Function at 0x100b8c70
Capabilities:
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d459e
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x1e8
mov eax, dword [0x100e500c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x120], edx
mov edi, ecx
mov dword [ebp - 0x104], edi
mov eax, dword [0x1016ff14]
mov dword [ebp - 0xf4], 0
test al, 1
jne 0x100b8d0c
or eax, 1
mov dword [0x1016ff14], eax
mov eax, dword [0x1016a69c]
mov dword [0x1016ff00], eax
mov dword [0x1016ff04], 0
mov dword [0x1016ff08], 0
mov dword [0x1016ff0c], 0
mov dword [0x1016ff10], 0
push 0x30
xorps xmm0, xmm0
mov dword [ebp - 0x10c], 4
lea eax, [ebp - 0x74]
movss dword [ebp - 0xf8], xmm0
push 0
push eax
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x78], 0
xorps xmm0, xmm0
lea eax, [ebp - 0xcc]
movups xmmword [ebp - 0x98], xmm0
push 0x30
push 0
push eax
movups xmmword [ebp - 0x88], xmm0
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [edi]
xorps xmm0, xmm0
mov eax, dword [0x1016a688]
add esp, 0xc
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xd0], 0
movups xmmword [ebp - 0xe0], xmm0
mov al, byte [ecx + eax]
test al, al
je 0x100b8e0c
movss xmm4, dword [0x100e502c]
movss xmm5, dword [0x100e5030]
movss xmm6, dword [0x100e5034]
mov eax, dword [0x100e53a0]
mov ecx, dword [0x100e53a8]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x108], ecx
movss dword [ebp - 0x118], xmm4
movss dword [ebp - 0x114], xmm5
movss dword [ebp - 0x110], xmm6
jmp 0x100b9036
mov eax, dword [0x1016a7b4]
add eax, 0xffffffa4
xor eax, 0x44eba2a2
mov eax, dword [eax + ecx]
mov ecx, dword [0x1016a4fc]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
mov dword [ebp - 0x140], eax
test eax, eax
je 0x100b9957
mov ecx, dword [eax]
mov edx, dword [ecx + 0x6f8]
mov ecx, eax
call edx
mov dword [ebp - 0x108], eax
test eax, eax
je 0x100b9957
mov edi, dword [edi]
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
mov ecx, dword [edi]
push eax
mov edx, dword [ecx + 0x28c]
mov ecx, edi
call edx
cmp dword [edi + 0x39e1], 0
je 0x100b8ff6
mov eax, dword [0x1016a68c]
mov edi, dword [edi + eax]
test edi, edi
je 0x100b8ff6
mov ecx, dword [edi + 0x60]
test ecx, ecx
je 0x100b8ff6
cmp byte [edi + 0x109], 0
movss xmm1, dword [ebp - 0xf8]
jne 0x100b8f0f
mov eax, dword [0x1016a744]
add eax, 0xffffffc0
xor eax, 0x44eba286
movss xmm0, dword [eax + ecx]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x100b8f0f
mov eax, dword [0x1016a7b8]
add eax, 0xffffffa3
xor eax, 0x44eba2a3
mov eax, dword [eax + ecx]
mov ecx, dword [0x1016a4fc]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
test eax, eax
jne 0x100b8ff6
movss xmm1, dword [ebp - 0xf8]
mov ecx, dword [0x1016a7ac]
mov eax, dword [edi + 0x60]
add ecx, 0xffffffa6
xor ecx, 0x44eba2a0
mov eax, dword [ecx + eax]
test eax, eax
je 0x100b8ff6
movss xmm3, dword [eax + 0x1ac]
movss xmm2, dword [ebp - 0x134]
cvtps2pd xmm3, xmm3
cvtps2pd xmm0, xmm2
addsd xmm3, qword [0x100d93c8]
comisd xmm0, xmm3
movsd qword [ebp - 0x130], xmm3
jbe 0x100b8ff6
subsd xmm0, xmm3
movaps xmm4, xmm1
cvtpd2ps xmm0, xmm0
subss xmm0, dword [0x100d940c]
cvtps2pd xmm0, xmm0
mulsd xmm0, qword [0x100d93a8]
cvtpd2ps xmm0, xmm0
comiss xmm0, xmm1
jb 0x100b8fba
sub esp, 8
mov dword [esp + 4], 0x3f800000
movss dword [esp], xmm0
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fminf]
movss xmm2, dword [ebp - 0x134]
add esp, 8
movsd xmm3, qword [ebp - 0x130]
fstp dword [ebp - 0x124]
movss xmm4, dword [ebp - 0x124]
movaps xmm1, xmm4
mulss xmm1, xmm4
cvtps2pd xmm2, xmm2
movaps xmm0, xmm1
addss xmm1, xmm1
mulss xmm0, dword [0x100d93f0]
subsd xmm3, xmm2
mulss xmm1, xmm4
subss xmm0, xmm1
cvtps2pd xmm0, xmm0
mulsd xmm0, xmm3
addsd xmm0, xmm2
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0x134], xmm0
movq xmm0, qword [ebp - 0x13c]
mov eax, dword [ebp - 0x134]
mov edi, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x108]
movq qword [ebp - 0x118], xmm0
movss xmm5, dword [ebp - 0x114]
movss xmm4, dword [ebp - 0x118]
mov dword [ebp - 0x110], eax
movss xmm6, dword [ebp - 0x110]
movd xmm0, dword [ecx + 0xec]
lea esi, [ebp - 0x168]
movss xmm1, dword [ecx + 0xf8]
lea eax, [ebp - 0x16c]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x16c], 0
movss xmm2, dword [edi + 8]
movss dword [ebp - 0xfc], xmm0
subss xmm2, xmm4
movss xmm0, dword [0x100d9408]
divss xmm0, xmm1
movss xmm3, dword [edi + 0xc]
comiss xmm0, dword [ebp - 0xf8]
movss xmm7, dword [edi + 0x10]
subss xmm3, xmm5
movss dword [ebp - 0x168], xmm0
subss xmm7, xmm6
movss dword [ebp - 0x124], xmm1
cmovbe esi, eax
movaps xmm1, xmm2
mulss xmm1, xmm2
movaps xmm0, xmm3
mulss xmm0, xmm3
addss xmm1, xmm0
movaps xmm0, xmm7
mulss xmm0, xmm7
addss xmm0, xmm1
call fcn.1001c310
addss xmm0, dword [0x100d92c0]
mov eax, dword [edi]
mov dword [0x1016ff04], eax
mov dword [0x1016ff10], 0
divss xmm2, xmm0
divss xmm3, xmm0
divss xmm7, xmm0
movss xmm0, dword [ebp - 0xfc]
comiss xmm0, dword [ebp - 0xf8]
movss dword [ebp - 0x20], xmm2
movss dword [ebp - 0x1c], xmm3
movss dword [ebp - 0x18], xmm7
jbe 0x100b9957
nop dword [eax]
nop word [eax + eax]
movss xmm0, dword [ecx + 0x104]
subss xmm0, dword [ebp - 0x11c]
mov dword [ebp - 0x1d4], 0
mov byte [ebp - 0x1ab], 1
mulss xmm2, xmm0
mulss xmm3, xmm0
mulss xmm7, xmm0
addss xmm2, xmm4
addss xmm3, xmm5
movss dword [ebp - 0x12c], xmm0
addss xmm7, xmm6
movss dword [ebp - 0x144], xmm2
subss xmm2, xmm4
movaps xmm0, xmm3
movss dword [ebp - 0x34], xmm3
subss xmm0, xmm5
movaps xmm1, xmm7
movss dword [ebp - 0x38], xmm7
movss dword [ebp - 0x1e0], xmm2
subss xmm1, xmm6
mulss xmm2, xmm2
movss dword [ebp - 0x1dc], xmm0
mulss xmm0, xmm0
movss dword [ebp - 0x1d8], xmm1
mulss xmm1, xmm1
addss xmm2, xmm0
addss xmm2, xmm1
ucomiss xmm2, dword [ebp - 0xf8]
lahf
test ah, 0x44
jp 0x100b91c5
mov byte [ebp - 0x1ab], 0
mov ecx, dword [0x1016a514]
lea edx, [ebp - 0x98]
push edx
mov dword [ebp - 0x1b0], 0
lea edx, [ebp - 0x1f0]
mov byte [ebp - 0x1ac], 1
movss dword [ebp - 0x1f0], xmm4
movss dword [ebp - 0x1ec], xmm5
movss dword [ebp - 0x1e8], xmm6
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1c0], 0
mov eax, dword [ecx]
push 0x1016ff00
push 0x4600400b
push edx
mov eax, dword [eax + 0x14]
call eax
mov eax, dword [edi + 4]
test eax, eax
je 0x100b92d0
movss xmm1, dword [0x100d9464]
lea edx, [ebp - 0x13c]
movss xmm0, dword [ebp - 0x20]
mulss xmm0, xmm1
push ecx
push eax
lea eax, [ebp - 0x98]
addss xmm0, dword [ebp - 0x144]
push eax
push ecx
lea ecx, [ebp - 0x118]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x1c]
mulss xmm0, xmm1
addss xmm0, dword [ebp - 0x34]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x18]
mulss xmm0, xmm1
addss xmm0, dword [ebp - 0x38]
movss dword [ebp - 0x134], xmm0
call fcn.100b8860
add esp, 0x10
jmp 0x100b94fa
movss xmm3, dword [0x100d9464]
lea eax, [ebp - 0x98]
movss xmm1, dword [ebp - 0x1c]
movss xmm2, dword [ebp - 0x20]
movss xmm0, dword [ebp - 0x18]
mulss xmm1, xmm3
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x17c]
mulss xmm2, xmm3
mov dword [ebp - 0x24], 0xc2700000
addss xmm1, dword [ebp - 0x34]
mulss xmm0, xmm3
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x118]
addss xmm2, dword [ebp - 0x144]
mov dword [ebp - 0x3c], 0x1016ff00
addss xmm0, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
mov eax, dword [0x1016fe08]
movss dword [ebp - 0x17c], xmm2
movss dword [ebp - 0x178], xmm1
movss dword [ebp - 0x174], xmm0
test al, 1
jne 0x100b94d4
or eax, 1
mov dword [0x1016fe08], eax
mov dword [ebp - 4], 0
mov eax, 0x10
movaps xmm0, xmmword [0x100da360]
pxor xmm0, xmmword [0x100da100]
mov dword [ebp - 0x154], 0xc9ddd8c9
mov dword [ebp - 0x150], 0xdcc9a8d1
mov dword [ebp - 0x14c], 0xdedac9df
mov byte [ebp - 0x148], 0xe9
movups xmmword [ebp - 0x164], xmm0
xor byte [ebp + eax - 0x164], 0xe9
inc eax
cmp eax, 0x1d
jb 0x100b93a2
xorps xmm0, xmm0
mov dword [ebp - 0x184], 0
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x180], 0
movups xmmword [ebp - 0x194], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b93d7
sub ecx, edx
lea eax, [ebp - 0x164]
push ecx
push eax
lea ecx, [ebp - 0x194]
call fcn.10022a30
mov byte [ebp - 4], 1
mov eax, dword [0x1016a4bc]
test eax, eax
je 0x100b9405
mov edi, dword [eax + 0x50]
jmp 0x100b9407
xor edi, edi
mov eax, dword [0x1016a4b4]
mov ecx, dword [ebp - 0xf4]
test eax, eax
je 0x100b941e
mov edx, dword [eax + 0x18]
or ecx, 4
jmp 0x100b9423
or ecx, 8
xor edx, edx
mov eax, ecx
mov dword [ebp - 0xf4], ecx
and ecx, 0xfffffff7
test al, 8
cmove ecx, eax
mov dword [ebp - 0xf4], ecx
and dword [ebp - 0xf4], 0xfffffffb
test cl, 4
mov eax, dword [ebp - 0xf4]
cmove eax, ecx
lea ecx, [ebp - 0x170]
mov dword [ebp - 0xf4], eax
lea eax, [ebp - 0x194]
push eax
push edx
mov edx, edi
call fcn.1001c560
mov eax, dword [ebp - 0x170]
add esp, 8
test eax, eax
je 0x100b9484
mov ecx, dword [eax + 1]
test ecx, ecx
jne 0x100b947f
xor eax, eax
jmp 0x100b9484
add eax, 5
add eax, ecx
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x180]
mov dword [0x1016fe0c], eax
cmp ecx, 0x10
jb 0x100b94c7
mov edx, dword [ebp - 0x194]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100b94bd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100b98f0
push ecx
push edx
call fcn.100ca471
add esp, 8
mov edi, dword [ebp - 0x104]
mov dword [ebp - 4], 0xffffffff
cmp dword [0x1016fe0c], 0
je 0x100b94fa
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
push dword [ebp - 0x24]
push dword [ebp - 0x40]
push dword [ebp - 0x3c]
push 0x4600400b
call dword [0x1016fe0c]
add esp, 0x10
movss xmm1, dword [ebp - 0x6c]
ucomiss xmm1, dword [0x100d9388]
lahf
test ah, 0x44
jnp 0x100b9957
mulss xmm1, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x108]
addss xmm1, dword [ebp - 0x11c]
movss xmm0, dword [eax + 0x108]
movss dword [ebp - 0x12c], xmm1
mulss xmm1, dword [0x100d92cc]
call sub.api_ms_win_crt_math_l1_1_0.dll___libm_sse2_powf
mulss xmm0, dword [ebp - 0xfc]
mov ecx, dword [edi + 4]
movss dword [ebp - 0xfc], xmm0
test ecx, ecx
je 0x100b95f1
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x100b964e
cmp eax, ecx
jne 0x100b964e
mov edx, dword [ebp - 0x54]
cmp edx, 1
jl 0x100b957e
cmp edx, 7
jle 0x100b9587
cmp edx, 0xa
jne 0x100b964e
mov eax, dword [0x1016a7cc]
xor edi, edi
mov esi, dword [ebp - 0x140]
add eax, 0xffffff9e
xor eax, 0x44eba2a8
movaps xmm1, xmm0
cmp dword [eax + esi], 0x1f
mov eax, dword [ebp - 0x108]
cmove edx, edi
movss xmm2, dword [eax + 0xf0]
call fcn.100b7d70
mov esi, dword [ebp - 0x120]
cmp dword [ebp - 0x10c], 4
mov ecx, dword [ebp - 0x104]
setne al
mov byte [esi + 0xc], al
mov dword [esi + 8], edx
movss dword [esi + 4], xmm0
mov eax, dword [ecx + 4]
mov dword [esi], eax
jne 0x100b98f6
comiss xmm0, dword [ecx + 0x14]
setae al
jmp 0x100b9959
mov edi, dword [ebp - 0x10c]
cmp edi, 4
mov ecx, dword [ebp - 0x120]
setne al
mov byte [ecx + 0xc], al
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x100b963d
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x100b9635
mov edx, dword [ebp - 0x54]
cmp edx, 1
jl 0x100b962c
cmp edx, 7
jle 0x100b98ff
cmp edx, 0xa
je 0x100b98ff
movss xmm0, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x120]
mov edi, dword [ebp - 0x104]
movss dword [eax + 4], xmm0
cmp byte [edi + 0x1c], 0
je 0x100b9957
mov ecx, dword [0x1016a538]
movsx edx, word [ebp - 0x58]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
movss xmm0, dword [ebp - 0x12c]
mov edx, eax
comiss xmm0, dword [0x100d952c]
mov dword [ebp - 0x3c], edx
movss xmm1, dword [ebp - 0x124]
movss xmm0, dword [ebp - 0xf8]
jbe 0x100b969d
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x100b9957
movss xmm2, dword [0x100d92fc]
comiss xmm2, dword [edx + 0x58]
ja 0x100b9957
mov al, byte [ebp - 0x56]
mov ecx, dword [ebp - 0x68]
movzx edi, word [edx + 0x60]
mov edx, dword [ebp - 0x10c]
shr al, 7
shr ecx, 3
and al, 1
and ecx, 0xffffff01
mov byte [ebp - 0xfd], al
mov dword [ebp - 0x12c], ecx
test edx, edx
jne 0x100b96f3
test al, al
jne 0x100b96f3
test cl, cl
jne 0x100b96f3
cmp edi, 0x47
je 0x100b96f3
cmp edi, 0x59
jne 0x100b9957
comiss xmm0, xmm1
jae 0x100b9957
test edx, edx
jle 0x100b9957
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x8c]
call fcn.100b7ed0
add esp, 0xc
test al, al
jne 0x100b974d
mov ecx, dword [0x1016a514]
lea edx, [ebp - 0x30]
push 0
push 0x600400b
push edx
mov eax, dword [ecx]
mov eax, dword [eax]
call eax
test eax, 0x600400b
je 0x100b9957
mov ecx, dword [0x1016a538]
movsx edx, word [ebp - 0xb0]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
movzx edx, word [eax + 0x60]
mov ecx, edx
cmp edi, 0x47
je 0x100b97b5
cmp edi, 0x59
je 0x100b97b5
cmp byte [ebp - 0xfd], 0
jne 0x100b979b
cmp byte [ebp - 0x12c], 0
jne 0x100b979b
movss xmm3, dword [eax + 0x58]
mov eax, dword [ebp - 0x3c]
addss xmm3, dword [eax + 0x58]
mulss xmm3, dword [0x100d9350]
jmp 0x100b97a3
movss xmm3, dword [0x100d9388]
movss xmm7, dword [0x100d9308]
movss xmm0, dword [0x100d93f0]
jmp 0x100b97c8
movss xmm0, dword [0x100d93f0]
movss xmm7, dword [0x100d92f0]
movaps xmm3, xmm0
cmp edi, ecx
jne 0x100b97e8
cmp ecx, 0x55
je 0x100b97e5
cmp ecx, 0x57
je 0x100b97e5
cmp edx, 0x4c
jne 0x100b97e8
movss xmm3, dword [0x100d93d4]
jmp 0x100b97e8
movaps xmm3, xmm0
movss xmm4, dword [ebp - 0xe4]
movss xmm5, dword [ebp - 0xe0]
movaps xmm2, xmm4
subss xmm2, dword [ebp - 0x8c]
movss xmm6, dword [ebp - 0xdc]
movaps xmm0, xmm5
subss xmm0, dword [ebp - 0x88]
movaps xmm1, xmm6
subss xmm1, dword [ebp - 0x84]
mulss xmm2, xmm2
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm2
addss xmm0, xmm1
call fcn.1001c310
movss xmm2, dword [0x100d9388]
divss xmm2, xmm3
mulss xmm7, dword [ebp - 0xfc]
maxss xmm2, dword [ebp - 0xf8]
movss dword [ebp - 0x11c], xmm0
mulss xmm0, xmm0
movaps xmm1, xmm2
mulss xmm2, dword [0x100d92ec]
mulss xmm1, dword [0x100d93f0]
mulss xmm0, xmm2
mulss xmm1, dword [esi]
addss xmm1, xmm7
addss xmm1, xmm0
movss xmm0, dword [ebp - 0xfc]
maxss xmm1, dword [ebp - 0xf8]
subss xmm0, xmm1
movss xmm1, dword [0x100d9388]
comiss xmm1, xmm0
movss dword [ebp - 0xfc], xmm0
ja 0x100b9957
dec dword [ebp - 0x10c]
movss xmm7, dword [ebp - 0x18]
movss xmm3, dword [ebp - 0x1c]
movss xmm2, dword [ebp - 0x20]
mov edi, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x108]
movss dword [ebp - 0x118], xmm4
movss dword [ebp - 0x114], xmm5
movss dword [ebp - 0x110], xmm6
jmp 0x100b9120
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
comiss xmm0, dword [ecx + 0x18]
setae al
jmp 0x100b9959
mov eax, dword [0x1016a7cc]
xor ecx, ecx
mov esi, dword [ebp - 0x140]
add eax, 0xffffff9e
movss xmm1, dword [ebp - 0xfc]
xor eax, 0x44eba2a8
cmp dword [eax + esi], 0x1f
mov eax, dword [ebp - 0x108]
cmove edx, ecx
mov ecx, dword [ebp - 0x4c]
movss xmm2, dword [eax + 0xf0]
call fcn.100b7d70
mov eax, dword [ebp - 0x120]
cmp edi, 4
mov dword [eax], ecx
mov ecx, dword [ebp - 0x104]
mov dword [eax + 8], edx
movss dword [eax + 4], xmm0
jmp 0x100b95df
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100c9ff6
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret