Function at 0x4541c0
Capabilities:
Read .ini file

Disassembly:
sub esp, 0x87c
mov eax, dword [0x4c4004]
xor eax, esp
mov dword [esp + 0x874], eax
push ebx
push ebp
push esi
push edi
push 0
push dword [InitializeSListHead]
push 0x4f7c
push dword [0x4def88]
push 0
push 0
push 0x123
push 0x357
push 0x40000003
push 0
push 0x4ad740
push 0
call dword [sym.imp.user32.dll_CreateWindowExW]
mov ebx, dword [sym.imp.user32.dll_LoadImageW]
mov esi, eax
push 0x1000
push 0
push 0
push 1
push 0x4f7c
push dword [InitializeSListHead]
call ebx
mov ebp, dword [sym.imp.user32.dll_SendMessageW]
push eax
push 1
push 0x172
push esi
call ebp
mov esi, dword [0x4c5180]
mov edx, 0x4ad0a0
push 0x29d4
push ecx
push 0x61
push 0x64
push 0x1e
push 0x344
mov ecx, 0x4ae00c
or esi, 0x48
call fcn.004773a0
mov edx, esi
mov ecx, eax
call fcn.004617d0
add esp, 0x18
mov esi, eax
push 0x1000
push 0
push 0
push 1
push 0x29d4
push dword [InitializeSListHead]
call ebx
push eax
push 1
push 0xf7
push esi
call ebp
mov edx, 0x4ad480
mov ecx, 0x4b5168
call fcn.004773a0
mov edx, eax
mov ecx, esi
call fcn.0045f240
mov esi, dword [0x4c5180]
mov edx, 0x4ad0cc
push 0x29d5
push ecx
push 0x61
push 0x64
push 0x1e
push 0x344
mov ecx, 0x4ae00c
or esi, 0x48
call fcn.004773a0
mov edx, esi
mov ecx, eax
call fcn.004617d0
add esp, 0x18
push 0x1000
push 0
push 0
push 1
push 0x29d5
push dword [InitializeSListHead]
mov esi, eax
call ebx
push eax
push 1
push 0xf7
push esi
call ebp
mov edx, 0x4ad0dc
mov ecx, 0x4ae00c
call fcn.004773a0
mov edx, eax
mov ecx, esi
call fcn.0045f240
push 0x29d6
push ecx
push 0x28
push 0x64
push 0x87
push 0x344
mov edx, 0x4ad0d4
mov ecx, 0x4ae00c
call fcn.004773a0
mov edx, dword [0x4c5180]
mov ecx, eax
call fcn.004617d0
add esp, 0x18
mov edx, 0x4ad560
mov ecx, 0x4b5168
mov esi, eax
call fcn.004773a0
mov edx, eax
mov ecx, esi
call fcn.0045f240
mov edi, dword [sym.imp.user32.dll_EnableWindow]
push 0
push esi
call edi
push 0x29d7
push ecx
push 0x28
push 0x64
push 0xb7
push 0x344
mov edx, 0x4ad444
mov ecx, 0x4ae00c
call fcn.004773a0
mov edx, dword [0x4c5180]
mov ecx, eax
call fcn.004617d0
add esp, 0x18
mov edx, 0x4ad76c
mov ecx, 0x4b5168
mov esi, eax
call fcn.004773a0
mov edx, eax
mov ecx, esi
call fcn.0045f240
push 0
push esi
call edi
push 0x29d8
push ecx
push 0x28
push 0x64
push 0xe7
push 0x344
mov edx, 0x4ad560
mov ecx, 0x4ae00c
call fcn.004773a0
mov edx, dword [0x4c5180]
mov ecx, eax
call fcn.004617d0
add esp, 0x18
mov esi, eax
mov edx, 0x4ad76c
mov ecx, 0x4ae00c
call fcn.004773a0
mov edx, eax
mov ecx, esi
call fcn.0045f240
push 0
push esi
call edi
mov esi, dword [0x4c5180]
mov edx, 0x4ad774
push 0x29d9
push ecx
push 0x61
push 0x64
push 0x1cb
push 0x344
mov ecx, 0x4ae00c
or esi, 0x1440
call fcn.004773a0
mov edx, esi
mov ecx, eax
call fcn.004617d0
add esp, 0x18
mov esi, eax
push 0x1000
push 0
push 0
push 1
push 0x4e27
push dword [InitializeSListHead]
call ebx
push eax
push 1
push 0xf7
push esi
call ebp
mov edx, 0x4ad7bc
mov ecx, 0x4ae00c
call fcn.004773a0
mov edx, eax
mov ecx, esi
call fcn.0045f240
mov esi, dword [0x4c5180]
mov edx, 0x4ad774
push 0x29dc
push ecx
push 0x26
push 0x64
push 0x40
push 0x2ba
mov ecx, 0x4b5168
or esi, 0x40
call fcn.004773a0
mov edx, esi
mov ecx, eax
call fcn.004617d0
add esp, 0x18
mov esi, eax
push 0x1000
push 0
push 0
push 1
push 0x4f7a
push dword [InitializeSListHead]
call ebx
push eax
push 1
push 0xf7
push esi
call ebp
mov edx, 0x4ad774
mov ecx, 0x4b5168
call fcn.004773a0
mov edx, eax
mov ecx, esi
call fcn.0045f240
push 0x29dd
push ecx
push 0x27
push 0x64
push 0x6f
push 0x2ba
mov edx, 0x4ad7bc
mov ecx, 0x4b5168
call fcn.004773a0
mov edx, dword [0x4c5180]
mov ecx, eax
call fcn.004617d0
add esp, 0x18
mov edx, 0x4ad7bc
mov ecx, 0x4b5168
mov esi, eax
call fcn.004773a0
mov edx, eax
mov ecx, esi
call fcn.0045f240
mov esi, dword [0x4c5180]
mov edx, 0x4ad7c4
push 0x29de
push ecx
push 0x27
push 0x64
push 0x9e
push 0x2ba
mov ecx, 0x4b5168
or esi, 0x40
call fcn.004773a0
mov edx, esi
mov ecx, eax
call fcn.004617d0
add esp, 0x18
mov esi, eax
push 0x1000
push 0
push 0
push 1
push 0x4f79
push dword [InitializeSListHead]
call ebx
push eax
push 1
push 0xf7
push esi
call ebp
mov edx, 0x4ad7c4
mov ecx, 0x4b5168
call fcn.004773a0
mov edx, eax
mov ecx, esi
call fcn.0045f240
push 0x29df
push ecx
push 0x27
push 0x64
push 0xcd
push 0x2ba
mov edx, 0x4ad7dc
mov ecx, 0x4b5168
call fcn.004773a0
mov edx, dword [0x4c5180]
mov ecx, eax
call fcn.004617d0
add esp, 0x18
mov edx, 0x4ad7dc
mov ecx, 0x4b5168
mov esi, eax
call fcn.004773a0
mov edx, eax
mov ecx, esi
call fcn.0045f240
push 0
push dword [InitializeSListHead]
push 0x29e0
push dword [0x4def88]
push 0xb4
push 0x226
push 0x40
push 0x88
push 0x40008009
push 0
push 0x4ad750
push 0x200
mov eax, dword [sym.imp.user32.dll_CreateWindowExW]
call eax
push 0x10024
push 0
mov edi, eax
push 0x1036
push edi
call ebp
push 0
push 7
push 0x21
push 0x10
push 0x10
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
push 0x4e4f
push dword [InitializeSListHead]
mov esi, eax
call dword [sym.imp.user32.dll_LoadIconW]
push eax
push 0xffffffffffffffff
push esi
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push esi
push 1
push 0x1003
push edi
call ebp
mov edx, 0x4ad7e4
mov dword [esp + 0x84], 0xf
mov ecx, 0x4b5168
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0x122
call fcn.004773a0
mov dword [esp + 0x90], eax
lea eax, [esp + 0x84]
push eax
push 1
push 0x1061
push edi
call ebp
mov edx, 0x4ad7ec
mov dword [esp + 0x8c], 0xdc
mov ecx, 0x4b5168
mov dword [esp + 0x88], 1
call fcn.004773a0
mov dword [esp + 0x90], eax
lea eax, [esp + 0x84]
push eax
push 2
push 0x1061
push edi
call ebp
mov dword [0x4db71c], 0xb
mov dword [0x4db728], 0
mov dword [0x4db72c], 0
mov dword [0x4db724], 0
call fcn.00455300
push 0
push dword [InitializeSListHead]
mov edx, 0x4ad7f4
mov ecx, 0x4b5168
push 0x29e7
push dword [0x4def88]
push 0x1e
push 0x12c
push 0x1cc
push 0x88
push 0x40000000
call fcn.004773a0
mov esi, dword [sym.imp.user32.dll_CreateWindowExW]
push eax
push 0x4ad740
push 0
call esi
push 1
push dword [0x4deb60]
push 0x30
push eax
call ebp
push 0
push dword [InitializeSListHead]
push 0x29e8
push dword [0x4def88]
mov edx, 0x4ad80c
mov ecx, 0x4b5168
push 0x1e
push 0x12c
push 0x1ea
push 0x88
push 0x40000000
call fcn.004773a0
push eax
push 0x4ad740
push 0
call esi
push 1
push dword [0x4deb60]
push 0x30
push eax
call ebp
push 0
push dword [InitializeSListHead]
mov edx, 0x4ad838
mov ecx, 0x4b5168
push 0x29e9
push dword [0x4def88]
push 0x1e
push 0x12c
push 0x1cc
push 0x212
push 0x40000000
call fcn.004773a0
push eax
push 0x4ad740
push 0
call esi
push 1
push dword [0x4deb60]
push 0x30
push eax
call ebp
push 0
push dword [InitializeSListHead]
mov edx, 0x4ad840
mov ecx, 0x4b5168
push 0x29ea
push dword [0x4def88]
push 0x1e
push 0x12c
push 0x1ea
push 0x212
push 0x40000000
call fcn.004773a0
push eax
push 0x4ad740
push 0
call esi
push 1
push dword [0x4deb60]
push 0x30
push eax
call ebp
push 0
push dword [InitializeSListHead]
push 0x29e1
push dword [0x4def88]
push 0x1c2
push 0x4b0
push 0xa
push 0xa
push 0x4000800d
push 0x4ad29c
push 0x4ad750
push 0x300
call esi
push 0x10120
push 0
mov esi, eax
push 0x1036
push esi
call ebp
push 0
push 7
push 0x21
push 0x10
push 0x10
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
push 0x4f7b
push dword [InitializeSListHead]
mov edi, eax
call dword [sym.imp.user32.dll_LoadIconW]
push eax
push 0xffffffffffffffff
push edi
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push edi
push 3
push 0x1003
push esi
call ebp
push 0
push 7
push 0x21
push 0x10
push 0x10
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
push 0x4f5c
push dword [InitializeSListHead]
mov dword [0x4d2e5c], eax
call dword [sym.imp.user32.dll_LoadIconW]
push eax
push 0xffffffffffffffff
push dword [0x4d2e5c]
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push dword [0x4d2e5c]
push 1
push 0x1003
push esi
call ebp
mov edx, 0x4ad848
mov dword [esp + 0x10], 0xf
mov ecx, 0x4b5168
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0xb4
call fcn.004773a0
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x10]
push eax
push 0
push 0x1061
push esi
call ebp
mov edx, 0x4ad850
mov dword [esp + 0x18], 0x5a
mov ecx, 0x4b5168
mov dword [esp + 0x14], 1
call fcn.004773a0
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x10]
push eax
push 1
push 0x1061
push esi
call ebp
mov edx, 0x4ad858
mov dword [esp + 0x18], 0xf0
mov ecx, 0x4b5168
mov dword [esp + 0x14], 0
call fcn.004773a0
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x10]
push eax
push 2
push 0x1061
push esi
call ebp
mov edx, 0x4ad860
mov dword [esp + 0x18], 0x50
mov ecx, 0x4b5168
call fcn.004773a0
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x10]
push eax
push 3
push 0x1061
push esi
call ebp
mov edx, 0x4ad814
mov dword [esp + 0x18], 0x3c
mov ecx, 0x4b5168
call fcn.004773a0
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x10]
push eax
push 4
push 0x1061
push esi
call ebp
push 0
push 1
push 0x109d
push esi
mov dword [0x4db7f8], 0x10b
mov dword [0x4db804], 0
mov dword [0x4db808], 0
mov dword [0x4db800], 0
mov dword [0x4db838], 0x60
mov dword [0x4db83c], 0x1011
mov dword [0x4db880], 0
call ebp
push 0
push dword [InitializeSListHead]
mov eax, dword [sym.imp.user32.dll_CreateWindowExW]
push 0x29e6
push dword [0x4def88]
push 0x18
push 0x296
push 0xba
push 0x88
push 0x40000000
push 0
push 0x4ad798
push 0
call eax
push 0x90000
push 0
mov esi, eax
push 0x401
push esi
call ebp
push 0
push 1
push 0x404
push esi
call ebp
push 0
push dword [InitializeSListHead]
push 0x2a40
push dword [0x4def88]
push 0x18
push 0x296
push 0xba
push 0x88
push 0x40000000
push 0
push 0x4ad798
push 0
call dword [sym.imp.user32.dll_CreateWindowExW]
push 0x90000
push 0
mov esi, eax
push 0x401
push esi
call ebp
push 0
push 1
push 0x404
push esi
call ebp
push 0
push dword [InitializeSListHead]
push 0x29e2
push dword [0x4def88]
push 0
push 0
push 0xa
push 0xa
push 0x4000800d
push 0x4ad29c
push 0x4ad750
push 0x300
call dword [sym.imp.user32.dll_CreateWindowExW]
push 0x10124
push 0
mov esi, eax
push 0x1036
push esi
call ebp
push edi
push 3
push 0x1003
push esi
call ebp
mov edx, 0x4ad848
mov dword [esp + 0x3c], 0xf
mov ecx, 0x4b5168
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0x96
call fcn.004773a0
mov dword [esp + 0x48], eax
lea eax, [esp + 0x3c]
push eax
push 0
push 0x1061
push esi
call ebp
mov edx, 0x4ad830
mov dword [esp + 0x44], 0x50
mov ecx, 0x4b5168
mov dword [esp + 0x40], 1
call fcn.004773a0
mov dword [esp + 0x48], eax
lea eax, [esp + 0x3c]
push eax
push 1
push 0x1061
push esi
call ebp
mov edx, 0x4ad868
mov dword [esp + 0x44], 0x78
mov ecx, 0x4b5168
mov dword [esp + 0x40], 0
call fcn.004773a0
mov dword [esp + 0x48], eax
lea eax, [esp + 0x3c]
push eax
push 2
push 0x1061
push esi
call ebp
mov edx, 0x4ad858
mov dword [esp + 0x44], 0xe6
mov ecx, 0x4b5168
call fcn.004773a0
mov dword [esp + 0x48], eax
lea eax, [esp + 0x3c]
push eax
push 3
push 0x1061
push esi
call ebp
mov edx, 0x4ad870
mov dword [esp + 0x44], 0x1ae
mov ecx, 0x4b5168
call fcn.004773a0
mov dword [esp + 0x48], eax
lea eax, [esp + 0x3c]
push eax
push 4
push 0x1061
push esi
call ebp
mov dword [0x4db758], 0x10b
mov dword [0x4db764], 0
mov dword [0x4db768], 0
push 0
push 1
push 0x109d
push esi
mov dword [0x4db760], 0
mov dword [0x4db798], 0x60
mov dword [0x4db79c], 0x1011
mov dword [0x4db7e0], 0
call ebp
push 0
push dword [InitializeSListHead]
mov edi, dword [sym.imp.user32.dll_CreateWindowExW]
push 0x29eb
push dword [0x4def88]
push 0x1ae
push 0x296
push 0x50
push 0x88
push 0x40000008
push 0
push 0x4ad77c
push 0
call edi
push 0
push dword [InitializeSListHead]
push 0x29f2
push dword [0x4def88]
push 0
push 0
push 0x70
push 0xaa
push 0x40000003
push 0
push 0x4ad740
push 0
call edi
push 0x1000
push 0x10
push 0x10
push 1
push 0x2796
push dword [InitializeSListHead]
mov esi, eax
call ebx
push eax
push 1
push 0x172
push esi
call ebp
push 0
push dword [InitializeSListHead]
push 0x29f3
push dword [0x4def88]
push 0
push 0
push 0x8e
push 0xaa
push 0x40000003
push 0
push 0x4ad740
push 0
call edi
push 0x1000
push 0x10
push 0x10
push 1
push 0x2798
push dword [InitializeSListHead]
mov esi, eax
call ebx
push eax
push 1
push 0x172
push esi
call ebp
push 0
push dword [InitializeSListHead]
push 0x29f4
push dword [0x4def88]
push 0
push 0
push 0xac
push 0xaa
push 0x40000003
push 0
push 0x4ad740
push 0
call edi
push 0x1000
push 0x10
push 0x10
push 1
push 0x279a
push dword [InitializeSListHead]
mov esi, eax
call ebx
push eax
push 1
push 0x172
push esi
call ebp
push 0
push dword [InitializeSListHead]
mov edx, 0x4ad888
mov ecx, 0x4ae00c
push 0x29ef
push dword [0x4def88]
push 0x1e
push 0x15e
push 0x6a
push 0xc8
push 0x40000009
call fcn.004773a0
push eax
push 0x4ad9ec
push 0
call edi
push 1
push dword [0x4deb60]
push 0x30
push eax
call ebp
push 0
push dword [InitializeSListHead]
mov edx, 0x4ad890
mov ecx, 0x4ae00c
push 0x29f0
push dword [0x4def88]
push 0x1e
push 0x15e
push 0x88
push 0xc8
push 0x40000009
call fcn.004773a0
push eax
push 0x4ad9ec
push 0
call edi
push 1
push dword [0x4deb60]
push 0x30
push eax
call ebp
push 0
push dword [InitializeSListHead]
push 0x29f1
push dword [0x4def88]
push 0x1e
push 0x15e
push 0xa6
push 0xc8
push 0x40000009
push 0
push 0x4ad9ec
push 0
call edi
push 1
push dword [0x4deb60]
push 0x30
push eax
call ebp
call fcn.00458ec0
push 0x4ded80
push 1
push 0x4adfe8
push 0x4b51b8
call dword [sym.imp.kernel32.dll_GetPrivateProfileIntW]
mov ebx, dword [sym.imp.user32.dll_GetDlgItem]
sub eax, 1
je 0x454f3d
sub eax, 1
je 0x454f2d
sub eax, 1
jne 0x454f56
push eax
push 1
push 0xf1
push 0x29f1
jmp 0x454f4b
push 0
push 1
push 0xf1
push 0x29f0
jmp 0x454f4b
push 0
push 1
push 0xf1
push 0x29ef
push dword [0x4def88]
call ebx
push eax
call ebp
push 0
push dword [InitializeSListHead]
mov edx, 0x4ad878
mov ecx, 0x4b5168
push 0x29f6
push dword [0x4def88]
push 0x1e
push 0x1f4
push 0xd8
push 0xaa
push 0x40000000
call fcn.004773a0
push eax
push 0x4ad740
push 0
call edi
push 1
push dword [0x4deb60]
push 0x30
push eax
call ebp
push 0
push dword [InitializeSListHead]
push 0x29f7
push dword [0x4def88]
push 0x16
push 0x96
push 0xf0
push 0x136
push 0x40002002
push 0x4ad0e0
push 0x4ad78c
push 0x20000
call edi
push 1
push dword [0x4deb60]
push 0x30
push eax
call ebp
push 0
push dword [InitializeSListHead]
mov edx, 0x4ad880
mov ecx, 0x4b5168
push 0x29f8
push dword [0x4def88]
push 0x1e
push 0x32
push 0xf1
push 0x1d6
push 0x40000000
call fcn.004773a0
push eax
push 0x4ad740
push 0
call edi
push 1
push dword [0x4deb60]
push 0x30
push eax
call ebp
xor eax, eax
push 0x7ce
push eax
mov word [esp + 0xb8], ax
lea eax, [esp + 0xba]
push eax
call fcn.0048e770
add esp, 0xc
lea eax, [esp + 0xb0]
push 0x4ded80
push 0x3e8
push eax
push 0x4ad0e0
push 0x4b51cc
push 0x4b51b8
call dword [sym.imp.kernel32.dll_GetPrivateProfileStringW]
lea eax, [esp + 0xb0]
push eax
push 0x29f7
push dword [0x4def88]
call ebx
push eax
call dword [sym.imp.user32.dll_SetWindowTextW]
push 0
push dword [InitializeSListHead]
push 0x29da
push dword [0x4def88]
push 0x108
push 0x2cf
push 8
push 0x6c
push 0x44010000
push 0
push 0x4ad8c8
push 0
call edi
push 1
push dword [0x4deb60]
mov edi, eax
push 0x30
push edi
call ebp
push 0
push 1
push 0x21
push 0x10
push 0x10
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
push 0x4e28
push dword [InitializeSListHead]
mov esi, eax
call dword [sym.imp.user32.dll_LoadIconW]
push eax
push 0xffffffffffffffff
push esi
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push esi
call dword [sym.imp.COMCTL32.dll_ImageList_GetImageCount]
push esi
push 0
push 0x1303
push edi
call ebp
mov edx, 0x4ad888
mov dword [esp + 0x68], 3
mov ecx, 0x4b5168
mov dword [esp + 0x7c], 0
call fcn.004773a0
mov dword [esp + 0x74], eax
lea eax, [esp + 0x68]
push eax
push 0
push 0x133e
push edi
call ebp
mov edx, 0x4ad890
mov ecx, 0x4b5168
call fcn.004773a0
mov dword [esp + 0x74], eax
lea eax, [esp + 0x68]
push eax
push 1
push 0x133e
push edi
call ebp
mov edx, 0x4ad898
mov ecx, 0x4b5168
call fcn.004773a0
mov dword [esp + 0x74], eax
lea eax, [esp + 0x68]
push eax
push 2
push 0x133e
push edi
call ebp
push 0
push dword [InitializeSListHead]
push 0x29db
push edi
push 0xda
push 0x2b2
push 0x20
push 0xe
push 0x40000007
mov edx, 0x4ad8a0
mov ecx, 0x4b5168
call fcn.004773a0
mov esi, dword [sym.imp.user32.dll_CreateWindowExW]
push eax
push 0x4ad9ec
push 0
call esi
push 1
push dword [0x4deb60]
push 0x30
push 0x29db
push edi
call ebx
push eax
call ebp
push 0
push dword [InitializeSListHead]
mov edx, 0x4ad8a8
mov ecx, 0x4b5168
push 0x29e4
push edi
push 0xda
push 0x2b2
push 0x20
push 0xe
push 0x40000007
call fcn.004773a0
push eax
push 0x4ad9ec
push 0
call esi
push 1
push dword [0x4deb60]
push 0x30
push 0x29e4
push edi
call ebx
push eax
call ebp
push 0
push dword [InitializeSListHead]
mov edx, 0x4ad8b0
mov ecx, 0x4b5168
push 0x29e5
push edi
push 0xda
push 0x2b2
push 0x20
push 0xe
push 0x40000007
call fcn.004773a0
push eax
push 0x4ad9ec
push 0
call esi
push 1
push dword [0x4deb60]
push 0x30
push 0x29e5
push edi
call ebx
push eax
call ebp
push 0
push dword [InitializeSListHead]
mov edx, 0x4ad8b8
mov ecx, 0x4b5168
push 0x29e3
push dword [0x4def88]
push 0xda
push 0x2b2
push 0x20
push 0xe
push 0x40000007
call fcn.004773a0
push eax
push 0x4ad9ec
push 0
call esi
push 1
push dword [0x4deb60]
push 0x30
push 0x29e3
push dword [0x4def88]
call ebx
push eax
call ebp
mov ecx, dword [esp + 0x884]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0048d815
add esp, 0x87c
ret