Function at 0x406350
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x98
push ebx
push esi
push edi
fldz
xor ebx, ebx
mov dword [esp + 0x14], ebx
fst dword [esp + 0x2c]
fldz
xor eax, eax
fstp qword [esp + 0x48]
xor ecx, ecx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x78], ebx
mov word [esp + 0x5c], ax
mov dword [esp + 0x30], ebx
mov word [esp + 0x28], cx
fst dword [esp + 0x60]
fst dword [esp + 0x24]
xor edx, edx
mov word [esp + 0x18], dx
fstp dword [esp + 0x24]
mov dword [esp + 0x1c], ebx
fld dword [esp + 0x24]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
fisub dword [esp + 0x20]
mov edx, 0x95bddd06
mov esi, 1
mov edi, dword [esp + 0xb4]
fstp dword [esp + 0x24]
dec dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
sub edx, ecx
add edx, dword [esp + 0x1c]
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], esi
mov dword [esp + 0x1c], edx
movzx eax, word [0x4249ec]
lea edx, [esp + 0x98]
push edx
add eax, 0x78f2cfa0
lea ecx, [esp + 0x98]
mov dword [esp + 0xa0], esi
push edi
mov word [0x4249ec], ax
mov dword [esp + 0xa8], ecx
call fcn.00401480
add esp, 8
test eax, eax
jne 0x40642a
pop edi
pop esi
lea eax, [ebx - 0xc]
pop ebx
add esp, 0x98
ret
push ebp
push ebx
lea eax, [esp + 0x90]
push eax
lea ecx, [esp + 0x5c]
push ecx
lea edx, [esp + 0x8c]
push edx
lea eax, [esp + 0x78]
push eax
lea ecx, [esp + 0x54]
push ecx
call fcn.004019d0
mov edx, dword [0x424a90]
mov dword [esp + 0x3c], edx
fild dword [esp + 0x3c]
fstp dword [esp + 0x3c]
fld dword [esp + 0x48]
fadd dword [esp + 0x3c]
call fcn.0040b210
mov ebp, dword [esp + 0xcc]
push edi
push ebp
mov dword [0x424a90], eax
call fcn.00401c10
add esp, 0x20
test eax, eax
jge 0x406526
mov edi, dword [esp + 0xac]
cmp edi, ebx
je 0x4064fa
fldz
push esi
mov dword [esp + 0x2c], ebx
fstp dword [esp + 0x80]
push edi
call fcn.00402ce0
mov esi, eax
add esp, 8
cmp esi, ebx
jne 0x406fdf
mov eax, dword [edi + 4]
mov ecx, dword [edi + 8]
add eax, eax
add eax, eax
push eax
push ebx
push ecx
call fcn.0040b190
mov eax, dword [esp + 0x34]
mov edx, dword [edi + 8]
mov dword [esp + 0x30], eax
fild dword [esp + 0x30]
mov dword [edx], ebx
add esp, 0xc
mov dword [edi], 1
fadd dword [esp + 0x7c]
call fcn.0040b210
mov dword [esp + 0x28], eax
cmp esi, ebx
jne 0x406fdf
mov eax, dword [esp + 0xb0]
cmp eax, ebx
je 0x406519
push ebp
push eax
call fcn.00403550
mov esi, eax
add esp, 8
cmp esi, ebx
jne 0x406fdf
pop ebp
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x98
ret
lea ecx, [esp + 0x40]
push ebp
push ecx
call fcn.00403550
mov esi, eax
add esp, 8
cmp esi, ebx
jne 0x406fdf
mov edx, dword [0x42315c]
mov cx, word [esp + 0x2c]
dec dword [esp + 0x2c]
inc dword [0x42315c]
mov eax, 0x715ba079
sub eax, edx
movsx edx, cx
cmp eax, edx
jl 0x40656f
fld qword [0x41f7b8]
fstp qword [0x425e10]
jmp 0x406589
fld dword [esp + 0x64]
fsub qword [0x424958]
fsub qword [0x41f7b0]
call fcn.0040b210
mov word [esp + 0x1c], ax
lea eax, [esp + 0x68]
push edi
push eax
call fcn.00403550
mov esi, eax
add esp, 8
cmp esi, ebx
jne 0x406fdf
mov ecx, dword [ebp + 4]
add ecx, 2
mov eax, 1
push ecx
lea edx, [esp + 0x84]
push edx
mov dword [esp + 0x70], eax
mov dword [esp + 0x48], eax
call fcn.00402ce0
mov esi, eax
add esp, 8
cmp esi, ebx
jne 0x406fdf
lea eax, [esp + 0x80]
push ebx
push eax
call fcn.004033f0
mov esi, eax
add esp, 8
cmp esi, ebx
jne 0x406fdf
lea ecx, [esp + 0x54]
push 2
push ecx
call fcn.00402ce0
mov esi, eax
add esp, 8
cmp esi, ebx
jne 0x406fdf
fld qword [0x424a98]
lea edx, [esp + 0x8c]
fsub qword [0x41f7a8]
push 3
push edx
fstp qword [0x424a98]
call fcn.00402ce0
mov esi, eax
add esp, 8
cmp esi, ebx
jne 0x406fdf
lea eax, [esp + 0x68]
push eax
call fcn.00401250
add esp, 4
and eax, 0x8000001f
jns 0x40664a
dec eax
or eax, 0xffffffe0
inc eax
cmp eax, 0x1f
jge 0x40669a
mov edi, 0x1f
sub edi, eax
lea ecx, [esp + 0x40]
push edi
push ecx
mov dword [esp + 0x2c], edi
call fcn.00403120
mov esi, eax
add esp, 8
cmp esi, ebx
jne 0x406fdf
fld qword [esp + 0x4c]
lea edx, [esp + 0x68]
fmul qword [0x41f7a0]
push edi
push edx
fstp qword [esp + 0x54]
call fcn.00403120
mov esi, eax
add esp, 8
cmp esi, ebx
jne 0x406fdf
jmp 0x40669e
mov dword [esp + 0x24], ebx
mov ebp, dword [esp + 0x44]
fld dword [0x41f798]
mov eax, dword [esp + 0x6c]
fstp dword [0x424ae0]
dec eax
dec ebp
mov edi, ebp
sub edi, eax
mov ebx, edi
mov dword [esp + 0x78], eax
shl ebx, 5
lea eax, [esp + 0x68]
push ebx
push eax
call fcn.00403120
lea ecx, [esp + 0x70]
push ecx
lea edx, [esp + 0x4c]
push edx
call fcn.00401480
add esp, 0x10
test eax, eax
jl 0x406778
jmp 0x4066f0
mov eax, dword [esp + 0x88]
inc dword [eax + edi*4]
lea eax, [esp + 0x68]
push eax
lea ecx, [esp + 0x44]
push ecx
mov edx, ecx
push edx
call fcn.00404ef0
mov ax, word [esp + 0x28]
movsx ecx, ax
sub ecx, 0xea5e0cd
mov dword [esp + 0x20], ecx
add esp, 0xc
fild dword [esp + 0x14]
fld qword [0x425e40]
fsub qword [0x41f790]
fsub qword [0x41f788]
fcompp
fnstsw ax
test ah, 0x41
jp 0x40675e
fld qword [0x423920]
fld qword [esp + 0x4c]
fadd qword [0x41f780]
fsub qword [0x41f778]
fsubp st(1)
fstp qword [0x423920]
lea edx, [esp + 0x68]
push edx
lea eax, [esp + 0x44]
push eax
call fcn.00401480
add esp, 8
test eax, eax
jge 0x4066f0
fld qword [esp + 0x4c]
lea edx, [esp + 0x68]
fadd qword [0x41f348]
push ebx
push edx
fstp qword [esp + 0x54]
mov ecx, dword [0x425f98]
mov dword [esp + 0x1c], ecx
fild dword [esp + 0x1c]
fadd qword [esp + 0x54]
fsub qword [0x41f770]
fstp dword [esp + 0x30]
call fcn.00401e10
add esp, 8
cmp ebp, dword [esp + 0x78]
mov dword [esp + 0x20], ebp
jle 0x406f2e
lea eax, [edi*4]
add ebx, 0xffffffe0
mov dword [esp + 0x1c], eax
mov dword [esp + 0x74], ebx
fld dword [esp + 0x30]
fadd qword [0x41f348]
fstp dword [esp + 0x30]
mov cx, word [0x4248a8]
fld dword [esp + 0x30]
mov edx, dword [esp + 0x18]
movsx eax, cx
add eax, 0x86e0d1b4
add edx, eax
mov dword [esp + 0x14], edx
or edx, 0xffffffff
add word [0x4248a8], dx
fild dword [esp + 0x14]
lea ebx, [edx + 2]
fucompp
fnstsw ax
test ah, 0x44
jp 0x406854
add word [0x4249ec], bx
add word [0x424888], bx
mov ax, word [0x424888]
mov cx, word [0x4249ec]
movsx ecx, cx
cwde
sub ecx, eax
add ecx, 0x5a4fc6ec
cmp ecx, 0x570dae1f
jl 0x40686b
fld dword [esp + 0x64]
fsub qword [0x41f768]
fstp dword [esp + 0x64]
jmp 0x40686b
mov ax, word [0x424a24]
mov ecx, dword [0x42330c]
cwde
imul ecx, eax
mov word [0x424a24], cx
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x20]
mov esi, dword [esp + 0x78]
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x70]
mov dword [esp + 0x14], ecx
mov ecx, dword [ecx]
cmp ecx, dword [eax + esi*4]
lea eax, [eax + esi*4]
jb 0x4068ab
mov ecx, dword [esp + 0x88]
mov eax, dword [esp + 0x1c]
mov dword [eax + ecx - 4], edx
mov ecx, dword [esp + 0x88]
add dword [eax + ecx - 4], ebx
jmp 0x406a47
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x18]
lea ecx, [esi + ecx + 0x3416553a]
mov dword [esp + 0x18], ecx
add dword [esp + 0x18], ebx
mov edi, dword [eax]
add word [0x424d94], dx
add dword [esp + 0x2c], ebx
mov ax, word [0x424d94]
movzx ecx, word [esp + 0x2c]
movsx ecx, cx
cwde
sub eax, ecx
movzx ecx, word [0x425f9c]
movsx ecx, cx
cmp ecx, eax
jne 0x406911
mov eax, dword [esp + 0x38]
add dword [esp + 0x38], edx
cmp eax, 0xb4530f94
jle 0x406911
mov ecx, dword [0x423908]
mov eax, dword [esp + 0x34]
add dword [0x423908], edx
add dword [esp + 0x34], edx
mov ebp, dword [esp + 0x14]
mov esi, dword [ebp]
xor edx, edx
mov eax, esi
mov ebx, edi
shr ebx, 0x10
div ebx
movzx edx, word [0x424b14]
mov ecx, eax
imul ecx, ebx
sub esi, ecx
movsx ecx, dx
mov edx, dword [esp + 0x7c]
sub ecx, edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x3c], eax
shl esi, 0x10
fild dword [esp + 0x10]
fadd qword [0x425ea8]
fstp qword [0x425ea8]
movzx ecx, word [ebp - 2]
inc dword [esp + 0x60]
movzx edx, word [esp + 0x60]
mov ebp, eax
movzx eax, di
imul ebp, eax
movsx eax, dx
mov dword [esp + 0x10], eax
or esi, ecx
fild dword [esp + 0x10]
fsub qword [0x423418]
mov cx, word [esp + 0x2c]
movsx edx, cx
mov dword [esp + 0x10], edx
fild dword [esp + 0x10]
fmulp st(1)
call fcn.0040b210
mov ecx, dword [esp + 0x3c]
mov word [esp + 0x2c], ax
cmp esi, ebp
jae 0x4069b3
add esi, edi
dec ecx
cmp esi, edi
jb 0x4069b3
cmp esi, ebp
jae 0x4069b3
add esi, edi
dec ecx
cmp esi, edi
jae 0x4069a8
xor edx, edx
sub esi, ebp
mov eax, esi
div ebx
mov edx, eax
imul edx, ebx
sub esi, edx
mov edx, dword [esp + 0x14]
movzx edx, word [edx - 4]
shl esi, 0x10
or esi, edx
movzx ebx, di
mov edx, eax
imul edx, ebx
cmp esi, edx
jae 0x406a0f
fld dword [esp + 0x64]
mov bx, word [esp + 0x60]
fadd qword [0x41f760]
movsx ebx, bx
mov dword [esp + 0x10], ebx
add esi, edi
dec eax
fild dword [esp + 0x10]
faddp st(1)
fstp dword [0x4238b0]
cmp esi, edi
jb 0x406a0f
cmp esi, edx
jae 0x406a0f
add esi, edi
dec eax
cmp esi, edi
jae 0x406a04
mov edx, dword [esp + 0x1c]
shl ecx, 0x10
or ecx, eax
mov eax, dword [esp + 0x88]
mov dword [edx + eax - 4], ecx
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x88]
mov ebx, 1
or edx, 0xffffffff
add dword [eax + ecx - 4], ebx
jmp 0x406a47
mov eax, dword [esp + 0x1c]
or edx, 0xffffffff
mov cx, word [0x423188]
movsx ecx, cx
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x88]
push ebx
fild dword [esp + 0x14]
fstp dword [0x425dac]
add dword [eax + ecx - 4], edx
fldz
lea edx, [esp + 0x58]
mov dword [esp + 0x18], 0
fstp dword [esp + 0x40]
push edx
call fcn.00402ce0
mov esi, eax
add esp, 8
test esi, esi
jne 0x406fdf
mov eax, dword [esp + 0x58]
mov edx, dword [esp + 0x5c]
lea ecx, [eax*4]
push ecx
push esi
push edx
call fcn.0040b190
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x68]
mov dword [esp + 0x1c], ecx
fild dword [esp + 0x1c]
mov dword [eax], esi
add esp, 0xc
mov dword [esp + 0x54], ebx
fadd dword [esp + 0x3c]
call fcn.0040b210
mov dword [esp + 0x14], eax
test esi, esi
jne 0x406fdf
mov ecx, dword [esp + 0x78]
cmp ecx, 1
jge 0x406ae2
xor eax, eax
jmp 0x406aea
mov edx, dword [esp + 0x70]
mov eax, dword [edx + ecx*4 - 4]
mov edx, dword [esp + 0x5c]
mov dword [edx], eax
mov eax, dword [esp + 0x70]
mov ecx, dword [eax + ecx*4]
mov edx, dword [esp + 0x5c]
mov dword [edx + 4], ecx
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx + eax - 4]
push edx
lea eax, [esp + 0x58]
push eax
mov ecx, eax
push ecx
call fcn.00404ba0
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x406fdf
mov dx, word [esp + 0x60]
movsx eax, dx
add eax, 0x39aa7665
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fld qword [0x423220]
fcompp
fnstsw ax
fld qword [0x423220]
fsub qword [0x41f348]
fstp qword [0x423220]
test ah, 0x41
jne 0x406b70
fld dword [0x4231e0]
fmul qword [0x424d50]
fstp qword [0x424d50]
fldz
lea ecx, [esp + 0x8c]
push 1
mov dword [esp + 0x18], 0
fstp dword [esp + 0x40]
push ecx
call fcn.00402ce0
mov esi, eax
add esp, 8
test esi, esi
jne 0x406fdf
mov edx, dword [esp + 0x90]
mov ecx, dword [esp + 0x94]
lea eax, [edx*4]
push eax
push esi
push ecx
call fcn.0040b190
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0xa0]
mov dword [esp + 0x1c], eax
fild dword [esp + 0x1c]
mov dword [edx], esi
add esp, 0xc
mov dword [esp + 0x8c], 1
fadd dword [esp + 0x3c]
call fcn.0040b210
mov dword [esp + 0x14], eax
test esi, esi
jne 0x406fdf
mov eax, dword [esp + 0x20]
cmp eax, 2
jge 0x406bfc
xor ecx, ecx
jmp 0x406c04
mov ecx, dword [esp + 0x48]
mov ecx, dword [ecx + eax*4 - 8]
mov edx, dword [esp + 0x94]
mov dword [edx], ecx
mov ecx, dword [esp + 0x34]
mov edx, dword [0x4231c4]
add ecx, edx
mov edx, dword [esp + 0x38]
add edx, 0xdd503f9
cmp edx, ecx
jle 0x406c45
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x10], ecx
fild dword [esp + 0x10]
fadd dword [0x4249e8]
fadd dword [0x424904]
fstp dword [0x424904]
mov ebx, 1
cmp eax, ebx
jge 0x406c52
xor ecx, ecx
jmp 0x406c5a
mov edx, dword [esp + 0x48]
mov ecx, dword [edx + eax*4 - 4]
mov edx, dword [esp + 0x94]
mov dword [edx + 4], ecx
mov ecx, dword [esp + 0x48]
mov edx, dword [ecx + eax*4]
mov eax, dword [esp + 0x94]
lea ecx, [esp + 0x8c]
mov dword [eax + 8], edx
push ecx
lea edx, [esp + 0x58]
push edx
call fcn.00401480
add esp, 8
test eax, eax
jg 0x406a40
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx + eax - 4]
push edx
lea eax, [esp + 0x6c]
push eax
lea ecx, [esp + 0x5c]
push ecx
call fcn.00404ba0
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x406fdf
mov edx, dword [esp + 0x74]
push edx
lea eax, [esp + 0x58]
push eax
call fcn.00403120
mov esi, eax
add esp, 8
test esi, esi
jne 0x406fdf
mov ecx, dword [esp + 0x18]
sub ecx, 0x20ef497f
mov dword [esp + 0x10], ecx
fild dword [esp + 0x10]
fadd qword [0x423170]
inc dword [esp + 0x18]
fcomp qword [0x41f758]
fnstsw ax
test ah, 0x41
jne 0x406d3d
fld dword [esp + 0x30]
mov edx, dword [0x424964]
fadd qword [0x41f750]
sub edx, 0x43910229
mov dword [esp + 0x10], edx
fild dword [esp + 0x10]
fcompp
fnstsw ax
test ah, 0x41
jp 0x406d3d
movzx eax, word [0x424888]
imul eax, eax, 0x95b76a37
mov word [0x424888], ax
lea ecx, [esp + 0x54]
push ecx
lea edx, [esp + 0x44]
push edx
mov eax, edx
push eax
call fcn.00404ef0
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x406fdf
push eax
lea ecx, [esp + 0x44]
push ecx
call fcn.00401760
add esp, 8
test eax, eax
jge 0x406f11
fld dword [0x424894]
fld dword [0x424808]
fsub qword [0x41f748]
fcompp
fnstsw ax
fld dword [0x424808]
fld1
fadd st(1), st(0)
fxch st(1)
fstp dword [0x424808]
test ah, 0x41
jp 0x406df6
fld qword [0x423920]
mov edx, dword [esp + 0x34]
dec dword [esp + 0x34]
add edx, 0x70537cb9
mov dword [esp + 0x10], edx
fild dword [esp + 0x10]
fcompp
fnstsw ax
fadd qword [0x423920]
fstp qword [0x423920]
test ah, 5
jp 0x406dea
mov eax, dword [esp + 0x38]
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fadd dword [esp + 0x28]
fstp dword [esp + 0x28]
inc dword [esp + 0x38]
jmp 0x406e1f
add dword [0x425f04], 0xe132f201
jmp 0x406e1f
mov cx, word [0x4231b8]
fstp st(0)
movzx edx, word [0x424960]
movsx eax, cx
sub edx, eax
sub edx, 0x5cc7a264
mov word [0x424960], dx
dec word [0x4231b8]
lea eax, [esp + 0x68]
push eax
lea ecx, [esp + 0x58]
push ecx
call fcn.00403550
mov esi, eax
add esp, 8
test esi, esi
jne 0x406fdf
fld dword [0x424890]
fsub qword [0x41f740]
fadd qword [0x41f738]
fld dword [esp + 0x64]
mov dx, word [0x425e00]
fadd qword [0x41f730]
dec word [0x425e00]
movsx eax, dx
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
fsubp st(1)
fcompp
fnstsw ax
fld dword [0x424890]
fld1
fadd st(1), st(0)
fxch st(1)
fstp dword [0x424890]
test ah, 1
jne 0x406ea9
fld dword [esp + 0x30]
fsub qword [0x41f728]
fsub qword [esp + 0x4c]
fstp qword [esp + 0x4c]
fadd qword [esp + 0x4c]
fstp qword [esp + 0x4c]
jmp 0x406eab
fstp st(0)
mov ecx, dword [esp + 0x74]
push ecx
lea edx, [esp + 0x58]
push edx
call fcn.00403120
mov esi, eax
add esp, 8
test esi, esi
jne 0x406fdf
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], eax
fild dword [esp + 0x10]
lea ecx, [esp + 0x54]
push ecx
lea edx, [esp + 0x44]
fsub qword [0x4238f8]
push edx
mov eax, edx
push eax
fstp dword [0x42482c]
inc dword [esp + 0x24]
call fcn.00404d80
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x406fdf
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x1c]
dec dword [ecx + eax - 4]
mov eax, dword [esp + 0x20]
sub dword [esp + 0x74], 0x20
sub dword [esp + 0x1c], 4
dec eax
cmp eax, dword [esp + 0x78]
mov dword [esp + 0x20], eax
jg 0x4067d0
mov edi, dword [esp + 0xac]
test edi, edi
je 0x406f9a
lea ecx, [esp + 0x80]
push ecx
push edi
call fcn.00403550
fld dword [esp + 0x38]
fadd qword [0x41f720]
add esp, 8
fcomp qword [0x41f718]
fnstsw ax
test ah, 0x41
jne 0x406f85
fld qword [esp + 0x4c]
mov edx, dword [0x424840]
add edx, 0x2e5c2c15
mov dword [esp + 0x10], edx
fild dword [esp + 0x10]
fsubp st(1)
fstp qword [esp + 0x4c]
dec dword [0x424840]
mov eax, dword [esp + 0xb4]
mov ecx, dword [eax]
mov edx, dword [esp + 0xb8]
imul ecx, dword [edx]
mov dword [edi], ecx
mov edi, dword [esp + 0xb0]
test edi, edi
je 0x406fdf
mov eax, dword [esp + 0x24]
push eax
lea ecx, [esp + 0x44]
push ecx
call fcn.00401e10
lea edx, [esp + 0x48]
push edx
push edi
call fcn.00403550
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax]
push 0
push edi
mov dword [edi], ecx
call fcn.00401760
add esp, 0x18
test eax, eax
jne 0x406fdf
mov dword [edi], 1
push 0
lea edx, [esp + 0x90]
push edx
lea eax, [esp + 0x5c]
push eax
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x78]
push edx
lea eax, [esp + 0x54]
push eax
call fcn.004010c0
dec word [0x424a8c]
mov cx, word [0x424a8c]
add esp, 0x18
movsx edx, cx
mov eax, 0xabce8c59
pop ebp
sub eax, edx
pop edi
mov dword [0x424dc4], eax
mov eax, esi
pop esi
pop ebx
add esp, 0x98
ret