Function at 0xf4ac55
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x3c8
push esi
xor eax, eax
mov byte [esp + 0x2f], dl
push edi
mov esi, ecx
mov dword [esp + 0x2c], eax
push eax
lea ecx, [esp + 0x6c]
mov dword [esp + 0x90], esi
mov byte [esp + 0x64], al
call fcn.00ed372a
sub esp, 0x10
mov ecx, esp
push ecx
push ecx
mov eax, esp
and dword [eax], 0
and dword [eax + 4], 0
call fcn.00ed1709
pop ecx
pop ecx
mov eax, 0x3f708a4e
mov dword [esp + 0x50], 0x84ce1e49
mov ecx, 0x2fcf7b8c
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x54], 0x7bb2a81a
movaps xmm1, xmmword [esp + 0x50]
mov dword [esp + 0x68], eax
lea eax, [esp + 0x50]
mov dword [esp + 0x6c], ecx
lea ecx, [esp + 0x70]
mov dword [esp + 0x60], 0xf0bd7721
mov dword [esp + 0x64], 0x7bcbda75
pxor xmm1, xmmword [esp + 0x60]
push eax
movaps xmmword [esp + 0x54], xmm1
call fcn.00ed4fd9
mov ecx, eax
call fcn.00ed15bd
push 0x104
lea eax, [esp + 0x2cc]
push 0
push eax
call fcn.00efe880
add esp, 0xc
lea eax, [esp + 0x2c8]
xor ecx, ecx
push eax
movzx eax, byte [esp + 0x37]
xor eax, 1
push ecx
push ecx
lea eax, [eax*2 + 0x1a]
push eax
push ecx
call dword [0xaf62bc]
lea eax, [ebp + 0xc]
push eax
lea edx, [esp + 0x2cc]
lea ecx, [esp + 0x254]
call fcn.00ed4f10
xor eax, eax
sub esp, 0x14
mov ecx, esp
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [ecx], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
lea eax, [esp + 0x268]
push eax
call fcn.00ed3fa6
push 0
mov dl, 1
lea ecx, [esp + 0xac]
call fcn.00f53355
mov ecx, dword [esp + 0xb0]
add esp, 0x1c
mov eax, dword [esp + 0x90]
mov dword [esp + 0x14], eax
sub ecx, eax
jne 0xf4ae3c
mov al, byte [esp + 0x60]
xorps xmm0, xmm0
mov ecx, dword [esp + 0x6c]
mov byte [esi], al
mov eax, dword [esp + 0x68]
mov dword [esi + 0xc], ecx
lea ecx, [esp + 0x90]
mov dword [esi + 8], eax
mov byte [esp + 0x60], 0
movlpd qword [esp + 0x68], xmm0
call fcn.00ed3a76
mov esi, dword [esp + 0x1c]
test esi, esi
je 0xf4b9a5
mov eax, dword [esp + 0x20]
mov dword [esp + 0x10], eax
push 0x18
pop edi
cmp esi, eax
je 0xf4adfc
mov ecx, esi
call fcn.00ecd7ce
add esi, edi
cmp esi, dword [esp + 0x10]
jne 0xf4ade9
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
sub eax, esi
mov dword [esp + 0x2c], esi
cdq
idiv edi
imul eax, eax, 0x18
mov dword [esp + 0x28], eax
cmp eax, 0x1000
jb 0xf4ae30
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x30]
push eax
call fcn.00ecd6c3
mov eax, dword [esp + 0x30]
mov esi, dword [esp + 0x34]
pop ecx
pop ecx
push eax
push esi
call fcn.00ee4009
jmp 0xf4b9a3
mov eax, ecx
push 0x18
cdq
pop edi
idiv edi
mov dword [esp + 0x10], eax
test eax, eax
je 0xf4afc7
mov dword [esp + 0x50], 0xf0bd7721
mov dword [esp + 0x54], 0x7bcbda75
mov dword [esp + 0x58], 0x3f708a4e
mov dword [esp + 0x5c], 0x2fcf7b8c
mov dword [esp + 0x70], 0xf0bd777d
lea eax, [esp + 0x70]
mov dword [esp + 0x74], 0x7bcbda75
lea edx, [esp + 0x250]
mov dword [esp + 0x78], 0x3f708a4e
lea ecx, [esp + 0x268]
mov dword [esp + 0x7c], 0x2fcf7b8c
movaps xmm0, xmmword [esp + 0x70]
pxor xmm0, xmmword [esp + 0x50]
push eax
movaps xmmword [esp + 0x74], xmm0
call fcn.00ed4ea7
sub esp, 0x14
mov ecx, eax
mov esi, esp
push dword [esp + 0x2c]
call fcn.00ed290c
push eax
mov ecx, esi
call fcn.00ecd752
push 0
xor dl, dl
lea ecx, [esp + 0x5c]
call fcn.00f53355
add esp, 0x1c
lea ecx, [esp + 0x268]
call fcn.00ecd7ce
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x38], ecx
sub eax, ecx
je 0xf4afaf
cdq
idiv edi
mov dword [esp + 0x18], eax
test eax, eax
je 0xf4afaf
mov esi, dword [esp + 0x20]
push 0
lea eax, [ebp + 0x24]
push eax
call fcn.00ed281b
cmp eax, 0xffffffff
je 0xf4af9a
mov ecx, dword [esp + 0x1c]
mov eax, esi
sub eax, ecx
and dword [esp + 0x28], 0
cdq
idiv edi
mov dword [esp + 0x34], ecx
mov dword [esp + 0x3c], eax
test eax, eax
je 0xf4af65
mov edx, dword [esp + 0x14]
call fcn.00ed4fa8
test al, al
jne 0xf4af9a
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x34]
inc eax
add ecx, edi
mov dword [esp + 0x28], eax
mov dword [esp + 0x34], ecx
cmp eax, dword [esp + 0x3c]
jb 0xf4af3f
push dword [esp + 0x14]
cmp esi, dword [esp + 0x28]
je 0xf4af8c
xor eax, eax
mov ecx, esi
mov dword [esi], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], eax
call fcn.00ed3fa6
mov esi, dword [esp + 0x20]
add esi, edi
mov dword [esp + 0x20], esi
jmp 0xf4af9a
push esi
lea ecx, [esp + 0x24]
call fcn.00ed630b
mov esi, dword [esp + 0x20]
mov ecx, dword [esp + 0x38]
add ecx, edi
sub dword [esp + 0x18], 1
mov dword [esp + 0x38], ecx
jne 0xf4af13
lea ecx, [esp + 0x40]
call fcn.00ed3a76
add dword [esp + 0x14], edi
sub dword [esp + 0x10], 1
jne 0xf4ae70
lea ecx, [esp + 0x90]
call fcn.00ed3a76
mov ecx, dword [esp + 0x20]
mov eax, ecx
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x14], ecx
sub eax, esi
jne 0xf4b09c
push eax
push 0xb0a79e
lea ecx, [esp + 0xa8]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], 0xf
call fcn.00ecd850
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0xa0]
push ecx
cmp eax, dword [esp + 0x28]
je 0xf4b039
mov ecx, eax
call fcn.00ecd752
mov ecx, dword [esp + 0x20]
add ecx, edi
mov dword [esp + 0x20], ecx
jmp 0xf4b047
push eax
lea ecx, [esp + 0x24]
call fcn.00ed61c9
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x14], ecx
cmp eax, 0x10
jb 0xf4b098
mov ecx, dword [esp + 0xa0]
inc eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], ecx
cmp eax, 0x1000
jb 0xf4b087
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.00ecd6c3
mov eax, dword [esp + 0x18]
pop ecx
pop ecx
mov ecx, dword [esp + 0x18]
push eax
push ecx
call fcn.00ee4009
pop ecx
pop ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x14], ecx
mov esi, dword [esp + 0x1c]
mov eax, ecx
and dword [esp + 0x34], 0
sub eax, esi
cdq
idiv edi
test eax, eax
je 0xf4b914
mov esi, 0xf0bd7721
mov edx, 0x7bcbda75
mov eax, 0x3f708a4e
mov dword [esp + 0x1a0], esi
mov ecx, 0x2fcf7b8c
mov dword [esp + 0x170], esi
mov dword [esp + 0xa0], esi
xor esi, esi
mov dword [esp + 0x1a4], edx
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], ecx
mov dword [esp + 0x174], edx
mov dword [esp + 0x178], eax
mov dword [esp + 0x17c], ecx
mov dword [esp + 0xa4], edx
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], ecx
mov dword [esp + 0x28], esi
jmp 0xf4b124
mov esi, dword [esp + 0x28]
push 0
lea ecx, [esp + 0x5c]
mov byte [esp + 0x54], 0
call fcn.00ed372a
sub esp, 0x10
mov ecx, esp
push ecx
push ecx
mov eax, esp
and dword [eax], 0
and dword [eax + 4], 0
call fcn.00ed1709
mov eax, dword [esp + 0x34]
pop ecx
pop ecx
add eax, esi
lea ecx, [esp + 0x60]
push eax
call fcn.00ed14c5
mov ecx, eax
call fcn.00ed15bd
mov edx, dword [esp + 0x1c]
lea eax, [esp + 0x70]
mov dword [esp + 0x70], 0xf0bd777d
lea ecx, [esp + 0x298]
mov dword [esp + 0x74], 0x7bcbda75
mov dword [esp + 0x78], 0x3f708a4e
mov dword [esp + 0x7c], 0x2fcf7b8c
lea edx, [esi + edx]
movaps xmm0, xmmword [esp + 0x70]
pxor xmm0, xmmword [esp + 0x1a0]
or dword [esp + 0x2c], 2
push eax
movaps xmmword [esp + 0x74], xmm0
call fcn.00ed4ea7
mov dword [esp + 0x44], 0xf0bd777d
lea edx, [esp + 0x254]
mov dword [esp + 0x48], 0x7bcbda75
mov esi, eax
mov dword [esp + 0x4c], 0x3f708a4e
lea eax, [esp + 0x44]
mov dword [esp + 0x50], 0x2fcf7b8c
movaps xmm0, xmmword [esp + 0x44]
pxor xmm0, xmmword [esp + 0x174]
pop ecx
push eax
lea ecx, [esp + 0x284]
movaps xmmword [esp + 0x44], xmm0
call fcn.00ed4ea7
pop ecx
push esi
push eax
push dword [esp + 0x44]
lea ecx, [esp + 0x274]
call fcn.00ed80e5
cmp dword [ebp + 0x38], 0x10
lea eax, [ebp + 0x24]
push dword [ebp + 0x34]
cmovae eax, dword [ebp + 0x24]
lea ecx, [esp + 0x26c]
push eax
call fcn.00ed3f4d
push eax
lea ecx, [esp + 0x23c]
call fcn.00ecd752
lea ecx, [esp + 0x268]
call fcn.00ecd7ce
lea ecx, [esp + 0x280]
call fcn.00ecd7ce
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x298]
and eax, 0xfffffffd
mov dword [esp + 0x2c], eax
call fcn.00ecd7ce
mov eax, dword [esp + 0x2c]
test al, 1
je 0xf4b2be
and eax, 0xfffffffe
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c4]
cmp eax, 0x10
jb 0xf4b2be
mov ecx, dword [esp + 0x2b0]
inc eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], ecx
cmp eax, 0x1000
jb 0xf4b2b5
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.00ecd6c3
mov eax, dword [esp + 0x18]
pop ecx
pop ecx
mov ecx, dword [esp + 0x18]
push eax
push ecx
call fcn.00ee4009
pop ecx
pop ecx
cmp dword [esp + 0x24c], 0x10
lea ecx, [esp + 0x238]
lea edx, [esp + 0x38]
cmovae ecx, dword [esp + 0x238]
call fcn.00f5a0b1
test eax, eax
jne 0xf4b873
mov dword [esp + 0xf0], 0xb5f13272
mov eax, 0xf4b85374
mov dword [esp + 0xf4], 0xeeb8e36
mov ecx, 0x7c7cacca
mov dword [esp + 0xf8], 0x1f5ce63c
mov dword [esp + 0xfc], 0x5bbc1ae0
mov dword [esp + 0x100], 0xbc86bfc
mov dword [esp + 0x104], 0x6650fcf6
mov dword [esp + 0x108], 0xc5b15811
mov dword [esp + 0x10c], 0x691aa180
mov dword [esp + 0x110], 0xc73664cd
mov dword [esp + 0x114], 0xfbcdc94
mov dword [esp + 0x118], 0x74ef127
mov dword [esp + 0x11c], 0x5caeee18
mov dword [esp + 0x120], 0x5c1062d3
mov dword [esp + 0x124], 0xfae37bd8
mov dword [esp + 0x128], 0x9e26efb8
mov dword [esp + 0x12c], 0x4718dbee
mov dword [esp + 0x130], 0x5d175a29
mov dword [esp + 0x134], 0x1a051d50
mov dword [esp + 0x138], 0xf9f588ba
mov dword [esp + 0x13c], 0x8ce90966
mov dword [esp + 0x140], 0xab4383cb
mov dword [esp + 0x144], 0xad6183ae
mov dword [esp + 0x148], 0xf615ed85
mov dword [esp + 0x14c], 0xf2cb5082
mov dword [esp + 0x150], 0x33301ed9
mov dword [esp + 0x154], 0x73a7eee9
mov dword [esp + 0x158], 0xafd54355
mov dword [esp + 0x15c], 0xa5e009d2
mov dword [esp + 0x160], 0x5affa7cf
mov dword [esp + 0x164], 0xac7ab432
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
movaps xmm1, xmmword [esp + 0xf0]
mov dword [esp + 0x1b0], 0xf0bd7721
mov dword [esp + 0x1b4], 0x7bcbda75
mov dword [esp + 0x1b8], 0x3f708a4e
mov dword [esp + 0x1bc], 0x2fcf7b8c
pxor xmm1, xmmword [esp + 0x1b0]
movaps xmmword [esp + 0xf0], xmm1
movaps xmm1, xmmword [esp + 0x100]
mov dword [esp + 0x1c0], 0x78a11da3
mov dword [esp + 0x1c4], 0x120f889f
mov dword [esp + 0x1c8], 0xe5d43578
mov dword [esp + 0x1cc], 0x2455f3c6
pxor xmm1, xmmword [esp + 0x1c0]
movaps xmmword [esp + 0x100], xmm1
movaps xmm1, xmmword [esp + 0x110]
mov dword [esp + 0x1d0], 0x8b7337e5
mov dword [esp + 0x1d4], 0x2fe89fd1
mov dword [esp + 0x1d8], 0x2b228352
mov dword [esp + 0x1dc], 0x2fcf8238
pxor xmm1, xmmword [esp + 0x1d0]
movaps xmmword [esp + 0x110], xmm1
movaps xmm1, xmmword [esp + 0x120]
mov dword [esp + 0x1e0], 0x35663da7
mov dword [esp + 0x1e4], 0xa59712ab
mov dword [esp + 0x1e8], 0xfb4b86cc
mov dword [esp + 0x1ec], 0x2371fbc2
pxor xmm1, xmmword [esp + 0x1e0]
movaps xmmword [esp + 0x120], xmm1
movaps xmm1, xmmword [esp + 0x130]
mov dword [esp + 0x1f0], 0x12451c09
mov dword [esp + 0x1f4], 0x68703d1d
mov dword [esp + 0x1f8], 0xb6d5fbd6
mov dword [esp + 0x1fc], 0xdeac4d34
pxor xmm1, xmmword [esp + 0x1f0]
mov dword [esp + 0x200], 0x8b1ac1eb
mov dword [esp + 0x204], 0xe941e7c7
mov dword [esp + 0x208], 0xd656bec0
mov dword [esp + 0x20c], 0xbb8619ce
mov dword [esp + 0x210], 0x6023e8d
mov dword [esp + 0x214], 0x538eded9
mov dword [esp + 0x218], 0xea91111a
mov dword [esp + 0x21c], 0xfca22980
mov dword [esp + 0x220], 0x7a9bceef
mov dword [esp + 0x224], 0xac39e773
mov dword [esp + 0x228], eax
mov dword [esp + 0x22c], ecx
movaps xmmword [esp + 0x130], xmm1
movaps xmm1, xmmword [esp + 0x140]
lea eax, [esp + 0x3c]
pxor xmm1, xmmword [esp + 0x200]
lea edx, [esp + 0xf0]
movaps xmmword [esp + 0x140], xmm1
movaps xmm1, xmmword [esp + 0x150]
pxor xmm1, xmmword [esp + 0x210]
push ecx
movaps xmmword [esp + 0x154], xmm1
movaps xmm1, xmmword [esp + 0x164]
pxor xmm1, xmmword [esp + 0x224]
push eax
push ecx
mov ecx, dword [esp + 0x44]
movaps xmmword [esp + 0x16c], xmm1
call fcn.00f9b2ba
add esp, 0xc
test eax, eax
jne 0xf4b86a
mov esi, dword [esp + 0x3c]
mov ecx, esi
call fcn.00f9b518
cmp eax, 0x64
jne 0xf4b863
mov edi, 0xf0bd7721
mov edx, 0x7bcbda75
mov eax, 0x3f708a4e
mov dword [esp + 0x180], edi
mov ecx, 0x2fcf7b8c
mov dword [esp + 0x190], edi
mov edi, dword [esp + 0x28]
mov dword [esp + 0x184], edx
mov dword [esp + 0x188], eax
mov dword [esp + 0x18c], ecx
mov dword [esp + 0x194], edx
mov dword [esp + 0x198], eax
mov dword [esp + 0x19c], ecx
push 0
lea ecx, [esp + 0xec]
mov byte [esp + 0xe4], 0
call fcn.00ed372a
xor edx, edx
mov ecx, esi
call fcn.00f9b226
sub esp, 0x10
mov dword [esp + 0x20], eax
mov ecx, esp
lea edx, [esp + 0x20]
xor eax, eax
mov byte [ecx], al
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
call fcn.00ede207
mov dword [esp + 0xa0], 0xf0d10554
lea eax, [esp + 0xa0]
mov dword [esp + 0xa4], 0x7bcbda75
lea ecx, [esp + 0xf0]
mov dword [esp + 0xa8], 0x3f708a4e
mov dword [esp + 0xac], 0x2fcf7b8c
movaps xmm0, xmmword [esp + 0xa0]
pxor xmm0, xmmword [esp + 0x190]
push eax
movaps xmmword [esp + 0xa4], xmm0
call fcn.00ed4fd9
mov ecx, eax
call fcn.00ed15bd
xor edx, edx
mov ecx, esi
inc edx
call fcn.00f9b226
push eax
call fcn.00f09af4
pop ecx
push 0
push 0xf4240
push edx
push eax
call fcn.00f21250
sub eax, 0xb6109100
mov dword [esp + 0xd0], 0x95d01e55
mov dword [esp + 0xd4], 0x7bcbda75
sbb edx, 2
mov dword [esp + 0xd8], 0x3f708a4e
sub esp, 0x10
mov dword [esp + 0xec], 0x2fcf7b8c
mov ecx, esp
mov dword [ecx + 8], eax
lea eax, [esp + 0xe0]
mov byte [ecx], 5
mov dword [ecx + 0xc], edx
lea ecx, [esp + 0xf0]
movaps xmm0, xmmword [esp + 0xe0]
pxor xmm0, xmmword [esp + 0x1a0]
push eax
movaps xmmword [esp + 0xe4], xmm0
call fcn.00ed4fd9
mov ecx, eax
call fcn.00ed15bd
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x50]
add eax, edi
push eax
call fcn.00ed14c5
lea ecx, [esp + 0xe0]
push ecx
mov ecx, eax
call fcn.00ed136f
push dword [esp + 0xe0]
lea ecx, [esp + 0xec]
call fcn.00ed3446
mov ecx, esi
call fcn.00f9b518
cmp eax, 0x64
je 0xf4b6ee
push 0x18
pop edi
mov ecx, esi
call fcn.00f9b248
mov ecx, dword [esp + 0x38]
call fcn.00f59fc3
mov dword [esp + 0xc0], 0x84ce1e49
lea eax, [esp + 0xc0]
mov dword [esp + 0xc4], 0x7bb2a81a
lea ecx, [esp + 0x60]
mov dword [esp + 0xc8], 0x3f708a4e
mov dword [esp + 0xcc], 0x2fcf7b8c
movaps xmm0, xmmword [esp + 0xc0]
pxor xmm0, xmmword [esp + 0xa0]
push eax
movaps xmmword [esp + 0xc4], xmm0
call fcn.00ed4fd9
lea ecx, [esp + 0x50]
push ecx
mov ecx, eax
call fcn.00ed136f
lea ecx, [esp + 0x238]
call fcn.00ecd7ce
push dword [esp + 0x50]
lea ecx, [esp + 0x5c]
call fcn.00ed3446
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x14], eax
sub eax, esi
cdq
idiv edi
mov ecx, dword [esp + 0x34]
add dword [esp + 0x28], edi
inc ecx
mov dword [esp + 0x34], ecx
cmp ecx, eax
jb 0xf4b120
mov edx, dword [esp + 0x8c]
xorps xmm0, xmm0
mov al, byte [esp + 0x60]
mov ecx, dword [esp + 0x6c]
mov byte [esp + 0x60], 0
mov byte [edx], al
mov eax, dword [esp + 0x68]
mov dword [edx + 8], eax
mov dword [edx + 0xc], ecx
movlpd qword [esp + 0x68], xmm0
test esi, esi
je 0xf4b9a5
cmp esi, dword [esp + 0x14]
je 0xf4b95a
mov ecx, esi
call fcn.00ecd7ce
add esi, edi
cmp esi, dword [esp + 0x14]
jne 0xf4b947
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
sub eax, esi
mov dword [esp + 0x18], esi
cdq
idiv edi
imul eax, eax, 0x18
mov dword [esp + 0x10], eax
cmp eax, 0x1000
jb 0xf4b98e
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.00ecd6c3
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x20]
pop ecx
pop ecx
push eax
push esi
call fcn.00ee4009
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
pop ecx
pop ecx
lea ecx, [esp + 0x250]
call fcn.00ecd7ce
push 0
lea ecx, [esp + 0x6c]
call fcn.00ed3446
lea ecx, [ebp + 0xc]
call fcn.00ecd7ce
lea ecx, [ebp + 0x24]
call fcn.00ecd7ce
mov eax, dword [esp + 0x8c]
pop edi
pop esi
mov esp, ebp
pop ebp
ret