Function at 0x419bc0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4bcf93
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xdc
mov eax, dword [0x51eea4]
xor eax, dword [esp + 0xe8]
push ebx
push ebp
push esi
push edi
mov dword [esp + 0xe8], eax
mov edi, ecx
mov ebp, dword [esp + 0xfc]
mov ecx, dword [ebp + 0xc]
xor ebx, ebx
cmp ecx, ebx
mov dword [esp + 0xf4], ebx
je 0x419c1b
mov eax, dword [ebp + 0x10]
sub eax, ecx
sar eax, 5
cmp eax, ebx
jne 0x419cb3
lea eax, [esp + 0x14]
push eax
call fcn.00408c00
mov ecx, eax
call fcn.004014f0
mov ecx, dword [edi + 0x28]
mov eax, dword [eax]
push 0x51ff63
push str.:_tag__component__has_no_subtags
add ecx, 0x44
push ecx
push 0x51ff84
mov ecx, eax
mov byte [esp + 0x104], 1
call fcn.00401560
mov ecx, eax
call fcn.00403370
mov ecx, eax
call fcn.00403390
mov ecx, eax
call fcn.00403f50
mov eax, dword [esp + 0x14]
cmp eax, ebx
mov byte [esp + 0xf4], 0
je 0x419c8f
mov edx, dword [eax + 4]
mov ecx, eax
add eax, 4
dec edx
mov dword [eax], edx
mov dword [esp + 0x18], edx
jne 0x419c8f
mov eax, dword [ecx]
push 1
call dword [eax]
cmp ebp, ebx
mov dword [esp + 0xf4], 0xffffffff
je 0x419cac
dec dword [ebp + 4]
jne 0x419cac
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx]
xor al, al
jmp 0x41a7f4
mov eax, dword [edi + 0x24]
cmp eax, ebx
je 0x419cc0
mov eax, dword [eax + 0x28]
mov dword [edi + 0x28], eax
mov esi, dword [ebp + 0xc]
mov ebp, dword [ebp + 0x10]
cmp esi, ebp
mov dword [esp + 0x18], ebp
je 0x41a560
mov eax, str.component
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419ce0
mov ecx, dword [esi + 0x14]
sub eax, edx
push eax
push str.component
push ecx
push ebx
mov ecx, esi
call fcn.00401470
test eax, eax
jne 0x419dc8
push 0x160
call fcn.004ad909
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov byte [esp + 0xf4], 2
je 0x419d2b
mov ecx, eax
call fcn.00414580
mov ebp, eax
jmp 0x419d2d
xor ebp, ebp
cmp ebp, ebx
mov dword [esp + 0x14], ebp
je 0x419d38
inc dword [ebp + 4]
mov dword [ebp + 0x24], edi
mov eax, dword [esi + 0x1c]
cmp eax, ebx
push ecx
mov ecx, esp
mov byte [esp + 0xf8], 3
mov dword [esp + 0x14], esp
mov dword [ecx], eax
je 0x419d56
inc dword [eax + 4]
mov ecx, ebp
call fcn.00419bc0
test al, al
je 0x419da1
mov eax, dword [edi + 0xe4]
mov ecx, dword [eax + 4]
lea ebx, [edi + 0xe0]
lea edx, [esp + 0x14]
push edx
push ecx
push eax
mov ecx, ebx
mov dword [esp + 0x1c], eax
call fcn.0040ea10
push 1
mov ecx, ebx
mov dword [esp + 0x20], eax
call fcn.004112b0
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov dword [edx + 4], eax
mov ecx, dword [eax + 4]
mov dword [ecx], eax
xor ebx, ebx
mov ecx, dword [ebp + 4]
dec ecx
mov eax, ecx
cmp eax, ebx
mov byte [esp + 0xf4], 0
mov dword [ebp + 4], ecx
jne 0x41a551
mov eax, dword [ebp]
push 1
mov ecx, ebp
call dword [eax]
jmp 0x41a551
mov eax, str.event
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419dd0
mov ecx, dword [esi + 0x14]
sub eax, edx
push eax
push str.event
push ecx
push ebx
mov ecx, esi
call fcn.00401470
test eax, eax
jne 0x419f59
mov byte [esp + 0x24], al
mov eax, 0x4f130c
mov dword [esp + 0x38], 0xf
mov dword [esp + 0x34], ebx
lea edx, [eax + 1]
jmp 0x419e10
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419e10
sub eax, edx
push eax
push 0x4f130c
lea ecx, [esp + 0x28]
call fcn.00402cd0
mov dword [esp + 0x10], ebx
push 0x14
mov byte [esp + 0xf8], 5
call fcn.004ad909
add esp, 4
mov dword [esp + 0x1c], eax
cmp eax, ebx
mov byte [esp + 0xf4], 6
je 0x419e74
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push ecx
mov dword [ecx], ebx
mov ecx, esp
mov dword [esp + 0x1c], esp
push ecx
mov dword [ecx], ebx
mov ecx, esp
mov dword [ecx], ebx
mov ecx, eax
mov dword [esp + 0x20], esp
call fcn.0040e4e0
mov ebp, eax
jmp 0x419e76
xor ebp, ebp
cmp ebp, ebx
mov dword [esp + 0x1c], ebp
je 0x419e81
inc dword [ebp + 4]
mov eax, dword [edi + 0x28]
push ebp
lea edx, [esp + 0x24]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0xffffffffffffffff
add eax, 0x44
push ebx
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push eax
mov byte [esp + 0x124], 7
mov byte [ecx + 4], 0
call fcn.00402aa0
mov eax, dword [esi + 0x1c]
cmp eax, ebx
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
mov dword [ecx], eax
je 0x419ec8
inc dword [eax + 4]
mov ecx, edi
call fcn.00415a10
test al, al
je 0x419f05
lea eax, [esp + 0x20]
push eax
lea ecx, [edi + 0x120]
call fcn.00414670
cmp ebp, ebx
je 0x419eea
inc dword [ebp + 4]
mov ecx, dword [eax]
cmp ecx, ebx
mov dword [eax], ebp
je 0x419f05
mov edx, dword [ecx + 4]
dec edx
mov eax, edx
cmp eax, ebx
mov dword [ecx + 4], edx
jne 0x419f05
mov edx, dword [ecx]
push 1
call dword [edx]
cmp ebp, ebx
mov byte [esp + 0xf4], 5
je 0x419f27
mov ecx, dword [ebp + 4]
dec ecx
mov eax, ecx
cmp eax, ebx
mov dword [ebp + 4], ecx
jne 0x419f27
mov eax, dword [ebp]
push 1
mov ecx, ebp
call dword [eax]
cmp dword [esp + 0x38], 0x10
mov byte [esp + 0xf4], 0
jb 0x419f43
mov ecx, dword [esp + 0x24]
push ecx
call fcn.004ade5d
add esp, 4
mov dword [esp + 0x38], 0xf
mov dword [esp + 0x34], ebx
mov byte [esp + 0x24], 0
jmp 0x41a551
mov eax, str.name
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419f61
sub eax, edx
mov edx, dword [esi + 0x14]
push eax
push str.name
push edx
push ebx
mov ecx, esi
call fcn.00401470
test eax, eax
jne 0x419f97
mov eax, dword [esi + 0x1c]
push 0xffffffffffffffff
push ebx
add eax, 0x24
push eax
lea ecx, [edi + 8]
call fcn.00402aa0
jmp 0x41a551
mov eax, str.layer
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x419fa0
sub eax, edx
push eax
mov eax, dword [esi + 0x14]
push str.layer
push eax
push ebx
mov ecx, esi
call fcn.00401470
test eax, eax
jne 0x419ff5
mov eax, dword [esi + 0x1c]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xffffffffffffffff
push ebx
add eax, 0x24
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push eax
mov byte [ecx + 4], 0
call fcn.00402aa0
call fcn.00410420
mov dword [edi + 0xc8], eax
jmp 0x41a54e
mov eax, str.type
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41a000
mov ecx, dword [esi + 0x14]
sub eax, edx
push eax
push str.type
push ecx
push ebx
mov ecx, esi
call fcn.00401470
test eax, eax
jne 0x41a036
mov eax, dword [esi + 0x1c]
add eax, 0x24
push eax
call fcn.00411e00
add esp, 4
mov dword [edi + 0x54], eax
jmp 0x41a551
push str.xcenter
push esi
call fcn.00401dc0
add esp, 8
test al, al
je 0x41a06d
mov eax, dword [esi + 0x1c]
sub esp, 0x1c
add eax, 0x24
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00402c40
call fcn.00410420
mov dword [edi + 0xbc], eax
jmp 0x41a54e
push str.ycenter
push esi
call fcn.00401dc0
add esp, 8
test al, al
je 0x41a0a4
mov eax, dword [esi + 0x1c]
sub esp, 0x1c
add eax, 0x24
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00402c40
call fcn.00410420
mov dword [edi + 0xc0], eax
jmp 0x41a54e
push str.hasfocus
push esi
call fcn.00401dc0
add esp, 8
test al, al
je 0x41a0e0
mov eax, dword [esi + 0x1c]
sub esp, 0x1c
add eax, 0x24
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00402c40
call fcn.00410420
add esp, 0x1c
cmp eax, ebx
setne dl
mov byte [edi + 0x4a], dl
jmp 0x41a551
push str.maxchar
push esi
call fcn.00401dc0
add esp, 8
test al, al
je 0x41a117
mov eax, dword [esi + 0x1c]
sub esp, 0x1c
add eax, 0x24
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00402c40
call fcn.00410420
mov dword [edi + 0xb8], eax
jmp 0x41a54e
push str.hint
push esi
call fcn.00401dc0
add esp, 8
test al, al
je 0x41a17f
mov eax, dword [esi + 0x1c]
sub esp, 0x1c
add eax, 0x24
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00402c40
call fcn.00416de0
lea ecx, [esp + 0x84]
push ecx
mov ecx, eax
call fcn.00411bc0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [edi + 0x98]
mov byte [esp + 0x100], 8
call fcn.00402aa0
lea ecx, [esp + 0x68]
mov byte [esp + 0xf4], 0
call fcn.00401b90
jmp 0x41a551
push str.forcehint
push esi
call fcn.00401dc0
add esp, 8
test al, al
je 0x41a19d
mov byte [edi + 0xc4], 1
jmp 0x41a551
push str.caption
push esi
call fcn.00401dc0
add esp, 8
test al, al
je 0x41a1ff
mov eax, dword [esi + 0x1c]
sub esp, 0x1c
add eax, 0x24
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00402c40
call fcn.00416de0
lea edx, [esp + 0x68]
push edx
mov ecx, eax
call fcn.00411bc0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [edi + 0x78]
mov byte [esp + 0x100], 9
call fcn.00402aa0
lea ecx, [esp + 0x4c]
mov byte [esp + 0xf4], 0
call fcn.00401b90
jmp 0x41a551
push str.align
push esi
call fcn.00401dc0
add esp, 8
test al, al
jne 0x41a531
push str.horizontalalign
push esi
call fcn.00401dc0
add esp, 8
test al, al
jne 0x41a531
push str.verticalalign
push esi
call fcn.00401dc0
add esp, 8
test al, al
je 0x41a25f
mov eax, dword [esi + 0x1c]
sub esp, 0x1c
add eax, 0x24
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00402c40
call fcn.00411f50
mov dword [edi + 0x64], eax
jmp 0x41a54e
push str.captioncolor
push esi
call fcn.00401dc0
add esp, 8
test al, al
je 0x41a29c
mov eax, dword [esi + 0x1c]
cmp dword [eax + 0x3c], 0x10
jb 0x41a27f
mov eax, dword [eax + 0x28]
jmp 0x41a282
add eax, 0x28
push ebx
lea ecx, [esp + 0x48]
push ecx
push eax
call fcn.004aedad
add esp, 0xc
mov dword [edi + 0xd4], eax
jmp 0x41a551
push str.captionshadowcolor
push esi
call fcn.00401dc0
add esp, 8
test al, al
je 0x41a2ee
mov eax, dword [esi + 0x1c]
cmp dword [eax + 0x3c], 0x10
jb 0x41a2bc
mov eax, dword [eax + 0x28]
jmp 0x41a2bf
add eax, 0x28
push ebx
lea edx, [esp + 0x40]
push edx
push eax
call fcn.004aedad
mov dword [edi + 0xd0], eax
mov eax, dword [edi + 0xcc]
add esp, 0xc
cmp eax, 0xffffffff
jne 0x41a551
mov dword [edi + 0xcc], ebx
jmp 0x41a551
push str.captionshadowtype
push esi
call fcn.00401dc0
add esp, 8
test al, al
je 0x41a325
mov eax, dword [esi + 0x1c]
sub esp, 0x1c
add eax, 0x24
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00402c40
call fcn.00410420
mov dword [edi + 0xcc], eax
jmp 0x41a54e
push str.captionscale
push esi
call fcn.00401dc0
add esp, 8
test al, al
je 0x41a36e
mov eax, dword [edi + 0x28]
mov cl, byte [eax + 0x40]
test cl, cl
jne 0x41a36e
mov eax, dword [esi + 0x1c]
sub esp, 0x1c
add eax, 0x24
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00402c40
call fcn.00410370
fstp dword [esp + 0x2c]
mov ecx, dword [esp + 0x2c]
mov dword [edi + 0xb4], ecx
jmp 0x41a54e
push 0x4f2a98
push esi
call fcn.00401dc0
add esp, 8
test al, al
je 0x41a3a2
mov eax, dword [esi + 0x1c]
sub esp, 0x1c
add eax, 0x24
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00402c40
call fcn.00410420
mov dword [edi + 0x70], eax
jmp 0x41a54e
push str.font
push esi
call fcn.00401dc0
add esp, 8
test al, al
je 0x41a3d9
mov eax, dword [esi + 0x1c]
sub esp, 0x1c
add eax, 0x24
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00402c40
call fcn.00410420
mov dword [edi + 0x94], eax
jmp 0x41a54e
push str.width
push esi
call fcn.00401dc0
add esp, 8
test al, al
je 0x41a40d
mov eax, dword [esi + 0x1c]
sub esp, 0x1c
add eax, 0x24
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00402c40
call fcn.00410420
mov dword [edi + 0x68], eax
jmp 0x41a54e
push str.height
push esi
call fcn.00401dc0
add esp, 8
test al, al
je 0x41a441
mov eax, dword [esi + 0x1c]
sub esp, 0x1c
add eax, 0x24
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00402c40
call fcn.00410420
mov dword [edi + 0x6c], eax
jmp 0x41a54e
push str.enabled
push esi
call fcn.00401dc0
add esp, 8
test al, al
je 0x41a47d
mov eax, dword [esi + 0x1c]
sub esp, 0x1c
add eax, 0x24
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00402c40
call fcn.00410420
add esp, 0x1c
cmp eax, ebx
setne dl
mov byte [edi + 0x74], dl
jmp 0x41a551
push str.visible
push esi
call fcn.00401dc0
add esp, 8
test al, al
je 0x41a4b9
mov eax, dword [esi + 0x1c]
sub esp, 0x1c
add eax, 0x24
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00402c40
call fcn.00410420
add esp, 0x1c
cmp eax, ebx
setne al
mov byte [edi + 0x75], al
jmp 0x41a551
push str.hotkey
push esi
call fcn.00401dc0
add esp, 8
test al, al
je 0x41a4f8
mov eax, dword [esi + 0x1c]
sub esp, 0x1c
add eax, 0x24
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00402c40
call fcn.0040f790
mov ecx, eax
call fcn.0041e280
mov ecx, dword [eax]
call fcn.0041fd20
mov dword [edi + 0x5c], eax
jmp 0x41a551
push str.cursor
push esi
call fcn.00401dc0
add esp, 8
test al, al
je 0x41a551
mov eax, dword [esi + 0x1c]
sub esp, 0x1c
add eax, 0x24
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00402c40
call fcn.00410420
add esp, 0x1c
push eax
mov ecx, edi
call fcn.0040d9b0
jmp 0x41a551
mov eax, dword [esi + 0x1c]
sub esp, 0x1c
add eax, 0x24
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00402c40
call fcn.00411f50
mov dword [edi + 0x60], eax
add esp, 0x1c
mov eax, dword [esp + 0x18]
add esi, 0x20
cmp esi, eax
jne 0x419cd2
push 0xffffd8f0
push 0xffffd8f0
push 8
mov ecx, edi
call fcn.00419420
cmp dword [edi + 0xd8], ebx
je 0x41a5c7
mov eax, dword [edi + 0xe4]
cmp eax, ebx
jne 0x41a589
xor esi, esi
jmp 0x41a58b
mov esi, dword [eax]
mov ebp, dword [edi + 0xe4]
cmp esi, ebp
je 0x41a5c7
mov eax, dword [esi + 8]
cmp dword [eax + 0xd8], ebx
je 0x41a5c1
mov eax, dword [eax + 0xd8]
cmp eax, ebx
push ecx
mov ecx, esp
mov dword [esp + 0x40], esp
mov dword [ecx], eax
je 0x41a5b6
inc dword [eax + 4]
mov ecx, dword [edi + 0xd8]
mov edx, dword [ecx]
call dword [edx + 8]
mov esi, dword [esi]
cmp esi, ebp
jne 0x41a595
cmp dword [edi + 0x54], 3
jne 0x41a7d1
push 0x1e8
call fcn.004ad909
add esp, 4
mov dword [esp + 0x3c], eax
cmp eax, ebx
mov byte [esp + 0xf4], 0xa
je 0x41a5f7
mov ecx, eax
call fcn.0042dd20
jmp 0x41a5f9
xor eax, eax
cmp eax, ebx
mov byte [esp + 0xf4], 0
je 0x41a608
inc dword [eax + 4]
mov ecx, dword [edi + 0xec]
cmp ecx, ebx
mov dword [edi + 0xec], eax
je 0x41a62b
mov edx, dword [ecx + 4]
dec edx
mov eax, edx
cmp eax, ebx
mov dword [ecx + 4], edx
jne 0x41a62b
mov eax, dword [ecx]
push 1
call dword [eax]
call fcn.00416de0
mov ecx, dword [edi + 0x94]
push ecx
lea edx, [esp + 0x1c]
push edx
mov ecx, eax
call fcn.0040de20
mov bl, 0xb
mov eax, 0x4f2a24
mov byte [esp + 0xf4], bl
mov dword [esp + 0x38], 0xf
mov dword [esp + 0x34], 0
mov byte [esp + 0x24], 0
lea ecx, [eax + 1]
lea esp, [esp]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41a670
sub eax, ecx
push eax
push 0x4f2a24
lea ecx, [esp + 0x28]
call fcn.00402cd0
mov eax, dword [edi + 0xb4]
mov ebp, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x48]
push ecx
lea edx, [esp + 0x28]
push edx
lea eax, [esp + 0x48]
push eax
mov ecx, ebp
mov byte [esp + 0x104], 0xc
call fcn.00414ac0
mov ecx, eax
call fcn.0040dd90
cmp dword [esp + 0x38], 0x10
mov byte [esp + 0xf4], bl
jb 0x41a6d3
mov ecx, dword [esp + 0x24]
push ecx
call fcn.004ade5d
add esp, 4
push 1
lea ecx, [esp + 0x48]
call fcn.0040dc90
fld dword [eax]
fdiv dword [0x4f2a18]
fstp dword [esp + 0x14]
fld dword [esp + 0x14]
fcomp dword [0x4f1a10]
fnstsw ax
test ah, 5
mov eax, 0x3f8ccccd
jnp 0x41a704
mov eax, dword [esp + 0x14]
mov esi, dword [edi + 0xec]
push 0xbf800000
push 0xbf800000
push eax
push 0
lea ecx, [esp + 0x54]
call fcn.0040dc90
mov edx, dword [eax]
push edx
lea ecx, [esp + 0x94]
call fcn.00422f90
push eax
mov ecx, esi
call fcn.0042adf0
mov eax, dword [edi + 0x8c]
push 0x1e8
mov dword [edi + 0xf0], eax
call fcn.004ad909
add esp, 4
mov dword [esp + 0x3c], eax
test eax, eax
mov byte [esp + 0xf4], 0xd
je 0x41a769
mov ecx, eax
call fcn.0042dd20
jmp 0x41a76b
xor eax, eax
test eax, eax
mov byte [esp + 0xf4], bl
je 0x41a779
inc dword [eax + 4]
mov ecx, dword [edi + 0xf4]
test ecx, ecx
mov dword [edi + 0xf4], eax
je 0x41a79c
mov edx, dword [ecx + 4]
dec edx
mov eax, edx
test eax, eax
mov dword [ecx + 4], edx
jne 0x41a79c
mov eax, dword [ecx]
push 1
call dword [eax]
mov edi, dword [edi + 0xec]
push 1
push 1
push 0
mov ecx, edi
call fcn.00424960
test ebp, ebp
mov byte [esp + 0xf4], 0
je 0x41a7d1
mov ecx, dword [ebp + 4]
dec ecx
mov eax, ecx
test eax, eax
mov dword [ebp + 4], ecx
jne 0x41a7d1
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx]
mov ecx, dword [esp + 0xfc]
mov eax, dword [ecx + 4]
dec eax
mov dword [esp + 0xf4], 0xffffffff
mov dword [ecx + 4], eax
jne 0x41a7f2
mov eax, dword [ecx]
push 1
call dword [eax]
mov al, 1
mov ecx, dword [esp + 0xec]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0xe8]
xor ecx, dword [esp + 0xf8]
call fcn.004ae650
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xe8
ret 4