Function at 0x4166f0
Capabilities:
Encode data using xor
Hash data with crc32
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x80
push esi
push edi
mov edi, ecx
mov dword [esp + 0x48], edx
mov edx, dword [0x889ebc]
mov dword [esp + 0x18], edi
mov dword [esp + 0x30], edx
test byte [edi + 0xc], 0x42
jne 0x417378
cmp byte [edi + 0xc4], 0
jg 0x417378
cmp byte [edi + 0xc5], 0
jg 0x417378
cmp byte [edi + 0xab], 0
je 0x417378
movss xmm2, dword [edx + 0x3bb8]
xor eax, eax
movss xmm0, dword [edi + 0x4c]
movaps xmm1, xmm2
addss xmm0, dword [0x80208c]
mulss xmm2, dword [0x802040]
mov esi, 4
mov cl, byte [edx + 0x66]
mulss xmm1, dword [0x802094]
test cl, cl
mov byte [esp + 0x13], 0
addss xmm0, xmm2
cmovne eax, esi
mov dword [esp + 0x74], eax
maxss xmm1, xmm0
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x802070]
cvttss2si esi, xmm0
mov dword [esp + 0x70], esi
je 0x4167b8
movss xmm0, dword [0x8020d4]
movss dword [esp + 0x2c], xmm0
jmp 0x4167c1
xorps xmm2, xmm2
movss dword [esp + 0x2c], xmm2
cmp byte [edx + 0x67], 0
mov eax, dword [ebp + 0x14]
movups xmm0, xmmword [eax]
movups xmmword [esp + 0x78], xmm0
je 0x416823
test byte [edi + 0xc], 1
jne 0x416823
mov ecx, dword [edi]
mov eax, dword [edi + 0x2f8]
mov byte [esp + 0xb], 1
movss xmm1, dword [ecx + 0x3bbc]
mulss xmm1, dword [edi + 0x25c]
test eax, eax
je 0x416801
mulss xmm1, dword [eax + 0x25c]
movss xmm0, dword [ecx + 0x37c8]
addss xmm0, xmm0
addss xmm0, xmm1
movss xmm1, dword [esp + 0x7c]
subss xmm1, xmm0
movss dword [esp + 0x44], xmm1
jmp 0x416834
movss xmm0, dword [esp + 0x7c]
mov byte [esp + 0xb], 0
movss dword [esp + 0x44], xmm0
movss xmm1, dword [0x802150]
movaps xmm0, xmm1
movss dword [esp + 0x24], xmm1
movss dword [esp + 0x28], xmm1
movss dword [esp + 0x20], xmm0
movss dword [esp + 0x14], xmm1
mov dword [edi + 0x148], 1
call fcn.0041b260
xor edx, edx
mov dword [esp + 0x1c], edx
cmp dword [ebp + 0xc], edx
jle 0x416d04
nop word [eax + eax]
movss xmm0, dword [edi + 0x14]
lea eax, [edx + edx*2]
movss xmm1, dword [edi + 0x18]
movaps xmm3, xmm0
addss xmm3, dword [edi + 0x1c]
movaps xmm2, xmm1
mov dword [esp + 0x38], eax
addss xmm2, dword [edi + 0x20]
xorps xmm6, xmm6
cvtsi2ss xmm6, esi
subss xmm3, xmm0
subss xmm2, xmm1
mulss xmm3, dword [eax*8 + 0x7fbd70]
mulss xmm2, dword [eax*8 + 0x7fbd74]
addss xmm3, xmm0
movss xmm0, dword [eax*8 + 0x7fbd78]
movaps xmm5, xmm0
mulss xmm0, dword [esp + 0x2c]
addss xmm2, xmm1
mulss xmm5, xmm6
movss xmm1, dword [eax*8 + 0x7fbd7c]
movaps xmm4, xmm1
mulss xmm1, dword [esp + 0x2c]
mulss xmm4, xmm6
addss xmm5, xmm3
subss xmm3, xmm0
addss xmm4, xmm2
subss xmm2, xmm1
movss dword [esp + 0x68], xmm5
comiss xmm3, xmm5
movss dword [esp + 0x60], xmm3
movss dword [esp + 0x64], xmm2
movss dword [esp + 0x6c], xmm4
jbe 0x41692f
movss dword [esp + 0x60], xmm5
movss dword [esp + 0x68], xmm3
comiss xmm2, xmm4
jbe 0x416940
movss dword [esp + 0x64], xmm4
movss dword [esp + 0x6c], xmm2
mov ecx, dword [edi + 0xe4]
lea esi, [esp + 0x34]
mov eax, dword [edi + 0xec]
mov edi, 4
mov dword [esp + 0x34], edx
mov edx, dword [eax + ecx*4 - 4]
not edx
nop
movzx eax, byte [esi]
lea esi, [esi + 1]
movzx ecx, dl
xor ecx, eax
shr edx, 8
xor edx, dword [ecx*4 + 0x7fbdd0]
sub edi, 1
jne 0x416960
mov edi, dword [esp + 0x18]
not edx
mov esi, dword [esp + 0x70]
mov dword [esp + 0xc], edx
mov eax, dword [edi]
cmp dword [eax + 0x3e7c], edx
jne 0x4169ac
push ecx
push dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
mov edx, 4
call fcn.004241a0
mov edx, dword [esp + 0x14]
add esp, 8
push 8
push 0
lea ecx, [esp + 0x68]
call fcn.0041d500
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x11]
push 0x40800
push eax
lea eax, [esp + 0x1a]
push eax
lea ecx, [esp + 0x74]
call fcn.004395c0
mov cl, byte [esp + 0x1e]
add esp, 0x14
test cl, cl
jne 0x4169ec
mov al, byte [esp + 9]
test al, al
je 0x416d4b
mov edx, dword [esp + 0x1c]
mov eax, edx
mov ecx, dword [esp + 0x30]
not eax
and eax, 1
add eax, 5
mov dword [ecx + 0x4960], eax
mov al, byte [esp + 9]
test al, al
je 0x416cbf
cmp word [ecx + 0x370a], 2
jne 0x416a6c
test edx, edx
jne 0x416a6c
push dword [esp + 0x48]
mov edx, edi
lea ecx, [esp + 0x5c]
call fcn.00416090
add esp, 4
mov byte [esp + 0x13], 1
xor edx, edx
xor ecx, ecx
movss xmm0, dword [eax]
movss dword [esp + 0x20], xmm0
movss xmm0, dword [eax + 4]
movss dword [esp + 0x14], xmm0
call fcn.00412610
mov edx, dword [esp + 0x1c]
cmp byte [esp + 9], 0
je 0x416cd7
mov ecx, 0x20
jmp 0x416ce3
mov edx, dword [esp + 0x38]
xorps xmm1, xmm1
movss xmm3, dword [0x80208c]
movss xmm7, dword [edx*8 + 0x7fbd74]
ucomiss xmm7, xmm3
lahf
test ah, 0x44
jnp 0x416aaa
ucomiss xmm7, xmm1
lahf
test ah, 0x44
jp 0x416a9d
cmp byte [esp + 0xb], 0
jne 0x416aaa
movss xmm2, dword [0x802174]
movaps xmm6, xmm2
jmp 0x416ab8
movss xmm6, dword [esp + 0x44]
movss xmm2, dword [0x802174]
movss xmm0, dword [edx*8 + 0x7fbd70]
ucomiss xmm0, xmm3
lahf
test ah, 0x44
jp 0x416ad2
movss xmm5, dword [esp + 0x78]
jmp 0x416ad5
movaps xmm5, xmm2
ucomiss xmm7, xmm1
lahf
test ah, 0x44
jp 0x416af7
movss xmm2, dword [esp + 0x84]
movss dword [esp + 0xc], xmm2
movss xmm2, dword [0x802150]
jmp 0x416b05
movss xmm2, dword [0x802150]
movss dword [esp + 0xc], xmm2
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x416b1f
movss xmm0, dword [esp + 0x80]
movss dword [esp + 0x20], xmm0
jmp 0x416b25
movss dword [esp + 0x20], xmm2
movss xmm4, dword [edx*8 + 0x7fbd78]
xorps xmm3, xmm3
movss xmm2, dword [edx*8 + 0x7fbd7c]
movaps xmm0, xmm4
mulss xmm0, dword [esp + 0x2c]
movaps xmm1, xmm2
mulss xmm1, dword [esp + 0x2c]
cvtsi2ss xmm3, esi
xorps xmm3, xmmword [0x802330]
mulss xmm4, xmm3
mulss xmm2, xmm3
subss xmm4, xmm0
subss xmm2, xmm1
mulss xmm4, dword [edx*8 + 0x7fbd70]
mulss xmm2, xmm7
addss xmm4, xmm0
movss xmm0, dword [ecx + 0xdc0]
subss xmm0, dword [ecx + 0x3ea8]
addss xmm2, xmm1
addss xmm4, xmm0
movss xmm0, dword [ecx + 0xdc4]
subss xmm0, dword [ecx + 0x3eac]
addss xmm0, xmm2
comiss xmm6, xmm0
ja 0x416bb3
movss xmm6, dword [esp + 0xc]
minss xmm6, xmm0
comiss xmm5, xmm4
ja 0x416bc2
movss xmm5, dword [esp + 0x20]
minss xmm5, xmm4
movss xmm0, dword [edi + 0x14]
lea eax, [esp + 0x3c]
movss xmm1, dword [edi + 0x18]
lea ecx, [esp + 0x4c]
movss xmm4, dword [edx*8 + 0x7fbd70]
movaps xmm2, xmm0
addss xmm0, dword [edi + 0x1c]
subss xmm2, xmm5
movaps xmm3, xmm1
addss xmm1, dword [edi + 0x20]
subss xmm3, xmm6
mov edx, edi
push eax
mulss xmm2, xmm4
mulss xmm3, xmm7
addss xmm2, xmm5
subss xmm5, xmm0
addss xmm3, xmm6
subss xmm6, xmm1
movss dword [esp + 0x28], xmm2
mulss xmm5, xmm4
mulss xmm6, xmm7
addss xmm5, xmm0
movss dword [esp + 0x2c], xmm3
addss xmm6, xmm1
subss xmm5, xmm2
subss xmm6, xmm3
movss dword [esp + 0x40], xmm5
movss dword [esp + 0x44], xmm6
call fcn.00416090
mov ecx, dword [esp + 0x3c]
add esp, 4
xorps xmm2, xmm2
movss xmm0, dword [ecx*8 + 0x7fbd70]
ucomiss xmm0, xmm2
movss xmm0, dword [esp + 0x4c]
movss dword [esp + 0x20], xmm0
lahf
test ah, 0x44
jp 0x416c83
subss xmm0, dword [esp + 0x3c]
movss xmm1, dword [esp + 0x24]
subss xmm1, xmm0
movss dword [esp + 0x24], xmm1
movss xmm0, dword [ecx*8 + 0x7fbd74]
ucomiss xmm0, xmm2
movss xmm0, dword [esp + 0x50]
movss dword [esp + 0x14], xmm0
lahf
test ah, 0x44
jp 0x416cb7
subss xmm0, dword [esp + 0x40]
movss xmm1, dword [esp + 0x28]
subss xmm1, xmm0
movss dword [esp + 0x28], xmm1
mov edx, dword [esp + 0x1c]
mov al, byte [esp + 9]
mov cl, byte [esp + 0xa]
test edx, edx
je 0x416a57
test al, al
jne 0x416a62
test cl, cl
je 0x416cf6
xor ecx, ecx
cmp byte [esp + 0xa], cl
setne cl
add ecx, 0x1e
movss xmm1, dword [0x80208c]
call fcn.0040f970
mov ecx, dword [ebp + 0x10]
mov dword [ecx + edx*4], eax
inc edx
mov dword [esp + 0x1c], edx
cmp edx, dword [ebp + 0xc]
jl 0x416880
xor edi, edi
mov dword [esp + 0x34], edi
cmp dword [esp + 0x74], edi
jbe 0x41703d
lea eax, [edi*8]
sub eax, edi
shl eax, 2
mov dword [esp + 0x54], eax
test edi, edi
je 0x416d54
cmp edi, 1
je 0x416d54
mov dword [esp + 0x38], 3
lea eax, [esp + 0x40]
mov dword [esp + 0x2c], 0xdc4
mov dword [esp + 0x1c], 0x3eac
jmp 0x416d70
mov edx, dword [esp + 0x1c]
jmp 0x416cc3
mov dword [esp + 0x38], 4
lea eax, [esp + 0x3c]
mov dword [esp + 0x2c], 0xdc0
mov dword [esp + 0x1c], 0x3ea8
mov edx, dword [esp + 0x18]
movd xmm0, esi
push ecx
cvtdq2ps xmm3, xmm0
mov dword [esp], 0x40800000
lea ecx, [esp + 0x64]
push edi
mov dword [esp + 0x50], eax
call fcn.004165d0
mov ecx, dword [edx + 0xe4]
lea eax, [edi + 4]
mov dword [esp + 0x14], eax
lea esi, [esp + 0x14]
mov eax, dword [edx + 0xec]
add esp, 8
mov edi, 4
mov edx, dword [eax + ecx*4 - 4]
not edx
movzx eax, byte [esi]
lea esi, [esi + 1]
movzx ecx, dl
xor ecx, eax
shr edx, 8
xor edx, dword [ecx*4 + 0x7fbdd0]
sub edi, 1
jne 0x416db6
mov eax, dword [esp + 0x18]
not edx
mov esi, dword [esp + 0x70]
mov edi, dword [esp + 0x34]
mov dword [esp + 0xc], edx
mov eax, dword [eax]
cmp dword [eax + 0x3e7c], edx
jne 0x416e06
push ecx
mov ecx, dword [esp + 0x10]
lea eax, [edi + 4]
push eax
mov edx, 4
call fcn.004241a0
mov edx, dword [esp + 0x14]
add esp, 8
push 8
push 0
lea ecx, [esp + 0x68]
call fcn.0041d500
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x11]
push 0x40800
push eax
lea eax, [esp + 0x1a]
push eax
lea ecx, [esp + 0x74]
call fcn.004395c0
mov al, byte [esp + 0x1d]
add esp, 0x14
cmp byte [esp + 0xa], 0
mov ecx, dword [esp + 0x30]
je 0x416e52
movss xmm0, dword [ecx + 0x3e8c]
comiss xmm0, dword [0x802028]
ja 0x416e5a
test al, al
je 0x41702e
mov edx, dword [esp + 0x38]
mov dword [ecx + 0x4960], edx
test al, al
je 0x41702e
mov eax, dword [ebp + 8]
mov dword [eax], edi
cmp edi, 3
je 0x416e8f
cmp edi, 2
jne 0x416e82
cmp byte [esp + 0xb], 0
jne 0x416e8f
movss xmm0, dword [0x802174]
movaps xmm4, xmm0
jmp 0x416e9d
movss xmm4, dword [esp + 0x44]
movss xmm0, dword [0x802174]
cmp edi, 1
jne 0x4170c4
movss xmm3, dword [esp + 0x78]
movss xmm1, dword [0x802150]
movss xmm2, dword [0x802150]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x2c]
movss xmm0, dword [eax + 0x14]
movss dword [esp + 0x3c], xmm0
movss xmm0, dword [eax + 0x18]
movss dword [esp + 0x40], xmm0
movss xmm0, dword [edx + ecx]
mov edx, dword [esp + 0x1c]
subss xmm0, dword [edx + ecx]
mov ecx, dword [esp + 0x48]
addss xmm0, dword [0x8020d4]
movss dword [ecx], xmm0
movss xmm0, dword [esp + 0x40]
comiss xmm4, xmm0
ja 0x416f0a
movaps xmm4, xmm1
minss xmm4, xmm0
movss xmm0, dword [esp + 0x3c]
comiss xmm3, xmm0
ja 0x416f1c
movaps xmm3, xmm2
minss xmm3, xmm0
mov ecx, dword [esp + 0x54]
mov edx, eax
movss xmm0, dword [eax + 0x14]
movss xmm1, dword [eax + 0x18]
movaps xmm5, xmm0
addss xmm0, dword [eax + 0x1c]
movss xmm7, dword [ecx + 0x7fbbb4]
subss xmm5, xmm3
minss xmm7, dword [ecx + 0x7fbbbc]
movss xmm2, dword [ecx + 0x7fbbb0]
movaps xmm6, xmm1
minss xmm2, dword [ecx + 0x7fbbb8]
addss xmm1, dword [eax + 0x20]
subss xmm6, xmm4
lea ecx, [esp + 0x4c]
movss dword [esp + 0x34], xmm7
push ecx
mulss xmm5, xmm2
lea ecx, [esp + 0x5c]
mulss xmm6, xmm7
addss xmm5, xmm3
movss dword [esp + 0x58], xmm2
subss xmm3, xmm0
addss xmm6, xmm4
subss xmm4, xmm1
movss dword [esp + 0x28], xmm5
mulss xmm3, xmm2
mulss xmm4, xmm7
addss xmm3, xmm0
movss dword [esp + 0x2c], xmm6
addss xmm4, xmm1
subss xmm3, xmm5
subss xmm4, xmm6
movss dword [esp + 0x50], xmm3
movss dword [esp + 0x54], xmm4
call fcn.00416090
movss xmm0, dword [esp + 0x58]
add esp, 4
xorps xmm2, xmm2
ucomiss xmm0, xmm2
movss xmm0, dword [esp + 0x58]
movss dword [esp + 0x20], xmm0
lahf
test ah, 0x44
jp 0x416ffd
subss xmm0, dword [esp + 0x4c]
movss xmm1, dword [esp + 0x24]
subss xmm1, xmm0
movss dword [esp + 0x24], xmm1
movss xmm0, dword [esp + 0x34]
ucomiss xmm0, xmm2
movss xmm0, dword [esp + 0x5c]
movss dword [esp + 0x14], xmm0
lahf
test ah, 0x44
jp 0x41702e
subss xmm0, dword [esp + 0x50]
movss xmm1, dword [esp + 0x28]
subss xmm1, xmm0
movss dword [esp + 0x28], xmm1
inc edi
mov dword [esp + 0x34], edi
cmp edi, dword [esp + 0x74]
jl 0x416d14
mov edi, dword [0x889ebc]
mov edx, dword [esp + 0x18]
mov eax, dword [edi + 0x3e48]
dec dword [eax + 0xe4]
mov eax, dword [esp + 0x30]
mov dword [edx + 0x148], 0
mov ecx, dword [eax + 0x4934]
test ecx, ecx
je 0x4172b3
cmp dword [ecx + 0x300], edx
jne 0x4172b3
mov ecx, dword [eax + 0x47f8]
cmp ecx, 2
jne 0x4170fb
cmp byte [eax + 0xddd], 0
je 0x4172b3
mov edx, 0x202
mov ecx, edi
call fcn.0041b2f0
mov edx, 0x201
movss xmm2, dword [eax + 0xc]
call fcn.0041b2f0
mov edx, 0x204
subss xmm2, dword [eax + 0xc]
call fcn.0041b2f0
mov edx, 0x203
jmp 0x417133
movaps xmm3, xmm0
cmp edi, 2
jne 0x4170da
movss xmm1, dword [esp + 0x84]
jmp 0x416eb4
movss xmm1, dword [0x802150]
movaps xmm3, xmm0
test edi, edi
jne 0x416eb4
movss xmm2, dword [esp + 0x80]
jmp 0x416ebc
cmp ecx, 3
jne 0x4172b3
mov edx, 0x270
mov ecx, edi
call fcn.0041b2f0
mov edx, 0x26f
movss xmm2, dword [eax + 0xc]
call fcn.0041b2f0
mov edx, 0x272
subss xmm2, dword [eax + 0xc]
call fcn.0041b2f0
mov edx, 0x271
movss xmm3, dword [eax + 0xc]
call fcn.0041b2f0
xorps xmm7, xmm7
ucomiss xmm2, xmm7
subss xmm3, dword [eax + 0xc]
lahf
test ah, 0x44
jp 0x41715b
ucomiss xmm3, xmm7
lahf
test ah, 0x44
jnp 0x4172be
mov edi, dword [esp + 0x30]
mov ecx, 0x20
mov edx, dword [esp + 0x18]
movss xmm1, dword [edi + 0x58]
minss xmm1, dword [edi + 0x5c]
movss xmm0, dword [edi + 0x18]
mulss xmm0, dword [0x802134]
mulss xmm1, xmm0
movss xmm0, dword [esp + 0x78]
mulss xmm2, xmm1
mulss xmm3, xmm1
addss xmm2, dword [edi + 0x4954]
movss xmm1, dword [0x80208c]
addss xmm3, dword [edi + 0x4958]
movss dword [edi + 0x4954], xmm2
movss dword [edi + 0x4958], xmm3
subss xmm0, dword [edx + 0x14]
subss xmm0, dword [edx + 0x1c]
maxss xmm2, xmm0
movss xmm0, dword [esp + 0x44]
subss xmm0, dword [edx + 0x18]
subss xmm0, dword [edx + 0x20]
movss dword [edi + 0x4954], xmm2
mov byte [edi + 0x4948], 0
mov byte [edi + 0x4803], 1
maxss xmm3, xmm0
movss dword [edi + 0x4958], xmm3
call fcn.0040f970
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
cvttss2si esi, dword [edi + 0x4954]
cvttss2si edi, dword [edi + 0x4958]
movd xmm0, esi
cvtdq2ps xmm0, xmm0
movd xmm1, edi
ucomiss xmm0, xmm7
cvtdq2ps xmm1, xmm1
lahf
test ah, 0x44
jp 0x417237
ucomiss xmm1, xmm7
lahf
test ah, 0x44
jnp 0x4172ca
addss xmm0, dword [edx + 0x24]
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x50]
movss dword [esp + 0x5c], xmm0
movaps xmm0, xmm1
addss xmm0, dword [edx + 0x28]
movss dword [esp + 0x60], xmm0
call fcn.00416090
mov edx, dword [esp + 0x1c]
add esp, 4
movd xmm1, esi
xorps xmm7, xmm7
cvtdq2ps xmm1, xmm1
movss xmm0, dword [eax]
movss xmm2, dword [eax + 4]
mov eax, dword [esp + 0x30]
movss dword [esp + 0x20], xmm0
movss xmm0, dword [eax + 0x4954]
subss xmm0, xmm1
movd xmm1, edi
cvtdq2ps xmm1, xmm1
movss dword [eax + 0x4954], xmm0
movss xmm0, dword [eax + 0x4958]
subss xmm0, xmm1
movss dword [eax + 0x4958], xmm0
jmp 0x4172d0
movss xmm2, dword [esp + 0x14]
xorps xmm7, xmm7
jmp 0x4172d6
movss xmm2, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
jmp 0x4172d6
movss xmm2, dword [esp + 0x14]
mov edi, dword [0x889ebc]
movss xmm0, dword [esp + 0x20]
movss xmm1, dword [0x802150]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x417312
test dword [edx + 0xc], 0x100
movss dword [edx + 0x24], xmm0
movss dword [edx + 0x28], xmm2
jne 0x417312
comiss xmm7, dword [edi + 0x5a44]
jb 0x417312
mov eax, dword [edi + 0x1c]
mov dword [edi + 0x5a44], eax
movss xmm0, dword [esp + 0x24]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x41735e
test dword [edx + 0xc], 0x100
cvttss2si eax, xmm0
movd xmm1, eax
cvttss2si eax, dword [esp + 0x28]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edx + 0x14], xmm1
movss dword [edx + 0x18], xmm0
jne 0x41735e
comiss xmm7, dword [edi + 0x5a44]
jb 0x41735e
mov ecx, dword [edi + 0x1c]
mov dword [edi + 0x5a44], ecx
mov eax, dword [esp + 0x18]
mov ecx, dword [edx + 0x24]
mov edx, dword [edx + 0x28]
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x20], edx
mov al, byte [esp + 0x13]
pop edi
pop esi
mov esp, ebp
pop ebp
ret
pop edi
xor al, al
pop esi
mov esp, ebp
pop ebp
ret