Function at 0x100863bf
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xd8
mov eax, dword [0x103b33c0]
xor eax, esp
mov dword [esp + 0xd4], eax
mov ecx, dword [0x103b6348]
xor edx, edx
inc edx
push ebx
mov ebx, dword [esp + 0xe8]
mov eax, dword [ecx + 0x3e48]
push esi
mov esi, dword [esp + 0xe8]
push edi
mov edi, dword [esp + 0xe8]
mov byte [eax + 0xa8], dl
mov eax, dword [ecx + 0x3e48]
mov dword [esp + 0x54], edi
mov dword [esp + 0x30], esi
mov dword [esp + 0x20], eax
cmp byte [eax + 0xab], 0
je 0x10086422
xor al, al
jmp 0x100870df
push ebp
mov ebp, dword [0x103b6348]
call fcn.10046fff
fstp dword [esp + 0x68]
call fcn.10040eb3
fstp dword [esp + 0x6c]
test bl, 0x10
je 0x10086445
xorps xmm0, xmm0
jmp 0x10086453
movss xmm0, dword [esp + 0x68]
addss xmm0, dword [ebp + 0x37ec]
movss xmm1, dword [esp + 0x6c]
subss xmm1, xmm0
movss dword [esp + 0x50], xmm0
push 0
push edi
movss dword [esp + 0x54], xmm1
call fcn.100465c4
and dword [ebp + 0x46a8], 0
mov dword [esp + 0x5c], eax
call fcn.10040604
push edi
call fcn.1004fa3a
add esp, 0xc
mov dword [esp + 0x80], ebx
test bl, 0x20
je 0x100864a2
and ebx, 0xff9fffff
or ebx, 0x100008
test bl, 8
jne 0x100864b0
push ebx
push esi
call fcn.100870f7
pop ecx
pop ecx
mov ecx, 0x700000
test ecx, ebx
jne 0x100864c3
mov eax, dword [ebp + 0x5964]
and eax, ecx
or ebx, eax
mov ecx, 0x1800000
test ecx, ebx
jne 0x100864d6
mov eax, dword [ebp + 0x5964]
and eax, ecx
or ebx, eax
mov ecx, 0x6000000
test ecx, ebx
jne 0x100864e9
mov eax, dword [ebp + 0x5964]
and eax, ecx
or ebx, eax
mov ecx, 0x18000000
test ecx, ebx
jne 0x100864fc
mov eax, dword [ebp + 0x5964]
and eax, ecx
or ebx, eax
mov eax, dword [ebp + 0x5964]
xor edx, edx
movss xmm1, dword [esi]
and eax, 0xe00fffff
movss xmm2, dword [esi + 4]
or ebx, eax
movss xmm3, dword [esi + 8]
mov ecx, ebx
movss xmm0, dword [0x100c7298]
inc edx
shr ecx, 1
mov eax, ebx
not cl
shr eax, 0x13
and cl, dl
mov dword [esp + 0x60], ebx
and al, dl
mov dword [esp + 0x38], ecx
movzx edx, cl
add edx, 3
mov dword [esp + 0x3c], eax
mov dword [esp + 0x18], edx
movss dword [esp + 0x84], xmm1
movss dword [esp + 0x88], xmm2
movss dword [esp + 0x8c], xmm3
movss dword [esp + 0x40], xmm0
test cl, cl
je 0x10086571
movss xmm0, dword [esi + 0xc]
mov eax, ebx
movss dword [esp + 0x90], xmm0
and eax, 0x10100000
mov edi, 0x8200000
cmp eax, 0x10100000
jne 0x100865c3
lea eax, [esp + 0x8c]
push eax
lea eax, [esp + 0x8c]
push eax
lea eax, [esp + 0x8c]
push eax
sub esp, 0xc
movss dword [esp + 8], xmm3
movss dword [esp + 4], xmm2
movss dword [esp], xmm1
call fcn.100421b3
add esp, 0x18
jmp 0x1008661d
mov eax, ebx
and eax, edi
cmp eax, edi
jne 0x10086649
lea eax, [esp + 0x8c]
push eax
lea eax, [esp + 0x8c]
push eax
lea eax, [esp + 0x8c]
push eax
sub esp, 0xc
movss dword [esp + 8], xmm3
movss dword [esp + 4], xmm2
movss dword [esp], xmm1
call fcn.10042302
lea eax, [esp + 0xa4]
push eax
lea eax, [esp + 0xa4]
push eax
lea eax, [esp + 0xa4]
push eax
push esi
call fcn.10087492
add esp, 0x28
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x38]
movss xmm1, dword [esp + 0x84]
movss xmm2, dword [esp + 0x88]
movss xmm3, dword [esp + 0x8c]
movss xmm0, dword [esp + 0x90]
comiss xmm1, dword [0x100c7294]
movss xmm5, dword [0x100d2fb4]
movss xmm4, dword [0x100c7e9c]
jb 0x10086667
movaps xmm7, xmm4
jmp 0x1008666a
movaps xmm7, xmm5
comiss xmm2, dword [0x100c7294]
movss xmm6, dword [0x100c7ec4]
mulss xmm1, xmm6
addss xmm1, xmm7
cvttss2si eax, xmm1
mov dword [esp + 0x94], eax
jb 0x10086693
movaps xmm1, xmm4
jmp 0x10086696
movaps xmm1, xmm5
comiss xmm3, dword [0x100c7294]
mulss xmm2, xmm6
addss xmm2, xmm1
cvttss2si eax, xmm2
mov dword [esp + 0x98], eax
jb 0x100866b7
movaps xmm1, xmm4
jmp 0x100866ba
movaps xmm1, xmm5
comiss xmm0, dword [0x100c7294]
mulss xmm3, xmm6
addss xmm3, xmm1
cvttss2si eax, xmm3
mov dword [esp + 0x9c], eax
jae 0x100866d9
movaps xmm4, xmm5
mulss xmm0, xmm6
mov byte [esp + 0x12], 0
mov byte [esp + 0x13], 0
addss xmm0, xmm4
cvttss2si eax, xmm0
mov dword [esp + 0xa0], eax
cmp dword [ebp + 0x382c], 0
mov eax, dword [esp + 0x24]
movss xmm2, dword [eax + 0xec]
movss xmm3, dword [eax + 0xf0]
movss dword [esp + 0x28], xmm2
movss dword [esp + 0x30], xmm3
jne 0x10086727
movss xmm1, dword [esp + 0x50]
jmp 0x1008672a
xorps xmm1, xmm1
movaps xmm0, xmm2
addss xmm0, xmm1
movss dword [eax + 0xec], xmm0
test ebx, 0x300000
je 0x100869fa
test bl, 0x20
jne 0x100869fa
movss xmm2, dword [ebp + 0x37ec]
lea eax, [edx - 1]
movss xmm1, dword [esp + 0x4c]
movaps xmm0, xmm2
movd xmm3, eax
mov ecx, ebx
cvtdq2ps xmm3, xmm3
and ecx, 0x1000000
push ecx
mov dword [esp], 0xbf800000
push 0
push 0
mulss xmm0, xmm3
mov dword [esp + 0x20], ecx
subss xmm1, xmm0
movd xmm0, edx
cvtdq2ps xmm0, xmm0
mov edx, str.M:000
divss xmm1, xmm0
cvttss2si eax, xmm1
movss xmm1, dword [0x100c7298]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
maxss xmm1, xmm0
movss xmm0, dword [esp + 0x58]
addss xmm2, xmm1
movss dword [esp + 0x38], xmm1
movss xmm1, dword [0x100c7298]
mulss xmm2, xmm3
subss xmm0, xmm2
cvttss2si eax, xmm0
movd xmm0, eax
mov eax, str.M:0.000
cvtdq2ps xmm0, xmm0
cmove eax, edx
push eax
lea eax, [esp + 0x2c]
push eax
maxss xmm1, xmm0
movss dword [esp + 0x70], xmm1
call fcn.1004139f
movss xmm1, dword [esp + 0x40]
add esp, 0x14
test ebx, 0x200000
movss xmm0, dword [eax]
push 0
pop eax
setne al
xor ecx, ecx
inc eax
comiss xmm0, xmm1
cmovae eax, ecx
xor edi, edi
cmp dword [esp + 0x18], ecx
jbe 0x10086bf5
shl eax, 4
cmp dword [esp + 0x14], ecx
je 0x10086920
mov ecx, ebx
lea eax, [eax + 0x103b3118]
mov bl, byte [esp + 0x12]
and ecx, 8
mov dword [esp + 0x1c], ecx
mov esi, ecx
mov dword [esp + 0x14], eax
test edi, edi
je 0x10086871
movss xmm0, dword [ebp + 0x37ec]
push ecx
push ecx
movss dword [esp + 4], xmm0
and dword [esp], 0
call fcn.10052115
movss xmm1, dword [esp + 0x34]
pop ecx
pop ecx
lea eax, [edi + 1]
mov dword [esp + 0x1c], eax
cmp eax, dword [esp + 0x18]
jge 0x10086883
movaps xmm0, xmm1
jmp 0x10086889
movss xmm0, dword [esp + 0x5c]
push ecx
movss dword [esp], xmm0
call fcn.10053407
cmp byte [esp + 0x40], 0
mov eax, dword [esp + 0x18]
pop ecx
je 0x100868a5
xorps xmm0, xmm0
jmp 0x100868ad
movss xmm0, dword [0x100c7298]
push 0
push dword [eax]
lea eax, [esp + 0x8c]
sub esp, 0xc
lea eax, [eax + edi*4]
movss dword [esp + 8], xmm0
and dword [esp + 4], 0
mov dword [esp], 0x3b808081
push eax
push dword [edi*4 + 0x103b30d8]
call fcn.10089d62
or bl, al
add esp, 0x1c
or byte [esp + 0x13], bl
test esi, esi
jne 0x100868fa
xor eax, eax
inc eax
push eax
push str.context
call fcn.1004f50e
pop ecx
pop ecx
mov edi, dword [esp + 0x1c]
add dword [esp + 0x14], 4
movss xmm1, dword [esp + 0x2c]
cmp edi, dword [esp + 0x18]
jl 0x1008684c
mov byte [esp + 0x12], bl
mov ebx, dword [esp + 0x60]
jmp 0x10086bf1
xor edx, edx
lea eax, [eax + 0x103b30e8]
xor edi, edi
mov dword [esp + 0x14], eax
cmp byte [esp + 0x3c], dl
mov ecx, 0xff
cmovne ecx, edx
mov dword [esp + 0x1c], ecx
mov ecx, ebx
mov esi, dword [esp + 0x1c]
and ecx, 8
mov dword [esp + 0x3c], ecx
mov bl, dl
test edi, edi
jle 0x10086972
movss xmm0, dword [ebp + 0x37ec]
push ecx
push ecx
movss dword [esp + 4], xmm0
and dword [esp], 0
call fcn.10052115
movss xmm1, dword [esp + 0x34]
pop ecx
pop ecx
lea eax, [edi + 1]
mov dword [esp + 0x1c], eax
cmp eax, dword [esp + 0x18]
jge 0x10086984
movaps xmm0, xmm1
jmp 0x1008698a
movss xmm0, dword [esp + 0x5c]
push ecx
movss dword [esp], xmm0
call fcn.10053407
mov eax, dword [esp + 0x18]
pop ecx
push 0
push dword [eax]
lea eax, [esp + 0x9c]
push esi
push 0
push ecx
lea eax, [eax + edi*4]
mov dword [esp], 0x3f800000
push eax
push dword [edi*4 + 0x103b30d8]
call fcn.10089fef
add esp, 0x1c
or bl, al
cmp dword [esp + 0x3c], 0
jne 0x100869dc
xor eax, eax
inc eax
push eax
push str.context
call fcn.1004f50e
pop ecx
pop ecx
mov edi, dword [esp + 0x1c]
add dword [esp + 0x14], 4
movss xmm1, dword [esp + 0x2c]
cmp edi, dword [esp + 0x18]
jl 0x1008694d
jmp 0x10086913
test ebx, 0x400000
je 0x10086c05
test bl, 0x20
jne 0x10086c05
test cl, cl
je 0x10086aa8
mov ecx, dword [esp + 0xa0]
mov eax, ecx
mov edx, dword [esp + 0x9c]
cmp ecx, 0xff
mov esi, dword [esp + 0x98]
mov edi, dword [esp + 0x94]
mov dword [esp + 0x14], 0xff
cmovg eax, dword [esp + 0x14]
and dword [esp + 0x1c], 0
test ecx, ecx
mov ecx, dword [esp + 0x14]
cmovs eax, dword [esp + 0x1c]
cmp edx, ecx
push eax
mov eax, edx
cmovg eax, ecx
and dword [esp + 0x20], 0
test edx, edx
cmovs eax, dword [esp + 0x20]
cmp esi, ecx
push eax
mov eax, esi
cmovg eax, ecx
xor edx, edx
test esi, esi
cmovs eax, edx
cmp edi, ecx
push eax
mov eax, edi
cmovg eax, ecx
xor ecx, ecx
test edi, edi
cmovs eax, ecx
push eax
push 0x100d2ca4
lea eax, [esp + 0xb8]
push 0x40
push eax
call fcn.10048da2
mov edi, dword [esp + 0x30]
add esp, 0x1c
jmp 0x10086b09
mov ecx, dword [esp + 0x9c]
mov edi, 0xff
mov edx, dword [esp + 0x98]
cmp ecx, edi
mov esi, dword [esp + 0x94]
mov eax, ecx
cmovg eax, edi
and dword [esp + 0x1c], 0
test ecx, ecx
cmovs eax, dword [esp + 0x1c]
cmp edx, edi
push eax
mov eax, edx
cmovg eax, edi
xor ecx, ecx
test edx, edx
cmovs eax, ecx
cmp esi, edi
push eax
mov eax, esi
cmovg eax, edi
test esi, esi
cmovs eax, ecx
push eax
push 0x100d2cb8
lea eax, [esp + 0xb4]
push 0x40
push eax
call fcn.10048da2
add esp, 0x18
movss xmm4, dword [esp + 0x4c]
push ecx
movss dword [esp], xmm4
call fcn.10053407
xor ecx, ecx
lea eax, [esp + 0xa8]
push ecx
push ecx
push 6
push 0x40
push eax
push ecx
push str.Text
call fcn.1008bfdf
add esp, 0x20
test al, al
je 0x10086bdc
xor eax, eax
inc eax
mov byte [esp + 0x12], al
lea eax, [esp + 0xa4]
mov cl, byte [eax]
cmp cl, 0x23
je 0x10086b5f
cmp cl, 0x20
je 0x10086b5f
cmp cl, 9
jne 0x10086b62
inc eax
jmp 0x10086b4e
xor ecx, ecx
mov dword [esp + 0xa0], edi
mov dword [esp + 0x9c], ecx
mov dword [esp + 0x98], ecx
mov dword [esp + 0x94], ecx
cmp byte [esp + 0x38], cl
je 0x10086bb6
lea ecx, [esp + 0xa0]
push ecx
lea ecx, [esp + 0xa0]
push ecx
lea ecx, [esp + 0xa0]
push ecx
lea ecx, [esp + 0xa0]
push ecx
push str._02X_02X_02X_02X
push eax
call fcn.1005b0b6
add esp, 0x18
jmp 0x10086bdc
lea ecx, [esp + 0x9c]
push ecx
lea ecx, [esp + 0x9c]
push ecx
lea ecx, [esp + 0x9c]
push ecx
push str._02X_02X_02X
push eax
call fcn.1005b0b6
add esp, 0x14
test bl, 8
jne 0x10086bf1
xor eax, eax
inc eax
push eax
push str.context
call fcn.1004f50e
pop ecx
pop ecx
mov esi, dword [esp + 0x34]
movss xmm2, dword [esp + 0x28]
movss xmm3, dword [esp + 0x30]
mov eax, dword [esp + 0x24]
xor edi, edi
mov dword [esp + 0x1c], edi
test bl, 0x10
jne 0x10086dc2
test bl, 0x20
jne 0x10086c31
cmp dword [ebp + 0x382c], edi
je 0x10086c31
movss xmm0, dword [esp + 0x4c]
addss xmm0, dword [ebp + 0x37ec]
jmp 0x10086c34
xorps xmm0, xmm0
cmp byte [esp + 0x38], 0
addss xmm0, xmm2
movss dword [eax + 0xf0], xmm3
movss dword [eax + 0xec], xmm0
je 0x10086c5a
movss xmm0, dword [esi + 0xc]
movss dword [esp + 0x40], xmm0
movss xmm0, dword [esi]
lea eax, [esp + 0x40]
and dword [esp + 0x44], edi
movss dword [esp + 0x70], xmm0
movss xmm0, dword [esi + 4]
push eax
movss dword [esp + 0x78], xmm0
lea eax, [esp + 0x74]
movss xmm0, dword [esi + 8]
push ebx
movss dword [esp + 0x80], xmm0
movss xmm0, dword [esp + 0x48]
and dword [esp + 0x48], edi
push eax
push str.ColorButton
movss dword [esp + 0x8c], xmm0
call fcn.10085e2d
add esp, 0x10
test al, al
je 0x10086d21
test bl, 4
jne 0x10086d21
lea edi, [ebp + 0x5988]
lea esi, [esp + 0x70]
movsd dword es:[edi], dword [esi]
push 0
push 0x100d2cfc
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.1004f3b4
movss xmm0, dword [ebp + 0x46c8]
lea eax, [esp + 0x48]
addss xmm0, dword [0x100c7294]
and dword [esp + 0x48], 0
and dword [esp + 0x4c], 0
push eax
lea eax, [esp + 0x6c]
movss dword [esp + 0x6c], xmm0
movss xmm0, dword [ebp + 0x37e8]
addss xmm0, dword [ebp + 0x46d4]
push 0
push eax
movss dword [esp + 0x78], xmm0
call fcn.100534ae
mov esi, dword [esp + 0x48]
add esp, 0x14
mov edi, dword [esp + 0x1c]
test bl, 8
jne 0x10086d36
xor eax, eax
inc eax
push eax
push str.context
call fcn.1004f50e
pop ecx
pop ecx
push 0
push 0x100d2cfc
call fcn.1004071f
pop ecx
pop ecx
test al, al
je 0x10086dc2
mov eax, dword [ebp + 0x3e48]
xor ecx, ecx
inc ecx
cmp word [eax + 0xb2], cx
jne 0x10086dbd
mov ecx, dword [esp + 0x54]
mov edi, eax
mov eax, dword [esp + 0x58]
cmp eax, ecx
je 0x10086d79
push 0
push ecx
push eax
call fcn.100960a4
add esp, 0xc
call fcn.10093227
movss xmm0, dword [esp + 0x68]
mulss xmm0, dword [0x100cb7c4]
push ecx
movss dword [esp], xmm0
call fcn.10053407
lea eax, [ebp + 0x5988]
push eax
mov eax, dword [esp + 0x88]
and eax, 0x1f890002
or eax, 0x740080
push eax
push esi
push str.picker
call fcn.100875b1
add esp, 0x14
or byte [esp + 0x12], al
call fcn.10045886
mov eax, dword [esp + 0x54]
cmp dword [esp + 0x58], eax
je 0x10086e2a
test bl, bl
js 0x10086e2a
movss xmm0, dword [ebp + 0x37ec]
push ecx
push ecx
movss dword [esp + 4], xmm0
and dword [esp], 0
call fcn.10052115
pop ecx
pop ecx
test bl, 0x20
je 0x10086df8
movss xmm0, dword [esp + 0x50]
jmp 0x10086e06
movss xmm0, dword [esp + 0x6c]
addss xmm0, dword [ebp + 0x37ec]
addss xmm0, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
push 0
push dword [esp + 0x58]
push dword [esp + 0x60]
movss dword [eax + 0xec], xmm0
call fcn.100960a4
add esp, 0xc
cmp byte [esp + 0x12], 0
je 0x10086fcb
test edi, edi
jne 0x10086fcb
cmp byte [esp + 0x13], 0
jne 0x10086e5e
movups xmm0, xmmword [esp + 0x94]
cvtdq2ps xmm0, xmm0
divps xmm0, xmmword [0x100d30a0]
movups xmmword [esp + 0x84], xmm0
mov ecx, 0x8200000
mov eax, ebx
and eax, ecx
cmp eax, ecx
jne 0x10086f31
movss xmm0, dword [esp + 0x84]
lea eax, [esp + 0x8c]
push eax
lea eax, [esp + 0x8c]
movss dword [ebp + 0x597c], xmm0
movss xmm0, dword [esp + 0x8c]
push eax
lea eax, [esp + 0x8c]
movss dword [ebp + 0x5980], xmm0
movss xmm0, dword [esp + 0x94]
push eax
sub esp, 0xc
movss dword [esp + 8], xmm0
movss xmm0, dword [esp + 0xa0]
movss dword [esp + 4], xmm0
movss xmm0, dword [esp + 0x9c]
movss dword [esp], xmm0
call fcn.100421b3
movss xmm0, dword [esp + 0x9c]
lea eax, [esp + 0x88]
and dword [esp + 0x94], 0
movss dword [esp + 0x88], xmm0
movss xmm0, dword [esp + 0xa0]
movss dword [esp + 0x8c], xmm0
movss xmm0, dword [esp + 0xa4]
push eax
movss dword [esp + 0x94], xmm0
call fcn.1004211f
add esp, 0x1c
mov dword [ebp + 0x5984], eax
mov ecx, 0x10100000
mov eax, ebx
and eax, ecx
cmp eax, ecx
jne 0x10086f8d
movss xmm0, dword [esp + 0x8c]
lea eax, [esp + 0x8c]
push eax
lea eax, [esp + 0x8c]
push eax
lea eax, [esp + 0x8c]
push eax
sub esp, 0xc
movss dword [esp + 8], xmm0
movss xmm0, dword [esp + 0xa0]
movss dword [esp + 4], xmm0
movss xmm0, dword [esp + 0x9c]
movss dword [esp], xmm0
call fcn.10042302
add esp, 0x18
cmp byte [esp + 0x38], 0
movss xmm0, dword [esp + 0x84]
movss dword [esi], xmm0
movss xmm0, dword [esp + 0x88]
movss dword [esi + 4], xmm0
movss xmm0, dword [esp + 0x8c]
movss dword [esi + 8], xmm0
je 0x10086fcb
movss xmm0, dword [esp + 0x90]
movss dword [esi + 0xc], xmm0
call fcn.1004f75d
call fcn.10045677
xor eax, eax
inc eax
test byte [ebp + 0x46c4], al
je 0x100870a7
test ebx, 0x200
jne 0x100870a7
call fcn.100404dd
test al, al
je 0x100870a7
push 0
push str._COL3F
mov byte [esp + 0x1b], 0
call fcn.1003cf95
pop ecx
pop ecx
test eax, eax
je 0x1008702a
push 0xc
push dword [eax]
push esi
call sub.VCRUNTIME140.dll_memcpy
xor eax, eax
add esp, 0xc
inc eax
mov byte [esp + 0x13], al
jmp 0x1008702e
mov al, byte [esp + 0x12]
push 0
push str._COL4F
mov byte [esp + 0x1a], al
call fcn.1003cf95
pop ecx
pop ecx
test eax, eax
je 0x10087060
mov ecx, dword [esp + 0x18]
shl ecx, 2
push ecx
push dword [eax]
push esi
call sub.VCRUNTIME140.dll_memcpy
xor eax, eax
add esp, 0xc
inc eax
mov byte [esp + 0x12], al
jmp 0x10087067
cmp byte [esp + 0x13], 0
je 0x100870a2
test ebx, 0x10000000
je 0x100870a2
movss xmm0, dword [esi + 8]
lea eax, [esi + 8]
push eax
lea eax, [esi + 4]
push eax
push esi
sub esp, 0xc
movss dword [esp + 8], xmm0
movss xmm0, dword [esi + 4]
movss dword [esp + 4], xmm0
movss xmm0, dword [esi]
movss dword [esp], xmm0
call fcn.10042302
add esp, 0x18
call fcn.100454a1
test edi, edi
je 0x100870c3
mov eax, dword [ebp + 0x3e94]
test eax, eax
je 0x100870c3
cmp dword [ebp + 0x3eb0], edi
jne 0x100870c3
mov dword [ebp + 0x46bc], eax
mov bl, byte [esp + 0x12]
test bl, bl
je 0x100870dc
mov eax, dword [ebp + 0x46bc]
test eax, eax
je 0x100870dc
push eax
call fcn.1004bbe4
pop ecx
mov al, bl
pop ebp
mov ecx, dword [esp + 0xe0]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.100b7398
add esp, 0xd8
ret