Function at 0x470fd4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xf4
push ebx
push esi
mov esi, dword [0x5d4b58]
mov dword [esp + 0x3c], ecx
xor ecx, ecx
inc ecx
mov dword [esp + 0x6c], esi
push edi
mov eax, dword [esi + 0x3e48]
mov edi, edx
mov dword [esp + 0x38], edi
mov byte [eax + 0xac], cl
mov eax, dword [esi + 0x3e48]
mov dword [esp + 0x2c], eax
cmp byte [eax + 0xaf], 0
je 0x471020
xor al, al
jmp 0x471c46
movss xmm2, dword [esi + 0x37c8]
addss xmm2, xmm2
addss xmm2, dword [esi + 0x3bb8]
movss dword [esp + 0x98], xmm2
call fcn.00451af1
mov ebx, dword [ebp + 8]
movaps xmm1, xmm0
movss dword [esp + 0xa0], xmm1
test bl, 0x10
je 0x47105b
xorps xmm0, xmm0
jmp 0x471066
movaps xmm0, xmm2
addss xmm0, dword [esi + 0x37dc]
mov ecx, dword [esp + 0x40]
subss xmm1, xmm0
xor edx, edx
movss dword [esp + 0x78], xmm0
movss dword [esp + 0x74], xmm1
call fcn.00446b70
mov dword [esp + 0x7c], eax
xor eax, eax
mov dword [esp + 0x94], eax
mov dword [esi + 0x46a8], eax
call fcn.00451c87
mov ecx, dword [esp + 0x40]
call fcn.0044f792
mov eax, dword [esi + 0x5994]
mov dword [esp + 0xa4], eax
test eax, eax
jne 0x4710cd
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax + 0xe4]
mov eax, dword [eax + 0xec]
mov eax, dword [eax + ecx*4 - 4]
mov dword [esi + 0x5994], eax
mov dword [esp + 0x9c], ebx
test bl, 0x20
je 0x4710e5
and ebx, 0xff9fffff
or ebx, 0x100008
test bl, 8
jne 0x4710f3
mov edx, ebx
mov ecx, edi
call fcn.00474590
mov ecx, 0x700000
test ecx, ebx
jne 0x471106
mov eax, dword [esi + 0x5990]
and eax, ecx
or ebx, eax
mov ecx, 0x1800000
test ecx, ebx
jne 0x471119
mov eax, dword [esi + 0x5990]
and eax, ecx
or ebx, eax
mov ecx, 0x6000000
test ecx, ebx
jne 0x47112c
mov eax, dword [esi + 0x5990]
and eax, ecx
or ebx, eax
mov ecx, 0x18000000
test ecx, ebx
jne 0x47113f
mov eax, dword [esi + 0x5990]
and eax, ecx
or ebx, eax
mov eax, dword [esi + 0x5990]
xor ecx, ecx
movss xmm3, dword [edi]
and eax, 0xe00fffff
movss xmm1, dword [edi + 4]
or ebx, eax
movss xmm2, dword [edi + 8]
mov edx, ebx
movss xmm0, dword [0x4963c8]
inc ecx
shr edx, 1
mov eax, ebx
shr eax, 0x13
not dl
and al, cl
mov dword [ebp + 8], ebx
and dl, cl
mov dword [esp + 0x4c], eax
movzx eax, dl
add eax, 3
mov dword [esp + 0x44], edx
mov dword [esp + 0x30], eax
movss dword [esp + 0x1c], xmm3
movss dword [esp + 0x20], xmm1
movss dword [esp + 0x24], xmm2
movss dword [esp + 0x90], xmm0
test dl, dl
je 0x4711ad
movss xmm0, dword [edi + 0xc]
mov eax, ebx
movss dword [esp + 0x28], xmm0
and eax, 0x10100000
mov ecx, 0x8200000
cmp eax, 0x10100000
jne 0x4711dd
lea eax, [esp + 0x24]
movaps xmm0, xmm3
push eax
lea edx, [esp + 0x24]
lea ecx, [esp + 0x20]
call fcn.00445bad
jmp 0x47120f
mov eax, ebx
and eax, ecx
cmp eax, ecx
jne 0x47122c
lea eax, [esp + 0x24]
movaps xmm0, xmm3
push eax
lea edx, [esp + 0x24]
lea ecx, [esp + 0x20]
call fcn.00445b20
add esp, 4
lea eax, [esp + 0x24]
push eax
mov eax, edx
mov edx, ecx
push eax
mov ecx, edi
call fcn.00470f28
pop ecx
mov edx, dword [esp + 0x48]
movss xmm3, dword [esp + 0x20]
movss xmm1, dword [esp + 0x24]
movss xmm2, dword [esp + 0x28]
movss xmm0, dword [esp + 0x2c]
pop ecx
comiss xmm3, dword [0x4962fc]
movss xmm5, dword [0x496550]
movss xmm4, dword [0x496378]
jb 0x47124a
movaps xmm7, xmm4
jmp 0x47124d
movaps xmm7, xmm5
comiss xmm1, dword [0x4962fc]
movss xmm6, dword [0x4964f0]
mulss xmm3, xmm6
addss xmm3, xmm7
cvttss2si eax, xmm3
mov dword [esp + 0x50], eax
jb 0x471273
movaps xmm3, xmm4
jmp 0x471276
movaps xmm3, xmm5
comiss xmm2, dword [0x4962fc]
mulss xmm1, xmm6
addss xmm1, xmm3
cvttss2si eax, xmm1
mov dword [esp + 0x54], eax
jb 0x471294
movaps xmm1, xmm4
jmp 0x471297
movaps xmm1, xmm5
comiss xmm0, dword [0x4962fc]
mulss xmm2, xmm6
addss xmm2, xmm1
cvttss2si eax, xmm2
mov dword [esp + 0x58], eax
jae 0x4712b3
movaps xmm4, xmm5
mulss xmm0, xmm6
xor ecx, ecx
mov byte [esp + 0x12], cl
mov byte [esp + 0x13], cl
addss xmm0, xmm4
cvttss2si eax, xmm0
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x2c]
movss xmm2, dword [eax + 0xf0]
movss xmm3, dword [eax + 0xf4]
movss dword [esp + 0x34], xmm2
movss dword [esp + 0x3c], xmm3
cmp dword [esi + 0x381c], ecx
jne 0x4712fd
movss xmm1, dword [esp + 0x78]
jmp 0x471300
xorps xmm1, xmm1
movaps xmm0, xmm2
addss xmm0, xmm1
movss dword [eax + 0xf0], xmm0
test ebx, 0x300000
je 0x4715f8
test bl, 0x20
jne 0x4715f8
mov edx, dword [esp + 0x30]
movss xmm2, dword [esi + 0x37dc]
movss xmm1, dword [esp + 0x74]
movaps xmm0, xmm2
push ecx
lea eax, [edx - 1]
mov dword [esp], 0xbf800000
movd xmm3, eax
cvtdq2ps xmm3, xmm3
push ecx
push ecx
mov ecx, str.M:000
mulss xmm0, xmm3
subss xmm1, xmm0
movd xmm0, edx
cvtdq2ps xmm0, xmm0
mov edx, str.M:0.000
divss xmm1, xmm0
cvttss2si eax, xmm1
movss xmm1, dword [0x4963c8]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
maxss xmm1, xmm0
movss xmm0, dword [esp + 0x80]
addss xmm2, xmm1
movss dword [esp + 0x20], xmm1
movss xmm1, dword [0x4963c8]
mulss xmm2, xmm3
subss xmm0, xmm2
cvttss2si eax, xmm0
movd xmm0, eax
mov eax, ebx
cvtdq2ps xmm0, xmm0
and eax, 0x1000000
mov dword [esp + 0x54], eax
cmove edx, ecx
lea ecx, [esp + 0xc4]
maxss xmm1, xmm0
movss dword [esp + 0x98], xmm1
call fcn.0044a5c8
movss xmm1, dword [esp + 0x20]
add esp, 0xc
test ebx, 0x200000
movss xmm0, dword [eax]
push 0
pop eax
setne al
xor ecx, ecx
inc eax
mov edx, ecx
comiss xmm0, xmm1
mov dword [esp + 0x18], edx
cmovae eax, ecx
cmp dword [esp + 0x30], ecx
jbe 0x4717bf
shl eax, 4
cmp dword [esp + 0x48], ecx
je 0x471525
mov ecx, ebx
mov bl, dl
and ecx, 8
mov dword [esp + 0x80], ecx
lea ecx, [eax + 0x495a68]
mov edi, dword [esp + 0x80]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x60], edx
test edx, edx
je 0x47145a
movss xmm1, dword [esi + 0x37dc]
xorps xmm0, xmm0
call fcn.00451866
movss xmm1, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x48]
lea eax, [edx + 1]
mov dword [esp + 0x18], eax
cmp eax, dword [esp + 0x30]
jge 0x47146c
movaps xmm0, xmm1
jmp 0x471475
movss xmm0, dword [esp + 0x8c]
mov eax, dword [0x5d4b58]
or dword [eax + 0x46a8], 1
cmp byte [esp + 0x4c], 0
movss dword [eax + 0x46ac], xmm0
je 0x471495
xorps xmm0, xmm0
jmp 0x47149d
movss xmm0, dword [0x4963c8]
movss xmm3, dword [0x496324]
lea eax, [esp + 0x80]
and dword [esp + 0x84], 0
push ecx
push dword [ecx]
mov ecx, dword [esp + 0x68]
push eax
lea eax, [esp + 0x90]
movss dword [esp + 0x8c], xmm0
push eax
lea eax, [esp + 0x2c]
lea eax, [eax + ecx*4]
mov ecx, dword [ecx*4 + 0x495a58]
push eax
push 8
pop edx
call fcn.0046c176
or bl, al
add esp, 0x14
or byte [esp + 0x13], bl
test edi, edi
jne 0x4714f6
call fcn.00452aa5
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x18]
add ecx, 4
movss xmm1, dword [esp + 0x14]
mov dword [esp + 0x48], ecx
cmp edx, dword [esp + 0x30]
jl 0x471434
mov edi, dword [esp + 0x38]
mov byte [esp + 0x12], bl
mov ebx, dword [ebp + 8]
jmp 0x4717bd
xor edi, edi
mov dword [esp + 0x18], ecx
cmp byte [esp + 0x4c], cl
mov edx, 0xff
cmovne edx, edi
mov edi, ebx
and edi, 8
mov dword [esp + 0x4c], edx
mov dword [esp + 0x60], edi
mov bl, cl
lea edi, [eax + 0x495ac0]
test ecx, ecx
jle 0x47156e
movss xmm1, dword [esi + 0x37dc]
xorps xmm0, xmm0
call fcn.00451866
movss xmm1, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x4c]
lea eax, [ecx + 1]
mov dword [esp + 0x84], eax
cmp eax, dword [esp + 0x30]
jge 0x471583
movaps xmm0, xmm1
jmp 0x47158c
movss xmm0, dword [esp + 0x8c]
mov eax, dword [0x5d4b58]
movss xmm2, dword [0x4963c8]
push ecx
push dword [edi]
or dword [eax + 0x46a8], 1
push edx
lea edx, [esp + 0x5c]
movss dword [eax + 0x46ac], xmm0
push ecx
lea edx, [edx + ecx*4]
mov ecx, dword [ecx*4 + 0x495a58]
call fcn.0046c5eb
add esp, 0x10
or bl, al
cmp dword [esp + 0x60], 0
jne 0x4715d1
call fcn.00452aa5
mov ecx, dword [esp + 0x84]
add edi, 4
movss xmm1, dword [esp + 0x14]
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x18], ecx
cmp ecx, dword [esp + 0x30]
jl 0x47154c
jmp 0x471515
test ebx, 0x400000
je 0x4717cf
test bl, 0x20
jne 0x4717cf
mov dword [esp + 0x14], 0xff
test dl, dl
je 0x471696
mov ecx, dword [esp + 0x5c]
mov eax, ecx
mov edx, dword [esp + 0x58]
cmp ecx, 0xff
mov esi, dword [esp + 0x54]
cmovg eax, dword [esp + 0x14]
and dword [esp + 0x60], 0
test ecx, ecx
mov ecx, dword [esp + 0x14]
cmovs eax, dword [esp + 0x60]
cmp edx, ecx
mov edi, dword [esp + 0x50]
push eax
mov eax, edx
cmovg eax, ecx
and dword [esp + 0x64], 0
test edx, edx
cmovs eax, dword [esp + 0x64]
cmp esi, ecx
push eax
mov eax, esi
cmovg eax, ecx
xor edx, edx
test esi, esi
cmovs eax, edx
cmp edi, ecx
push eax
mov eax, edi
cmovg eax, ecx
xor ecx, ecx
test edi, edi
cmovs eax, ecx
push eax
push 0x495864
lea eax, [esp + 0xd4]
push 0x40
push eax
call fcn.00445303
mov edi, dword [esp + 0x54]
add esp, 0x1c
jmp 0x4716fa
mov ecx, dword [esp + 0x58]
mov eax, ecx
mov edx, dword [esp + 0x54]
cmp ecx, 0xff
mov esi, dword [esp + 0x50]
cmovg eax, dword [esp + 0x14]
and dword [esp + 0x60], 0
test ecx, ecx
mov ecx, dword [esp + 0x14]
cmovs eax, dword [esp + 0x60]
cmp edx, ecx
push eax
mov eax, edx
cmovg eax, ecx
and dword [esp + 0x64], 0
test edx, edx
cmovs eax, dword [esp + 0x64]
cmp esi, ecx
push eax
mov eax, esi
cmovg eax, ecx
xor ecx, ecx
test esi, esi
cmovs eax, ecx
push eax
push 0x495878
lea eax, [esp + 0xd0]
push 0x40
push eax
call fcn.00445303
add esp, 0x18
mov eax, dword [0x5d4b58]
lea edx, [esp + 0xc0]
movss xmm4, dword [esp + 0x74]
push ecx
push ecx
or dword [eax + 0x46a8], 1
mov ecx, str.Text
push 6
push 0x40
movss dword [eax + 0x46ac], xmm4
call fcn.0046cf62
add esp, 0x10
test al, al
je 0x4717af
xor eax, eax
lea ecx, [esp + 0xc0]
inc eax
mov byte [esp + 0x12], al
mov al, byte [ecx]
cmp al, 0x23
je 0x47174e
cmp al, 0x20
je 0x47174e
cmp al, 9
jne 0x471751
inc ecx
jmp 0x471740
xor eax, eax
cmp byte [esp + 0x44], 0
mov dword [esp + 0x58], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x5c], eax
je 0x471792
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x5c]
push eax
push str._02X_02X_02X_02X
push ecx
call fcn.0044372c
add esp, 0x18
jmp 0x4717af
lea eax, [esp + 0x58]
push eax
lea eax, [esp + 0x58]
push eax
lea eax, [esp + 0x58]
push eax
push str._02X_02X_02X
push ecx
call fcn.0044372c
add esp, 0x14
test bl, 8
jne 0x4717b9
call fcn.00452aa5
mov esi, dword [esp + 0x70]
xor ecx, ecx
movss xmm2, dword [esp + 0x34]
movss xmm3, dword [esp + 0x3c]
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x18], ecx
test bl, 0x10
jne 0x4719a5
test bl, 0x20
jne 0x4717f9
cmp dword [esi + 0x381c], ecx
je 0x4717f9
movss xmm0, dword [esp + 0x74]
addss xmm0, dword [esi + 0x37dc]
jmp 0x4717fc
xorps xmm0, xmm0
cmp byte [esp + 0x44], 0
addss xmm0, xmm2
movss dword [eax + 0xf4], xmm3
movss dword [eax + 0xf0], xmm0
je 0x471825
movss xmm0, dword [edi + 0xc]
movss dword [esp + 0x90], xmm0
movss xmm0, dword [edi]
lea eax, [esp + 0x60]
and dword [esp + 0x60], 0
lea edx, [esp + 0xa8]
and dword [esp + 0x64], 0
mov ecx, str.ColorButton
movss dword [esp + 0xa8], xmm0
movss xmm0, dword [edi + 4]
movss dword [esp + 0xac], xmm0
movss xmm0, dword [edi + 8]
movss dword [esp + 0xb0], xmm0
movss xmm0, dword [esp + 0x90]
push eax
push ebx
movss dword [esp + 0xbc], xmm0
call fcn.00473d5f
pop ecx
pop ecx
test al, al
je 0x4718ff
test bl, 4
jne 0x4718ff
lea edi, [esi + 0x59a8]
mov ecx, str.picker
lea esi, [esp + 0xa8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00452658
mov esi, dword [esp + 0x70]
lea eax, [esp + 0x60]
and dword [esp + 0x60], 0
lea ecx, [esp + 0x84]
and dword [esp + 0x64], 0
xor edx, edx
push eax
movss xmm0, dword [esi + 0x46c8]
addss xmm0, dword [0x4962fc]
movss dword [esp + 0x88], xmm0
movss xmm0, dword [esi + 0x46d4]
addss xmm0, dword [esi + 0x37d8]
movss dword [esp + 0x8c], xmm0
call fcn.0044f5fb
mov edi, dword [esp + 0x3c]
pop ecx
test bl, 8
jne 0x471909
call fcn.00452aa5
mov ecx, str.picker
call fcn.00452a16
test al, al
je 0x4719a5
mov eax, dword [esi + 0x3e48]
xor ecx, ecx
inc ecx
cmp word [eax + 0xb6], cx
jne 0x4719a0
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x40]
cmp eax, ecx
je 0x47194e
mov edx, ecx
mov ecx, eax
push 0
call fcn.00468727
pop ecx
call fcn.0046a8ee
mov eax, dword [0x5d4b58]
xor ecx, ecx
movss xmm0, dword [esp + 0x98]
inc ecx
mulss xmm0, dword [0x496464]
mov edx, edi
or dword [eax + 0x46a8], ecx
mov ecx, 0x48cfc4
movss dword [eax + 0x46ac], xmm0
lea eax, [esi + 0x59a8]
push eax
mov eax, dword [esp + 0xa0]
and eax, 0x1f890002
or eax, 0x740080
push eax
call fcn.00471e1c
or byte [esp + 0x1a], al
pop ecx
pop ecx
call fcn.00452a4e
mov eax, dword [esp + 0x7c]
cmp dword [esp + 0x40], eax
je 0x471a03
test bl, bl
js 0x471a03
movss xmm1, dword [esi + 0x37dc]
xorps xmm0, xmm0
call fcn.00451866
test bl, 0x20
je 0x4719d0
movss xmm0, dword [esp + 0x78]
jmp 0x4719e1
movss xmm0, dword [esp + 0xa0]
addss xmm0, dword [esi + 0x37dc]
addss xmm0, dword [esp + 0x34]
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x7c]
mov ecx, dword [esp + 0x40]
push 0
movss dword [eax + 0xf0], xmm0
call fcn.00468727
pop ecx
cmp byte [esp + 0x12], 0
je 0x471b2b
cmp dword [esp + 0x18], 0
jne 0x471b2b
cmp byte [esp + 0x13], 0
jne 0x471a34
movups xmm0, xmmword [esp + 0x50]
cvtdq2ps xmm0, xmm0
divps xmm0, xmmword [0x4968f0]
movups xmmword [esp + 0x1c], xmm0
mov ecx, 0x8200000
mov eax, ebx
and eax, ecx
cmp eax, ecx
jne 0x471abc
movss xmm0, dword [esp + 0x1c]
lea eax, [esp + 0x24]
movss xmm1, dword [esp + 0x20]
lea edx, [esp + 0x20]
movss xmm2, dword [esp + 0x24]
lea ecx, [esp + 0x1c]
push eax
movss dword [esi + 0x599c], xmm0
movss dword [esi + 0x59a0], xmm1
call fcn.00445bad
mov eax, dword [esi + 0x5994]
movss xmm5, dword [esp + 0x20]
movss xmm6, dword [esp + 0x24]
movss xmm7, dword [esp + 0x28]
and dword [esp + 0x70], 0
pop ecx
lea ecx, [esp + 0x60]
mov dword [esi + 0x5998], eax
movss dword [esp + 0x60], xmm5
movss dword [esp + 0x64], xmm6
movss dword [esp + 0x68], xmm7
call fcn.00445a80
mov dword [esi + 0x59a4], eax
jmp 0x471ace
movss xmm7, dword [esp + 0x24]
movss xmm6, dword [esp + 0x20]
movss xmm5, dword [esp + 0x1c]
mov ecx, 0x10100000
mov eax, ebx
and eax, ecx
cmp eax, ecx
jne 0x471b0b
lea eax, [esp + 0x24]
movaps xmm2, xmm7
push eax
lea edx, [esp + 0x24]
movaps xmm1, xmm6
lea ecx, [esp + 0x20]
movaps xmm0, xmm5
call fcn.00445b20
movss xmm7, dword [esp + 0x28]
add esp, 4
movss xmm6, dword [esp + 0x20]
movss xmm5, dword [esp + 0x1c]
cmp byte [esp + 0x44], 0
movss dword [edi], xmm5
movss dword [edi + 4], xmm6
movss dword [edi + 8], xmm7
je 0x471b2b
movss xmm0, dword [esp + 0x28]
movss dword [edi + 0xc], xmm0
cmp dword [esp + 0xa4], 0
jne 0x471b3c
and dword [esi + 0x5994], 0
mov eax, dword [0x5d4b58]
mov eax, dword [eax + 0x3e48]
dec dword [eax + 0xe4]
call fcn.00451da2
xor eax, eax
inc eax
test byte [esi + 0x46c4], al
je 0x471c0d
test ebx, 0x200
jne 0x471c0d
call fcn.0045657a
test al, al
je 0x471c0d
mov ecx, str._COL3F
call fcn.00456616
test eax, eax
je 0x471b9d
mov esi, dword [eax]
xor eax, eax
inc eax
mov byte [esp + 0x94], al
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [esp + 0x70]
jmp 0x471ba1
mov al, byte [esp + 0x12]
mov ecx, str._COL4F
mov byte [esp + 0x12], al
call fcn.00456616
test eax, eax
je 0x471bd3
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x38]
shl ecx, 2
push ecx
push dword [eax]
push edi
call sub.VCRUNTIME140.dll_memcpy
xor eax, eax
add esp, 0xc
inc eax
mov byte [esp + 0x12], al
jmp 0x471be1
cmp byte [esp + 0x94], 0
je 0x471c08
mov edi, dword [esp + 0x38]
test ebx, 0x10000000
je 0x471c08
movss xmm2, dword [edi + 8]
lea eax, [edi + 8]
movss xmm1, dword [edi + 4]
lea edx, [edi + 4]
movss xmm0, dword [edi]
mov ecx, edi
push eax
call fcn.00445b20
add esp, 4
call fcn.004567a8
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x471c2d
mov eax, dword [esi + 0x3e94]
test eax, eax
je 0x471c2d
cmp dword [esi + 0x3eb0], ecx
jne 0x471c2d
mov dword [esi + 0x46bc], eax
mov bl, byte [esp + 0x12]
test bl, bl
je 0x471c44
mov ecx, dword [esi + 0x46bc]
test ecx, ecx
je 0x471c44
call fcn.004487c5
mov al, bl
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret