Function at 0x1001e020
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x5c
push ebx
mov eax, ecx
xor ebx, ebx
push esi
push edi
mov dword [esp + 0x18], eax
xor edi, edi
mov esi, dword [eax + 4]
call fcn.1001de90
mov edx, eax
mov eax, dword [ebp + 8]
mov dword [eax], ebx
test edx, edx
js 0x1001eb22
movzx ecx, byte [edx + esi]
mov eax, pe_nt_image_headers32
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [edx + esi + 1]
add cx, ax
movzx eax, cx
test ax, ax
jle 0x1001e4e4
cwde
lea edi, [esi + 0xa]
mov dword [esp + 0x10], ebx
add edi, edx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x3c], edi
lea ecx, [edx + eax*2]
add edx, 0xc
lea ebx, [eax + eax]
movzx eax, byte [ecx + esi + 0xa]
movzx ecx, byte [ecx + esi + 0xb]
shl eax, 8
add esi, eax
mov dword [esp + 0x18], ebx
movzx eax, byte [ebx + edi - 1]
add esi, ecx
movzx ecx, byte [ebx + edi - 2]
add esi, ebx
shl ecx, 8
add esi, edx
inc ecx
add eax, ecx
mov dword [esp + 0x30], eax
add eax, ebx
lea ecx, [eax*8]
sub ecx, eax
add ecx, ecx
call fcn.10007c50
mov edi, eax
mov dword [esp + 0x1c], edi
test edi, edi
je 0x1001eb22
mov edx, dword [esp + 0x30]
lea eax, [ebx*8]
sub eax, ebx
mov dword [esp + 0x44], 0
add eax, eax
xor cl, cl
mov dword [esp + 0x4c], eax
test edx, edx
je 0x1001e49a
lea ebx, [edi + 0xc]
mov dword [esp + 0x38], edx
add ebx, eax
mov al, cl
nop dword [eax]
test cl, cl
jne 0x1001e138
mov al, byte [esi]
mov dl, al
mov byte [esp + 0xe], al
and dl, 8
je 0x1001e124
mov cl, byte [esi + 1]
xor eax, eax
test dl, dl
mov edx, dword [esp + 0x38]
setne al
inc eax
add esi, eax
mov al, byte [esp + 0xe]
jmp 0x1001e13a
dec cl
mov byte [ebx], al
add ebx, 0xe
sub edx, 1
mov dword [esp + 0x38], edx
jne 0x1001e110
mov eax, dword [esp + 0x4c]
xor ebx, ebx
add eax, edi
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x30]
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x38], eax
mov dl, byte [edi + 0xc]
and dl, 0x10
test byte [edi + 0xc], 2
je 0x1001e17f
mov al, byte [esi]
inc esi
movzx ecx, al
mov eax, ecx
neg eax
test dl, dl
cmove ecx, eax
add ebx, ecx
jmp 0x1001e1a1
test dl, dl
jne 0x1001e1a1
movzx ecx, byte [esi]
mov eax, pe_nt_image_headers32
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + 1]
add cx, ax
movsx eax, cx
add ebx, eax
add esi, 2
mov word [edi], bx
add edi, 0xe
sub dword [esp + 0x38], 1
jne 0x1001e160
mov ecx, dword [esp + 0x18]
xor ebx, ebx
mov edi, dword [esp + 0x1c]
lea eax, [ecx*8]
sub eax, ecx
add edi, 2
lea eax, [edi + eax*2]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x30]
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x38], eax
nop word [eax + eax]
mov dl, byte [edi + 0xa]
and dl, 0x20
test byte [edi + 0xa], 4
je 0x1001e1ff
mov al, byte [esi]
inc esi
movzx ecx, al
mov eax, ecx
neg eax
test dl, dl
cmove ecx, eax
add ebx, ecx
jmp 0x1001e221
test dl, dl
jne 0x1001e221
movzx ecx, byte [esi]
mov eax, pe_nt_image_headers32
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + 1]
add cx, ax
movsx eax, cx
add ebx, eax
add esi, 2
mov word [edi], bx
add edi, 0xe
sub dword [esp + 0x38], 1
jne 0x1001e1e0
mov esi, dword [esp + 0x18]
xor edx, edx
mov edi, dword [esp + 0x1c]
xor ecx, ecx
xor ebx, ebx
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], edx
lea eax, [esi*8]
mov dword [esp + 0x24], edx
sub eax, esi
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x20], ecx
lea esi, [edi + eax*2]
mov al, byte [esi + 0xc]
mov byte [esp + 0xe], al
movzx eax, word [esi]
mov dword [esp + 0x18], eax
movzx eax, word [esi + 2]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x20]
cmp dword [esp + 0x44], eax
jne 0x1001e36a
test eax, eax
je 0x1001e2b2
push dword [esp + 0x24]
push dword [esp + 0x2c]
push dword [esp + 0x3c]
push dword [esp + 0x44]
push ebx
push ecx
push dword [esp + 0x58]
mov ecx, edi
push dword [esp + 0x2c]
call fcn.1001df50
mov edx, eax
add esp, 0x20
mov eax, dword [esp + 0x20]
movzx ecx, byte [esp + 0xe]
not ecx
and ecx, 1
mov dword [esp + 0x40], ecx
je 0x1001e317
test byte [esi + 0x1a], 1
mov ebx, dword [esp + 0x18]
movsx ecx, bx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x38], ecx
movsx ecx, bx
movsx ebx, word [esi + 0x10]
mov dword [esp + 0x34], ecx
lea ecx, [esi + 0xe]
mov dword [esp + 0x4c], ecx
movsx ecx, word [ecx]
mov dword [esp + 0x2c], ecx
jne 0x1001e30c
mov edi, dword [esp + 0x18]
movsx eax, di
mov edi, dword [esp + 0x14]
add ecx, eax
movsx eax, di
mov edi, dword [esp + 0x1c]
add ebx, eax
sar ecx, 1
sar ebx, 1
jmp 0x1001e325
mov esi, dword [esp + 0x4c]
inc eax
mov dword [esp + 0x20], eax
jmp 0x1001e329
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
movsx ecx, cx
movsx ebx, bx
mov dword [esp + 0x2c], ecx
lea eax, [edx*8]
sub eax, edx
inc edx
mov word [edi + eax*2], cx
xor ecx, ecx
mov dword [edi + eax*2 + 4], ecx
mov byte [edi + eax*2 + 0xc], 1
mov word [edi + eax*2 + 2], bx
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x10], ecx
movzx ecx, byte [eax + 1]
movzx eax, byte [eax]
inc ecx
shl eax, 8
add eax, ecx
add dword [esp + 0x3c], 2
mov dword [esp + 0x44], eax
jmp 0x1001e47c
test byte [esp + 0xe], 1
jne 0x1001e3ef
cmp dword [esp + 0x10], 0
je 0x1001e3cc
lea ecx, [edx*8]
sub ecx, edx
inc edx
mov dword [esp + 0x10], ecx
mov byte [edi + ecx*2 + 0xc], 3
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x1c]
movsx eax, cx
add eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
sar eax, 1
mov word [edi + ecx*2], ax
mov ecx, dword [esp + 0x14]
movsx eax, cx
mov ecx, dword [esp + 0x10]
add eax, dword [esp + 0x24]
sar eax, 1
mov word [edi + ecx*2 + 2], ax
mov eax, dword [esp + 0x28]
mov word [edi + ecx*2 + 4], ax
mov eax, dword [esp + 0x24]
mov word [edi + ecx*2 + 6], ax
mov eax, dword [esp + 0x18]
movsx ecx, ax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], ecx
movsx ecx, ax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x10], 1
jmp 0x1001e47c
lea ecx, [edx*8]
sub ecx, edx
cmp dword [esp + 0x10], 0
je 0x1001e417
mov eax, dword [esp + 0x24]
movzx eax, ax
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x28]
movzx eax, ax
mov dword [esp + 0x48], eax
jmp 0x1001e427
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov eax, dword [esp + 0x14]
movzx edi, ax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x14], edi
movzx edi, ax
mov eax, dword [esp + 0x10]
test eax, eax
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0x1c]
setne al
add al, 2
mov dword [esp + 0x10], 0
inc edx
mov byte [edi + ecx*2 + 0xc], al
mov eax, dword [esp + 0x18]
mov word [edi + ecx*2], ax
mov eax, dword [esp + 0x14]
mov word [edi + ecx*2 + 2], ax
mov eax, dword [esp + 0x48]
mov word [edi + ecx*2 + 4], ax
mov eax, dword [esp + 0x4c]
mov word [edi + ecx*2 + 6], ax
mov eax, dword [esp + 0x20]
add esi, 0xe
mov ecx, dword [esp + 0x2c]
inc eax
mov dword [esp + 0x20], eax
cmp eax, dword [esp + 0x30]
jl 0x1001e260
mov eax, ecx
jmp 0x1001e4b0
xor edx, edx
xor ebx, ebx
mov dword [esp + 0x34], edx
xor eax, eax
mov dword [esp + 0x38], edx
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], edx
push dword [esp + 0x24]
mov ecx, edi
push dword [esp + 0x2c]
push dword [esp + 0x3c]
push dword [esp + 0x44]
push ebx
push eax
push dword [esp + 0x58]
push dword [esp + 0x2c]
call fcn.1001df50
add esp, 0x20
mov ebx, eax
mov eax, dword [ebp + 8]
mov dword [eax], edi
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
jns 0x1001e4d6
add esi, 0xa
mov dword [esp + 0x1c], 6
xor ebx, ebx
add esi, edx
mov dword [esp + 0x20], ebx
xor edi, edi
mov al, byte [esi + 2]
xorps xmm1, xmm1
movzx edx, byte [esi + 1]
movaps xmm0, xmmword [0x10050490]
movss xmm4, dword [0x100500fc]
mov byte [esp + 0xe], al
mov al, byte [esi + 3]
add esi, 4
mov dword [esp + 0x24], 0
movss dword [esp + 0x40], xmm1
movss dword [esp + 0x3c], xmm1
mov dword [esp + 0x44], edx
mov byte [esp + 0xf], al
movups xmmword [esp + 0x50], xmm0
test dl, 2
je 0x1001e5cc
lea eax, [esi + 1]
mov dword [esp + 0x4c], eax
test dl, 1
je 0x1001e5a5
mov al, byte [esi + 2]
lea edx, [esi + 3]
mov bl, byte [esi]
add esi, 4
movzx ecx, al
mov eax, pe_nt_image_headers32
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [edx]
mov edx, dword [esp + 0x44]
add cx, ax
movsx eax, cx
mov dword [esp + 0x48], eax
mov eax, pe_nt_image_headers32
movzx ecx, bl
mov ebx, dword [esp + 0x20]
cwde
movsx ecx, cx
imul ecx, eax
mov eax, dword [esp + 0x4c]
movzx eax, byte [eax]
add cx, ax
mov eax, dword [esp + 0x48]
movsx ecx, cx
jmp 0x1001e5b2
mov cl, byte [esi]
mov esi, eax
movsx ecx, cl
mov al, byte [esi]
inc esi
movsx eax, al
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x3c], xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x40], xmm0
test dl, 8
je 0x1001e60f
movzx ecx, byte [esi]
mov eax, pe_nt_image_headers32
cwde
xorps xmm3, xmm3
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + 1]
movss dword [esp + 0x28], xmm1
add cx, ax
add esi, 2
movsx eax, cx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm4
movss dword [esp + 0x2c], xmm0
movaps xmm2, xmm0
jmp 0x1001e742
test dl, 0x40
je 0x1001e673
movzx ecx, byte [esi]
mov edx, pe_nt_image_headers32
movsx ecx, cx
xorps xmm3, xmm3
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 1]
movss dword [esp + 0x28], xmm1
add cx, ax
movsx eax, cx
movzx ecx, byte [esi + 2]
movsx ecx, cx
movd xmm2, eax
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 3]
cvtdq2ps xmm2, xmm2
add cx, ax
add esi, 4
movsx eax, cx
mulss xmm2, xmm4
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm4
movss dword [esp + 0x2c], xmm0
jmp 0x1001e742
test dl, dl
jns 0x1001e71e
movzx ecx, byte [esi]
mov edx, pe_nt_image_headers32
movsx ecx, cx
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 1]
add cx, ax
movsx eax, cx
movzx ecx, byte [esi + 2]
movsx ecx, cx
movd xmm2, eax
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 3]
cvtdq2ps xmm2, xmm2
add cx, ax
movsx eax, cx
movzx ecx, byte [esi + 4]
movsx ecx, cx
mulss xmm2, xmm4
movd xmm3, eax
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 5]
cvtdq2ps xmm3, xmm3
add cx, ax
movsx eax, cx
movss dword [esp + 0x38], xmm2
movzx ecx, byte [esi + 6]
movsx ecx, cx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 7]
mulss xmm0, xmm4
mulss xmm3, xmm4
add cx, ax
add esi, 8
movsx eax, cx
movss dword [esp + 0x28], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm4
movss dword [esp + 0x2c], xmm0
jmp 0x1001e748
movss xmm0, dword [esp + 0x5c]
movss xmm3, dword [esp + 0x54]
movss xmm2, dword [esp + 0x50]
movss dword [esp + 0x2c], xmm0
movss xmm0, dword [esp + 0x58]
movss dword [esp + 0x28], xmm0
movss dword [esp + 0x38], xmm2
movaps xmm1, xmm3
movss dword [esp + 0x34], xmm3
movaps xmm0, xmm2
mulss xmm1, xmm3
mulss xmm0, xmm2
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x1001e772
sqrtsd xmm0, xmm0
jmp 0x1001e777
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movss xmm1, dword [esp + 0x2c]
cvtsd2ss xmm0, xmm0
mulss xmm1, xmm1
movss dword [esp + 0x4c], xmm0
movss xmm0, dword [esp + 0x28]
mulss xmm0, xmm0
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x1001e7ab
sqrtsd xmm0, xmm0
jmp 0x1001e7b0
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movzx edx, byte [esp + 0xe]
lea eax, [esp + 0x24]
mov ecx, dword [esp + 0x18]
cvtsd2ss xmm0, xmm0
push eax
movzx eax, byte [esp + 0x13]
shl edx, 8
add edx, eax
movss dword [esp + 0x4c], xmm0
call fcn.100200c0
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
jle 0x1001ea47
movss xmm4, dword [esp + 0x2c]
xor edx, edx
movss xmm5, dword [esp + 0x38]
mov ebx, eax
movss xmm6, dword [esp + 0x28]
movss xmm7, dword [esp + 0x34]
mov ecx, dword [esp + 0x24]
movaps xmm1, xmm5
movaps xmm0, xmm6
movsx eax, word [edx + ecx + 2]
movd xmm3, eax
movsx eax, word [edx + ecx]
cvtdq2ps xmm3, xmm3
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mulss xmm0, xmm3
mulss xmm1, xmm2
addss xmm1, xmm0
movaps xmm0, xmm4
mulss xmm0, xmm3
addss xmm1, dword [esp + 0x40]
mulss xmm1, dword [esp + 0x4c]
cvttss2si eax, xmm1
movaps xmm1, xmm7
mulss xmm1, xmm2
mov word [edx + ecx], ax
addss xmm1, xmm0
movaps xmm0, xmm6
addss xmm1, dword [esp + 0x3c]
mulss xmm1, dword [esp + 0x48]
cvttss2si eax, xmm1
movaps xmm1, xmm5
mov word [edx + ecx + 2], ax
movsx eax, word [edx + ecx + 6]
movd xmm3, eax
movsx eax, word [edx + ecx + 4]
cvtdq2ps xmm3, xmm3
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mulss xmm0, xmm3
mulss xmm1, xmm2
addss xmm1, xmm0
movaps xmm0, xmm4
mulss xmm0, xmm3
addss xmm1, dword [esp + 0x40]
mulss xmm1, dword [esp + 0x4c]
cvttss2si eax, xmm1
movaps xmm1, xmm7
mulss xmm1, xmm2
mov word [edx + ecx + 4], ax
addss xmm1, xmm0
addss xmm1, dword [esp + 0x3c]
mulss xmm1, dword [esp + 0x48]
cvttss2si eax, xmm1
mov word [edx + ecx + 6], ax
add edx, 0xe
sub ebx, 1
jne 0x1001e802
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x20]
add eax, ebx
lea ecx, [eax*8]
sub ecx, eax
add ecx, ecx
call fcn.10007c50
mov ecx, eax
mov dword [esp + 0x4c], ecx
test ecx, ecx
je 0x1001ea57
test ebx, ebx
jle 0x1001e926
test edi, edi
je 0x1001e926
lea eax, [ebx*8]
sub eax, ebx
add eax, eax
push eax
push edi
push ecx
call sub.VCRUNTIME140.dll_memcpy
mov ecx, dword [esp + 0x58]
add esp, 0xc
mov edx, dword [esp + 0x30]
lea eax, [edx*8]
sub eax, edx
add eax, eax
push eax
push dword [esp + 0x28]
lea eax, [ebx*8]
sub eax, ebx
lea eax, [ecx + eax*2]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
test edi, edi
je 0x1001e9bb
mov ecx, dword [0x10100b74]
test ecx, ecx
je 0x1001e9b1
movsx eax, word [ecx + 0x5e30]
mov edx, dword [ecx + 0x3f08]
mov dword [esp + 0x48], edx
lea eax, [eax*8 + 0x5e34]
add eax, ecx
cmp dword [eax], edx
je 0x1001e9a7
movsx eax, word [ecx + 0x5e30]
inc eax
cdq
idiv dword [esp + 0x1c]
movzx eax, dx
mov edx, dword [esp + 0x48]
mov word [ecx + 0x5e30], ax
cwde
lea eax, [eax*8 + 0x5e34]
add eax, ecx
mov dword [eax], edx
xor edx, edx
mov dword [eax + 4], edx
inc word [eax + 6]
inc dword [ecx + 0x5e2c]
push edi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov edx, dword [esp + 0x24]
mov edi, dword [esp + 0x4c]
mov dword [esp + 0x48], edx
test edx, edx
je 0x1001ea35
mov ecx, dword [0x10100b74]
test ecx, ecx
je 0x1001ea35
mov eax, dword [ecx + 0x3f08]
mov dword [esp + 0x4c], eax
movsx eax, word [ecx + 0x5e30]
mov edx, dword [esp + 0x4c]
lea eax, [eax*8 + 0x5e34]
add eax, ecx
cmp dword [eax], edx
mov edx, dword [esp + 0x48]
je 0x1001ea2b
movsx eax, word [ecx + 0x5e30]
inc eax
cdq
idiv dword [esp + 0x1c]
movzx eax, dx
mov edx, dword [esp + 0x4c]
mov word [ecx + 0x5e30], ax
cwde
lea eax, [eax*8 + 0x5e34]
add eax, ecx
mov dword [eax], edx
xor edx, edx
mov dword [eax + 4], edx
mov edx, dword [esp + 0x48]
inc word [eax + 6]
inc dword [ecx + 0x5e2c]
push edx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
add ebx, dword [esp + 0x30]
mov dword [esp + 0x20], ebx
test byte [esp + 0x44], 0x20
je 0x1001e4d6
jmp 0x1001e4fb
test edi, edi
je 0x1001eabd
mov ecx, dword [0x10100b74]
test ecx, ecx
je 0x1001eaaf
movsx edx, word [ecx + 0x5e30]
lea eax, [ecx + 0x5e34]
mov esi, dword [ecx + 0x3f08]
lea eax, [eax + edx*8]
cmp dword [eax], esi
je 0x1001eaa5
lea eax, [edx + 1]
mov ebx, 6
cdq
idiv ebx
movzx eax, dx
mov word [ecx + 0x5e30], ax
cwde
lea eax, [eax*8 + 0x5e34]
add eax, ecx
xor edx, edx
mov dword [eax], esi
mov dword [eax + 4], edx
inc word [eax + 6]
inc dword [ecx + 0x5e2c]
mov ebx, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
push edi
call ebx
add esp, 4
jmp 0x1001eac3
mov ebx, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov esi, dword [esp + 0x24]
test esi, esi
je 0x1001eb22
mov ecx, dword [0x10100b74]
test ecx, ecx
je 0x1001eb1c
movsx edx, word [ecx + 0x5e30]
lea eax, [ecx + 0x5e34]
mov edi, dword [ecx + 0x3f08]
lea eax, [eax + edx*8]
cmp dword [eax], edi
je 0x1001eb12
lea eax, [edx + 1]
cdq
idiv dword [esp + 0x1c]
movzx eax, dx
mov word [ecx + 0x5e30], ax
cwde
lea eax, [eax*8 + 0x5e34]
add eax, ecx
xor edx, edx
mov dword [eax], edi
mov dword [eax + 4], edx
inc word [eax + 6]
inc dword [ecx + 0x5e2c]
push esi
call ebx
add esp, 4
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret