Function at 0x40a2b0
Capabilities:
Encode data using xor
Hash data with crc32

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x78
mov eax, dword [0x4f7040]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebx + 8]
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x74], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x70], eax
mov eax, dword [0x536900]
test byte [edi + 8], 0x42
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x48], eax
jne 0x40ae09
cmp byte [edi + 0xc0], 0
jg 0x40ae09
cmp byte [edi + 0xc1], 0
jg 0x40ae09
cmp byte [edi + 0xa7], 0
je 0x40ae09
movss xmm2, dword [eax + 0x3bb4]
xor edx, edx
movss xmm0, dword [edi + 0x48]
movaps xmm1, xmm2
addss xmm0, dword [0x4edf54]
mulss xmm2, dword [0x4edf00]
mov esi, 4
mov cl, byte [eax + 0x66]
mulss xmm1, dword [0x4edf5c]
test cl, cl
mov byte [ebp - 0x27], 0
addss xmm0, xmm2
cmovne edx, esi
mov dword [ebp - 0x6c], edx
maxss xmm1, xmm0
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x4edf34]
cvttss2si esi, xmm0
mov dword [ebp - 0x68], esi
je 0x40a38e
movss xmm0, dword [0x4edfb0]
jmp 0x40a391
xorps xmm0, xmm0
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [0x4ee04c]
movaps xmm1, xmm0
movss dword [ebp - 0x3c], xmm0
movss dword [ebp - 0x40], xmm0
movss dword [ebp - 0x38], xmm1
movss dword [ebp - 0x2c], xmm0
mov dword [edi + 0x144], 1
call fcn.0040f030
xor edx, edx
mov dword [ebp - 0x30], edx
cmp dword [ebx + 0xc], edx
jle 0x40a808
movss xmm0, dword [edi + 0x10]
lea ecx, [edx + edx*2]
movss xmm1, dword [edi + 0x14]
movaps xmm3, xmm0
addss xmm3, dword [edi + 0x18]
movaps xmm2, xmm1
mov dword [ebp - 0x4c], ecx
addss xmm2, dword [edi + 0x1c]
xorps xmm6, xmm6
cvtsi2ss xmm6, esi
subss xmm3, xmm0
subss xmm2, xmm1
mulss xmm3, dword [ecx*8 + 0x4e80f0]
mulss xmm2, dword [ecx*8 + 0x4e80f4]
addss xmm3, xmm0
movss xmm0, dword [ecx*8 + 0x4e80f8]
movaps xmm5, xmm0
mulss xmm0, dword [ebp - 0x20]
addss xmm2, xmm1
mulss xmm5, xmm6
movss xmm1, dword [ecx*8 + 0x4e80fc]
movaps xmm4, xmm1
mulss xmm1, dword [ebp - 0x20]
mulss xmm4, xmm6
addss xmm5, xmm3
subss xmm3, xmm0
addss xmm4, xmm2
subss xmm2, xmm1
movss dword [ebp - 0x14], xmm5
comiss xmm3, xmm5
movss dword [ebp - 0x1c], xmm3
movss dword [ebp - 0x18], xmm2
movss dword [ebp - 0x10], xmm4
jbe 0x40a478
movss dword [ebp - 0x1c], xmm5
movss dword [ebp - 0x14], xmm3
comiss xmm2, xmm4
jbe 0x40a487
movss dword [ebp - 0x18], xmm4
movss dword [ebp - 0x10], xmm2
mov ecx, dword [edi + 0xe0]
lea esi, [ebp - 0x24]
mov eax, dword [edi + 0xe8]
mov edi, 4
mov dword [ebp - 0x24], edx
mov edx, dword [eax + ecx*4 - 4]
not edx
movzx eax, byte [esi]
lea esi, [esi + 1]
movzx ecx, dl
xor ecx, eax
shr edx, 8
xor edx, dword [ecx*4 + 0x4e8150]
sub edi, 1
jne 0x40a4a4
mov eax, dword [0x536900]
not edx
mov esi, dword [ebp - 0x68]
mov edi, dword [ebp - 0x44]
mov dword [ebp - 0x34], edx
cmp dword [eax + 0x3e5c], edx
jne 0x40a4ed
push ecx
push dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov edx, 4
call fcn.00418100
mov edx, dword [ebp - 0x34]
add esp, 8
push 8
push 0
lea ecx, [ebp - 0x1c]
call fcn.00411360
mov edx, dword [ebp - 0x34]
lea eax, [ebp - 0x25]
push 0x40800
push eax
lea eax, [ebp - 0x26]
push eax
lea ecx, [ebp - 0x1c]
call fcn.0042dcc0
mov cl, byte [ebp - 0x26]
add esp, 0x14
test cl, cl
jne 0x40a526
mov al, byte [ebp - 0x25]
test al, al
je 0x40a852
mov edx, dword [ebp - 0x30]
mov eax, edx
mov ecx, dword [ebp - 0x48]
not eax
and eax, 1
add eax, 5
mov dword [ecx + 0x492c], eax
mov al, byte [ebp - 0x25]
test al, al
je 0x40a7c6
cmp word [ecx + 0x3702], 2
jne 0x40a59c
test edx, edx
jne 0x40a59c
push dword [ebp - 0x50]
mov edx, edi
lea ecx, [ebp - 0x64]
call fcn.00409c30
add esp, 4
mov byte [ebp - 0x27], 1
xor edx, edx
xor ecx, ecx
movss xmm0, dword [eax]
movss dword [ebp - 0x38], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x2c], xmm0
call fcn.00406250
mov edx, dword [ebp - 0x30]
cmp byte [ebp - 0x25], 0
je 0x40a7dd
mov ecx, 0x20
jmp 0x40a7e8
mov edx, dword [ebp - 0x4c]
movss xmm3, dword [0x4edf54]
movss xmm2, dword [0x4ee064]
movss xmm0, dword [edx*8 + 0x4e80f4]
ucomiss xmm0, xmm3
lahf
test ah, 0x44
jp 0x40a5cb
mov eax, dword [ebx + 0x14]
movss xmm7, dword [eax + 4]
jmp 0x40a5ce
movaps xmm7, xmm2
movss xmm1, dword [edx*8 + 0x4e80f0]
ucomiss xmm1, xmm3
lahf
test ah, 0x44
jp 0x40a5e9
mov eax, dword [ebx + 0x14]
movss xmm5, dword [eax]
jmp 0x40a5ec
movaps xmm5, xmm2
xorps xmm2, xmm2
ucomiss xmm0, xmm2
lahf
test ah, 0x44
jp 0x40a60f
mov eax, dword [ebx + 0x14]
movss xmm0, dword [eax + 0xc]
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [0x4ee04c]
jmp 0x40a61c
movss xmm0, dword [0x4ee04c]
movss dword [ebp - 0x34], xmm0
ucomiss xmm1, xmm2
lahf
test ah, 0x44
jp 0x40a62d
mov eax, dword [ebx + 0x14]
movss xmm0, dword [eax + 8]
movss xmm1, dword [edx*8 + 0x4e80f8]
xorps xmm4, xmm4
movss xmm3, dword [edx*8 + 0x4e80fc]
cvtsi2ss xmm4, esi
movss dword [ebp - 0x38], xmm0
movaps xmm2, xmm3
xorps xmm4, xmmword [0x4ee6a0]
movaps xmm0, xmm1
mulss xmm0, dword [ebp - 0x20]
movaps xmm6, xmm4
mulss xmm2, dword [ebp - 0x20]
mulss xmm6, xmm1
movss xmm1, dword [edx*8 + 0x4e80f0]
mulss xmm4, xmm3
subss xmm6, xmm0
subss xmm4, xmm2
mulss xmm6, xmm1
mulss xmm4, dword [edx*8 + 0x4e80f4]
addss xmm6, xmm0
movss xmm0, dword [ecx + 0xdb8]
subss xmm0, dword [ecx + 0x3e88]
addss xmm4, xmm2
addss xmm6, xmm0
movss xmm0, dword [ecx + 0xdbc]
subss xmm0, dword [ecx + 0x3e8c]
addss xmm0, xmm4
comiss xmm7, xmm0
ja 0x40a6c9
movss xmm7, dword [ebp - 0x34]
minss xmm7, xmm0
comiss xmm5, xmm6
ja 0x40a6d7
movss xmm5, dword [ebp - 0x38]
minss xmm5, xmm6
movss xmm0, dword [edi + 0x10]
lea eax, [ebp - 0xc]
movss xmm4, dword [edx*8 + 0x4e80f4]
lea ecx, [ebp - 0x58]
movaps xmm2, xmm0
addss xmm0, dword [edi + 0x18]
subss xmm2, xmm5
push eax
mulss xmm2, xmm1
movss xmm1, dword [edi + 0x14]
movaps xmm3, xmm1
addss xmm1, dword [edi + 0x1c]
subss xmm3, xmm7
addss xmm2, xmm5
subss xmm5, xmm0
mulss xmm3, xmm4
mulss xmm5, dword [edx*8 + 0x4e80f0]
mov edx, edi
addss xmm3, xmm7
movss dword [ebp - 0x3c], xmm2
subss xmm7, xmm1
addss xmm5, xmm0
movss dword [ebp - 0x40], xmm3
mulss xmm7, xmm4
subss xmm5, xmm2
addss xmm7, xmm1
movss dword [ebp - 0xc], xmm5
subss xmm7, xmm3
movss dword [ebp - 8], xmm7
call fcn.00409c30
mov ecx, dword [ebp - 0x4c]
add esp, 4
xorps xmm2, xmm2
movss xmm0, dword [ecx*8 + 0x4e80f0]
ucomiss xmm0, xmm2
movss xmm0, dword [ebp - 0x58]
movss dword [ebp - 0x38], xmm0
lahf
test ah, 0x44
jp 0x40a791
subss xmm0, dword [ebp - 0xc]
movss xmm1, dword [ebp - 0x3c]
subss xmm1, xmm0
movss dword [ebp - 0x3c], xmm1
movss xmm0, dword [ecx*8 + 0x4e80f4]
ucomiss xmm0, xmm2
movss xmm0, dword [ebp - 0x54]
movss dword [ebp - 0x2c], xmm0
lahf
test ah, 0x44
jp 0x40a7c0
subss xmm0, dword [ebp - 8]
movss xmm1, dword [ebp - 0x40]
subss xmm1, xmm0
movss dword [ebp - 0x40], xmm1
mov edx, dword [ebp - 0x30]
mov al, byte [ebp - 0x25]
mov cl, byte [ebp - 0x26]
test edx, edx
je 0x40a588
test al, al
jne 0x40a592
test cl, cl
je 0x40a7fb
xor ecx, ecx
cmp byte [ebp - 0x26], cl
setne cl
add ecx, 0x1e
movss xmm1, dword [0x4edf54]
call fcn.00403d40
mov ecx, dword [ebp - 0x70]
mov dword [ecx + edx*4], eax
inc edx
mov dword [ebp - 0x30], edx
cmp edx, dword [ebx + 0xc]
jl 0x40a3d2
xor edi, edi
mov dword [ebp - 0x24], edi
cmp dword [ebp - 0x6c], edi
jbe 0x40aaea
nop word [eax + eax]
lea eax, [edi*8]
sub eax, edi
shl eax, 2
mov dword [ebp - 0x5c], eax
test edi, edi
je 0x40a85a
cmp edi, 1
je 0x40a85a
mov dword [ebp - 0x4c], 3
lea eax, [ebp - 8]
mov dword [ebp - 0x34], 0xdbc
mov dword [ebp - 0x30], 0x3e8c
jmp 0x40a872
mov edx, dword [ebp - 0x30]
jmp 0x40a7c9
mov dword [ebp - 0x4c], 4
lea eax, [ebp - 0xc]
mov dword [ebp - 0x34], 0xdb8
mov dword [ebp - 0x30], 0x3e88
mov edx, dword [ebp - 0x44]
movd xmm0, esi
push ecx
cvtdq2ps xmm3, xmm0
mov dword [esp], 0x40800000
lea ecx, [ebp - 0x1c]
push edi
mov dword [ebp - 0x50], eax
call fcn.0040a190
mov ecx, dword [edx + 0xe0]
lea eax, [edi + 4]
mov dword [ebp - 0x20], eax
lea esi, [ebp - 0x20]
mov eax, dword [edx + 0xe8]
add esp, 8
mov edi, 4
mov edx, dword [eax + ecx*4 - 4]
not edx
movzx eax, byte [esi]
lea esi, [esi + 1]
movzx ecx, dl
xor ecx, eax
shr edx, 8
xor edx, dword [ecx*4 + 0x4e8150]
sub edi, 1
jne 0x40a8b3
mov eax, dword [0x536900]
not edx
mov esi, dword [ebp - 0x68]
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x20], edx
cmp dword [eax + 0x3e5c], edx
jne 0x40a8fd
push ecx
mov ecx, dword [ebp - 0x20]
lea eax, [edi + 4]
push eax
mov edx, 4
call fcn.00418100
mov edx, dword [ebp - 0x20]
add esp, 8
push 8
push 0
lea ecx, [ebp - 0x1c]
call fcn.00411360
mov edx, dword [ebp - 0x20]
lea eax, [ebp - 0x25]
push 0x40800
push eax
lea eax, [ebp - 0x26]
push eax
lea ecx, [ebp - 0x1c]
call fcn.0042dcc0
mov al, byte [ebp - 0x25]
add esp, 0x14
cmp byte [ebp - 0x26], 0
mov ecx, dword [ebp - 0x48]
je 0x40a941
movss xmm0, dword [ecx + 0x3e6c]
comiss xmm0, dword [0x4edef0]
ja 0x40a949
test al, al
je 0x40aadd
mov edx, dword [ebp - 0x4c]
mov dword [ecx + 0x492c], edx
test al, al
je 0x40aadd
mov eax, dword [ebp - 0x74]
mov dword [eax], edi
cmp edi, 3
jne 0x40ab64
mov eax, dword [ebx + 0x14]
movss xmm4, dword [0x4ee064]
movss xmm3, dword [eax + 4]
movss xmm1, dword [0x4ee04c]
movss xmm5, dword [0x4ee04c]
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x34]
movss xmm0, dword [eax + 0x10]
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [eax + 0x14]
movss dword [ebp - 8], xmm0
movss xmm0, dword [edx + ecx]
mov edx, dword [ebp - 0x30]
subss xmm0, dword [edx + ecx]
mov ecx, dword [ebp - 0x50]
addss xmm0, dword [0x4edfb0]
movss dword [ecx], xmm0
movss xmm0, dword [ebp - 8]
comiss xmm3, xmm0
ja 0x40a9cf
movaps xmm3, xmm1
minss xmm3, xmm0
movss xmm0, dword [ebp - 0xc]
comiss xmm4, xmm0
ja 0x40a9e0
movaps xmm4, xmm5
minss xmm4, xmm0
mov ecx, dword [ebp - 0x5c]
mov edx, eax
movss xmm0, dword [eax + 0x10]
movss xmm1, dword [eax + 0x14]
movaps xmm5, xmm0
addss xmm0, dword [eax + 0x18]
movss xmm7, dword [ecx + 0x4e7f5c]
subss xmm5, xmm4
minss xmm7, dword [ecx + 0x4e7f64]
movss xmm2, dword [ecx + 0x4e7f58]
movaps xmm6, xmm1
minss xmm2, dword [ecx + 0x4e7f60]
addss xmm1, dword [eax + 0x1c]
subss xmm6, xmm3
lea ecx, [ebp - 0x58]
movss dword [ebp - 0x24], xmm7
push ecx
mulss xmm5, xmm2
lea ecx, [ebp - 0x64]
mulss xmm6, xmm7
addss xmm5, xmm4
movss dword [ebp - 0x5c], xmm2
subss xmm4, xmm0
addss xmm6, xmm3
subss xmm3, xmm1
movss dword [ebp - 0x3c], xmm5
mulss xmm4, xmm2
mulss xmm3, xmm7
addss xmm4, xmm0
movss dword [ebp - 0x40], xmm6
addss xmm3, xmm1
subss xmm4, xmm5
subss xmm3, xmm6
movss dword [ebp - 0x58], xmm4
movss dword [ebp - 0x54], xmm3
call fcn.00409c30
movss xmm0, dword [ebp - 0x5c]
add esp, 4
xorps xmm2, xmm2
ucomiss xmm0, xmm2
movss xmm0, dword [ebp - 0x64]
movss dword [ebp - 0x38], xmm0
lahf
test ah, 0x44
jp 0x40aab2
subss xmm0, dword [ebp - 0x58]
movss xmm1, dword [ebp - 0x3c]
subss xmm1, xmm0
movss dword [ebp - 0x3c], xmm1
movss xmm0, dword [ebp - 0x24]
ucomiss xmm0, xmm2
movss xmm0, dword [ebp - 0x60]
movss dword [ebp - 0x2c], xmm0
lahf
test ah, 0x44
jp 0x40aadd
subss xmm0, dword [ebp - 0x54]
movss xmm1, dword [ebp - 0x40]
subss xmm1, xmm0
movss dword [ebp - 0x40], xmm1
inc edi
mov dword [ebp - 0x24], edi
cmp edi, dword [ebp - 0x6c]
jl 0x40a820
mov esi, dword [0x536900]
mov edx, dword [ebp - 0x44]
mov edi, dword [ebp - 0x48]
mov eax, dword [esi + 0x3e28]
dec dword [eax + 0xe0]
mov dword [edx + 0x144], 0
mov eax, dword [edi + 0x4900]
test eax, eax
je 0x40ad43
cmp dword [eax + 0x2fc], edx
jne 0x40ad43
mov eax, dword [edi + 0x47dc]
cmp eax, 2
jne 0x40abb8
cmp byte [edi + 0xdd1], 0
je 0x40ad43
movss xmm3, dword [esi + 0x2e24]
movss xmm2, dword [esi + 0x2e04]
subss xmm3, dword [esi + 0x2e14]
subss xmm2, dword [esi + 0x2df4]
jmp 0x40abe1
movss xmm1, dword [0x4ee064]
movaps xmm3, xmm1
movaps xmm0, xmm3
cmp edi, 1
jne 0x40ab83
mov eax, dword [ebx + 0x14]
movss xmm4, dword [eax]
jmp 0x40a978
movaps xmm4, xmm1
movaps xmm2, xmm4
cmp edi, 2
jne 0x40ab9b
mov eax, dword [ebx + 0x14]
movss xmm1, dword [eax + 0xc]
jmp 0x40a980
movss xmm1, dword [0x4ee04c]
test edi, edi
jne 0x40a980
mov eax, dword [ebx + 0x14]
movss xmm5, dword [eax + 8]
jmp 0x40a988
cmp eax, 3
jne 0x40ad43
movss xmm3, dword [esi + 0x3504]
movss xmm2, dword [esi + 0x34e4]
subss xmm3, dword [esi + 0x34f4]
subss xmm2, dword [esi + 0x34d4]
xorps xmm7, xmm7
ucomiss xmm2, xmm7
lahf
test ah, 0x44
jp 0x40abfa
ucomiss xmm3, xmm7
lahf
test ah, 0x44
jnp 0x40ad4d
movss xmm1, dword [edi + 0x58]
mov ecx, 0x20
minss xmm1, dword [edi + 0x5c]
movss xmm0, dword [edi + 0x18]
mulss xmm0, dword [0x4ee030]
mov eax, dword [ebx + 0x14]
mulss xmm1, xmm0
mulss xmm2, xmm1
mulss xmm3, xmm1
addss xmm2, dword [edi + 0x4920]
movss xmm1, dword [0x4edf54]
addss xmm3, dword [edi + 0x4924]
movss dword [edi + 0x4920], xmm2
movss dword [edi + 0x4924], xmm3
movss xmm0, dword [eax]
subss xmm0, dword [edx + 0x10]
subss xmm0, dword [edx + 0x18]
maxss xmm2, xmm0
movss xmm0, dword [eax + 4]
subss xmm0, dword [edx + 0x14]
subss xmm0, dword [edx + 0x1c]
movss dword [edi + 0x4920], xmm2
mov byte [edi + 0x4914], 0
mov byte [edi + 0x47e7], 1
maxss xmm3, xmm0
movss dword [edi + 0x4924], xmm3
call fcn.00403d40
mov ecx, dword [ebp - 0x70]
mov dword [ecx], eax
cvttss2si esi, dword [edi + 0x4920]
cvttss2si edi, dword [edi + 0x4924]
movd xmm0, esi
cvtdq2ps xmm0, xmm0
movd xmm1, edi
ucomiss xmm0, xmm7
cvtdq2ps xmm1, xmm1
lahf
test ah, 0x44
jp 0x40acce
ucomiss xmm1, xmm7
lahf
test ah, 0x44
jnp 0x40ad54
addss xmm0, dword [edx + 0x20]
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x58]
movss dword [ebp - 0x64], xmm0
movaps xmm0, xmm1
addss xmm0, dword [edx + 0x24]
movss dword [ebp - 0x60], xmm0
call fcn.00409c30
mov edx, dword [ebp - 0x44]
add esp, 4
xorps xmm7, xmm7
movss xmm1, dword [eax]
movss xmm2, dword [eax + 4]
mov eax, dword [ebp - 0x48]
movss dword [ebp - 0x38], xmm1
movd xmm1, esi
cvtdq2ps xmm1, xmm1
movss xmm0, dword [eax + 0x4920]
subss xmm0, xmm1
movd xmm1, edi
cvtdq2ps xmm1, xmm1
movss dword [eax + 0x4920], xmm0
movss xmm0, dword [eax + 0x4924]
subss xmm0, xmm1
movss dword [eax + 0x4924], xmm0
jmp 0x40ad59
movss xmm2, dword [ebp - 0x2c]
xorps xmm7, xmm7
jmp 0x40ad5f
movss xmm2, dword [ebp - 0x2c]
jmp 0x40ad5f
movss xmm2, dword [ebp - 0x2c]
mov esi, dword [0x536900]
movss xmm1, dword [0x4ee04c]
movss xmm0, dword [ebp - 0x38]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x40ad9a
test dword [edx + 8], 0x100
movss dword [edx + 0x20], xmm0
movss dword [edx + 0x24], xmm2
jne 0x40ad9a
comiss xmm7, dword [esi + 0x59f0]
jb 0x40ad9a
mov eax, dword [esi + 0x1c]
mov dword [esi + 0x59f0], eax
movss xmm0, dword [ebp - 0x3c]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x40ade4
test dword [edx + 8], 0x100
cvttss2si eax, xmm0
movd xmm1, eax
cvttss2si eax, dword [ebp - 0x40]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edx + 0x10], xmm1
movss dword [edx + 0x14], xmm0
jne 0x40ade4
comiss xmm7, dword [esi + 0x59f0]
jb 0x40ade4
mov ecx, dword [esi + 0x1c]
mov dword [esi + 0x59f0], ecx
mov esi, dword [ebp - 0x44]
mov ecx, dword [edx + 0x20]
mov edx, dword [edx + 0x24]
mov al, byte [ebp - 0x27]
mov dword [esi + 0x18], ecx
mov dword [esi + 0x1c], edx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004a3760
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov ecx, dword [ebp - 4]
xor al, al
pop edi
xor ecx, ebp
pop esi
call fcn.004a3760
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret