Function at 0x10068bc0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xb4
push ebx
push ebp
push esi
mov esi, ecx
mov ebx, edx
push edi
mov dword [esp + 0x2c], ebx
cmp byte [esi + 0x67], 0
je 0x10068bdd
call fcn.100679a0
mov edi, dword [0x10132b9c]
mov dword [esp + 0x28], edi
mov eax, dword [edi + 0x1bac]
mov dword [esp + 0x1c], eax
cmp byte [eax + 0xaf], 0
je 0x10068c07
xor al, al
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb4
ret
mov edx, ebx
mov ecx, esi
call fcn.10068490
push 0
mov edx, ebx
lea ecx, [esp + 0x50]
mov ebp, eax
call fcn.100697a0
add esp, 4
test ebp, ebp
je 0x10068c3d
mov ecx, dword [esi]
xor eax, eax
test ecx, ecx
jle 0x10068c3d
mov ebx, dword [esi + 8]
cmp dword [ebx], ebp
je 0x10068c3f
inc eax
add ebx, 0x28
cmp eax, ecx
jl 0x10068c31
xor ebx, ebx
mov byte [esp + 0x15], 0
test ebx, ebx
jne 0x10068d28
mov ecx, dword [esi]
or eax, 0xffffffff
xorps xmm0, xmm0
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xbc], ebx
mov ebx, dword [esi + 4]
movlpd qword [esp + 0x98], xmm0
movlpd qword [esp + 0xa8], xmm0
mov dword [esp + 0xa4], 0xffffffff
mov dword [esp + 0xa0], 0xffffffff
mov dword [esp + 0xb4], 0xffffffff
mov word [esp + 0xba], ax
mov word [esp + 0xb8], ax
cmp ecx, ebx
jne 0x10068cce
inc ecx
test ebx, ebx
je 0x10068cbc
mov eax, ebx
cdq
sub eax, edx
sar eax, 1
add eax, ebx
jmp 0x10068cc1
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, esi
call fcn.10053e70
mov eax, dword [esi]
movups xmm0, xmmword [esp + 0x98]
mov byte [esp + 0x15], 1
lea ecx, [eax + eax*4]
mov eax, dword [esi + 8]
movups xmmword [eax + ecx*8], xmm0
movups xmm0, xmmword [esp + 0xa8]
movups xmmword [eax + ecx*8 + 0x10], xmm0
movq xmm0, qword [esp + 0xb8]
movq qword [eax + ecx*8 + 0x20], xmm0
inc dword [esi]
mov eax, dword [esi]
movss xmm0, dword [esp + 0x4c]
lea ebx, [eax + eax*4]
mov eax, dword [esi + 8]
lea ebx, [ebx - 5]
mov dword [eax + ebx*8], ebp
movss dword [eax + ebx*8 + 0x14], xmm0
lea ebx, [eax + ebx*8]
mov byte [esi + 0x69], 1
jmp 0x10068d2e
movss xmm0, dword [esp + 0x4c]
mov ecx, ebx
mov eax, 0x66666667
sub ecx, dword [esi + 8]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov word [esi + 0x6c], ax
movss dword [ebx + 0x18], xmm0
movzx ecx, word [esi + 0x6a]
lea eax, [ecx + 1]
mov word [esi + 0x6a], ax
mov word [ebx + 0x20], cx
mov eax, dword [esi + 0x24]
mov edx, dword [edi + 0x1b48]
inc eax
mov dword [esp + 0x18], eax
mov eax, dword [esi + 0xc]
shr eax, 0x15
and eax, 0xffffff01
mov dword [ebx + 4], 0x100000
mov dword [esp + 0x48], eax
mov eax, dword [ebx + 8]
mov dword [ebx + 8], edx
inc eax
mov ecx, dword [esi + 0x84]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x2c]
lea eax, [ecx - 1]
neg ecx
sbb ecx, ecx
and ecx, eax
mov dword [ebx + 0x1c], ecx
mov ecx, edx
lea edi, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10068db0
sub ecx, edi
lea edi, [edx + 1]
add edi, ecx
je 0x10068dc4
sub edi, edx
jmp 0x10068dd9
mov edi, edx
lea ecx, [edi + 1]
nop dword [eax]
mov al, byte [edi]
inc edi
test al, al
jne 0x10068dd0
sub edi, ecx
mov eax, dword [esi + 0x84]
lea ecx, [esi + 0x84]
test eax, eax
mov edx, 1
cmovne edx, eax
mov eax, dword [ecx + 4]
mov dword [esp + 0x30], edx
add edx, edi
mov dword [esp + 0x20], edx
cmp edx, eax
jl 0x10068e17
add eax, eax
cmp edx, eax
cmovg eax, edx
push eax
call fcn.1004bcb0
mov edx, dword [esp + 0x20]
lea ecx, [esi + 0x84]
mov eax, dword [ecx + 4]
mov dword [esp + 0x24], eax
cmp edx, eax
jle 0x10068e59
test eax, eax
je 0x10068e37
cdq
sub eax, edx
mov edx, dword [esp + 0x20]
mov ecx, eax
sar ecx, 1
add ecx, dword [esp + 0x24]
jmp 0x10068e3c
mov ecx, 8
cmp ecx, edx
mov eax, edx
cmovg eax, ecx
lea ecx, [esi + 0x84]
push eax
call fcn.1004bcb0
mov edx, dword [esp + 0x20]
lea ecx, [esi + 0x84]
mov dword [ecx], edx
mov eax, dword [ecx + 8]
mov ecx, dword [esp + 0x30]
push edi
push dword [esp + 0x30]
dec ecx
add eax, ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [esi + 0x8c]
add esp, 0xc
mov ecx, dword [esp + 0x30]
add eax, edi
mov edx, dword [esp + 0x44]
mov edi, dword [esp + 0x18]
mov byte [eax + ecx - 1], 0
cmp dword [esp + 0x3c], edx
jge 0x10068eab
test byte [esi + 0xc], 2
je 0x10068eab
cmp dword [esi + 0x18], 0
jne 0x10068eab
cmp edi, edx
jge 0x10068ea8
cmp dword [esi + 0x14], 0
jne 0x10068eab
mov dword [esi + 0x18], ebp
cmp dword [esi + 0x1c], ebp
lea eax, [esi + 0x14]
sete byte [esp + 0x18]
jne 0x10068ebe
mov byte [esi + 0x68], 1
jmp 0x10068ee4
cmp dword [esi + 0x14], 0
jne 0x10068ee4
lea eax, [esi + 0x14]
cmp edi, edx
jge 0x10068ee4
cmp dword [esi], 1
lea eax, [esi + 0x14]
jne 0x10068ee4
test byte [esi + 0xc], 2
lea eax, [esi + 0x14]
jne 0x10068ee4
mov byte [esp + 0x18], 1
lea eax, [esi + 0x14]
cmp dword [esp + 0x3c], edx
jge 0x10068f72
cmp edi, edx
jge 0x10068ef9
cmp byte [esp + 0x15], 0
je 0x10068f72
mov ecx, dword [0x10132b9c]
mov eax, dword [ecx + 0x1c30]
or eax, 0x18
mov dword [ecx + 0x1c30], eax
add ecx, 0x1d08
mov dword [esp + 0x24], eax
lea eax, [esp + 0x24]
push eax
call fcn.1004b7e0
push ecx
xorps xmm0, xmm0
lea ecx, [esp + 0x80]
push 0
mov edx, ebp
movups xmmword [esp + 0x84], xmm0
call fcn.10044b70
mov esi, dword [0x10132b9c]
add esp, 8
mov al, byte [esp + 0x18]
dec dword [esi + 0x1d08]
mov ecx, dword [esi + 0x1d10]
mov edx, dword [esi + 0x1d08]
mov ecx, dword [ecx + edx*4 - 4]
mov dword [esi + 0x1c30], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb4
ret
cmp dword [eax], ebp
jne 0x10068f83
mov edi, dword [esp + 0x28]
mov eax, dword [edi + 0x1b48]
mov dword [ebx + 0xc], eax
mov edx, dword [esp + 0x1c]
mov eax, dword [ebx + 4]
movss xmm1, dword [ebx + 0x14]
and eax, 0xc0
mov dword [esp + 0x40], eax
movss xmm0, dword [edx + 0xf0]
movss dword [esp + 0x20], xmm0
movss xmm0, dword [edx + 0xf4]
movss dword [esp + 0x24], xmm0
movss xmm0, dword [ebx + 0x10]
jne 0x10068fcf
subss xmm0, dword [esi + 0x48]
cvttss2si eax, xmm0
movd xmm0, eax
mov eax, dword [esp + 0x40]
cvtdq2ps xmm0, xmm0
mov edi, 4
addss xmm0, dword [esi + 0x28]
movss dword [esp + 0x30], xmm0
movaps xmm2, xmm0
movss xmm4, dword [esi + edi + 0x28]
addss xmm2, xmm1
mov edi, dword [esp + 0x28]
movaps xmm3, xmm4
movss dword [esp + 0x34], xmm4
movss dword [edx + 0xf0], xmm0
movss dword [edx + 0xf4], xmm4
movss xmm5, dword [0x1012c844]
movss dword [esp + 0x74], xmm2
movss dword [esp + 0x64], xmm0
movss dword [esp + 0x68], xmm4
movss dword [esp + 0x6c], xmm2
addss xmm3, dword [esp + 0x50]
movss dword [esp + 0x4c], xmm3
movss dword [esp + 0x70], xmm3
test eax, eax
jne 0x100691f1
movss xmm1, dword [esi + 0x58]
comiss xmm1, xmm0
ja 0x10069057
comiss xmm2, dword [esi + 0x5c]
jbe 0x100691f1
mov ecx, dword [0x10132b9c]
maxss xmm1, xmm0
movss xmm2, dword [esi + 0x5c]
movaps xmm0, xmm4
subss xmm0, xmm5
mov byte [esp + 0x16], 1
movaps xmm5, xmm3
movss dword [esp + 0x5c], xmm2
mov eax, dword [ecx + 0x1bac]
movss dword [esp + 0x54], xmm1
movss dword [esp + 0x60], xmm5
movss dword [esp + 0x58], xmm0
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x1bac]
mov dword [esp + 0x94], eax
mov eax, dword [eax + 0x294]
mov dword [esp + 0x90], eax
movups xmm4, xmmword [eax + 0x60]
comiss xmm4, xmm1
movups xmmword [esp + 0x7c], xmm4
jbe 0x100690cb
movaps xmm1, xmm4
movss dword [esp + 0x54], xmm1
movss xmm4, dword [esp + 0x80]
comiss xmm4, xmm0
jbe 0x100690e2
movaps xmm0, xmm4
movss dword [esp + 0x58], xmm0
movss xmm4, dword [esp + 0x84]
comiss xmm2, xmm4
movss dword [esp + 0x5c], xmm2
jbe 0x100690ff
movaps xmm2, xmm4
movss dword [esp + 0x5c], xmm2
movss xmm4, dword [esp + 0x88]
comiss xmm3, xmm4
jbe 0x10069116
movaps xmm5, xmm4
movss dword [esp + 0x60], xmm5
comiss xmm1, xmm2
jb 0x10069121
movss dword [esp + 0x5c], xmm1
comiss xmm0, xmm5
jb 0x1006912c
movss dword [esp + 0x60], xmm0
mov edx, dword [eax + 0x3c]
lea ecx, [eax + 0x3c]
mov eax, dword [ecx + 4]
mov dword [esp + 0x8c], ecx
cmp edx, eax
jne 0x1006916e
inc edx
mov dword [esp + 0x40], edx
test eax, eax
je 0x10069157
cdq
sub eax, edx
mov edx, dword [esp + 0x40]
sar eax, 1
add eax, dword [ecx + 4]
jmp 0x1006915c
mov eax, 8
cmp eax, edx
cmovg edx, eax
push edx
call fcn.10053df0
mov ecx, dword [esp + 0x8c]
mov eax, dword [ecx]
movups xmm0, xmmword [esp + 0x54]
shl eax, 4
add eax, dword [ecx + 8]
movups xmmword [eax], xmm0
inc dword [ecx]
mov ecx, dword [esp + 0x90]
movups xmmword [ecx + 0x60], xmm0
call fcn.1004d8b0
mov edx, dword [esp + 0x94]
mov eax, dword [edx + 0x294]
mov ecx, dword [eax + 0x3c]
mov eax, dword [eax + 0x44]
add ecx, ecx
movss xmm2, dword [eax + ecx*8 - 4]
movss xmm0, dword [eax + ecx*8 - 0xc]
movss xmm1, dword [eax + ecx*8 - 8]
mov eax, dword [eax + ecx*8 - 0x10]
mov dword [edx + 0x240], eax
movss dword [edx + 0x244], xmm0
movss dword [edx + 0x248], xmm1
movss dword [edx + 0x24c], xmm2
movss xmm3, dword [esp + 0x4c]
movss xmm2, dword [esp + 0x74]
movss xmm4, dword [esp + 0x34]
mov edx, dword [esp + 0x1c]
jmp 0x100691f6
mov byte [esp + 0x16], 0
subss xmm2, dword [esp + 0x30]
movss xmm0, dword [edx + 0x108]
subss xmm3, xmm4
movss xmm1, dword [edi + 0x1564]
lea ecx, [esp + 0x74]
movss xmm7, dword [edx + 0x10c]
movss dword [esp + 0x34], xmm0
movss dword [esp + 0x74], xmm2
movss dword [esp + 0x78], xmm3
call fcn.10044a40
mov eax, dword [esp + 0x1c]
mov edx, ebp
movss xmm0, dword [esp + 0x34]
push ecx
push 0
lea ecx, [esp + 0x6c]
movss dword [eax + 0x108], xmm0
movss dword [eax + 0x10c], xmm7
call fcn.10044b70
add esp, 8
test al, al
jne 0x1006929c
cmp byte [esp + 0x16], al
je 0x1006926d
call fcn.1003d5f0
mov eax, dword [esp + 0x1c]
movss xmm0, dword [esp + 0x20]
movss dword [eax + 0xf0], xmm0
movss xmm0, dword [esp + 0x24]
movss dword [eax + 0xf4], xmm0
mov al, byte [esp + 0x18]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb4
ret
cmp byte [edi + 0x1e88], 0
mov ecx, 0x1010
mov eax, 0x1210
mov edx, ebp
cmove eax, ecx
lea ecx, [esp + 0x64]
push eax
lea eax, [esp + 0x19]
push eax
lea eax, [esp + 0x1f]
push eax
call fcn.10057860
add esp, 0xc
test al, al
je 0x100692d0
mov dword [esi + 0x18], ebp
mov ecx, edi
mov edi, dword [0x10132b9c]
cmp dword [ecx + 0x1be0], ebp
je 0x10069304
mov eax, dword [edi + 0x1c48]
cmp dword [edi + 0x1bcc], eax
jne 0x100692f5
mov byte [edi + 0x1bd4], 1
cmp dword [edi + 0x1be0], eax
jne 0x10069304
mov byte [edi + 0x1bed], 1
cmp byte [esp + 0x15], 0
je 0x10069397
mov edx, dword [esp + 0x44]
cmp dword [esp + 0x3c], edx
jl 0x10069397
cmp byte [edi + 0xec], 0
je 0x10069397
movss xmm1, dword [edi + 0x30]
movss xmm0, dword [edi + 0x458]
mulss xmm1, xmm1
comiss xmm0, xmm1
setae al
test al, al
je 0x10069397
cmp byte [ecx + 0x1e88], 0
jne 0x10069397
test byte [esi + 0xc], 1
xorps xmm2, xmm2
je 0x1006939a
movss xmm0, dword [ecx + 0x374]
comiss xmm2, xmm0
jbe 0x1006936b
movss xmm0, dword [esp + 0x64]
comiss xmm0, dword [ecx + 0xe4]
jmp 0x1006937d
comiss xmm0, xmm2
jbe 0x1006939a
movss xmm0, dword [ecx + 0xe4]
comiss xmm0, dword [esp + 0x6c]
jbe 0x1006939a
push dword [ecx + 0xe8]
mov edx, ebx
push dword [ecx + 0xe4]
mov ecx, esi
call fcn.10068550
add esp, 8
xorps xmm2, xmm2
cmp byte [esp + 0x15], 0
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x294]
mov dword [esp + 0x34], eax
jne 0x100693e4
cmp byte [esp + 0x17], 0
jne 0x100693e4
cmp byte [esp + 0x18], 0
je 0x100693d0
mov ecx, dword [esp + 0x48]
movzx eax, cl
xor eax, 1
lea eax, [eax*2 + 0x23]
jmp 0x100693e9
cmp byte [esp + 0x48], 0
mov eax, 0x24
mov edx, 0x21
cmovne eax, edx
jmp 0x100693e9
mov eax, 0x22
movss xmm5, dword [0x1012c844]
add eax, eax
movups xmm0, xmmword [edi + eax*8 + 0x15ec]
comiss xmm2, xmm0
movaps xmm1, xmm0
shufps xmm1, xmm0, 0xff
mulss xmm1, dword [edi + 0x1528]
movups xmmword [esp + 0x7c], xmm0
jbe 0x10069419
xorps xmm0, xmm0
jmp 0x1006941d
minss xmm0, xmm5
movss xmm3, dword [0x1012c990]
movss xmm4, dword [0x1012c800]
mulss xmm0, xmm3
addss xmm0, xmm4
cvttss2si ecx, xmm0
movss xmm0, dword [esp + 0x80]
comiss xmm2, xmm0
jbe 0x1006944c
xorps xmm0, xmm0
jmp 0x10069450
minss xmm0, xmm5
mulss xmm0, xmm3
addss xmm0, xmm4
cvttss2si eax, xmm0
movss xmm0, dword [esp + 0x84]
shl eax, 8
or ecx, eax
comiss xmm2, xmm0
jbe 0x10069474
xorps xmm0, xmm0
jmp 0x10069478
minss xmm0, xmm5
mulss xmm0, xmm3
addss xmm0, xmm4
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm2, xmm1
jbe 0x10069493
xorps xmm1, xmm1
jmp 0x10069497
minss xmm1, xmm5
mov edi, dword [esp + 0x34]
lea edx, [esp + 0x64]
mulss xmm1, xmm3
addss xmm1, xmm4
cvttss2si eax, xmm1
shl eax, 0x18
or eax, ecx
mov ecx, edi
push eax
push 0x100000
call fcn.100698a0
push 1
mov edx, ebp
lea ecx, [esp + 0x70]
call fcn.10039680
mov ecx, dword [0x10132b9c]
add esp, 0xc
cmp byte [ecx + 0x1d97], 0
mov edx, dword [ecx + 0x1bac]
je 0x1006951d
cmp byte [ecx + 0x1d96], 0
jne 0x1006951d
test byte [ecx + 0x1c4c], 4
jne 0x100695c7
mov eax, dword [ecx + 0x1d48]
cmp eax, dword [ecx + 0x1c48]
jne 0x1006950e
test eax, eax
je 0x1006950e
mov al, 1
jmp 0x10069510
xor al, al
test al, al
je 0x100695c7
jmp 0x100695a6
mov eax, dword [ecx + 0x1c50]
test al, 1
je 0x100695c7
cmp dword [ecx + 0x1bb0], edx
je 0x1006953b
test al, al
jns 0x100695c7
mov eax, dword [ecx + 0x1be0]
test eax, eax
je 0x1006955b
cmp eax, dword [ecx + 0x1c48]
je 0x1006955b
cmp byte [ecx + 0x1bed], 0
jne 0x1006955b
cmp eax, dword [edx + 0x70]
jne 0x100695c7
mov eax, dword [ecx + 0x1d44]
test eax, eax
je 0x10069589
mov eax, dword [eax + 0x32c]
test eax, eax
je 0x10069589
cmp byte [eax + 0xab], 0
je 0x10069589
cmp eax, dword [edx + 0x32c]
je 0x10069589
test dword [eax + 0x10], 0x8000000
jne 0x100695c7
test byte [ecx + 0x1c4c], 4
jne 0x100695c7
mov eax, dword [ecx + 0x1c48]
cmp eax, dword [edx + 0x70]
jne 0x100695a6
cmp byte [edx + 0xac], 0
jne 0x100695c7
movss xmm0, dword [ecx + 0x40c]
ucomiss xmm0, dword [0x1012c718]
lahf
test ah, 0x44
jnp 0x100695c4
cmp byte [ecx + 0x3f7], 0
je 0x100695c7
mov dword [esi + 0x18], ebp
push dword [esi + 0x78]
lea eax, [esp + 0x1b]
mov ecx, edi
push dword [esi + 0x74]
lea edx, [esp + 0x6c]
push eax
lea eax, [esp + 0x47]
push eax
push dword [esp + 0x28]
mov eax, dword [esi + 0xc]
push 0
and eax, 8
push ebp
push dword [esp + 0x48]
or eax, 0x200000
shr eax, 1
push eax
call fcn.10069e20
add esp, 0x24
cmp byte [esp + 0x16], 0
je 0x1006960a
call fcn.1003d5f0
cmp byte [esp + 0x17], 0
mov eax, dword [esp + 0x1c]
movss xmm0, dword [esp + 0x20]
movss dword [eax + 0xf0], xmm0
movss xmm0, dword [esp + 0x24]
movss dword [eax + 0xf4], xmm0
je 0x10069787
mov edi, dword [esp + 0x28]
cmp dword [edi + 0x1bcc], ebp
jne 0x10069787
cmp byte [esp + 0x15], 0
jne 0x10069787
movss xmm0, dword [edi + 0x1bdc]
comiss xmm0, dword [edi + 0x2ef0]
jbe 0x10069787
mov eax, dword [0x10132b9c]
cmp byte [eax + 0x1d97], 0
mov ecx, dword [eax + 0x1bac]
je 0x100696b4
cmp byte [eax + 0x1d96], 0
jne 0x100696b4
test byte [eax + 0x1c4c], 4
jne 0x10069787
mov ecx, dword [eax + 0x1d48]
cmp ecx, dword [eax + 0x1c48]
jne 0x100696a5
test ecx, ecx
je 0x100696a5
mov al, 1
jmp 0x100696a7
xor al, al
test al, al
je 0x10069787
jmp 0x10069742
mov edx, dword [eax + 0x1c50]
test dl, 1
je 0x10069787
cmp dword [eax + 0x1bb0], ecx
je 0x100696d3
test dl, dl
jns 0x10069787
mov edx, dword [eax + 0x1be0]
test edx, edx
je 0x100696f7
cmp edx, dword [eax + 0x1c48]
je 0x100696f7
cmp byte [eax + 0x1bed], 0
jne 0x100696f7
cmp edx, dword [ecx + 0x70]
jne 0x10069787
mov edx, dword [eax + 0x1d44]
test edx, edx
je 0x10069725
mov edx, dword [edx + 0x32c]
test edx, edx
je 0x10069725
cmp byte [edx + 0xab], 0
je 0x10069725
cmp edx, dword [ecx + 0x32c]
je 0x10069725
test dword [edx + 0x10], 0xc000000
jne 0x10069787
test byte [eax + 0x1c4c], 4
jne 0x10069787
mov eax, dword [eax + 0x1c48]
cmp eax, dword [ecx + 0x70]
jne 0x10069742
cmp byte [ecx + 0xac], 0
jne 0x10069787
test byte [esi + 0xc], 0x20
jne 0x10069787
test byte [ebx + 4], 0x10
jne 0x10069787
mov eax, dword [esp + 0x2c]
mov ecx, eax
cmp eax, 0xffffffff
jae 0x10069776
nop dword [eax]
mov dl, byte [ecx]
test dl, dl
je 0x10069776
cmp dl, 0x23
jne 0x10069770
cmp byte [ecx + 1], dl
je 0x10069776
inc ecx
cmp ecx, 0xffffffff
jb 0x10069760
push eax
sub ecx, eax
push ecx
push str._.s
call fcn.10045900
add esp, 0xc
mov al, byte [esp + 0x18]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb4
ret