Function at 0x435f90
Capabilities:
Compress data via zlib inflate or deflate

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [ebp + 8]
sub esp, 0x30
push esi
test edx, edx
je 0x43744a
mov esi, dword [edx + 0x1c]
test esi, esi
je 0x43744a
cmp dword [edx + 0xc], 0
je 0x43744a
cmp dword [edx], 0
jne 0x435fc6
cmp dword [edx + 4], 0
jne 0x43744a
cmp dword [esi], 0xb
jne 0x435fd1
mov dword [esi], 0xc
mov ecx, dword [edx + 0x10]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x10], ecx
mov ecx, dword [edx + 4]
mov dword [ebp - 4], ecx
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x10]
push ebx
mov ebx, dword [esi + 0x38]
mov dword [ebp - 0x20], ecx
mov ecx, dword [esi]
mov dword [ebp - 0x1c], eax
mov eax, dword [edx]
push edi
mov edi, dword [esi + 0x3c]
mov dword [ebp - 8], eax
mov dword [ebp - 0x28], 0
cmp ecx, 0x1e
jbe switch.0x00436016
mov eax, 0xfffffffe
pop edi
pop ebx
pop esi
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp + 8]
jmp dword [ecx*4 + 0x437454]
cmp dword [esi + 8], 0
jne 0x43602e
mov dword [esi], 0xc
jmp 0x4372c7
cmp edi, 0x10
jae 0x436055
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0x10
jb 0x436033
test byte [esi + 8], 2
je 0x4360a0
cmp ebx, 0x8b1f
jne 0x4360a0
push 0
push 0
push 0
call fcn.00438350
mov dword [esi + 0x18], eax
push 2
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x1f
mov byte [ebp - 0x13], 0x8b
mov ecx, dword [esi + 0x18]
push eax
push ecx
call fcn.00438350
add esp, 0x18
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 8]
xor ebx, ebx
xor edi, edi
mov dword [esi], 1
jmp 0x4372c7
mov eax, dword [esi + 0x20]
mov dword [esi + 0x10], 0
test eax, eax
je 0x4360b5
mov dword [eax + 0x30], 0xffffffff
test byte [esi + 8], 1
je 0x436161
movzx eax, bl
shl eax, 8
mov edx, ebx
shr edx, 8
add eax, edx
xor edx, edx
mov ecx, 0x1f
div ecx
test edx, edx
jne 0x436161
mov edx, ebx
and dl, 0xf
cmp dl, 8
je 0x4360f9
mov eax, dword [ebp + 8]
mov dword [eax + 0x18], str.unknown_compression_method
mov eax, dword [ebp - 8]
jmp 0x4372c1
mov eax, dword [esi + 0x24]
shr ebx, 4
mov ecx, ebx
and ecx, 0xf
sub edi, 4
add ecx, 8
test eax, eax
jne 0x43614b
mov dword [esi + 0x24], ecx
mov edx, 1
shl edx, cl
push 0
push 0
push 0
mov dword [esi + 0x14], edx
call fcn.00437e00
mov ecx, dword [ebp + 8]
shr ebx, 8
not ebx
and ebx, 2
or ebx, 9
mov dword [esi + 0x18], eax
mov dword [ecx + 0x30], eax
mov eax, dword [ebp - 8]
mov dword [esi], ebx
add esp, 0xc
xor ebx, ebx
xor edi, edi
jmp 0x4372c7
cmp ecx, eax
jbe 0x436111
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 8]
mov dword [ecx + 0x18], str.invalid_window_size
jmp 0x4372c1
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 8]
mov dword [edx + 0x18], str.incorrect_header_check
jmp 0x4372c1
cmp edi, 0x10
jae 0x4361a2
jmp 0x436180
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0x10
jb 0x436180
mov dword [esi + 0x10], ebx
cmp bl, 8
je 0x4361b9
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x18], str.unknown_compression_method
jmp 0x4372c1
test ebx, 0xe000
je 0x4361d0
mov edx, dword [ebp + 8]
mov dword [edx + 0x18], str.unknown_header_flags_set
jmp 0x4372c1
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x4361e1
mov edx, ebx
shr edx, 8
and edx, 1
mov dword [ecx], edx
test dword [esi + 0x10], 0x200
je 0x43620b
mov byte [ebp - 0x14], bl
shr ebx, 8
push 2
lea eax, [ebp - 0x14]
mov byte [ebp - 0x13], bl
mov ecx, dword [esi + 0x18]
push eax
push ecx
call fcn.00438350
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 8]
add esp, 0xc
xor ebx, ebx
xor edi, edi
mov dword [esi], 2
jmp 0x436220
cmp edi, 0x20
jae 0x436242
lea esp, [esp]
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0x20
jb 0x436220
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x43624c
mov dword [ecx + 4], ebx
test dword [esi + 0x10], 0x200
je 0x436286
mov byte [ebp - 0x14], bl
mov eax, ebx
mov ecx, ebx
shr eax, 8
shr ecx, 0x10
shr ebx, 0x18
push 4
lea edx, [ebp - 0x14]
mov byte [ebp - 0x13], al
mov byte [ebp - 0x12], cl
mov byte [ebp - 0x11], bl
mov eax, dword [esi + 0x18]
push edx
push eax
call fcn.00438350
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 8]
add esp, 0xc
xor ebx, ebx
xor edi, edi
mov dword [esi], 3
jmp 0x4362a0
cmp edi, 0x10
jae 0x4362c2
jmp 0x4362a0
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0x10
jb 0x4362a0
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x4362df
mov edx, ebx
and edx, 0xff
mov dword [ecx + 8], edx
mov edx, dword [esi + 0x20]
mov ecx, ebx
shr ecx, 8
mov dword [edx + 0xc], ecx
test dword [esi + 0x10], 0x200
je 0x436309
mov byte [ebp - 0x14], bl
shr ebx, 8
push 2
lea eax, [ebp - 0x14]
mov byte [ebp - 0x13], bl
mov ecx, dword [esi + 0x18]
push eax
push ecx
call fcn.00438350
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 8]
add esp, 0xc
xor ebx, ebx
xor edi, edi
mov dword [esi], 4
test dword [esi + 0x10], 0x400
je 0x436380
cmp edi, 0x10
jae 0x436343
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0x10
jb 0x436321
mov ecx, dword [esi + 0x20]
mov dword [esi + 0x40], ebx
test ecx, ecx
je 0x436350
mov dword [ecx + 0x14], ebx
test dword [esi + 0x10], 0x200
je 0x43637a
mov byte [ebp - 0x14], bl
shr ebx, 8
push 2
lea eax, [ebp - 0x14]
mov byte [ebp - 0x13], bl
mov ecx, dword [esi + 0x18]
push eax
push ecx
call fcn.00438350
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 8]
add esp, 0xc
xor ebx, ebx
xor edi, edi
jmp 0x43638e
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x43638e
mov dword [ecx + 0x10], 0
mov dword [esi], 5
test dword [esi + 0x10], 0x400
je 0x436439
mov ecx, dword [esi + 0x40]
mov edx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
cmp ecx, edx
jbe 0x4363b3
mov ecx, edx
mov dword [ebp - 0xc], edx
test ecx, ecx
je 0x43642f
mov edx, dword [esi + 0x20]
test edx, edx
je 0x4363fe
mov edx, dword [edx + 0x10]
mov dword [ebp - 0x2c], edx
test edx, edx
je 0x4363fe
mov edx, dword [esi + 0x20]
mov eax, dword [edx + 0x14]
sub eax, dword [esi + 0x40]
mov edx, dword [edx + 0x18]
mov dword [ebp - 0x18], eax
add eax, ecx
cmp eax, edx
jbe 0x4363e2
sub edx, dword [ebp - 0x18]
mov ecx, edx
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x2c]
push ecx
mov ecx, dword [ebp - 8]
push ecx
add edx, eax
push edx
call fcn.0043c390
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
add esp, 0xc
test dword [esi + 0x10], 0x200
je 0x436424
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [esi + 0x18]
push ecx
push edx
push eax
call fcn.00438350
mov ecx, dword [ebp - 0xc]
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 8]
add esp, 0xc
sub dword [ebp - 4], ecx
add eax, ecx
sub dword [esi + 0x40], ecx
mov dword [ebp - 8], eax
cmp dword [esi + 0x40], 0
jne 0x43731e
mov dword [esi + 0x40], 0
mov dword [esi], 6
test dword [esi + 0x10], 0x800
je 0x4364db
cmp dword [ebp - 4], 0
je 0x43731e
xor ecx, ecx
nop
movzx edx, byte [ecx + eax]
inc ecx
mov dword [ebp - 0xc], ecx
mov ecx, dword [esi + 0x20]
mov dword [ebp - 0x18], edx
test ecx, ecx
je 0x436493
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0x2c], edx
test edx, edx
je 0x436493
mov edx, dword [esi + 0x40]
cmp edx, dword [ecx + 0x20]
jae 0x436493
mov eax, dword [ebp - 0x2c]
mov cl, byte [ebp - 0x18]
mov byte [eax + edx], cl
inc dword [esi + 0x40]
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x18], 0
je 0x4364a1
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [ebp - 4]
jb 0x436460
test dword [esi + 0x10], 0x200
je 0x4364c4
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov ecx, dword [esi + 0x18]
push edx
push eax
push ecx
call fcn.00438350
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 8]
add esp, 0xc
mov ecx, dword [ebp - 0xc]
sub dword [ebp - 4], ecx
add eax, ecx
cmp dword [ebp - 0x18], 0
mov dword [ebp - 8], eax
jne 0x43731e
jmp 0x4364e9
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x4364e9
mov dword [ecx + 0x1c], 0
mov dword [esi + 0x40], 0
mov dword [esi], 7
test dword [esi + 0x10], 0x1000
je 0x43658b
cmp dword [ebp - 4], 0
je 0x43731e
xor ecx, ecx
nop
movzx edx, byte [ecx + eax]
inc ecx
mov dword [ebp - 0xc], ecx
mov ecx, dword [esi + 0x20]
mov dword [ebp - 0x18], edx
test ecx, ecx
je 0x436543
mov edx, dword [ecx + 0x24]
mov dword [ebp - 0x2c], edx
test edx, edx
je 0x436543
mov edx, dword [esi + 0x40]
cmp edx, dword [ecx + 0x28]
jae 0x436543
mov eax, dword [ebp - 0x2c]
mov cl, byte [ebp - 0x18]
mov byte [eax + edx], cl
inc dword [esi + 0x40]
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x18], 0
je 0x436551
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [ebp - 4]
jb 0x436510
test dword [esi + 0x10], 0x200
je 0x436574
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov ecx, dword [esi + 0x18]
push edx
push eax
push ecx
call fcn.00438350
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 8]
add esp, 0xc
mov ecx, dword [ebp - 0xc]
sub dword [ebp - 4], ecx
add eax, ecx
cmp dword [ebp - 0x18], 0
mov dword [ebp - 8], eax
jne 0x43731e
jmp 0x436599
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x436599
mov dword [ecx + 0x24], 0
mov dword [esi], 8
test dword [esi + 0x10], 0x200
je 0x4365ed
cmp edi, 0x10
jae 0x4365d2
lea ecx, [ecx]
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0x10
jb 0x4365b0
movzx ecx, word [esi + 0x18]
cmp ebx, ecx
je 0x4365e9
mov edx, dword [ebp + 8]
mov dword [edx + 0x18], str.header_crc_mismatch
jmp 0x4372c1
xor ebx, ebx
xor edi, edi
mov eax, dword [esi + 0x20]
test eax, eax
je 0x43660a
mov ecx, dword [esi + 0x10]
sar ecx, 9
and ecx, 1
mov dword [eax + 0x2c], ecx
mov edx, dword [esi + 0x20]
mov dword [edx + 0x30], 1
push 0
push 0
push 0
call fcn.00438350
mov ecx, dword [ebp + 8]
mov dword [esi + 0x18], eax
mov dword [ecx + 0x30], eax
mov eax, dword [ebp - 8]
add esp, 0xc
mov dword [esi], 0xb
jmp 0x4372c7
cmp edi, 0x20
jae 0x436656
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0x20
jb 0x436634
mov ecx, ebx
and ecx, 0xff00
mov edx, ebx
shl edx, 0x10
add ecx, edx
mov edx, ebx
shr edx, 8
shl ecx, 8
and edx, 0xff00
add ecx, edx
mov edx, dword [ebp + 8]
shr ebx, 0x18
add ecx, ebx
mov dword [esi + 0x18], ecx
mov dword [edx + 0x30], ecx
xor ebx, ebx
xor edi, edi
mov dword [esi], 0xa
cmp dword [esi + 0xc], 0
je 0x4372de
push 0
push 0
push 0
call fcn.00437e00
mov ecx, dword [ebp + 8]
mov dword [esi + 0x18], eax
mov dword [ecx + 0x30], eax
mov eax, dword [ebp - 8]
add esp, 0xc
mov dword [esi], 0xb
mov ecx, dword [ebp + 0xc]
cmp ecx, 5
je 0x43731e
cmp ecx, 6
je 0x43731e
cmp dword [esi + 4], 0
je 0x4366e6
mov ecx, edi
and ecx, 7
shr ebx, cl
sub edi, ecx
mov dword [esi], 0x1a
jmp 0x4372c7
cmp edi, 3
jae 0x436712
jmp 0x4366f0
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 3
jb 0x4366f0
mov ecx, ebx
and ecx, 1
shr ebx, 1
mov dword [esi + 4], ecx
mov ecx, ebx
and ecx, 3
dec edi
cmp ecx, 3
ja case.default.0x436727
jmp dword [ecx*4 + 0x4374d0]
shr ebx, 2
mov dword [esi], 0xd
sub edi, 2
jmp 0x4372c7
cmp dword [ebp + 0xc], 6
mov dword [esi + 0x4c], 0x455d38
mov dword [esi + 0x54], 9
mov dword [esi + 0x50], 0x456538
mov dword [esi + 0x58], 5
mov dword [esi], 0x13
jne case.default.0x436727
shr ebx, 2
sub edi, 2
jmp 0x43731e
shr ebx, 2
mov dword [esi], 0x10
sub edi, 2
jmp 0x4372c7
mov edx, dword [ebp + 8]
mov dword [edx + 0x18], str.invalid_block_type
mov dword [esi], 0x1d
shr ebx, 2
sub edi, 2
jmp 0x4372c7
mov ecx, edi
and ecx, 7
sub edi, ecx
shr ebx, cl
cmp edi, 0x20
jae 0x4367d2
lea esp, [esp]
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0x20
jb 0x4367b0
mov edx, ebx
mov ecx, ebx
not edx
and ecx, 0xffff
shr edx, 0x10
cmp ecx, edx
je 0x4367f4
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x18], str.invalid_stored_block_lengths
jmp 0x4372c1
xor ebx, ebx
xor edi, edi
cmp dword [ebp + 0xc], 6
mov dword [esi + 0x40], ecx
mov dword [esi], 0xe
je 0x43731e
mov dword [esi], 0xf
mov ecx, dword [esi + 0x40]
mov dword [ebp - 0xc], ecx
test ecx, ecx
je 0x436e92
mov edx, dword [ebp - 4]
cmp ecx, edx
jbe 0x43682b
mov ecx, edx
mov dword [ebp - 0xc], edx
mov edx, dword [ebp - 0x10]
cmp ecx, edx
jbe 0x436837
mov ecx, edx
mov dword [ebp - 0xc], ecx
test ecx, ecx
je 0x43731e
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x1c]
push edx
push eax
push ecx
call fcn.0043c390
mov eax, dword [ebp - 0xc]
sub dword [ebp - 4], eax
add dword [ebp - 8], eax
sub dword [ebp - 0x10], eax
add dword [ebp - 0x1c], eax
add esp, 0xc
sub dword [esi + 0x40], eax
mov eax, dword [ebp - 8]
jmp 0x4372c7
cmp edi, 0xe
jae 0x436894
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0xe
jb 0x436872
mov ecx, ebx
and ecx, 0x1f
shr ebx, 5
add ecx, 0x101
mov edx, ebx
mov dword [esi + 0x60], ecx
shr ebx, 5
mov ecx, ebx
and edx, 0x1f
and ecx, 0xf
inc edx
add ecx, 4
shr ebx, 4
sub edi, 0xe
cmp dword [esi + 0x60], 0x11e
mov dword [esi + 0x64], edx
mov dword [esi + 0x5c], ecx
ja 0x4369b3
cmp edx, 0x1e
ja 0x4369b3
mov dword [esi + 0x68], 0
mov dword [esi], 0x11
mov ecx, dword [esi + 0x68]
cmp ecx, dword [esi + 0x5c]
jae 0x43693d
lea ecx, [ecx]
cmp edi, 3
jae 0x436917
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 3
jb 0x4368f5
mov edx, dword [esi + 0x68]
movzx edx, word [edx*2 + 0x4565b8]
mov ecx, ebx
and ecx, 7
mov word [esi + edx*2 + 0x70], cx
inc dword [esi + 0x68]
mov ecx, dword [esi + 0x68]
shr ebx, 3
sub edi, 3
cmp ecx, dword [esi + 0x5c]
jb 0x4368f0
mov eax, 0x13
cmp dword [esi + 0x68], eax
jae 0x43696a
jmp 0x436950
mov edx, dword [esi + 0x68]
movzx ecx, word [edx*2 + 0x4565b8]
xor edx, edx
mov word [esi + ecx*2 + 0x70], dx
inc dword [esi + 0x68]
cmp dword [esi + 0x68], eax
jb 0x436950
lea eax, [esi + 0x530]
lea ecx, [esi + 0x6c]
mov dword [ecx], eax
mov dword [esi + 0x4c], eax
lea edx, [esi + 0x2f0]
push edx
lea eax, [esi + 0x54]
push eax
push ecx
mov dword [eax], 7
push 0x13
lea eax, [esi + 0x70]
push eax
push 0
call fcn.00437990
add esp, 0x18
mov dword [ebp - 0x28], eax
test eax, eax
mov eax, dword [ebp - 8]
je 0x4369c2
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x18], str.invalid_code_lengths_set
jmp 0x4372c1
mov edx, dword [ebp + 8]
mov dword [edx + 0x18], str.too_many_length_or_distance_symbols
jmp 0x4372c1
mov dword [esi + 0x68], 0
mov dword [esi], 0x12
mov edx, dword [esi + 0x64]
add edx, dword [esi + 0x60]
cmp dword [esi + 0x68], edx
jae 0x436bc3
mov edi, edi
mov ecx, dword [esi + 0x54]
mov edx, 1
shl edx, cl
mov ecx, dword [esi + 0x4c]
dec edx
and edx, ebx
mov ecx, dword [ecx + edx*4]
mov edx, ecx
shr edx, 8
movzx edx, dl
mov dword [ebp - 0xc], ecx
cmp edx, edi
jbe 0x436a41
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
mov ecx, dword [esi + 0x54]
inc eax
add edi, 8
add ebx, edx
mov edx, 1
shl edx, cl
mov ecx, dword [esi + 0x4c]
mov dword [ebp - 8], eax
dec edx
and edx, ebx
mov ecx, dword [ecx + edx*4]
mov edx, ecx
shr edx, 8
movzx edx, dl
mov dword [ebp - 0xc], ecx
cmp edx, edi
ja 0x436a02
mov edx, ecx
shr edx, 0x10
mov dword [ebp - 0x2c], edx
cmp dx, 0x10
jae 0x436a69
shr ecx, 8
movzx ecx, cl
shr ebx, cl
sub edi, ecx
mov ecx, dword [esi + 0x68]
mov word [esi + ecx*2 + 0x70], dx
inc dword [esi + 0x68]
jmp 0x436bb4
jne 0x436ada
mov edx, ecx
shr edx, 8
movzx edx, dl
add edx, 2
cmp edi, edx
jae 0x436aaa
lea ebx, [ebx]
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
mov ecx, dword [ebp - 0xc]
inc eax
add edi, 8
add ebx, edx
movzx edx, ch
add edx, 2
mov dword [ebp - 8], eax
cmp edi, edx
jb 0x436a80
movzx ecx, ch
shr ebx, cl
sub edi, ecx
mov ecx, dword [esi + 0x68]
test ecx, ecx
je 0x436be5
movzx ecx, word [esi + ecx*2 + 0x6e]
mov dword [ebp - 0x18], ecx
mov ecx, ebx
and ecx, 3
add ecx, 3
shr ebx, 2
mov dword [ebp - 0xc], ecx
sub edi, 2
jmp 0x436b7f
cmp word [ebp - 0xa], 0x11
movzx ecx, ch
mov dword [ebp - 0x24], ecx
jne 0x436b2e
lea edx, [ecx + 3]
cmp edi, edx
jae 0x436b17
mov edi, edi
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
mov ecx, dword [ebp - 0x24]
inc eax
add edi, 8
add ebx, edx
lea edx, [ecx + 3]
mov dword [ebp - 8], eax
cmp edi, edx
jb 0x436af0
shr ebx, cl
mov edx, ebx
and edx, 7
add edx, 3
mov dword [ebp - 0xc], edx
shr ebx, 3
mov edx, 0xfffffffd
jmp 0x436b71
lea edx, [ecx + 7]
cmp edi, edx
jae 0x436b5c
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
mov ecx, dword [ebp - 0x24]
inc eax
add edi, 8
add ebx, edx
lea edx, [ecx + 7]
mov dword [ebp - 8], eax
cmp edi, edx
jb 0x436b35
shr ebx, cl
mov edx, ebx
and edx, 0x7f
add edx, 0xb
mov dword [ebp - 0xc], edx
shr ebx, 7
mov edx, 0xfffffff9
sub edx, ecx
mov ecx, dword [ebp - 0xc]
add edi, edx
mov dword [ebp - 0x18], 0
mov edx, dword [esi + 0x68]
add edx, ecx
mov ecx, dword [esi + 0x64]
add ecx, dword [esi + 0x60]
cmp edx, ecx
ja 0x436bf4
cmp dword [ebp - 0xc], 0
je 0x436bb4
mov ecx, dword [ebp - 0x18]
jmp 0x436ba0
mov edx, dword [esi + 0x68]
dec dword [ebp - 0xc]
mov word [esi + edx*2 + 0x70], cx
inc dword [esi + 0x68]
cmp dword [ebp - 0xc], 0
jne 0x436ba0
mov ecx, dword [esi + 0x64]
add ecx, dword [esi + 0x60]
cmp dword [esi + 0x68], ecx
jb 0x4369e0
cmp dword [esi], 0x1d
je 0x4372c7
cmp word [esi + 0x270], 0
jne 0x436c03
mov edx, dword [ebp + 8]
mov dword [edx + 0x18], str.invalid_code____missing_end_of_block
jmp 0x4372c1
mov edx, dword [ebp + 8]
mov dword [edx + 0x18], str.invalid_bit_length_repeat
jmp 0x4372c1
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x18], str.invalid_bit_length_repeat
jmp 0x4372c1
lea eax, [esi + 0x530]
lea ecx, [esi + 0x6c]
mov dword [ecx], eax
mov dword [esi + 0x4c], eax
lea edx, [esi + 0x2f0]
push edx
lea eax, [esi + 0x54]
push eax
push ecx
mov dword [eax], 9
mov eax, dword [esi + 0x60]
push eax
lea ecx, [esi + 0x70]
push ecx
push 1
call fcn.00437990
add esp, 0x18
mov dword [ebp - 0x28], eax
test eax, eax
je 0x436c4e
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 8]
mov dword [edx + 0x18], str.invalid_literal_lengths_set
jmp 0x4372c1
mov eax, dword [esi + 0x6c]
lea ecx, [esi + 0x6c]
mov dword [esi + 0x50], eax
lea edx, [esi + 0x2f0]
push edx
mov edx, dword [esi + 0x60]
lea eax, [esi + 0x58]
push eax
push ecx
mov ecx, dword [esi + 0x64]
mov dword [eax], 6
push ecx
lea eax, [esi + edx*2 + 0x70]
push eax
push 2
call fcn.00437990
add esp, 0x18
mov dword [ebp - 0x28], eax
test eax, eax
mov eax, dword [ebp - 8]
je 0x436c98
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x18], str.invalid_distances_set
jmp 0x4372c1
cmp dword [ebp + 0xc], 6
mov dword [esi], 0x13
je 0x43731e
mov dword [esi], 0x14
cmp dword [ebp - 4], 6
jb 0x436d24
cmp dword [ebp - 0x10], 0x102
jb 0x436d24
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword [eax + 0xc], edx
mov edx, dword [ebp - 8]
mov dword [eax], edx
mov edx, dword [ebp - 0x20]
mov dword [eax + 0x10], ecx
mov ecx, dword [ebp - 4]
push edx
mov dword [eax + 4], ecx
push eax
mov dword [esi + 0x38], ebx
mov dword [esi + 0x3c], edi
call fcn.00437570
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 0x10]
mov ebx, dword [esi + 0x38]
mov edi, dword [esi + 0x3c]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [eax]
mov dword [ebp - 0x10], edx
mov edx, dword [eax + 4]
add esp, 8
cmp dword [esi], 0xb
mov dword [ebp - 8], ecx
mov dword [ebp - 4], edx
mov eax, ecx
jne 0x4372c7
mov dword [esi + 0x1bc4], 0xffffffff
jmp 0x4372c7
mov ecx, dword [esi + 0x54]
mov edx, 1
shl edx, cl
mov ecx, dword [esi + 0x4c]
mov dword [esi + 0x1bc4], 0
dec edx
and edx, ebx
mov edx, dword [ecx + edx*4]
mov ecx, edx
shr ecx, 8
movzx ecx, cl
mov dword [ebp - 0xc], edx
cmp ecx, edi
jbe 0x436d8f
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
mov ecx, dword [esi + 0x54]
inc eax
add edi, 8
add ebx, edx
mov edx, 1
shl edx, cl
mov ecx, dword [esi + 0x4c]
mov dword [ebp - 8], eax
dec edx
and edx, ebx
mov edx, dword [ecx + edx*4]
mov ecx, edx
shr ecx, 8
movzx ecx, cl
mov dword [ebp - 0xc], edx
cmp ecx, edi
ja 0x436d50
test dl, dl
je 0x436e57
test dl, 0xf0
jne 0x436e57
mov ecx, edx
shr ecx, 8
mov dword [ebp - 0x2c], ecx
movzx ecx, cl
mov dword [ebp - 0x18], ecx
movzx ecx, dl
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x24], edx
mov edx, 1
shl edx, cl
mov ecx, dword [ebp - 0x18]
dec edx
and edx, ebx
shr edx, cl
mov ecx, dword [ebp - 0xc]
shr ecx, 0x10
add edx, ecx
mov ecx, dword [esi + 0x4c]
mov ecx, dword [ecx + edx*4]
mov dword [ebp - 0xc], ecx
shr ecx, 8
movzx edx, cl
movzx ecx, byte [ebp - 0x2c]
add edx, ecx
cmp edx, edi
jbe 0x436e46
jmp 0x436df0
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
mov ecx, edi
shl edx, cl
mov ecx, dword [ebp - 0x24]
dec dword [ebp - 4]
inc eax
add ebx, edx
movzx edx, ch
movzx ecx, cl
add ecx, edx
mov dword [ebp - 0x18], edx
mov edx, 1
shl edx, cl
mov ecx, dword [ebp - 0x18]
add edi, 8
mov dword [ebp - 8], eax
dec edx
and edx, ebx
shr edx, cl
movzx ecx, word [ebp - 0x22]
add edx, ecx
mov ecx, dword [esi + 0x4c]
mov ecx, dword [ecx + edx*4]
mov dword [ebp - 0xc], ecx
shr ecx, 8
movzx edx, cl
add edx, dword [ebp - 0x18]
cmp edx, edi
ja 0x436df0
movzx ecx, byte [ebp - 0x23]
mov edx, dword [ebp - 0xc]
shr ebx, cl
sub edi, ecx
mov dword [esi + 0x1bc4], ecx
mov ecx, edx
shr ecx, 8
movzx ecx, cl
add dword [esi + 0x1bc4], ecx
shr ebx, cl
sub edi, ecx
mov dword [ebp - 0x18], ecx
mov ecx, edx
shr ecx, 0x10
mov dword [esi + 0x40], ecx
test dl, dl
jne 0x436e83
mov dword [esi], 0x19
jmp 0x4372c7
test dl, 0x20
je 0x436e9d
mov dword [esi + 0x1bc4], 0xffffffff
mov dword [esi], 0xb
jmp 0x4372c7
test dl, 0x40
je 0x436eb1
mov edx, dword [ebp + 8]
mov dword [edx + 0x18], str.invalid_literal_length_code
jmp 0x4372c1
movzx ecx, dl
and ecx, 0xf
mov dword [esi + 0x48], ecx
mov dword [esi], 0x15
mov ecx, dword [esi + 0x48]
test ecx, ecx
je 0x436f0c
cmp edi, ecx
jae 0x436ef2
jmp 0x436ed0
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, dword [esi + 0x48]
jb 0x436ed0
mov ecx, dword [esi + 0x48]
mov edx, 1
shl edx, cl
sub edi, ecx
dec edx
and edx, ebx
add dword [esi + 0x40], edx
shr ebx, cl
add dword [esi + 0x1bc4], ecx
mov ecx, dword [esi + 0x40]
mov dword [esi + 0x1bc8], ecx
mov dword [esi], 0x16
mov ecx, dword [esi + 0x58]
mov edx, 1
shl edx, cl
mov ecx, dword [esi + 0x50]
dec edx
and edx, ebx
mov edx, dword [ecx + edx*4]
mov ecx, edx
shr ecx, 8
movzx ecx, cl
mov dword [ebp - 0xc], edx
cmp ecx, edi
jbe 0x436f7f
lea ecx, [ecx]
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
mov ecx, dword [esi + 0x58]
inc eax
add edi, 8
add ebx, edx
mov edx, 1
shl edx, cl
mov ecx, dword [esi + 0x50]
mov dword [ebp - 8], eax
dec edx
and edx, ebx
mov edx, dword [ecx + edx*4]
mov ecx, edx
shr ecx, 8
movzx ecx, cl
mov dword [ebp - 0xc], edx
cmp ecx, edi
ja 0x436f40
test dl, 0xf0
jne 0x437037
mov ecx, edx
shr ecx, 8
mov dword [ebp - 0x2c], ecx
movzx ecx, cl
mov dword [ebp - 0x18], ecx
movzx ecx, dl
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x24], edx
mov edx, 1
shl edx, cl
mov ecx, dword [ebp - 0x18]
dec edx
and edx, ebx
shr edx, cl
mov ecx, dword [ebp - 0xc]
shr ecx, 0x10
add edx, ecx
mov ecx, dword [esi + 0x50]
mov ecx, dword [ecx + edx*4]
mov dword [ebp - 0xc], ecx
shr ecx, 8
movzx edx, cl
movzx ecx, byte [ebp - 0x2c]
add edx, ecx
cmp edx, edi
jbe 0x437026
nop
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
mov ecx, edi
shl edx, cl
mov ecx, dword [ebp - 0x24]
dec dword [ebp - 4]
inc eax
add ebx, edx
movzx edx, ch
movzx ecx, cl
add ecx, edx
mov dword [ebp - 0x18], edx
mov edx, 1
shl edx, cl
mov ecx, dword [ebp - 0x18]
add edi, 8
mov dword [ebp - 8], eax
dec edx
and edx, ebx
shr edx, cl
movzx ecx, word [ebp - 0x22]
add edx, ecx
mov ecx, dword [esi + 0x50]
mov ecx, dword [ecx + edx*4]
mov dword [ebp - 0xc], ecx
shr ecx, 8
movzx edx, cl
add edx, dword [ebp - 0x18]
cmp edx, edi
ja 0x436fd0
movzx ecx, byte [ebp - 0x23]
mov edx, dword [ebp - 0xc]
shr ebx, cl
sub edi, ecx
add dword [esi + 0x1bc4], ecx
mov ecx, edx
shr ecx, 8
movzx ecx, cl
add dword [esi + 0x1bc4], ecx
shr ebx, cl
sub edi, ecx
mov dword [ebp - 0x18], ecx
test dl, 0x40
je 0x437060
mov edx, dword [ebp + 8]
mov dword [edx + 0x18], str.invalid_distance_code
jmp 0x4372c1
mov ecx, edx
movzx edx, dl
shr ecx, 0x10
and edx, 0xf
mov dword [esi + 0x44], ecx
mov dword [esi + 0x48], edx
mov dword [esi], 0x17
mov ecx, dword [esi + 0x48]
test ecx, ecx
je 0x4370be
cmp edi, ecx
jae 0x4370a4
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, dword [esi + 0x48]
jb 0x437082
mov ecx, dword [esi + 0x48]
mov edx, 1
shl edx, cl
sub edi, ecx
dec edx
and edx, ebx
add dword [esi + 0x44], edx
shr ebx, cl
add dword [esi + 0x1bc4], ecx
mov dword [esi], 0x18
cmp dword [ebp - 0x10], 0
je 0x43731e
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x10]
mov ecx, dword [esi + 0x44]
cmp ecx, edx
jbe 0x43712f
sub ecx, edx
mov dword [ebp - 0xc], ecx
cmp ecx, dword [esi + 0x2c]
jbe 0x4370fd
cmp dword [esi + 0x1bc0], 0
je 0x4370fd
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x18], str.invalid_distance_too_far_back
jmp 0x4372c1
mov edx, dword [esi + 0x30]
cmp ecx, edx
jbe 0x437113
sub ecx, edx
mov edx, dword [esi + 0x34]
add edx, dword [esi + 0x28]
mov dword [ebp - 0xc], ecx
sub edx, ecx
jmp 0x43711e
mov edx, dword [esi + 0x34]
sub edx, ecx
add edx, dword [esi + 0x30]
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x24], edx
mov edx, dword [esi + 0x40]
mov dword [ebp - 0x2c], edx
cmp ecx, edx
jbe 0x437140
mov ecx, edx
jmp 0x43713d
mov edx, dword [ebp - 0x1c]
sub edx, ecx
mov ecx, dword [esi + 0x40]
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x10]
cmp ecx, edx
jbe 0x43714c
mov ecx, edx
mov dword [ebp - 0xc], ecx
sub edx, ecx
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x2c]
sub edx, ecx
mov dword [esi + 0x40], edx
lea esp, [esp]
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1c]
mov dl, byte [edx]
mov byte [ecx], dl
mov edx, 1
add dword [ebp - 0x24], edx
add ecx, edx
sub dword [ebp - 0xc], edx
mov dword [ebp - 0x1c], ecx
jne 0x437160
cmp dword [esi + 0x40], 0
jne 0x4372c7
mov dword [esi], 0x14
jmp 0x4372c7
cmp dword [ebp - 0x10], 0
je 0x43731e
mov ecx, dword [ebp - 0x1c]
mov dl, byte [esi + 0x40]
mov byte [ecx], dl
inc ecx
dec dword [ebp - 0x10]
mov dword [ebp - 0x1c], ecx
mov dword [esi], 0x14
jmp 0x4372c7
cmp dword [esi + 8], 0
je 0x437271
cmp edi, 0x20
jae 0x4371e6
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0x20
jb 0x4371c4
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
add dword [edx + 0x14], ecx
add dword [esi + 0x1c], ecx
mov dword [ebp - 0x20], ecx
test ecx, ecx
je 0x43722a
mov edx, dword [esi + 0x18]
mov eax, ecx
mov ecx, dword [ebp - 0x1c]
push eax
sub ecx, eax
cmp dword [esi + 0x10], 0
push ecx
push edx
je 0x437216
call fcn.00438350
jmp 0x43721b
call fcn.00437e00
mov ecx, dword [ebp + 8]
mov dword [esi + 0x18], eax
mov dword [ecx + 0x30], eax
mov eax, dword [ebp - 8]
add esp, 0xc
cmp dword [esi + 0x10], 0
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x20], edx
mov ecx, ebx
jne 0x43725c
and ecx, 0xff00
mov edx, ebx
shl edx, 0x10
add ecx, edx
mov edx, ebx
shr edx, 8
and edx, 0xff00
shl ecx, 8
add ecx, edx
mov edx, ebx
shr edx, 0x18
add ecx, edx
cmp ecx, dword [esi + 0x18]
je 0x43726d
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x18], str.incorrect_data_check
jmp 0x4372c1
xor ebx, ebx
xor edi, edi
mov dword [esi], 0x1b
cmp dword [esi + 8], 0
je 0x437308
cmp dword [esi + 0x10], 0
je 0x437308
cmp edi, 0x20
jae 0x4372b2
cmp dword [ebp - 4], 0
je 0x43731e
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0x20
jb 0x437290
cmp ebx, dword [esi + 0x1c]
je 0x437304
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x18], str.incorrect_length_check
mov dword [esi], 0x1d
mov ecx, dword [esi]
cmp ecx, 0x1e
jbe 0x436013
pop edi
pop ebx
mov eax, 0xfffffffe
pop esi
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x1c]
mov dword [edx], eax
mov eax, dword [ebp - 4]
mov dword [edx + 0xc], ecx
mov ecx, dword [ebp - 0x10]
mov dword [edx + 4], eax
mov dword [edx + 0x10], ecx
mov dword [esi + 0x3c], edi
pop edi
mov dword [esi + 0x38], ebx
pop ebx
mov eax, 2
pop esi
mov esp, ebp
pop ebp
ret
xor ebx, ebx
xor edi, edi
mov dword [esi], 0x1c
mov dword [ebp - 0x28], 1
jmp 0x43731e
mov dword [ebp - 0x28], 0xfffffffd
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x1c]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0x10]
mov dword [ecx], eax
mov eax, dword [ebp - 4]
mov dword [ecx + 0x10], edx
mov dword [ecx + 4], eax
cmp dword [esi + 0x28], 0
mov dword [esi + 0x38], ebx
mov dword [esi + 0x3c], edi
jne 0x43735b
mov edx, dword [ebp - 0x20]
cmp edx, dword [ecx + 0x10]
je 0x437386
mov eax, dword [esi]
cmp eax, 0x1d
jge 0x437386
cmp eax, 0x1a
jl 0x43735b
cmp dword [ebp + 0xc], 4
je 0x437386
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x20]
mov edx, dword [eax + 0xc]
sub ecx, dword [eax + 0x10]
push edx
call fcn.00435ea0
add esp, 4
test eax, eax
je 0x437386
mov dword [esi], 0x1e
pop edi
pop ebx
mov eax, 0xfffffffc
pop esi
mov esp, ebp
pop ebp
ret
mov edi, dword [ebp + 8]
mov eax, dword [ebp - 0x30]
sub eax, dword [edi + 4]
mov ebx, dword [ebp - 0x20]
sub ebx, dword [edi + 0x10]
add dword [edi + 8], eax
add dword [edi + 0x14], ebx
add dword [esi + 0x1c], ebx
cmp dword [esi + 8], 0
mov dword [ebp - 0x30], eax
je 0x4373db
test ebx, ebx
je 0x4373db
cmp dword [esi + 0x10], 0
push ebx
je 0x4373c3
mov eax, dword [edi + 0xc]
mov ecx, dword [esi + 0x18]
sub eax, ebx
push eax
push ecx
call fcn.00438350
jmp 0x4373d2
mov edx, dword [edi + 0xc]
mov eax, dword [esi + 0x18]
sub edx, ebx
push edx
push eax
call fcn.00437e00
mov dword [esi + 0x18], eax
add esp, 0xc
mov dword [edi + 0x30], eax
mov eax, dword [esi]
cmp eax, 0x13
je 0x4373ee
mov dword [ebp + 8], 0
cmp eax, 0xe
jne 0x4373f5
mov dword [ebp + 8], pe_nt_image_headers32
mov ecx, dword [esi + 4]
neg ecx
sbb ecx, ecx
xor edx, edx
and ecx, 0x40
cmp eax, 0xb
setne dl
add ecx, dword [ebp + 8]
dec edx
and edx, 0x80
add edx, ecx
add edx, dword [esi + 0x3c]
cmp dword [ebp - 0x30], 0
mov dword [edi + 0x2c], edx
jne 0x437423
test ebx, ebx
je 0x437429
cmp dword [ebp + 0xc], 4
jne 0x437440
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x43600c
pop edi
pop ebx
mov eax, 0xfffffffb
pop esi
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x28]
pop edi
pop ebx
pop esi
mov esp, ebp
pop ebp
ret
mov eax, 0xfffffffe
pop esi
mov esp, ebp
pop ebp
ret