Function at 0x440151
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x133f
sub esp, 0x70
push fcn.00440151
xor esi, esi
xor edi, edi
mov ecx, 0x18
push esi
dec ecx
jne 0x44016d
push 0xa
call fcn.00409ed4
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jg 0x4401d5
mov edx, 0x481f68
call fcn.0047881c
call fcn.00409ed4
call fcn.004779c4
call fcn.00476830
call fcn.00477cbd
mov edx, 0x481f74
call fcn.0047881c
call fcn.00477cbd
mov eax, 0x12000
mov edx, 0x47f2c4
call fcn.0047881c
call fcn.0046e9da
push 0
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
call fcn.004086e6
push eax
call fcn.00408949
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jl 0x440214
push 0
push 0xffffffffffffffff
mov edx, 0x47fc74
call fcn.0047881c
push 0
mov ebx, esp
call fcn.004779f9
call fcn.0040e6de
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x44021e
call fcn.004430a0
jmp 0x443078
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x48358c
call fcn.0047881c
call fcn.00477d52
mov eax, 0xffffffff
je 0x440240
inc eax
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483580
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440262
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483598
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440286
inc ecx
or eax, ecx
test eax, eax
je 0x4403f8
call fcn.004086e6
push eax
call fcn.00408949
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jl 0x4403f8
fild dword [0x487ec0]
sub esp, 4
mov ebx, esp
fstp dword [ebx]
fild dword [0x488104]
sub esp, 4
mov ebx, esp
fstp dword [ebx]
call fcn.00413738
mov edx, 0x4835a4
call fcn.0047881c
push 0
mov ebx, esp
call fcn.004779f9
call fcn.00415606
call fcn.004086e6
mov dword [ebp - 0xdc], eax
mov esi, 1
jmp 0x4403e5
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483580
call fcn.0047881c
call fcn.00477d52
jne 0x440348
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
xor eax, eax
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0x37
call fcn.0040f216
add esp, 8
jmp 0x4403d9
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x48358c
call fcn.0047881c
call fcn.00477d52
jne 0x440393
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 2
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0x3a
call fcn.0040f216
add esp, 8
jmp 0x4403d9
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483598
call fcn.0047881c
call fcn.00477d52
jne 0x4403d9
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0x39
call fcn.0040f216
add esp, 8
mov eax, 0x64
call fcn.00473a9b
inc esi
mov eax, esi
cmp eax, dword [ebp - 0xdc]
jle 0x440300
jmp 0x44152a
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4835c0
call fcn.0047881c
call fcn.00477d52
mov eax, 0xffffffff
je 0x44041a
inc eax
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4835b0
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x44043c
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4835d0
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440460
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, str.explorer.EXE
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440484
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4835f8
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x4404a8
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483608
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x4404cc
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483618
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x4404f0
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x48362c
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440514
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483640
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440538
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483650
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x44055c
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483660
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440580
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483674
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x4405a4
inc ecx
or eax, ecx
test eax, eax
je 0x4409dc
call fcn.004086e6
push eax
call fcn.00408949
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jl 0x4409dc
fild dword [0x487f54]
sub esp, 4
mov ebx, esp
fstp dword [ebx]
fild dword [0x4878a0]
sub esp, 4
mov ebx, esp
fstp dword [ebx]
call fcn.00413738
mov edx, 0x483688
call fcn.0047881c
push 0
mov ebx, esp
call fcn.004779f9
call fcn.00415606
call fcn.004086e6
mov dword [ebp - 0xdc], eax
mov esi, 1
jmp 0x4409c9
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4835b0
call fcn.0047881c
call fcn.00477d52
jne 0x44066b
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
xor eax, eax
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xaa1
call fcn.0040f216
add esp, 8
jmp 0x4409bd
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4835c0
call fcn.0047881c
call fcn.00477d52
jne 0x4406b9
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 2
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xaa2
call fcn.0040f216
add esp, 8
jmp 0x4409bd
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4835d0
call fcn.0047881c
call fcn.00477d52
jne 0x440707
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0x83
call fcn.0040f216
add esp, 8
jmp 0x4409bd
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, str.explorer.EXE
call fcn.0047881c
call fcn.00477d52
jne 0x440755
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 3
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xcd
call fcn.0040f216
add esp, 8
jmp 0x4409bd
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4835f8
call fcn.0047881c
call fcn.00477d52
jne 0x4407a3
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x30
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xaa5
call fcn.0040f216
add esp, 8
jmp 0x4409bd
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483608
call fcn.0047881c
call fcn.00477d52
jne 0x4407f1
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x32
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xaa6
call fcn.0040f216
add esp, 8
jmp 0x4409bd
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483618
call fcn.0047881c
call fcn.00477d52
jne 0x44083f
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x31
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0x84
call fcn.0040f216
add esp, 8
jmp 0x4409bd
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x48362c
call fcn.0047881c
call fcn.00477d52
jne 0x44088d
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x33
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xd4
call fcn.0040f216
add esp, 8
jmp 0x4409bd
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483640
call fcn.0047881c
call fcn.00477d52
jne 0x4408db
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x60
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xaa3
call fcn.0040f216
add esp, 8
jmp 0x4409bd
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483650
call fcn.0047881c
call fcn.00477d52
jne 0x440929
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x62
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xaa4
call fcn.0040f216
add esp, 8
jmp 0x4409bd
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483660
call fcn.0047881c
call fcn.00477d52
jne 0x440974
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x61
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0x38
call fcn.0040f216
add esp, 8
jmp 0x4409bd
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483674
call fcn.0047881c
call fcn.00477d52
jne 0x4409bd
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x63
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0x117
call fcn.0040f216
add esp, 8
mov eax, 0x64
call fcn.00473a9b
inc esi
mov eax, esi
cmp eax, dword [ebp - 0xdc]
jle 0x440620
jmp 0x44152a
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4836a0
call fcn.0047881c
call fcn.00477d52
mov eax, 0xffffffff
je 0x4409fe
inc eax
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483694
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440a20
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4836b4
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440a44
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4836c8
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440a68
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4836dc
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440a8c
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4836f0
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440ab0
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483704
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440ad4
inc ecx
or eax, ecx
test eax, eax
je 0x440d8c
call fcn.004086e6
push eax
call fcn.00408949
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jl 0x440d8c
fild dword [0x487890]
sub esp, 4
mov ebx, esp
fstp dword [ebx]
fild dword [0x487ffc]
sub esp, 4
mov ebx, esp
fstp dword [ebx]
call fcn.00413738
mov edx, 0x483718
call fcn.0047881c
push 0
mov ebx, esp
call fcn.004779f9
call fcn.00415606
call fcn.004086e6
mov dword [ebp - 0xdc], eax
mov esi, 1
jmp 0x440d79
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483694
call fcn.0047881c
call fcn.00477d52
jne 0x440b9e
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 4
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xb151
call fcn.0040f216
add esp, 8
jmp 0x440d6d
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4836a0
call fcn.0047881c
call fcn.00477d52
jne 0x440bec
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x34
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xb154
call fcn.0040f216
add esp, 8
jmp 0x440d6d
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4836b4
call fcn.0047881c
call fcn.00477d52
jne 0x440c3a
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x40
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xb155
call fcn.0040f216
add esp, 8
jmp 0x440d6d
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4836c8
call fcn.0047881c
call fcn.00477d52
jne 0x440c88
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x64
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xb152
call fcn.0040f216
add esp, 8
jmp 0x440d6d
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4836dc
call fcn.0047881c
call fcn.00477d52
jne 0x440cd6
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x70
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xb153
call fcn.0040f216
add esp, 8
jmp 0x440d6d
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4836f0
call fcn.0047881c
call fcn.00477d52
jne 0x440d24
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x94
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xb156
call fcn.0040f216
add esp, 8
jmp 0x440d6d
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483704
call fcn.0047881c
call fcn.00477d52
jne 0x440d6d
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0xa0
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xb157
call fcn.0040f216
add esp, 8
mov eax, 0x64
call fcn.00473a9b
inc esi
mov eax, esi
cmp eax, dword [ebp - 0xdc]
jle 0x440b50
jmp 0x44152a
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483734
call fcn.0047881c
call fcn.00477d52
mov eax, 0xffffffff
je 0x440dae
inc eax
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483728
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440dd0
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483740
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440df4
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483750
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440e18
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483760
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440e3c
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483770
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440e60
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483780
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440e84
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483790
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440ea8
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4837a0
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440ecc
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4837b0
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440ef0
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4837c0
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440f14
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4837d0
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440f38
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4837e0
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440f5c
inc ecx
or eax, ecx
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, str.135_
call fcn.0047881c
call fcn.00477d52
mov ecx, 0xffffffff
je 0x440f80
inc ecx
or eax, ecx
test eax, eax
je 0x44144e
call fcn.004086e6
push eax
call fcn.00408949
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jl 0x44144e
fild dword [0x488148]
sub esp, 4
mov ebx, esp
fstp dword [ebx]
fild dword [0x487e90]
sub esp, 4
mov ebx, esp
fstp dword [ebx]
call fcn.00413738
mov edx, 0x483800
call fcn.0047881c
push 0
mov ebx, esp
call fcn.004779f9
call fcn.00415606
call fcn.004086e6
mov dword [ebp - 0xdc], eax
mov esi, 1
jmp 0x44143b
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483728
call fcn.0047881c
call fcn.00477d52
jne 0x44103e
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 5
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xe6cf
call fcn.0040f216
add esp, 8
jmp 0x44142f
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483734
call fcn.0047881c
call fcn.00477d52
jne 0x44108c
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 6
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xe6d6
call fcn.0040f216
add esp, 8
jmp 0x44142f
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483740
call fcn.0047881c
call fcn.00477d52
jne 0x4410da
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x35
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xe6d2
call fcn.0040f216
add esp, 8
jmp 0x44142f
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483750
call fcn.0047881c
call fcn.00477d52
jne 0x441128
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x36
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xe6d9
call fcn.0040f216
add esp, 8
jmp 0x44142f
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483760
call fcn.0047881c
call fcn.00477d52
jne 0x441176
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x41
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xe6d3
call fcn.0040f216
add esp, 8
jmp 0x44142f
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483770
call fcn.0047881c
call fcn.00477d52
jne 0x4411c4
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x42
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xe6da
call fcn.0040f216
add esp, 8
jmp 0x44142f
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483780
call fcn.0047881c
call fcn.00477d52
jne 0x441212
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x65
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xe6d0
call fcn.0040f216
add esp, 8
jmp 0x44142f
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483790
call fcn.0047881c
call fcn.00477d52
jne 0x441260
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x66
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xe6d7
call fcn.0040f216
add esp, 8
jmp 0x44142f
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4837a0
call fcn.0047881c
call fcn.00477d52
jne 0x4412ae
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x71
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xe6d1
call fcn.0040f216
add esp, 8
jmp 0x44142f
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4837b0
call fcn.0047881c
call fcn.00477d52
jne 0x4412fc
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x72
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xe6d8
call fcn.0040f216
add esp, 8
jmp 0x44142f
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4837c0
call fcn.0047881c
call fcn.00477d52
jne 0x44134a
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x95
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xe6d4
call fcn.0040f216
add esp, 8
jmp 0x44142f
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4837d0
call fcn.0047881c
call fcn.00477d52
jne 0x441398
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0x96
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xe6db
call fcn.0040f216
add esp, 8
jmp 0x44142f
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4837e0
call fcn.0047881c
call fcn.00477d52
jne 0x4413e6
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0xa1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xe6d5
call fcn.0040f216
add esp, 8
jmp 0x44142f
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, str.135_
call fcn.0047881c
call fcn.00477d52
jne 0x44142f
push 0
push 0
mov eax, 1
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
mov eax, 0xa2
lea ebx, [esp + 4]
push ebx
mov dword [ebx], eax
push 0xe6dc
call fcn.0040f216
add esp, 8
mov eax, 0x64
call fcn.00473a9b
inc esi
mov eax, esi
cmp eax, dword [ebp - 0xdc]
jle 0x440ff0
jmp 0x44152a
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, str.
call fcn.0047881c
call fcn.00477d52
jne 0x44152a
call fcn.004086e6
push eax
call fcn.00408949
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jl 0x44152a
fild dword [0x487e98]
fchs
sub esp, 4
mov ebx, esp
fstp dword [ebx]
fild dword [0x488190]
sub esp, 4
mov ebx, esp
fstp dword [ebx]
call fcn.00413738
mov edx, 0x480c10
call fcn.0047881c
push 0
mov ebx, esp
call fcn.004779f9
call fcn.00415606
call fcn.004086e6
mov dword [ebp - 0xdc], eax
mov esi, 1
jmp 0x441520
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, str.
call fcn.0047881c
call fcn.00477d52
jne 0x441514
push 1
push 0xb
push 0x93dc
push dword [0x47c734]
call sym..exe_BUYIMTEFUNC
mov eax, 0x64
call fcn.00473a9b
inc esi
mov eax, esi
cmp eax, dword [ebp - 0xdc]
jle 0x4414e0
push 0x191
call fcn.00409467
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x44159b
fild dword [0x488198]
sub esp, 4
mov ebx, esp
fstp dword [ebx]
fild dword [0x487890]
sub esp, 4
mov ebx, esp
fstp dword [ebx]
call fcn.00413738
fild dword [0x487a48]
sub esp, 4
mov ebx, esp
fstp dword [ebx]
fild dword [0x487b10]
sub esp, 4
mov ebx, esp
fstp dword [ebx]
call fcn.00413738
mov edx, 0x481f38
call fcn.0047881c
push 0
mov ebx, esp
call fcn.004779f9
call fcn.00415606
jmp 0x4415e7
push 0x17
call fcn.00409467
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x4415e7
fild dword [0x487c90]
fchs
sub esp, 4
mov ebx, esp
fstp dword [ebx]
fild dword [0x487ea4]
sub esp, 4
mov ebx, esp
fstp dword [ebx]
call fcn.00413738
mov edx, 0x481f38
call fcn.0047881c
push 0
mov ebx, esp
call fcn.004779f9
call fcn.00415606
mov dword [ebp - 0xa4], 0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
inc dword [ebp - 0xa4]
push 1
call fcn.00408a13
pop dword [ebp - 0x30]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xa8], 0
jmp 0x441d78
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
lea ebx, [ebp - 0xc0]
push ebx
fild dword [0x4875fc]
fimul dword [ebp - 0xa8]
mov eax, dword [0x47c7b8]
call fcn.004779cb
faddp st(1)
fistp qword [ebp - 0x6c]
push dword [ebp - 0x6c]
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
lea ebx, [ebp - 0xd0]
push ebx
lea ebx, [ebp - 0xb4]
push ebx
lea ebx, [ebp - 0xb0]
push ebx
lea ebx, [ebp - 0xac]
push ebx
push dword [ebp - 0xa8]
call fcn.0040d4e8
mov edx, dword [ebp - 0xd0]
call fcn.00478805
mov eax, 1
mov edx, dword [0x47c81c]
call fcn.00478805
call fcn.0046ea92
test eax, eax
je 0x441d72
push 0
lea ebx, [ebp - 0xb8]
push ebx
lea ebx, [ebp - 0xbc]
push ebx
push 7
mov edx, 0x47fc74
call fcn.0047881c
push 0
mov ebx, esp
call fcn.004779f9
call fcn.0040ec5f
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jle 0x441d49
mov ebx, 0x1f4
xor eax, eax
call fcn.00473932
lea ebx, [ebp - 0xd4]
call fcn.004779f9
push dword [ebp - 0xc0]
push dword [0x47c734]
call sym..exe_JIHUOWP
mov eax, 0x64
call fcn.00473a9b
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
lea ebx, [ebp - 0xc4]
push ebx
mov eax, 0x48
add eax, dword [ebp - 0xc0]
push eax
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 0x1f4
lea ebx, [ebp - 0xd4]
call fcn.00478911
push ebx
push dword [ebp - 0xc4]
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
mov edx, dword [ebp - 0xd4]
call fcn.00478805
xor eax, eax
call fcn.00473aa3
push 0
mov ebx, esp
call fcn.004779f9
call fcn.004643df
call fcn.00478833
lea ebx, [ebp - 0xd4]
call fcn.004779f9
push 0xa
call fcn.00409ed4
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jg 0x441826
mov edx, 0x481f68
call fcn.0047881c
call fcn.00409ed4
call fcn.004779c4
call fcn.00476830
call fcn.00477cbd
mov edx, 0x481f74
call fcn.0047881c
call fcn.00477cbd
mov eax, 0x12000
mov edx, 0x47f2c4
call fcn.0047881c
call fcn.0046e9da
push 0
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
push 3
call fcn.004084f3
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x441999
xor eax, eax
mov edx, dword [ebp - 0xd4]
call fcn.00478805
mov ecx, 1
mov edx, 0x48381c
call fcn.0047881c
xchg ecx, eax
call fcn.0046ea92
cmp eax, ecx
jg 0x4418b3
xor eax, eax
mov edx, dword [ebp - 0xd4]
call fcn.00478805
mov ecx, 1
mov edx, 0x481f9c
call fcn.0047881c
xchg ecx, eax
call fcn.0046ea92
cmp eax, ecx
jg 0x4418b3
xor eax, eax
mov edx, dword [ebp - 0xd4]
call fcn.00478805
mov ecx, 1
mov edx, 0x481fa8
call fcn.0047881c
xchg ecx, eax
call fcn.0046ea92
cmp eax, ecx
jle 0x441994
push 0
mov edx, 0x481fb4
call fcn.0047881c
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xa8]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xac]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xbc]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
mov edx, 0x481fd0
call fcn.0047881c
call fcn.00477cbd
lea ebx, [esp]
call fcn.00477abb
push dword [0x47c734]
call sym..exe_SendPacket
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00474673
pop eax
add esp, 4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, 0x3e8
call fcn.00473a9b
push 0
call fcn.00408d35
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x441970
push dword [0x47c734]
call sym..exe_UNNPCFUNC
jmp 0x441d44
push 4
call fcn.004084f3
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x441b39
xor eax, eax
mov edx, dword [ebp - 0xd4]
call fcn.00478805
mov ecx, 1
mov edx, 0x48381c
call fcn.0047881c
xchg ecx, eax
call fcn.0046ea92
cmp eax, ecx
jg 0x441a50
xor eax, eax
mov edx, dword [ebp - 0xd4]
call fcn.00478805
mov ecx, 1
mov edx, 0x481f9c
call fcn.0047881c
xchg ecx, eax
call fcn.0046ea92
cmp eax, ecx
jg 0x441a50
xor eax, eax
mov edx, dword [ebp - 0xd4]
call fcn.00478805
mov ecx, 1
mov edx, 0x481fa8
call fcn.0047881c
xchg ecx, eax
call fcn.0046ea92
cmp eax, ecx
jg 0x441a50
xor eax, eax
mov edx, dword [ebp - 0xd4]
call fcn.00478805
mov ecx, 1
mov edx, 0x481fe0
call fcn.0047881c
xchg ecx, eax
call fcn.0046ea92
cmp eax, ecx
jle 0x441b34
push 0
mov edx, 0x481fb4
call fcn.0047881c
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xa8]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xac]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xbc]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
mov edx, 0x481fd0
call fcn.0047881c
call fcn.00477cbd
lea ebx, [esp]
call fcn.00477abb
push dword [0x47c734]
call sym..exe_SendPacket
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00474673
pop eax
add esp, 4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, 0x3e8
call fcn.00473a9b
push 0
call fcn.00408d35
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x441b10
push dword [0x47c734]
call sym..exe_UNNPCFUNC
jmp 0x441d44
push 5
call fcn.004084f3
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
je 0x441b94
push 6
call fcn.004084f3
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
je 0x441b94
push 7
call fcn.004084f3
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
je 0x441b94
push 8
call fcn.004084f3
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
je 0x441b94
push 9
call fcn.004084f3
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x441d44
xor eax, eax
mov edx, dword [ebp - 0xd4]
call fcn.00478805
mov ecx, 1
mov edx, 0x48381c
call fcn.0047881c
xchg ecx, eax
call fcn.0046ea92
cmp eax, ecx
jg 0x441c62
xor eax, eax
mov edx, dword [ebp - 0xd4]
call fcn.00478805
mov ecx, 1
mov edx, 0x481f9c
call fcn.0047881c
xchg ecx, eax
call fcn.0046ea92
cmp eax, ecx
jg 0x441c62
xor eax, eax
mov edx, dword [ebp - 0xd4]
call fcn.00478805
mov ecx, 1
mov edx, 0x481fa8
call fcn.0047881c
xchg ecx, eax
call fcn.0046ea92
cmp eax, ecx
jg 0x441c62
xor eax, eax
mov edx, dword [ebp - 0xd4]
call fcn.00478805
mov ecx, 1
mov edx, 0x481fe0
call fcn.0047881c
xchg ecx, eax
call fcn.0046ea92
cmp eax, ecx
jg 0x441c62
xor eax, eax
mov edx, dword [ebp - 0xd4]
call fcn.00478805
mov ecx, 1
mov edx, 0x481fec
call fcn.0047881c
xchg ecx, eax
call fcn.0046ea92
cmp eax, ecx
jle 0x441d44
push 0
mov edx, 0x481fb4
call fcn.0047881c
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xa8]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xac]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xbc]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
mov edx, 0x481fd0
call fcn.0047881c
call fcn.00477cbd
lea ebx, [esp]
call fcn.00477abb
push dword [0x47c734]
call sym..exe_SendPacket
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00474673
pop eax
add esp, 4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, 0x3e8
call fcn.00473a9b
push 0
call fcn.00408d35
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x441d20
push dword [0x47c734]
call sym..exe_UNNPCFUNC
jmp 0x441d72
mov edx, 0x48382c
call fcn.0047881c
mov eax, 0x12000
mov edx, 0x47f2c4
call fcn.0047881c
call fcn.0046e9da
push 0
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
inc dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0xe4]
jle 0x441630
cmp dword [ebp - 0xa4], 6
jne 0x441600
push 6
call fcn.004084f3
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
je 0x441ddf
push 7
call fcn.004084f3
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
je 0x441ddf
push 8
call fcn.004084f3
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
je 0x441ddf
push 9
call fcn.004084f3
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x44212a
push 5
push 0
mov edx, 0x481ff8
call fcn.0047881c
lea ebx, [esp]
push ebx
call fcn.004779f9
call fcn.0043fd7f
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00474673
pop eax
add esp, 4
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jge 0x441e26
push 3
call fcn.00408949
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jg 0x44212a
push 1
call fcn.00408a13
pop dword [ebp - 0x30]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xa8], 0
jmp 0x442118
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
lea ebx, [ebp - 0xc0]
push ebx
fild dword [0x4875fc]
fimul dword [ebp - 0xa8]
mov eax, dword [0x47c7b8]
call fcn.004779cb
faddp st(1)
fistp qword [ebp - 0x6c]
push dword [ebp - 0x6c]
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
lea ebx, [ebp - 0xd0]
push ebx
lea ebx, [ebp - 0xb4]
push ebx
lea ebx, [ebp - 0xb0]
push ebx
lea ebx, [ebp - 0xac]
push ebx
push dword [ebp - 0xa8]
call fcn.0040d4e8
mov edx, dword [ebp - 0xd0]
call fcn.00478805
mov eax, 1
mov edx, dword [0x47c81c]
call fcn.00478805
call fcn.0046ea92
test eax, eax
je 0x442112
push 0
lea ebx, [ebp - 0xb8]
push ebx
lea ebx, [ebp - 0xbc]
push ebx
push 7
mov edx, 0x47fc74
call fcn.0047881c
push 0
mov ebx, esp
call fcn.004779f9
call fcn.0040ec5f
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jle 0x4420e9
mov ebx, 0x1f4
xor eax, eax
call fcn.00473932
lea ebx, [ebp - 0xd4]
call fcn.004779f9
push dword [ebp - 0xc0]
push dword [0x47c734]
call sym..exe_JIHUOWP
mov eax, 0x64
call fcn.00473a9b
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
lea ebx, [ebp - 0xc4]
push ebx
mov eax, 0x48
add eax, dword [ebp - 0xc0]
push eax
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 0x1f4
lea ebx, [ebp - 0xd4]
call fcn.00478911
push ebx
push dword [ebp - 0xc4]
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
mov edx, dword [ebp - 0xd4]
call fcn.00478805
xor eax, eax
call fcn.00473aa3
push 0
mov ebx, esp
call fcn.004779f9
call fcn.004643df
call fcn.00478833
lea ebx, [ebp - 0xd4]
call fcn.004779f9
xor eax, eax
mov edx, dword [ebp - 0xd4]
call fcn.00478805
mov ecx, 1
mov edx, 0x481ff8
call fcn.0047881c
xchg ecx, eax
call fcn.0046ea92
cmp eax, ecx
jle 0x4420e4
push 0
mov edx, 0x481fb4
call fcn.0047881c
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xa8]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xac]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xbc]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
mov edx, 0x481fd0
call fcn.0047881c
call fcn.00477cbd
lea ebx, [esp]
call fcn.00477abb
push dword [0x47c734]
call sym..exe_SendPacket
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00474673
pop eax
add esp, 4
nop
mov eax, 0x3e8
call fcn.00473a9b
push 0
call fcn.00408d35
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x4420c0
push dword [0x47c734]
call sym..exe_UNNPCFUNC
jmp 0x442112
mov edx, 0x48382c
call fcn.0047881c
mov eax, 0x12000
mov edx, 0x47f2c4
call fcn.0047881c
call fcn.0046e9da
push 0
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
inc dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0xe4]
jle 0x441e50
push 7
call fcn.004084f3
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
je 0x44215f
push 8
call fcn.004084f3
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
je 0x44215f
push 9
call fcn.004084f3
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x4424aa
push 5
push 0
mov edx, 0x482004
call fcn.0047881c
lea ebx, [esp]
push ebx
call fcn.004779f9
call fcn.0043fd7f
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00474673
pop eax
add esp, 4
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jge 0x4421a6
push 3
call fcn.00408949
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jg 0x4424aa
push 1
call fcn.00408a13
pop dword [ebp - 0x30]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xa8], 0
jmp 0x442498
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
lea ebx, [ebp - 0xc0]
push ebx
fild dword [0x4875fc]
fimul dword [ebp - 0xa8]
mov eax, dword [0x47c7b8]
call fcn.004779cb
faddp st(1)
fistp qword [ebp - 0x6c]
push dword [ebp - 0x6c]
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
lea ebx, [ebp - 0xd0]
push ebx
lea ebx, [ebp - 0xb4]
push ebx
lea ebx, [ebp - 0xb0]
push ebx
lea ebx, [ebp - 0xac]
push ebx
push dword [ebp - 0xa8]
call fcn.0040d4e8
mov edx, dword [ebp - 0xd0]
call fcn.00478805
mov eax, 1
mov edx, dword [0x47c81c]
call fcn.00478805
call fcn.0046ea92
test eax, eax
je 0x442492
push 0
lea ebx, [ebp - 0xb8]
push ebx
lea ebx, [ebp - 0xbc]
push ebx
push 7
mov edx, 0x47fc74
call fcn.0047881c
push 0
mov ebx, esp
call fcn.004779f9
call fcn.0040ec5f
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jle 0x442469
mov ebx, 0x1f4
xor eax, eax
call fcn.00473932
lea ebx, [ebp - 0xd4]
call fcn.004779f9
push dword [ebp - 0xc0]
push dword [0x47c734]
call sym..exe_JIHUOWP
mov eax, 0x64
call fcn.00473a9b
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
lea ebx, [ebp - 0xc4]
push ebx
mov eax, 0x48
add eax, dword [ebp - 0xc0]
push eax
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 0x1f4
lea ebx, [ebp - 0xd4]
call fcn.00478911
push ebx
push dword [ebp - 0xc4]
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
mov edx, dword [ebp - 0xd4]
call fcn.00478805
xor eax, eax
call fcn.00473aa3
push 0
mov ebx, esp
call fcn.004779f9
call fcn.004643df
call fcn.00478833
lea ebx, [ebp - 0xd4]
call fcn.004779f9
xor eax, eax
mov edx, dword [ebp - 0xd4]
call fcn.00478805
mov ecx, 1
mov edx, 0x482004
call fcn.0047881c
xchg ecx, eax
call fcn.0046ea92
cmp eax, ecx
jle 0x442464
push 0
mov edx, 0x481fb4
call fcn.0047881c
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xa8]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xac]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xbc]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
mov edx, 0x481fd0
call fcn.0047881c
call fcn.00477cbd
lea ebx, [esp]
call fcn.00477abb
push dword [0x47c734]
call sym..exe_SendPacket
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00474673
pop eax
add esp, 4
nop
mov eax, 0x3e8
call fcn.00473a9b
push 0
call fcn.00408d35
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x442440
push dword [0x47c734]
call sym..exe_UNNPCFUNC
jmp 0x442492
mov edx, 0x48382c
call fcn.0047881c
mov eax, 0x12000
mov edx, 0x47f2c4
call fcn.0047881c
call fcn.0046e9da
push 0
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
inc dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0xe4]
jle 0x4421d0
push 8
call fcn.004084f3
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
je 0x4424cc
push 9
call fcn.004084f3
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x44281a
push 5
push 0
mov edx, 0x482010
call fcn.0047881c
lea ebx, [esp]
push ebx
call fcn.004779f9
call fcn.0043fd7f
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00474673
pop eax
add esp, 4
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jge 0x442513
push 3
call fcn.00408949
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jg 0x44281a
push 1
call fcn.00408a13
pop dword [ebp - 0x30]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xa8], 0
jmp 0x442808
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
lea ebx, [ebp - 0xc0]
push ebx
fild dword [0x4875fc]
fimul dword [ebp - 0xa8]
mov eax, dword [0x47c7b8]
call fcn.004779cb
faddp st(1)
fistp qword [ebp - 0x6c]
push dword [ebp - 0x6c]
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
lea ebx, [ebp - 0xd0]
push ebx
lea ebx, [ebp - 0xb4]
push ebx
lea ebx, [ebp - 0xb0]
push ebx
lea ebx, [ebp - 0xac]
push ebx
push dword [ebp - 0xa8]
call fcn.0040d4e8
mov edx, dword [ebp - 0xd0]
call fcn.00478805
mov eax, 1
mov edx, dword [0x47c81c]
call fcn.00478805
call fcn.0046ea92
test eax, eax
je 0x442802
push 0
lea ebx, [ebp - 0xb8]
push ebx
lea ebx, [ebp - 0xbc]
push ebx
push 7
mov edx, 0x47fc74
call fcn.0047881c
push 0
mov ebx, esp
call fcn.004779f9
call fcn.0040ec5f
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jle 0x4427d9
mov ebx, 0x1f4
xor eax, eax
call fcn.00473932
lea ebx, [ebp - 0xd4]
call fcn.004779f9
push dword [ebp - 0xc0]
push dword [0x47c734]
call sym..exe_JIHUOWP
mov eax, 0x64
call fcn.00473a9b
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
lea ebx, [ebp - 0xc4]
push ebx
mov eax, 0x48
add eax, dword [ebp - 0xc0]
push eax
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 0x1f4
lea ebx, [ebp - 0xd4]
call fcn.00478911
push ebx
push dword [ebp - 0xc4]
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
mov edx, dword [ebp - 0xd4]
call fcn.00478805
xor eax, eax
call fcn.00473aa3
push 0
mov ebx, esp
call fcn.004779f9
call fcn.004643df
call fcn.00478833
lea ebx, [ebp - 0xd4]
call fcn.004779f9
xor eax, eax
mov edx, dword [ebp - 0xd4]
call fcn.00478805
mov ecx, 1
mov edx, 0x482010
call fcn.0047881c
xchg ecx, eax
call fcn.0046ea92
cmp eax, ecx
jle 0x4427d4
push 0
mov edx, 0x481fb4
call fcn.0047881c
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xa8]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xac]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xbc]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
mov edx, 0x481fd0
call fcn.0047881c
call fcn.00477cbd
lea ebx, [esp]
call fcn.00477abb
push dword [0x47c734]
call sym..exe_SendPacket
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00474673
pop eax
add esp, 4
nop
mov eax, 0x3e8
call fcn.00473a9b
push 0
call fcn.00408d35
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x4427b0
push dword [0x47c734]
call sym..exe_UNNPCFUNC
jmp 0x442802
mov edx, 0x48382c
call fcn.0047881c
mov eax, 0x12000
mov edx, 0x47f2c4
call fcn.0047881c
call fcn.0046e9da
push 0
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
inc dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0xe4]
jle 0x442540
push 9
call fcn.004084f3
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x442b7a
push 5
push 0
mov edx, 0x482030
call fcn.0047881c
lea ebx, [esp]
push ebx
call fcn.004779f9
call fcn.0043fd7f
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00474673
pop eax
add esp, 4
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jge 0x442874
push 3
call fcn.00408949
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jg 0x442b7a
push 1
call fcn.00408a13
pop dword [ebp - 0x30]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xa8], 0
jmp 0x442b68
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
lea ebx, [ebp - 0xc0]
push ebx
fild dword [0x4875fc]
fimul dword [ebp - 0xa8]
mov eax, dword [0x47c7b8]
call fcn.004779cb
faddp st(1)
fistp qword [ebp - 0x6c]
push dword [ebp - 0x6c]
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
lea ebx, [ebp - 0xd0]
push ebx
lea ebx, [ebp - 0xb4]
push ebx
lea ebx, [ebp - 0xb0]
push ebx
lea ebx, [ebp - 0xac]
push ebx
push dword [ebp - 0xa8]
call fcn.0040d4e8
mov edx, dword [ebp - 0xd0]
call fcn.00478805
mov eax, 1
mov edx, dword [0x47c81c]
call fcn.00478805
call fcn.0046ea92
test eax, eax
je 0x442b62
push 0
lea ebx, [ebp - 0xb8]
push ebx
lea ebx, [ebp - 0xbc]
push ebx
push 7
mov edx, 0x47fc74
call fcn.0047881c
push 0
mov ebx, esp
call fcn.004779f9
call fcn.0040ec5f
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jle 0x442b39
mov ebx, 0x1f4
xor eax, eax
call fcn.00473932
lea ebx, [ebp - 0xd4]
call fcn.004779f9
push dword [ebp - 0xc0]
push dword [0x47c734]
call sym..exe_JIHUOWP
mov eax, 0x64
call fcn.00473a9b
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 4
lea ebx, [ebp - 0xc4]
push ebx
mov eax, 0x48
add eax, dword [ebp - 0xc0]
push eax
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
push 0
xor eax, eax
lea ebx, [esp]
push ebx
mov dword [ebx], eax
push 0x1f4
lea ebx, [ebp - 0xd4]
call fcn.00478911
push ebx
push dword [ebp - 0xc4]
push dword [0x47c740]
call dword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
add esp, 4
fldcw word [ebp - 0x10]
mov edx, dword [ebp - 0xd4]
call fcn.00478805
xor eax, eax
call fcn.00473aa3
push 0
mov ebx, esp
call fcn.004779f9
call fcn.004643df
call fcn.00478833
lea ebx, [ebp - 0xd4]
call fcn.004779f9
xor eax, eax
mov edx, dword [ebp - 0xd4]
call fcn.00478805
mov ecx, 1
mov edx, 0x482030
call fcn.0047881c
xchg ecx, eax
call fcn.0046ea92
cmp eax, ecx
jle 0x442b34
push 0
mov edx, 0x481fb4
call fcn.0047881c
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xa8]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xac]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
push 0
mov eax, 8
lea ebx, [esp]
push ebx
mov dword [ebx], eax
lea ebx, [ebp - 0xbc]
push ebx
call fcn.004642a0
add esp, 4
call fcn.00478833
call fcn.00477cbd
mov edx, 0x481fd0
call fcn.0047881c
call fcn.00477cbd
lea ebx, [esp]
call fcn.00477abb
push dword [0x47c734]
call sym..exe_SendPacket
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00474673
pop eax
add esp, 4
nop
mov eax, 0x3e8
call fcn.00473a9b
push 0
call fcn.00408d35
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x442b10
push dword [0x47c734]
call sym..exe_UNNPCFUNC
jmp 0x442b62
mov edx, 0x48382c
call fcn.0047881c
mov eax, 0x12000
mov edx, 0x47f2c4
call fcn.0047881c
call fcn.0046e9da
push 0
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
inc dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0xe4]
jle 0x4428a0
push 0x191
call fcn.00409467
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x44302b
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483694
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4836a0
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4836b4
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4836c8
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4836dc
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4836f0
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483704
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483580
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483598
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x48358c
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4835b0
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4835c0
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4835d0
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, str.explorer.EXE
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4835f8
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483608
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483618
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x48362c
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483640
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483650
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483660
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483674
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483728
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483734
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483740
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483750
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483760
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483770
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483780
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x483790
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4837a0
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4837b0
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4837c0
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4837d0
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, 0x4837e0
call fcn.0047881c
call fcn.00477d52
je 0x44300c
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, str.135_
call fcn.0047881c
call fcn.00477d52
jne 0x443026
push dword [0x47c734]
call sym..exe_UNNPCFUNC
mov eax, 0x3e8
call fcn.00473a9b
call fcn.004430a0
jmp 0x443078
push 0x17
call fcn.00409467
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x443078
mov edx, dword [0x47c81c]
call fcn.00478805
mov edx, str.
call fcn.0047881c
call fcn.00477d52
jne 0x443078
push dword [0x47c734]
call sym..exe_UNNPCFUNC
mov eax, 0x3e8
call fcn.00473a9b
call fcn.004430a0
call fcn.004786f6
mov eax, dword [ebp - 0x98]
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret