Function at 0x473950
Capabilities:
Encode data using xor
Hash data with crc32

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x88
mov eax, dword [0x68f500]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebx + 8]
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x54], edx
mov edx, dword [0x694270]
mov dword [ebp - 0x88], eax
mov eax, dword [ebx + 0x10]
test byte [edi + 0xc], 0x42
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x48], edx
jne 0x4744c2
cmp byte [edi + 0xc4], 0
jg 0x4744c2
cmp byte [edi + 0xc5], 0
jg 0x4744c2
cmp byte [edi + 0xab], 0
je 0x4744c2
movss xmm2, dword [edx + 0xecc]
xor eax, eax
movss xmm0, dword [edi + 0x4c]
movaps xmm1, xmm2
addss xmm0, dword [0x67bc0c]
mulss xmm2, dword [0x67bbc0]
mov esi, 4
mov cl, byte [edx + 0x4a]
mulss xmm1, dword [0x67bc14]
test cl, cl
mov byte [ebp - 0x28], 0
addss xmm0, xmm2
cmovne eax, esi
mov dword [ebp - 0x70], eax
maxss xmm1, xmm0
cvttss2si eax, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x67bbf0]
cvttss2si esi, xmm0
mov dword [ebp - 0x6c], esi
je 0x473a3a
movss xmm0, dword [0x67bc74]
movss dword [ebp - 0x40], xmm0
jmp 0x473a42
xorps xmm2, xmm2
movss dword [ebp - 0x40], xmm2
cmp byte [edx + 0x4b], 0
mov eax, dword [ebx + 0x14]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x84], xmm0
je 0x473aa3
test byte [edi + 0xc], 1
jne 0x473aa3
mov ecx, dword [edi]
mov eax, dword [edi + 0x2f8]
mov byte [ebp - 0x27], 1
movss xmm1, dword [ecx + 0xed0]
mulss xmm1, dword [edi + 0x25c]
test eax, eax
je 0x473a83
mulss xmm1, dword [eax + 0x25c]
movss xmm0, dword [ecx + 0xac8]
addss xmm0, xmm0
addss xmm0, xmm1
movss xmm1, dword [ebp - 0x80]
subss xmm1, xmm0
movss dword [ebp - 0x50], xmm1
jmp 0x473ab1
movss xmm0, dword [ebp - 0x80]
mov byte [ebp - 0x27], 0
movss dword [ebp - 0x50], xmm0
movss xmm1, dword [0x67bd20]
mov ecx, str.RESIZE
movaps xmm0, xmm1
movss dword [ebp - 0x3c], xmm1
movss dword [ebp - 0x2c], xmm1
movss dword [ebp - 0x34], xmm0
movss dword [ebp - 0x38], xmm1
mov dword [edi + 0x148], 1
call fcn.004785c0
xor edx, edx
mov dword [ebp - 0x30], edx
cmp dword [ebx + 0xc], edx
jle 0x473f04
movss xmm0, dword [edi + 0x14]
lea eax, [edx + edx*2]
movss xmm1, dword [edi + 0x18]
movaps xmm3, xmm0
addss xmm3, dword [edi + 0x1c]
movaps xmm2, xmm1
mov dword [ebp - 0x4c], eax
addss xmm2, dword [edi + 0x20]
xorps xmm6, xmm6
cvtsi2ss xmm6, esi
subss xmm3, xmm0
subss xmm2, xmm1
mulss xmm3, dword [eax*8 + 0x676dc0]
mulss xmm2, dword [eax*8 + 0x676dc4]
addss xmm3, xmm0
movss xmm0, dword [eax*8 + 0x676dc8]
movaps xmm5, xmm0
mulss xmm0, dword [ebp - 0x40]
addss xmm2, xmm1
mulss xmm5, xmm6
movss xmm1, dword [eax*8 + 0x676dcc]
movaps xmm4, xmm1
mulss xmm1, dword [ebp - 0x40]
mulss xmm4, xmm6
addss xmm5, xmm3
subss xmm3, xmm0
addss xmm4, xmm2
subss xmm2, xmm1
movss dword [ebp - 0x14], xmm5
comiss xmm3, xmm5
movss dword [ebp - 0x1c], xmm3
movss dword [ebp - 0x18], xmm2
movss dword [ebp - 0x10], xmm4
jbe 0x473b98
movss dword [ebp - 0x1c], xmm5
movss dword [ebp - 0x14], xmm3
comiss xmm2, xmm4
jbe 0x473ba7
movss dword [ebp - 0x18], xmm4
movss dword [ebp - 0x10], xmm2
mov ecx, dword [edi + 0xe4]
lea esi, [ebp - 0x20]
mov eax, dword [edi + 0xec]
mov edi, 4
mov dword [ebp - 0x20], edx
mov edx, dword [eax + ecx*4 - 4]
not edx
movzx eax, byte [esi]
lea esi, [esi + 1]
movzx ecx, dl
xor ecx, eax
shr edx, 8
xor edx, dword [ecx*4 + 0x676e20]
sub edi, 1
jne 0x473bc4
not edx
lea ecx, [ebp - 0x1c]
push 8
push edi
mov dword [ebp - 0x20], edx
call fcn.0047a360
mov edx, dword [ebp - 0x20]
lea eax, [ebp - 0x25]
push 0x40800
push eax
lea eax, [ebp - 0x26]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00490610
mov cl, byte [ebp - 0x26]
add esp, 0x14
mov esi, dword [ebp - 0x6c]
mov edi, dword [ebp - 0x44]
test cl, cl
jne 0x473c21
mov al, byte [ebp - 0x25]
test al, al
je 0x473f44
mov edx, dword [ebp - 0x30]
mov eax, edx
mov ecx, dword [ebp - 0x48]
not eax
and eax, 1
add eax, 5
mov dword [ecx + 0x1dc4], eax
mov al, byte [ebp - 0x25]
test al, al
je 0x473ec2
cmp word [ecx + 0xa0a], 2
jne 0x473c93
test edx, edx
jne 0x473c93
push dword [ebp - 0x54]
mov edx, edi
lea ecx, [ebp - 0x68]
call fcn.004732d0
add esp, 4
mov byte [ebp - 0x28], 1
movss xmm0, dword [eax]
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x38], xmm0
call fcn.0046f790
mov edx, dword [ebp - 0x30]
cmp byte [ebp - 0x25], 0
je 0x473ed9
mov ecx, 0x20
jmp 0x473ee4
mov edx, dword [ebp - 0x4c]
xorps xmm1, xmm1
movss xmm3, dword [0x67bc0c]
movss xmm7, dword [edx*8 + 0x676dc4]
ucomiss xmm7, xmm3
lahf
test ah, 0x44
jnp 0x473ccf
ucomiss xmm7, xmm1
lahf
test ah, 0x44
jp 0x473cc2
cmp byte [ebp - 0x27], 0
jne 0x473ccf
movss xmm2, dword [0x67bd4c]
movaps xmm6, xmm2
jmp 0x473cdc
movss xmm6, dword [ebp - 0x50]
movss xmm2, dword [0x67bd4c]
movss xmm0, dword [edx*8 + 0x676dc0]
ucomiss xmm0, xmm3
lahf
test ah, 0x44
jp 0x473cf8
movss xmm5, dword [ebp - 0x84]
jmp 0x473cfb
movaps xmm5, xmm2
ucomiss xmm7, xmm1
lahf
test ah, 0x44
jp 0x473d18
movss xmm2, dword [ebp - 0x78]
movss dword [ebp - 0x34], xmm2
movss xmm2, dword [0x67bd20]
jmp 0x473d25
movss xmm2, dword [0x67bd20]
movss dword [ebp - 0x34], xmm2
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jp 0x473d3a
movss xmm0, dword [ebp - 0x7c]
movss dword [ebp - 0x2c], xmm0
jmp 0x473d3f
movss dword [ebp - 0x2c], xmm2
movss xmm4, dword [edx*8 + 0x676dc8]
xorps xmm3, xmm3
movss xmm2, dword [edx*8 + 0x676dcc]
movaps xmm0, xmm4
mulss xmm0, dword [ebp - 0x40]
movaps xmm1, xmm2
mulss xmm1, dword [ebp - 0x40]
cvtsi2ss xmm3, esi
xorps xmm3, xmmword [0x67be50]
mulss xmm4, xmm3
mulss xmm2, xmm3
subss xmm4, xmm0
subss xmm2, xmm1
mulss xmm4, dword [edx*8 + 0x676dc0]
mulss xmm2, xmm7
addss xmm4, xmm0
movss xmm0, dword [ecx + 0xc0]
subss xmm0, dword [ecx + 0x11c0]
addss xmm2, xmm1
addss xmm4, xmm0
movss xmm0, dword [ecx + 0xc4]
subss xmm0, dword [ecx + 0x11c4]
addss xmm0, xmm2
comiss xmm6, xmm0
ja 0x473dca
movss xmm6, dword [ebp - 0x34]
minss xmm6, xmm0
comiss xmm5, xmm4
ja 0x473dd8
movss xmm5, dword [ebp - 0x2c]
minss xmm5, xmm4
movss xmm0, dword [edi + 0x14]
lea eax, [ebp - 0xc]
movss xmm1, dword [edi + 0x18]
lea ecx, [ebp - 0x5c]
movss xmm4, dword [edx*8 + 0x676dc0]
movaps xmm2, xmm0
addss xmm0, dword [edi + 0x1c]
subss xmm2, xmm5
movaps xmm3, xmm1
addss xmm1, dword [edi + 0x20]
subss xmm3, xmm6
mov edx, edi
push eax
mulss xmm2, xmm4
mulss xmm3, xmm7
addss xmm2, xmm5
subss xmm5, xmm0
addss xmm3, xmm6
subss xmm6, xmm1
movss dword [ebp - 0x3c], xmm2
mulss xmm5, xmm4
mulss xmm6, xmm7
addss xmm5, xmm0
movss dword [ebp - 0x2c], xmm3
addss xmm6, xmm1
subss xmm5, xmm2
subss xmm6, xmm3
movss dword [ebp - 0xc], xmm5
movss dword [ebp - 8], xmm6
call fcn.004732d0
mov ecx, dword [ebp - 0x4c]
add esp, 4
xorps xmm2, xmm2
movss xmm0, dword [ecx*8 + 0x676dc0]
ucomiss xmm0, xmm2
movss xmm0, dword [ebp - 0x5c]
movss dword [ebp - 0x34], xmm0
lahf
test ah, 0x44
jp 0x473e8d
subss xmm0, dword [ebp - 0xc]
movss xmm1, dword [ebp - 0x3c]
subss xmm1, xmm0
movss dword [ebp - 0x3c], xmm1
movss xmm0, dword [ecx*8 + 0x676dc4]
ucomiss xmm0, xmm2
movss xmm0, dword [ebp - 0x58]
movss dword [ebp - 0x38], xmm0
lahf
test ah, 0x44
jp 0x473ebc
subss xmm0, dword [ebp - 8]
movss xmm1, dword [ebp - 0x2c]
subss xmm1, xmm0
movss dword [ebp - 0x2c], xmm1
mov edx, dword [ebp - 0x30]
mov al, byte [ebp - 0x25]
mov cl, byte [ebp - 0x26]
test edx, edx
je 0x473c7f
test al, al
jne 0x473c89
test cl, cl
je 0x473ef7
xor ecx, ecx
cmp byte [ebp - 0x26], cl
setne cl
add ecx, 0x1e
movss xmm1, dword [0x67bc0c]
call fcn.0046c860
mov ecx, dword [ebp - 0x74]
mov dword [ecx + edx*4], eax
inc edx
mov dword [ebp - 0x30], edx
cmp edx, dword [ebx + 0xc]
jl 0x473af2
xor edi, edi
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x70], edi
jbe 0x4741db
lea eax, [edi*8]
sub eax, edi
shl eax, 2
mov dword [ebp - 0x60], eax
test edi, edi
je 0x473f4c
cmp edi, 1
je 0x473f4c
mov dword [ebp - 0x4c], 3
lea eax, [ebp - 8]
mov dword [ebp - 0x40], 0xc4
mov dword [ebp - 0x30], 0x11c4
jmp 0x473f64
mov edx, dword [ebp - 0x30]
jmp 0x473ec5
mov dword [ebp - 0x4c], 4
lea eax, [ebp - 0xc]
mov dword [ebp - 0x40], 0xc0
mov dword [ebp - 0x30], 0x11c0
mov edx, dword [ebp - 0x44]
movd xmm0, esi
push ecx
cvtdq2ps xmm3, xmm0
mov dword [esp], 0x40800000
lea ecx, [ebp - 0x1c]
push edi
mov dword [ebp - 0x54], eax
call fcn.00473830
mov ecx, dword [edx + 0xe4]
lea eax, [edi + 4]
mov dword [ebp - 0x24], eax
lea esi, [ebp - 0x24]
mov eax, dword [edx + 0xec]
add esp, 8
mov edi, 4
mov edx, dword [eax + ecx*4 - 4]
not edx
movzx eax, byte [esi]
lea esi, [esi + 1]
movzx ecx, dl
xor ecx, eax
shr edx, 8
xor edx, dword [ecx*4 + 0x676e20]
sub edi, 1
jne 0x473fa5
not edx
lea ecx, [ebp - 0x1c]
push 8
push edi
mov dword [ebp - 0x24], edx
call fcn.0047a360
mov edx, dword [ebp - 0x24]
lea eax, [ebp - 0x25]
push 0x40800
push eax
lea eax, [ebp - 0x26]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00490610
mov al, byte [ebp - 0x25]
add esp, 0x14
cmp byte [ebp - 0x26], 0
mov esi, dword [ebp - 0x6c]
mov edi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x48]
je 0x47400d
movss xmm0, dword [ecx + 0x11a4]
comiss xmm0, dword [0x67bbb0]
ja 0x474015
test al, al
je 0x4741ce
mov edx, dword [ebp - 0x4c]
mov dword [ecx + 0x1dc4], edx
test al, al
je 0x4741ce
mov eax, dword [ebp - 0x88]
mov dword [eax], edi
cmp edi, 3
je 0x47404b
cmp edi, 2
jne 0x47403e
cmp byte [ebp - 0x27], 0
jne 0x47404b
movss xmm0, dword [0x67bd4c]
movaps xmm4, xmm0
jmp 0x474058
movss xmm4, dword [ebp - 0x50]
movss xmm0, dword [0x67bd4c]
cmp edi, 1
jne 0x474256
movss xmm3, dword [ebp - 0x84]
movss xmm1, dword [0x67bd20]
movss xmm2, dword [0x67bd20]
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
movss xmm0, dword [eax + 0x14]
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [eax + 0x18]
movss dword [ebp - 8], xmm0
movss xmm0, dword [edx + ecx]
mov edx, dword [ebp - 0x30]
subss xmm0, dword [edx + ecx]
mov ecx, dword [ebp - 0x54]
addss xmm0, dword [0x67bc74]
movss dword [ecx], xmm0
movss xmm0, dword [ebp - 8]
comiss xmm4, xmm0
ja 0x4740c0
movaps xmm4, xmm1
minss xmm4, xmm0
movss xmm0, dword [ebp - 0xc]
comiss xmm3, xmm0
ja 0x4740d1
movaps xmm3, xmm2
minss xmm3, xmm0
mov ecx, dword [ebp - 0x60]
mov edx, eax
movss xmm0, dword [eax + 0x14]
movss xmm1, dword [eax + 0x18]
movaps xmm5, xmm0
addss xmm0, dword [eax + 0x1c]
movss xmm7, dword [ecx + 0x676bfc]
subss xmm5, xmm3
minss xmm7, dword [ecx + 0x676c04]
movss xmm2, dword [ecx + 0x676bf8]
movaps xmm6, xmm1
minss xmm2, dword [ecx + 0x676c00]
addss xmm1, dword [eax + 0x20]
subss xmm6, xmm4
lea ecx, [ebp - 0x5c]
movss dword [ebp - 0x24], xmm7
push ecx
mulss xmm5, xmm2
lea ecx, [ebp - 0x68]
mulss xmm6, xmm7
addss xmm5, xmm3
movss dword [ebp - 0x60], xmm2
subss xmm3, xmm0
addss xmm6, xmm4
subss xmm4, xmm1
movss dword [ebp - 0x3c], xmm5
mulss xmm3, xmm2
mulss xmm4, xmm7
addss xmm3, xmm0
movss dword [ebp - 0x2c], xmm6
addss xmm4, xmm1
subss xmm3, xmm5
subss xmm4, xmm6
movss dword [ebp - 0x5c], xmm3
movss dword [ebp - 0x58], xmm4
call fcn.004732d0
movss xmm0, dword [ebp - 0x60]
add esp, 4
xorps xmm2, xmm2
ucomiss xmm0, xmm2
movss xmm0, dword [ebp - 0x68]
movss dword [ebp - 0x34], xmm0
lahf
test ah, 0x44
jp 0x4741a3
subss xmm0, dword [ebp - 0x5c]
movss xmm1, dword [ebp - 0x3c]
subss xmm1, xmm0
movss dword [ebp - 0x3c], xmm1
movss xmm0, dword [ebp - 0x24]
ucomiss xmm0, xmm2
movss xmm0, dword [ebp - 0x64]
movss dword [ebp - 0x38], xmm0
lahf
test ah, 0x44
jp 0x4741ce
subss xmm0, dword [ebp - 0x58]
movss xmm1, dword [ebp - 0x2c]
subss xmm1, xmm0
movss dword [ebp - 0x2c], xmm1
inc edi
mov dword [ebp - 0x20], edi
cmp edi, dword [ebp - 0x70]
jl 0x473f12
mov esi, dword [0x694270]
xorps xmm7, xmm7
mov edx, dword [ebp - 0x44]
mov edi, dword [ebp - 0x48]
mov eax, dword [esi + 0x1160]
dec dword [eax + 0xe4]
mov dword [edx + 0x148], 0
mov eax, dword [edi + 0x1c58]
test eax, eax
je 0x474406
cmp dword [eax + 0x300], edx
jne 0x474406
mov eax, dword [edi + 0x1b1c]
xorps xmm2, xmm2
xorps xmm3, xmm3
cmp eax, 2
jne 0x474285
cmp byte [edi + 0xdd], 0
je 0x4742aa
movss xmm3, dword [esi + 0x130]
movss xmm2, dword [esi + 0x110]
subss xmm3, dword [esi + 0x120]
subss xmm2, dword [esi + 0x100]
jmp 0x4742aa
movaps xmm3, xmm0
cmp edi, 2
jne 0x474268
movss xmm1, dword [ebp - 0x78]
jmp 0x474071
movss xmm1, dword [0x67bd20]
movaps xmm3, xmm0
test edi, edi
jne 0x474071
movss xmm2, dword [ebp - 0x7c]
jmp 0x474079
cmp eax, 3
jne 0x4742aa
movss xmm3, dword [esi + 0x810]
movss xmm2, dword [esi + 0x7f0]
subss xmm3, dword [esi + 0x800]
subss xmm2, dword [esi + 0x7e0]
ucomiss xmm2, xmm7
lahf
test ah, 0x44
jp 0x4742c0
ucomiss xmm3, xmm7
lahf
test ah, 0x44
jnp 0x474406
movss xmm1, dword [edi + 0x3c]
mov ecx, 0x20
minss xmm1, dword [edi + 0x40]
movss xmm0, dword [edi + 0x18]
mulss xmm0, dword [0x67bcf8]
mulss xmm1, xmm0
movss xmm0, dword [ebp - 0x84]
mulss xmm2, xmm1
mulss xmm3, xmm1
addss xmm2, dword [edi + 0x1c78]
movss xmm1, dword [0x67bc0c]
addss xmm3, dword [edi + 0x1c7c]
movss dword [edi + 0x1c78], xmm2
movss dword [edi + 0x1c7c], xmm3
subss xmm0, dword [edx + 0x14]
subss xmm0, dword [edx + 0x1c]
maxss xmm2, xmm0
movss xmm0, dword [ebp - 0x50]
subss xmm0, dword [edx + 0x18]
subss xmm0, dword [edx + 0x20]
movss dword [edi + 0x1c78], xmm2
mov byte [edi + 0x1c6c], 0
mov byte [edi + 0x1b27], 1
maxss xmm3, xmm0
movss dword [edi + 0x1c7c], xmm3
call fcn.0046c860
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
cvttss2si esi, dword [edi + 0x1c78]
cvttss2si edi, dword [edi + 0x1c7c]
movd xmm0, esi
cvtdq2ps xmm0, xmm0
movd xmm1, edi
ucomiss xmm0, xmm7
cvtdq2ps xmm1, xmm1
lahf
test ah, 0x44
jp 0x474391
ucomiss xmm1, xmm7
lahf
test ah, 0x44
jnp 0x47440d
addss xmm0, dword [edx + 0x24]
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x5c]
movss dword [ebp - 0x68], xmm0
movaps xmm0, xmm1
addss xmm0, dword [edx + 0x28]
movss dword [ebp - 0x64], xmm0
call fcn.004732d0
mov edx, dword [ebp - 0x48]
add esp, 4
movd xmm1, esi
xorps xmm7, xmm7
cvtdq2ps xmm1, xmm1
movss xmm0, dword [eax]
movss xmm2, dword [eax + 4]
movss dword [ebp - 0x34], xmm0
movss xmm0, dword [edx + 0x1c78]
subss xmm0, xmm1
movd xmm1, edi
cvtdq2ps xmm1, xmm1
movss dword [edx + 0x1c78], xmm0
movss xmm0, dword [edx + 0x1c7c]
subss xmm0, xmm1
movss dword [edx + 0x1c7c], xmm0
mov edx, dword [ebp - 0x44]
jmp 0x474412
movss xmm2, dword [ebp - 0x38]
jmp 0x474418
movss xmm2, dword [ebp - 0x38]
mov esi, dword [0x694270]
movss xmm0, dword [ebp - 0x34]
movss xmm1, dword [0x67bd20]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x474453
test dword [edx + 0xc], 0x100
movss dword [edx + 0x24], xmm0
movss dword [edx + 0x28], xmm2
jne 0x474453
comiss xmm7, dword [esi + 0x356c]
jb 0x474453
mov eax, dword [esi + 0x1c]
mov dword [esi + 0x356c], eax
movss xmm0, dword [ebp - 0x3c]
ucomiss xmm0, xmm1
lahf
test ah, 0x44
jnp 0x47449d
test dword [edx + 0xc], 0x100
cvttss2si eax, xmm0
movd xmm1, eax
cvttss2si eax, dword [ebp - 0x2c]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [edx + 0x14], xmm1
movss dword [edx + 0x18], xmm0
jne 0x47449d
comiss xmm7, dword [esi + 0x356c]
jb 0x47449d
mov ecx, dword [esi + 0x1c]
mov dword [esi + 0x356c], ecx
mov esi, dword [ebp - 0x44]
mov ecx, dword [edx + 0x24]
mov edx, dword [edx + 0x28]
mov al, byte [ebp - 0x28]
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x20], edx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005ab3d6
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov ecx, dword [ebp - 4]
xor al, al
pop edi
xor ecx, ebp
pop esi
call fcn.005ab3d6
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret