Function at 0x10068310
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0xa30
mov eax, dword [0x101b11c0]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x101fbf6d], 0
push esi
push edi
je 0x10069dbc
push 1
mov eax, 0x635fd0
call eax
mov eax, dword [0x1032a2e8]
add esp, 4
cmp byte [0x101f7c28], 1
xorps xmm0, xmm0
jne 0x10068389
test eax, eax
je 0x1006838d
movd xmm0, dword [0xe61e58]
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0xe7c3d8]
mulss xmm0, dword [0x101a27e8]
subss xmm0, dword [0x101a36f0]
test eax, eax
jne 0x10068392
call fcn.100b7ec0
cmp byte [0x101f7c29], 1
jne 0x100683fc
addss xmm0, xmm0
movss dword [ebp - 0x9f8], xmm0
addss xmm0, dword [0x101a3818]
cvttss2si eax, xmm0
mov dword [0x101f7c14], eax
call fcn.1007c710
cmp al, 1
jne 0x100683da
movss xmm0, dword [ebp - 0x9f8]
addss xmm0, dword [0x101a367c]
cvttss2si eax, xmm0
mov dword [0x101f7c14], eax
call fcn.1007c830
cmp al, 1
jne 0x100683fc
movss xmm0, dword [ebp - 0x9f8]
addss xmm0, dword [0x101a33fc]
cvttss2si eax, xmm0
mov dword [0x101f7c14], eax
cmp byte [0x101f7c2a], 1
movss xmm0, dword [0x101a3340]
movss dword [ebp - 0x9ec], xmm0
jne 0x100685e7
push 1
call dword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x100685d0
mov esi, dword [0x101f7c14]
movd xmm2, dword [0x879340c]
mov edi, dword [0x101f7c18]
mov edx, dword [0x101f7c1c]
movd xmm1, esi
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm2, xmm2
movd xmm0, edi
comiss xmm1, xmm2
movd xmm3, edx
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm3, xmm3
ja 0x100684b5
addss xmm1, xmm3
comiss xmm2, xmm1
ja 0x100684b5
movd xmm1, dword [0x8793410]
cvtdq2ps xmm1, xmm1
comiss xmm0, xmm1
ja 0x100684b5
addss xmm0, dword [0x101a3340]
comiss xmm1, xmm0
ja 0x100684b5
mov cl, byte [0x101f7aa0]
test cl, cl
jne 0x100684c3
mov cl, 1
mov byte [0x101f7aa0], cl
movzx eax, word [0x879340c]
mov word [0x101f7aa2], ax
movzx eax, word [0x8793410]
mov word [0x101f7aa4], ax
jmp 0x100684bb
mov cl, byte [0x101f7aa0]
test cl, cl
je 0x100685e7
cmp byte [0x101f7c29], 0
jne 0x100685e7
cmp dword [0xe61e58], 0x550
jl 0x100684f4
cmp dword [0x1032a2e8], 0
je 0x100684f4
lea eax, [edx + 0x2c1]
movd xmm2, eax
cvtdq2ps xmm2, xmm2
jmp 0x100684fc
movss xmm2, dword [0x101a384c]
cmp dword [0x101f7c24], 2
je 0x10068551
mov ecx, dword [0x101f7c20]
cmp ecx, 0xb4
jge 0x1006851f
lea eax, [ecx + ecx]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
jmp 0x10068559
cmp ecx, 0x190
jle 0x1006853f
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
movaps xmm0, xmm1
divss xmm0, dword [0x101a2968]
subss xmm1, xmm0
jmp 0x10068559
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
sub ecx, eax
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
jmp 0x10068559
movss xmm1, dword [0x101a3534]
movsx eax, word [0x101f7aa2]
mov ecx, 1
sub esi, eax
movsx eax, word [0x101f7aa4]
add esi, dword [0x879340c]
sub edi, eax
mov dword [0x101f7c14], esi
add edi, dword [0x8793410]
cmp esi, ecx
cmovl esi, ecx
cmp edi, ecx
cmovl edi, ecx
movd xmm0, esi
cvtdq2ps xmm0, xmm0
minss xmm2, xmm0
movd xmm0, edi
cvtdq2ps xmm0, xmm0
cvttss2si eax, xmm2
minss xmm1, xmm0
mov dword [0x101f7c14], eax
cvttss2si eax, xmm1
mov dword [0x101f7c18], eax
movzx eax, word [0x879340c]
mov word [0x101f7aa2], ax
movzx eax, word [0x8793410]
mov word [0x101f7aa4], ax
jmp 0x100685e7
cmp byte [0x101f7aa0], 0
je 0x100685e7
mov byte [0x101f7aa0], 0
mov byte [0x101f7c29], 0
push 1
mov eax, 0x635fd0
call eax
mov eax, dword [0x101f7c24]
add esp, 4
mov esi, 0x790b50
sub eax, 0
je 0x1006892d
sub eax, 2
je 0x100687ff
movd xmm0, dword [0x101f7c20]
cvtdq2ps xmm0, xmm0
sub eax, 1
je 0x100687c4
sub esp, 0x10
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x101f7c18]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x433e0000
movss dword [esp + 4], xmm0
movd xmm0, dword [0x101f7c14]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7a5a
call esi
movd xmm0, dword [0x101f7c20]
add esp, 4
cvtdq2ps xmm0, xmm0
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x101f7c18]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x433e0000
movss dword [esp + 4], xmm0
movd xmm0, dword [0x101f7c14]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7a7a
call esi
movd xmm0, dword [0x101f7c20]
add esp, 4
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x101a33dc]
subss xmm0, dword [0x101a3390]
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x101f7c18]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x41a80000
addss xmm0, dword [0x101a33dc]
movss dword [esp + 4], xmm0
movd xmm0, dword [0x101f7c14]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7a7b
call esi
movd xmm0, dword [0x101f7c20]
add esp, 4
cvtdq2ps xmm0, xmm0
movd xmm1, dword [0x101f7c1c]
subss xmm0, dword [0x101a33dc]
cvtdq2ps xmm1, xmm1
subss xmm0, dword [0x101a3390]
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x101f7c18]
cvtdq2ps xmm0, xmm0
mov dword [esp + 8], 0x41a80000
addss xmm0, dword [0x101a33dc]
movss dword [esp + 4], xmm0
movd xmm0, dword [0x101f7c14]
cvtdq2ps xmm0, xmm0
addss xmm1, xmm0
subss xmm1, dword [0x101a330c]
movss dword [esp], xmm1
push 0x7a7c
call esi
movd xmm1, dword [0x101f7c20]
add esp, 4
movd xmm0, dword [0x101f7c18]
cvtdq2ps xmm0, xmm0
mov dword [esp + 0xc], 0x42340000
mov dword [esp + 8], 0x433e0000
cvtdq2ps xmm1, xmm1
addss xmm1, xmm0
movd xmm0, dword [0x101f7c14]
cvtdq2ps xmm0, xmm0
subss xmm1, dword [0x101a3390]
movss dword [esp + 4], xmm1
movss dword [esp], xmm0
push 0x7a7d
jmp 0x10068978
movd xmm3, dword [0x101f7c1c]
sub esp, 0xc
movd xmm2, dword [0x101f7c18]
movd xmm1, dword [0x101f7c14]
cvtdq2ps xmm3, xmm3
mov dword [esp + 4], 0
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
movss dword [esp], xmm0
call fcn.10037110
jmp 0x1006897d
movd xmm2, dword [0x101f7c18]
movd xmm1, dword [0x101f7c14]
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
call fcn.10010540
movd xmm0, dword [0x101f7c18]
cvtdq2ps xmm0, xmm0
push 0x1019a6eb
sub esp, 8
addss xmm0, dword [0x101a3318]
movss dword [esp + 4], xmm0
movd xmm0, dword [0x101f7c14]
cvtdq2pd xmm0, xmm0
addsd xmm0, qword [0x101a3008]
subsd xmm0, qword [0x101a2dc8]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push dword [0x1058ef00]
push 0x10358368
call fcn.10011b20
add esp, 0x14
test al, al
je 0x1006887c
call fcn.10069dd0
mov esi, dword [0xe8c58c]
mov edi, 0x41fe10
call edi
push esi
mov edx, 0x420120
mov ecx, eax
call edx
push 0xff
push 0x19
push 0xbd
push 0xff
call edi
mov edx, 0x420040
mov ecx, eax
call edx
push 0
push 0
push 0
push 0
call edi
mov edx, 0x4200b0
mov ecx, eax
call edx
push 0x15e
mov ecx, 0x101c3610
call fcn.10046fb0
movd xmm0, dword [0x101f7c18]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x9fc], eax
mov eax, 0x41fe10
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x101a2d70]
cvttsd2si edi, xmm0
movd xmm0, dword [0x101f7c14]
cvtdq2ps xmm0, xmm0
cvtps2pd xmm0, xmm0
addsd xmm0, qword [0x101a2ea8]
cvttsd2si esi, xmm0
call eax
push 0
push 1
push 0
push 0
mov edx, 0x420150
mov ecx, eax
push dword [ebp - 0x9fc]
push edi
push esi
call edx
jmp 0x1006897d
movd xmm0, dword [0x101f7c20]
sub esp, 0x10
cvtdq2ps xmm0, xmm0
movss dword [esp + 0xc], xmm0
movd xmm0, dword [0x101f7c1c]
cvtdq2ps xmm0, xmm0
movss dword [esp + 8], xmm0
movd xmm0, dword [0x101f7c18]
cvtdq2ps xmm0, xmm0
movss dword [esp + 4], xmm0
movd xmm0, dword [0x101f7c14]
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0xf058
call esi
add esp, 0x14
cmp dword [0x101f7c24], 2
je 0x10068a94
cmp byte [0x101f7b58], 0
jne 0x100689b7
push 0x779250
push 0x779150
push 1
push 0xac
push 0x101f7aac
mov eax, 0x9cfa13
call eax
mov byte [0x101f7b58], 1
push 0
push 0
push 1
push 0x7ec5
push 1
mov eax, 0x779350
mov ecx, 0x101f7aac
call eax
movd xmm0, dword [0x101f7c18]
mov ecx, 0x101f7aac
cvtdq2ps xmm0, xmm0
push 0x1d
push 0x24
addss xmm0, dword [0x101a32a0]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7c1c]
add eax, dword [0x101f7c14]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm0, dword [0x101a3378]
cvttss2si eax, xmm0
push eax
mov eax, 0x779410
call eax
push 0
mov eax, 0x7798f0
mov ecx, 0x101f7aac
call eax
mov eax, 0x779860
mov ecx, 0x101f7aac
call eax
cmp al, 1
jne 0x10068a3a
call fcn.10069dd0
push 0x15e
mov ecx, 0x101c3610
call fcn.10046fb0
movd xmm0, dword [0x101f7c14]
push eax
mov eax, dword [0x101f7c18]
cvtdq2ps xmm0, xmm0
push 3
push 0xd2
add eax, 0xd
push eax
subss xmm0, dword [0x101a32a0]
cvttss2si eax, xmm0
push eax
push 0xff19bdff
push 0x101f9630
call fcn.1007c410
movss xmm0, dword [0x101a32f0]
add esp, 0x1c
movss dword [ebp - 0x9ec], xmm0
push 0x15f
mov ecx, 0x101c3610
call fcn.10046fb0
movd xmm0, dword [0x101f7c18]
cvtdq2ps xmm0, xmm0
push eax
push 1
push 0x1e
addss xmm0, dword [ebp - 0x9ec]
addss xmm0, dword [0x101a335c]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7c14]
add eax, 0x14
push eax
push 0xffffffffffffffff
push 0x101f9630
call fcn.1007c410
xor eax, eax
add esp, 0x1c
cmp byte [0x101f7c44], al
mov ecx, 0x101c3610
sete al
add eax, 0x160
push eax
call fcn.10046fb0
movd xmm0, dword [0x101f7c18]
mov ecx, 0xff38ffac
cvtdq2ps xmm0, xmm0
push eax
push 1
push 0x1e
addss xmm0, dword [ebp - 0x9ec]
addss xmm0, dword [0x101a335c]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7c14]
add eax, 0x2e
cmp byte [0x101f7c44], 0
push eax
mov eax, 0xff0000e1
cmovne eax, ecx
push eax
push 0x101f9630
call fcn.1007c410
movd xmm3, dword [0x101f7c18]
add esp, 0x1c
movd xmm2, dword [0x101f7c14]
mov ecx, 0x101f9630
cvtdq2ps xmm3, xmm3
push 0xa0
cvtdq2ps xmm2, xmm2
addss xmm3, dword [ebp - 0x9ec]
addss xmm3, dword [0x101a3378]
call fcn.10079950
push 0x162
mov ecx, 0x101c3610
call fcn.10046fb0
movd xmm0, dword [0x101f7c18]
cvtdq2ps xmm0, xmm0
push eax
push 3
push 0x32
addss xmm0, dword [ebp - 0x9ec]
addss xmm0, dword [0x101a33bc]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7c14]
add eax, 5
push eax
push 0xffffffffffffffff
push 0x101f9630
call fcn.1007c410
movd xmm0, dword [0x101f7c18]
add esp, 0x1c
cvtdq2ps xmm0, xmm0
push 0x1019ef10
push 3
push 0x32
addss xmm0, dword [ebp - 0x9ec]
addss xmm0, dword [0x101a33bc]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7c14]
add eax, 0x2d
push eax
push 0xffffffffffffffff
push 0x101f9630
call fcn.1007c410
movd xmm0, dword [0x101f7c18]
add esp, 0x1c
cvtdq2ps xmm0, xmm0
push 0x1019ef14
push 3
push 0x32
addss xmm0, dword [ebp - 0x9ec]
addss xmm0, dword [0x101a33bc]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7c14]
add eax, 0x5f
push eax
push 0xffffffffffffffff
push 0x101f9630
call fcn.1007c410
movd xmm0, dword [0x101f7c18]
add esp, 0x1c
cvtdq2ps xmm0, xmm0
push 0x1019ef18
push 3
push 0x32
addss xmm0, dword [ebp - 0x9ec]
addss xmm0, dword [0x101a33bc]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7c14]
add eax, 0x73
push eax
push 0xffffffffffffffff
push 0x101f9630
call fcn.1007c410
movd xmm0, dword [0x101f7c18]
add esp, 0x1c
cvtdq2ps xmm0, xmm0
push str.Count
push 3
push 0x32
addss xmm0, dword [ebp - 0x9ec]
addss xmm0, dword [0x101a33bc]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7c14]
add eax, 0x8c
push eax
push 0xffffffffffffffff
push 0x101f9630
call fcn.1007c410
movd xmm3, dword [0x101f7c18]
add esp, 0x1c
movd xmm2, dword [0x101f7c14]
mov ecx, 0x101f9630
cvtdq2ps xmm3, xmm3
push 0xa0
cvtdq2ps xmm2, xmm2
addss xmm3, dword [ebp - 0x9ec]
addss xmm3, dword [0x101a33cc]
call fcn.10079950
mov ecx, dword [0x101f7a78]
cmp ecx, 1
jle 0x10068d64
movd xmm0, dword [0x101f7c18]
mov eax, dword [0x101f7a74]
cvtdq2ps xmm0, xmm0
push ecx
inc eax
push eax
push 0x1019ef24
push 3
addss xmm0, dword [ebp - 0x9ec]
push 0x14
addss xmm0, dword [0x101a3768]
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7c14]
add eax, 0x59
push eax
push 0xff19bdff
push 0x101f9630
call fcn.1007c410
mov ecx, dword [0x101f7a78]
add esp, 0x24
mov eax, dword [0x101f7a74]
mov edi, 0x790e40
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
inc eax
movss xmm1, dword [0x101a3760]
movsd xmm2, qword [0x101a2ce8]
cmp eax, 1
jle 0x10069019
movd xmm0, dword [0x101f7c18]
cvtdq2ps xmm0, xmm0
push 0x17
push 0x14
addss xmm0, xmm1
addss xmm0, dword [ebp - 0x9ec]
cvttss2si eax, xmm0
push eax
mov eax, 0x55555556
imul dword [0x101f7c1c]
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, dword [0x101f7c14]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, xmm2
addsd xmm0, qword [0x101a2c60]
cvttsd2si eax, xmm0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x10068f7c
cmp byte [0x101f7aa0], 0
jne 0x10068ef5
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x10068ef5
cmp byte [0x8793386], 0
je 0x10068ef5
call esi
mov ecx, dword [0x101f7c10]
add ecx, 0xfa
cmp eax, ecx
jb 0x10068ef5
movd xmm0, dword [0x101f7c18]
mov eax, 0x55555556
imul dword [0x101f7c1c]
cvtdq2ps xmm0, xmm0
sub esp, 0x18
mov eax, edx
addss xmm0, dword [0x101a3760]
shr eax, 0x1f
mov dword [esp + 0x14], 0x42380000
add eax, edx
add eax, dword [0x101f7c14]
mov dword [esp + 0x10], 0
addss xmm0, dword [ebp - 0x9ec]
mov dword [esp + 0xc], 0x41b80000
mov dword [esp + 8], 0x41a00000
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a2ce8]
addsd xmm0, qword [0x101a2c60]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7e56
call edi
add esp, 0x1c
mov eax, 0x83c080
call eax
mov eax, dword [0x101f7a74]
cmp eax, 1
jge 0x10068ee3
mov dword [0x101f7a74], 1
call esi
mov dword [0x101f7c10], eax
jmp 0x10068f7c
dec eax
mov dword [0x101f7a74], eax
call esi
mov dword [0x101f7c10], eax
jmp 0x10068f7c
movd xmm0, dword [0x101f7c18]
mov eax, 0x55555556
imul dword [0x101f7c1c]
cvtdq2ps xmm0, xmm0
sub esp, 0x18
mov eax, edx
addss xmm0, dword [0x101a3760]
shr eax, 0x1f
mov dword [esp + 0x14], 0x41b80000
add eax, edx
add eax, dword [0x101f7c14]
mov dword [esp + 0x10], 0
addss xmm0, dword [ebp - 0x9ec]
mov dword [esp + 0xc], 0x41b80000
mov dword [esp + 8], 0x41a00000
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a2ce8]
addsd xmm0, qword [0x101a2c60]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7e56
call edi
add esp, 0x1c
movd xmm0, dword [0x101f7c18]
mov eax, 0x55555556
imul dword [0x101f7c1c]
cvtdq2ps xmm0, xmm0
sub esp, 0x18
mov eax, edx
addss xmm0, dword [0x101a3760]
shr eax, 0x1f
mov dword [esp + 0x14], 0
add eax, edx
add eax, dword [0x101f7c14]
mov dword [esp + 0x10], 0
addss xmm0, dword [ebp - 0x9ec]
mov dword [esp + 0xc], 0x41b80000
mov dword [esp + 8], 0x41a00000
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a2ce8]
addsd xmm0, qword [0x101a2c60]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7e56
call edi
mov ecx, dword [0x101f7a78]
add esp, 0x1c
movss xmm1, dword [0x101a3760]
movsd xmm2, qword [0x101a2ce8]
mov eax, dword [0x101f7a74]
inc eax
cmp eax, ecx
jge 0x1006929d
movd xmm0, dword [0x101f7c18]
cvtdq2ps xmm0, xmm0
push 0x17
push 0x14
addss xmm0, xmm1
addss xmm0, dword [ebp - 0x9ec]
cvttss2si eax, xmm0
push eax
mov eax, 0x55555556
imul dword [0x101f7c1c]
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, dword [0x101f7c14]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, xmm2
addsd xmm0, qword [0x101a2ef0]
cvttsd2si eax, xmm0
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x10069216
cmp byte [0x101f7aa0], 0
jne 0x1006918f
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1006918f
cmp byte [0x8793386], 0
je 0x1006918f
call esi
mov ecx, dword [0x101f7c10]
add ecx, 0xfa
cmp eax, ecx
jb 0x1006918f
movd xmm0, dword [0x101f7c18]
mov eax, 0x55555556
imul dword [0x101f7c1c]
cvtdq2ps xmm0, xmm0
sub esp, 0x18
mov eax, edx
addss xmm0, dword [0x101a3760]
shr eax, 0x1f
mov dword [esp + 0x14], 0x42380000
add eax, edx
add eax, dword [0x101f7c14]
mov dword [esp + 0x10], 0
addss xmm0, dword [ebp - 0x9ec]
mov dword [esp + 0xc], 0x41b80000
mov dword [esp + 8], 0x41a00000
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a2ce8]
addsd xmm0, qword [0x101a2ef0]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7e57
call edi
add esp, 0x1c
mov eax, 0x83c080
call eax
mov eax, dword [0x101f7a74]
mov ecx, dword [0x101f7a78]
cmp eax, ecx
jle 0x1006917d
mov dword [0x101f7a74], ecx
call esi
mov dword [0x101f7c10], eax
jmp 0x10069216
inc eax
mov dword [0x101f7a74], eax
call esi
mov dword [0x101f7c10], eax
jmp 0x10069216
movd xmm0, dword [0x101f7c18]
mov eax, 0x55555556
imul dword [0x101f7c1c]
cvtdq2ps xmm0, xmm0
sub esp, 0x18
mov eax, edx
addss xmm0, dword [0x101a3760]
shr eax, 0x1f
mov dword [esp + 0x14], 0x41b80000
add eax, edx
add eax, dword [0x101f7c14]
mov dword [esp + 0x10], 0
addss xmm0, dword [ebp - 0x9ec]
mov dword [esp + 0xc], 0x41b80000
mov dword [esp + 8], 0x41a00000
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a2ce8]
addsd xmm0, qword [0x101a2ef0]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7e57
call edi
add esp, 0x1c
movd xmm0, dword [0x101f7c18]
mov eax, 0x55555556
imul dword [0x101f7c1c]
cvtdq2ps xmm0, xmm0
sub esp, 0x18
mov eax, edx
addss xmm0, dword [0x101a3760]
shr eax, 0x1f
mov dword [esp + 0x14], 0
add eax, edx
add eax, dword [0x101f7c14]
mov dword [esp + 0x10], 0
addss xmm0, dword [ebp - 0x9ec]
mov dword [esp + 0xc], 0x41b80000
mov dword [esp + 8], 0x41a00000
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm0, qword [0x101a2ce8]
addsd xmm0, qword [0x101a2ef0]
cvtpd2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7e57
call edi
add esp, 0x1c
xor eax, eax
xor edi, edi
mov esi, 0x402320
mov dword [ebp - 0x9f4], eax
cmp dword [0x101f7a70], eax
jle 0x1006977a
mov dword [ebp - 0x9f0], eax
nop
cmp eax, 0xa
jge 0x10069775
mov eax, dword [0x101f7a74]
mov ecx, 0x101f6620
lea eax, [eax + eax*4]
lea eax, [edi + eax*2]
push eax
call fcn.1006a420
mov esi, eax
test esi, esi
je 0x1006975b
movd xmm0, dword [0x101f7c18]
sub esp, 0x10
movd xmm1, dword [ebp - 0x9f0]
mov eax, dword [0x101f7c14]
cvtdq2ps xmm0, xmm0
add eax, 0xa
mov dword [esp + 0xc], 0x41a80000
mov dword [esp + 8], 0x432a0000
cvtdq2ps xmm1, xmm1
addss xmm0, dword [ebp - 0x9ec]
addss xmm0, dword [0x101a342c]
addss xmm0, xmm1
movss dword [esp + 4], xmm0
movd xmm0, eax
mov eax, 0x790b50
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
push 0x7a137
call eax
movd xmm0, dword [0x101f7c18]
lea eax, [esi + 4]
movd xmm1, dword [ebp - 0x9f0]
add esp, 0x14
cvtdq2ps xmm0, xmm0
push eax
push 1
cvtdq2ps xmm1, xmm1
push 0x32
addss xmm0, dword [ebp - 0x9ec]
addss xmm0, dword [0x101a344c]
addss xmm0, xmm1
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7c14]
add eax, 0xf
push eax
push 0xff00ffff
push 0x101f9630
call fcn.1007c410
mov eax, dword [esi + 0x10]
add esp, 0x1c
cmp eax, 0x52
jl 0x100693fa
mov dword [ebp - 0x9fc], eax
lea eax, [ebp - 0x9fc]
push eax
lea eax, [ebp - 0xa2c]
push eax
call fcn.1000e630
mov eax, dword [ebp - 0xa24]
mov edx, dword [0x10358348]
cmp byte [eax + 0xd], 0
jne 0x100693dc
mov ecx, dword [esi + 0x10]
cmp ecx, dword [eax + 0x10]
jge 0x100693de
mov eax, edx
cmp eax, edx
je 0x100693f3
push dword [eax + 0x18]
mov ecx, 0x8128adc
mov eax, 0x402320
call eax
jmp 0x10069405
mov eax, str.No_Found
jmp 0x10069405
push eax
mov eax, 0x5d2c10
call eax
add esp, 4
movd xmm0, dword [0x101f7c18]
movd xmm1, dword [ebp - 0x9f0]
cvtdq2ps xmm0, xmm0
push eax
push 3
push 0x32
cvtdq2ps xmm1, xmm1
addss xmm0, dword [ebp - 0x9ec]
addss xmm0, dword [0x101a344c]
addss xmm0, xmm1
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7c14]
add eax, 0x2d
push eax
push 0xffffffffffffffff
push 0x101f9630
call fcn.1007c410
movd xmm0, dword [0x101f7c18]
add esp, 0x1c
movd xmm1, dword [ebp - 0x9f0]
cvtdq2ps xmm0, xmm0
push dword [esi + 0x14]
addss xmm0, dword [ebp - 0x9ec]
cvtdq2ps xmm1, xmm1
push 0x1019ef2c
push 3
push 0x32
addss xmm0, dword [0x101a344c]
addss xmm0, xmm1
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7c14]
add eax, 0x5f
push eax
push 0xffffffffffffffff
push 0x101f9630
call fcn.1007c410
movd xmm0, dword [0x101f7c18]
movd xmm1, dword [ebp - 0x9f0]
push dword [esi + 0x18]
cvtdq2ps xmm0, xmm0
push 0x1019ef34
push 3
push 0x32
cvtdq2ps xmm1, xmm1
addss xmm0, dword [ebp - 0x9ec]
addss xmm0, dword [0x101a344c]
addss xmm0, xmm1
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7c14]
add eax, 0x73
push eax
push 0xffffffffffffffff
push 0x101f9630
call fcn.1007c410
movd xmm0, dword [0x101f7c18]
add esp, 0x40
movd xmm1, dword [ebp - 0x9f0]
cvtdq2ps xmm0, xmm0
push dword [esi + 0x2c]
addss xmm0, dword [ebp - 0x9ec]
cvtdq2ps xmm1, xmm1
push str.__d_
push 3
push 0x32
addss xmm0, dword [0x101a344c]
addss xmm0, xmm1
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7c14]
add eax, 0x8c
push eax
push 0xffffffffffffffff
push 0x101f9630
call fcn.1007c410
add esp, 0x20
cmp byte [esi + 0x30], 1
jne 0x1006974c
movd xmm0, dword [0x101f7c18]
mov esi, dword [ebp - 0x9f0]
cvtdq2ps xmm0, xmm0
push 0x15
push 0xaa
movd xmm1, esi
addss xmm0, dword [ebp - 0x9ec]
cvtdq2ps xmm1, xmm1
addss xmm0, dword [0x101a342c]
addss xmm0, xmm1
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7c14]
add eax, 0xa
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x1006974c
movd xmm3, dword [0x101f7c18]
mov ecx, 0x101f9630
mov eax, dword [0x101f7c14]
cvtdq2ps xmm3, xmm3
add eax, 0xa
push 0xff19bdff
push 0xffffa137
movd xmm0, esi
addss xmm3, dword [ebp - 0x9ec]
cvtdq2ps xmm0, xmm0
addss xmm3, dword [0x101a342c]
movd xmm2, eax
cvtdq2ps xmm2, xmm2
addss xmm3, xmm0
call fcn.1007b7a0
cmp byte [0x101f7aa0], 0
jne 0x1006974c
push 1
mov eax, 0x791070
call eax
add esp, 4
test eax, eax
je 0x1006974c
cmp byte [0x8793386], 0
je 0x1006974c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x101f7c10]
add ecx, 0xfa
cmp eax, ecx
jb 0x1006974c
mov eax, 0x83c080
call eax
mov eax, dword [0x101f7a74]
lea eax, [eax + eax*4]
lea esi, [edi + eax*2]
imul eax, esi, 0x34
cmp byte [eax + 0x101f664b], 0
je 0x100696df
cmp byte [0x101fbf6d], 1
mov byte [0x101fbf75], 0
jne 0x1006967c
mov byte [0x101fbf6d], 0
mov dword [0xe8cb3c], 0
jmp 0x10069683
mov byte [0x101fbf6d], 1
cmp byte [0x101fbfad], 1
mov eax, dword [0x101f7a74]
mov byte [0x101fbfb5], 0
lea eax, [eax + eax*4]
lea eax, [edi + eax*2]
mov dword [0x101f7a7c], eax
jne 0x100696c6
mov eax, dword [ebp - 0x9f4]
inc eax
mov byte [0x101fbfad], 0
mov dword [0xe8cb3c], 0
mov dword [ebp - 0x9f4], eax
jmp 0x10069761
mov eax, dword [ebp - 0x9f4]
inc eax
mov byte [0x101fbfad], 1
mov dword [ebp - 0x9f4], eax
jmp 0x10069761
push esi
mov ecx, 0x101f6620
call fcn.1006a420
mov ecx, eax
test ecx, ecx
je 0x1006974c
mov dword [0x101f7a7c], esi
mov dl, 0x24
movq xmm0, qword [ecx + 4]
mov ax, word [ecx + 0xc]
movq qword [ebp - 0xa1c], xmm0
xorps xmm0, xmm0
mov word [ebp - 0xa14], ax
mov al, byte [ecx + 0xe]
lea ecx, [ebp - 0xa20]
movzx edx, dl
mov dword [ebp - 0xa20], 0x5ff24c1
mov byte [ebp - 0xa12], al
mov byte [ebp - 0xa11], 0
movups xmmword [ebp - 0xa10], xmm0
mov dword [ebp - 0xa00], 0
call fcn.100ca8d0
mov eax, dword [ebp - 0x9f4]
inc eax
mov dword [ebp - 0x9f4], eax
jmp 0x10069761
mov eax, dword [ebp - 0x9f4]
add dword [ebp - 0x9f0], 0x14
inc edi
cmp edi, dword [0x101f7a70]
jl 0x100692c0
mov esi, 0x402320
xor edi, edi
mov ecx, 0x8128adc
push 0x14
mov dword [ebp - 0x9f8], edi
call esi
push eax
lea eax, [ebp - 0xe8]
push 0x20
push eax
call fcn.1015acf8
add esp, 0xc
mov ecx, 0x8128adc
push 0x15
call esi
push eax
lea eax, [ebp - 0xc8]
push 0x20
push eax
call fcn.1015acf8
add esp, 0xc
mov ecx, 0x8128adc
push 0x16
call esi
push eax
lea eax, [ebp - 0xa8]
push 0x20
push eax
call fcn.1015acf8
add esp, 0xc
mov ecx, 0x8128adc
push 0x17
call esi
push eax
lea eax, [ebp - 0x88]
push 0x20
push eax
call fcn.1015acf8
add esp, 0xc
mov ecx, 0x8128adc
push 0x18
call esi
push eax
lea eax, [ebp - 0x68]
push 0x20
push eax
call fcn.1015acf8
add esp, 0xc
mov ecx, 0x8128adc
push 0x697
call esi
push eax
lea eax, [ebp - 0x48]
push 0x20
push eax
call fcn.1015acf8
add esp, 0xc
mov ecx, 0x8128adc
push 0xc4e
call esi
push eax
lea eax, [ebp - 0x28]
push 0x20
push eax
call fcn.1015acf8
xor esi, esi
add esp, 0xc
mov dword [ebp - 0x9fc], esi
cmp dword [0x101f7a70], esi
jle 0x10069db0
mov dword [ebp - 0x9f4], esi
cmp edi, 0xa
jge 0x10069db0
mov eax, dword [0x101f7a74]
mov ecx, 0x101f6620
lea eax, [eax + eax*4]
lea eax, [esi + eax*2]
push eax
call fcn.1006a420
mov edi, eax
mov dword [ebp - 0x9f0], edi
test edi, edi
je 0x10069d90
movd xmm0, dword [0x101f7c18]
movd xmm1, dword [ebp - 0x9f4]
cvtdq2ps xmm0, xmm0
push 0x15
push 0xaa
cvtdq2ps xmm1, xmm1
addss xmm0, dword [ebp - 0x9ec]
addss xmm0, dword [0x101a342c]
addss xmm0, xmm1
cvttss2si eax, xmm0
push eax
mov eax, dword [0x101f7c14]
add eax, 0xa
push eax
mov eax, 0x790b10
call eax
add esp, 0x10
test al, al
je 0x10069d81
mov esi, dword [edi + 0x1c]
mov ecx, 0x101c3610
push 0x165
call fcn.10046fb0
push esi
push eax
lea eax, [ebp - 0x9e8]
push eax
call sym.Main.dll_sprintf
add esp, 0xc
lea eax, [ebp - 0x9e8]
mov ecx, 0x101c3610
push eax
push 0x164
call fcn.10046fb0
push eax
lea eax, [ebp - 0x8e8]
push str._s_n______________________n_s_n
push eax
call sym.Main.dll_sprintf
add esp, 0x10
cmp byte [edi + 0x2b], 0
je 0x10069983
lea edi, [ebp - 0x8e8]
dec edi
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x10069931
mov ax, word [str._n_n_n_n_n_n_n_n_n_n_n]
mov ecx, 0x101c3610
push 0x163
mov word [edi], ax
call fcn.10046fb0
mov edx, eax
mov esi, eax
mov al, byte [edx]
inc edx
test al, al
jne 0x10069957
lea edi, [ebp - 0x8e8]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10069967
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0x9f0]
cmp byte [edi + 0x20], 0
je 0x100699dc
lea edi, [ebp - 0x8e8]
dec edi
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x10069990
mov ax, word [0x1019ef68]
lea edx, [ebp - 0xe8]
mov word [edi], ax
mov esi, edx
nop dword [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x100699b0
lea edi, [ebp - 0x8e8]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x100699c0
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0x9f0]
cmp byte [edi + 0x21], 0
je 0x10069a3c
lea edi, [ebp - 0x8e8]
dec edi
nop dword [eax]
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x100699f0
mov ax, word [0x1019ef6c]
lea edx, [ebp - 0xc8]
mov word [edi], ax
mov esi, edx
nop dword [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x10069a10
lea edi, [ebp - 0x8e8]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10069a20
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0x9f0]
cmp byte [edi + 0x22], 1
jne 0x10069a9c
lea edi, [ebp - 0x8e8]
dec edi
nop dword [eax]
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x10069a50
mov ax, word [0x1019ef70]
lea edx, [ebp - 0xa8]
mov word [edi], ax
mov esi, edx
nop dword [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x10069a70
lea edi, [ebp - 0x8e8]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10069a80
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0x9f0]
cmp byte [edi + 0x23], 0
je 0x10069afc
lea edi, [ebp - 0x8e8]
dec edi
nop dword [eax]
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x10069ab0
mov ax, word [0x1019ef74]
lea edx, [ebp - 0x88]
mov word [edi], ax
mov esi, edx
nop dword [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x10069ad0
lea edi, [ebp - 0x8e8]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10069ae0
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0x9f0]
cmp byte [edi + 0x24], 0
je 0x10069b54
lea edi, [ebp - 0x8e8]
dec edi
nop dword [eax]
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x10069b10
mov ax, word [0x1019ef78]
lea edx, [ebp - 0x68]
mov word [edi], ax
mov esi, edx
mov al, byte [edx]
inc edx
test al, al
jne 0x10069b28
lea edi, [ebp - 0x8e8]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10069b38
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0x9f0]
cmp byte [edi + 0x25], 0
je 0x10069bac
lea edi, [ebp - 0x8e8]
dec edi
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x10069b61
mov ax, word [0x1019ef7c]
lea edx, [ebp - 0x48]
mov word [edi], ax
mov esi, edx
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x10069b80
lea edi, [ebp - 0x8e8]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10069b90
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0x9f0]
cmp byte [edi + 0x26], 0
je 0x10069c04
lea edi, [ebp - 0x8e8]
dec edi
nop dword [eax]
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x10069bc0
mov ax, word [0x1019ef80]
lea edx, [ebp - 0x28]
mov word [edi], ax
mov esi, edx
mov al, byte [edx]
inc edx
test al, al
jne 0x10069bd8
lea edi, [ebp - 0x8e8]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10069be8
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0x9f0]
cmp byte [edi + 0x27], 0
je 0x10069c63
lea edi, [ebp - 0x8e8]
dec edi
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x10069c11
mov ax, word [0x1019ef84]
mov ecx, 0x101c3610
push 0x15b
mov word [edi], ax
call fcn.10046fb0
mov edx, eax
mov esi, eax
mov al, byte [edx]
inc edx
test al, al
jne 0x10069c37
lea edi, [ebp - 0x8e8]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10069c47
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0x9f0]
cmp byte [edi + 0x28], 0
je 0x10069cbc
lea edi, [ebp - 0x8e8]
dec edi
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x10069c70
mov ax, word [0x1019ef88]
mov ecx, 0x101c3610
push 0x15c
mov word [edi], ax
call fcn.10046fb0
mov edx, eax
mov esi, eax
mov al, byte [edx]
inc edx
test al, al
jne 0x10069c96
lea edi, [ebp - 0x8e8]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x10069ca6
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x8e8]
dec edi
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x10069cc3
mov ax, word [0x1019ef8c]
lea ecx, [ebp - 0x8e8]
mov word [edi], ax
dec ecx
nop dword [eax]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x10069ce0
mov eax, dword [0x1019ef90]
mov dword [ecx], eax
mov eax, dword [str._________________]
movd xmm1, dword [ebp - 0x9f4]
mov dword [ecx + 4], eax
mov eax, dword [0x1019ef98]
mov dword [ecx + 8], eax
mov eax, dword [0x1019ef9c]
mov dword [ecx + 0xc], eax
mov eax, dword [0x1019efa0]
mov dword [ecx + 0x10], eax
mov ax, word [0x1019efa4]
mov word [ecx + 0x14], ax
lea eax, [ebp - 0x8e8]
movd xmm0, dword [0x8793410]
cvtdq2ps xmm0, xmm0
push eax
push 0x1019efa8
push 3
push 0x1e
cvtdq2ps xmm1, xmm1
push 0x64
addss xmm0, dword [ebp - 0x9ec]
addss xmm0, xmm1
cvttss2si eax, xmm0
movd xmm0, dword [0x879340c]
cvtdq2ps xmm0, xmm0
push eax
addss xmm0, dword [0x101a32cc]
cvttss2si eax, xmm0
push eax
push 0xffffffffffffffff
push 0x101f9630
call fcn.1007c590
mov esi, dword [ebp - 0x9fc]
add esp, 0x24
mov edi, dword [ebp - 0x9f8]
inc edi
mov dword [ebp - 0x9f8], edi
jmp 0x10069d96
mov edi, dword [ebp - 0x9f8]
add dword [ebp - 0x9f4], 0x14
inc esi
mov dword [ebp - 0x9fc], esi
cmp esi, dword [0x101f7a70]
jl 0x10069856
push 0
mov eax, 0x635fd0
call eax
add esp, 4
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.10141944
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret