Function at 0x417420
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x498442
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push ebp
mov ebp, dword [esp + 0x28]
push esi
cmp ebp, 0x7d0
push edi
mov esi, ecx
jg 0x417781
je 0x41769c
lea eax, [ebp - 0x3e8]
cmp eax, 0xe
ja case.0x417790.2002
jmp dword [eax*4 + 0x4180dc]
mov eax, dword [esp + 0x34]
mov ecx, esi
push eax
call fcn.00417370
jmp 0x4180c6
mov eax, dword [esp + 0x34]
lea ecx, [eax + 4]
push ecx
push eax
mov ecx, esi
call fcn.0041a7e0
jmp case.0x417790.2002
lea eax, [esi + 0x104]
jmp 0x4180c6
mov edx, dword [esp + 0x34]
push 0
push edx
mov ecx, esi
call fcn.0041a180
jmp 0x4180c6
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
push eax
push ecx
call fcn.00429440
jmp 0x4180c6
mov eax, 5
jmp 0x4180c6
mov eax, dword [esp + 0x34]
dec eax
je 0x41755c
sub eax, 0x7d0
je 0x417517
dec eax
je 0x4174ed
mov edx, dword [esp + 0x38]
mov byte [edx], 0
jmp case.0x417790.2002
mov edi, dword [esi + 0xd4]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, dword [esp + 0x38]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp case.0x417790.2002
add esi, 0xd0
push 0x649230
lea ecx, [esp + 0x34]
push esi
push ecx
call fcn.004885e6
mov edi, dword [eax]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, dword [esp + 0x38]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x30]
call fcn.00488351
jmp case.0x417790.2002
add esi, 0xd0
push 0x649230
lea eax, [esp + 0x14]
push esi
push eax
call fcn.004885e6
mov edi, dword [eax]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, dword [esp + 0x38]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x10]
call fcn.00488351
jmp case.0x417790.2002
mov edi, dword [esp + 0x34]
xor esi, esi
cmp edi, esi
je case.0x417790.2002
push 0x3c
call fcn.00488092
add esp, 4
mov dword [esp + 0x34], eax
cmp eax, esi
mov dword [esp + 0x28], esi
je 0x4175ce
mov ecx, eax
call fcn.004899a1
mov esi, eax
push edi
mov ecx, esi
mov dword [esp + 0x2c], 0xffffffff
call fcn.00489e11
mov eax, esi
jmp 0x4180c6
mov ecx, dword [esp + 0x34]
test ecx, ecx
je case.0x417790.2002
mov eax, dword [ecx]
push 1
call dword [eax + 4]
jmp case.0x417790.2002
mov ecx, dword [esp + 0x34]
test ecx, ecx
je case.0x417790.2002
call fcn.00489e4a
jmp 0x4180c6
mov eax, dword [esp + 0x34]
test eax, eax
je case.0x417790.2002
mov eax, dword [eax + 0x1c]
jmp 0x4180c6
mov esi, dword [esp + 0x34]
test esi, esi
je case.0x417790.2002
push esi
call fcn.00489df3
test eax, eax
jne case.0x417790.2002
mov ecx, dword [esp + 0x38]
test ecx, ecx
je case.0x417790.2002
mov eax, dword [ecx + 0x1c]
test eax, eax
jne case.0x417790.2002
push esi
call fcn.00489e11
mov eax, 1
jmp 0x4180c6
mov eax, dword [esp + 0x34]
test eax, eax
je case.0x417790.2002
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov eax, dword [eax]
push ecx
push edx
push eax
mov ecx, esi
call fcn.004194d0
jmp case.0x417790.2002
mov ecx, dword [esp + 0x34]
push ecx
mov ecx, esi
call fcn.00419550
jmp case.0x417790.2002
mov eax, dword [esi + 0x1e4]
test eax, eax
jne case.0x417790.2002
mov ebx, dword [esp + 0x34]
lea edx, [esp + 0x34]
push 0
push edx
push ebx
lea ecx, [esi + 0x104]
call fcn.00415cc0
cmp eax, 1
jne case.0x417790.2002
mov edi, dword [esp + 0x38]
test edi, edi
je 0x417749
mov eax, dword [esp + 0x34]
push 0
lea ecx, [eax + 0x14]
call fcn.00415650
cmp edi, eax
je 0x417749
mov ecx, dword [esp + 0x34]
push 0
push 0
push edi
add ecx, 0x14
call fcn.00415680
test eax, eax
je case.0x417790.2002
lea edi, [eax + 0x18]
mov esi, edi
push esi
call fcn.004690f0
add esi, eax
push esi
call fcn.004690f0
lea esi, [eax + esi + 0x14]
add esp, 8
mov eax, dword [esi]
test eax, eax
je 0x41772a
push eax
call fcn.0077739e
jo 0x4176ec
push es
add byte [eax], al
add byte [eax], al
mov esi, edi
push esi
call fcn.004690f0
add esi, eax
push esi
call fcn.004690f0
add esp, 8
mov dword [eax + esi], 0
jmp case.0x417790.2002
mov eax, dword [esp + 0x34]
lea edx, [eax + 0x34]
lea ecx, [eax + 0x14]
push edx
call fcn.004155d0
mov eax, dword [esp + 0x34]
mov edx, dword [eax + 0x34]
lea ecx, [eax + 0x34]
call dword [edx + 8]
cmp dword [esi + 0x1ec], ebx
jne case.0x417790.2002
mov dword [esi + 0x1ec], 0
jmp case.0x417790.2002
lea eax, [ebp - 0x7d1]
cmp eax, 0x27
ja case.0x417790.2002
jmp dword [eax*4 + 0x418118]
mov eax, dword [esp + 0x34]
mov ecx, esi
push eax
call fcn.0041ca30
jmp 0x4180c6
mov eax, dword [esp + 0x34]
test eax, eax
je 0x417849
lea ecx, [esp + 0x34]
push 0
push ecx
push eax
lea ecx, [esi + 0x104]
call fcn.00415cc0
test eax, eax
je 0x417849
mov ebx, dword [esp + 0x38]
push 0
test ebx, ebx
push 0
jne 0x4177f7
mov edx, dword [esp + 0x3c]
lea ecx, [edx + 0x14]
call fcn.00415600
mov edi, eax
mov eax, dword [esp + 0x34]
push 0
lea ecx, [eax + 0x14]
call fcn.00415650
mov ebx, eax
jmp 0x417806
mov ecx, dword [esp + 0x3c]
push ebx
add ecx, 0x14
call fcn.00415680
mov edi, eax
test edi, edi
je 0x417849
push ebx
call fcn.00415e70
add esp, 4
cmp eax, 1
je 0x417849
add edi, 0x18
push edi
call fcn.004690f0
add edi, eax
push edi
call fcn.004690f0
add edi, eax
add esp, 8
mov edi, dword [edi]
test edi, edi
je 0x417849
mov edx, dword [edi + 0x1c]
push edx
call fcn.00776cb8
dec esi
test eax, eax
je 0x417849
mov eax, edi
jmp 0x4180c6
cmp ebp, 0x7d7
jne case.0x417790.2002
push 0
push 0x64ce48
mov ecx, esi
call fcn.0041a040
jmp case.0x417790.2002
mov eax, dword [esi + 0xd0]
jmp 0x4180c6
mov eax, dword [esi + 0xd4]
jmp 0x4180c6
mov ebx, dword [esp + 0x34]
test ebx, ebx
je 0x4179d4
mov ecx, dword [ebx]
lea eax, [esp + 0x34]
push 0
push eax
push ecx
lea ecx, [esi + 0x104]
call fcn.00415cc0
test eax, eax
je 0x4179d4
mov eax, dword [ebx + 4]
test eax, eax
je 0x4178b1
mov eax, dword [eax + 0x1c]
mov edx, dword [ebx + 8]
push eax
mov eax, dword [esp + 0x38]
push edx
push 0
push 0
push eax
call fcn.00418680
test eax, eax
je 0x4179d4
mov ecx, dword [esp + 0x34]
push 0
push 0
add ecx, 0x14
call fcn.00415600
mov edi, eax
add edi, 0x18
push edi
call fcn.004690f0
add edi, eax
push edi
call fcn.004690f0
mov edx, dword [edi + eax + 0x1c]
lea edi, [edi + eax + 0x1c]
mov ecx, dword [edi + edx*4 + 4]
lea eax, [edi + edx*4 + 4]
lea edi, [eax + ecx + 4]
push edi
call fcn.004690f0
mov cl, byte [eax + edi + 4]
add esp, 0xc
test cl, 1
je case.0x417790.2002
mov edx, dword [ebx]
push 0
push edx
mov ecx, esi
call fcn.004181c0
jmp case.0x417790.2002
mov ecx, esi
call fcn.00419730
inc dword [esi + 0x1e0]
jmp case.0x417790.2002
mov ecx, esi
call fcn.00419730
mov eax, dword [esi + 0x1e0]
test eax, eax
jle case.0x417790.2002
dec eax
mov dword [esi + 0x1e0], eax
jmp case.0x417790.2002
mov eax, dword [esp + 0x34]
mov ecx, esi
push eax
call fcn.00421ee0
jmp 0x4180c6
mov ecx, dword [esp + 0x34]
push ecx
mov ecx, esi
call fcn.00421f90
jmp 0x4180c6
mov eax, dword [esi + 0x248]
test eax, eax
je 0x4179d4
mov ecx, dword [esi + 0x240]
test ecx, ecx
je 0x4179d4
mov edx, dword [esp + 0x34]
shr eax, 2
push edx
push eax
push ecx
call fcn.0040db80
add esp, 0xc
cmp eax, 0xffffffff
je 0x4179d4
mov ecx, dword [esi + 0x25c]
test ecx, ecx
jne 0x4179c2
xor esi, esi
xor ecx, ecx
mov cl, byte [esi + eax]
mov eax, ecx
jmp 0x4180c6
mov esi, dword [esi + 0x254]
xor ecx, ecx
mov cl, byte [esi + eax]
mov eax, ecx
jmp 0x4180c6
or eax, 0xffffffff
jmp 0x4180c6
mov eax, dword [esi + 0x248]
mov ebx, dword [esp + 0x34]
lea edi, [esi + 0x238]
test eax, eax
je 0x417a0e
mov ecx, dword [edi + 8]
test ecx, ecx
je 0x417a0e
shr eax, 2
push ebx
push eax
push ecx
call fcn.0040db80
add esp, 0xc
cmp eax, 0xffffffff
jne case.0x417790.2002
push ebx
mov ecx, edi
call fcn.0040d4e0
mov edx, dword [esp + 0x38]
lea ecx, [esi + 0x24c]
push edx
call fcn.0040d4b0
jmp case.0x417790.2002
mov eax, dword [esi + 0x248]
lea ebx, [esi + 0x238]
test eax, eax
je case.0x417790.2002
mov ecx, dword [ebx + 8]
test ecx, ecx
je case.0x417790.2002
mov edx, dword [esp + 0x34]
shr eax, 2
push edx
push eax
push ecx
call fcn.0040db80
mov edi, eax
add esp, 0xc
cmp edi, 0xffffffff
je case.0x417790.2002
lea eax, [edi*4]
push 4
push eax
mov ecx, ebx
call fcn.0040da90
push 1
push edi
lea ecx, [esi + 0x24c]
call fcn.0040da90
mov eax, 1
jmp 0x4180c6
mov ecx, esi
call fcn.004183c0
jmp case.0x417790.2002
mov eax, dword [esp + 0x34]
test eax, eax
je case.0x417790.2002
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov eax, dword [eax]
push ecx
push edx
push eax
mov ecx, esi
call fcn.004184c0
cmp eax, 1
jne case.0x417790.2002
jmp 0x4180c6
push 0
mov ecx, esi
call fcn.0041cae0
jmp case.0x417790.2002
mov ecx, dword [esp + 0x34]
test ecx, ecx
je case.0x417790.2002
mov eax, dword [esi + 0x1f0]
test eax, eax
je case.0x417790.2002
mov dword [ecx], eax
mov edx, dword [esi + 0x1f4]
mov dword [ecx + 4], edx
mov eax, 1
jmp 0x4180c6
mov ecx, dword [esp + 0x34]
lea eax, [esp + 0x34]
push 0
push eax
push ecx
lea ecx, [esi + 0x104]
call fcn.00415cc0
cmp eax, 1
jne case.0x417790.2002
mov eax, dword [esp + 0x38]
push 0
test eax, eax
push 0
jne 0x417b3f
mov edx, dword [esp + 0x3c]
lea ecx, [edx + 0x14]
call fcn.00415600
jmp 0x417b4c
push eax
mov eax, dword [esp + 0x40]
lea ecx, [eax + 0x14]
call fcn.00415680
test eax, eax
je case.0x417790.2002
mov eax, dword [eax]
jmp 0x4180c6
mov ecx, esi
call fcn.00419730
jmp case.0x417790.2002
mov eax, dword [esi + 0x270]
mov edi, dword [esp + 0x34]
add esi, 0x260
test eax, eax
je 0x417b99
mov ecx, dword [esi + 8]
test ecx, ecx
je 0x417b99
shr eax, 2
push edi
push eax
push ecx
call fcn.0040db80
add esp, 0xc
cmp eax, 0xffffffff
jne case.0x417790.2002
push edi
mov ecx, esi
call fcn.0040d4e0
jmp case.0x417790.2002
pop ecx
invalid
mov edi, dword [esp + 0x34]
xor ebx, ebx
cmp edi, ebx
je case.0x417790.2002
mov eax, dword [esi + 0x270]
add esi, 0x260
cmp eax, ebx
je case.0x417790.2002
mov ecx, dword [esi + 8]
cmp ecx, ebx
je case.0x417790.2002
shr eax, 2
push edi
push eax
push ecx
call fcn.0040db80
add esp, 0xc
cmp eax, 0xffffffff
je case.0x417790.2002
lea ecx, [eax*4]
push 4
push ecx
mov ecx, esi
call fcn.0040da90
mov eax, dword [edi + 0xc]
mov dword [edi], ebx
cmp eax, ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov dword [edi + 0x14], ebx
je 0x417c17
push eax
call fcn.0077af7d
jl 0x417b9e
pop edi
or al, 0x8b
inc edi
adc byte [ebx], bh
ret
mov eax, dword [edi + 0x10]
cmp eax, ebx
je 0x417c2a
push eax
call fcn.004880bb
add esp, 4
mov dword [edi + 0x10], ebx
push edi
call fcn.004880bb
add esp, 4
jmp case.0x417790.2002
mov eax, dword [esi + 0x270]
test eax, eax
je case.0x417790.2002
mov esi, dword [esi + 0x268]
test esi, esi
je case.0x417790.2002
mov edx, dword [esp + 0x34]
shr eax, 2
push edx
push eax
push esi
call fcn.0040db80
add esp, 0xc
cmp eax, 0xffffffff
je case.0x417790.2002
mov eax, 1
jmp 0x4180c6
mov eax, dword [esp + 0x34]
push 0
push eax
mov ecx, esi
call fcn.0041a040
jmp case.0x417790.2002
mov ebx, dword [esp + 0x38]
test ebx, ebx
je case.0x417790.2002
mov eax, dword [esp + 0x34]
and eax, 0xdfffffff
cmp eax, 0x80000004
je 0x417caf
cmp eax, 0x80000005
jne 0x417cdd
mov ecx, dword [ebx]
lea esi, [ebx + 4]
test ecx, ecx
mov eax, 1
jle 0x417cc6
imul eax, dword [esi]
add esi, 4
dec ecx
jne 0x417cbd
test eax, eax
jle 0x417cdd
mov edi, eax
mov eax, dword [esi]
add esi, 4
push eax
call fcn.004223e0
add esp, 4
dec edi
jne 0x417ccc
push ebx
call fcn.004223e0
add esp, 4
jmp case.0x417790.2002
mov eax, dword [esp + 0x38]
test eax, eax
jne 0x417d05
mov ecx, dword [esp + 0x34]
push ecx
call fcn.004222b0
add esp, 4
jmp 0x4180c6
mov edx, dword [esp + 0x34]
push edx
call fcn.00422290
add esp, 4
jmp 0x4180c6
mov eax, dword [esp + 0x34]
push eax
call fcn.004223e0
add esp, 4
jmp case.0x417790.2002
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x34]
push ecx
push edx
call fcn.00422320
add esp, 8
jmp 0x4180c6
mov eax, dword [esp + 0x34]
push eax
call fcn.00422300
add esp, 4
jmp case.0x417790.2002
mov ecx, dword [esp + 0x34]
push 0
push ecx
mov ecx, esi
call fcn.0041a180
test eax, eax
je case.0x417790.2002
mov eax, dword [eax + 0x14]
test al, 4
je 0x417d79
mov eax, 2
jmp 0x4180c6
test al, 0x40
je case.0x417790.2002
mov eax, 1
jmp 0x4180c6
mov eax, dword [esi + 0xc4]
jmp 0x4180c6
mov eax, dword [esi + 0x11c]
shr eax, 3
jmp 0x4180c6
mov edx, dword [esp + 0x34]
lea ecx, [esi + 0x104]
push edx
call fcn.00416950
mov esi, eax
test esi, esi
je case.0x417790.2002
mov eax, dword [esi + 0x1c]
push eax
call fcn.00776cb8
push ebp
test eax, eax
je case.0x417790.2002
mov eax, dword [esi + 0x1c]
jmp 0x4180c6
mov ecx, dword [esp + 0x34]
push ecx
call fcn.00427230
add esp, 4
jmp 0x4180c6
mov edx, dword [esp + 0x34]
push edx
call fcn.00436570
add esp, 4
jmp case.0x417790.2002
mov edi, dword [esp + 0x34]
cmp edi, 0x10030
jne 0x417e38
mov edi, dword [esp + 0x38]
mov eax, dword [0x6374b0]
mov ecx, dword [0x6374b4]
mov edx, dword [0x6374b8]
mov esi, dword [0x6374bc]
mov dword [edi], eax
mov eax, 1
mov dword [edi + 4], ecx
mov dword [edi + 8], edx
mov dword [edi + 0xc], esi
jmp 0x4180c6
mov ebx, edi
shr ebx, 0x10
test bx, bx
je case.0x417790.2002
push edi
call fcn.00422560
add esp, 4
cmp eax, 3
jne case.0x417790.2002
mov eax, dword [esi + 0x130]
and ebx, 0xffff
dec ebx
shr eax, 2
cmp ebx, eax
jge case.0x417790.2002
mov ecx, dword [esi + 0x128]
and edi, 0xffff
dec edi
mov eax, dword [ecx + ebx*4]
test eax, eax
je case.0x417790.2002
cmp edi, dword [eax + 0x54]
jge case.0x417790.2002
mov edx, dword [esp + 0x38]
push edx
push edi
push 8
call dword [eax + 0x78]
jmp 0x4180c6
mov ecx, dword [esp + 0x34]
lea eax, [esp + 0x34]
push 0
push eax
push ecx
lea ecx, [esi + 0x104]
call fcn.00415cc0
test eax, eax
je case.0x417790.2002
mov edx, dword [esp + 0x34]
push 0
push 0
lea ecx, [edx + 0x14]
call fcn.00415600
mov edi, eax
add edi, 0x18
push edi
call fcn.004690f0
add edi, eax
push edi
call fcn.004690f0
lea edi, [edi + eax + 0x1c]
mov eax, dword [edi]
mov ecx, dword [edi + eax*4 + 4]
lea eax, [edi + eax*4 + 4]
lea edi, [ecx + eax + 4]
push edi
call fcn.004690f0
mov ecx, dword [eax + edi + 4]
lea eax, [eax + edi + 4]
add esp, 0xc
or ecx, 8
mov dword [eax], ecx
mov edx, dword [esp + 0x34]
push edx
jmp 0x4180bd
mov ebp, dword [esp + 0x34]
lea eax, [esp + 0x38]
push 0
push eax
mov ecx, dword [ebp]
push ecx
lea ecx, [esi + 0x104]
call fcn.00415cc0
test eax, eax
je case.0x417790.2002
mov eax, dword [esp + 0x38]
mov ebx, dword [ebp + 4]
lea edx, [esp + 0x14]
sub ebx, 0x4e20
push edx
lea ecx, [eax + 0x14]
call fcn.00416290
test ebx, ebx
jl case.0x417790.2002
cmp ebx, eax
jge case.0x417790.2002
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0x38]
add ebx, esi
push 0
push ebx
add ecx, 0x14
call fcn.00415600
mov esi, eax
add esi, 0x18
push esi
call fcn.004690f0
add esi, eax
push esi
call fcn.004690f0
mov edi, dword [esi + eax]
add esi, eax
add esi, 4
add esp, 8
lea ecx, [esp + 0x34]
mov edx, dword [esi]
add esi, 4
mov dword [ebp + 0x10c], edx
mov eax, dword [esi]
add esi, 4
not eax
and eax, 1
push esi
mov dword [ebp + 0x110], eax
call fcn.004883bf
push edi
mov dword [esp + 0x2c], 1
call fcn.004266a0
mov esi, eax
add esp, 4
test esi, esi
je 0x417fe8
push 0x64ce44
lea ecx, [esp + 0x38]
call fcn.0048872d
push esi
lea ecx, [esp + 0x38]
call fcn.0048872d
lea ecx, [esp + 0x18]
push 0xfa
push ecx
lea ecx, [esp + 0x3c]
call fcn.0048531d
mov eax, dword [eax]
or ecx, 0xffffffff
mov edi, eax
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp + 8]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
call fcn.00488351
mov ecx, dword [esp + 0x38]
push ebx
add ecx, 0x14
call fcn.00415650
lea ecx, [esp + 0x34]
mov dword [ebp + 0x108], eax
mov dword [esp + 0x28], 0xffffffff
call fcn.00488351
mov eax, 1
jmp 0x4180c6
mov eax, dword [esp + 0x34]
lea edx, [esp + 0x34]
push 0
push edx
push eax
lea ecx, [esi + 0x104]
call fcn.00415cc0
test eax, eax
je case.0x417790.2002
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x34]
push 0
push 0
push ecx
lea ecx, [edx + 0x14]
call fcn.00415680
test eax, eax
je case.0x417790.2002
push 0x7fffffff
push 1
push eax
mov eax, dword [esp + 0x40]
lea ecx, [eax + 0x14]
call fcn.00415f40
jmp case.0x417790.2002
mov edx, dword [esp + 0x34]
lea ecx, [esp + 0x1c]
push 0
push ecx
push edx
lea ecx, [esi + 0x104]
call fcn.00415cc0
test eax, eax
je case.0x417790.2002
mov eax, dword [esp + 0x1c]
push eax
mov ecx, esi
call fcn.0041bc00
xor eax, eax
mov ecx, dword [esp + 0x20]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1c
ret 0xc