Function at 0x100cbf00
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100ef32e
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x1e8
mov eax, dword [0x10102380]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x120], edx
mov edi, ecx
mov dword [ebp - 0x104], edi
mov eax, dword [0x10209fac]
mov dword [ebp - 0xf4], 0
test al, 1
jne 0x100cbf9c
or eax, 1
mov dword [0x10209fac], eax
mov eax, dword [0x10203e48]
mov dword [0x10209fc0], eax
mov dword [0x10209fc4], 0
mov dword [0x10209fc8], 0
mov dword [0x10209fcc], 0
mov dword [0x10209fd0], 0
push 0x30
xorps xmm0, xmm0
mov dword [ebp - 0x10c], 4
lea eax, [ebp - 0x74]
movss dword [ebp - 0xf8], xmm0
push 0
push eax
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x78], 0
xorps xmm0, xmm0
lea eax, [ebp - 0xcc]
movups xmmword [ebp - 0x98], xmm0
push 0x30
push 0
push eax
movups xmmword [ebp - 0x88], xmm0
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [edi]
xorps xmm0, xmm0
mov eax, dword [0x10203e34]
add esp, 0xc
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xd0], 0
movups xmmword [ebp - 0xe0], xmm0
mov al, byte [ecx + eax]
test al, al
je 0x100cc09c
movss xmm4, dword [0x101bf81c]
movss xmm5, dword [0x101bf820]
movss xmm6, dword [0x101bf824]
mov eax, dword [0x101bfe68]
mov ecx, dword [0x101bfe70]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x108], ecx
movss dword [ebp - 0x118], xmm4
movss dword [ebp - 0x114], xmm5
movss dword [ebp - 0x110], xmm6
jmp 0x100cc2c6
mov eax, dword [0x10203f54]
add eax, 0xffffffa3
xor eax, 0x930bf686
mov eax, dword [eax + ecx]
mov ecx, dword [0x10203c9c]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
mov dword [ebp - 0x140], eax
test eax, eax
je 0x100ccbe6
mov ecx, dword [eax]
mov edx, dword [ecx + 0x6f8]
mov ecx, eax
call edx
mov dword [ebp - 0x108], eax
test eax, eax
je 0x100ccbe6
mov edi, dword [edi]
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
mov ecx, dword [edi]
push eax
mov edx, dword [ecx + 0x28c]
mov ecx, edi
call edx
cmp dword [edi + 0x39e1], 0
je 0x100cc286
mov eax, dword [0x10203e38]
mov edi, dword [edi + eax]
test edi, edi
je 0x100cc286
mov ecx, dword [edi + 0x60]
test ecx, ecx
je 0x100cc286
cmp byte [edi + 0x109], 0
movss xmm1, dword [ebp - 0xf8]
jne 0x100cc19f
mov eax, dword [0x10203ee4]
add eax, 0xffffffbf
xor eax, 0x930bf66a
movss xmm0, dword [eax + ecx]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x100cc19f
mov eax, dword [0x10203f58]
add eax, 0xffffffa2
xor eax, 0x930bf687
mov eax, dword [eax + ecx]
mov ecx, dword [0x10203c9c]
push ecx
mov edx, dword [ecx]
mov esi, dword [edx + 0x10]
mov edx, esp
mov dword [edx], eax
call esi
test eax, eax
jne 0x100cc286
movss xmm1, dword [ebp - 0xf8]
mov ecx, dword [0x10203f4c]
mov eax, dword [edi + 0x60]
add ecx, 0xffffffa5
xor ecx, 0x930bf684
mov eax, dword [ecx + eax]
test eax, eax
je 0x100cc286
movss xmm3, dword [eax + 0x1ac]
movss xmm2, dword [ebp - 0x134]
cvtps2pd xmm3, xmm3
cvtps2pd xmm0, xmm2
addsd xmm3, qword [0x100f5078]
comisd xmm0, xmm3
movsd qword [ebp - 0x130], xmm3
jbe 0x100cc286
subsd xmm0, xmm3
movaps xmm4, xmm1
cvtpd2ps xmm0, xmm0
subss xmm0, dword [0x100f50f4]
cvtps2pd xmm0, xmm0
mulsd xmm0, qword [0x100f5050]
cvtpd2ps xmm0, xmm0
comiss xmm0, xmm1
jb 0x100cc24a
sub esp, 8
mov dword [esp + 4], 0x3f800000
movss dword [esp], xmm0
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fminf]
movss xmm2, dword [ebp - 0x134]
add esp, 8
movsd xmm3, qword [ebp - 0x130]
fstp dword [ebp - 0x124]
movss xmm4, dword [ebp - 0x124]
movaps xmm1, xmm4
mulss xmm1, xmm4
cvtps2pd xmm2, xmm2
movaps xmm0, xmm1
addss xmm1, xmm1
mulss xmm0, dword [0x100f50d8]
subsd xmm3, xmm2
mulss xmm1, xmm4
subss xmm0, xmm1
cvtps2pd xmm0, xmm0
mulsd xmm0, xmm3
addsd xmm0, xmm2
cvtpd2ps xmm0, xmm0
movss dword [ebp - 0x134], xmm0
movq xmm0, qword [ebp - 0x13c]
mov eax, dword [ebp - 0x134]
mov edi, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x108]
movq qword [ebp - 0x118], xmm0
movss xmm5, dword [ebp - 0x114]
movss xmm4, dword [ebp - 0x118]
mov dword [ebp - 0x110], eax
movss xmm6, dword [ebp - 0x110]
movd xmm0, dword [ecx + 0xec]
lea esi, [ebp - 0x168]
movss xmm1, dword [ecx + 0xf8]
lea eax, [ebp - 0x16c]
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x16c], 0
movss xmm2, dword [edi + 8]
movss dword [ebp - 0xfc], xmm0
subss xmm2, xmm4
movss xmm0, dword [0x100f50f0]
divss xmm0, xmm1
movss xmm3, dword [edi + 0xc]
comiss xmm0, dword [ebp - 0xf8]
movss xmm7, dword [edi + 0x10]
subss xmm3, xmm5
movss dword [ebp - 0x168], xmm0
subss xmm7, xmm6
movss dword [ebp - 0x124], xmm1
cmovbe esi, eax
movaps xmm1, xmm2
mulss xmm1, xmm2
movaps xmm0, xmm3
mulss xmm0, xmm3
addss xmm1, xmm0
movaps xmm0, xmm7
mulss xmm0, xmm7
addss xmm0, xmm1
call fcn.10022af0
addss xmm0, dword [0x100f4f18]
mov eax, dword [edi]
mov dword [0x10209fc4], eax
mov dword [0x10209fd0], 0
divss xmm2, xmm0
divss xmm3, xmm0
divss xmm7, xmm0
movss xmm0, dword [ebp - 0xfc]
comiss xmm0, dword [ebp - 0xf8]
movss dword [ebp - 0x20], xmm2
movss dword [ebp - 0x1c], xmm3
movss dword [ebp - 0x18], xmm7
jbe 0x100ccbe6
nop dword [eax]
nop word [eax + eax]
movss xmm0, dword [ecx + 0x104]
subss xmm0, dword [ebp - 0x11c]
mov dword [ebp - 0x1d4], 0
mov byte [ebp - 0x1ab], 1
mulss xmm2, xmm0
mulss xmm3, xmm0
mulss xmm7, xmm0
addss xmm2, xmm4
addss xmm3, xmm5
movss dword [ebp - 0x12c], xmm0
addss xmm7, xmm6
movss dword [ebp - 0x144], xmm2
subss xmm2, xmm4
movaps xmm0, xmm3
movss dword [ebp - 0x34], xmm3
subss xmm0, xmm5
movaps xmm1, xmm7
movss dword [ebp - 0x38], xmm7
movss dword [ebp - 0x1e0], xmm2
subss xmm1, xmm6
mulss xmm2, xmm2
movss dword [ebp - 0x1dc], xmm0
mulss xmm0, xmm0
movss dword [ebp - 0x1d8], xmm1
mulss xmm1, xmm1
addss xmm2, xmm0
addss xmm2, xmm1
ucomiss xmm2, dword [ebp - 0xf8]
lahf
test ah, 0x44
jp 0x100cc455
mov byte [ebp - 0x1ab], 0
mov ecx, dword [0x10203cb4]
lea edx, [ebp - 0x98]
push edx
mov dword [ebp - 0x1b0], 0
lea edx, [ebp - 0x1f0]
mov byte [ebp - 0x1ac], 1
movss dword [ebp - 0x1f0], xmm4
movss dword [ebp - 0x1ec], xmm5
movss dword [ebp - 0x1e8], xmm6
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1c0], 0
mov eax, dword [ecx]
push 0x10209fc0
push 0x4600400b
push edx
mov eax, dword [eax + 0x14]
call eax
mov eax, dword [edi + 4]
test eax, eax
je 0x100cc560
movss xmm1, dword [0x100f5148]
lea edx, [ebp - 0x13c]
movss xmm0, dword [ebp - 0x20]
mulss xmm0, xmm1
push ecx
push eax
lea eax, [ebp - 0x98]
addss xmm0, dword [ebp - 0x144]
push eax
push ecx
lea ecx, [ebp - 0x118]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [ebp - 0x1c]
mulss xmm0, xmm1
addss xmm0, dword [ebp - 0x34]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [ebp - 0x18]
mulss xmm0, xmm1
addss xmm0, dword [ebp - 0x38]
movss dword [ebp - 0x134], xmm0
call fcn.100cbaf0
add esp, 0x10
jmp 0x100cc789
movss xmm3, dword [0x100f5148]
lea eax, [ebp - 0x98]
movss xmm1, dword [ebp - 0x1c]
movss xmm2, dword [ebp - 0x20]
movss xmm0, dword [ebp - 0x18]
mulss xmm1, xmm3
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x17c]
mulss xmm2, xmm3
mov dword [ebp - 0x24], 0xc2700000
addss xmm1, dword [ebp - 0x34]
mulss xmm0, xmm3
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x118]
addss xmm2, dword [ebp - 0x144]
mov dword [ebp - 0x3c], 0x10209fc0
addss xmm0, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
mov eax, dword [0x10209e54]
movss dword [ebp - 0x17c], xmm2
movss dword [ebp - 0x178], xmm1
movss dword [ebp - 0x174], xmm0
test al, 1
jne 0x100cc763
or eax, 1
mov dword [0x10209e54], eax
mov dword [ebp - 4], 0
mov eax, 0x10
movaps xmm0, xmmword [0x100f5330]
xorps xmm0, xmmword [0x100f5ab0]
mov dword [ebp - 0x154], 0x2b3f3a2b
mov dword [ebp - 0x150], 0x3e2b4a33
mov dword [ebp - 0x14c], 0x3c382b3d
mov byte [ebp - 0x148], 0xb
movups xmmword [ebp - 0x164], xmm0
xor byte [ebp + eax - 0x164], 0xb
inc eax
cmp eax, 0x1d
jb 0x100cc631
xorps xmm0, xmm0
mov dword [ebp - 0x184], 0
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x180], 0
movups xmmword [ebp - 0x194], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100cc666
sub ecx, edx
lea eax, [ebp - 0x164]
push ecx
push eax
lea ecx, [ebp - 0x194]
call fcn.1002a5c0
mov byte [ebp - 4], 1
mov eax, dword [0x10203c5c]
test eax, eax
je 0x100cc694
mov edi, dword [eax + 0x50]
jmp 0x100cc696
xor edi, edi
mov eax, dword [0x10203c54]
mov ecx, dword [ebp - 0xf4]
test eax, eax
je 0x100cc6ad
mov edx, dword [eax + 0x18]
or ecx, 4
jmp 0x100cc6b2
or ecx, 8
xor edx, edx
mov eax, ecx
mov dword [ebp - 0xf4], ecx
and ecx, 0xfffffff7
test al, 8
cmove ecx, eax
mov dword [ebp - 0xf4], ecx
and dword [ebp - 0xf4], 0xfffffffb
test cl, 4
mov eax, dword [ebp - 0xf4]
cmove eax, ecx
lea ecx, [ebp - 0x170]
mov dword [ebp - 0xf4], eax
lea eax, [ebp - 0x194]
push eax
push edx
mov edx, edi
call fcn.10022d40
mov eax, dword [ebp - 0x170]
add esp, 8
test eax, eax
je 0x100cc713
mov ecx, dword [eax + 1]
test ecx, ecx
jne 0x100cc70e
xor eax, eax
jmp 0x100cc713
add eax, 5
add eax, ecx
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x180]
mov dword [0x10209e58], eax
cmp ecx, 0xf
jbe 0x100cc756
mov edx, dword [ebp - 0x194]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100cc74c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100ccb7f
push ecx
push edx
call fcn.100e39b1
add esp, 8
mov edi, dword [ebp - 0x104]
mov dword [ebp - 4], 0xffffffff
cmp dword [0x10209e58], 0
je 0x100cc789
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
push dword [ebp - 0x24]
push dword [ebp - 0x40]
push dword [ebp - 0x3c]
push 0x4600400b
call dword [0x10209e58]
add esp, 0x10
movss xmm1, dword [ebp - 0x6c]
ucomiss xmm1, dword [0x100f5020]
lahf
test ah, 0x44
jnp 0x100ccbe6
mulss xmm1, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x108]
addss xmm1, dword [ebp - 0x11c]
movss xmm0, dword [eax + 0x108]
movss dword [ebp - 0x12c], xmm1
mulss xmm1, dword [0x100f4f28]
call sub.api_ms_win_crt_math_l1_1_0.dll___libm_sse2_powf
mulss xmm0, dword [ebp - 0xfc]
mov ecx, dword [edi + 4]
movss dword [ebp - 0xfc], xmm0
test ecx, ecx
je 0x100cc880
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x100cc8dd
cmp eax, ecx
jne 0x100cc8dd
mov edx, dword [ebp - 0x54]
cmp edx, 1
jl 0x100cc80d
cmp edx, 7
jle 0x100cc816
cmp edx, 0xa
jne 0x100cc8dd
mov eax, dword [0x10203f6c]
xor edi, edi
mov esi, dword [ebp - 0x140]
add eax, 0xffffff9d
xor eax, 0x930bf68c
movaps xmm1, xmm0
cmp dword [eax + esi], 0x1f
mov eax, dword [ebp - 0x108]
cmove edx, edi
movss xmm2, dword [eax + 0xf0]
call fcn.100cb000
mov esi, dword [ebp - 0x120]
cmp dword [ebp - 0x10c], 4
mov ecx, dword [ebp - 0x104]
setne al
mov byte [esi + 0xc], al
mov dword [esi + 8], edx
movss dword [esi + 4], xmm0
mov eax, dword [ecx + 4]
mov dword [esi], eax
jne 0x100ccb85
comiss xmm0, dword [ecx + 0x14]
setae al
jmp 0x100ccbe8
mov edi, dword [ebp - 0x10c]
cmp edi, 4
mov ecx, dword [ebp - 0x120]
setne al
mov byte [ecx + 0xc], al
mov ecx, dword [ebp - 0x4c]
test ecx, ecx
je 0x100cc8cc
mov eax, dword [ecx]
mov eax, dword [eax + 0x260]
call eax
test al, al
je 0x100cc8c4
mov edx, dword [ebp - 0x54]
cmp edx, 1
jl 0x100cc8bb
cmp edx, 7
jle 0x100ccb8e
cmp edx, 0xa
je 0x100ccb8e
movss xmm0, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x120]
mov edi, dword [ebp - 0x104]
movss dword [eax + 4], xmm0
cmp byte [edi + 0x1c], 0
je 0x100ccbe6
mov ecx, dword [0x10203cd8]
movsx edx, word [ebp - 0x58]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
movss xmm0, dword [ebp - 0x12c]
mov edx, eax
comiss xmm0, dword [0x100f5228]
mov dword [ebp - 0x3c], edx
movss xmm1, dword [ebp - 0x124]
movss xmm0, dword [ebp - 0xf8]
jbe 0x100cc92c
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jp 0x100ccbe6
movss xmm2, dword [0x100f4f70]
comiss xmm2, dword [edx + 0x58]
ja 0x100ccbe6
mov al, byte [ebp - 0x56]
mov ecx, dword [ebp - 0x68]
movzx edi, word [edx + 0x60]
mov edx, dword [ebp - 0x10c]
shr al, 7
shr ecx, 3
and al, 1
and ecx, 0xffffff01
mov byte [ebp - 0xfd], al
mov dword [ebp - 0x12c], ecx
test edx, edx
jne 0x100cc982
test al, al
jne 0x100cc982
test cl, cl
jne 0x100cc982
cmp edi, 0x47
je 0x100cc982
cmp edi, 0x59
jne 0x100ccbe6
comiss xmm0, xmm1
jae 0x100ccbe6
test edx, edx
jle 0x100ccbe6
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x8c]
call fcn.100cb160
add esp, 0xc
test al, al
jne 0x100cc9dc
mov ecx, dword [0x10203cb4]
lea edx, [ebp - 0x30]
push 0
push 0x600400b
push edx
mov eax, dword [ecx]
mov eax, dword [eax]
call eax
test eax, 0x600400b
je 0x100ccbe6
mov ecx, dword [0x10203cd8]
movsx edx, word [ebp - 0xb0]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
call eax
movzx edx, word [eax + 0x60]
mov ecx, edx
cmp edi, 0x47
je 0x100cca44
cmp edi, 0x59
je 0x100cca44
cmp byte [ebp - 0xfd], 0
jne 0x100cca2a
cmp byte [ebp - 0x12c], 0
jne 0x100cca2a
movss xmm3, dword [eax + 0x58]
mov eax, dword [ebp - 0x3c]
addss xmm3, dword [eax + 0x58]
mulss xmm3, dword [0x100f4fe0]
jmp 0x100cca32
movss xmm3, dword [0x100f5020]
movss xmm7, dword [0x100f4f88]
movss xmm0, dword [0x100f50d8]
jmp 0x100cca57
movss xmm0, dword [0x100f50d8]
movss xmm7, dword [0x100f4f5c]
movaps xmm3, xmm0
cmp edi, ecx
jne 0x100cca77
cmp ecx, 0x55
je 0x100cca74
cmp ecx, 0x57
je 0x100cca74
cmp edx, 0x4c
jne 0x100cca77
movss xmm3, dword [0x100f5084]
jmp 0x100cca77
movaps xmm3, xmm0
movss xmm4, dword [ebp - 0xe4]
movss xmm5, dword [ebp - 0xe0]
movaps xmm2, xmm4
subss xmm2, dword [ebp - 0x8c]
movss xmm6, dword [ebp - 0xdc]
movaps xmm0, xmm5
subss xmm0, dword [ebp - 0x88]
movaps xmm1, xmm6
subss xmm1, dword [ebp - 0x84]
mulss xmm2, xmm2
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm2
addss xmm0, xmm1
call fcn.10022af0
movss xmm2, dword [0x100f5020]
divss xmm2, xmm3
mulss xmm7, dword [ebp - 0xfc]
maxss xmm2, dword [ebp - 0xf8]
movss dword [ebp - 0x11c], xmm0
mulss xmm0, xmm0
movaps xmm1, xmm2
mulss xmm2, dword [0x100f4f58]
mulss xmm1, dword [0x100f50d8]
mulss xmm0, xmm2
mulss xmm1, dword [esi]
addss xmm1, xmm7
addss xmm1, xmm0
movss xmm0, dword [ebp - 0xfc]
maxss xmm1, dword [ebp - 0xf8]
subss xmm0, xmm1
movss xmm1, dword [0x100f5020]
comiss xmm1, xmm0
movss dword [ebp - 0xfc], xmm0
ja 0x100ccbe6
dec dword [ebp - 0x10c]
movss xmm7, dword [ebp - 0x18]
movss xmm3, dword [ebp - 0x1c]
movss xmm2, dword [ebp - 0x20]
mov edi, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x108]
movss dword [ebp - 0x118], xmm4
movss dword [ebp - 0x114], xmm5
movss dword [ebp - 0x110], xmm6
jmp 0x100cc3b0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
comiss xmm0, dword [ecx + 0x18]
setae al
jmp 0x100ccbe8
mov eax, dword [0x10203f6c]
xor ecx, ecx
mov esi, dword [ebp - 0x140]
add eax, 0xffffff9d
movss xmm1, dword [ebp - 0xfc]
xor eax, 0x930bf68c
cmp dword [eax + esi], 0x1f
mov eax, dword [ebp - 0x108]
cmove edx, ecx
mov ecx, dword [ebp - 0x4c]
movss xmm2, dword [eax + 0xf0]
call fcn.100cb000
mov eax, dword [ebp - 0x120]
cmp edi, 4
mov dword [eax], ecx
mov ecx, dword [ebp - 0x104]
mov dword [eax + 8], edx
movss dword [eax + 4], xmm0
jmp 0x100cc86e
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100e3536
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret