Function at 0x464790
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x9a8c
call fcn.00489c00
mov eax, dword [0xec8960]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov ebx, ecx
mov dword [ebp - 0x9668], edx
mov dword [ebp - 0x9684], edx
push edi
push 0
movzx esi, byte [ebx + 1]
movzx edx, byte [ebx + 2]
movzx ecx, byte [ebx + 3]
movzx eax, byte [ebx + 4]
add ebx, 5
shl esi, 8
or esi, edx
mov dword [ebp - 0x9634], 0xffffffff
shl esi, 8
or esi, ecx
mov dword [ebp - 0x964c], ebx
shl esi, 8
or esi, eax
push 0x6000
mov dword [ebp - 0x9640], esi
call fcn.0045c6b0
add esp, 8
mov dword [ebp - 0x9664], eax
test eax, eax
jne 0x46481d
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004888df
mov esp, ebp
pop ebp
ret
movaps xmm1, xmmword [0xea1850]
lea edx, [ebp - 0x9a78]
mov ecx, 8
mov dword [ebp - 0x965c], 0
mov dword [ebp - 0x9660], 0
mov dword [ebp - 0x9654], 0
lea edi, [ecx + 8]
lea eax, [ecx - 8]
movd xmm0, eax
lea edx, [edx + 0x40]
pshufd xmm0, xmm0, 0
lea eax, [ecx - 4]
paddd xmm0, xmm1
movups xmmword [edx - 0x50], xmm0
movd xmm0, eax
lea eax, [ecx + 4]
pshufd xmm0, xmm0, 0
paddd xmm0, xmm1
movups xmmword [edx - 0x40], xmm0
movd xmm0, ecx
add ecx, 0x10
pshufd xmm0, xmm0, 0
paddd xmm0, xmm1
movups xmmword [edx - 0x30], xmm0
movd xmm0, eax
pshufd xmm0, xmm0, 0
paddd xmm0, xmm1
movups xmmword [edx - 0x20], xmm0
sub edi, 1
jne 0x464850
mov eax, 4
mov dword [ebp - 0x967c], 1
push 0x1400
mov dword [ebp - 0x9658], eax
mov dword [ebp - 0x9670], eax
lea eax, [ebp - 0x1528]
push edi
push eax
mov dword [ebp - 0x9680], 1
mov dword [ebp - 0x9674], 1
mov dword [ebp - 0x9678], 1
mov dword [ebp - 0x20], 0x400
mov dword [ebp - 0x24], 0x400
mov dword [ebp - 0x18], 0x400
mov dword [ebp - 0x1c], 0x400
mov dword [ebp - 0x10], 0x400
mov dword [ebp - 0x14], 0x400
mov dword [ebp - 8], 0x400
mov dword [ebp - 0xc], 0x400
call fcn.0048b190
add esp, 0xc
lea eax, [ebp - 0x9628]
push 0x5000
push edi
push eax
call fcn.0048b190
mov ecx, 0x400
lea edi, [ebp - 0x2e28]
mov eax, ecx
add esp, 0xc
rep stosd dword es:[edi], eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x108], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x68], eax
mov ecx, 0x600
mov dword [ebp - 0x5c], eax
lea edi, [ebp - 0x4628]
mov dword [ebp - 0x60], eax
rep stosd dword es:[edi], eax
mov ecx, 0x240
mov dword [ebp - 0x54], eax
lea edi, [ebp - 0x1e28]
mov dword [ebp - 0x58], eax
rep stosd dword es:[edi], eax
mov edi, dword [ebp - 0x9664]
mov ecx, 0x1800
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], eax
rep stosd dword es:[edi], eax
xor eax, eax
mov edx, dword [ebp - 0x9660]
lea ecx, [eax + eax*4]
mov eax, dword [ebp - 0x965c]
lea ebx, [ebp - 0x9628]
and eax, 3
shl ecx, 2
mov dword [ebp - 0x962c], ecx
xor edi, edi
lea eax, [eax + edx*4]
lea eax, [eax + eax*4]
shl eax, 2
lea edx, [ebp - 0x1518]
add ecx, edx
mov dword [ebp - 0x9644], eax
add ebx, eax
mov dword [ebp - 0x9650], ecx
lea edx, [ebp - 0x9618]
add eax, edx
xor edx, edx
mov ecx, dword [ecx]
add ecx, dword [ebp - 0x9658]
mov dword [ebp - 0x966c], eax
add ecx, dword [eax]
mov eax, dword [ebp - 0x9634]
div ecx
xor edx, edx
mov ecx, eax
mov eax, esi
div ecx
lea esi, [ebp - 0x9680]
mov dword [ebp - 0x9630], ecx
mov dword [ebp - 0x9638], eax
xor edx, edx
lea eax, [ebp - 0x1528]
mov ecx, ebx
add eax, dword [ebp - 0x962c]
sub eax, ebx
sub esi, ebx
mov dword [ebp - 0x963c], eax
mov ebx, eax
nop dword [eax + eax]
mov eax, dword [esi + ecx]
lea ecx, [ecx + 4]
add eax, dword [ebx + ecx - 4]
add eax, dword [ecx - 4]
mov dword [ebp - 0x9648], edx
add edi, eax
inc edx
cmp dword [ebp - 0x9638], edi
jae 0x464b40
mov edx, dword [ebp - 0x9648]
lea eax, [ebp - 0x1528]
add eax, dword [ebp - 0x962c]
lea ecx, [ebp - 0x9628]
add ecx, dword [ebp - 0x9644]
mov esi, dword [ebp - 0x9640]
mov ebx, dword [ebp - 0x964c]
lea eax, [eax + edx*4]
mov dword [ebp - 0x9638], eax
mov eax, dword [eax]
mov dword [ebp - 0x963c], eax
lea eax, [ecx + edx*4]
lea ecx, [ebp - 0x9680]
mov dword [ebp - 0x9634], eax
sub edi, dword [ecx + edx*4]
lea ecx, [ecx + edx*4]
mov eax, dword [eax]
lea ecx, [ebp - 0x9680]
sub edi, eax
mov dword [ebp - 0x9658], eax
mov eax, dword [ebp - 0x9638]
lea ecx, [ecx + edx*4]
sub edi, dword [eax]
imul edi, dword [ebp - 0x9630]
sub esi, edi
mov edi, dword [ecx]
add edi, dword [ebp - 0x9658]
add edi, dword [ebp - 0x963c]
imul edi, dword [ebp - 0x9630]
mov dword [ebp - 0x9640], esi
mov dword [ebp - 0x9630], edi
cmp edi, 0x1000000
jae 0x464c26
nop dword [eax + eax]
movzx eax, byte [ebx]
inc ebx
shl esi, 8
shl edi, 8
or esi, eax
cmp edi, 0x1000000
jb 0x464c00
mov dword [ebp - 0x9630], edi
mov dword [ebp - 0x964c], ebx
mov dword [ebp - 0x9640], esi
mov eax, dword [ebp - 0x963c]
lea ecx, [ebp - 0x9680]
add dword [ecx + edx*4], 2
lea ecx, [ecx + edx*4]
mov ecx, dword [ebp - 0x9634]
add eax, 2
add dword [ecx], 2
mov ecx, dword [ebp - 0x9638]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x966c]
mov eax, dword [ebp - 0x9670]
add eax, 2
mov dword [ebp - 0x9658], eax
mov dword [ebp - 0x9670], eax
mov eax, dword [ecx]
add eax, 2
mov dword [ecx], eax
mov ecx, dword [ebp - 0x9650]
mov dword [ebp - 0x966c], eax
mov eax, dword [ecx]
add eax, 2
cmp dword [ebp - 0x9658], 0x3a
mov dword [ebp - 0x9650], eax
mov dword [ecx], eax
jbe 0x464cf7
mov ecx, dword [ebp - 0x9678]
mov edx, dword [ebp - 0x967c]
mov eax, dword [ebp - 0x9674]
mov edi, dword [ebp - 0x9680]
inc eax
shr eax, 1
lea ecx, [ecx + 1]
shr ecx, 1
lea edx, [edx + 1]
mov dword [ebp - 0x9674], eax
add eax, ecx
shr edx, 1
lea edi, [edi + 1]
shr edi, 1
add eax, edx
add eax, edi
mov dword [ebp - 0x9680], edi
mov edi, dword [ebp - 0x9630]
mov dword [ebp - 0x967c], edx
mov edx, dword [ebp - 0x9648]
mov dword [ebp - 0x9658], eax
mov dword [ebp - 0x9670], eax
mov eax, dword [ebp - 0x9650]
mov dword [ebp - 0x9678], ecx
cmp eax, 0x3e
jbe 0x464d4d
mov ecx, dword [ebp - 0x962c]
lea eax, [ebp - 0x1528]
shr dword [eax + ecx], 1
mov eax, ecx
shr dword [ebp + eax - 0x1520], 1
mov ecx, dword [ebp + eax - 0x1520]
shr dword [ebp + eax - 0x1524], 1
shr dword [ebp + eax - 0x151c], 1
mov eax, dword [ebp + eax - 0x151c]
add eax, ecx
mov ecx, dword [ebp - 0x962c]
add eax, dword [ebp + ecx - 0x1524]
add eax, dword [ebp + ecx - 0x1528]
mov dword [ebp + ecx - 0x1518], eax
cmp dword [ebp - 0x966c], 0xcc
jbe 0x464db4
mov ecx, dword [ebp - 0x9644]
lea eax, [ebp - 0x9628]
mov ebx, dword [ebp - 0x9644]
shr dword [eax + ecx], 1
mov eax, ecx
shr dword [ebp + ebx - 0x961c], 1
shr dword [ebp + eax - 0x9624], 1
mov ecx, dword [ebp + eax - 0x9624]
shr dword [ebp + eax - 0x9620], 1
mov eax, dword [ebp + eax - 0x9620]
add eax, ecx
lea ecx, [ebp - 0x9628]
add eax, dword [ecx + ebx]
mov ecx, ebx
mov ebx, dword [ebp - 0x964c]
add eax, dword [ebp + ecx - 0x961c]
mov dword [ebp + ecx - 0x9618], eax
cmp edx, 3
jne 0x46507c
mov eax, dword [ebp - 0x9654]
lea ecx, [ebp - 0x128]
shl eax, 5
lea edx, [ebp - 0x24]
add eax, ecx
mov dword [ebp - 0x963c], edx
xor ecx, ecx
mov dword [ebp - 0x9638], eax
mov dword [ebp - 0x962c], 0
mov dword [ebp - 0x9644], ecx
nop
mov dword [ebp - 0x9654], ecx
mov ecx, dword [eax]
mov eax, dword [edx]
xor edx, edx
mov dword [ebp - 0x9648], ecx
add ecx, eax
mov dword [ebp - 0x9630], eax
mov eax, esi
shr edi, 0xb
div edi
shr ecx, 1
cmp eax, ecx
jb 0x464ec9
mov eax, ecx
imul eax, edi
sub esi, eax
mov eax, 0x800
sub eax, ecx
imul edi, eax
cmp edi, 0x1000000
jae 0x464e4e
movzx eax, byte [ebx]
inc ebx
shl esi, 8
shl edi, 8
or esi, eax
cmp edi, 0x1000000
jb 0x464e34
mov dword [ebp - 0x964c], ebx
mov ecx, dword [ebp - 0x9630]
mov eax, ecx
mov edx, dword [ebp - 0x963c]
shr eax, 4
sub ecx, eax
mov dword [edx], ecx
add edx, 4
mov ecx, dword [ebp - 0x9648]
mov eax, ecx
shr eax, 6
sub ecx, eax
mov dword [ebp - 0x963c], edx
mov eax, dword [ebp - 0x9638]
mov dword [eax], ecx
add eax, 4
mov ecx, dword [ebp - 0x9644]
inc ecx
mov dword [ebp - 0x9638], eax
mov dword [ebp - 0x9644], ecx
mov dword [ebp - 0x9654], ecx
cmp ecx, 6
jne 0x464df0
mov eax, ecx
lea edx, [ebp - 0x2e28]
shl eax, 9
add eax, edx
mov edx, 1
mov dword [ebp - 0x9638], eax
mov dword [ebp - 0x9634], edx
jmp 0x464f5e
imul edi, ecx
cmp edi, 0x1000000
jae 0x464ee8
movzx eax, byte [ebx]
inc ebx
shl esi, 8
shl edi, 8
or esi, eax
cmp edi, 0x1000000
jb 0x464ed4
mov ecx, dword [ebp - 0x963c]
lea edx, [ebp - 0x2e28]
mov eax, 0x800
mov dword [ebp - 0x964c], ebx
sub eax, dword [ebp - 0x9630]
shr eax, 4
add eax, dword [ebp - 0x9630]
mov dword [ecx], eax
mov eax, 0x800
sub eax, dword [ebp - 0x9648]
mov ecx, dword [ebp - 0x9638]
shr eax, 6
add eax, dword [ebp - 0x9648]
mov dword [ebp - 0x9640], esi
mov dword [ecx], eax
mov ecx, dword [ebp - 0x9654]
mov eax, ecx
shl eax, 9
add eax, edx
mov dword [ebp - 0x9644], ecx
mov dword [ebp - 0x9638], eax
mov edx, 1
mov dword [ebp - 0x9634], edx
test ecx, ecx
jl 0x46505f
inc ecx
mov dword [ebp - 0x963c], ecx
nop word [eax + eax]
mov ecx, dword [eax + edx*4]
lea eax, [eax + edx*4]
mov dword [ebp - 0x9630], eax
xor edx, edx
shr edi, 0xb
mov eax, esi
div edi
cmp eax, ecx
jae 0x464fdc
imul edi, ecx
cmp edi, 0x1000000
jae 0x464fae
movzx eax, byte [ebx]
inc ebx
shl esi, 8
shl edi, 8
or esi, eax
cmp edi, 0x1000000
jb 0x464f94
mov dword [ebp - 0x964c], ebx
mov edx, dword [ebp - 0x9634]
mov ecx, 0x800
shl dword [ebp - 0x962c], 1
add edx, edx
mov dword [ebp - 0x9634], edx
mov edx, dword [ebp - 0x9630]
sub ecx, dword [edx]
shr ecx, 7
add ecx, dword [edx]
mov edx, dword [ebp - 0x9634]
jmp 0x465038
mov eax, ecx
imul eax, edi
sub esi, eax
mov eax, 0x800
sub eax, ecx
imul edi, eax
cmp edi, 0x1000000
jae 0x46500f
movzx eax, byte [ebx]
inc ebx
shl esi, 8
shl edi, 8
or esi, eax
cmp edi, 0x1000000
jb 0x464ff5
mov dword [ebp - 0x964c], ebx
mov eax, dword [ebp - 0x962c]
mov edx, dword [ebp - 0x9634]
add eax, eax
or eax, 1
add edx, edx
mov dword [ebp - 0x962c], eax
or edx, 1
mov eax, ecx
mov dword [ebp - 0x9634], edx
shr eax, 7
sub ecx, eax
sub dword [ebp - 0x963c], 1
mov eax, dword [ebp - 0x9630]
mov dword [eax], ecx
mov eax, dword [ebp - 0x9638]
jne 0x464f70
mov ecx, dword [ebp - 0x9644]
mov dword [ebp - 0x9640], esi
mov eax, dword [ebp - 0x962c]
cmp ecx, 6
jne 0x465073
cmp eax, 0x7f
je 0x4653e7
mov edx, dword [ecx*4 + 0xe7f73c]
add edx, eax
lea eax, [edx + 1]
movzx edx, al
mov eax, dword [ebp + edx*4 - 0x9a88]
mov dword [ebp - 0x963c], eax
test edx, edx
je 0x4650bf
mov ecx, edx
nop word [eax + eax]
mov eax, dword [ebp + ecx*4 - 0x9a8c]
mov dword [ebp + ecx*4 - 0x9a88], eax
sub ecx, 1
jne 0x4650a0
mov eax, dword [ebp - 0x963c]
mov dword [ebp - 0x9a88], eax
lea eax, [edx - 1]
mov dword [ebp - 0x9638], 0
movzx ecx, al
mov eax, 3
cmp ecx, 3
cmova ecx, eax
mov eax, dword [ebp - 0x9660]
shl eax, 2
xor edx, edx
or eax, ecx
shr edi, 0xb
shl ecx, 4
add ecx, dword [ebp - 0x965c]
movzx eax, al
mov dword [ebp - 0x9660], eax
lea eax, [ecx + ecx*2]
shl eax, 5
lea ecx, [ebp - 0x4628]
add ecx, eax
mov eax, dword [ebp - 0x963c]
mov dword [ebp - 0x9648], ecx
mov ecx, dword [ecx]
lea eax, [eax + eax*2]
shl eax, 5
add eax, dword [ebp - 0x9664]
mov dword [ebp - 0x9630], eax
mov dword [ebp - 0x962c], ecx
mov eax, dword [eax]
add ecx, eax
mov dword [ebp - 0x9644], eax
mov eax, esi
div edi
shr ecx, 1
cmp eax, ecx
jb 0x465205
mov eax, dword [ebp - 0x962c]
mov dword [ebp - 0x962c], eax
mov edx, dword [ebp - 0x9644]
lea ecx, [eax + edx]
shr ecx, 1
mov eax, ecx
imul eax, edi
sub esi, eax
mov eax, 0x800
sub eax, ecx
imul edi, eax
cmp edi, 0x1000000
jae 0x465192
movzx eax, byte [ebx]
inc ebx
shl esi, 8
shl edi, 8
or esi, eax
cmp edi, 0x1000000
jb 0x465178
mov dword [ebp - 0x964c], ebx
mov ecx, dword [ebp - 0x962c]
mov eax, ecx
shr eax, 6
sub ecx, eax
shr edi, 0xb
mov eax, dword [ebp - 0x9648]
inc dword [ebp - 0x9638]
mov dword [eax], ecx
mov eax, edx
mov ecx, dword [ebp - 0x9648]
shr eax, 3
add ecx, 4
sub edx, eax
mov dword [ebp - 0x9648], ecx
mov eax, dword [ebp - 0x9630]
mov ecx, dword [ecx]
mov dword [ebp - 0x962c], ecx
mov dword [eax], edx
add eax, 4
mov dword [ebp - 0x9630], eax
xor edx, edx
mov eax, dword [eax]
add ecx, eax
mov dword [ebp - 0x9644], eax
mov eax, esi
div edi
shr ecx, 1
cmp eax, ecx
mov eax, dword [ebp - 0x962c]
jae 0x465154
mov dword [ebp - 0x9640], esi
mov edx, dword [ebp - 0x9644]
mov ecx, dword [ebp - 0x962c]
lea ecx, [ecx + edx]
shr ecx, 1
imul ecx, edi
mov dword [ebp - 0x9634], ecx
cmp ecx, 0x1000000
jae 0x46524d
movzx eax, byte [ebx]
inc ebx
shl esi, 8
shl ecx, 8
or esi, eax
cmp ecx, 0x1000000
jb 0x465227
mov dword [ebp - 0x9634], ecx
mov dword [ebp - 0x964c], ebx
mov dword [ebp - 0x9640], esi
mov edi, dword [ebp - 0x9648]
mov eax, 0x800
sub eax, dword [ebp - 0x962c]
shr eax, 6
add eax, dword [ebp - 0x962c]
mov dword [edi], eax
mov eax, 0x800
mov edi, dword [ebp - 0x965c]
sub eax, edx
shr eax, 3
and edi, 7
add eax, edx
add edi, edi
mov edx, dword [ebp - 0x9630]
mov dword [edx], eax
mov eax, edi
mov edx, dword [ebp - 0x9638]
or eax, 1
cmp edx, 2
cmovae edi, eax
mov dword [ebp - 0x965c], edi
lea eax, [edx + edx*2]
shl eax, 5
lea edi, [ebp - 0x1e28]
add edi, eax
xor eax, eax
mov dword [ebp - 0x9630], edi
mov dword [ebp - 0x962c], eax
test edx, edx
je 0x4653aa
mov dword [ebp - 0x9648], edx
nop dword [eax]
shr ecx, 0xb
xor edx, edx
mov eax, esi
mov edi, dword [edi]
div ecx
cmp eax, edi
jae 0x465326
imul ecx, edi
cmp ecx, 0x1000000
jae 0x46530a
nop word [eax + eax]
movzx eax, byte [ebx]
inc ebx
shl esi, 8
shl ecx, 8
or esi, eax
cmp ecx, 0x1000000
jb 0x4652f0
mov dword [ebp - 0x964c], ebx
mov eax, dword [ebp - 0x962c]
mov edx, 0x800
sub edx, edi
add eax, eax
shr edx, 6
mov dword [ebp - 0x962c], eax
add edx, edi
jmp 0x46537a
mov eax, edi
imul eax, ecx
sub esi, eax
mov eax, 0x800
sub eax, edi
imul ecx, eax
cmp ecx, 0x1000000
jae 0x46535a
nop
movzx eax, byte [ebx]
inc ebx
shl esi, 8
shl ecx, 8
or esi, eax
cmp ecx, 0x1000000
jb 0x465340
mov dword [ebp - 0x964c], ebx
mov eax, dword [ebp - 0x962c]
mov edx, edi
add eax, eax
or eax, 1
mov dword [ebp - 0x962c], eax
mov eax, edi
shr eax, 6
sub edx, eax
mov eax, dword [ebp - 0x962c]
mov edi, dword [ebp - 0x9630]
mov dword [edi], edx
add edi, 4
sub dword [ebp - 0x9648], 1
mov dword [ebp - 0x9630], edi
jne 0x4652d0
mov edx, dword [ebp - 0x9638]
mov dword [ebp - 0x9634], ecx
mov dword [ebp - 0x9640], esi
add eax, dword [edx*4 + 0xe7f9f8]
mov dword [ebp - 0x962c], eax
je 0x4653dc
mov edi, dword [ebp - 0x9668]
push eax
mov eax, dword [ebp - 0x963c]
push eax
push edi
call fcn.0048b190
add esp, 0xc
add edi, dword [ebp - 0x962c]
mov dword [ebp - 0x9668], edi
mov eax, dword [ebp - 0x963c]
jmp 0x464aa1
push 0x8000
push 0
push dword [ebp - 0x9664]
call dword [sym.imp.KERNEL32.DLL_VirtualFree]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x9668]
xor ecx, ebp
sub eax, dword [ebp - 0x9684]
pop edi
pop esi
pop ebx
call fcn.004888df
mov esp, ebp
pop ebp
ret