Function at 0x1009d420
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x50
mov eax, dword [0x101a0040]
xor eax, ebp
mov dword [ebp - 4], eax
movss xmm0, dword [0x101a0104]
subss xmm0, dword [0x1018ae04]
movzx eax, byte [0x101ae444]
push esi
push edi
divss xmm0, dword [0x1018ad5c]
lea ecx, [eax*8]
sub ecx, eax
mov dword [ebp - 0x48], ecx
mov eax, dword [ecx*4 + 0x101a0678]
mov dword [ebp - 0x3c], eax
movss dword [ebp - 0x18], xmm0
test eax, eax
jne 0x1009d491
mov eax, dword [ecx*4 + 0x101a0664]
mov dword [ecx*4 + 0x101a0678], eax
mov esi, dword [0x101aceac]
sub esp, 0x18
mov ecx, esp
xorps xmm0, xmm0
push 1
movups xmmword [ecx], xmm0
push 0x1017e518
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
call fcn.10011680
mov edx, esi
lea ecx, [ebp - 0x28]
call fcn.1013b3f0
movss xmm3, dword [ebp - 0x28]
add esp, 0x18
mulss xmm3, dword [0x1018ac70]
xor eax, eax
mov esi, 0x101a0664
mov dword [ebp - 0x14], eax
movss xmm1, dword [0x1018add0]
mov edx, 0xff5a5a5a
movss xmm5, dword [ebp - 0x24]
movaps xmm0, xmm3
addss xmm3, xmm1
addss xmm0, dword [0x1018ad74]
movss dword [ebp - 0xc], xmm3
subss xmm0, xmm1
movss dword [ebp - 0x1c], xmm0
nop
mulss xmm0, dword [esi + 0xc]
xorps xmm2, xmm2
cvtsi2ss xmm2, eax
addss xmm0, xmm1
xorps xmm4, xmm4
mulss xmm2, dword [ebp - 0x18]
addss xmm0, dword [0x101a0108]
addss xmm2, dword [0x1018adf4]
movaps xmm1, xmm0
movss dword [ebp - 8], xmm0
addss xmm2, dword [0x101a010c]
subss xmm1, xmm3
movss xmm3, dword [0x101ace20]
movaps xmm0, xmm2
movss dword [ebp - 0x20], xmm2
comiss xmm3, xmm1
subss xmm0, xmm4
jbe 0x1009d667
movss xmm2, dword [0x101ace24]
comiss xmm2, xmm0
jbe 0x1009d667
addss xmm1, dword [0x1018ae0c]
addss xmm0, xmm5
comiss xmm1, xmm3
jbe 0x1009d667
comiss xmm0, xmm2
jbe 0x1009d667
cmp byte [0x10365a79], 0
mov cl, 1
mov dl, byte [0x10365a7a]
mov ch, byte [0x10365b7a]
mov byte [ebp - 0xd], cl
je 0x1009d5bb
cmp byte [0x10365b79], 0
je 0x1009d5d9
test dl, dl
je 0x1009d5c3
test ch, ch
je 0x1009d5d9
cmp byte [0x10365a7c], 0
je 0x1009d651
cmp byte [0x10365b7c], 0
jne 0x1009d651
mov byte [0x101ae444], al
test dl, dl
je 0x1009d616
test ch, ch
jne 0x1009d616
mov ecx, dword [esi + 4]
mov eax, 0x2aaaaaab
mov edi, dword [esi]
sub ecx, edi
imul ecx
mov cl, byte [ebp - 0xd]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
jbe 0x1009d616
lea eax, [edi + 0x18]
mov edx, 0xff5a5a5a
mov dword [esi + 0x14], eax
mov eax, dword [ebp - 0x14]
jmp 0x1009d669
cmp byte [0x10365a7c], 0
je 0x1009d658
cmp byte [0x10365b7c], 0
jne 0x1009d658
mov ecx, dword [esi + 4]
mov eax, 0x2aaaaaab
mov edi, dword [esi]
sub ecx, edi
imul ecx
mov cl, byte [ebp - 0xd]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 2
jbe 0x1009d658
lea eax, [edi + 0x30]
mov dword [esi + 0x14], eax
mov eax, dword [ebp - 0x14]
mov edx, 0xff5a5a5a
jmp 0x1009d669
mov eax, dword [esi]
mov edx, 0xff5a5a5a
mov dword [esi + 0x14], eax
mov eax, dword [ebp - 0x14]
jmp 0x1009d669
xor cl, cl
movzx edi, byte [0x101ae444]
cmp edi, eax
jne 0x1009d685
test al, 1
mov ecx, 0xfffc8bb6
mov eax, 0xffff9b73
cmovne eax, ecx
jmp 0x1009d68f
test cl, cl
mov eax, 0xff787878
cmove eax, edx
lea ecx, [esi + 0x10]
push eax
push ecx
call fcn.1009d1b0
mov eax, dword [0x101ac908]
add esp, 8
cmp edi, dword [ebp - 0x14]
jne 0x1009d6d7
movss xmm1, dword [esi + 0xc]
movss xmm0, dword [0x1018aca4]
movss xmm2, dword [eax + 0x14]
mulss xmm2, dword [0x1018ad74]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jnp 0x1009d710
subss xmm0, xmm2
mulss xmm1, xmm0
addss xmm1, xmm2
jmp 0x1009d710
movss xmm2, dword [esi + 0xc]
xorps xmm3, xmm3
movss xmm1, dword [eax + 0x14]
mulss xmm1, dword [0x1018ad74]
ucomiss xmm2, xmm3
lahf
test ah, 0x44
jnp 0x1009d70d
movss xmm0, dword [0x1018aca4]
subss xmm0, xmm1
mulss xmm1, xmm3
mulss xmm2, xmm0
addss xmm2, xmm1
movaps xmm1, xmm2
movss xmm0, dword [0x1018ac1c]
comiss xmm0, xmm1
movss dword [esi + 0xc], xmm1
jb 0x1009d72b
mov dword [esi + 0xc], 0
jmp 0x1009d73b
comiss xmm1, dword [0x1018ac98]
jb 0x1009d73b
mov dword [esi + 0xc], 0x3f800000
push dword [esi - 4]
cvttss2si eax, dword [ebp - 0x20]
mov ecx, dword [0x101aceac]
push 4
cvttss2si edx, dword [ebp - 8]
push dword [esi + 0x10]
push eax
call fcn.1013b270
mov eax, dword [ebp - 0x14]
add esi, 0x1c
movss xmm3, dword [ebp - 0xc]
inc eax
movss xmm0, dword [ebp - 0x1c]
add esp, 0x10
movss xmm1, dword [0x1018add0]
mov edx, 0xff5a5a5a
movss xmm5, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
cmp esi, 0x101a06f0
jl 0x1009d510
movzx eax, byte [0x101ae444]
lea edi, [eax*8]
sub edi, eax
mov dword [ebp - 0x14], edi
mov eax, dword [edi*4 + 0x101a0668]
mov ecx, eax
mov esi, dword [edi*4 + 0x101a0664]
sub ecx, esi
mov dword [ebp - 8], eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1009dd7b
mov eax, dword [edi*4 + 0x101a0668]
xor ecx, ecx
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], ecx
cmp esi, eax
je 0x1009dae8
xor edi, edi
nop word [eax + eax]
test edi, edi
je 0x1009d822
mov edx, dword [esi]
lea ecx, [edx + 1]
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x1009d800
sub edx, ecx
mov ecx, edi
lea eax, [ecx + 1]
mov dword [ebp - 0xc], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1009d811
sub ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
cmp edx, ecx
jbe 0x1009d824
mov edi, dword [esi]
add esi, 0x18
cmp esi, eax
jne 0x1009d7f0
mov dword [ebp - 0x1c], edi
test edi, edi
mov edi, dword [ebp - 0x14]
je 0x1009dae5
movss xmm0, dword [edi*4 + 0x101a0670]
mulss xmm0, dword [0x1018ae50]
push 1
cvttss2si esi, dword [ebp - 0x24]
mov word [ebp - 0xc], 0xa0a
mov byte [ebp - 0xa], 0xa
mov dword [ebp - 8], 0xa0a0a
cvttss2si eax, xmm0
movss xmm0, dword [0x101a010c]
addss xmm0, dword [0x1018adf4]
cvttss2si ecx, dword [0x101a0108]
mov byte [ebp - 9], al
movzx eax, byte [0x101ae444]
push dword [ebp - 0xc]
movd xmm1, eax
push dword [ebp - 8]
cvtdq2ps xmm1, xmm1
push esi
push 0x5a
mulss xmm1, dword [ebp - 0x18]
addss xmm1, xmm0
cvttss2si edx, xmm1
call fcn.1013afe0
movss xmm0, dword [edi*4 + 0x101a0670]
add esp, 0x14
mulss xmm0, dword [0x1018ae50]
mov word [ebp - 8], 0xa0a
cvttss2si ecx, dword [0x101a0108]
push 1
mov byte [ebp - 6], 0xa
mov dword [ebp - 0xc], 0xa0a0a
cvttss2si eax, xmm0
movss xmm0, dword [0x101a010c]
addss xmm0, dword [0x1018adf4]
mov byte [ebp - 5], al
movzx eax, byte [0x101ae444]
push dword [ebp - 8]
push dword [ebp - 0xc]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
push esi
push 0x5a
mulss xmm1, dword [ebp - 0x18]
addss xmm1, xmm0
cvttss2si edx, xmm1
call fcn.1013afe0
movss xmm0, dword [edi*4 + 0x101a0670]
add esp, 0x14
mulss xmm0, dword [0x1018ae50]
mov word [ebp - 8], 0xa0a
cvttss2si ecx, dword [0x101a0108]
push 1
mov byte [ebp - 6], 0xa
mov dword [ebp - 0xc], 0xa0a0a
cvttss2si eax, xmm0
movss xmm0, dword [0x101a010c]
addss xmm0, dword [0x1018adf4]
mov byte [ebp - 5], al
movzx eax, byte [0x101ae444]
push dword [ebp - 8]
push dword [ebp - 0xc]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
push esi
push 0x5a
mulss xmm1, dword [ebp - 0x18]
addss xmm1, xmm0
cvttss2si edx, xmm1
call fcn.1013afe0
add esp, 0x14
cmp byte [0x101a00b4], 0
je 0x1009dae5
movss xmm0, dword [edi*4 + 0x101a0670]
mulss xmm0, dword [0x1018ae50]
push 1
cvttss2si ecx, dword [0x101a0108]
mov word [ebp - 8], 0xa0a
mov byte [ebp - 6], 0xa
mov dword [ebp - 0xc], 0xa0a0a
cvttss2si eax, xmm0
movss xmm0, dword [0x101a010c]
addss xmm0, dword [0x1018adf4]
mov byte [ebp - 5], al
movzx eax, byte [0x101ae444]
push dword [ebp - 8]
push dword [ebp - 0xc]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
push esi
push 0x5a
mulss xmm1, dword [ebp - 0x18]
addss xmm1, xmm0
cvttss2si edx, xmm1
call fcn.1013afe0
movss xmm0, dword [edi*4 + 0x101a0670]
add esp, 0x14
mulss xmm0, dword [0x1018ae50]
mov word [ebp - 8], 0xa0a
cvttss2si ecx, dword [0x101a0108]
push 1
mov byte [ebp - 6], 0xa
mov dword [ebp - 0xc], 0xa0a0a
cvttss2si eax, xmm0
movss xmm0, dword [0x101a010c]
addss xmm0, dword [0x1018adf4]
mov byte [ebp - 5], al
movzx eax, byte [0x101ae444]
push dword [ebp - 8]
push dword [ebp - 0xc]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
push esi
push 0x5a
mulss xmm1, dword [ebp - 0x18]
addss xmm1, xmm0
cvttss2si edx, xmm1
call fcn.1013afe0
movss xmm0, dword [edi*4 + 0x101a0670]
add esp, 0x14
mulss xmm0, dword [0x1018ae50]
mov word [ebp - 8], 0xa0a
cvttss2si ecx, dword [0x101a0108]
push 1
mov byte [ebp - 6], 0xa
mov dword [ebp - 0xc], 0xa0a0a
cvttss2si eax, xmm0
movss xmm0, dword [0x101a010c]
addss xmm0, dword [0x1018adf4]
mov byte [ebp - 5], al
movzx eax, byte [0x101ae444]
push dword [ebp - 8]
push dword [ebp - 0xc]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
push esi
push 0x5a
mulss xmm1, dword [ebp - 0x18]
addss xmm1, xmm0
cvttss2si edx, xmm1
call fcn.1013afe0
add esp, 0x14
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov edi, dword [edi*4 + 0x101a0664]
mov eax, dword [eax*4 + 0x101a0668]
mov dword [ebp - 0x2c], eax
cmp edi, eax
je 0x1009dd78
movss xmm0, dword [ebp - 0x24]
mulss xmm0, dword [0x1018ac70]
mov dword [ebp - 8], 0
movss dword [ebp - 0x44], xmm0
nop dword [eax]
mov esi, dword [edi]
test ecx, ecx
je 0x1009db4e
mov edx, esi
lea eax, [edx + 1]
mov dword [ebp - 0xc], eax
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x1009db30
sub edx, dword [ebp - 0xc]
lea eax, [ecx + 1]
mov dword [ebp - 0xc], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1009db40
sub ecx, dword [ebp - 0xc]
cmp edx, ecx
jbe 0x1009db51
mov dword [ebp - 0x1c], esi
mov eax, dword [0x101ace78]
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x34], eax
mov ecx, esi
xorps xmm0, xmm0
movups xmmword [edx], xmm0
lea eax, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [ebp - 0xc], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1009db80
sub ecx, dword [ebp - 0xc]
push ecx
push esi
mov ecx, edx
call fcn.10011680
mov edx, dword [ebp - 0x34]
lea ecx, [ebp - 0x50]
call fcn.1013b3f0
mov esi, dword [ebp - 0x14]
add esp, 0x18
movss xmm2, dword [ebp - 0x44]
movss xmm4, dword [0x101ace20]
movss xmm0, dword [esi*4 + 0x101a0670]
mulss xmm0, dword [0x1018ada8]
mov ecx, dword [esi*4 + 0x101a0668]
sub ecx, dword [esi*4 + 0x101a0664]
addss xmm0, dword [0x1018ade4]
cvttss2si eax, xmm0
movd xmm1, eax
mov eax, 0x2aaaaaab
imul ecx
cvtdq2ps xmm1, xmm1
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dl, byte [0x101ae444]
shl eax, 4
addss xmm1, dword [0x101a0108]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
movaps xmm3, xmm1
movss dword [ebp - 0x24], xmm1
addsd xmm0, qword [eax*8 + 0x1018afc0]
movzx eax, dl
movss xmm1, dword [ebp - 0x50]
subss xmm3, xmm1
cvtpd2ps xmm0, xmm0
comiss xmm4, xmm3
mulss xmm0, dword [0x1018ac70]
subss xmm2, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm2, dword [0x1018adf4]
mulss xmm0, dword [ebp - 0x18]
addss xmm2, xmm0
movd xmm0, dword [ebp - 8]
cvtdq2ps xmm0, xmm0
addss xmm2, xmm0
addss xmm2, dword [0x101a010c]
movaps xmm0, xmm2
movss dword [ebp - 0x34], xmm2
subss xmm0, dword [0x1018abc0]
jbe 0x1009dcd1
movss xmm2, dword [0x101ace24]
comiss xmm2, xmm0
jbe 0x1009dcd1
addss xmm1, xmm3
comiss xmm1, xmm4
jbe 0x1009dcd1
addss xmm0, dword [0x1018ad84]
comiss xmm0, xmm2
jbe 0x1009dcd1
cmp byte [0x10365a79], 0
mov cl, 1
je 0x1009dcd3
cmp byte [0x10365b79], 0
jne 0x1009dcd3
mov eax, dword [ebp - 0x48]
mov eax, dword [eax*4 + 0x101a0660]
cmp eax, dword [esi*4 + 0x101a0660]
jne 0x1009dcd3
mov dword [esi*4 + 0x101a0678], edi
jmp 0x1009dcd3
xor cl, cl
cmp dword [esi*4 + 0x101a0678], edi
jne 0x1009dd09
mov ecx, dword [ebp - 0x20]
and ecx, 1
test dl, 1
je 0x1009dcf8
test ecx, ecx
mov eax, 0xfffc8bb6
mov ecx, 0xffff9b73
cmovne eax, ecx
jmp 0x1009dd18
test ecx, ecx
mov eax, 0xffff9b73
mov ecx, 0xfffc8bb6
cmovne eax, ecx
jmp 0x1009dd18
test cl, cl
mov eax, 0xff787878
mov ecx, 0xff323232
cmove eax, ecx
push eax
lea esi, [edi + 0x14]
push esi
call fcn.1009d1b0
mov eax, dword [ebp - 0x14]
push dword [edi]
cvttss2si edx, dword [ebp - 0x24]
push 2
movss xmm0, dword [eax*4 + 0x101a0670]
mulss xmm0, dword [0x1018ae50]
mov eax, dword [esi]
mov dword [ebp - 0xc], eax
cvttss2si eax, dword [ebp - 0x34]
cvttss2si ecx, xmm0
mov byte [ebp - 9], cl
push dword [ebp - 0xc]
mov ecx, dword [0x101ace78]
push eax
call fcn.1013b270
inc dword [ebp - 0x20]
add edi, 0x18
add dword [ebp - 8], 0x10
add esp, 0x18
mov ecx, dword [ebp - 0x1c]
cmp edi, dword [ebp - 0x2c]
jne 0x1009db20
mov edi, dword [ebp - 0x14]
movss xmm1, dword [0x101a0108]
movss xmm2, dword [0x1018ae20]
movss xmm0, dword [0x101a010c]
addss xmm1, xmm2
mov eax, dword [edi*4 + 0x101a0678]
addss xmm0, dword [0x1018ad94]
mov dword [ebp - 0x2c], eax
movss dword [0x101ace7c], xmm1
movss dword [0x101ace80], xmm0
mov edi, dword [eax + 0xc]
mov ecx, edi
mov esi, dword [eax + 8]
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x1009de67
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x2c]
je 0x1009de25
cmp esi, edi
je 0x1009de25
mov edx, dword [esi + 4]
mov eax, edx
mov ecx, dword [esi]
sub eax, ecx
test eax, 0xffffffc0
je 0x1009de1e
cmp ecx, edx
je 0x1009de1e
nop dword [eax]
mov eax, dword [ecx + 4]
cmp eax, 2
je 0x1009de0d
cmp eax, 1
jne 0x1009de17
mov eax, dword [ecx + 8]
mov dword [eax + 8], 0
add ecx, 0x40
cmp ecx, edx
jne 0x1009de00
add esi, 0x1c
cmp esi, edi
jne 0x1009dde8
mov ecx, dword [ebp - 0x14]
xor edi, edi
mov eax, dword [ecx*4 + 0x101a0678]
mov edx, dword [eax + 0xc]
mov esi, dword [eax + 8]
mov dword [ebp - 0x3c], edx
cmp esi, edx
je 0x1009de67
nop
mov eax, dword [ecx*4 + 0x101a0678]
inc edi
add eax, 8
mov ecx, esi
push eax
push edi
call fcn.100917b0
mov ecx, dword [ebp - 0x14]
add esi, 0x1c
cmp esi, dword [ebp - 0x3c]
jne 0x1009de40
movss xmm2, dword [0x1018ae20]
movss xmm0, dword [0x101a0104]
xorps xmm3, xmm3
movss xmm1, dword [0x101a0100]
subss xmm0, xmm3
subss xmm1, xmm2
mov word [ebp - 8], 0x1414
mov byte [ebp - 6], 0x14
mov edx, 5
mov ecx, edx
movss dword [ebp - 0x3c], xmm0
movss xmm0, dword [0x101a010c]
push dword [ebp - 0x3c]
addss xmm0, xmm3
movss dword [ebp - 0x40], xmm1
movss xmm1, dword [0x101a0108]
push dword [ebp - 0x40]
addss xmm1, xmm2
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [0x101ace90]
mulss xmm0, dword [0x1018ac7c]
push dword [ebp - 0x2c]
movss dword [ebp - 0x30], xmm1
mulss xmm0, dword [0x1018ae50]
push dword [ebp - 0x30]
cvttss2si eax, xmm0
mov byte [ebp - 5], al
push dword [ebp - 8]
call fcn.1013a470
mov eax, dword [0x101ac908]
add esp, 0x14
mov ecx, dword [0x101ace84]
movss xmm0, dword [eax + 0x14]
mulss xmm0, dword [0x1018ad74]
test ecx, ecx
je 0x1009df98
cmp byte [0x101ace95], 0
movss xmm2, dword [0x1018aca4]
je 0x1009df2b
xorps xmm3, xmm3
jmp 0x1009df2e
movaps xmm3, xmm2
movss xmm1, dword [0x101ace90]
ucomiss xmm1, xmm3
lahf
test ah, 0x44
jnp 0x1009df4f
subss xmm2, xmm0
mulss xmm0, xmm3
mulss xmm1, xmm2
addss xmm1, xmm0
movss dword [0x101ace90], xmm1
mov eax, dword [ecx + 4]
dec eax
cmp eax, 9
ja case.0x1009df60.7
jmp dword [eax*4 + 0x1009dffc]
call fcn.10093ef0
jmp case.0x1009df60.7
call fcn.100947c0
jmp case.0x1009df60.7
call fcn.10090f60
jmp case.0x1009df60.7
call fcn.100930c0
jmp case.0x1009df60.7
call fcn.10092220
jmp case.0x1009df60.7
call fcn.1008fe70
jmp case.0x1009df60.7
call fcn.100951d0
jmp case.0x1009df60.7
movss xmm1, dword [0x101ace90]
xorps xmm3, xmm3
ucomiss xmm1, xmm3
lahf
test ah, 0x44
jnp 0x1009dfc4
movss xmm2, dword [0x1018aca4]
subss xmm2, xmm0
mulss xmm0, xmm3
mulss xmm1, xmm2
addss xmm1, xmm0
movss dword [0x101ace90], xmm1
movss xmm0, dword [0x1018ac00]
comiss xmm0, dword [0x101ace90]
jb 0x1009dfe7
mov dword [0x101ace84], 0
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.1013c175
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret