Function at 0x100ca270
Capabilities:
Encode data using xor
Encrypt data using aes
Reference aes constants

Disassembly:
push 0xffffffffffffffff
push 0x1019f5fc
mov eax, dword fs:[0]
push eax
sub esp, 0x918
mov eax, dword [0x1026d48c]
xor eax, esp
mov dword [esp + 0x914], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1026d48c]
xor eax, esp
push eax
lea eax, [esp + 0x92c]
mov dword fs:[0], eax
mov esi, dword [esp + 0x948]
mov ebp, dword [esp + 0x940]
mov edi, dword [esp + 0x944]
push str.initCrypt_aes2
mov dword [esp + 0x18], ecx
push esi
lea ecx, [esp + 0x2c]
mov dword [esp + 0x28], ebp
mov dword [esp + 0x24], edi
call fcn.10061630
mov eax, dword [ebp + 8]
cmp eax, 3
mov dword [esp + 0x934], 0
je 0x100ca302
cmp eax, 6
je 0x100ca302
cmp eax, 2
je 0x100ca302
cmp eax, 5
je 0x100ca302
cmp eax, 4
jne 0x100ca306
mov bl, 1
jmp 0x100ca30d
mov bl, byte [esp + 0x93c]
cmp eax, 8
jne 0x100ca492
test edi, edi
je 0x100ca484
lea ecx, [esp + 0x100]
call fcn.100c69b0
lea ecx, [esp + 0x30]
mov byte [esp + 0x934], 1
call fcn.100c6e20
lea ecx, [esp + 0x390]
mov byte [esp + 0x934], 2
call fcn.100c95e0
lea edi, [ebp + 0x14]
mov ecx, edi
mov byte [esp + 0x934], 3
mov dword [esp + 0x38], 1
call fcn.100f6330
push eax
lea eax, [ebp + 0x8c]
push eax
lea ecx, [esp + 0x4c]
call fcn.10019380
mov ecx, edi
call fcn.100f6330
push esi
add eax, eax
lea ecx, [esp + 0x394]
push ecx
lea edx, [esp + 0x38]
add eax, eax
push edx
add eax, eax
push 1
lea ecx, [esp + 0x110]
mov dword [esp + 0x50], eax
mov dword [esp + 0x4c], 3
call fcn.100ca270
call fcn.100eee40
cmp byte [ebp + 0xac], 0
mov byte [esp + 0x18], al
je 0x100ca3f7
mov ecx, dword [ebp + 0xb4]
mov edx, dword [ebp + 0xb0]
lea eax, [esp + 0x918]
push eax
mov eax, dword [esp + 0x1c]
push ecx
push edx
push eax
call fcn.10015e40
push 8
lea ecx, [esp + 0x934]
push 0
push ecx
call fcn.10016e50
add esp, 0x1c
jmp 0x100ca42b
mov edx, dword [ebp + 0xb8]
mov eax, dword [ebp + 0xbc]
mov ecx, dword [ebp + 0xc0]
mov dword [esp + 0x918], edx
mov edx, dword [ebp + 0xc4]
mov dword [esp + 0x91c], eax
mov dword [esp + 0x920], ecx
mov dword [esp + 0x924], edx
mov eax, dword [esp + 0x1c]
add eax, 0x558
push eax
lea ecx, [esp + 0x91c]
push ecx
lea ecx, [esp + 0x108]
call fcn.100c7610
lea ecx, [esp + 0x390]
mov byte [esp + 0x934], 2
call fcn.100c6d60
lea ecx, [esp + 0x30]
mov byte [esp + 0x934], 1
call fcn.100c6ee0
lea ecx, [esp + 0x100]
mov byte [esp + 0x934], 0
call fcn.100c6a30
jmp 0x100ca492
mov edx, dword [esi]
mov eax, dword [edx + 0x14]
push str.No_context_for_XTS_mode_
mov ecx, esi
call eax
mov ecx, dword [esp + 0x14]
mov byte [ecx + 0x88], bl
mov eax, dword [ebp + 0x10]
cmp eax, 0xc1
jl 0x100ca4af
mov dword [ebp + 0x10], 0x100
jmp 0x100ca4c8
xor edx, edx
cmp eax, 0x81
setl dl
sub edx, 1
and edx, 0x40
add edx, 0x80
mov dword [ebp + 0x10], edx
mov esi, dword [esp + 0x20]
mov ebp, dword [ebp + 0x10]
xor eax, eax
add esi, 0x14
mov ecx, esi
mov dword [esp + 0x8f8], eax
mov dword [esp + 0x8fc], eax
mov dword [esp + 0x900], eax
mov dword [esp + 0x904], eax
mov dword [esp + 0x908], eax
mov dword [esp + 0x90c], eax
mov dword [esp + 0x910], eax
mov dword [esp + 0x914], eax
call fcn.1008bea0
test eax, eax
je 0x100ca565
mov ecx, esi
call fcn.100f6330
test eax, eax
je 0x100ca565
mov ecx, esi
call fcn.100f6330
cmp eax, 0x20
mov ecx, esi
jbe 0x100ca547
call fcn.1008bea0
mov ecx, 8
mov esi, eax
lea edi, [esp + 0x8f8]
rep movsd dword es:[edi], dword [esi]
jmp 0x100ca565
call fcn.100f6330
push eax
mov ecx, esi
call fcn.1008bea0
push eax
lea eax, [esp + 0x900]
push eax
call sub.MSVCR80.dll_memcpy
add esp, 0xc
mov eax, ebp
sub eax, 0x80
je 0x100ca5b5
sub eax, 0x40
je 0x100ca5a3
sub eax, 0x40
je 0x100ca593
lea ecx, [esp + 0x24]
mov dword [esp + 0x934], 0xffffffff
call fcn.100616a0
xor al, al
jmp 0x100cadb7
mov ebx, dword [esp + 0x14]
mov dword [ebx + 0x28c], 0xe
jmp 0x100ca5c5
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x28c], 0xc
mov ebx, ecx
jmp 0x100ca5c5
mov edx, dword [esp + 0x14]
mov dword [edx + 0x28c], 0xa
mov ebx, edx
mov esi, ebp
sar esi, 5
xor ecx, ecx
test esi, esi
lea eax, [ebx + 0x8c]
jle 0x100ca61c
mov edi, eax
lea edx, [esp + 0x8f9]
sub edi, edx
movzx ebp, byte [esp + ecx*4 + 0x8fa]
xor edx, edx
mov dh, byte [esp + ecx*4 + 0x8f8]
mov dl, byte [esp + ecx*4 + 0x8f9]
shl edx, 8
or edx, ebp
movzx ebp, byte [esp + ecx*4 + 0x8fb]
shl edx, 8
or edx, ebp
lea ebp, [edi + ecx*4]
add ecx, 1
cmp ecx, esi
mov dword [esp + ebp + 0x8f9], edx
jl 0x100ca5e1
mov ecx, dword [ebx + 0x28c]
cmp ecx, 0xa
jne 0x100ca817
mov edi, 0x101fa724
mov esi, dword [eax + 0xc]
mov ecx, esi
shr ecx, 0x10
movzx edx, cl
mov ecx, dword [edx*4 + str.cwko0]
shl ecx, 8
mov edx, esi
shr edx, 8
movzx edx, dl
xor ecx, dword [edx*4 + str.cwko0]
movzx edx, byte [eax + 0xc]
shl ecx, 8
xor ecx, dword [edx*4 + str.cwko0]
mov edx, esi
shl ecx, 8
shr edx, 0x18
xor ecx, dword [edx*4 + str.cwko0]
mov edx, dword [eax + 4]
xor ecx, dword [edi - 4]
xor ecx, dword [eax]
xor edx, ecx
mov dword [eax + 0x10], ecx
mov ecx, dword [eax + 8]
xor ecx, edx
xor esi, ecx
mov dword [eax + 0x18], ecx
mov dword [eax + 0x14], edx
mov dword [eax + 0x1c], esi
mov ecx, esi
shr ecx, 0x10
movzx edx, cl
mov ecx, dword [edx*4 + str.cwko0]
shl ecx, 8
mov edx, esi
shr edx, 8
movzx edx, dl
xor ecx, dword [edx*4 + str.cwko0]
movzx edx, byte [eax + 0x1c]
shl ecx, 8
xor ecx, dword [edx*4 + str.cwko0]
mov edx, dword [eax + 0x14]
shl ecx, 8
shr esi, 0x18
xor ecx, dword [esi*4 + str.cwko0]
mov esi, dword [eax + 0x1c]
xor ecx, dword [eax + 0x10]
xor ecx, dword [edi]
xor edx, ecx
mov dword [eax + 0x20], ecx
mov ecx, dword [eax + 0x18]
xor ecx, edx
xor esi, ecx
mov dword [eax + 0x28], ecx
mov dword [eax + 0x24], edx
mov ecx, esi
shr ecx, 0x10
movzx edx, cl
mov dword [eax + 0x2c], esi
mov ecx, dword [edx*4 + str.cwko0]
shl ecx, 8
mov edx, esi
shr edx, 8
movzx edx, dl
xor ecx, dword [edx*4 + str.cwko0]
movzx edx, byte [eax + 0x2c]
shl ecx, 8
xor ecx, dword [edx*4 + str.cwko0]
mov edx, dword [eax + 0x24]
shl ecx, 8
shr esi, 0x18
xor ecx, dword [esi*4 + str.cwko0]
mov esi, dword [eax + 0x2c]
xor ecx, dword [edi + 4]
xor ecx, dword [eax + 0x20]
xor edx, ecx
mov dword [eax + 0x30], ecx
mov ecx, dword [eax + 0x28]
xor ecx, edx
mov dword [eax + 0x34], edx
mov dword [eax + 0x38], ecx
xor esi, ecx
mov dword [eax + 0x3c], esi
mov ecx, esi
shr ecx, 0x10
movzx edx, cl
mov ecx, dword [edx*4 + str.cwko0]
shl ecx, 8
mov edx, esi
shr edx, 8
movzx edx, dl
xor ecx, dword [edx*4 + str.cwko0]
movzx edx, byte [eax + 0x3c]
shl ecx, 8
xor ecx, dword [edx*4 + str.cwko0]
mov edx, dword [eax + 0x34]
shl ecx, 8
shr esi, 0x18
xor ecx, dword [esi*4 + str.cwko0]
mov esi, dword [eax + 0x3c]
xor ecx, dword [edi + 8]
add edi, 0x14
xor ecx, dword [eax + 0x30]
add eax, 0x50
xor edx, ecx
mov dword [eax - 0x10], ecx
mov ecx, dword [eax - 0x18]
xor ecx, edx
xor esi, ecx
mov dword [eax - 8], ecx
mov dword [eax - 0xc], edx
mov dword [eax - 4], esi
mov ecx, esi
shr ecx, 0x10
movzx edx, cl
mov ecx, dword [edx*4 + str.cwko0]
shl ecx, 8
mov edx, esi
shr edx, 8
movzx edx, dl
xor ecx, dword [edx*4 + str.cwko0]
movzx edx, byte [eax - 4]
shl ecx, 8
xor ecx, dword [edx*4 + str.cwko0]
mov edx, dword [eax - 0xc]
shl ecx, 8
shr esi, 0x18
xor ecx, dword [esi*4 + str.cwko0]
xor ecx, dword [edi - 8]
xor ecx, dword [eax - 0x10]
xor edx, ecx
mov dword [eax], ecx
mov ecx, dword [eax - 8]
xor ecx, edx
mov dword [eax + 4], edx
mov edx, dword [eax - 4]
xor edx, ecx
cmp edi, vtable._ckGcmContext.0
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
jl 0x100ca630
jmp 0x100caacb
cmp ecx, 0xc
jne 0x100ca9ef
mov edi, 0x101fa724
mov ebp, dword [eax + 0x14]
mov ecx, ebp
shr ecx, 0x10
movzx edx, cl
mov ecx, dword [edx*4 + str.cwko0]
shl ecx, 8
mov edx, ebp
shr edx, 8
movzx edx, dl
xor ecx, dword [edx*4 + str.cwko0]
movzx edx, byte [eax + 0x14]
shl ecx, 8
xor ecx, dword [edx*4 + str.cwko0]
mov esi, dword [eax + 0x10]
shl ecx, 8
mov edx, ebp
shr edx, 0x18
xor ecx, dword [edx*4 + str.cwko0]
mov edx, dword [eax + 4]
xor ecx, dword [edi - 4]
xor ecx, dword [eax]
xor edx, ecx
mov dword [eax + 0x18], ecx
mov ecx, dword [eax + 8]
xor ecx, edx
mov dword [eax + 0x1c], edx
mov edx, dword [eax + 0xc]
xor edx, ecx
xor esi, edx
mov dword [eax + 0x20], ecx
mov dword [eax + 0x24], edx
mov dword [eax + 0x28], esi
xor esi, ebp
mov dword [eax + 0x2c], esi
mov ecx, esi
shr ecx, 0x10
movzx edx, cl
mov ecx, dword [edx*4 + str.cwko0]
shl ecx, 8
mov edx, esi
shr edx, 8
movzx edx, dl
xor ecx, dword [edx*4 + str.cwko0]
movzx edx, byte [eax + 0x2c]
shl ecx, 8
xor ecx, dword [edx*4 + str.cwko0]
mov edx, dword [eax + 0x1c]
shl ecx, 8
shr esi, 0x18
xor ecx, dword [esi*4 + str.cwko0]
mov esi, dword [eax + 0x2c]
xor ecx, dword [edi]
xor ecx, dword [eax + 0x18]
xor edx, ecx
mov dword [eax + 0x30], ecx
mov ecx, dword [eax + 0x20]
xor ecx, edx
mov dword [eax + 0x34], edx
mov edx, dword [eax + 0x24]
xor edx, ecx
mov dword [eax + 0x38], ecx
mov ecx, dword [eax + 0x28]
xor ecx, edx
xor esi, ecx
mov dword [eax + 0x40], ecx
mov dword [eax + 0x3c], edx
mov ecx, esi
shr ecx, 0x10
movzx edx, cl
mov dword [eax + 0x44], esi
mov ecx, dword [edx*4 + str.cwko0]
mov edx, esi
shr edx, 8
shl ecx, 8
movzx edx, dl
xor ecx, dword [edx*4 + str.cwko0]
movzx edx, byte [eax + 0x44]
shl ecx, 8
xor ecx, dword [edx*4 + str.cwko0]
shl ecx, 8
shr esi, 0x18
xor ecx, dword [esi*4 + str.cwko0]
mov edx, dword [eax + 0x34]
xor ecx, dword [edi + 4]
mov esi, dword [eax + 0x44]
xor ecx, dword [eax + 0x30]
add edi, 0x10
xor edx, ecx
mov dword [eax + 0x48], ecx
mov ecx, dword [eax + 0x38]
xor ecx, edx
mov dword [eax + 0x4c], edx
mov edx, dword [eax + 0x3c]
xor edx, ecx
mov dword [eax + 0x50], ecx
mov ecx, dword [eax + 0x40]
xor ecx, edx
xor esi, ecx
mov dword [eax + 0x58], ecx
mov dword [eax + 0x54], edx
mov dword [eax + 0x5c], esi
mov ecx, esi
shr ecx, 0x10
movzx edx, cl
mov ecx, dword [edx*4 + str.cwko0]
shl ecx, 8
mov edx, esi
shr edx, 8
movzx edx, dl
xor ecx, dword [edx*4 + str.cwko0]
movzx edx, byte [eax + 0x5c]
shl ecx, 8
xor ecx, dword [edx*4 + str.cwko0]
mov edx, dword [eax + 0x4c]
shl ecx, 8
shr esi, 0x18
xor ecx, dword [esi*4 + str.cwko0]
add eax, 0x60
xor ecx, dword [edi - 8]
xor ecx, dword [eax - 0x18]
xor edx, ecx
mov dword [eax], ecx
mov ecx, dword [eax - 0x10]
xor ecx, edx
mov dword [eax + 4], edx
mov edx, dword [eax - 0xc]
xor edx, ecx
mov dword [eax + 8], ecx
mov ecx, dword [eax - 8]
xor ecx, edx
mov dword [eax + 0xc], edx
mov edx, dword [eax - 4]
xor edx, ecx
cmp edi, 0x101fa744
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edx
jl 0x100ca825
jmp 0x100caacb
cmp ecx, 0xe
jne 0x100caacb
mov ebp, 0x101fa720
lea ecx, [ecx]
mov esi, dword [eax + 0x1c]
mov ecx, esi
shr ecx, 0x10
movzx edx, cl
mov ecx, dword [edx*4 + str.cwko0]
shl ecx, 8
mov edi, dword [eax + 0xc]
mov edx, esi
shr edx, 8
movzx edx, dl
xor ecx, dword [edx*4 + str.cwko0]
movzx edx, byte [eax + 0x1c]
shl ecx, 8
xor ecx, dword [edx*4 + str.cwko0]
mov edx, esi
shl ecx, 8
shr edx, 0x18
xor ecx, dword [edx*4 + str.cwko0]
mov edx, dword [eax + 4]
xor ecx, dword [ebp]
add ebp, 4
xor ecx, dword [eax]
add eax, 0x20
xor edx, ecx
mov dword [eax], ecx
mov ecx, dword [eax - 0x18]
xor ecx, edx
xor edi, ecx
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edi
mov ecx, edi
shr ecx, 0x18
mov ecx, dword [ecx*4 + str.cwko0]
shl ecx, 8
mov edx, edi
shr edx, 0x10
movzx edx, dl
xor ecx, dword [edx*4 + str.cwko0]
mov edx, edi
shr edx, 8
shl ecx, 8
movzx edx, dl
xor ecx, dword [edx*4 + str.cwko0]
movzx edx, byte [eax + 0xc]
shl ecx, 8
xor ecx, dword [edx*4 + str.cwko0]
mov edx, dword [eax - 0xc]
xor ecx, dword [eax - 0x10]
xor edx, ecx
mov dword [eax + 0x10], ecx
mov ecx, dword [eax - 8]
xor ecx, edx
xor esi, ecx
cmp ebp, 0x101fa73c
mov dword [eax + 0x14], edx
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], esi
jl 0x100caa00
cmp byte [0x1026fd38], 0
jne 0x100cabdf
xor ecx, ecx
lea ebx, [ebx]
mov edx, dword [ecx + str.cwko0]
add edx, edx
mov esi, dword [edx + edx + 0x101f9720]
add edx, edx
mov dword [ecx + 0x1026f138], esi
mov esi, dword [edx + 0x101f9b20]
mov dword [ecx + 0x1026f538], esi
mov esi, dword [edx + 0x101f9f20]
mov edx, dword [edx + 0x101fa320]
mov dword [ecx + 0x1026ed38], edx
mov edx, dword [ecx + 0x101f7f24]
add edx, edx
add edx, edx
mov dword [ecx + 0x1026f938], esi
mov esi, dword [edx + 0x101f9720]
mov dword [ecx + 0x1026f13c], esi
mov esi, dword [edx + 0x101f9b20]
mov dword [ecx + 0x1026f53c], esi
mov esi, dword [edx + 0x101f9f20]
mov edx, dword [edx + 0x101fa320]
mov dword [ecx + 0x1026ed3c], edx
mov edx, dword [ecx + 0x101f7f28]
add edx, edx
add edx, edx
mov dword [ecx + 0x1026f93c], esi
mov esi, dword [edx + 0x101f9720]
mov dword [ecx + 0x1026f140], esi
mov esi, dword [edx + 0x101f9b20]
mov dword [ecx + 0x1026f540], esi
mov esi, dword [edx + 0x101f9f20]
mov edx, dword [edx + 0x101fa320]
mov dword [ecx + 0x1026ed40], edx
mov edx, dword [ecx + 0x101f7f2c]
add edx, edx
add edx, edx
mov dword [ecx + 0x1026f940], esi
mov esi, dword [edx + 0x101f9720]
mov dword [ecx + 0x1026f144], esi
mov esi, dword [edx + 0x101f9b20]
mov dword [ecx + 0x1026f544], esi
mov esi, dword [edx + 0x101f9f20]
mov edx, dword [edx + 0x101fa320]
mov dword [ecx + 0x1026f944], esi
mov dword [ecx + 0x1026ed44], edx
add ecx, 0x10
cmp ecx, 0x400
jl 0x100caae0
mov byte [0x1026fd38], 1
mov edx, dword [eax]
mov dword [ebx + 0x18c], edx
mov edx, dword [eax + 4]
add eax, 4
lea ecx, [ebx + 0x18c]
mov dword [ecx + 4], edx
mov edx, dword [eax + 4]
add ecx, 4
add eax, 4
add ecx, 4
mov dword [ecx], edx
mov edx, dword [eax + 4]
add eax, 4
add ecx, 4
mov dword [ecx], edx
mov edi, 1
add ecx, 4
add eax, 4
cmp dword [ebx + 0x28c], edi
jle 0x100cad3b
mov esi, dword [eax - 0x20]
mov dword [esp + 0x18], ebx
mov ebx, esi
shr ebx, 0x10
movzx ebp, bl
sub eax, 0x20
mov edx, esi
shr edx, 0x18
mov edx, dword [edx*4 + 0x1026f138]
xor edx, dword [ebp*4 + 0x1026f538]
mov ebx, esi
shr ebx, 8
movzx esi, bl
xor edx, dword [esi*4 + 0x1026f938]
movzx esi, byte [eax]
xor edx, dword [esi*4 + 0x1026ed38]
add eax, 4
mov dword [ecx], edx
mov esi, dword [eax]
mov ebx, esi
shr ebx, 0x10
movzx ebp, bl
mov edx, esi
shr edx, 0x18
mov edx, dword [edx*4 + 0x1026f138]
xor edx, dword [ebp*4 + 0x1026f538]
mov ebx, esi
shr ebx, 8
movzx esi, bl
xor edx, dword [esi*4 + 0x1026f938]
movzx esi, byte [eax]
xor edx, dword [esi*4 + 0x1026ed38]
add ecx, 4
mov dword [ecx], edx
mov esi, dword [eax + 4]
add eax, 4
mov ebx, esi
shr ebx, 0x10
movzx ebp, bl
mov edx, esi
shr edx, 0x18
mov edx, dword [edx*4 + 0x1026f138]
xor edx, dword [ebp*4 + 0x1026f538]
mov ebx, esi
shr ebx, 8
movzx esi, bl
xor edx, dword [esi*4 + 0x1026f938]
movzx esi, byte [eax]
xor edx, dword [esi*4 + 0x1026ed38]
add ecx, 4
mov dword [ecx], edx
mov esi, dword [eax + 4]
add eax, 4
mov ebx, esi
shr ebx, 0x10
movzx ebp, bl
mov edx, esi
shr edx, 0x18
mov edx, dword [edx*4 + 0x1026f138]
xor edx, dword [ebp*4 + 0x1026f538]
mov ebx, esi
shr ebx, 8
movzx esi, bl
xor edx, dword [esi*4 + 0x1026f938]
movzx esi, byte [eax]
xor edx, dword [esi*4 + 0x1026ed38]
mov ebx, dword [esp + 0x18]
add ecx, 4
mov dword [ecx], edx
add edi, 1
add ecx, 4
add eax, 4
cmp edi, dword [ebx + 0x28c]
jl 0x100cac26
mov edx, dword [eax - 0x20]
mov edi, dword [esp + 0x1c]
sub eax, 0x20
mov dword [ecx], edx
mov edx, dword [eax + 4]
add eax, 4
add ecx, 4
mov dword [ecx], edx
mov edx, dword [eax + 4]
add eax, 4
add ecx, 4
mov dword [ecx], edx
add eax, 4
mov eax, dword [eax]
add ecx, 4
test edi, edi
mov dword [ecx], eax
je 0x100cada1
mov esi, dword [esp + 0x20]
mov eax, dword [esi + 8]
cmp eax, 3
je 0x100cad7c
cmp eax, 4
jne 0x100cada1
mov ecx, dword [ebx + 0x80]
add esi, 0x34
push ecx
mov ecx, esi
call fcn.100f6330
push eax
mov ecx, esi
call fcn.1008bea0
push eax
lea ecx, [edi + 0x484]
call fcn.10174770
lea ecx, [esp + 0x24]
mov dword [esp + 0x934], 0xffffffff
call fcn.100616a0
mov al, 1
mov ecx, dword [esp + 0x92c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x914]
xor ecx, esp
call fcn.1018f87e
add esp, 0x924
ret 0x10