Function at 0x410980
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x304
push ebx
push esi
mov esi, dword [0xb0f710]
lea eax, [esp + 0xc]
push edi
push eax
mov dword [esp + 0x14], 0
movss xmm0, dword [esi + 0x3788]
lea ecx, [esi + 0x4764]
movss dword [esp + 0x18], xmm0
call fcn.0043e880
push 0x14
mov dword [esi + 0x3788], 0x3f4ccccd
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0xb0f710]
mov ecx, 0xb0f754
push 0x80e2
mov dword [eax + 0x20], 0
cmp dword [0xb0f768], 0xf
cmova ecx, dword [0xb0f754]
xor edx, edx
call fcn.00431420
add esp, 4
mov ecx, str.BrawlhallaGame.exe
call fcn.0041b110
test al, al
je 0x411769
mov ecx, dword [0xb0f710]
xor edx, edx
push str.Background
mov eax, dword [ecx + 0x3e48]
movss xmm0, dword [eax + 0x14]
movss dword [esp + 0x30], xmm0
movss xmm0, dword [eax + 0x18]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
mov ecx, dword [ecx + 0x47c4]
movss dword [esp + 0x34], xmm0
mov esi, dword [eax + 0x264]
mov ecx, dword [ecx]
call fcn.0042ba50
mov eax, dword [0xb0f710]
add esp, 4
mov edx, 1
mov ecx, dword [eax + 0x47c4]
push str.Foreground
mov ecx, dword [ecx]
call fcn.0042ba50
movss xmm2, dword [esp + 0x30]
lea eax, [esp + 0x34]
movss xmm1, dword [esp + 0x34]
movaps xmm0, xmm2
xorps xmm3, xmm3
add esp, 4
addss xmm0, xmm3
mov ecx, esi
push 0xff000000
push 0xff221114
movss dword [esp + 0x18], xmm0
movaps xmm0, xmm1
addss xmm0, xmm3
push 0xff882044
push 0xff000000
push eax
lea eax, [esp + 0x24]
movss dword [esp + 0x28], xmm0
movss xmm0, dword [0xa8713c]
addss xmm2, xmm0
addss xmm1, xmm0
push eax
movss dword [esp + 0x48], xmm2
movss dword [esp + 0x4c], xmm1
call fcn.0044a630
call fcn.00404e10
push 0
push ecx
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0x43eb0000
push eax
mov edx, 1
mov dword [esp + 0x20], 0x43c80000
xor ecx, ecx
call fcn.0042e7f0
add esp, 0xc
test al, al
je 0x410c50
mov ecx, dword [0xb0f710]
lea edx, [esp + 0x10]
push ecx
mov dword [esp + 0x14], 0x42960000
mov dword [esp + 0x18], 0x420c0000
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
mov ecx, 0x470a00
movss xmm0, dword [eax + 0x14]
subss xmm0, dword [eax + 0x78]
mov byte [eax + 0x131], 1
addss xmm0, dword [0xa870ec]
movss dword [eax + 0xf0], xmm0
call fcn.00454dd0
add esp, 4
test al, al
je 0x410b80
mov dword [0xa8d6d0], 1
movss xmm1, dword [0xa87188]
xorps xmm0, xmm0
call fcn.00436be0
push ecx
lea edx, [esp + 0x14]
mov dword [esp + 0x14], 0x42960000
mov ecx, 0x470a04
mov dword [esp + 0x18], 0x420c0000
call fcn.00454dd0
add esp, 4
test al, al
je 0x410bc0
mov dword [0xa8d6d0], 2
movss xmm1, dword [0xa87188]
xorps xmm0, xmm0
call fcn.00436be0
movss xmm1, dword [0xa87188]
xorps xmm0, xmm0
call fcn.00436be0
push ecx
lea edx, [esp + 0x14]
mov dword [esp + 0x14], 0x42960000
mov ecx, 0x470a10
mov dword [esp + 0x18], 0x420c0000
call fcn.00454dd0
add esp, 4
test al, al
je 0x410c10
mov dword [0xa8d6d0], 4
movss xmm1, dword [0xa87188]
xorps xmm0, xmm0
call fcn.00436be0
push ecx
lea edx, [esp + 0x14]
mov dword [esp + 0x14], 0x42960000
mov ecx, 0x470a14
mov dword [esp + 0x18], 0x420c0000
call fcn.00454dd0
add esp, 4
test al, al
je 0x410c50
mov dword [0xa8d6d0], 5
call fcn.0042ea80
push 0
push ecx
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0x43eb0000
push eax
mov edx, 1
mov dword [esp + 0x20], 0x43c80000
xor ecx, ecx
call fcn.0042e7f0
add esp, 0xc
test al, al
je 0x4113f5
mov ecx, dword [0xb0f710]
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
movss xmm0, dword [ecx + 0x37f4]
addss xmm0, dword [eax + 0x134]
movss dword [eax + 0x134], xmm0
addss xmm0, dword [eax + 0x14]
addss xmm0, dword [eax + 0x138]
movss dword [eax + 0xf0], xmm0
mov eax, dword [0xa8d6d0]
cmp eax, 1
jne 0x410cde
call fcn.00418c80
jmp 0x4113f5
cmp eax, 2
jne 0x41115c
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x410d34
mov ecx, 0x470df8
mov esi, ecx
cmp esi, 0xffffffff
jae 0x410d26
nop
mov dl, byte [ecx]
test dl, dl
je 0x410d26
cmp dl, 0x23
jne 0x410d20
cmp byte [ecx + 1], dl
je 0x410d26
inc ecx
cmp ecx, 0xffffffff
jb 0x410d10
push ecx
xorps xmm3, xmm3
mov edx, esi
call fcn.00456be0
add esp, 4
push 0xa8d2f8
push str.Bot_Script
call fcn.00468bd0
cmp byte [0xa8d2f8], 0
je 0x410d6b
push ecx
push 0x3e
push 0xa8d0b0
push 0x4579a0
mov edx, 0xb0f878
mov ecx, 0x470a24
call fcn.00457a20
add esp, 0x10
sub esp, 8
mov dword [esp + 0x38], 0x50
lea eax, [esp + 0x38]
mov dword [esp + 0x34], 0xa
mov ecx, str.Delay
push eax
lea eax, [esp + 0x38]
push eax
push 0xa8d0a0
call fcn.00458c40
mov ecx, dword [0xb0f710]
add esp, 0x14
mov edi, 0x46f77a
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x410dec
mov ecx, edi
cmp edi, 0xffffffff
jae 0x410dde
mov dl, byte [ecx]
test dl, dl
je 0x410dde
cmp dl, 0x23
jne 0x410dd8
cmp byte [ecx + 1], dl
je 0x410dde
inc ecx
cmp ecx, 0xffffffff
jb 0x410dc8
push ecx
xorps xmm3, xmm3
mov edx, edi
call fcn.00456be0
add esp, 4
movss xmm3, dword [0xa87010]
lea eax, [esp + 0x30]
push ecx
push 0x470a28
push eax
lea eax, [esp + 0x38]
mov dword [esp + 0x3c], 0xc
push eax
push 0xb0f69c
mov edx, 4
mov dword [esp + 0x40], 0
mov ecx, str.Hours
call fcn.00457fc0
movss xmm3, dword [0xa87010]
lea eax, [esp + 0x44]
add esp, 0x10
mov dword [esp + 0x34], 0x37
mov edx, 4
mov dword [esp + 0x30], 0
mov ecx, str.Minutes
push 0x470a28
push eax
lea eax, [esp + 0x38]
push eax
push 0xb0f648
call fcn.00457fc0
mov eax, dword [0xb0f69c]
add esp, 0x14
test eax, eax
jns 0x410e76
xor eax, eax
jmp 0x410e80
mov ecx, 0xc
cmp eax, ecx
cmovg eax, ecx
mov dword [0xb0f69c], eax
mov eax, dword [0xb0f648]
test eax, eax
jns 0x410e92
xor eax, eax
jmp 0x410e9c
mov ecx, 0x37
cmp eax, ecx
cmovg eax, ecx
push ecx
lea edx, [esp + 0x14]
mov dword [0xb0f648], eax
mov ecx, str.Run_Time
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call fcn.00454dd0
add esp, 4
test al, al
je 0x410f0c
mov ecx, dword [0xb0f69c]
mov eax, dword [0xb0f648]
shl ecx, 4
sub ecx, dword [0xb0f69c]
lea eax, [eax + ecx*4]
mov ecx, eax
shl ecx, 4
sub ecx, eax
shl ecx, 2
test ecx, ecx
jle 0x410f0c
lea ecx, [esp + 0x10]
mov byte [0xb0f64c], 1
call fcn.00402530
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [0xb0f6a0], ecx
mov dword [0xb0f6a4], eax
movss xmm1, dword [0xa87188]
xorps xmm0, xmm0
call fcn.00436be0
cmp byte [0xb0f64c], 0
je 0x41102c
push ecx
lea edx, [esp + 0x14]
mov dword [esp + 0x14], 0
mov ecx, str.Cancel_Time
mov dword [esp + 0x18], 0
call fcn.00454dd0
add esp, 4
test al, al
je 0x410f5b
mov byte [0xb0f64c], 0
jmp 0x41102c
cmp byte [0xb0f64c], 0
je 0x41102c
lea ecx, [esp + 0x10]
call fcn.00402530
mov ecx, dword [0xb0f69c]
mov eax, dword [0xb0f648]
mov edx, dword [esp + 0x10]
shl ecx, 4
sub ecx, dword [0xb0f69c]
push 0
push 0x3b9aca00
lea eax, [eax + ecx*4]
mov ebx, eax
shl ebx, 4
sub ebx, eax
mov eax, dword [esp + 0x1c]
shl ebx, 2
sub edx, dword [0xb0f6a0]
sbb eax, dword [0xb0f6a4]
push eax
push edx
call fcn.0046d180
sub ebx, eax
test ebx, ebx
jg 0x410fcd
mov ecx, str.BrawlhallaGame.exe
mov byte [0xb0f64c], 0
call fcn.00408710
jmp 0x41102c
mov eax, 0x91a2b3c5
imul ebx
mov eax, 0x88888889
add edx, ebx
sar edx, 0xb
mov esi, edx
shr esi, 0x1f
add esi, edx
imul ebx
mov eax, 0x88888889
add edx, ebx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, ecx
shl edx, 4
sub edx, ecx
mov ecx, ebx
shl edx, 2
sub ecx, edx
push ecx
imul ecx, esi, 0xe10
sub ebx, ecx
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push esi
push str.Remaining_Time_To_Close:__02d:_02d:_02d
call fcn.00454380
add esp, 0x10
call fcn.00434120
mov ecx, dword [0xb0f710]
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x411084
mov ecx, 0x46f77a
cmp edi, 0xffffffff
jae 0x411076
nop dword [eax]
mov dl, byte [ecx]
test dl, dl
je 0x411076
cmp dl, 0x23
jne 0x411070
cmp byte [ecx + 1], dl
je 0x411076
inc ecx
cmp ecx, 0xffffffff
jb 0x411060
push ecx
xorps xmm3, xmm3
mov edx, edi
call fcn.00456be0
add esp, 4
push 0xb0f855
push str.Run_Script
call fcn.00468bd0
cmp byte [0xb0f855], 0
je 0x4110a3
mov byte [0xb0f856], 0
push 0xb0f856
push str.Run_Bot
call fcn.00468bd0
cmp byte [0xb0f856], 0
je 0x4110c2
mov byte [0xb0f855], 0
mov esi, dword [0xb0f710]
mov edx, dword [esi + 0x46a0]
dec dword [esi + 0x4788]
dec word [esi + 0x5a04]
mov ecx, dword [esi + 0x4788]
mov eax, dword [esi + 0x4790]
shr edx, 2
mov eax, dword [eax + ecx*4 - 4]
mov dword [esi + 0x46a0], eax
test dl, 1
je 0x411109
test al, 4
jne 0x411109
mov eax, dword [esi + 0x5a00]
mov dword [esi + 0x3788], eax
mov eax, dword [esi + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [esi + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x4113f5
mov ecx, 0x46f77a
cmp edi, 0xffffffff
jae 0x411149
mov dl, byte [ecx]
test dl, dl
je 0x411149
cmp dl, 0x23
jne 0x411143
cmp byte [ecx + 1], dl
je 0x411149
inc ecx
cmp ecx, 0xffffffff
jb 0x411133
push ecx
xorps xmm3, xmm3
mov edx, edi
call fcn.00456be0
add esp, 4
jmp 0x4113f5
cmp eax, 4
jne 0x4113eb
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x4111b4
mov ecx, str.Controls
mov esi, ecx
cmp esi, 0xffffffff
jae 0x4111a6
nop dword [eax]
mov dl, byte [ecx]
test dl, dl
je 0x4111a6
cmp dl, 0x23
jne 0x4111a0
cmp byte [ecx + 1], dl
je 0x4111a6
inc ecx
cmp ecx, 0xffffffff
jb 0x411190
push ecx
xorps xmm3, xmm3
mov edx, esi
call fcn.00456be0
add esp, 4
call dword [sym.imp.WINMM.dll_joyGetNumDevs]
mov ebx, eax
xor esi, esi
mov edi, 0x46f77a
test ebx, ebx
je 0x411293
nop dword [eax + eax]
push 0x2d8
lea eax, [esp + 0x3c]
push eax
push esi
call dword [sym.imp.WINMM.dll_joyGetDevCapsW]
test eax, eax
jne 0x41128a
push esi
push str.Game_Device__d:
call fcn.00454380
lea eax, [esp + 0x44]
push eax
push str.Name:__s
call fcn.00454380
lea eax, [esp + 0x118]
push eax
push str.Manufacturer:__s
call fcn.00454380
push dword [esp + 0xac]
push str.Number_of_Buttons:__d
call fcn.00454380
push dword [esp + 0xe0]
push str.Number_of_Axes:__d
call fcn.00454380
mov ecx, dword [0xb0f710]
add esp, 0x28
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x41128a
mov ecx, 0x46f77a
cmp edi, 0xffffffff
jae 0x41127c
mov dl, byte [ecx]
test dl, dl
je 0x41127c
cmp dl, 0x23
jne 0x411276
cmp byte [ecx + 1], dl
je 0x41127c
inc ecx
cmp ecx, 0xffffffff
jb 0x411266
push ecx
xorps xmm3, xmm3
mov edx, edi
call fcn.00456be0
add esp, 4
inc esi
cmp esi, ebx
jb 0x4111d0
mov ebx, dword [sym.imp.XINPUT1_3.dll_Ordinal_2]
xor esi, esi
nop dword [eax + eax]
lea eax, [esp + 0x10]
xorps xmm0, xmm0
push eax
push esi
movaps xmmword [esp + 0x18], xmm0
call ebx
test eax, eax
jne 0x41131c
push esi
push str.Device__d:
call fcn.00454380
push str.Is_Connected:_Yes
call fcn.00454380
mov ecx, dword [0xb0f710]
add esp, 0xc
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x41131c
mov ecx, 0x46f77a
cmp edi, 0xffffffff
jae 0x41130e
mov dl, byte [ecx]
test dl, dl
je 0x41130e
cmp dl, 0x23
jne 0x411308
cmp byte [ecx + 1], dl
je 0x41130e
inc ecx
cmp ecx, 0xffffffff
jb 0x4112f8
push ecx
xorps xmm3, xmm3
mov edx, edi
call fcn.00456be0
add esp, 4
inc esi
cmp esi, 4
jb 0x4112a0
lea edx, [esp + 0x10]
mov dword [esp + 0x10], 0x42be0000
mov ecx, 0xb0e878
mov dword [esp + 0x14], 0x41e00000
call fcn.00406b50
call fcn.00434120
push 0xb0f880
push str.Record_keys
call fcn.00468bd0
mov esi, dword [0xb0f710]
mov edx, dword [esi + 0x46a0]
dec dword [esi + 0x4788]
dec word [esi + 0x5a04]
mov ecx, dword [esi + 0x4788]
mov eax, dword [esi + 0x4790]
shr edx, 2
mov eax, dword [eax + ecx*4 - 4]
mov dword [esi + 0x46a0], eax
test dl, 1
je 0x41139f
test al, 4
jne 0x41139f
mov eax, dword [esi + 0x5a00]
mov dword [esi + 0x3788], eax
mov eax, dword [esi + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [esi + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x4113f5
mov ecx, 0x46f77a
cmp edi, 0xffffffff
jae 0x4113db
mov dl, byte [ecx]
test dl, dl
je 0x4113db
cmp dl, 0x23
jne 0x4113d5
cmp byte [ecx + 1], dl
je 0x4113db
inc ecx
cmp ecx, 0xffffffff
jb 0x4113c5
push ecx
xorps xmm3, xmm3
mov edx, edi
call fcn.00456be0
add esp, 4
jmp 0x4113f5
cmp eax, 5
jne 0x4113f5
call fcn.00417840
call fcn.0042ea80
push 0
push ecx
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0x43eb0000
push eax
mov edx, 3
mov dword [esp + 0x20], 0x42a00000
xor ecx, ecx
call fcn.0042e7f0
add esp, 0xc
test al, al
je 0x411758
mov esi, dword [0xb0f710]
movss xmm3, dword [0xa87160]
push 0
push 0
mov eax, dword [esi + 0x3e48]
push str.License:N_A_____.f_MS_____.f_FPS_____HideMenu______PGDN___
push ecx
mov dword [esp], 0xbf800000
movss xmm0, dword [eax + 0xf4]
movss xmm1, dword [eax + 0x22c]
movaps xmm2, xmm0
subss xmm2, dword [eax + 0x18]
subss xmm1, xmm0
addss xmm2, dword [eax + 0x7c]
subss xmm1, dword [0xa870e4]
mov byte [eax + 0xac], 1
mov eax, dword [esi + 0x3e48]
mulss xmm1, dword [0xa86fd0]
mov byte [eax + 0x131], 1
movss xmm0, dword [eax + 0x18]
subss xmm0, dword [eax + 0x7c]
addss xmm2, xmm1
addss xmm0, xmm2
movss dword [eax + 0xf4], xmm0
lea eax, [esp + 0x20]
movss xmm0, dword [esi + 0xa0]
movss xmm2, dword [esi + 0x3bb8]
mov ecx, dword [esi + 0x3bb4]
push eax
movss dword [esp + 0x44], xmm0
call fcn.0044e440
mov eax, dword [esi + 0x3e48]
movss xmm0, dword [esp + 0x10]
addss xmm0, dword [0xa87008]
push str.License:
movss xmm1, dword [eax + 0x1c]
mov byte [eax + 0xac], 1
mov ecx, dword [esi + 0x3e48]
cvttss2si eax, xmm0
mov byte [ecx + 0x131], 1
movd xmm0, eax
lea eax, [esp + 0x14]
cvtdq2ps xmm0, xmm0
push eax
subss xmm1, xmm0
movss xmm0, dword [ecx + 0x14]
subss xmm0, dword [ecx + 0x78]
mulss xmm1, dword [0xa86fd0]
addss xmm1, xmm0
movaps xmm0, xmmword [0xa87310]
movups xmmword [esp + 0x18], xmm0
movss dword [ecx + 0xf0], xmm1
call fcn.00454440
movss xmm1, dword [0xa87188]
xorps xmm0, xmm0
call fcn.00436be0
push 0x470d74
call fcn.00454380
movss xmm1, dword [0xa87188]
add esp, 0xc
xorps xmm0, xmm0
call fcn.00436be0
movaps xmm0, xmmword [0xa87310]
lea eax, [esp + 0x10]
movups xmmword [esp + 0x10], xmm0
sub esp, 8
movss xmm0, dword [0xa870d8]
divss xmm0, dword [esp + 0x38]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
push str.____.0f
push eax
call fcn.00454440
movss xmm1, dword [0xa87188]
xorps xmm0, xmm0
call fcn.00436be0
push 0x470d80
call fcn.00454380
movss xmm1, dword [0xa87188]
add esp, 0x14
xorps xmm0, xmm0
call fcn.00436be0
movaps xmm0, xmmword [0xa87310]
lea eax, [esp + 0x10]
sub esp, 8
movups xmmword [esp + 0x18], xmm0
movsd xmm0, qword [0xa87070]
movsd qword [esp], xmm0
push str.____.f
push eax
call fcn.00454440
movss xmm1, dword [0xa87188]
xorps xmm0, xmm0
call fcn.00436be0
push 0x470d8c
call fcn.00454380
movss xmm1, dword [0xa87188]
add esp, 0x14
xorps xmm0, xmm0
call fcn.00436be0
push 0x470d90
call fcn.00454380
movss xmm1, dword [0xa87188]
add esp, 4
xorps xmm0, xmm0
call fcn.00436be0
movaps xmm0, xmmword [0xa87310]
lea eax, [esp + 0x10]
push str.HideMenu
push eax
movups xmmword [esp + 0x18], xmm0
call fcn.00454440
movss xmm1, dword [0xa87188]
xorps xmm0, xmm0
call fcn.00436be0
push 0x470da4
call fcn.00454380
movss xmm1, dword [0xa87188]
add esp, 0xc
xorps xmm0, xmm0
call fcn.00436be0
push 0x470da8
call fcn.00454380
movss xmm1, dword [0xa87188]
add esp, 4
xorps xmm0, xmm0
call fcn.00436be0
push str.PGDN
call fcn.00454380
movss xmm1, dword [0xa87188]
add esp, 4
xorps xmm0, xmm0
call fcn.00436be0
push 0x470db4
call fcn.00454380
mov ecx, dword [0xb0f710]
add esp, 4
mov eax, dword [ecx + 0x3e48]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x3e48]
cmp byte [eax + 0xaf], 0
jne 0x41171d
movss xmm1, dword [0xa87188]
lea ecx, [esp + 0x10]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call fcn.00436850
push ecx
lea edx, [esp + 0x14]
mov dword [esp + 0x14], 0x42200000
mov ecx, 0x470db8
mov dword [esp + 0x18], 0x41f00000
call fcn.00454dd0
add esp, 4
test al, al
jne 0x411769
movss xmm1, dword [0xa87188]
xorps xmm0, xmm0
call fcn.00436be0
call fcn.00407a40
call fcn.0042ea80
call fcn.00433950
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.004086e0
int3