Function at 0x41bfa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x11b0
call fcn.00411e90
mov eax, dword [esp + 0x11c0]
push ebx
mov ebx, dword [esp + 0x11b8]
push esi
xor esi, esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x34], 0xffffffff
mov dword [esp + 0x14], 0xffffffff
mov dword [esp + 0xc], 0
mov dword [esp + 8], esi
mov dword [esp + 0x10], esi
mov dword [esp + 0x24], ebx
test eax, eax
jne 0x41c008
mov eax, dword [esp + 0x11c4]
test eax, eax
je 0x41bffd
mov dword [eax], 0x63
pop esi
xor eax, eax
pop ebx
add esp, 0x11b0
ret
mov dword [eax], esi
mov eax, dword [esp + 0x11c4]
test eax, eax
je 0x41c017
mov dword [eax], esi
push ebp
mov ebp, dword [esp + 0x11d0]
push edi
test ebp, ebp
jne 0x41c035
mov esi, 0x10
mov ecx, str.no_error
mov edx, esi
jmp 0x41c9f5
mov ecx, dword [esp + 0x11d8]
mov dword [ebp], esi
test ecx, ecx
jne 0x41c04f
mov ecx, 0x49bdf0
mov dword [esp + 0x11d8], ecx
mov edi, dword [esp + 0x11c8]
lea eax, [ecx + 0x100]
mov dword [esp + 0x44], eax
lea eax, [ecx + 0x200]
mov dword [esp + 0x48], eax
lea eax, [ecx + 0x340]
mov dword [esp + 0x40], ecx
mov dword [esp + 0x4c], eax
test edi, 0xd8008580
je 0x41c08a
mov esi, 0x11
jmp 0x41c9d2
test edi, 0x10000
je 0x41c09a
mov dword [esp + 0x18], 1
mov dword [esp + 0xa4], esi
cmp byte [ebx], 0x28
jne 0x41c3e1
lea ebx, [ebx]
cmp byte [ebx + esi + 1], 0x2a
jne 0x41c3da
push 5
add ebx, 2
add ebx, esi
push str.UTF8_
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x41c0e2
add esi, 7
or edi, 0x800
jmp 0x41c3b5
push 4
push str.UTF_
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x41c104
add esi, 6
or edi, 0x800
jmp 0x41c3b5
push 4
push str.UCP_
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x41c126
add esi, 6
or edi, 0x20000000
jmp 0x41c3b5
push 0x10
push str.NO_AUTO_POSSESS_
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x41c148
add esi, 0x12
or edi, 0x20000
jmp 0x41c3b5
push 0xd
push str.NO_START_OPT_
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x41c16a
add esi, 0xf
or edi, 0x4000000
jmp 0x41c3b5
push 0xc
push str.LIMIT_MATCH
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x41c212
mov eax, dword [esp + 0x11c4]
lea ebp, [esi + 0xe]
add eax, ebp
xor ebx, ebx
mov dword [esp + 0x28], eax
movzx eax, byte [eax]
push eax
call sub.MSVCRT.dll_isdigit
add esp, 4
test eax, eax
je 0x41c1e3
mov edi, dword [esp + 0x28]
mov esi, dword [esp + 0x11c4]
nop
cmp ebx, 0x19999998
ja 0x41c1d8
movzx eax, byte [edi]
lea ebx, [ebx + ebx*4]
inc ebp
lea ebx, [ebx - 0x18]
lea edi, [esi + ebp]
lea ebx, [eax + ebx*2]
movzx eax, byte [edi]
push eax
call sub.MSVCRT.dll_isdigit
add esp, 4
test eax, eax
jne 0x41c1b0
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x11c8]
mov eax, dword [esp + 0x11c4]
mov al, byte [eax + ebp]
cmp al, 0x29
jne 0x41c3d3
cmp ebx, dword [esp + 0x3c]
jae 0x41c20a
or dword [esp + 0xa4], 0x2000
mov dword [esp + 0x3c], ebx
lea esi, [ebp + 1]
jmp 0x41c3bc
push 0x10
push str.LIMIT_RECURSION
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x41c2b9
mov eax, dword [esp + 0x11c4]
lea ebp, [esi + 0x12]
add eax, ebp
xor ebx, ebx
mov dword [esp + 0x28], eax
movzx eax, byte [eax]
push eax
call sub.MSVCRT.dll_isdigit
add esp, 4
test eax, eax
je 0x41c28a
mov edi, dword [esp + 0x28]
mov esi, dword [esp + 0x11c4]
cmp ebx, 0x19999998
ja 0x41c27f
movzx eax, byte [edi]
lea ebx, [ebx + ebx*4]
inc ebp
lea ebx, [ebx - 0x18]
lea edi, [esi + ebp]
lea ebx, [eax + ebx*2]
movzx eax, byte [edi]
push eax
call sub.MSVCRT.dll_isdigit
add esp, 4
test eax, eax
jne 0x41c257
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x11c8]
mov eax, dword [esp + 0x11c4]
mov al, byte [eax + ebp]
cmp al, 0x29
jne 0x41c3d3
cmp ebx, dword [esp + 0x1c]
jae 0x41c2b1
or dword [esp + 0xa4], 0x4000
mov dword [esp + 0x1c], ebx
lea esi, [ebp + 1]
jmp 0x41c3bc
push 3
push 0x489574
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x41c2e0
add esi, 5
mov eax, 0x100000
and edi, 0xff8fffff
jmp 0x41c3b3
push 3
push 0x489578
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x41c307
add esi, 5
mov eax, 0x200000
and edi, 0xff8fffff
jmp 0x41c3b3
push 5
push str.CRLF_
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x41c32e
add esi, 7
mov eax, 0x300000
and edi, 0xff8fffff
jmp 0x41c3b3
push 4
push str.ANY_
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x41c352
add esi, 6
mov eax, 0x400000
and edi, 0xff8fffff
jmp 0x41c3b3
push 8
push str.ANYCRLF_
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x41c376
add esi, 0xa
mov eax, 0x500000
and edi, 0xff8fffff
jmp 0x41c3b3
push 0xc
push str.BSR_ANYCRLF_
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x41c391
mov eax, 0x800000
jmp 0x41c3aa
push 0xc
push str.BSR_UNICODE_
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x41c3d3
mov eax, 0x1000000
add esi, 0xe
and edi, 0xfe7fffff
or edi, eax
mov dword [esp + 0x11c8], edi
mov ebx, dword [esp + 0x11c4]
mov dword [esp + 0x10], esi
cmp byte [esi + ebx], 0x28
je 0x41c0b0
jmp 0x41c3da
mov ebx, dword [esp + 0x11c4]
mov ebp, dword [esp + 0x11d4]
mov eax, edi
shr eax, 0xb
and eax, 1
mov dword [esp + 0x10], eax
je 0x41c434
cmp dword [esp + 0x18], 0
je 0x41c407
mov esi, 0x4e
mov ecx, str.no_error
mov edx, esi
jmp 0x41c9f5
test edi, 0x2000
jne 0x41c434
push ebp
push 0xffffffffffffffff
push ebx
call fcn.0042d4c0
add esp, 0xc
mov dword [esp + 0x14], eax
test eax, eax
je 0x41c434
mov esi, 0x2c
mov ecx, str.no_error
mov edx, esi
jmp 0x41c9f5
mov eax, edi
and eax, 0x1800000
cmp eax, 0x1800000
jne 0x41c44c
mov esi, 0x38
jmp 0x41c9d2
mov eax, edi
and eax, 0x700000
cmp eax, 0x300000
jg 0x41c4bb
je 0x41c499
test eax, eax
je 0x41c46e
cmp eax, 0x100000
je 0x41c492
cmp eax, 0x200000
jne 0x41c4c9
mov eax, 0xa
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 1
mov byte [esp + 0xcc], al
jmp 0x41c4eb
mov eax, 0xd
jmp 0x41c473
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 2
mov word [esp + 0xcc], 0xa0d
jmp 0x41c4eb
cmp eax, 0x400000
je 0x41c4e0
cmp eax, 0x500000
je 0x41c4d3
mov esi, 0x38
jmp 0x41c9d2
mov dword [esp + 0xc4], 2
jmp 0x41c4eb
mov dword [esp + 0xc4], 1
lea eax, [esp + 0x1c0]
mov dword [esp + 0x8c], 0
mov ecx, ebx
mov dword [esp + 0x54], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x50], eax
lea eax, [esp + 0xd0]
mov dword [esp + 0x90], 0
mov dword [esp + 0x84], 0
lea edx, [ecx + 1]
mov dword [esp + 0x80], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0x7c], 0x1000
mov dword [esp + 0x68], eax
mov dword [esp + 0x78], 0x14
mov dword [esp + 0x58], ebx
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41c592
sub ecx, edx
mov dword [esp + 0xa8], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x88], 0
lea eax, [ecx + ebx]
mov dword [esp + 0xa0], edi
mov dword [esp + 0x5c], eax
lea eax, [esi + ebx]
mov dword [esp + 0x34], eax
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c0]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x44]
mov dword [esp + 0x68], 0
push eax
push 0
lea eax, [esp + 0x44]
mov byte [esp + 0x1cc], 0x83
push eax
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x40]
push eax
push 0
push 0
push 0
push 0
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x58]
push eax
push edi
call fcn.0041a2c0
mov esi, dword [esp + 0x50]
add esp, 0x3c
test esi, esi
jne 0x41c9d2
mov esi, dword [esp + 0x20]
cmp esi, 0x10000
jle 0x41c65d
mov esi, 0x14
jmp 0x41c9d2
mov eax, dword [esp + 0x74]
lea ebx, [esi + 0x38]
imul eax, dword [esp + 0x70]
add ebx, eax
push ebx
call dword [0x21930f4]
mov ebp, eax
add esp, 4
test ebp, ebp
jne 0x41c683
lea esi, [eax + 0x15]
jmp 0x41c9d2
mov dword [ebp + 4], ebx
mov dword [ebp], 0x50435245
mov eax, dword [esp + 0xa0]
mov dword [ebp + 8], eax
mov eax, dword [esp + 0xa4]
mov dword [ebp + 0xc], eax
mov eax, dword [esp + 0x3c]
mov dword [ebp + 0x10], eax
mov eax, dword [esp + 0x1c]
mov dword [ebp + 0x14], eax
xor eax, eax
mov dword [ebp + 0x18], eax
mov eax, 0x38
mov word [ebp + 0x22], ax
movzx eax, word [esp + 0x74]
mov word [ebp + 0x24], ax
movzx eax, word [esp + 0x70]
mov word [ebp + 0x26], ax
xor eax, eax
mov dword [ebp + 0x28], eax
mov eax, dword [esp + 0x11d8]
sub eax, 0x49bdf0
mov dword [ebp + 0x34], 0
neg eax
sbb eax, eax
and eax, dword [esp + 0x11d8]
mov dword [ebp + 0x30], eax
xor eax, eax
mov dword [ebp + 0x2c], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x84], eax
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x88], 0
movzx ecx, word [ebp + 0x22]
add ecx, ebp
mov dword [esp + 0x6c], ecx
movzx eax, word [ebp + 0x24]
movzx ebx, word [ebp + 0x26]
imul ebx, eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0xc0], 0
add ebx, ecx
mov dword [esp + 0xa8], 0
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0x64], 0
test eax, eax
jle 0x41c7ef
mov esi, dword [esp + 0x68]
mov edi, eax
mov dword [esp + 0x70], 0
add esi, 4
push dword [esi + 4]
lea eax, [esp + 0x44]
push dword [esi]
push dword [esi - 4]
push eax
call fcn.00413ba0
dec edi
lea esi, [esi + 0xc]
add esp, 0x10
test edi, edi
jg 0x41c7b3
cmp dword [esp + 0x78], 0x14
mov edi, dword [esp + 0x11c8]
mov esi, dword [esp + 0x20]
jle 0x41c7ef
push dword [esp + 0x68]
call dword [0x21930f8]
add esp, 4
mov eax, dword [esp + 0x34]
push 0
mov dword [esp + 0x30], eax
lea eax, [esp + 0x44]
push eax
push 0
lea eax, [esp + 0x44]
mov byte [ebx], 0x83
push eax
lea eax, [esp + 0x40]
mov dword [esp + 0x34], ebx
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x40]
push eax
push 0
push 0
push 0
push 0
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x58]
push eax
push dword [ebp + 8]
call fcn.0041a2c0
movzx eax, word [esp + 0xbc]
add esp, 0x3c
mov word [ebp + 0x1e], ax
movzx eax, word [esp + 0x8c]
mov word [ebp + 0x20], ax
movzx eax, word [esp + 0x88]
mov word [ebp + 0x1c], ax
mov eax, dword [esp + 0xa4]
or eax, 1
mov dword [ebp + 0xc], eax
cmp dword [esp + 0xac], 0
je 0x41c887
xor eax, eax
mov dword [esp + 0x20], eax
or eax, 0xffffffff
mov dword [esp + 0x38], eax
jmp 0x41c897
mov eax, dword [esp + 0x38]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x20], eax
cmp dword [esp + 0x14], 0
jne 0x41c8af
mov eax, dword [esp + 0x2c]
cmp byte [eax], 0
je 0x41c8af
mov dword [esp + 0x14], 0x16
mov eax, dword [esp + 0x24]
mov byte [eax], 0
inc eax
mov dword [esp + 0x24], eax
sub eax, ebx
cmp eax, esi
jle 0x41c8cc
mov ecx, 0x17
mov dword [esp + 0x14], ecx
jmp 0x41c8d0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x60]
mov esi, dword [esp + 0x50]
cmp eax, esi
jbe 0x41c98e
xor edx, edx
mov dword [esp + 0x30], 0xffffffff
test ecx, ecx
jne 0x41c98e
cmp eax, esi
jbe 0x41c98e
sub eax, 2
mov dword [esp + 0x60], eax
movzx ecx, byte [eax]
movzx eax, byte [eax + 1]
shl ecx, 8
or ecx, eax
je 0x41c985
cmp byte [ecx + ebx - 1], 0x75
jne 0x41c985
movzx esi, byte [ecx + ebx]
lea eax, [ecx + ebx]
inc ecx
mov dword [esp + 0x34], eax
add ecx, ebx
shl esi, 8
mov dword [esp + 0x1c], ecx
movzx eax, byte [ecx]
or esi, eax
cmp esi, dword [esp + 0x30]
je 0x41c94a
push esi
push dword [esp + 0x14]
push ebx
call fcn.004139f0
add esp, 0xc
mov dword [esp + 0x30], esi
mov edx, eax
test edx, edx
je 0x41c97a
mov eax, dword [esp + 0x34]
mov ecx, edx
sub ecx, ebx
sar ecx, 8
mov byte [eax], cl
mov al, dl
mov ecx, dword [esp + 0x1c]
sub al, bl
mov byte [ecx], al
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x50]
test ecx, ecx
jne 0x41c98e
mov eax, dword [esp + 0x60]
jmp 0x41c8f2
mov esi, dword [esp + 0x50]
mov ecx, 0x35
jmp 0x41c98a
mov ecx, 0xa
mov dword [esp + 0x14], ecx
cmp dword [esp + 0x7c], 0x1000
jle 0x41c9a6
push esi
call dword [0x21930f8]
mov ecx, dword [esp + 0x18]
add esp, 4
mov dword [esp + 0x50], 0
test ecx, ecx
jne 0x41c9c4
mov ax, word [ebp + 0x20]
cmp ax, word [ebp + 0x1e]
jbe 0x41ca0e
mov dword [esp + 0x14], 0xf
push ebp
call dword [0x21930f8]
mov esi, dword [esp + 0x18]
add esp, 4
mov ecx, dword [esp + 0x11d4]
mov edx, esi
mov eax, dword [esp + 0x2c]
sub eax, dword [esp + 0x11c4]
mov dword [ecx], eax
mov ecx, str.no_error
test esi, esi
jle 0x41cc40
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41c9f5
cmp byte [ecx], al
je 0x41cc3b
dec edx
test edx, edx
jg 0x41c9f5
jmp 0x41cc40
mov esi, dword [esp + 0x10]
test edi, 0x20000
jne 0x41ca30
lea eax, [esp + 0x40]
push eax
push esi
push ebx
call fcn.00414270
add esp, 0xc
cmp dword [esp + 0x14], 0
jne 0x41c9c4
cmp dword [esp + 0xb4], 0
je 0x41cae2
push 0xffffffffffffffff
push esi
push ebx
call fcn.004139f0
mov edi, eax
add esp, 0xc
test edi, edi
je 0x41cae2
movzx ecx, byte [edi + 1]
movzx eax, byte [edi + 2]
shl ecx, 8
or ecx, eax
jne 0x41cabd
movzx esi, byte [edi - 2]
movzx eax, byte [edi - 1]
shl esi, 8
or esi, eax
lea eax, [esp + 0x40]
push ecx
push eax
push 1
movzx ebx, byte [esi + edi - 3]
mov byte [esi + edi - 3], cl
mov eax, dword [ebp + 8]
shr eax, 0xb
and eax, 1
push eax
push edi
call fcn.0041aee0
mov ecx, eax
mov byte [esi + edi - 3], bl
add esp, 0x14
test ecx, ecx
js 0x41cb16
cmp ecx, dword [esp + 0x88]
jle 0x41caae
mov dword [esp + 0x88], ecx
mov esi, dword [esp + 0x10]
mov eax, ecx
sar eax, 8
mov byte [edi + 1], al
mov byte [edi + 2], cl
push 0xffffffffffffffff
lea eax, [edi + 3]
push esi
push eax
call fcn.004139f0
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x41ca54
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x41c9c4
mov ebx, dword [esp + 0x3c]
mov eax, dword [ebp + 8]
mov dword [esp + 0x34], eax
test al, 0x10
jne 0x41cbab
push 0
lea eax, [esp + 0x44]
push eax
push 0
push ebx
call fcn.0041bc10
add esp, 0x10
test eax, eax
je 0x41cb3f
mov eax, dword [esp + 0x34]
or eax, 0x10
mov dword [ebp + 8], eax
jmp 0x41cbab
cmp ecx, 0xfffffffe
jne 0x41cb28
mov dword [esp + 0x14], 0x24
jmp 0x41c9c4
mov esi, dword [esp + 0x10]
sub ecx, 0xfffffffc
neg ecx
sbb ecx, ecx
and ecx, 0xffffffd3
add ecx, 0x46
mov dword [esp + 0x14], ecx
jmp 0x41cad6
mov eax, dword [esp + 0x18]
test eax, eax
jns 0x41cb82
push 0
lea eax, [esp + 0x1c]
push eax
push ebx
call fcn.0041ad60
mov edx, eax
add esp, 0xc
mov eax, dword [esp + 0x18]
test eax, eax
jns 0x41cb86
push 0
push 0
lea eax, [esp + 0x48]
push eax
push 0
push ebx
call fcn.0041bdd0
add esp, 0x14
test eax, eax
je 0x41cbab
or dword [ebp + 0xc], 0x100
jmp 0x41cbab
mov edx, dword [esp + 0x28]
and edx, 0xff
mov word [ebp + 0x18], dx
test al, 1
je 0x41cba7
mov eax, dword [esp + 0x44]
mov ecx, edx
movzx eax, byte [ecx + eax]
cmp ax, dx
je 0x41cba7
or dword [ebp + 0xc], 0x20
or dword [ebp + 0xc], 0x10
mov eax, dword [esp + 0x38]
test eax, eax
js 0x41cbea
test byte [ebp + 8], 0x10
je 0x41cbbd
test al, 2
je 0x41cbea
mov edx, dword [esp + 0x20]
and edx, 0xff
mov word [ebp + 0x1a], dx
test al, 1
je 0x41cbe6
mov eax, dword [esp + 0x44]
movzx ecx, dx
movzx eax, byte [ecx + eax]
cmp ax, dx
je 0x41cbe6
or dword [ebp + 0xc], 0x80
or dword [ebp + 0xc], 0x40
mov edi, dword [esp + 0x24]
mov edi, edi
push 0
lea eax, [esp + 0x44]
push eax
push esi
push edi
push ebx
call fcn.0041a810
add esp, 0x14
test eax, eax
jne 0x41cc27
movzx ecx, byte [ebx + 1]
movzx eax, byte [ebx + 2]
shl ecx, 8
or ecx, eax
add ebx, ecx
cmp byte [ebx], 0x77
je 0x41cbf0
pop edi
mov eax, ebp
pop ebp
pop esi
pop ebx
add esp, 0x11b0
ret
or dword [ebp + 0xc], 0x8000
mov eax, ebp
pop edi
pop ebp
pop esi
pop ebx
add esp, 0x11b0
ret
mov ecx, str.Error_text_not_found__please_report_
mov eax, dword [esp + 0x11d0]
mov dword [eax], ecx
mov eax, dword [esp + 0x11cc]
test eax, eax
je 0x41cc56
mov dword [eax], esi
pop edi
pop ebp
pop esi
xor eax, eax
pop ebx
add esp, 0x11b0
ret