Function at 0x46265f
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x7c3d21
call fcn.007a83c4
sub esp, 0xe4
push ebx
push esi
push edi
mov dword [ebp - 0x1c], ecx
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], edi
cmp dword [ecx + 0x50], edi
mov byte [ebp - 4], 3
jne 0x462a1a
push 0x4fb
lea eax, [ebp - 0x14]
mov esi, 0x885138
push eax
mov ecx, esi
call fcn.006144e8
cmp dword [ebp + 0x20], edi
push 0x20
mov byte [ebp - 4], 4
pop eax
je 0x4626f6
push 0x3d7
lea eax, [ebp + 0x1c]
push eax
mov ecx, esi
call fcn.006144e8
mov ecx, dword [eax]
cmp ecx, edi
mov byte [ebp - 4], 5
je 0x4626cc
mov eax, dword [ecx - 4]
shr eax, 1
jmp 0x4626ce
xor eax, eax
push eax
push ecx
lea ecx, [ebp - 0x14]
call fcn.00465c67
mov eax, dword [ebp + 0x1c]
mov byte [ebp - 4], 4
cmp eax, edi
je 0x46290e
add eax, 0xfffffff4
push eax
call fcn.00403211
pop ecx
jmp 0x46290e
mov ecx, dword [ebp + 0x18]
sub ecx, 0x3e8
je 0x4628e7
dec ecx
je 0x4628ae
dec ecx
je 0x4627e4
dec ecx
jne 0x46290e
call fcn.007a88c0
mov ebx, esp
push 0xffffffffffffffff
push 0x870be0
lea ecx, [ebp + 0x20]
mov dword [ebp + 0x20], edi
call fcn.0046645d
push 0x4ff
lea eax, [ebp - 0x48]
push eax
mov ecx, esi
mov byte [ebp - 4], 0xb
call fcn.006144e8
lea ecx, [ebp + 0x20]
push ecx
lea ecx, [ebp - 0x7c]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.00465a10
mov dword [ebp - 0x30], eax
push 0xa
push ebx
push dword [ebp + 0x1c]
mov byte [ebp - 4], 0xd
call fcn.007a896a
mov ecx, dword [ebp - 0x30]
add esp, 0xc
push eax
lea eax, [ebp - 0x80]
push eax
call fcn.004659e6
mov eax, dword [eax]
cmp eax, edi
mov byte [ebp - 4], 0xe
je 0x46278d
mov ecx, dword [eax - 4]
shr ecx, 1
jmp 0x46278f
xor ecx, ecx
push ecx
push eax
lea ecx, [ebp - 0x14]
call fcn.00465c67
mov eax, dword [ebp - 0x80]
cmp eax, edi
mov byte [ebp - 4], 0xd
je 0x4627ae
add eax, 0xfffffff4
push eax
call fcn.00403211
pop ecx
mov eax, dword [ebp - 0x7c]
cmp eax, edi
mov byte [ebp - 4], 0xc
je 0x4627c3
add eax, 0xfffffff4
push eax
call fcn.00403211
pop ecx
mov eax, dword [ebp - 0x48]
cmp eax, edi
mov byte [ebp - 4], 0xb
je 0x4627d8
add eax, 0xfffffff4
push eax
call fcn.00403211
pop ecx
mov eax, dword [ebp + 0x20]
mov byte [ebp - 4], 4
jmp 0x4626df
call fcn.007a88c0
mov ebx, esp
push 0xffffffffffffffff
push 0x870be0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], edi
call fcn.0046645d
push 0x4fe
lea eax, [ebp - 0x24]
push eax
mov ecx, esi
mov byte [ebp - 4], 7
call fcn.006144e8
lea ecx, [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.00465a10
mov dword [ebp - 0x30], eax
push 0xa
push ebx
push dword [ebp + 0x1c]
mov byte [ebp - 4], 9
call fcn.007a896a
mov ecx, dword [ebp - 0x30]
add esp, 0xc
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004659e6
mov eax, dword [eax]
cmp eax, edi
mov byte [ebp - 4], 0xa
je 0x462857
mov ecx, dword [eax - 4]
shr ecx, 1
jmp 0x462859
xor ecx, ecx
push ecx
push eax
lea ecx, [ebp - 0x14]
call fcn.00465c67
mov eax, dword [ebp - 0x20]
cmp eax, edi
mov byte [ebp - 4], 9
je 0x462878
add eax, 0xfffffff4
push eax
call fcn.00403211
pop ecx
mov eax, dword [ebp - 0x2c]
cmp eax, edi
mov byte [ebp - 4], 8
je 0x46288d
add eax, 0xfffffff4
push eax
call fcn.00403211
pop ecx
mov eax, dword [ebp - 0x24]
cmp eax, edi
mov byte [ebp - 4], 7
je 0x4628a2
add eax, 0xfffffff4
push eax
call fcn.00403211
pop ecx
mov eax, dword [ebp - 0x34]
mov byte [ebp - 4], 4
jmp 0x4626df
push 0x4fd
lea eax, [ebp - 0x28]
push eax
mov ecx, esi
call fcn.006144e8
mov ecx, dword [eax]
cmp ecx, edi
mov byte [ebp - 4], 6
je 0x4628cf
mov eax, dword [ecx - 4]
shr eax, 1
jmp 0x4628d1
xor eax, eax
push eax
push ecx
lea ecx, [ebp - 0x14]
call fcn.00465c67
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 4
jmp 0x4626df
call fcn.007a88c0
mov eax, esp
push 0xa
push eax
push dword [ebp + 0x1c]
call fcn.007a896a
mov ebx, eax
push ebx
call fcn.007a8807
add esp, 0x10
push eax
push ebx
lea ecx, [ebp - 0x14]
call fcn.00465c67
mov ebx, 0x889398
push ebx
lea ecx, [ebp - 0xb0]
call fcn.00403131
push ebx
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xf
call fcn.00403131
push edi
push edi
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x10
call fcn.00410b4b
push ecx
mov ecx, esp
mov dword [ebp + 0x1c], esp
push eax
call fcn.004038a0
lea eax, [ebp - 0xf0]
push eax
mov byte [ebp - 4], 0x10
call fcn.004056d0
mov ecx, eax
call fcn.00402600
mov ecx, eax
call fcn.00404a04
mov ecx, eax
mov byte [ebp - 4], 0x12
call fcn.004037d0
cmp eax, edi
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], edi
je 0x4629a7
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x18]
call fcn.00404545
cmp eax, edi
jge 0x4629a7
cmp eax, 0x80004002
je 0x4629a7
push eax
call fcn.007a760b
lea eax, [ebp - 0xf0]
push eax
mov byte [ebp - 4], 0x16
call fcn.00402b63
cmp eax, edi
pop ecx
jge 0x4629c2
push eax
call fcn.007a760b
lea eax, [ebp - 0xc0]
push eax
mov byte [ebp - 4], 0x15
call fcn.00402b63
cmp eax, edi
pop ecx
jge 0x4629dd
push eax
call fcn.007a760b
lea eax, [ebp - 0xb0]
push eax
mov byte [ebp - 4], 0x14
call fcn.00402b63
cmp eax, edi
pop ecx
jge 0x4629f8
push eax
call fcn.007a760b
cmp dword [ebp - 0x18], edi
jne 0x462a3f
lea ecx, [ebp - 0x18]
call fcn.0040278b
mov eax, dword [ebp - 0x14]
cmp eax, edi
mov byte [ebp - 4], 3
je 0x462a1a
add eax, 0xfffffff4
push eax
call fcn.00403211
pop ecx
lea ecx, [ebp - 0x10]
call fcn.00411a09
lea ecx, [ebp + 8]
call fcn.00402f46
lea ecx, [ebp + 0xc]
call fcn.00411a09
lea ecx, [ebp + 0x10]
call fcn.004119e2
jmp 0x46313b
push edi
push ecx
mov eax, esp
mov dword [ebp + 0x1c], esp
push 0x50d
push eax
mov ecx, esi
call fcn.006145b0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x14
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x18
call fcn.00412986
mov dword [ebp + 0x20], eax
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0x14
call fcn.00402b63
add esp, 0xc
cmp eax, edi
jge 0x462a91
push eax
call fcn.007a760b
push ebx
lea ecx, [ebp - 0x58]
call fcn.00403131
push 3
push edi
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x19
call fcn.00403157
cmp dword [0x885468], edi
mov byte [ebp - 4], 0x1a
mov esi, 0x80004003
jne 0x462ac0
push esi
call fcn.007a760b
mov ecx, dword [0x885468]
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x68]
push eax
push edi
push edi
push edi
push edi
push edi
lea eax, [ebp + 0x1c]
push eax
call fcn.0042c4b0
push dword [eax]
lea ecx, [ebp - 0x10]
call fcn.00431696
lea ecx, [ebp + 0x1c]
call fcn.00411a09
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x19
call fcn.00402b63
cmp eax, edi
pop ecx
jge 0x462b06
push eax
call fcn.007a760b
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x14
call fcn.00402b63
cmp eax, edi
pop ecx
jge 0x462b1e
push eax
call fcn.007a760b
cmp dword [ebp + 0x18], 0x3e8
jl 0x462b52
cmp dword [ebp + 0x18], 0x3ea
jle 0x462b44
cmp dword [ebp + 0x18], 0x3eb
jne 0x462b52
mov eax, dword [ebp - 0x1c]
push dword [ebp - 0x10]
lea ecx, [eax + 8]
jmp 0x462b4d
mov eax, dword [ebp - 0x1c]
push dword [ebp - 0x10]
lea ecx, [eax + 4]
call fcn.00431696
push 1
push dword [ebp + 0x10]
lea ecx, [ebp - 0x58]
call fcn.0040e615
mov eax, dword [ebp - 0x10]
cmp eax, edi
mov byte [ebp - 4], 0x1b
jne 0x462b73
push esi
call fcn.007a760b
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x58]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
mov dword [ebp + 0x1c], eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x64]
test eax, eax
jge 0x462b9a
push 0x870978
push dword [ebp + 0x1c]
push eax
call fcn.007a7619
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x14
call fcn.00402b63
test eax, eax
pop ecx
jge 0x462bb2
push eax
call fcn.007a760b
cmp dword [ebp - 0x10], 0
jne 0x462bc2
push 0x80004003
call fcn.007a760b
mov edi, dword [ebp - 0x10]
mov eax, dword [edi]
push 0xc00613dc
push edi
call dword [eax + 0xac]
test eax, eax
mov esi, 0x870988
jge 0x462be4
push esi
push edi
push eax
call fcn.007a7619
cmp dword [ebp - 0x10], 0
jne 0x462bf4
push 0x80004003
call fcn.007a760b
mov edi, dword [ebp - 0x10]
mov eax, dword [edi]
push 0xffffffffffffffff
push edi
call dword [eax + 0xd8]
test eax, eax
jge 0x462c0e
push esi
push edi
push eax
call fcn.007a7619
xor edi, edi
mov esi, 0x3eb
push 0x20
pop eax
call fcn.007a88c0
mov eax, esp
push eax
push edi
call fcn.0041273f
add esp, 4
mov dword [ebp - 0x20], esp
mov ecx, esp
push eax
call fcn.00402e2e
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x14
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 4], 0x1d
call fcn.00412752
pop ecx
pop ecx
push eax
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x1e
call fcn.0041666f
lea ecx, [ebp - 0x24]
call fcn.00402753
lea eax, [ebp - 0xd0]
push eax
mov byte [ebp - 4], 0x20
call fcn.00402b63
test eax, eax
pop ecx
jge 0x462c8e
push eax
call fcn.007a760b
cmp dword [ebp + 0x1c], 0
je 0x462e5b
push ebx
lea ecx, [ebp - 0x44]
call fcn.00403131
push ebx
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x22
call fcn.00403131
push ebx
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x23
call fcn.00403131
push ebx
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x24
call fcn.00403131
push 0x78
push ecx
mov eax, esp
mov dword [ebp - 0x20], esp
push 0x40d
push eax
mov ecx, 0x885138
mov byte [ebp - 4], 0x25
call fcn.006145b0
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x25
call fcn.004025dd
mov ecx, eax
call fcn.00404855
push eax
mov byte [ebp - 4], 0x27
call fcn.00412986
pop ecx
pop ecx
push 3
push eax
lea ecx, [ebp - 0x58]
call fcn.00403157
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x58]
push eax
xor eax, eax
cmp dword [ebp + 0x18], esi
sete al
push eax
push ecx
lea eax, [ebp + 0x1c]
mov ecx, esp
mov dword [ebp - 0x20], esp
push eax
call fcn.0042280f
push dword [ebp + 0x20]
lea eax, [ebp + 8]
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push eax
mov byte [ebp - 4], 0x29
call fcn.004056b0
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0x28
call fcn.00460fc2
mov ecx, eax
mov byte [ebp - 4], 0x2a
call fcn.0043f4b6
push eax
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x10]
call fcn.0042287a
mov ecx, eax
call fcn.00422b25
lea eax, [ebp - 0xe0]
push eax
call fcn.00402b63
test eax, eax
pop ecx
jge 0x462da6
push eax
call fcn.007a760b
lea ecx, [ebp - 0x2c]
call fcn.004119ef
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x27
call fcn.00402b63
test eax, eax
pop ecx
jge 0x462dc6
push eax
call fcn.007a760b
lea eax, [ebp - 0xa0]
push eax
mov byte [ebp - 4], 0x25
call fcn.00402b63
test eax, eax
pop ecx
jge 0x462de1
push eax
call fcn.007a760b
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x24
call fcn.00402b63
test eax, eax
pop ecx
jge 0x462df9
push eax
call fcn.007a760b
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x23
call fcn.00402b63
test eax, eax
pop ecx
jge 0x462e14
push eax
call fcn.007a760b
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 0x22
call fcn.00402b63
test eax, eax
pop ecx
jge 0x462e2c
push eax
call fcn.007a760b
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0x20
call fcn.00402b63
test eax, eax
pop ecx
jge 0x462e44
push eax
call fcn.007a760b
mov eax, dword [ebp + 0x1c]
test eax, eax
mov byte [ebp - 4], 0x14
je 0x462e55
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
inc edi
jmp 0x462c15
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x14
call fcn.0040278b
test edi, edi
push ebx
je 0x462ef3
lea ecx, [ebp - 0x78]
call fcn.00403131
push ebx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x2b
call fcn.00403131
cmp dword [ebp - 0x10], 0
mov byte [ebp - 4], 0x2c
jne 0x462e99
push 0x80004003
call fcn.007a760b
sub esp, 0x10
mov edi, esp
mov ebx, dword [ebp - 0x10]
lea esi, [ebp - 0x78]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebx]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x44]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x20
push ebx
movsd dword es:[edi], dword [esi]
call dword [eax + 0x108]
test eax, eax
jge 0x462ecf
push 0x870988
push ebx
push eax
call fcn.007a7619
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0x2b
call fcn.00402b63
test eax, eax
pop ecx
jge 0x462ee7
push eax
call fcn.007a760b
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x78]
jmp 0x46303b
lea ecx, [ebp - 0x68]
call fcn.00403131
push ebx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x2d
call fcn.00403131
push ebx
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x2e
call fcn.00403131
push ebx
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x2f
call fcn.00403131
push ebx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x30
call fcn.00403131
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x44]
push eax
xor eax, eax
cmp dword [ebp + 0x18], esi
sete al
push eax
push ecx
lea eax, [ebp - 0x18]
mov ecx, esp
mov dword [ebp + 0x18], esp
push eax
call fcn.0042280f
push dword [ebp + 0x20]
lea eax, [ebp + 8]
push ecx
mov ecx, esp
mov dword [ebp + 0x20], esp
push eax
mov byte [ebp - 4], 0x32
call fcn.004056b0
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp + 0x1c]
push eax
mov byte [ebp - 4], 0x31
call fcn.00460fc2
mov ecx, eax
mov byte [ebp - 4], 0x33
call fcn.0043f4b6
push eax
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x10]
call fcn.0042287a
mov ecx, eax
call fcn.00422b25
lea eax, [ebp - 0xa0]
push eax
call fcn.00402b63
test eax, eax
pop ecx
jge 0x462fc0
push eax
call fcn.007a760b
mov eax, dword [ebp + 0x1c]
test eax, eax
mov byte [ebp - 4], 0x31
je 0x462fd1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0x30
call fcn.00402b63
test eax, eax
pop ecx
jge 0x462fe9
push eax
call fcn.007a760b
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 0x2f
call fcn.00402b63
test eax, eax
pop ecx
jge 0x463001
push eax
call fcn.007a760b
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x2e
call fcn.00402b63
test eax, eax
pop ecx
jge 0x46301c
push eax
call fcn.007a760b
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 0x2d
call fcn.00402b63
test eax, eax
pop ecx
jge 0x463034
push eax
call fcn.007a760b
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x68]
push eax
call fcn.00402b63
test eax, eax
pop ecx
jge 0x46304c
push eax
call fcn.007a760b
call fcn.00717e1c
mov edi, dword [ebp - 0x1c]
mov dword [edi + 0x3c], eax
mov eax, dword [ebp + 0x14]
push 3
xor ebx, ebx
push ebx
lea ecx, [ebp - 0x44]
mov dword [edi + 0x40], eax
call fcn.00403157
cmp dword [ebp + 0xc], ebx
mov byte [ebp - 4], 0x34
jne 0x46307d
push 0x80004003
call fcn.007a760b
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp + 0x18]
push eax
call fcn.00422ae0
mov esi, eax
cmp dword [esi], ebx
mov byte [ebp - 4], 0x35
jne 0x4630a1
push 0x80004003
call fcn.007a760b
mov ecx, dword [esi]
call fcn.00410bcb
add eax, dword [ebp + 0x24]
mov ecx, edi
push eax
call fcn.004656dd
mov eax, dword [ebp + 0x18]
cmp eax, ebx
mov byte [ebp - 4], 0x34
je 0x4630c4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0x14
call fcn.00402b63
cmp eax, ebx
pop ecx
jge 0x4630dc
push eax
call fcn.007a760b
mov eax, dword [ebp - 0x18]
cmp eax, ebx
mov byte [ebp - 4], 4
je 0x4630ed
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 3
call fcn.00402616
mov eax, dword [ebp - 0x10]
cmp eax, ebx
mov byte [ebp - 4], 2
je 0x46310a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp + 8]
cmp ecx, ebx
je 0x463119
call fcn.00403051
mov dword [ebp + 8], ebx
mov eax, dword [ebp + 0xc]
and byte [ebp - 4], 0
cmp eax, ebx
je 0x46312a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp + 0x10]
or dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x46313b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0xc]
lea esp, [ebp - 0xfc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0x20