Function at 0x100c9810
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x68
push esi
push edi
mov edi, dword [0x1023d48c]
mov dword [esp + 0x14], edx
mov dword [esp + 0x1c], ecx
mov eax, dword [edi + 0x1bac]
mov byte [eax + 0xac], 1
mov eax, dword [edi + 0x1bac]
mov dword [esp + 0x30], eax
cmp byte [eax + 0xaf], 0
je 0x100c9851
xor al, al
pop edi
pop esi
mov esp, ebp
pop ebp
ret
test byte [edi + 0x1c34], 1
movss xmm2, dword [edi + 0x1564]
addss xmm2, xmm2
addss xmm2, dword [edi + 0x1940]
movss dword [esp + 0x40], xmm2
je 0x100c987e
movss xmm1, dword [edi + 0x1c38]
jmp 0x100c9886
movss xmm1, dword [eax + 0x1c0]
xorps xmm0, xmm0
comiss xmm0, xmm1
jbe 0x100c98c4
cmp dword [eax + 0x1a4], 0
movss xmm0, dword [eax + 0x258]
jne 0x100c98a8
cmp dword [edi + 0x1f18], 0
je 0x100c98b0
movss xmm0, dword [eax + 0x228]
subss xmm0, dword [eax + 0xf0]
addss xmm1, xmm0
maxss xmm1, dword [0x1022f9c8]
test byte [ebp + 8], 0x10
cvttss2si esi, xmm1
mov dword [esp + 0x28], esi
movd xmm3, esi
cvtdq2ps xmm3, xmm3
je 0x100c98de
xorps xmm1, xmm1
jmp 0x100c98e9
movaps xmm1, xmm2
addss xmm1, dword [edi + 0x1578]
movss dword [esp + 0x24], xmm1
movaps xmm0, xmm3
mov dword [esp + 0x18], ecx
subss xmm0, xmm1
movss dword [esp + 0x38], xmm0
cmp ecx, 0xffffffff
jae 0x100c9921
mov esi, ecx
mov cl, byte [esi]
test cl, cl
je 0x100c9921
cmp cl, 0x23
jne 0x100c9917
cmp byte [esi + 1], cl
je 0x100c9921
inc esi
mov dword [esp + 0x18], esi
cmp esi, 0xffffffff
jb 0x100c9907
lea edx, [esp + 0x48]
mov dword [edi + 0x1c34], 0
mov ecx, 1
mov dword [esp + 0x48], 0x40a00000
mov dword [esp + 0x4c], 0x40a00000
call fcn.100a29a0
call fcn.100ae0d0
mov eax, dword [0x1023d48c]
xor edx, edx
mov eax, dword [eax + 0x1bac]
add eax, 0xe4
mov dword [esp + 0x20], eax
mov ecx, dword [eax]
mov eax, dword [eax + 8]
push dword [eax + ecx*4 - 4]
mov ecx, dword [esp + 0x20]
call fcn.100a1b00
mov edx, dword [esp + 0x24]
add esp, 4
mov dword [esp + 0x2c], eax
mov eax, dword [edx + 4]
mov ecx, dword [edx]
mov dword [esp + 0x34], eax
cmp ecx, eax
jne 0x100c99b8
inc ecx
test eax, eax
je 0x100c99a2
cdq
sub eax, edx
mov edx, dword [esp + 0x20]
sar eax, 1
add eax, dword [esp + 0x34]
jmp 0x100c99a7
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, edx
call fcn.100b44d0
mov edx, dword [esp + 0x20]
mov ecx, dword [edx]
mov eax, dword [edx + 8]
mov esi, dword [esp + 0x2c]
mov dword [eax + ecx*4], esi
mov ecx, dword [ebp + 8]
inc dword [edx]
mov esi, dword [esp + 0x28]
mov dword [esp + 0x44], ecx
test cl, 0x20
je 0x100c99e5
and ecx, 0xff9fffff
or ecx, 0x100008
mov dword [ebp + 8], ecx
test cl, 8
jne 0x100c99f8
mov edx, ecx
mov ecx, dword [esp + 0x14]
call fcn.100cc110
mov ecx, dword [ebp + 8]
test ecx, 0x700000
jne 0x100c9a0d
mov eax, dword [edi + 0x2e80]
and eax, 0x700000
or ecx, eax
test ecx, 0x1800000
jne 0x100c9a22
mov eax, dword [edi + 0x2e80]
and eax, 0x1800000
or ecx, eax
test ecx, 0x6000000
jne 0x100c9a37
mov eax, dword [edi + 0x2e80]
and eax, 0x6000000
or ecx, eax
test ecx, 0x18000000
jne 0x100c9a4c
mov eax, dword [edi + 0x2e80]
and eax, 0x18000000
or ecx, eax
mov eax, dword [edi + 0x2e80]
and eax, 0xe00fffff
or ecx, eax
mov eax, ecx
mov dword [ebp + 8], ecx
shr eax, 1
not al
and eax, 0xffffff01
movzx edx, al
add edx, 3
mov dword [esp + 0x34], eax
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0x14]
movss xmm3, dword [edx]
movss xmm1, dword [edx + 4]
movss xmm2, dword [edx + 8]
movss dword [esp + 0x50], xmm3
movss dword [esp + 0x54], xmm1
movss dword [esp + 0x58], xmm2
test al, al
je 0x100c9aa4
movss xmm4, dword [edx + 0xc]
jmp 0x100c9aac
movss xmm4, dword [0x1022f9c8]
mov eax, ecx
movss dword [esp + 0x5c], xmm4
and eax, 0x10100000
cmp eax, 0x10100000
jne 0x100c9afc
lea eax, [esp + 0x58]
movaps xmm0, xmm3
push eax
lea edx, [esp + 0x58]
lea ecx, [esp + 0x54]
call fcn.100a2120
movss xmm4, dword [esp + 0x60]
add esp, 4
movss xmm2, dword [esp + 0x58]
movss xmm1, dword [esp + 0x54]
movss xmm3, dword [esp + 0x50]
mov ecx, dword [ebp + 8]
mov edx, dword [esp + 0x14]
jmp 0x100c9bd7
mov eax, ecx
and eax, 0x8200000
cmp eax, 0x8200000
jne 0x100c9bd7
comiss xmm2, xmm1
xorps xmm6, xmm6
movaps xmm5, xmm1
movaps xmm7, xmm2
jbe 0x100c9b2a
movss xmm6, dword [0x1022fc7c]
movaps xmm5, xmm2
movaps xmm7, xmm1
comiss xmm5, xmm3
movaps xmm2, xmm3
jbe 0x100c9b47
movss xmm0, dword [0x1022fc60]
movaps xmm2, xmm5
subss xmm0, xmm6
movaps xmm5, xmm3
movaps xmm6, xmm0
movaps xmm0, xmm7
mov eax, dword [edi + 0x2e8c]
minss xmm0, xmm5
movaps xmm1, xmm2
movaps xmm3, xmm5
subss xmm3, xmm7
subss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm0, dword [0x1022fabc]
addss xmm0, dword [0x1022f870]
divss xmm3, xmm0
movaps xmm0, xmm2
addss xmm3, xmm6
addss xmm0, dword [0x1022f870]
andps xmm3, xmmword [0x1022feb0]
divss xmm1, xmm0
cmp eax, dword [edx]
jne 0x100c9bd7
mov eax, dword [edi + 0x2e90]
cmp eax, dword [edx + 4]
jne 0x100c9bd7
mov eax, dword [edi + 0x2e94]
cmp eax, dword [edx + 8]
jne 0x100c9bd7
ucomiss xmm1, dword [0x1022f858]
lahf
test ah, 0x44
jp 0x100c9bc2
movss xmm3, dword [edi + 0x2e84]
ucomiss xmm2, dword [0x1022f858]
lahf
test ah, 0x44
jp 0x100c9bd7
movss xmm1, dword [edi + 0x2e88]
comiss xmm3, dword [0x1022f858]
movss xmm5, dword [0x1022fc6c]
movss xmm0, dword [0x1022f964]
jb 0x100c9bf5
movaps xmm7, xmm0
jmp 0x100c9bf8
movaps xmm7, xmm5
movss xmm6, dword [0x1022fbbc]
mulss xmm3, xmm6
addss xmm3, xmm7
xorps xmm7, xmm7
comiss xmm1, xmm7
cvttss2si eax, xmm3
mov dword [esp + 0x50], eax
jb 0x100c9c1d
movaps xmm3, xmm0
jmp 0x100c9c20
movaps xmm3, xmm5
comiss xmm2, xmm7
mulss xmm1, xmm6
addss xmm1, xmm3
cvttss2si eax, xmm1
mov dword [esp + 0x54], eax
jb 0x100c9c3a
movaps xmm1, xmm0
jmp 0x100c9c3d
movaps xmm1, xmm5
comiss xmm4, xmm7
mulss xmm2, xmm6
addss xmm2, xmm1
cvttss2si eax, xmm2
mov dword [esp + 0x58], eax
jae 0x100c9c55
movaps xmm0, xmm5
cmp dword [edi + 0x15b8], 0
mulss xmm4, xmm6
mov byte [esp + 0x12], 0
addss xmm4, xmm0
cvttss2si eax, xmm4
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x30]
movss xmm2, dword [eax + 0xf0]
movss xmm3, dword [eax + 0xf4]
movss dword [esp + 0x28], xmm2
movss dword [esp + 0x2c], xmm3
jne 0x100c9c9b
movss xmm1, dword [esp + 0x24]
jmp 0x100c9c9e
xorps xmm1, xmm1
mov dword [esp + 0x20], 0
movaps xmm0, xmm2
addss xmm0, xmm1
movss dword [eax + 0xf0], xmm0
test cl, 0x10
jne 0x100ca087
test cl, 0x20
jne 0x100c9cdc
cmp dword [edi + 0x15b8], 0
je 0x100c9cdc
movss xmm1, dword [esp + 0x38]
addss xmm1, dword [edi + 0x1578]
jmp 0x100c9cdf
xorps xmm1, xmm1
cmp byte [esp + 0x34], 0
movaps xmm0, xmm2
addss xmm0, xmm1
movss dword [eax + 0xf4], xmm3
movss dword [eax + 0xf0], xmm0
je 0x100c9d04
movss xmm1, dword [edx + 0xc]
jmp 0x100c9d0c
movss xmm1, dword [0x1022f9c8]
movss xmm0, dword [edx]
mov dword [esp + 0x3c], 0x41500000
push dword [esp + 0x3c]
movss dword [esp + 0x64], xmm0
movss xmm0, dword [edx + 4]
mov dword [esp + 0x3c], 0x41900000
push dword [esp + 0x3c]
movss dword [esp + 0x6c], xmm0
movss xmm0, dword [edx + 8]
lea edx, [esp + 0x68]
push ecx
mov ecx, str.ColorButton
movss dword [esp + 0x74], xmm0
movss dword [esp + 0x78], xmm1
call fcn.100cb410
add esp, 0xc
test al, al
je 0x100c9e2b
test byte [ebp + 8], 4
jne 0x100c9e2b
movups xmm0, xmmword [esp + 0x60]
mov eax, dword [0x1023d48c]
xor edx, edx
movups xmmword [edi + 0x2e98], xmm0
mov eax, dword [eax + 0x1bac]
mov ecx, dword [eax + 0xe4]
mov eax, dword [eax + 0xec]
push dword [eax + ecx*4 - 4]
mov ecx, 0x10224c10
call fcn.100a1b00
mov ecx, eax
add esp, 4
mov eax, dword [0x1023d48c]
cmp dword [eax + 0x1be0], ecx
jne 0x100c9db9
mov dword [eax + 0x1be4], ecx
cmp dword [eax + 0x1c1c], ecx
jne 0x100c9dc8
mov byte [eax + 0x1c20], 1
xor edx, edx
call fcn.100af5b0
movss xmm1, dword [edi + 0x1c54]
movss xmm0, dword [edi + 0x1c60]
addss xmm0, dword [edi + 0x1574]
mov eax, dword [0x1023d48c]
subss xmm1, dword [0x1022f9c8]
or dword [eax + 0x1c74], 1
movss dword [eax + 0x1c88], xmm0
movss dword [eax + 0x1c84], xmm1
mov dword [eax + 0x1c8c], 0
mov dword [eax + 0x1c90], 0
mov dword [eax + 0x1c78], 1
jmp 0x100c9e30
mov eax, dword [0x1023d48c]
test byte [ebp + 8], 8
jne 0x100c9f6d
cmp byte [eax + 0x3f7], 0
mov edx, dword [eax + 0x1bac]
je 0x100c9f6d
cmp byte [eax + 0x1d97], 0
je 0x100c9e91
cmp byte [eax + 0x1d96], 0
jne 0x100c9e91
test byte [eax + 0x1c4c], 4
jne 0x100c9f6d
mov ecx, dword [eax + 0x1d48]
cmp ecx, dword [eax + 0x1c48]
jne 0x100c9e82
test ecx, ecx
je 0x100c9e82
mov al, 1
jmp 0x100c9e84
xor al, al
test al, al
je 0x100c9f6d
jmp 0x100c9f1f
mov ecx, dword [eax + 0x1c50]
test cl, 1
je 0x100c9f6d
cmp dword [eax + 0x1bb0], edx
je 0x100c9eb0
test cl, cl
jns 0x100c9f6d
mov ecx, dword [eax + 0x1be0]
test ecx, ecx
je 0x100c9ed4
cmp ecx, dword [eax + 0x1c48]
je 0x100c9ed4
cmp byte [eax + 0x1bed], 0
jne 0x100c9ed4
cmp ecx, dword [edx + 0x70]
jne 0x100c9f6d
mov ecx, dword [eax + 0x1d44]
test ecx, ecx
je 0x100c9f02
mov ecx, dword [ecx + 0x32c]
test ecx, ecx
je 0x100c9f02
cmp byte [ecx + 0xab], 0
je 0x100c9f02
cmp ecx, dword [edx + 0x32c]
je 0x100c9f02
test dword [ecx + 0x10], 0x8000000
jne 0x100c9f6d
test byte [eax + 0x1c4c], 4
jne 0x100c9f6d
mov eax, dword [eax + 0x1c48]
cmp eax, dword [edx + 0x70]
jne 0x100c9f1f
cmp byte [edx + 0xac], 0
jne 0x100c9f6d
mov ecx, dword [edx + 0xe4]
mov eax, dword [edx + 0xec]
xor edx, edx
push dword [eax + ecx*4 - 4]
mov ecx, str.context
call fcn.100a1b00
mov edx, dword [0x1023d48c]
add esp, 4
cmp dword [edx + 0x1be0], eax
jne 0x100c9f52
mov dword [edx + 0x1be4], eax
cmp dword [edx + 0x1c1c], eax
jne 0x100c9f61
mov byte [edx + 0x1c20], 1
mov edx, 1
mov ecx, eax
call fcn.100af5b0
mov ecx, 0x10224c10
call fcn.100af910
test al, al
je 0x100ca078
mov eax, dword [edi + 0x1bac]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x18]
cmp ecx, eax
je 0x100c9fe4
push 0
mov edx, eax
call fcn.100bf3f0
mov ecx, dword [0x1023d48c]
add esp, 4
mov eax, dword [ecx + 0x1bac]
mov byte [eax + 0xac], 1
mov eax, dword [ecx + 0x1bac]
cmp byte [eax + 0xaf], 0
jne 0x100c9fe4
movss xmm1, dword [0x1022fc7c]
lea ecx, [esp + 0x38]
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
call fcn.100adc80
mov eax, dword [0x1023d48c]
mov ecx, str.picker
movss xmm0, dword [esp + 0x40]
mulss xmm0, dword [0x1022faf0]
mov edx, dword [esp + 0x14]
or dword [eax + 0x1c34], 1
movss dword [eax + 0x1c38], xmm0
lea eax, [edi + 0x2e98]
push eax
mov eax, dword [esp + 0x48]
and eax, 0x1f890002
or eax, 0x740080
push eax
call fcn.100ca470
mov byte [esp + 0x1a], al
add esp, 8
mov eax, dword [0x1023d48c]
mov dword [esp + 0x44], eax
mov ecx, dword [eax + 0x1bac]
cmp dword [eax + 0x1d44], ecx
jne 0x100ca058
mov dword [eax + 0x1e44], ecx
mov dword [eax + 0x1e48], 2
test dword [ecx + 0x10], 0x1000000
je 0x100ca068
mov byte [eax + 0x1b56], 1
call fcn.100ad250
mov eax, dword [esp + 0x44]
mov byte [eax + 0x1b56], 0
mov ecx, dword [ebp + 8]
movss xmm3, dword [esp + 0x2c]
movss xmm2, dword [esp + 0x28]
mov eax, dword [esp + 0x18]
cmp dword [esp + 0x1c], eax
je 0x100ca0e1
test cl, cl
js 0x100ca0e1
test cl, 0x20
je 0x100ca0a2
movss xmm0, dword [esp + 0x24]
jmp 0x100ca0b1
movd xmm0, esi
cvtdq2ps xmm0, xmm0
addss xmm0, dword [edi + 0x1578]
addss xmm3, dword [edi + 0x1564]
mov ecx, dword [esp + 0x30]
addss xmm2, xmm0
push 0
mov edx, eax
movss dword [ecx + 0xf4], xmm3
movss dword [ecx + 0xf0], xmm2
mov ecx, dword [esp + 0x20]
call fcn.100bf3f0
add esp, 4
cmp byte [esp + 0x12], 0
je 0x100ca23f
cmp dword [esp + 0x20], 0
jne 0x100ca23f
movups xmm0, xmmword [esp + 0x50]
mov eax, dword [ebp + 8]
and eax, 0x8200000
cvtdq2ps xmm0, xmm0
mulps xmm0, xmmword [0x1022fe10]
movups xmmword [esp + 0x50], xmm0
cmp eax, 0x8200000
jne 0x100ca169
movss xmm0, dword [esp + 0x50]
lea eax, [esp + 0x58]
movss xmm1, dword [esp + 0x54]
lea edx, [esp + 0x54]
movss xmm2, dword [esp + 0x58]
lea ecx, [esp + 0x50]
push eax
movss dword [edi + 0x2e84], xmm0
movss dword [edi + 0x2e88], xmm1
call fcn.100a2120
movq xmm0, qword [esp + 0x54]
add esp, 4
mov eax, dword [esp + 0x58]
movq qword [edi + 0x2e8c], xmm0
mov dword [edi + 0x2e94], eax
mov eax, dword [ebp + 8]
and eax, 0x10100000
cmp eax, 0x10100000
jne 0x100ca209
movss xmm1, dword [esp + 0x54]
xorps xmm5, xmm5
movss xmm4, dword [esp + 0x58]
movaps xmm0, xmm1
comiss xmm4, xmm0
movss xmm3, dword [esp + 0x50]
movaps xmm2, xmm3
jbe 0x100ca1aa
movss xmm5, dword [0x1022fc7c]
movaps xmm1, xmm4
movaps xmm4, xmm0
comiss xmm1, xmm2
jbe 0x100ca1c4
movss xmm0, dword [0x1022fc60]
movaps xmm3, xmm1
subss xmm0, xmm5
movaps xmm1, xmm2
movaps xmm5, xmm0
movaps xmm0, xmm4
movaps xmm2, xmm3
minss xmm0, xmm1
subss xmm1, xmm4
subss xmm2, xmm0
movaps xmm0, xmm2
mulss xmm0, dword [0x1022fabc]
addss xmm0, dword [0x1022f870]
divss xmm1, xmm0
movaps xmm0, xmm3
addss xmm0, dword [0x1022f870]
addss xmm1, xmm5
divss xmm2, xmm0
andps xmm1, xmmword [0x1022feb0]
jmp 0x100ca21b
movss xmm3, dword [esp + 0x58]
movss xmm2, dword [esp + 0x54]
movss xmm1, dword [esp + 0x50]
cmp byte [esp + 0x34], 0
mov eax, dword [esp + 0x14]
movss dword [eax], xmm1
movss dword [eax + 4], xmm2
movss dword [eax + 8], xmm3
je 0x100ca23f
movss xmm0, dword [esp + 0x5c]
movss dword [eax + 0xc], xmm0
mov eax, dword [0x1023d48c]
mov eax, dword [eax + 0x1bac]
dec dword [eax + 0xe4]
call fcn.100ae200
mov ecx, 1
call fcn.100a2a20
test byte [edi + 0x1c50], 1
je 0x100ca42a
test dword [ebp + 8], 0x200
jne 0x100ca42a
mov esi, dword [0x1023d48c]
cmp byte [esi + 0x1e88], 0
je 0x100ca430
mov edx, dword [esi + 0x1c50]
mov eax, dword [esi + 0x1bac]
test dl, 1
je 0x100ca430
mov ecx, dword [esi + 0x1bb4]
test ecx, ecx
je 0x100ca430
mov eax, dword [eax + 0x32c]
cmp eax, dword [ecx + 0x32c]
jne 0x100ca430
lea ecx, [esi + 0x1c64]
test dl, 2
jne 0x100ca2d2
lea ecx, [esi + 0x1c54]
mov eax, dword [esi + 0x1c48]
mov dword [esp + 0x34], ecx
test eax, eax
jne 0x100ca2ec
push ecx
mov ecx, dword [esi + 0x1bac]
call fcn.100a4150
cmp dword [esi + 0x1ea0], eax
je 0x100ca430
mov ecx, dword [esp + 0x34]
mov byte [esp + 0x13], 0
movups xmm0, xmmword [ecx]
mov ecx, str._COL3F
mov dword [esi + 0x1ee0], eax
mov byte [esi + 0x1e8a], 1
movups xmmword [esi + 0x1ed0], xmm0
call fcn.100b3050
mov esi, dword [esp + 0x14]
test eax, eax
je 0x100ca344
mov eax, dword [eax]
mov byte [esp + 0x13], 1
mov byte [esp + 0x12], 1
movq xmm0, qword [eax]
movq qword [esi], xmm0
mov eax, dword [eax + 8]
mov dword [esi + 8], eax
mov ecx, str._COL4F
call fcn.100b3050
test eax, eax
je 0x100ca36c
mov ecx, dword [esp + 0x48]
shl ecx, 2
push ecx
push dword [eax]
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov byte [esp + 0x12], 1
jmp 0x100ca377
cmp byte [esp + 0x13], 0
je 0x100ca41b
test dword [ebp + 8], 0x10000000
je 0x100ca41b
movss xmm2, dword [esi + 4]
movss xmm4, dword [esi + 8]
comiss xmm4, xmm2
movss xmm3, dword [esi]
jbe 0x100ca3aa
movss xmm5, dword [0x1022fc7c]
movaps xmm0, xmm2
movaps xmm2, xmm4
movaps xmm4, xmm0
jmp 0x100ca3ad
xorps xmm5, xmm5
comiss xmm2, xmm3
jbe 0x100ca3ca
movaps xmm0, xmm3
movaps xmm3, xmm2
movaps xmm2, xmm0
movss xmm0, dword [0x1022fc60]
subss xmm0, xmm5
movaps xmm5, xmm0
movaps xmm0, xmm2
movss dword [esi + 8], xmm3
minss xmm0, xmm4
movaps xmm1, xmm3
subss xmm2, xmm4
subss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm0, dword [0x1022fabc]
addss xmm0, dword [0x1022f870]
divss xmm2, xmm0
movaps xmm0, xmm3
addss xmm0, dword [0x1022f870]
addss xmm2, xmm5
divss xmm1, xmm0
andps xmm2, xmmword [0x1022feb0]
movss dword [esi], xmm2
movss dword [esi + 4], xmm1
mov esi, dword [0x1023d48c]
mov byte [esi + 0x1e8a], 0
jmp 0x100ca430
mov esi, dword [0x1023d48c]
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x100ca450
mov eax, dword [edi + 0x1be0]
test eax, eax
je 0x100ca450
cmp dword [edi + 0x1c10], ecx
jne 0x100ca450
mov dword [edi + 0x1c48], eax
mov al, byte [esp + 0x12]
test al, al
je 0x100ca468
or dword [esi + 0x1c50], 4
mov word [esi + 0x1bf0], 0x101
pop edi
pop esi
mov esp, ebp
pop ebp
ret