I read that for example "lea eax, [ebp - 120]" essentially means
mov eax, ebp
sub eax, 120
Given the example that the esp is at ebp-200, then later in the function
lea eax, [ebp - 120]
push eax
call xyz
would this mean that the value at ebp-120 is loaded into the eax register, then this 4 byte vaule is pushed onto the stack? Or does it mean that the esp is decremented further by 120, thereby creating a buffer from ebp-200 to ebp-320, with esp now at ebp-320?