0x10]
mov ecx, 0xd12338
push eax
call fcn.0045c9e0
lea ecx, [esp + 0x10]
lea edx, [esp + 0x5c]
push ecx
push edx
mov ecx, 0xd12338
mov esi, eax
call fcn.0045bb60
mov edi, dword [eax]
mov eax, dword [esp + 0x5c]
lea ecx, [esp + 0x6c]
push eax
push ecx
push esi
push edi
mov dword [esp + 0x7c], 0
call fcn.0045cdc0
add esp, 0x10
lea edx, [esp + 0x3c]
mov ecx, 0xd12338
push esi
push edi
push edx
call fcn.0045ba30
mov ecx, dword [esp + 0x10]
test ecx, ecx
mov esi, ecx
je 0x4b366b
call fcn.004775c0
push esi
call fcn.006066eb
add esp, 4
lea ecx, [esp + 0x2c]
call fcn.006071a8
mov ecx, dword [esp + 0x14]
mov edx, dword [0x68e684]
mov dword [esp + 0x210], 1
mov eax, dword [ecx + 8]
cmp eax, edx
je 0x4b369b
push eax
call fcn.004e31f0
add esp, 4
jmp 0x4b36ba
mov eax, dword [ecx + 4]
cmp ecx, dword [eax + 8]
jne 0x4b36b1
mov ecx, eax
mov eax, dword [eax + 4]
mov dword [esp + 0x14], ecx
cmp ecx, dword [eax + 8]
je 0x4b36a3
mov esi, dword [esp + 0x14]
cmp dword [esi + 8], eax
je 0x4b36c0
mov esi, eax
mov dword [esp + 0x14], esi
lea ecx, [esp + 0x2c]
mov dword [esp + 0x210], 0xffffffff
call fcn.00607244
mov eax, dword [0x6d620c]
cmp esi, eax
jne 0x4b3287
mov ecx, dword [eax]
push eax
lea eax, [esp + 0x40]
push ecx
push eax
mov ecx, 0x6d6208
call fcn.0045b310
mov edi, str..Maps_
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, dword [0x6d67ac]
mov edx, ecx
mov esi, edi
mov edi, 0xa5206c
push eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0xd12058
call fcn.005888c0
mov ebx, eax
test ebx, ebx
je 0x4b442c
lea edi, [ebx + 8]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0xa5206c
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x20
lea edi, [esp + 0x188]
rep stosd dword es:[edi], eax
mov eax, dword [0xd12020]
xor edi, edi
xor esi, esi
test eax, eax
jle 0x4b37c2
lea eax, [esp + 0x188]
mov dword [esp + 0x34], eax
mov eax, dword [ebx + 4]
mov edx, 1
mov ecx, esi
shl edx, cl
test eax, edx
je 0x4b37b8
mov eax, 1
shl eax, cl
mov ecx, 0xd12020
push eax
call fcn.00587430
test eax, eax
je 0x4b37b8
mov ecx, dword [esp + 0x34]
inc edi
mov dword [ecx], eax
add ecx, 4
mov dword [esp + 0x34], ecx
mov eax, dword [0xd12020]
inc esi
cmp esi, eax
jl 0x4b3784
mov eax, dword [0xd12038]
xor ecx, ecx
cmp eax, ecx
je 0x4b37d5
mov dword [0xd12038], ecx
jmp 0x4b384c
cmp edi, ecx
je 0x4b381a
call fcn.006133b4
cdq
idiv edi
xor ecx, ecx
mov eax, dword [esp + edx*4 + 0x188]
xor edx, edx
mov cx, word [eax + 6]
mov dword [0x67359c], ecx
mov dx, word [eax + 8]
xor ecx, ecx
mov dword [0x6735a0], edx
mov cx, word [eax + 0xa]
xor edx, edx
mov dword [0x6735a4], ecx
mov dx, word [eax + 4]
mov dword [0xd1203c], edx
jmp 0x4b384c
cmp dword [0x6d67ac], 0x1068
jne 0x4b3832
mov dword [0xd1203c], 3
jmp 0x4b384c
mov eax, 0xff
mov dword [0xd1203c], ecx
mov dword [0x67359c], eax
mov dword [0x6735a0], eax
mov dword [0x6735a4], eax
push 0xa5206c
call fcn.0044e9f0
add esp, 4
mov ecx, 0x68ef70
mov dword [0xa26324], 1
call fcn.0041bb10
mov edx, dword [0xa23398]
xor eax, eax
mov ax, word [ebp + 0x1e]
xor ecx, ecx
mov cx, word [ebp + 0x1c]
push eax
mov eax, dword [0xa23394]
push ecx
push edx
push eax
call fcn.004259d0
mov ecx, dword [ebp + 0x56]
push 0x6d6b00
push 0x6d6ae8
mov dword [0x6d6804], ecx
mov dword [0x6d67b0], eax
mov dword [0x6d67b4], edx
mov dword [0x6d6ae8], eax
mov dword [0x6d6b00], edx
call fcn.0045f7e0
mov edx, dword [0x6d6ae8]
mov eax, dword [0x6d6b00]
mov ecx, dword [0x6d67b4]
add edx, 0x30
mov dword [0xa4f1a0], edx
mov edx, dword [0x6d67b0]
add eax, 0x14
push ecx
push edx
mov dword [0xa4f1a4], eax
call fcn.0044de60
mov eax, dword [0xa4f188]
mov ecx, dword [0xa4f18c]
mov edx, dword [0x6d67b0]
mov dword [0x6d67b8], eax
mov eax, dword [0x6d67b4]
mov dword [0x6d67bc], ecx
mov ecx, dword [0x6d6ae8]
mov dword [0x6d6c30], edx
mov edx, dword [0x6d6b00]
xor ebx, ebx
add esp, 0x20
mov dword [0x6d6c34], eax
mov dword [0x6d6c28], ecx
mov word [0x6d6fb6], bx
mov dword [0x6d6c2c], edx
mov eax, 0x6d6b04
or ecx, 0xffffffff
mov dword [eax - 0x18], ecx
mov dword [eax], ecx
add eax, 4
cmp eax, 0x6d6b18
jl 0x4b3942
mov dword [0x6d6b34], ebx
mov dword [0x6d6b38], ebx
mov eax, 0x6d6b54
mov dword [eax - 0x18], ebx
mov dword [eax], ebx
add eax, 4
cmp eax, 0x6d6b68
jl 0x4b3962
mov dword [0x6d69f8], ebx
mov dword [0x6d69fc], ebx
mov eax, dword [ebp + 0xd2]
push 0x8a30ec
push 0x6d67a8
mov dword [0x6d68e0], eax
call fcn.0047a1f0
add esp, 8
mov ecx, 0xce82a8
push ebp
call fcn.004fc940
mov edi, dword [0xa53b04]
mov esi, dword [edi]
cmp esi, edi
je 0x4b39f3
lea ecx, [esp + 0x3c]
push ebx
mov eax, esi
mov esi, dword [esi]
push ecx
lea ecx, [esp + 0x34]
mov dword [esp + 0x34], eax
call fcn.004525d0
mov eax, dword [eax]
push eax
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov dword [ecx], edx
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
call fcn.006066eb
mov ecx, dword [0xa53b08]
add esp, 4
dec ecx
cmp esi, edi
mov dword [0xa53b08], ecx
jne 0x4b39b1
mov eax, dword [esp + 0x218]
mov eax, dword [eax + 8]
cmp eax, 2
jne 0x4b43a1
mov cl, byte [esp + 0x1b]
xor eax, eax
mov byte [esp + 0x1c], cl
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov eax, dword [0xce8b34]
lea edx, [esp + 0x3c]
push eax
mov dword [esp + 0x214], 2
mov ecx, dword [eax]
push ecx
push edx
mov ecx, 0xce8b30
call fcn.00436650
mov ebx, dword [0xce9584]
mov eax, dword [0xce8b3c]
mov esi, dword [0xce9580]
mov ecx, dword [0xce958c]
mov edx, dword [0xce9578]
mov edi, dword [0xce957c]
mov dword [esp + 0x5c], ebx
mov ebx, dword [0xce9588]
mov dword [esp + 0x30], eax
mov eax, dword [0xce9590]
mov dword [esp + 0x60], ebx
mov ebx, dword [0xce9574]
cmp eax, esi
mov dword [esp + 0x64], ecx
mov dword [esp + 0x68], eax
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], edx
mov dword [esp + 0x44], edi
mov dword [esp + 0x48], esi
jne 0x4b3aa4
sub ecx, edi
sar ecx, 2
mov esi, ecx
jmp 0x4b3ac7
sub eax, esi
sub edx, edi
mov edi, dword [0xce9584]
sar eax, 2
add eax, 0x3fffff
sub ecx, edi
shl eax, 0xa
sar edx, 2
add eax, edx
sar ecx, 2
add eax, ecx
mov esi, eax
mov ecx, dword [0xce9574]
mov edx, dword [0xce9578]
mov eax, dword [0xce957c]
mov dword [esp + 0x4c], ecx
mov ecx, dword [0xce9580]
mov dword [esp + 0x50], edx
lea edx, [esp + 0x4c]
mov dword [esp + 0x58], ecx
push edx
lea ecx, [esp + 0x40]
mov dword [esp + 0x58], eax
call fcn.004e3320
mov ecx, dword [0xce9588]
mov edx, dword [0xce958c]
mov edi, eax
mov eax, dword [0xce9584]
mov dword [esp + 0x50], ecx
lea ecx, [esp + 0x5c]
mov dword [esp + 0x4c], eax
mov eax, dword [0xce9590]
push ecx
lea ecx, [esp + 0x50]
mov dword [esp + 0x30], edi
mov dword [esp + 0x58], edx
mov dword [esp + 0x5c], eax
call fcn.004e3320
cmp edi, eax
jae 0x4b3bd7
mov ebx, dword [esp + 0x5c]
sub esp, 0x10
mov edi, esp
sub esp, 0x10
mov eax, dword [0xce9574]
mov ecx, dword [0xce9578]
mov dword [edi], ebx
mov ebx, dword [esp + 0x80]
mov edx, dword [0xce957c]
mov dword [edi + 4], ebx
mov ebx, dword [esp + 0x84]
mov dword [edi + 8], ebx
mov ebx, dword [esp + 0x88]
mov dword [edi + 0xc], ebx
mov ebx, dword [esp + 0x5c]
mov edi, esp
sub esp, 0x10
mov dword [edi], ebx
mov ebx, dword [esp + 0x70]
mov dword [edi + 4], ebx
mov ebx, dword [esp + 0x74]
mov dword [edi + 8], ebx
mov ebx, dword [esp + 0x78]
mov dword [edi + 0xc], ebx
mov edi, esp
mov dword [edi], eax
mov eax, dword [0xce9580]
mov dword [edi + 4], ecx
mov dword [edi + 8], edx
lea edx, [esp + 0xc0]
push edx
mov dword [edi + 0xc], eax
call fcn.004e4fd0
add esp, 0x34
test esi, esi
jbe 0x4b3c6a
mov ecx, 0xce9570
call fcn.004e3230
dec esi
jne 0x4b3bc5
jmp 0x4b3c6a
mov ebx, dword [esp + 0x3c]
sub esp, 0x10
mov edi, esp
mov eax, dword [0xce9584]
mov ecx, dword [0xce9588]
sub esp, 0x10
mov dword [edi], ebx
mov ebx, dword [esp + 0x60]
mov edx, dword [0xce958c]
mov dword [edi + 4], ebx
mov ebx, dword [esp + 0x64]
mov dword [edi + 8], ebx
mov ebx, dword [esp + 0x68]
mov dword [edi + 0xc], ebx
mov edi, esp
sub esp, 0x10
mov dword [edi], eax
mov eax, dword [0xce9590]
mov dword [edi + 4], ecx
mov ecx, dword [esp + 0x8c]
mov dword [edi + 8], edx
mov edx, dword [esp + 0x90]
mov dword [edi + 0xc], eax
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x94]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x98]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [esp + 0xc0]
push eax
call fcn.0049cda0
add esp, 0x34
test esi, esi
jbe 0x4b3c6a
mov ecx, 0xce9570
call fcn.0049baf0
dec esi
jne 0x4b3c5d
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x4b3cac
mov ecx, dword [0xce9574]
mov edx, dword [0xce9578]
mov dword [esp + 0x4c], ecx
mov ecx, dword [0xce957c]
push eax
mov dword [esp + 0x54], edx
mov edx, dword [0xce9580]
lea eax, [esp + 0x94]
mov dword [esp + 0x58], ecx
push eax
lea ecx, [esp + 0x54]
mov dword [esp + 0x60], edx
call fcn.004e32c0
mov ecx, dword [esp + 0x218]
mov dword [esp + 0x14], 0
test dword [ecx + 0x1014], 0xfffffffc
jbe 0x4b4342
mov edx, dword [esp + 0x218]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x38], connect
mov dword [esp + 0x34], 0
mov ecx, dword [edx + eax*4 + 0x1018]
mov dword [esp + 0x2c], ecx
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x38]
and edx, eax
cmp edx, eax
jne 0x4b4305
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x34]
mov dl, byte [esp + 0x1b]
push 0
shl eax, 5
mov byte [esp + 0x94], dl
lea esi, [eax + ecx + 1]
lea ecx, [esp + 0x94]
mov dword [esp + 0x14], esi
call fcn.00409ab0
lea eax, [esp + 0x90]
lea ecx, [esp + 0x118]
push eax
mov byte [esp + 0x214], 3
mov dword [esp + 0x118], esi
call fcn.00435950
lea ecx, [esp + 0x114]
lea edx, [esp + 0x3c]
push ecx
push edx
mov ecx, 0xce8b40
mov byte [esp + 0x218], 4
call fcn.00438090
mov esi, dword [eax]
push 1
lea ecx, [esp + 0x11c]
mov byte [esp + 0x214], 3
mov eax, dword [eax + 4]
mov dword [esp + 0x64], eax
call fcn.00409ab0
push 1
lea ecx, [esp + 0x94]
mov byte [esp + 0x214], 2
call fcn.00409ab0
mov eax, dword [esi + 0x14]
mov esi, 0x62d4bc
test eax, eax
je 0x4b3db4
mov esi, eax
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebx, ecx
lea ecx, [esp + 0x1c]
call fcn.00437040
cmp eax, ebx
jae 0x4b3dd4
call fcn.0060844a
mov edi, dword [esp + 0x20]
test edi, edi
je 0x4b3dfc
mov al, byte [edi - 1]
test al, al
je 0x4b3dfc
cmp al, 0xff
je 0x4b3dfc
test ebx, ebx
jne 0x4b3e25
dec al
push ebx
lea ecx, [esp + 0x20]
mov byte [edi - 1], al
call fcn.00409ab0
jmp 0x4b3e4f
test ebx, ebx
jne 0x4b3e0d
push 1
lea ecx, [esp + 0x20]
call fcn.00409ab0
jmp 0x4b3e4f
mov eax, dword [esp + 0x28]
cmp eax, 0x1f
ja 0x4b3e1a
cmp eax, ebx
jae 0x4b3e33
push 1
lea ecx, [esp + 0x20]
call fcn.00409ab0
push ebx
lea ecx, [esp + 0x20]
call fcn.0040c9b0
mov edi, dword [esp + 0x20]
mov ecx, ebx
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x20]
mov dword [esp + 0x24], ebx
mov byte [ebx + eax], 0
mov edi, 0x68ef6c
or ecx, 0xffffffff
xor eax, eax
mov ebx, dword [esp + 0x24]
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ebx, ecx
mov dword [esp + 0x6c], ecx
jae 0x4b3e6c
mov ecx, ebx
mov edx, dword [esp + 0x20]
mov edi, 0x68ef6c
mov esi, edx
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x4b3e82
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4b3e9b
mov esi, dword [esp + 0x6c]
cmp ebx, esi
jb 0x4b3e9b
cmp ebx, esi
setne al
test eax, eax
je 0x4b4305
mov eax, dword [0xa4f274]
test eax, eax
jne 0x4b3f3b
test edx, edx
je 0x4b3f2b
mov al, byte [edx - 1]
test al, al
je 0x4b3f1d
cmp al, 0xff
je 0x4b3f1d
mov esi, dword [esp + 0x24]
lea ecx, [esp + 0x1c]
call fcn.00437040
cmp eax, esi
jae 0x4b3ecd
call fcn.0060844a
mov edx, dword [esp + 0x20]
test edx, edx
je 0x4b3ef5
mov al, byte [edx - 1]
test al, al
je 0x4b3ef5
cmp al, 0xff
je 0x4b3ef5
test esi, esi
jne 0x4b3f0f
dec al
push esi
lea ecx, [esp + 0x20]
mov byte [edx - 1], al
call fcn.00409ab0
jmp 0x4b3f19
test esi, esi
jne 0x4b3f09
test edx, edx
je 0x4b3f30
push esi
lea ecx, [esp + 0x20]
call fcn.0040c060
jmp 0x4b3f19
cmp dword [esp + 0x28], esi
jae 0x4b3f1d
push esi
lea ecx, [esp + 0x20]
call fcn.0040c9b0
mov edx, dword [esp + 0x20]
test edx, edx
je 0x4b3f30
mov byte [edx - 1], 0xff
mov edx, dword [esp + 0x20]
jmp 0x4b3f30
mov edx, 0x62d4bc
push 0
push edx
call fcn.00586da0
add esp, 8
mov cl, byte [esp + 0x1b]
mov esi, dword [0xce8b3c]
mov byte [esp + 0xa0], cl
push 0
lea ecx, [esp + 0xa4]
mov dword [esp + 0x34], esi
call fcn.00409ab0
mov dl, byte [esp + 0xa0]
push 0
lea ecx, [esp + 0xf8]
mov byte [esp + 0x214], 5
mov dword [esp + 0xf4], esi
mov byte [esp + 0xf8], dl
call fcn.00409ab0
mov eax, dword [0x62d4c0]
lea ecx, [esp + 0xa0]
push eax
push 0
push ecx
lea ecx, [esp + 0x100]
call fcn.00435db0
lea edx, [esp + 0xf0]
lea eax, [esp + 0x4c]
push edx
push eax
mov ecx, 0xce8b30
mov byte [esp + 0x218], 6
call fcn.00438090
mov ebp, dword [eax]
push 1
mov byte [esp + 0x214], 5
mov ecx, dword [eax + 4]
mov dword [esp + 0x64], ecx
lea ecx, [esp + 0xf8]
call fcn.00409ab0
push 1
lea ecx, [esp + 0xa4]
mov byte [esp + 0x214], 2
call fcn.00409ab0
mov eax, dword [esp + 0x24]
mov esi, dword [0x62d4c0]
mov ebx, eax
add ebp, 0x10
cmp esi, ebx
jae 0x4b400e
mov ebx, esi
lea edx, [esp + 0x1c]
cmp ebp, edx
jne 0x4b4072
cmp dword [ebp + 8], ebx
jae 0x4b4020
call fcn.00608676
mov ecx, ebp
call fcn.00437050
mov eax, dword [ebp + 8]
sub eax, ebx
cmp eax, esi
jae 0x4b4032
mov esi, eax
test esi, esi
jbe 0x4b4066
mov ecx, dword [ebp + 4]
sub eax, esi
add ebx, ecx
push eax
lea ecx, [esi + ebx]
push ecx
push ebx
call fcn.006143e0
mov edi, dword [ebp + 8]
add esp, 0xc
sub edi, esi
mov ecx, ebp
push 0
push edi
call fcn.0040c6a0
test al, al
je 0x4b4066
push edi
mov ecx, ebp
call fcn.0040c060
mov ecx, ebp
call fcn.00437050
jmp 0x4b40f4
test ebx, ebx
jbe 0x4b40be
cmp ebx, eax
jne 0x4b40be
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4b4087
mov eax, 0x62d4bc
cmp byte [eax - 1], 0xfe
jae 0x4b40be
push 1
mov ecx, ebp
call fcn.00409ab0
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x4b40a3
mov eax, 0x62d4bc
mov dword [ebp + 4], eax
mov edx, dword [esp + 0x24]
mov dword [ebp + 8], edx
mov ecx, dword [esp + 0x28]
mov dword [ebp + 0xc], ecx
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x4b40f4
push 1
push ebx
mov ecx, ebp
call fcn.0040c6a0
test al, al
je 0x4b40f4
mov esi, dword [esp + 0x20]
test esi, esi
jne 0x4b40d9
mov esi, 0x62d4bc
mov edi, dword [ebp + 4]
mov ecx, ebx
mov edx, ecx
push ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, ebp
call fcn.0040c060
mov eax, dword [0xce959c]
test eax, eax
je 0x4b413f
mov ecx, dword [0xce958c]
mov edx, dword [0xce9588]
cmp ecx, edx
je 0x4b413f
lea eax, [ecx + 4]
cmp eax, edx
mov dword [0xce958c], eax
jne 0x4b4132
test ecx, ecx
je 0x4b4123
mov eax, dword [esp + 0x10]
mov dword [ecx], eax
mov ecx, 0xce9570
call fcn.0049a5f0
jmp 0x4b42f6
test ecx, ecx
je 0x4b42f6
jmp 0x4b42f0
push 0x1000
call fcn.00613321
mov esi, eax
mov eax, dword [0xce959c]
add esp, 4
test eax, eax
jne 0x4b41dd
push 8
mov dword [0xce9598], 2
call fcn.00613321
mov dword [0xce9594], eax
mov dword [eax + 4], esi
mov eax, dword [0xce9594]
add esp, 4
add eax, 4
add esi, 0x800
push eax
push esi
lea ecx, [esp + 0xc8]
call fcn.004e3bf0
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0xc4]
mov eax, dword [esp + 0xc8]
mov esi, dword [esp + 0xcc]
mov dword [0xce9574], ecx
mov dword [0xce9578], edx
mov dword [0xce957c], eax
mov dword [0xce9580], esi
mov dword [0xce9584], ecx
mov dword [0xce9588], edx
mov dword [0xce9590], esi
jmp 0x4b42e2
mov ecx, dword [0xce9598]
mov edx, dword [0xce9594]
mov eax, dword [0xce9590]
lea ecx, [edx + ecx*4 - 4]
cmp eax, ecx
jae 0x4b423f
add eax, 4
lea ecx, [esp + 0xe0]
mov dword [0xce9590], eax
mov dword [eax], esi
mov eax, dword [0xce9590]
push eax
push esi
call fcn.004e3bf0
mov eax, dword [esp + 0xe4]
mov edx, dword [esp + 0xe0]
mov ecx, dword [esp + 0xec]
mov dword [0xce9588], eax
mov eax, dword [esp + 0xe8]
mov dword [0xce9584], edx
jmp 0x4b42dc
mov edi, dword [0xce9580]
mov ecx, 0xce9570
sub eax, edi
sar eax, 2
inc eax
mov edi, eax
lea edx, [edi + edi]
push edx
call fcn.0054f0c0
lea edi, [eax + edi*4]
push eax
mov dword [edi], esi
mov ecx, dword [0xce957c]
push ecx
lea ecx, [esp + 0xb8]
call fcn.004e3bf0
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0xb8]
mov dword [0xce9574], eax
mov eax, dword [esp + 0xbc]
mov dword [0xce9578], ecx
push edi
push esi
lea ecx, [esp + 0xd8]
mov dword [0xce957c], edx
mov dword [0xce9580], eax
call fcn.004e3bf0
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xd4]
mov eax, dword [esp + 0xd8]
mov dword [0xce9584], ecx
mov ecx, dword [esp + 0xdc]
mov dword [0xce9588], edx
mov dword [0xce9590], ecx
mov ecx, eax
add eax, 4
test ecx, ecx
mov dword [0xce958c], eax
je 0x4b42f6
mov edx, dword [esp + 0x10]
mov dword [ecx], edx
mov eax, dword [0xce959c]
mov ebp, dword [esp + 0x78]
inc eax
mov dword [0xce959c], eax
mov esi, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
shr esi, 1
inc eax
mov dword [esp + 0x38], esi
cmp eax, 0x20
mov dword [esp + 0x34], eax
jl 0x4b3cf1
mov ecx, dword [esp + 0x218]
mov eax, dword [esp + 0x14]
inc eax
mov edx, dword [ecx + 0x1014]
mov dword [esp + 0x14], eax
shr edx, 2
cmp eax, edx
jb 0x4b3ccb
mov eax, dword [esp + 0x30]
push 0xce8b30
push 0x130
push 0x11e
mov ecx, 0xce8b60
mov dword [0xce96f8], eax
call fcn.0042b490
mov ecx, dword [esp + 0x20]
xor esi, esi
cmp ecx, esi
mov dword [esp + 0x210], 0xffffffff
je 0x4b4395
mov al, byte [ecx - 1]
test al, al
je 0x4b438b
cmp al, 0xff
je 0x4b438b
dec al
mov byte [ecx - 1], al
jmp 0x4b4395
dec ecx
push ecx
call fcn.006066eb
add esp, 4
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
lea ecx, [ebp + 0xb5e]
push ecx
mov ecx, 0xced988
call fcn.005249b0
mov ecx, 0xced988
call fcn.00524340
lea esi, [ebp + 0x7f4]
mov ecx, 8
lea edi, [esp + 0x128]
lea edx, [esp + 0x128]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x10
mov esi, 0xcf2d38
lea edi, [esp + 0x148]
push edx
rep movsd dword es:[edi], dword [esi]
mov ecx, 0xced988
call fcn.005247e0
mov dword [0x66c5e8], 1
call fcn.004574c0
push 1
call fcn.00457f10
add esp, 4
mov ecx, 0x6d67a8
call fcn.00477820
mov ecx, 0x68d9e0
call fcn.00407080
mov ecx, 0x68d9e0
call fcn.004071f0
mov ecx, dword [esp + 0x208]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x204
ret