Function at 0x41dd1b
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov edx, dword [ecx + 8]
push ebx
push esi
mov esi, dword [ecx + 0x14]
push edi
mov edi, dword [ecx + 0x10]
mov dword [ebp - 0x10], edx
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], edi
mov dword [ebp - 8], esi
mov dword [ebp - 0x1c], edx
xor edx, edx
mov dh, byte [eax + 3]
mov ebx, dword [ebp - 0x10]
mov dword [ebp - 0x18], ebx
movzx ebx, byte [eax + 1]
mov dword [ebp - 0x24], esi
mov dl, byte [eax + 2]
mov dword [ebp - 0x20], edi
shl edx, 8
or edx, ebx
shl edx, 8
movzx ebx, byte [eax]
or edx, ebx
mov dword [ecx + 0x58], edx
mov dword [ebp - 0x14], edx
movzx ebx, byte [eax + 5]
mov edx, esi
xor edx, edi
and edx, dword [ebp - 0xc]
xor edx, esi
add edx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x10]
lea esi, [edx + esi - 0x28955b88]
xor edx, edx
mov dh, byte [eax + 7]
rol esi, 7
add esi, dword [ebp - 0xc]
mov dl, byte [eax + 6]
shl edx, 8
or edx, ebx
movzx ebx, byte [eax + 4]
shl edx, 8
or edx, ebx
mov dword [ecx + 0x5c], edx
mov dword [ebp - 0x14], edx
movzx ebx, byte [eax + 9]
mov edx, edi
xor edx, dword [ebp - 0xc]
and edx, esi
xor edx, edi
add edx, dword [ebp - 0x14]
mov edi, dword [ebp - 8]
lea edi, [edx + edi - 0x173848aa]
xor edx, edx
mov dh, byte [eax + 0xb]
rol edi, 0xc
add edi, esi
mov dl, byte [eax + 0xa]
shl edx, 8
or edx, ebx
movzx ebx, byte [eax + 8]
shl edx, 8
or edx, ebx
mov ebx, dword [ebp - 4]
mov dword [ecx + 0x60], edx
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0xc]
xor edx, esi
and edx, edi
xor edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x14]
lea edx, [edx + ebx + 0x242070db]
movzx ebx, byte [eax + 0xd]
ror edx, 0xf
add edx, edi
mov dword [ebp - 4], edx
xor edx, edx
mov dh, byte [eax + 0xf]
mov dl, byte [eax + 0xe]
shl edx, 8
or edx, ebx
movzx ebx, byte [eax + 0xc]
shl edx, 8
or edx, ebx
mov dword [ebp - 0x14], edx
mov dword [ecx + 0x64], edx
mov edx, edi
xor edx, esi
and edx, dword [ebp - 4]
xor edx, esi
add edx, dword [ebp - 0x14]
mov ebx, dword [ebp - 0xc]
lea edx, [edx + ebx - 0x3e423112]
ror edx, 0xa
add edx, dword [ebp - 4]
movzx ebx, byte [eax + 0x11]
mov dword [ebp - 0xc], edx
xor edx, edx
mov dh, byte [eax + 0x13]
mov dl, byte [eax + 0x12]
shl edx, 8
or edx, ebx
shl edx, 8
movzx ebx, byte [eax + 0x10]
or edx, ebx
mov dword [ecx + 0x68], edx
mov dword [ebp - 0x14], edx
movzx ebx, byte [eax + 0x15]
mov edx, edi
xor edx, dword [ebp - 4]
and edx, dword [ebp - 0xc]
xor edx, edi
add edx, dword [ebp - 0x14]
lea esi, [edx + esi - 0xa83f051]
xor edx, edx
mov dh, byte [eax + 0x17]
rol esi, 7
add esi, dword [ebp - 0xc]
mov dl, byte [eax + 0x16]
shl edx, 8
or edx, ebx
movzx ebx, byte [eax + 0x14]
shl edx, 8
or edx, ebx
mov dword [ecx + 0x6c], edx
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 4]
xor edx, dword [ebp - 0xc]
movzx ebx, byte [eax + 0x19]
and edx, esi
xor edx, dword [ebp - 4]
add edx, dword [ebp - 0x14]
lea edi, [edx + edi + 0x4787c62a]
xor edx, edx
mov dh, byte [eax + 0x1b]
rol edi, 0xc
add edi, esi
mov dl, byte [eax + 0x1a]
shl edx, 8
or edx, ebx
movzx ebx, byte [eax + 0x18]
shl edx, 8
or edx, ebx
mov ebx, dword [ebp - 4]
mov dword [ecx + 0x70], edx
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0xc]
xor edx, esi
and edx, edi
xor edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x14]
lea edx, [edx + ebx - 0x57cfb9ed]
movzx ebx, byte [eax + 0x1d]
ror edx, 0xf
add edx, edi
mov dword [ebp - 4], edx
xor edx, edx
mov dh, byte [eax + 0x1f]
mov dl, byte [eax + 0x1e]
shl edx, 8
or edx, ebx
movzx ebx, byte [eax + 0x1c]
shl edx, 8
or edx, ebx
mov dword [ebp - 0x14], edx
mov dword [ecx + 0x74], edx
mov edx, edi
xor edx, esi
and edx, dword [ebp - 4]
xor edx, esi
add edx, dword [ebp - 0x14]
mov ebx, dword [ebp - 0xc]
lea edx, [edx + ebx - 0x2b96aff]
ror edx, 0xa
add edx, dword [ebp - 4]
movzx ebx, byte [eax + 0x21]
mov dword [ebp - 0xc], edx
xor edx, edx
mov dh, byte [eax + 0x23]
mov dl, byte [eax + 0x22]
shl edx, 8
or edx, ebx
shl edx, 8
movzx ebx, byte [eax + 0x20]
or edx, ebx
mov dword [ecx + 0x78], edx
mov dword [ebp - 0x14], edx
movzx ebx, byte [eax + 0x25]
mov edx, edi
xor edx, dword [ebp - 4]
and edx, dword [ebp - 0xc]
xor edx, edi
add edx, dword [ebp - 0x14]
lea esi, [edx + esi + 0x698098d8]
xor edx, edx
mov dh, byte [eax + 0x27]
rol esi, 7
add esi, dword [ebp - 0xc]
mov dl, byte [eax + 0x26]
shl edx, 8
or edx, ebx
movzx ebx, byte [eax + 0x24]
shl edx, 8
or edx, ebx
mov dword [ecx + 0x7c], edx
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 4]
xor edx, dword [ebp - 0xc]
movzx ebx, byte [eax + 0x29]
and edx, esi
xor edx, dword [ebp - 4]
add edx, dword [ebp - 0x14]
lea edi, [edx + edi - 0x74bb0851]
xor edx, edx
mov dh, byte [eax + 0x2b]
rol edi, 0xc
add edi, esi
mov dl, byte [eax + 0x2a]
shl edx, 8
or edx, ebx
movzx ebx, byte [eax + 0x28]
shl edx, 8
or edx, ebx
mov ebx, dword [ebp - 4]
mov dword [ecx + 0x80], edx
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0xc]
xor edx, esi
and edx, edi
xor edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x14]
lea edx, [edx + ebx - 0xa44f]
movzx ebx, byte [eax + 0x2d]
ror edx, 0xf
add edx, edi
mov dword [ebp - 4], edx
xor edx, edx
mov dh, byte [eax + 0x2f]
mov dl, byte [eax + 0x2e]
shl edx, 8
or edx, ebx
movzx ebx, byte [eax + 0x2c]
shl edx, 8
or edx, ebx
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x14], edx
mov dword [ecx + 0x84], edx
mov edx, edi
xor edx, esi
and edx, dword [ebp - 4]
xor edx, esi
add edx, dword [ebp - 0x14]
lea edx, [edx + ebx - 0x76a32842]
ror edx, 0xa
add edx, dword [ebp - 4]
movzx ebx, byte [eax + 0x31]
mov dword [ebp - 0xc], edx
xor edx, edx
mov dh, byte [eax + 0x33]
mov dl, byte [eax + 0x32]
shl edx, 8
or edx, ebx
movzx ebx, byte [eax + 0x30]
shl edx, 8
or edx, ebx
mov dword [ecx + 0x88], edx
mov dword [ebp - 0x14], edx
mov edx, edi
xor edx, dword [ebp - 4]
movzx ebx, byte [eax + 0x35]
and edx, dword [ebp - 0xc]
xor edx, edi
add edx, dword [ebp - 0x14]
lea esi, [edx + esi + 0x6b901122]
xor edx, edx
mov dh, byte [eax + 0x37]
rol esi, 7
add esi, dword [ebp - 0xc]
mov dl, byte [eax + 0x36]
shl edx, 8
or edx, ebx
movzx ebx, byte [eax + 0x34]
shl edx, 8
or edx, ebx
mov dword [ecx + 0x8c], edx
xor ebx, ebx
mov bh, byte [eax + 0x3b]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 4]
xor edx, dword [ebp - 0xc]
and edx, esi
xor edx, dword [ebp - 4]
mov bl, byte [eax + 0x3a]
add edx, dword [ebp - 0x14]
lea edx, [edx + edi - 0x2678e6d]
movzx edi, byte [eax + 0x39]
shl ebx, 8
or ebx, edi
movzx edi, byte [eax + 0x38]
shl ebx, 8
mov dword [ebp - 0x14], edi
mov edi, ebx
mov ebx, dword [ebp - 0x14]
or edi, ebx
mov ebx, dword [ebp - 0xc]
rol edx, 0xc
add edx, esi
xor ebx, esi
and ebx, edx
xor ebx, dword [ebp - 0xc]
mov dword [ecx + 0x90], edi
add ebx, edi
mov edi, dword [ebp - 4]
lea edi, [ebx + edi - 0x5986bc72]
movzx ebx, byte [eax + 0x3d]
mov dword [ebp - 8], edx
ror edi, 0xf
add edi, edx
xor edx, edx
mov dh, byte [eax + 0x3f]
mov dl, byte [eax + 0x3e]
shl edx, 8
or edx, ebx
movzx ebx, byte [eax + 0x3c]
shl edx, 8
or edx, ebx
mov ebx, dword [ebp - 8]
xor ebx, esi
and ebx, edi
xor ebx, esi
mov dword [ebp - 0x14], edx
mov dword [ecx + 0x94], edx
add ebx, edx
mov edx, dword [ebp - 0xc]
lea edx, [ebx + edx + 0x49b40821]
ror edx, 0xa
add edx, edi
mov dword [ebp - 0xc], edx
mov ebx, edi
xor ebx, edx
and ebx, dword [ebp - 8]
xor ebx, edi
add ebx, dword [ecx + 0x5c]
lea esi, [ebx + esi - 0x9e1da9e]
mov ebx, dword [ebp - 8]
rol esi, 5
add esi, edx
xor edx, esi
and edx, edi
xor edx, dword [ebp - 0xc]
add edx, dword [ecx + 0x70]
lea edx, [edx + ebx - 0x3fbf4cc0]
rol edx, 9
add edx, esi
mov dword [ebp - 8], edx
xor edx, esi
and edx, dword [ebp - 0xc]
mov ebx, dword [ebp - 0xc]
xor edx, esi
add edx, dword [ecx + 0x84]
lea edi, [edx + edi + 0x265e5a51]
mov edx, dword [ebp - 8]
rol edi, 0xe
add edi, dword [ebp - 8]
xor edx, edi
and edx, esi
xor edx, dword [ebp - 8]
add edx, dword [ecx + 0x58]
lea edx, [edx + ebx - 0x16493856]
ror edx, 0xc
add edx, edi
mov dword [ebp - 0xc], edx
mov ebx, edi
xor ebx, edx
and ebx, dword [ebp - 8]
xor ebx, edi
add ebx, dword [ecx + 0x6c]
lea esi, [ebx + esi - 0x29d0efa3]
mov ebx, dword [ebp - 8]
rol esi, 5
add esi, edx
xor edx, esi
and edx, edi
xor edx, dword [ebp - 0xc]
add edx, dword [ecx + 0x80]
lea edx, [edx + ebx + 0x2441453]
rol edx, 9
add edx, esi
mov dword [ebp - 8], edx
xor edx, esi
and edx, dword [ebp - 0xc]
mov ebx, dword [ebp - 0xc]
xor edx, esi
add edx, dword [ebp - 0x14]
lea edi, [edx + edi - 0x275e197f]
mov edx, dword [ebp - 8]
rol edi, 0xe
add edi, dword [ebp - 8]
xor edx, edi
and edx, esi
xor edx, dword [ebp - 8]
add edx, dword [ecx + 0x68]
lea edx, [edx + ebx - 0x182c0438]
ror edx, 0xc
add edx, edi
mov ebx, edi
xor ebx, edx
and ebx, dword [ebp - 8]
mov dword [ebp - 0xc], edx
xor ebx, edi
add ebx, dword [ecx + 0x7c]
lea esi, [ebx + esi + 0x21e1cde6]
rol esi, 5
add esi, edx
xor edx, esi
and edx, edi
xor edx, dword [ebp - 0xc]
mov ebx, dword [ebp - 8]
add edx, dword [ecx + 0x90]
lea edx, [edx + ebx - 0x3cc8f82a]
rol edx, 9
add edx, esi
mov dword [ebp - 8], edx
xor edx, esi
and edx, dword [ebp - 0xc]
mov ebx, dword [ebp - 0xc]
xor edx, esi
add edx, dword [ecx + 0x64]
lea edi, [edx + edi - 0xb2af279]
mov edx, dword [ebp - 8]
rol edi, 0xe
add edi, dword [ebp - 8]
xor edx, edi
and edx, esi
xor edx, dword [ebp - 8]
add edx, dword [ecx + 0x78]
lea edx, [edx + ebx + 0x455a14ed]
ror edx, 0xc
add edx, edi
mov ebx, edi
xor ebx, edx
and ebx, dword [ebp - 8]
mov dword [ebp - 0xc], edx
xor ebx, edi
add ebx, dword [ecx + 0x8c]
lea esi, [ebx + esi - 0x561c16fb]
mov ebx, dword [ebp - 8]
rol esi, 5
add esi, edx
xor edx, esi
and edx, edi
xor edx, dword [ebp - 0xc]
add edx, dword [ecx + 0x60]
lea edx, [edx + ebx - 0x3105c08]
rol edx, 9
add edx, esi
mov dword [ebp - 8], edx
mov ebx, dword [ebp - 8]
xor edx, esi
and edx, dword [ebp - 0xc]
xor edx, esi
add edx, dword [ecx + 0x74]
lea edi, [edx + edi + 0x676f02d9]
mov edx, dword [ecx + 0x88]
rol edi, 0xe
add edi, dword [ebp - 8]
xor ebx, edi
mov dword [ebp - 0x10], ebx
and ebx, esi
xor ebx, dword [ebp - 8]
mov dword [ebp - 4], edi
add ebx, edx
mov edx, dword [ebp - 0xc]
lea edx, [ebx + edx - 0x72d5b376]
mov ebx, dword [ebp - 8]
ror edx, 0xc
add edx, edi
mov edi, dword [ebp - 0x10]
xor edi, edx
add edi, dword [ecx + 0x6c]
lea esi, [edi + esi - 0x5c6be]
mov edi, dword [ebp - 4]
xor edi, edx
rol esi, 4
add esi, edx
xor edi, esi
add edi, dword [ecx + 0x78]
lea edi, [edi + ebx - 0x788e097f]
mov ebx, dword [ebp - 4]
rol edi, 0xb
add edi, esi
mov dword [ebp - 8], edi
xor edi, edx
xor edi, esi
add edi, dword [ecx + 0x84]
lea edi, [edi + ebx + 0x6d9d6122]
rol edi, 0x10
add edi, dword [ebp - 8]
mov ebx, dword [ebp - 8]
xor ebx, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], ebx
xor ebx, esi
add ebx, dword [ecx + 0x90]
lea edx, [ebx + edx - 0x21ac7f4]
mov ebx, dword [ebp - 8]
ror edx, 9
add edx, edi
mov edi, dword [ebp - 0x10]
xor edi, edx
add edi, dword [ecx + 0x5c]
lea esi, [edi + esi - 0x5b4115bc]
mov edi, dword [ebp - 4]
xor edi, edx
rol esi, 4
add esi, edx
xor edi, esi
add edi, dword [ecx + 0x68]
lea edi, [edi + ebx + 0x4bdecfa9]
rol edi, 0xb
add edi, esi
mov ebx, dword [ebp - 4]
mov dword [ebp - 8], edi
xor edi, edx
xor edi, esi
add edi, dword [ecx + 0x74]
lea edi, [edi + ebx - 0x944b4a0]
mov ebx, dword [ebp - 8]
rol edi, 0x10
add edi, dword [ebp - 8]
xor ebx, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], ebx
xor ebx, esi
add ebx, dword [ecx + 0x80]
lea edx, [ebx + edx - 0x41404390]
mov ebx, dword [ebp - 8]
ror edx, 9
add edx, edi
mov edi, dword [ebp - 0x10]
xor edi, edx
add edi, dword [ecx + 0x8c]
lea esi, [edi + esi + 0x289b7ec6]
mov edi, dword [ebp - 4]
xor edi, edx
rol esi, 4
add esi, edx
xor edi, esi
add edi, dword [ecx + 0x58]
lea edi, [edi + ebx - 0x155ed806]
mov ebx, dword [ebp - 4]
rol edi, 0xb
add edi, esi
mov dword [ebp - 8], edi
xor edi, edx
xor edi, esi
add edi, dword [ecx + 0x64]
lea edi, [edi + ebx - 0x2b10cf7b]
mov ebx, dword [ebp - 8]
rol edi, 0x10
add edi, dword [ebp - 8]
xor ebx, edi
mov dword [ebp - 0x10], ebx
xor ebx, esi
add ebx, dword [ecx + 0x70]
mov dword [ebp - 4], edi
lea edx, [ebx + edx + 0x4881d05]
ror edx, 9
add edx, edi
mov edi, dword [ebp - 0x10]
xor edi, edx
add edi, dword [ecx + 0x7c]
lea esi, [edi + esi - 0x262b2fc7]
mov edi, dword [ebp - 4]
rol esi, 4
add esi, edx
xor edi, edx
mov ebx, dword [ebp - 8]
xor edi, esi
add edi, dword [ecx + 0x88]
lea edi, [edi + ebx - 0x1924661b]
mov ebx, dword [ebp - 4]
rol edi, 0xb
add edi, esi
mov dword [ebp - 8], edi
xor edi, edx
xor edi, esi
add edi, dword [ebp - 0x14]
lea edi, [edi + ebx + 0x1fa27cf8]
mov ebx, dword [ebp - 8]
rol edi, 0x10
add edi, dword [ebp - 8]
xor ebx, edi
xor ebx, esi
add ebx, dword [ecx + 0x60]
mov dword [ebp - 4], edi
lea edx, [ebx + edx - 0x3b53a99b]
ror edx, 9
add edx, edi
mov edi, dword [ebp - 8]
mov ebx, edi
not ebx
or ebx, edx
xor ebx, dword [ebp - 4]
add ebx, dword [ecx + 0x58]
lea esi, [ebx + esi - 0xbd6ddbc]
mov ebx, dword [ebp - 4]
not ebx
rol esi, 6
add esi, edx
or ebx, esi
xor ebx, edx
add ebx, dword [ecx + 0x74]
lea edi, [ebx + edi + 0x432aff97]
rol edi, 0xa
add edi, esi
mov ebx, edx
not ebx
or ebx, edi
xor ebx, esi
add ebx, dword [ecx + 0x90]
mov dword [ebp - 8], edi
mov edi, dword [ebp - 4]
lea edi, [ebx + edi - 0x546bdc59]
rol edi, 0xf
add edi, dword [ebp - 8]
mov ebx, esi
not ebx
or ebx, edi
mov dword [ebp - 4], edi
mov edi, dword [ebp - 8]
xor ebx, edi
add ebx, dword [ecx + 0x6c]
lea edx, [ebx + edx - 0x36c5fc7]
ror edx, 0xb
add edx, dword [ebp - 4]
mov ebx, edi
not ebx
or ebx, edx
xor ebx, dword [ebp - 4]
add ebx, dword [ecx + 0x88]
lea esi, [ebx + esi + 0x655b59c3]
mov ebx, dword [ebp - 4]
not ebx
rol esi, 6
add esi, edx
or ebx, esi
xor ebx, edx
add ebx, dword [ecx + 0x64]
lea edi, [ebx + edi - 0x70f3336e]
rol edi, 0xa
add edi, esi
mov ebx, edx
not ebx
or ebx, edi
mov dword [ebp - 8], edi
xor ebx, esi
add ebx, dword [ecx + 0x80]
mov edi, dword [ebp - 4]
lea edi, [ebx + edi - 0x100b83]
rol edi, 0xf
add edi, dword [ebp - 8]
mov ebx, esi
not ebx
or ebx, edi
mov dword [ebp - 4], edi
mov edi, dword [ebp - 8]
xor ebx, edi
add ebx, dword [ecx + 0x5c]
lea edx, [ebx + edx - 0x7a7ba22f]
mov ebx, edi
not ebx
ror edx, 0xb
add edx, dword [ebp - 4]
or ebx, edx
xor ebx, dword [ebp - 4]
add ebx, dword [ecx + 0x78]
lea esi, [ebx + esi + 0x6fa87e4f]
mov ebx, dword [ebp - 4]
not ebx
rol esi, 6
add esi, edx
or ebx, esi
xor ebx, edx
add ebx, dword [ebp - 0x14]
lea edi, [ebx + edi - 0x1d31920]
rol edi, 0xa
add edi, esi
mov dword [ebp - 8], edi
mov ebx, edx
not ebx
or ebx, edi
mov edi, dword [ebp - 4]
xor ebx, esi
add ebx, dword [ecx + 0x70]
lea edi, [ebx + edi - 0x5cfebcec]
rol edi, 0xf
add edi, dword [ebp - 8]
mov ebx, esi
not ebx
or ebx, edi
mov dword [ebp - 4], edi
mov edi, dword [ebp - 8]
xor ebx, edi
add ebx, dword [ecx + 0x8c]
lea edx, [ebx + edx + 0x4e0811a1]
mov ebx, edi
not ebx
ror edx, 0xb
add edx, dword [ebp - 4]
or ebx, edx
xor ebx, dword [ebp - 4]
add ebx, dword [ecx + 0x68]
lea ebx, [ebx + esi - 0x8ac817e]
mov esi, dword [ebp - 4]
rol ebx, 6
add ebx, edx
not esi
or esi, ebx
xor esi, edx
add esi, dword [ecx + 0x84]
mov dword [ebp - 0x10], ebx
lea esi, [esi + edi - 0x42c50dcb]
rol esi, 0xa
add esi, ebx
mov edi, edx
not edi
or edi, esi
xor edi, ebx
add edi, dword [ecx + 0x60]
mov ebx, dword [ebp - 4]
lea edi, [edi + ebx + 0x2ad7d2bb]
mov ebx, dword [ebp - 0x10]
rol edi, 0xf
add edi, esi
not ebx
or ebx, edi
xor ebx, esi
add ebx, dword [ecx + 0x7c]
add esi, dword [ebp - 0x24]
lea edx, [ebx + edx - 0x14792c6f]
mov ebx, dword [ebp - 0x18]
add dword [ebp - 0x10], ebx
ror edx, 0xb
add edx, edi
add edx, dword [ebp - 0x1c]
add edi, dword [ebp - 0x20]
add eax, 0x40
sub dword [ebp + 8], 0x40
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], edi
mov dword [ebp - 8], esi
jne 0x41dd3c
mov ebx, dword [ebp - 0x10]
mov dword [ecx + 0x10], edi
pop edi
mov dword [ecx + 0x14], esi
pop esi
mov dword [ecx + 8], ebx
mov dword [ecx + 0xc], edx
pop ebx
leave
ret