Function at 0x10295bc0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x430
mov eax, dword [0x1036900c]
xor eax, esp
mov dword [esp + 0x42c], eax
mov eax, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0x10]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x14]
push 0xc0
mov dword [esp + 0x50], eax
lea eax, [esp + 0xd4]
push 0
push eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x48], esi
mov dword [esp + 0x44], edi
mov byte [esp + 0x285], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x1b0]
xorps xmm0, xmm0
movups xmmword [esp + 0x190], xmm0
push 0xc0
push 0
push eax
movups xmmword [esp + 0x1ac], xmm0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov word [esp + 0x277], 0x100
xor eax, eax
mov word [esp + 0x274], ax
mov byte [esp + 0x276], al
push 0xc0
push eax
mov dword [esp + 0x278], eax
mov byte [esp + 0x431], al
lea eax, [esp + 0x288]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [esp + 0x360]
xorps xmm0, xmm0
movups xmmword [esp + 0x340], xmm0
push 0xc0
push 0
push eax
movups xmmword [esp + 0x35c], xmm0
call sub.VCRUNTIME140.dll_memset
movups xmm0, xmmword [esi]
xor eax, eax
mov word [esp + 0x433], 0x100
mov word [esp + 0x430], ax
lea ecx, [esp + 0xdc]
mov byte [esp + 0x432], al
add esp, 0xc
mov dword [esp + 0x420], eax
lea eax, [esi + 0x30]
movups xmmword [esp + 0x50], xmm0
mov dword [esp + 0x48], eax
xor esi, esi
movups xmm0, xmmword [eax]
lea eax, [esp + 0x50]
mov dword [esp + 0x40], esi
push eax
mov eax, dword [esp + 0xc]
movups xmmword [esp + 0x64], xmm0
movups xmm0, xmmword [edi]
push dword [eax]
movups xmmword [esp + 0xb8], xmm0
movups xmm0, xmmword [edi + 0x20]
movups xmmword [esp + 0xc8], xmm0
movsd xmm0, qword [0x102ff3c0]
movsd qword [esp + 0x78], xmm0
call fcn.10277740
test eax, eax
je 0x102967e9
lea eax, [esp + 0xb0]
push eax
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x284]
push dword [eax]
call fcn.101d26c0
test eax, eax
je 0x102967e9
nop dword [eax]
nop word [eax + eax]
movzx eax, byte [esp + 0x426]
movsd xmm5, qword [0x102ff3c0]
mov dword [esp + 0x18], esi
xor esi, esi
mov dword [esp + 0x34], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x10], eax
test eax, eax
je 0x10296295
mov eax, dword [esp + 0x3c]
lea edx, [esp + 0xd0]
mov dword [esp + 0x30], edx
movsd xmm6, qword [eax + 0xb0]
movsd xmm7, qword [eax + 0xb8]
comisd xmm7, xmm6
movsd xmm1, qword [esp + esi*8 + 0x360]
movsd xmm2, qword [0x102ff050]
jb 0x10295ddf
movaps xmm0, xmm6
subsd xmm0, xmm1
comisd xmm2, xmm0
jbe 0x10295e00
subsd xmm1, xmm7
comisd xmm2, xmm1
jmp 0x10295df7
movaps xmm0, xmm1
subsd xmm0, xmm6
comisd xmm2, xmm0
jbe 0x10295e00
movaps xmm0, xmm7
subsd xmm0, xmm1
comisd xmm2, xmm0
jbe 0x10295e00
mov eax, 1
jmp 0x10295e02
xor eax, eax
test al, al
je 0x10295ed0
mov al, byte [esp + 0x276]
xor ecx, ecx
movzx edi, al
test al, al
je 0x10295ed0
mov eax, dword [esp + 0x38]
lea edx, [esp + 0x280]
movsd xmm3, qword [eax + 0xa0]
movsd xmm4, qword [eax + 0xa8]
nop dword [eax]
comisd xmm4, xmm3
movsd xmm1, qword [esp + ecx*8 + 0x1b0]
jb 0x10295e66
movaps xmm0, xmm3
subsd xmm0, xmm1
comisd xmm2, xmm0
jbe 0x10295e87
subsd xmm1, xmm4
comisd xmm2, xmm1
jmp 0x10295e7e
movaps xmm0, xmm1
subsd xmm0, xmm3
comisd xmm2, xmm0
jbe 0x10295e87
movaps xmm0, xmm4
subsd xmm0, xmm1
comisd xmm2, xmm0
jbe 0x10295e87
mov eax, 1
jmp 0x10295e89
xor eax, eax
test al, al
je 0x10295ec0
mov eax, dword [esp + 0x30]
movsd xmm1, qword [eax]
movsd xmm0, qword [eax + 8]
subsd xmm1, qword [edx]
subsd xmm0, qword [edx + 8]
mulsd xmm1, xmm1
mulsd xmm0, xmm0
addsd xmm1, xmm0
comisd xmm5, xmm1
jbe 0x10295ec0
movaps xmm5, xmm1
mov dword [esp + 0x34], esi
mov dword [esp + 0x24], ecx
inc ecx
add edx, 0x10
cmp ecx, edi
jl 0x10295e40
mov edx, dword [esp + 0x30]
inc esi
add edx, 0x10
mov dword [esp + 0x30], edx
cmp esi, dword [esp + 0x10]
jl 0x10295db1
ucomisd xmm5, qword [0x102ff3c0]
lahf
test ah, 0x44
jnp 0x10296295
mov edx, dword [esp + 0x34]
lea esi, [esp + 0xd0]
mov ecx, dword [esp + 0x24]
lea edi, [esp + 0x280]
mov eax, ecx
xorps xmm3, xmm3
shl eax, 4
movsd xmm5, qword [esp + edx*8 + 0x360]
add esi, eax
subsd xmm6, xmm5
movsd qword [esp + 0x10], xmm5
subsd xmm7, xmm5
mov eax, edx
shl eax, 4
add edi, eax
mulsd xmm6, xmm7
comisd xmm3, xmm6
jb 0x10295f84
mov eax, dword [esp + 0x38]
movsd xmm2, qword [esp + ecx*8 + 0x1b0]
movsd xmm1, qword [eax + 0xa8]
movsd xmm0, qword [eax + 0xa0]
subsd xmm1, xmm2
subsd xmm0, xmm2
mulsd xmm1, xmm0
comisd xmm3, xmm1
jb 0x10295f84
push edi
mov ecx, esi
call fcn.101d04c0
test al, al
jne 0x10296455
movsd xmm5, qword [esp + 0x10]
xorps xmm3, xmm3
movsd xmm1, qword [esi]
movsd xmm0, qword [esi + 8]
subsd xmm1, qword [edi]
subsd xmm0, qword [edi + 8]
mulsd xmm1, xmm1
mulsd xmm0, xmm0
addsd xmm1, xmm0
comisd xmm1, xmmword [esp + 0x70]
ja 0x102967e9
mov esi, dword [esp + 0x40]
inc esi
cmp dword [esp + 0x18], 5
mov dword [esp + 0x40], esi
jge 0x102967e9
mov edi, dword [esp + 0x28]
ucomisd xmm3, xmm5
mov ecx, dword [edi]
movsd qword [esp + 0x70], xmm1
lahf
test ah, 0x44
jp 0x10295fe6
movsd xmm6, qword [ecx]
movsd xmm7, qword [ecx + 8]
jmp 0x1029609d
movsd xmm0, qword [0x102ff180]
ucomisd xmm0, xmm5
lahf
test ah, 0x44
jp 0x10296007
movsd xmm6, qword [ecx + 0x30]
movsd xmm7, qword [ecx + 0x38]
jmp 0x1029609d
movaps xmm4, xmm0
movsd xmm6, qword [ecx + 0x10]
movsd xmm0, qword [ecx]
subsd xmm4, xmm5
movsd xmm7, qword [ecx + 0x18]
movaps xmm1, xmm5
mulsd xmm1, xmm5
movaps xmm3, xmm4
movaps xmm2, xmm4
mulsd xmm3, xmm4
mulsd xmm4, qword [0x102ff1b8]
mulsd xmm2, xmm3
mulsd xmm3, qword [0x102ff1b8]
mulsd xmm4, xmm1
mulsd xmm0, xmm2
mulsd xmm3, xmm5
mulsd xmm1, xmm5
mulsd xmm6, xmm3
mulsd xmm7, xmm3
addsd xmm6, xmm0
movsd xmm0, qword [ecx + 0x20]
mulsd xmm0, xmm4
addsd xmm6, xmm0
movaps xmm0, xmm1
mulsd xmm0, qword [ecx + 0x30]
addsd xmm6, xmm0
movsd xmm0, qword [ecx + 8]
mulsd xmm0, xmm2
addsd xmm7, xmm0
movsd xmm0, qword [ecx + 0x28]
mulsd xmm0, xmm4
addsd xmm7, xmm0
movsd xmm0, qword [ecx + 0x38]
mulsd xmm0, xmm1
addsd xmm7, xmm0
lea eax, [esp + 0x90]
movsd qword [esp + 0x18], xmm6
push eax
movaps xmm2, xmm5
movsd qword [esp + 0x14], xmm7
movsd qword [esp + 0x54], xmm6
movsd qword [esp + 0x5c], xmm7
call fcn.101d46e0
lea ecx, [esp + 0xd0]
movsd xmm1, qword [eax]
movsd xmm0, qword [eax + 8]
lea eax, [esp + 0x50]
addsd xmm1, qword [esp + 0x18]
addsd xmm0, qword [esp + 0x10]
push eax
mov eax, dword [esp + 0xc]
movsd qword [esp + 0x64], xmm1
movsd qword [esp + 0x6c], xmm0
push dword [eax]
call fcn.10277740
test eax, eax
je 0x10296295
mov eax, dword [esp + 0x24]
xorps xmm3, xmm3
movsd xmm7, qword [0x102ff180]
movsd xmm6, qword [esp + eax*8 + 0x1b0]
mov eax, dword [esp + 8]
ucomisd xmm3, xmm6
mov ecx, dword [eax]
lahf
test ah, 0x44
jp 0x10296138
movsd xmm4, qword [ecx]
movsd xmm5, qword [ecx + 8]
jmp 0x102961ae
ucomisd xmm7, xmm6
lahf
test ah, 0x44
jp 0x1029614e
movsd xmm4, qword [ecx + 0x20]
movsd xmm5, qword [ecx + 0x28]
jmp 0x102961ae
movsd xmm4, qword [ecx + 0x10]
movaps xmm3, xmm7
subsd xmm3, xmm6
movsd xmm5, qword [ecx + 0x18]
movaps xmm1, xmm6
mulsd xmm1, xmm6
movaps xmm2, xmm3
mulsd xmm2, xmm3
addsd xmm3, xmm3
mulsd xmm3, xmm6
movaps xmm0, xmm2
mulsd xmm0, qword [ecx]
mulsd xmm4, xmm3
mulsd xmm5, xmm3
addsd xmm4, xmm0
movaps xmm0, xmm1
mulsd xmm0, qword [ecx + 0x20]
addsd xmm4, xmm0
movsd xmm0, qword [ecx + 8]
mulsd xmm0, xmm2
addsd xmm5, xmm0
movsd xmm0, qword [ecx + 0x28]
mulsd xmm0, xmm1
addsd xmm5, xmm0
movaps xmm0, xmm6
movsd qword [esp + 0xb0], xmm4
addsd xmm0, xmm6
movsd qword [esp + 0xb8], xmm5
movsd xmm3, qword [ecx + 0x18]
movaps xmm1, xmm7
movaps xmm2, xmm6
subsd xmm2, xmm7
movsd xmm7, qword [ecx + 0x10]
subsd xmm1, xmm0
movsd xmm0, qword [ecx]
mulsd xmm0, xmm2
mulsd xmm7, xmm1
mulsd xmm3, xmm1
movsd xmm1, qword [ecx + 0x28]
addsd xmm7, xmm0
movsd xmm0, qword [ecx + 0x20]
mulsd xmm0, xmm6
addsd xmm7, xmm0
movsd xmm0, qword [ecx + 8]
mulsd xmm0, xmm2
addsd xmm3, xmm0
movaps xmm0, xmm1
mulsd xmm0, xmm6
addsd xmm3, xmm0
xorps xmm0, xmm0
ucomisd xmm7, xmm0
lahf
test ah, 0x44
jp 0x1029625d
ucomisd xmm3, xmm0
lahf
test ah, 0x44
jp 0x1029625d
ucomisd xmm6, xmm0
lahf
test ah, 0x44
jnp 0x1029624c
ucomisd xmm6, qword [0x102ff180]
lahf
test ah, 0x44
jp 0x1029625d
movsd xmm7, qword [ecx + 0x20]
movaps xmm3, xmm1
subsd xmm7, qword [ecx]
subsd xmm3, qword [ecx + 8]
addsd xmm4, xmm7
addsd xmm5, xmm3
lea eax, [esp + 0xb0]
push eax
push dword [edi]
lea ecx, [esp + 0x288]
movsd qword [esp + 0xc8], xmm4
movsd qword [esp + 0xd0], xmm5
call fcn.101d26c0
test eax, eax
jne 0x10295d60
movaps xmm0, xmmword [0x102ff950]
lea ecx, [esp + 0x50]
mov edi, dword [esp + 0x38]
sub esp, 8
mov esi, dword [esp + 0x30]
mov eax, dword [esp + 0x10]
movsd xmm1, qword [0x102ff410]
movups xmmword [esp + 0x58], xmm0
mov byte [esp + 0x70], 0
movups xmmword [esp + 0x98], xmm0
mov byte [esp + 0xb0], 0
movsd xmm0, qword [edi + 0xa0]
movsd qword [esp], xmm0
push dword [esi]
movsd qword [esp + 0x6c], xmm1
push edi
push dword [eax]
movsd qword [esp + 0xb4], xmm1
call fcn.1029b2d0
movsd xmm0, qword [edi + 0xa8]
lea eax, [edi + 0x20]
sub esp, 8
lea ecx, [esp + 0x98]
movsd qword [esp], xmm0
push dword [esi]
push eax
mov eax, dword [esp + 0x18]
push dword [eax]
call fcn.1029b2d0
movsd xmm2, qword [esp + 0x60]
movsd xmm1, qword [esp + 0xa0]
movaps xmm0, xmm2
comisd xmm2, xmm1
seta al
mov byte [esp + 0xf], al
test al, al
je 0x10296346
movaps xmm0, xmm1
movaps xmm1, xmm2
mov ecx, dword [esp + 0x3c]
movsd xmm5, qword [ecx + 0xb0]
comisd xmm0, xmm5
ja 0x1029635e
movsd xmm0, xmm5
jmp 0x10296362
movsd xmm0, xmm0
movsd xmm4, qword [ecx + 0xb8]
movsd qword [esp + 0x28], xmm0
comisd xmm4, xmm1
ja 0x1029637c
movsd xmm2, xmm4
jmp 0x10296380
movsd xmm2, xmm1
comisd xmm0, xmm2
movsd qword [esp + 0x18], xmm2
ja 0x102967e9
movsd xmm3, qword [esp + 0x58]
movsd xmm6, qword [esp + 0x98]
movsd xmm7, qword [esp + 0x90]
ucomisd xmm0, xmm5
movsd xmm0, qword [esp + 0x50]
lahf
test ah, 0x44
jp 0x102964d4
mov eax, dword [esp + 8]
sub esp, 8
movsd xmm0, qword [0x102ff410]
movsd qword [esp + 0x88], xmm0
movaps xmm0, xmmword [0x102ff950]
movsd qword [esp], xmm5
push dword [eax]
mov byte [esp + 0x94], 0
push ecx
push dword [esi]
lea ecx, [esp + 0x84]
movups xmmword [esp + 0x84], xmm0
call fcn.1028e200
mov eax, dword [esp + 0x3c]
movsd xmm2, qword [esp + 0x18]
movsd xmm0, qword [esp + 0x50]
movsd xmm3, qword [esp + 0x58]
movsd xmm1, qword [eax]
subsd xmm1, qword [esp + 0x70]
movsd xmm4, qword [eax + 0xb8]
movsd xmm6, qword [esp + 0x98]
movsd xmm7, qword [esp + 0x90]
movsd qword [esp + 0x10], xmm1
movsd xmm1, qword [eax + 8]
subsd xmm1, qword [esp + 0x78]
mov al, byte [esp + 0xf]
jmp 0x10296507
mov edx, dword [esp + 0x4c]
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x24]
mov byte [edx + 0x1a8], 1
movsd xmm0, qword [esp + ecx*8 + 0x360]
add ecx, ecx
mov dword [edx + 0x1a0], 0
movsd qword [edx + 0xe0], xmm0
movsd xmm0, qword [esp + eax*8 + 0x1b0]
add eax, eax
movsd qword [edx + 0x140], xmm0
movups xmm0, xmmword [esp + ecx*8 + 0x280]
movups xmmword [edx], xmm0
movups xmm0, xmmword [esp + eax*8 + 0xd0]
mov eax, 1
movups xmmword [edx + 0xc0], xmm0
mov byte [edx + 0x1a6], 1
pop edi
pop esi
mov ecx, dword [esp + 0x42c]
xor ecx, esp
call fcn.102af895
mov esp, ebp
pop ebp
ret 0x10
test al, al
je 0x102964f2
movaps xmm1, xmm7
lea ecx, [edi + 0x20]
subsd xmm1, qword [ecx]
movsd qword [esp + 0x10], xmm1
movaps xmm1, xmm6
subsd xmm1, qword [ecx + 8]
jmp 0x1029650a
movaps xmm1, xmm0
subsd xmm1, qword [edi]
movsd qword [esp + 0x10], xmm1
movaps xmm1, xmm3
subsd xmm1, qword [edi + 8]
lea ecx, [edi + 0x20]
ucomisd xmm2, xmm4
movsd qword [esp + 0x40], xmm1
lahf
test ah, 0x44
jp 0x10296577
mov edi, dword [esp + 8]
lea ecx, [esp + 0x50]
movsd xmm0, qword [0x102ff410]
sub esp, 8
movsd qword [esp + 0x68], xmm0
movaps xmm0, xmmword [0x102ff950]
mov byte [esp + 0x70], 0
movsd qword [esp], xmm4
push dword [edi]
movups xmmword [esp + 0x5c], xmm0
push dword [esp + 0x54]
push dword [esi]
call fcn.1028e200
mov eax, dword [esp + 0x48]
movsd xmm2, qword [esp + 0x18]
movsd xmm0, qword [eax]
movsd xmm3, qword [eax + 8]
subsd xmm0, qword [esp + 0x50]
subsd xmm3, qword [esp + 0x58]
jmp 0x10296599
test al, al
je 0x10296586
subsd xmm0, qword [edi]
subsd xmm3, qword [edi + 8]
jmp 0x10296595
movaps xmm0, xmm7
movaps xmm3, xmm6
subsd xmm0, qword [ecx]
subsd xmm3, qword [ecx + 8]
mov edi, dword [esp + 8]
movsd xmm1, qword [esp + 0x10]
mulsd xmm1, xmm0
movsd xmm0, qword [esp + 0x40]
mulsd xmm0, xmm3
xorps xmm3, xmm3
addsd xmm1, xmm0
comisd xmm1, xmm3
jae 0x102967e9
movsd xmm0, qword [0x102ff410]
movsd xmm7, qword [esp + 0x28]
movsd qword [esp + 0x60], xmm0
subsd xmm2, xmm7
movaps xmm0, xmmword [0x102ff950]
mov byte [esp + 0x68], 0
movups xmmword [esp + 0x50], xmm0
nop word [eax + eax]
mulsd xmm2, qword [0x102ff150]
movsd xmm1, qword [0x102fefd8]
movaps xmm0, xmm2
movsd qword [esp + 0x18], xmm2
andps xmm0, xmmword [0x102ff960]
comisd xmm1, xmm0
ja 0x102967e9
mov ecx, dword [esi]
movaps xmm0, xmm2
addsd xmm7, xmm0
ucomisd xmm3, xmm7
movsd qword [esp + 0x28], xmm7
lahf
test ah, 0x44
jp 0x10296640
movups xmm0, xmmword [ecx]
movups xmmword [esp + 0x70], xmm0
jmp 0x10296702
movsd xmm0, qword [0x102ff180]
ucomisd xmm0, xmm7
lahf
test ah, 0x44
jp 0x10296660
movups xmm0, xmmword [ecx + 0x30]
movups xmmword [esp + 0x70], xmm0
jmp 0x10296702
movaps xmm6, xmm0
movsd xmm2, qword [ecx + 0x10]
movsd xmm0, qword [ecx]
subsd xmm6, xmm7
movsd xmm1, qword [ecx + 0x18]
movaps xmm3, xmm7
mulsd xmm3, xmm7
movaps xmm5, xmm6
mulsd xmm5, xmm6
movaps xmm4, xmm5
mulsd xmm5, qword [0x102ff1b8]
mulsd xmm4, xmm6
mulsd xmm6, qword [0x102ff1b8]
mulsd xmm5, xmm7
mulsd xmm0, xmm4
mulsd xmm6, xmm3
mulsd xmm2, xmm5
mulsd xmm3, xmm7
mulsd xmm1, xmm5
addsd xmm2, xmm0
movsd xmm0, qword [ecx + 0x20]
mulsd xmm0, xmm6
addsd xmm2, xmm0
movaps xmm0, xmm3
mulsd xmm0, qword [ecx + 0x30]
addsd xmm2, xmm0
movsd xmm0, qword [ecx + 8]
mulsd xmm0, xmm4
movsd qword [esp + 0x70], xmm2
addsd xmm1, xmm0
movsd xmm0, qword [ecx + 0x28]
mulsd xmm0, xmm6
addsd xmm1, xmm0
movsd xmm0, qword [ecx + 0x38]
mulsd xmm0, xmm3
addsd xmm1, xmm0
movsd qword [esp + 0x78], xmm1
movups xmm0, xmmword [esp + 0x70]
sub esp, 8
lea eax, [esp + 0x98]
movups xmmword [esp + 0x98], xmm0
movsd qword [esp], xmm7
push dword [edi]
push eax
push ecx
lea ecx, [esp + 0x64]
call fcn.1028e200
movsd xmm0, qword [esp + 0x90]
xor ecx, ecx
subsd xmm0, qword [esp + 0x50]
movsd xmm1, qword [esp + 0x98]
subsd xmm1, qword [esp + 0x58]
movsd xmm2, qword [esp + 0x10]
mulsd xmm2, xmm0
movsd xmm0, qword [esp + 0x40]
mulsd xmm0, xmm1
xorps xmm1, xmm1
addsd xmm2, xmm0
movsd xmm0, qword [esp + 0x18]
comisd xmm2, xmm1
setae cl
xor eax, eax
comisd xmm1, xmm0
seta al
cmp ecx, eax
jne 0x1029678d
xorps xmm0, xmmword [0x102ff970]
movsd qword [esp + 0x18], xmm0
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x94]
call fcn.101d04c0
movsd xmm2, qword [esp + 0x18]
xorps xmm3, xmm3
movsd xmm7, qword [esp + 0x28]
test al, al
je 0x102965f0
mov eax, dword [edi + 0x18]
movsd xmm2, qword [esp + 0x60]
nop
movsd xmm1, qword [eax + 0xa8]
movsd xmm0, qword [eax + 0xa0]
subsd xmm1, xmm2
subsd xmm0, xmm2
mulsd xmm1, xmm0
comisd xmm3, xmm1
jae 0x10296801
mov eax, dword [eax + 0x78]
test eax, eax
jne 0x102967c0
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x42c]
xor ecx, esp
call fcn.102af895
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [esp + 0x4c]
lea ecx, [esp + 0x90]
push ecx
movaps xmm3, xmm2
mov ecx, eax
movsd xmm2, qword [esp + 0x2c]
mov byte [eax + 0x1a7], 1
call fcn.10220160
mov ecx, dword [esp + 0x434]
mov eax, 1
pop edi
pop esi
xor ecx, esp
call fcn.102af895
mov esp, ebp
pop ebp
ret 0x10