Function at 0x44f5a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x11b0
call fcn.00444aa0
mov eax, dword [esp + 0x11c0]
push ebx
mov ebx, dword [esp + 0x11b8]
push esi
xor esi, esi
mov dword [esp + 0x18], 1
mov dword [esp + 0x34], 0xffffffff
mov dword [esp + 0x14], 0xffffffff
mov dword [esp + 0xc], 0
mov dword [esp + 8], esi
mov dword [esp + 0x10], esi
mov dword [esp + 0x24], ebx
test eax, eax
jne 0x44f608
mov eax, dword [esp + 0x11c4]
test eax, eax
je 0x44f5fd
mov dword [eax], 0x63
pop esi
xor eax, eax
pop ebx
add esp, 0x11b0
ret
mov dword [eax], esi
mov eax, dword [esp + 0x11c4]
test eax, eax
je 0x44f617
mov dword [eax], esi
push ebp
mov ebp, dword [esp + 0x11d0]
push edi
test ebp, ebp
jne 0x44f635
mov esi, 0x10
mov ecx, str.no_error
mov edx, esi
jmp 0x44fff5
mov ecx, dword [esp + 0x11d8]
mov dword [ebp], esi
test ecx, ecx
jne 0x44f64f
mov ecx, 0x540e48
mov dword [esp + 0x11d8], ecx
mov edi, dword [esp + 0x11c8]
lea eax, [ecx + 0x100]
mov dword [esp + 0x44], eax
lea eax, [ecx + 0x200]
mov dword [esp + 0x48], eax
lea eax, [ecx + 0x340]
mov dword [esp + 0x40], ecx
mov dword [esp + 0x4c], eax
test edi, 0xd8008580
je 0x44f68a
mov esi, 0x11
jmp 0x44ffd2
test edi, 0x10000
je 0x44f69a
mov dword [esp + 0x18], 1
mov dword [esp + 0xa4], esi
cmp byte [ebx], 0x28
jne 0x44f9e1
lea ebx, [ebx]
cmp byte [ebx + esi + 1], 0x2a
jne 0x44f9da
push 5
add ebx, 2
add ebx, esi
push str.UTF8_
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x44f6e2
add esi, 7
or edi, 0x800
jmp 0x44f9b5
push 4
push str.UTF_
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x44f704
add esi, 6
or edi, 0x800
jmp 0x44f9b5
push 4
push str.UCP_
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x44f726
add esi, 6
or edi, 0x20000000
jmp 0x44f9b5
push 0x10
push str.NO_AUTO_POSSESS_
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x44f748
add esi, 0x12
or edi, 0x20000
jmp 0x44f9b5
push 0xd
push str.NO_START_OPT_
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x44f76a
add esi, 0xf
or edi, 0x4000000
jmp 0x44f9b5
push 0xc
push str.LIMIT_MATCH
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x44f812
mov eax, dword [esp + 0x11c4]
lea ebp, [esi + 0xe]
add eax, ebp
xor ebx, ebx
mov dword [esp + 0x28], eax
movzx eax, byte [eax]
push eax
call sub.MSVCRT.dll_isdigit
add esp, 4
test eax, eax
je 0x44f7e3
mov edi, dword [esp + 0x28]
mov esi, dword [esp + 0x11c4]
nop
cmp ebx, 0x19999998
ja 0x44f7d8
movzx eax, byte [edi]
lea ebx, [ebx + ebx*4]
inc ebp
lea ebx, [ebx - 0x18]
lea edi, [esi + ebp]
lea ebx, [eax + ebx*2]
movzx eax, byte [edi]
push eax
call sub.MSVCRT.dll_isdigit
add esp, 4
test eax, eax
jne 0x44f7b0
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x11c8]
mov eax, dword [esp + 0x11c4]
mov al, byte [eax + ebp]
cmp al, 0x29
jne 0x44f9d3
cmp ebx, dword [esp + 0x3c]
jae 0x44f80a
or dword [esp + 0xa4], 0x2000
mov dword [esp + 0x3c], ebx
lea esi, [ebp + 1]
jmp 0x44f9bc
push 0x10
push str.LIMIT_RECURSION
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x44f8b9
mov eax, dword [esp + 0x11c4]
lea ebp, [esi + 0x12]
add eax, ebp
xor ebx, ebx
mov dword [esp + 0x28], eax
movzx eax, byte [eax]
push eax
call sub.MSVCRT.dll_isdigit
add esp, 4
test eax, eax
je 0x44f88a
mov edi, dword [esp + 0x28]
mov esi, dword [esp + 0x11c4]
cmp ebx, 0x19999998
ja 0x44f87f
movzx eax, byte [edi]
lea ebx, [ebx + ebx*4]
inc ebp
lea ebx, [ebx - 0x18]
lea edi, [esi + ebp]
lea ebx, [eax + ebx*2]
movzx eax, byte [edi]
push eax
call sub.MSVCRT.dll_isdigit
add esp, 4
test eax, eax
jne 0x44f857
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x11c8]
mov eax, dword [esp + 0x11c4]
mov al, byte [eax + ebp]
cmp al, 0x29
jne 0x44f9d3
cmp ebx, dword [esp + 0x1c]
jae 0x44f8b1
or dword [esp + 0xa4], 0x4000
mov dword [esp + 0x1c], ebx
lea esi, [ebp + 1]
jmp 0x44f9bc
push 3
push 0x52e5cc
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x44f8e0
add esi, 5
mov eax, 0x100000
and edi, 0xff8fffff
jmp 0x44f9b3
push 3
push 0x52e5d0
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x44f907
add esi, 5
mov eax, 0x200000
and edi, 0xff8fffff
jmp 0x44f9b3
push 5
push str.CRLF_
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x44f92e
add esi, 7
mov eax, 0x300000
and edi, 0xff8fffff
jmp 0x44f9b3
push 4
push str.ANY_
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x44f952
add esi, 6
mov eax, 0x400000
and edi, 0xff8fffff
jmp 0x44f9b3
push 8
push str.ANYCRLF_
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x44f976
add esi, 0xa
mov eax, fcn.00500000
and edi, 0xff8fffff
jmp 0x44f9b3
push 0xc
push str.BSR_ANYCRLF_
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x44f991
mov eax, 0x800000
jmp 0x44f9aa
push 0xc
push str.BSR_UNICODE_
push ebx
call sub.MSVCRT.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x44f9d3
mov eax, 0x1000000
add esi, 0xe
and edi, 0xfe7fffff
or edi, eax
mov dword [esp + 0x11c8], edi
mov ebx, dword [esp + 0x11c4]
mov dword [esp + 0x10], esi
cmp byte [esi + ebx], 0x28
je 0x44f6b0
jmp 0x44f9da
mov ebx, dword [esp + 0x11c4]
mov ebp, dword [esp + 0x11d4]
mov eax, edi
shr eax, 0xb
and eax, 1
mov dword [esp + 0x10], eax
je 0x44fa34
cmp dword [esp + 0x18], 0
je 0x44fa07
mov esi, 0x4e
mov ecx, str.no_error
mov edx, esi
jmp 0x44fff5
test edi, 0x2000
jne 0x44fa34
push ebp
push 0xffffffffffffffff
push ebx
call fcn.00460ac0
add esp, 0xc
mov dword [esp + 0x14], eax
test eax, eax
je 0x44fa34
mov esi, 0x2c
mov ecx, str.no_error
mov edx, esi
jmp 0x44fff5
mov eax, edi
and eax, 0x1800000
cmp eax, 0x1800000
jne 0x44fa4c
mov esi, 0x38
jmp 0x44ffd2
mov eax, edi
and eax, 0x700000
cmp eax, 0x300000
jg 0x44fabb
je 0x44fa99
test eax, eax
je 0x44fa6e
cmp eax, 0x100000
je 0x44fa92
cmp eax, 0x200000
jne 0x44fac9
mov eax, 0xa
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 1
mov byte [esp + 0xcc], al
jmp 0x44faeb
mov eax, 0xd
jmp 0x44fa73
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 2
mov word [esp + 0xcc], 0xa0d
jmp 0x44faeb
cmp eax, 0x400000
je 0x44fae0
cmp eax, fcn.00500000
je 0x44fad3
mov esi, 0x38
jmp 0x44ffd2
mov dword [esp + 0xc4], 2
jmp 0x44faeb
mov dword [esp + 0xc4], 1
lea eax, [esp + 0x1c0]
mov dword [esp + 0x8c], 0
mov ecx, ebx
mov dword [esp + 0x54], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x50], eax
lea eax, [esp + 0xd0]
mov dword [esp + 0x90], 0
mov dword [esp + 0x84], 0
lea edx, [ecx + 1]
mov dword [esp + 0x80], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0xbc], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0xc0], 0
mov dword [esp + 0x7c], 0x1000
mov dword [esp + 0x68], eax
mov dword [esp + 0x78], 0x14
mov dword [esp + 0x58], ebx
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44fb92
sub ecx, edx
mov dword [esp + 0xa8], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x88], 0
lea eax, [ecx + ebx]
mov dword [esp + 0xa0], edi
mov dword [esp + 0x5c], eax
lea eax, [esi + ebx]
mov dword [esp + 0x34], eax
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c0]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x44]
mov dword [esp + 0x68], 0
push eax
push 0
lea eax, [esp + 0x44]
mov byte [esp + 0x1cc], 0x83
push eax
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x40]
push eax
push 0
push 0
push 0
push 0
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x58]
push eax
push edi
call fcn.0044d8c0
mov esi, dword [esp + 0x50]
add esp, 0x3c
test esi, esi
jne 0x44ffd2
mov esi, dword [esp + 0x20]
cmp esi, 0x10000
jle 0x44fc5d
mov esi, 0x14
jmp 0x44ffd2
mov eax, dword [esp + 0x74]
lea ebx, [esi + 0x38]
imul eax, dword [esp + 0x70]
add ebx, eax
push ebx
call dword [0x1c4d31c]
mov ebp, eax
add esp, 4
test ebp, ebp
jne 0x44fc83
lea esi, [eax + 0x15]
jmp 0x44ffd2
mov dword [ebp + 4], ebx
mov dword [ebp], 0x50435245
mov eax, dword [esp + 0xa0]
mov dword [ebp + 8], eax
mov eax, dword [esp + 0xa4]
mov dword [ebp + 0xc], eax
mov eax, dword [esp + 0x3c]
mov dword [ebp + 0x10], eax
mov eax, dword [esp + 0x1c]
mov dword [ebp + 0x14], eax
xor eax, eax
mov dword [ebp + 0x18], eax
mov eax, 0x38
mov word [ebp + 0x22], ax
movzx eax, word [esp + 0x74]
mov word [ebp + 0x24], ax
movzx eax, word [esp + 0x70]
mov word [ebp + 0x26], ax
xor eax, eax
mov dword [ebp + 0x28], eax
mov eax, dword [esp + 0x11d8]
sub eax, 0x540e48
mov dword [ebp + 0x34], 0
neg eax
sbb eax, eax
and eax, dword [esp + 0x11d8]
mov dword [ebp + 0x30], eax
xor eax, eax
mov dword [ebp + 0x2c], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x84], eax
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x88], 0
movzx ecx, word [ebp + 0x22]
add ecx, ebp
mov dword [esp + 0x6c], ecx
movzx eax, word [ebp + 0x24]
movzx ebx, word [ebp + 0x26]
imul ebx, eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0xc0], 0
add ebx, ecx
mov dword [esp + 0xa8], 0
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0x64], 0
test eax, eax
jle 0x44fdef
mov esi, dword [esp + 0x68]
mov edi, eax
mov dword [esp + 0x70], 0
add esi, 4
push dword [esi + 4]
lea eax, [esp + 0x44]
push dword [esi]
push dword [esi - 4]
push eax
call fcn.004471a0
dec edi
lea esi, [esi + 0xc]
add esp, 0x10
test edi, edi
jg 0x44fdb3
cmp dword [esp + 0x78], 0x14
mov edi, dword [esp + 0x11c8]
mov esi, dword [esp + 0x20]
jle 0x44fdef
push dword [esp + 0x68]
call dword [0x1c4d320]
add esp, 4
mov eax, dword [esp + 0x34]
push 0
mov dword [esp + 0x30], eax
lea eax, [esp + 0x44]
push eax
push 0
lea eax, [esp + 0x44]
mov byte [ebx], 0x83
push eax
lea eax, [esp + 0x40]
mov dword [esp + 0x34], ebx
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x40]
push eax
push 0
push 0
push 0
push 0
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x58]
push eax
push dword [ebp + 8]
call fcn.0044d8c0
movzx eax, word [esp + 0xbc]
add esp, 0x3c
mov word [ebp + 0x1e], ax
movzx eax, word [esp + 0x8c]
mov word [ebp + 0x20], ax
movzx eax, word [esp + 0x88]
mov word [ebp + 0x1c], ax
mov eax, dword [esp + 0xa4]
or eax, 1
mov dword [ebp + 0xc], eax
cmp dword [esp + 0xac], 0
je 0x44fe87
xor eax, eax
mov dword [esp + 0x20], eax
or eax, 0xffffffff
mov dword [esp + 0x38], eax
jmp 0x44fe97
mov eax, dword [esp + 0x38]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x20], eax
cmp dword [esp + 0x14], 0
jne 0x44feaf
mov eax, dword [esp + 0x2c]
cmp byte [eax], 0
je 0x44feaf
mov dword [esp + 0x14], 0x16
mov eax, dword [esp + 0x24]
mov byte [eax], 0
inc eax
mov dword [esp + 0x24], eax
sub eax, ebx
cmp eax, esi
jle 0x44fecc
mov ecx, 0x17
mov dword [esp + 0x14], ecx
jmp 0x44fed0
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x60]
mov esi, dword [esp + 0x50]
cmp eax, esi
jbe 0x44ff8e
xor edx, edx
mov dword [esp + 0x30], 0xffffffff
test ecx, ecx
jne 0x44ff8e
cmp eax, esi
jbe 0x44ff8e
sub eax, 2
mov dword [esp + 0x60], eax
movzx ecx, byte [eax]
movzx eax, byte [eax + 1]
shl ecx, 8
or ecx, eax
je 0x44ff85
cmp byte [ecx + ebx - 1], 0x75
jne 0x44ff85
movzx esi, byte [ecx + ebx]
lea eax, [ecx + ebx]
inc ecx
mov dword [esp + 0x34], eax
add ecx, ebx
shl esi, 8
mov dword [esp + 0x1c], ecx
movzx eax, byte [ecx]
or esi, eax
cmp esi, dword [esp + 0x30]
je 0x44ff4a
push esi
push dword [esp + 0x14]
push ebx
call fcn.00446ff0
add esp, 0xc
mov dword [esp + 0x30], esi
mov edx, eax
test edx, edx
je 0x44ff7a
mov eax, dword [esp + 0x34]
mov ecx, edx
sub ecx, ebx
sar ecx, 8
mov byte [eax], cl
mov al, dl
mov ecx, dword [esp + 0x1c]
sub al, bl
mov byte [ecx], al
mov ecx, dword [esp + 0x14]
mov esi, dword [esp + 0x50]
test ecx, ecx
jne 0x44ff8e
mov eax, dword [esp + 0x60]
jmp 0x44fef2
mov esi, dword [esp + 0x50]
mov ecx, 0x35
jmp 0x44ff8a
mov ecx, 0xa
mov dword [esp + 0x14], ecx
cmp dword [esp + 0x7c], 0x1000
jle 0x44ffa6
push esi
call dword [0x1c4d320]
mov ecx, dword [esp + 0x18]
add esp, 4
mov dword [esp + 0x50], 0
test ecx, ecx
jne 0x44ffc4
mov ax, word [ebp + 0x20]
cmp ax, word [ebp + 0x1e]
jbe 0x45000e
mov dword [esp + 0x14], 0xf
push ebp
call dword [0x1c4d320]
mov esi, dword [esp + 0x18]
add esp, 4
mov ecx, dword [esp + 0x11d4]
mov edx, esi
mov eax, dword [esp + 0x2c]
sub eax, dword [esp + 0x11c4]
mov dword [ecx], eax
mov ecx, str.no_error
test esi, esi
jle 0x450240
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44fff5
cmp byte [ecx], al
je 0x45023b
dec edx
test edx, edx
jg 0x44fff5
jmp 0x450240
mov esi, dword [esp + 0x10]
test edi, 0x20000
jne 0x450030
lea eax, [esp + 0x40]
push eax
push esi
push ebx
call fcn.00447870
add esp, 0xc
cmp dword [esp + 0x14], 0
jne 0x44ffc4
cmp dword [esp + 0xb4], 0
je 0x4500e2
push 0xffffffffffffffff
push esi
push ebx
call fcn.00446ff0
mov edi, eax
add esp, 0xc
test edi, edi
je 0x4500e2
movzx ecx, byte [edi + 1]
movzx eax, byte [edi + 2]
shl ecx, 8
or ecx, eax
jne 0x4500bd
movzx esi, byte [edi - 2]
movzx eax, byte [edi - 1]
shl esi, 8
or esi, eax
lea eax, [esp + 0x40]
push ecx
push eax
push 1
movzx ebx, byte [esi + edi - 3]
mov byte [esi + edi - 3], cl
mov eax, dword [ebp + 8]
shr eax, 0xb
and eax, 1
push eax
push edi
call fcn.0044e4e0
mov ecx, eax
mov byte [esi + edi - 3], bl
add esp, 0x14
test ecx, ecx
js 0x450116
cmp ecx, dword [esp + 0x88]
jle 0x4500ae
mov dword [esp + 0x88], ecx
mov esi, dword [esp + 0x10]
mov eax, ecx
sar eax, 8
mov byte [edi + 1], al
mov byte [edi + 2], cl
push 0xffffffffffffffff
lea eax, [edi + 3]
push esi
push eax
call fcn.00446ff0
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x450054
mov ecx, dword [esp + 0x14]
test ecx, ecx
jne 0x44ffc4
mov ebx, dword [esp + 0x3c]
mov eax, dword [ebp + 8]
mov dword [esp + 0x34], eax
test al, 0x10
jne 0x4501ab
push 0
lea eax, [esp + 0x44]
push eax
push 0
push ebx
call fcn.0044f210
add esp, 0x10
test eax, eax
je 0x45013f
mov eax, dword [esp + 0x34]
or eax, 0x10
mov dword [ebp + 8], eax
jmp 0x4501ab
cmp ecx, 0xfffffffe
jne 0x450128
mov dword [esp + 0x14], 0x24
jmp 0x44ffc4
mov esi, dword [esp + 0x10]
sub ecx, 0xfffffffc
neg ecx
sbb ecx, ecx
and ecx, 0xffffffd3
add ecx, 0x46
mov dword [esp + 0x14], ecx
jmp 0x4500d6
mov eax, dword [esp + 0x18]
test eax, eax
jns 0x450182
push 0
lea eax, [esp + 0x1c]
push eax
push ebx
call fcn.0044e360
mov edx, eax
add esp, 0xc
mov eax, dword [esp + 0x18]
test eax, eax
jns 0x450186
push 0
push 0
lea eax, [esp + 0x48]
push eax
push 0
push ebx
call fcn.0044f3d0
add esp, 0x14
test eax, eax
je 0x4501ab
or dword [ebp + 0xc], 0x100
jmp 0x4501ab
mov edx, dword [esp + 0x28]
and edx, 0xff
mov word [ebp + 0x18], dx
test al, 1
je 0x4501a7
mov eax, dword [esp + 0x44]
mov ecx, edx
movzx eax, byte [ecx + eax]
cmp ax, dx
je 0x4501a7
or dword [ebp + 0xc], 0x20
or dword [ebp + 0xc], 0x10
mov eax, dword [esp + 0x38]
test eax, eax
js 0x4501ea
test byte [ebp + 8], 0x10
je 0x4501bd
test al, 2
je 0x4501ea
mov edx, dword [esp + 0x20]
and edx, 0xff
mov word [ebp + 0x1a], dx
test al, 1
je 0x4501e6
mov eax, dword [esp + 0x44]
movzx ecx, dx
movzx eax, byte [ecx + eax]
cmp ax, dx
je 0x4501e6
or dword [ebp + 0xc], 0x80
or dword [ebp + 0xc], 0x40
mov edi, dword [esp + 0x24]
mov edi, edi
push 0
lea eax, [esp + 0x44]
push eax
push esi
push edi
push ebx
call fcn.0044de10
add esp, 0x14
test eax, eax
jne 0x450227
movzx ecx, byte [ebx + 1]
movzx eax, byte [ebx + 2]
shl ecx, 8
or ecx, eax
add ebx, ecx
cmp byte [ebx], 0x77
je 0x4501f0
pop edi
mov eax, ebp
pop ebp
pop esi
pop ebx
add esp, 0x11b0
ret
or dword [ebp + 0xc], 0x8000
mov eax, ebp
pop edi
pop ebp
pop esi
pop ebx
add esp, 0x11b0
ret
mov ecx, str.Error_text_not_found__please_report_
mov eax, dword [esp + 0x11d0]
mov dword [eax], ecx
mov eax, dword [esp + 0x11cc]
test eax, eax
je 0x450256
mov dword [eax], esi
pop edi
pop ebp
pop esi
xor eax, eax
pop ebx
add esp, 0x11b0
ret