Function at 0x4bf920
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x10c
xor eax, eax
mov dword [esp + 0x38], 0
push ebx
mov dword [esp + 0x40], eax
mov ebx, edx
mov eax, dword [ebp + 8]
xor dl, dl
push esi
push edi
mov edi, ecx
mov dword [esp + 0x24], ebx
mov ecx, dword [ebp + 0x10]
xor dh, dh
add eax, ecx
mov dword [esp + 0x1c], edi
mov esi, eax
mov dword [esp + 0x114], eax
xor eax, eax
mov dword [esp + 0x34], 0
mov dword [esp + 0x40], eax
mov dword [esp + 0x4c], 0
mov byte [esp + 0x1a], dl
lea eax, [esi - 1]
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 8]
mov byte [esp + 0x13], dh
mov byte [esp + 0x1b], dl
mov byte [esp + 0x12], dl
mov dword [esp + 0x14], esi
test edi, edi
jne 0x4bf9c5
test ebx, ebx
mov ebx, dword [ebp + 0xc]
jne 0x4bf9c8
test eax, eax
jne 0x4bf9c8
cmp ebx, 0xfffffc19
jne 0x4bf9c8
cmp ecx, ebx
jne 0x4bf9c8
push eax
push eax
push eax
push eax
push eax
xor edx, edx
xor ecx, ecx
call fcn.004bb380
add esp, 0x14
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, dword [ebp + 0xc]
mov edx, dword [ebp + 0x14]
test edx, 0xe20f5a6f
je 0x4bf9df
mov eax, 0xfffffffd
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test edi, edi
je 0x4c04d2
test eax, eax
je 0x4c04d2
cmp dword [ebp + 0x18], 0
mov eax, dword [ebp + 0x1c]
jne 0x4bfa00
test eax, eax
jg 0x4c04d2
test eax, eax
jns 0x4bfa10
mov eax, 0xfffffff1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test ecx, ecx
js 0x4c04c6
cmp ecx, ebx
jg 0x4c04c6
mov ecx, dword [edi]
cmp ecx, 0x50435245
je 0x4bfa44
cmp ecx, 0x45524350
mov eax, 0xfffffffc
mov edx, 0xffffffe3
cmove eax, edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
movzx eax, word [edi + 0xc]
test al, 1
jne 0x4bfa58
mov eax, 0xffffffe4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [esp + 0xa0], 0
test edx, 0x8000000
je 0x4bfa72
mov eax, 2
jmp 0x4bfa7a
mov eax, edx
shr eax, 0xf
and eax, 1
movzx ebx, word [edi + 0x18]
movzx ecx, word [edi + 0x1c]
movzx edx, word [edi + 0x1a]
mov dword [esp + 0xe0], eax
lea eax, [ebx + edi]
mov dword [esp + 0x78], ecx
mov edi, dword [edi + 0x20]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x7c], edx
mov dword [esp + 0x30], 0
mov dword [esp + 0x5c], 0x989680
mov dword [esp + 0x60], 0x1770
mov dword [esp + 0x100], 0
test eax, eax
je 0x4bfb16
mov ecx, dword [eax]
test cl, 1
je 0x4bfadb
mov esi, dword [eax + 4]
mov dword [esp + 0x30], esi
test cl, 2
je 0x4bfaeb
mov eax, dword [eax + 8]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x24]
test cl, 0x10
je 0x4bfaf7
mov eax, dword [eax + 0x14]
mov dword [esp + 0x60], eax
test cl, 4
je 0x4bfb0a
mov eax, dword [esp + 0x24]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x100], eax
test cl, 8
je 0x4bfb16
mov eax, dword [esp + 0x24]
mov edi, dword [eax + 0x10]
mov eax, dword [esp + 0x1c]
test edi, edi
mov ecx, 0x4e74a8
mov dword [esp + 0xc4], 0
cmovne ecx, edi
mov dword [esp + 0xb8], 0
mov dword [esp + 0x108], 0
mov esi, dword [eax + 8]
movzx edi, word [eax + 0xc]
mov dword [esp + 0x3c], esi
or esi, dword [ebp + 0x14]
mov dword [esp + 0x50], esi
mov esi, eax
mov dword [esp + 0x2c], edi
mov dword [esp + 0x104], 0
mov dword [esp + 0xfc], 0
movzx eax, word [esi + 0x1c]
imul edx, eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0xec], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x88], ecx
add edx, ebx
mov ebx, dword [ebp + 0x14]
add edx, esi
mov esi, dword [esp + 0x14]
mov dword [esp + 0xc8], edx
mov edx, dword [ebp + 8]
add eax, edx
mov dword [esp + 0x20], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xcc], edx
mov edx, dword [esp + 0x3c]
mov eax, edx
shr eax, 5
and eax, 1
mov dword [esp + 0xac], eax
mov eax, edx
shr eax, 0x1d
and eax, 1
mov dword [esp + 0xa8], eax
mov eax, edx
shr eax, 0x19
and eax, 1
mov dword [esp + 0xa4], eax
mov eax, ebx
shr eax, 7
and eax, 1
mov dword [esp + 0x98], eax
mov eax, ebx
shr eax, 8
and eax, 1
mov dword [esp + 0x9c], eax
mov eax, ebx
shr eax, 0xa
and eax, 1
mov dword [esp + 0xb0], eax
mov eax, ebx
shr eax, 0x1c
and eax, 1
mov dword [esp + 0xb4], eax
mov eax, edi
shr eax, 0xc
and eax, 1
mov dword [esp + 0xc0], eax
lea eax, [ecx + 0x100]
mov dword [esp + 0x8c], eax
lea eax, [ecx + 0x340]
mov dword [esp + 0x90], eax
mov eax, ebx
and eax, 0x1800000
je 0x4bfcd0
cmp eax, 0x800000
je 0x4bfcc3
cmp eax, 0x1000000
jne 0x4bfd2e
mov dword [esp + 0xbc], 0
test ebx, 0x700000
mov eax, ebx
cmove eax, edx
and eax, 0x700000
cmp eax, 0x300000
ja 0x4bfd20
je 0x4bfd03
test eax, eax
je 0x4bfd03
cmp eax, 0x100000
je 0x4bfce9
cmp eax, 0x200000
jne 0x4bfd2e
xor eax, eax
mov ebx, 1
mov dword [esp + 0x70], eax
mov al, 0xa
mov dword [esp + 0x74], ebx
mov byte [esp + 0x84], al
jmp 0x4bfd4e
mov dword [esp + 0xbc], 1
jmp 0x4bfc73
test edx, 0x1800000
je 0x4bfc68
mov eax, edx
shr eax, 0x17
and eax, 1
mov dword [esp + 0xbc], eax
jmp 0x4bfc73
xor eax, eax
mov ebx, 1
mov dword [esp + 0x70], eax
mov al, 0xd
mov dword [esp + 0x74], ebx
mov byte [esp + 0x84], al
jmp 0x4bfd4e
mov ebx, 2
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], ebx
mov word [esp + 0x84], 0xa0d
jmp 0x4bfd4e
cmp eax, 0x400000
je 0x4bfd41
cmp eax, 0x500000
je 0x4bfd3a
mov eax, 0xffffffe9
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 2
jmp 0x4bfd46
mov eax, 1
mov ebx, dword [esp + 0x74]
mov dword [esp + 0x70], eax
cmp dword [esp + 0xe0], 0
je 0x4bfd6c
test edi, 0x200
je 0x4bfd6c
mov eax, 0xfffffff3
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xaaaaaaab
mul dword [ebp + 0x1c]
mov eax, 0x55555556
shr edx, 1
lea edi, [edx + edx*2]
lea ecx, [edi + edi]
mov dword [esp + 0x28], edi
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x1c]
movzx eax, word [eax + 0x12]
test ax, ax
je 0x4bfded
mov ecx, eax
mov eax, 0x55555556
imul edi
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ecx, eax
jl 0x4bfded
inc ecx
lea eax, [ecx + ecx*2]
mov dword [esp + 0x28], eax
shl eax, 2
push eax
call fcn.004c4e35
mov edi, eax
add esp, 4
mov dword [esp + 0x64], edi
test edi, edi
jne 0x4bfddb
lea eax, [edi - 6]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, dword [esp + 0x74]
mov dword [esp + 0x44], 1
mov dword [esp + 0x14], edi
jmp 0x4bfdfa
mov eax, dword [ebp + 0x18]
mov edi, eax
mov dword [esp + 0x64], edi
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x68], eax
mov dword [esp + 0x94], 0
mov dword [esp + 0xe8], 0xffffffff
lea ecx, [eax + eax]
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4bfe86
mov ecx, dword [esp + 0x28]
lea ecx, [eax + ecx*4]
mov eax, dword [esp + 0x1c]
mov edx, ecx
movzx eax, word [eax + 0x10]
shl eax, 2
sub edx, eax
mov eax, dword [esp + 0x14]
add eax, 8
cmp edx, eax
cmovb edx, eax
sub ecx, 4
cmp ecx, edx
jb 0x4bfe71
nop
mov dword [ecx], 0xffffffff
sub ecx, 4
cmp ecx, edx
jae 0x4bfe60
mov edi, dword [esp + 0x64]
mov dword [edi + 4], 0xffffffff
mov eax, dword [esp + 0x64]
mov dword [eax], 0xffffffff
mov ebx, dword [esp + 0x74]
test byte [esp + 0x50], 0x10
mov edi, dword [esp + 0x1c]
jne 0x4bfeed
movzx eax, word [edi + 0xc]
test al, 0x10
je 0x4bfec5
mov dh, byte [edi + 0x14]
mov ecx, dword [esp + 0x8c]
mov dl, dh
mov dword [esp + 0x34], 1
mov byte [esp + 0x13], dh
mov byte [esp + 0x1a], dl
test al, 0x20
je 0x4bfef4
movzx eax, dh
mov dh, byte [eax + ecx]
mov byte [esp + 0x13], dh
jmp 0x4bfef4
test dword [esp + 0x2c], 0x100
jne 0x4bfeed
mov eax, dword [esp + 0x30]
test eax, eax
je 0x4bfeed
test byte [eax + 4], 1
mov ecx, dword [esp + 0x8c]
je 0x4bfef4
add eax, 8
mov dword [esp + 0x48], eax
jmp 0x4bfef4
mov ecx, dword [esp + 0x8c]
movzx eax, word [edi + 0xc]
test al, 0x40
je 0x4bff1f
mov dh, byte [edi + 0x16]
mov dword [esp + 0x4c], 1
mov dl, dh
mov byte [esp + 0x12], dh
mov byte [esp + 0x1b], dl
test al, al
jns 0x4bff1f
movzx eax, dh
mov al, byte [eax + ecx]
mov byte [esp + 0x12], al
mov edx, dword [esp + 0x20]
test dword [esp + 0x3c], 0x40000
mov edi, edx
je 0x4bff9c
mov ecx, dword [esp + 0xd0]
mov edi, esi
cmp esi, ecx
jae 0x4bff9c
mov eax, dword [esp + 0x70]
test eax, eax
je 0x4bff6f
cmp edi, ecx
jae 0x4bff97
push ecx
lea edx, [esp + 0x78]
push edx
push ecx
mov edx, eax
mov ecx, edi
call fcn.004c07e0
mov ebx, dword [esp + 0x80]
add esp, 0xc
test eax, eax
jne 0x4bff9c
mov ecx, dword [esp + 0xd0]
jmp 0x4bff93
mov eax, ecx
sub eax, ebx
cmp edi, eax
ja 0x4bff93
mov al, byte [edi]
cmp al, byte [esp + 0x84]
jne 0x4bff93
cmp ebx, 1
je 0x4bff9c
mov al, byte [edi + 1]
cmp al, byte [esp + 0x85]
je 0x4bff9c
mov eax, dword [esp + 0x70]
inc edi
cmp edi, ecx
jb 0x4bff40
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 8]
or eax, dword [ebp + 0x14]
and eax, 0x4000000
mov dword [esp + 0x14], eax
jne 0x4c00e0
cmp dword [esp + 0x34], 0
je 0x4c0002
cmp esi, edi
jae 0x4c00e8
mov cl, byte [esp + 0x1a]
mov dl, byte [esp + 0x13]
cmp cl, dl
je 0x4bfff0
mov al, byte [esi]
cmp al, cl
je 0x4c00e8
cmp al, dl
je 0x4c00e8
inc esi
cmp esi, edi
jb 0x4bffd0
jmp 0x4c00e8
cmp byte [esi], cl
je 0x4c00e8
inc esi
cmp esi, edi
jb 0x4bfff0
jmp 0x4c00e8
test dword [esp + 0x2c], 0x100
je 0x4c00ac
mov eax, dword [ebp + 0x10]
mov ecx, dword [esp + 0xcc]
add eax, ecx
cmp esi, eax
jbe 0x4c00e8
cmp esi, edi
jae 0x4c008c
mov eax, dword [esp + 0x70]
nop dword [eax]
test eax, eax
je 0x4c0055
cmp esi, ecx
jbe 0x4c0087
push ecx
lea edx, [esp + 0x78]
push edx
push ecx
mov edx, eax
mov ecx, esi
call fcn.004c0870
add esp, 0xc
test eax, eax
jne 0x4c008c
mov ebx, dword [esp + 0x74]
jmp 0x4c007c
lea eax, [ecx + ebx]
cmp esi, eax
jb 0x4c0083
mov ecx, esi
sub ecx, ebx
mov al, byte [ecx]
cmp al, byte [esp + 0x84]
jne 0x4c007c
cmp ebx, 1
je 0x4c008c
mov al, byte [ecx + 1]
cmp al, byte [esp + 0x85]
je 0x4c008c
mov ecx, dword [esp + 0xcc]
mov eax, dword [esp + 0x70]
inc esi
cmp esi, edi
jb 0x4c0030
cmp byte [esi - 1], 0xd
jne 0x4c00e8
mov eax, dword [esp + 0x70]
cmp eax, 1
je 0x4c00a0
cmp eax, 2
jne 0x4c00e8
cmp esi, edi
jae 0x4c00e8
cmp byte [esi], 0xa
jne 0x4c00e8
inc esi
jmp 0x4c00e8
mov ebx, dword [esp + 0x48]
test ebx, ebx
je 0x4c00e8
cmp esi, edi
jae 0x4c00e8
nop dword [eax + eax]
movzx edx, byte [esi]
mov eax, 1
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
test byte [edx + ebx], al
jne 0x4c00e8
inc esi
cmp esi, edi
jb 0x4c00c0
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x4c0180
cmp dword [esp + 0xe0], 0
jne 0x4c0180
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x20]
test ecx, ecx
je 0x4c0115
test byte [ecx + 4], 2
je 0x4c0115
mov eax, edx
sub eax, esi
cmp eax, dword [ecx + 0x28]
jb 0x4c01fd
cmp dword [esp + 0x4c], 0
je 0x4c0180
mov eax, edx
sub eax, esi
cmp eax, 0x3e8
jge 0x4c0180
mov eax, dword [esp + 0x34]
lea ecx, [esi + eax]
cmp ecx, dword [esp + 0x38]
jbe 0x4c0180
cmp ecx, edx
jae 0x4c01fd
mov ah, byte [esp + 0x1b]
cmp ah, byte [esp + 0x12]
je 0x4c0164
mov al, byte [ecx]
mov ebx, ecx
inc ecx
mov dword [esp + 0x38], ebx
cmp al, ah
je 0x4c017c
cmp al, byte [esp + 0x12]
je 0x4c017c
cmp ecx, edx
jb 0x4c0146
xor edi, edi
jmp 0x4c0346
mov al, byte [ecx]
mov ebx, ecx
mov dword [esp + 0x38], ecx
inc ecx
cmp al, ah
je 0x4c017c
cmp ecx, edx
jb 0x4c0164
xor edi, edi
jmp 0x4c0346
cmp ebx, edx
jae 0x4c01fd
mov edx, dword [esp + 0xc8]
lea eax, [esp + 0x58]
push 0
push 0
push eax
push 2
push esi
mov ecx, esi
mov dword [esp + 0xe8], esi
mov dword [esp + 0xf0], esi
mov dword [esp + 0x6c], 0
mov dword [esp + 0x104], 0
mov dword [esp + 0xf8], 0
call fcn.004bb380
add esp, 0x14
mov edi, eax
cmp dword [esp + 0xb8], 0
je 0x4c01e7
mov eax, dword [esp + 0x40]
test eax, eax
cmove eax, dword [esp + 0xdc]
mov dword [esp + 0x40], eax
cmp edi, 0xfffffc1d
jg 0x4c0204
je 0x4c024c
cmp edi, 0xfffffc1a
jne 0x4c033e
xor edi, edi
jmp 0x4c0346
cmp edi, 0xfffffc20
jg 0x4c0244
je 0x4c024c
cmp edi, 0xfffffc1e
je 0x4c0233
cmp edi, 0xfffffc1f
jne 0x4c0346
mov dword [esp + 0x14], esi
mov dword [esp + 0xc4], 1
jmp 0x4c025e
mov eax, dword [esp + 0xd4]
mov dword [esp + 0x14], eax
cmp eax, esi
je 0x4c024c
jmp 0x4c025e
test edi, edi
jne 0x4c0339
lea eax, [esi + 1]
mov dword [esp + 0xc4], 0
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x70]
xor edi, edi
test dword [esp + 0x3c], 0x40000
je 0x4c02a0
mov eax, dword [esp + 0xd0]
test ecx, ecx
je 0x4c030e
cmp esi, eax
jae 0x4c02a0
push ecx
lea edx, [esp + 0x78]
push edx
mov edx, ecx
mov ecx, esi
push eax
call fcn.004c07e0
add esp, 0xc
test eax, eax
jne 0x4c0346
mov ecx, dword [esp + 0x70]
mov ebx, dword [esp + 0x74]
test byte [esp + 0x50], 0x10
mov eax, dword [esp + 0x14]
mov esi, eax
jne 0x4c0346
mov edx, dword [esp + 0x20]
cmp eax, edx
ja 0x4c0346
cmp eax, dword [esp + 0x114]
jbe 0x4c02fe
cmp byte [eax - 1], 0xd
jne 0x4c02fe
cmp eax, edx
jae 0x4c02fe
cmp byte [eax], 0xa
jne 0x4c02fe
mov edi, dword [esp + 0x1c]
mov edx, 0x800
test word [edi + 0xc], dx
mov edx, dword [esp + 0x20]
jne 0x4c02fe
cmp ecx, 1
je 0x4c02fb
cmp ecx, 2
je 0x4c02fb
cmp ebx, 2
jne 0x4c02fe
lea esi, [eax + 1]
mov dword [esp + 0x104], 0
jmp 0x4bff23
mov ebx, dword [esp + 0x74]
sub eax, ebx
cmp esi, eax
ja 0x4c02a4
mov al, byte [esi]
cmp al, byte [esp + 0x84]
jne 0x4c02a4
cmp ebx, 1
je 0x4c0346
mov al, byte [esi + 1]
cmp al, byte [esp + 0x85]
je 0x4c0346
jmp 0x4c02a4
cmp edi, 1
je 0x4c03b9
cmp edi, 0xfffffc19
je 0x4c03b9
cmp dword [esp + 0x44], 0
je 0x4c0359
push dword [esp + 0x64]
call fcn.004c4247
add esp, 4
test edi, edi
je 0x4c036b
cmp edi, 0xfffffff4
je 0x4c036b
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [esp + 0x40]
test eax, eax
je 0x4c038e
cmp dword [ebp + 0x1c], 1
jle 0x4c0387
mov ecx, dword [ebp + 0x18]
sub eax, dword [ebp + 8]
mov dword [ecx], eax
mov eax, dword [ebp + 0xc]
mov dword [ecx + 4], eax
mov eax, 0xfffffff4
jmp 0x4c0391
or eax, 0xffffffff
mov ecx, dword [esp + 0x24]
test ecx, ecx
je 0x4c04d7
test byte [ecx], 0x20
je 0x4c04d7
mov edx, dword [ecx + 0x18]
mov ecx, dword [esp + 0x108]
mov dword [edx], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [esp + 0x44], 0
mov edi, dword [esp + 0x54]
je 0x4c040e
mov esi, dword [esp + 0x64]
cmp edi, 4
jl 0x4c03e8
lea eax, [edi*4 - 8]
push eax
lea eax, [esi + 8]
push eax
mov eax, dword [ebp + 0x18]
add eax, 8
push eax
call fcn.004c2440
add esp, 0xc
mov eax, dword [esp + 0x94]
mov ecx, 1
cmp dword [esp + 0xe4], edi
push esi
cmovg eax, ecx
mov dword [esp + 0x98], eax
call fcn.004c4247
add esp, 4
cmp dword [esp + 0x94], 0
mov ecx, dword [esp + 0xe4]
je 0x4c0427
cmp ecx, edi
jl 0x4c0427
xor esi, esi
jmp 0x4c0430
mov eax, ecx
cdq
sub eax, edx
mov esi, eax
sar esi, 1
mov eax, dword [esp + 0x1c]
movzx edi, word [eax + 0x10]
mov eax, ecx
cdq
sub eax, edx
mov edx, dword [ebp + 0x18]
sar eax, 1
cmp eax, edi
jg 0x4c0479
test edx, edx
je 0x4c0479
lea eax, [edi*2 + 2]
cmp eax, dword [ebp + 0x1c]
lea edi, [edx + ecx*4]
cmovg eax, dword [esp + 0x28]
xor ebx, ebx
lea eax, [edx + eax*4]
mov ecx, eax
sub ecx, edi
add ecx, 3
shr ecx, 2
cmp edi, eax
cmova ecx, ebx
test ecx, ecx
je 0x4c0479
or eax, 0xffffffff
rep stosd dword es:[edi], eax
cmp dword [ebp + 0x1c], 2
jge 0x4c0483
xor esi, esi
jmp 0x4c04a4
mov eax, dword [esp + 0xd4]
sub eax, dword [esp + 0xcc]
mov dword [edx], eax
mov eax, dword [esp + 0xd8]
sub eax, dword [esp + 0xcc]
mov dword [edx + 4], eax
mov eax, dword [esp + 0x24]
test eax, eax
je 0x4c04bd
test byte [eax], 0x20
je 0x4c04bd
mov edx, dword [eax + 0x18]
mov ecx, dword [esp + 0x104]
mov dword [edx], ecx
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xffffffe8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xfffffffe
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret