Function at 0x474620
Capabilities:
Compress data via zlib inflate or deflate

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [ebp + 8]
sub esp, 0x30
push esi
test edx, edx
je 0x475ada
mov esi, dword [edx + 0x1c]
test esi, esi
je 0x475ada
cmp dword [edx + 0xc], 0
je 0x475ada
cmp dword [edx], 0
jne 0x474656
cmp dword [edx + 4], 0
jne 0x475ada
cmp dword [esi], 0xb
jne 0x474661
mov dword [esi], 0xc
mov ecx, dword [edx + 0x10]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x10], ecx
mov ecx, dword [edx + 4]
mov dword [ebp - 4], ecx
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x10]
push ebx
mov ebx, dword [esi + 0x38]
mov dword [ebp - 0x20], ecx
mov ecx, dword [esi]
mov dword [ebp - 0x1c], eax
mov eax, dword [edx]
push edi
mov edi, dword [esi + 0x3c]
mov dword [ebp - 8], eax
mov dword [ebp - 0x28], 0
cmp ecx, 0x1e
jbe switch.0x004746a6
mov eax, 0xfffffffe
pop edi
pop ebx
pop esi
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp + 8]
jmp dword [ecx*4 + 0x475ae4]
cmp dword [esi + 8], 0
jne 0x4746be
mov dword [esi], 0xc
jmp 0x475957
cmp edi, 0x10
jae 0x4746e5
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0x10
jb 0x4746c3
test byte [esi + 8], 2
je 0x474730
cmp ebx, 0x8b1f
jne 0x474730
push 0
push 0
push 0
call fcn.004774f0
mov dword [esi + 0x18], eax
push 2
lea eax, [ebp - 0x14]
mov byte [ebp - 0x14], 0x1f
mov byte [ebp - 0x13], 0x8b
mov ecx, dword [esi + 0x18]
push eax
push ecx
call fcn.004774f0
add esp, 0x18
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 8]
xor ebx, ebx
xor edi, edi
mov dword [esi], 1
jmp 0x475957
mov eax, dword [esi + 0x20]
mov dword [esi + 0x10], 0
test eax, eax
je 0x474745
mov dword [eax + 0x30], 0xffffffff
test byte [esi + 8], 1
je 0x4747f1
movzx eax, bl
shl eax, 8
mov edx, ebx
shr edx, 8
add eax, edx
xor edx, edx
mov ecx, 0x1f
div ecx
test edx, edx
jne 0x4747f1
mov edx, ebx
and dl, 0xf
cmp dl, 8
je 0x474789
mov eax, dword [ebp + 8]
mov dword [eax + 0x18], str.unknown_compression_method
mov eax, dword [ebp - 8]
jmp 0x475951
mov eax, dword [esi + 0x24]
shr ebx, 4
mov ecx, ebx
and ecx, 0xf
sub edi, 4
add ecx, 8
test eax, eax
jne 0x4747db
mov dword [esi + 0x24], ecx
mov edx, 1
shl edx, cl
push 0
push 0
push 0
mov dword [esi + 0x14], edx
call fcn.00476970
mov ecx, dword [ebp + 8]
shr ebx, 8
not ebx
and ebx, 2
or ebx, 9
mov dword [esi + 0x18], eax
mov dword [ecx + 0x30], eax
mov eax, dword [ebp - 8]
mov dword [esi], ebx
add esp, 0xc
xor ebx, ebx
xor edi, edi
jmp 0x475957
cmp ecx, eax
jbe 0x4747a1
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 8]
mov dword [ecx + 0x18], str.invalid_window_size
jmp 0x475951
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 8]
mov dword [edx + 0x18], str.incorrect_header_check
jmp 0x475951
cmp edi, 0x10
jae 0x474832
jmp 0x474810
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0x10
jb 0x474810
mov dword [esi + 0x10], ebx
cmp bl, 8
je 0x474849
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x18], str.unknown_compression_method
jmp 0x475951
test ebx, 0xe000
je 0x474860
mov edx, dword [ebp + 8]
mov dword [edx + 0x18], str.unknown_header_flags_set
jmp 0x475951
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x474871
mov edx, ebx
shr edx, 8
and edx, 1
mov dword [ecx], edx
test dword [esi + 0x10], 0x200
je 0x47489b
mov byte [ebp - 0x14], bl
shr ebx, 8
push 2
lea eax, [ebp - 0x14]
mov byte [ebp - 0x13], bl
mov ecx, dword [esi + 0x18]
push eax
push ecx
call fcn.004774f0
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 8]
add esp, 0xc
xor ebx, ebx
xor edi, edi
mov dword [esi], 2
jmp 0x4748b0
cmp edi, 0x20
jae 0x4748d2
lea esp, [esp]
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0x20
jb 0x4748b0
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x4748dc
mov dword [ecx + 4], ebx
test dword [esi + 0x10], 0x200
je 0x474916
mov byte [ebp - 0x14], bl
mov eax, ebx
mov ecx, ebx
shr eax, 8
shr ecx, 0x10
shr ebx, 0x18
push 4
lea edx, [ebp - 0x14]
mov byte [ebp - 0x13], al
mov byte [ebp - 0x12], cl
mov byte [ebp - 0x11], bl
mov eax, dword [esi + 0x18]
push edx
push eax
call fcn.004774f0
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 8]
add esp, 0xc
xor ebx, ebx
xor edi, edi
mov dword [esi], 3
jmp 0x474930
cmp edi, 0x10
jae 0x474952
jmp 0x474930
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0x10
jb 0x474930
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x47496f
mov edx, ebx
and edx, 0xff
mov dword [ecx + 8], edx
mov edx, dword [esi + 0x20]
mov ecx, ebx
shr ecx, 8
mov dword [edx + 0xc], ecx
test dword [esi + 0x10], 0x200
je 0x474999
mov byte [ebp - 0x14], bl
shr ebx, 8
push 2
lea eax, [ebp - 0x14]
mov byte [ebp - 0x13], bl
mov ecx, dword [esi + 0x18]
push eax
push ecx
call fcn.004774f0
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 8]
add esp, 0xc
xor ebx, ebx
xor edi, edi
mov dword [esi], 4
test dword [esi + 0x10], 0x400
je 0x474a10
cmp edi, 0x10
jae 0x4749d3
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0x10
jb 0x4749b1
mov ecx, dword [esi + 0x20]
mov dword [esi + 0x40], ebx
test ecx, ecx
je 0x4749e0
mov dword [ecx + 0x14], ebx
test dword [esi + 0x10], 0x200
je 0x474a0a
mov byte [ebp - 0x14], bl
shr ebx, 8
push 2
lea eax, [ebp - 0x14]
mov byte [ebp - 0x13], bl
mov ecx, dword [esi + 0x18]
push eax
push ecx
call fcn.004774f0
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 8]
add esp, 0xc
xor ebx, ebx
xor edi, edi
jmp 0x474a1e
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x474a1e
mov dword [ecx + 0x10], 0
mov dword [esi], 5
test dword [esi + 0x10], 0x400
je 0x474ac9
mov ecx, dword [esi + 0x40]
mov edx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
cmp ecx, edx
jbe 0x474a43
mov ecx, edx
mov dword [ebp - 0xc], edx
test ecx, ecx
je 0x474abf
mov edx, dword [esi + 0x20]
test edx, edx
je 0x474a8e
mov edx, dword [edx + 0x10]
mov dword [ebp - 0x2c], edx
test edx, edx
je 0x474a8e
mov edx, dword [esi + 0x20]
mov eax, dword [edx + 0x14]
sub eax, dword [esi + 0x40]
mov edx, dword [edx + 0x18]
mov dword [ebp - 0x18], eax
add eax, ecx
cmp eax, edx
jbe 0x474a72
sub edx, dword [ebp - 0x18]
mov ecx, edx
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x2c]
push ecx
mov ecx, dword [ebp - 8]
push ecx
add edx, eax
push edx
call fcn.004f57f0
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
add esp, 0xc
test dword [esi + 0x10], 0x200
je 0x474ab4
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [esi + 0x18]
push ecx
push edx
push eax
call fcn.004774f0
mov ecx, dword [ebp - 0xc]
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 8]
add esp, 0xc
sub dword [ebp - 4], ecx
add eax, ecx
sub dword [esi + 0x40], ecx
mov dword [ebp - 8], eax
cmp dword [esi + 0x40], 0
jne 0x4759ae
mov dword [esi + 0x40], 0
mov dword [esi], 6
test dword [esi + 0x10], 0x800
je 0x474b6b
cmp dword [ebp - 4], 0
je 0x4759ae
xor ecx, ecx
nop
movzx edx, byte [ecx + eax]
inc ecx
mov dword [ebp - 0xc], ecx
mov ecx, dword [esi + 0x20]
mov dword [ebp - 0x18], edx
test ecx, ecx
je 0x474b23
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0x2c], edx
test edx, edx
je 0x474b23
mov edx, dword [esi + 0x40]
cmp edx, dword [ecx + 0x20]
jae 0x474b23
mov eax, dword [ebp - 0x2c]
mov cl, byte [ebp - 0x18]
mov byte [eax + edx], cl
inc dword [esi + 0x40]
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x18], 0
je 0x474b31
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [ebp - 4]
jb 0x474af0
test dword [esi + 0x10], 0x200
je 0x474b54
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov ecx, dword [esi + 0x18]
push edx
push eax
push ecx
call fcn.004774f0
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 8]
add esp, 0xc
mov ecx, dword [ebp - 0xc]
sub dword [ebp - 4], ecx
add eax, ecx
cmp dword [ebp - 0x18], 0
mov dword [ebp - 8], eax
jne 0x4759ae
jmp 0x474b79
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x474b79
mov dword [ecx + 0x1c], 0
mov dword [esi + 0x40], 0
mov dword [esi], 7
test dword [esi + 0x10], 0x1000
je 0x474c1b
cmp dword [ebp - 4], 0
je 0x4759ae
xor ecx, ecx
nop
movzx edx, byte [ecx + eax]
inc ecx
mov dword [ebp - 0xc], ecx
mov ecx, dword [esi + 0x20]
mov dword [ebp - 0x18], edx
test ecx, ecx
je 0x474bd3
mov edx, dword [ecx + 0x24]
mov dword [ebp - 0x2c], edx
test edx, edx
je 0x474bd3
mov edx, dword [esi + 0x40]
cmp edx, dword [ecx + 0x28]
jae 0x474bd3
mov eax, dword [ebp - 0x2c]
mov cl, byte [ebp - 0x18]
mov byte [eax + edx], cl
inc dword [esi + 0x40]
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x18], 0
je 0x474be1
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [ebp - 4]
jb 0x474ba0
test dword [esi + 0x10], 0x200
je 0x474c04
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov ecx, dword [esi + 0x18]
push edx
push eax
push ecx
call fcn.004774f0
mov dword [esi + 0x18], eax
mov eax, dword [ebp - 8]
add esp, 0xc
mov ecx, dword [ebp - 0xc]
sub dword [ebp - 4], ecx
add eax, ecx
cmp dword [ebp - 0x18], 0
mov dword [ebp - 8], eax
jne 0x4759ae
jmp 0x474c29
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x474c29
mov dword [ecx + 0x24], 0
mov dword [esi], 8
test dword [esi + 0x10], 0x200
je 0x474c7d
cmp edi, 0x10
jae 0x474c62
lea ecx, [ecx]
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0x10
jb 0x474c40
movzx ecx, word [esi + 0x18]
cmp ebx, ecx
je 0x474c79
mov edx, dword [ebp + 8]
mov dword [edx + 0x18], str.header_crc_mismatch
jmp 0x475951
xor ebx, ebx
xor edi, edi
mov eax, dword [esi + 0x20]
test eax, eax
je 0x474c9a
mov ecx, dword [esi + 0x10]
sar ecx, 9
and ecx, 1
mov dword [eax + 0x2c], ecx
mov edx, dword [esi + 0x20]
mov dword [edx + 0x30], 1
push 0
push 0
push 0
call fcn.004774f0
mov ecx, dword [ebp + 8]
mov dword [esi + 0x18], eax
mov dword [ecx + 0x30], eax
mov eax, dword [ebp - 8]
add esp, 0xc
mov dword [esi], 0xb
jmp 0x475957
cmp edi, 0x20
jae 0x474ce6
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0x20
jb 0x474cc4
mov ecx, ebx
and ecx, 0xff00
mov edx, ebx
shl edx, 0x10
add ecx, edx
mov edx, ebx
shr edx, 8
shl ecx, 8
and edx, 0xff00
add ecx, edx
mov edx, dword [ebp + 8]
shr ebx, 0x18
add ecx, ebx
mov dword [esi + 0x18], ecx
mov dword [edx + 0x30], ecx
xor ebx, ebx
xor edi, edi
mov dword [esi], 0xa
cmp dword [esi + 0xc], 0
je 0x47596e
push 0
push 0
push 0
call fcn.00476970
mov ecx, dword [ebp + 8]
mov dword [esi + 0x18], eax
mov dword [ecx + 0x30], eax
mov eax, dword [ebp - 8]
add esp, 0xc
mov dword [esi], 0xb
mov ecx, dword [ebp + 0xc]
cmp ecx, 5
je 0x4759ae
cmp ecx, 6
je 0x4759ae
cmp dword [esi + 4], 0
je 0x474d76
mov ecx, edi
and ecx, 7
shr ebx, cl
sub edi, ecx
mov dword [esi], 0x1a
jmp 0x475957
cmp edi, 3
jae 0x474da2
jmp 0x474d80
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 3
jb 0x474d80
mov ecx, ebx
and ecx, 1
shr ebx, 1
mov dword [esi + 4], ecx
mov ecx, ebx
and ecx, 3
dec edi
cmp ecx, 3
ja case.default.0x474db7
jmp dword [ecx*4 + 0x475b60]
shr ebx, 2
mov dword [esi], 0xd
sub edi, 2
jmp 0x475957
cmp dword [ebp + 0xc], 6
mov dword [esi + 0x4c], 0x5a3698
mov dword [esi + 0x54], 9
mov dword [esi + 0x50], 0x5a3e98
mov dword [esi + 0x58], 5
mov dword [esi], 0x13
jne case.default.0x474db7
shr ebx, 2
sub edi, 2
jmp 0x4759ae
shr ebx, 2
mov dword [esi], 0x10
sub edi, 2
jmp 0x475957
mov edx, dword [ebp + 8]
mov dword [edx + 0x18], str.invalid_block_type
mov dword [esi], 0x1d
shr ebx, 2
sub edi, 2
jmp 0x475957
mov ecx, edi
and ecx, 7
sub edi, ecx
shr ebx, cl
cmp edi, 0x20
jae 0x474e62
lea esp, [esp]
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0x20
jb 0x474e40
mov edx, ebx
mov ecx, ebx
not edx
and ecx, 0xffff
shr edx, 0x10
cmp ecx, edx
je 0x474e84
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x18], str.invalid_stored_block_lengths
jmp 0x475951
xor ebx, ebx
xor edi, edi
cmp dword [ebp + 0xc], 6
mov dword [esi + 0x40], ecx
mov dword [esi], 0xe
je 0x4759ae
mov dword [esi], 0xf
mov ecx, dword [esi + 0x40]
mov dword [ebp - 0xc], ecx
test ecx, ecx
je 0x475522
mov edx, dword [ebp - 4]
cmp ecx, edx
jbe 0x474ebb
mov ecx, edx
mov dword [ebp - 0xc], edx
mov edx, dword [ebp - 0x10]
cmp ecx, edx
jbe 0x474ec7
mov ecx, edx
mov dword [ebp - 0xc], ecx
test ecx, ecx
je 0x4759ae
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x1c]
push edx
push eax
push ecx
call fcn.004f57f0
mov eax, dword [ebp - 0xc]
sub dword [ebp - 4], eax
add dword [ebp - 8], eax
sub dword [ebp - 0x10], eax
add dword [ebp - 0x1c], eax
add esp, 0xc
sub dword [esi + 0x40], eax
mov eax, dword [ebp - 8]
jmp 0x475957
cmp edi, 0xe
jae 0x474f24
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0xe
jb 0x474f02
mov ecx, ebx
and ecx, 0x1f
shr ebx, 5
add ecx, 0x101
mov edx, ebx
mov dword [esi + 0x60], ecx
shr ebx, 5
mov ecx, ebx
and edx, 0x1f
and ecx, 0xf
inc edx
add ecx, 4
shr ebx, 4
sub edi, 0xe
cmp dword [esi + 0x60], 0x11e
mov dword [esi + 0x64], edx
mov dword [esi + 0x5c], ecx
ja 0x475043
cmp edx, 0x1e
ja 0x475043
mov dword [esi + 0x68], 0
mov dword [esi], 0x11
mov ecx, dword [esi + 0x68]
cmp ecx, dword [esi + 0x5c]
jae 0x474fcd
lea ecx, [ecx]
cmp edi, 3
jae 0x474fa7
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 3
jb 0x474f85
mov edx, dword [esi + 0x68]
movzx edx, word [edx*2 + 0x5a3f18]
mov ecx, ebx
and ecx, 7
mov word [esi + edx*2 + 0x70], cx
inc dword [esi + 0x68]
mov ecx, dword [esi + 0x68]
shr ebx, 3
sub edi, 3
cmp ecx, dword [esi + 0x5c]
jb 0x474f80
mov eax, 0x13
cmp dword [esi + 0x68], eax
jae 0x474ffa
jmp 0x474fe0
mov edx, dword [esi + 0x68]
movzx ecx, word [edx*2 + 0x5a3f18]
xor edx, edx
mov word [esi + ecx*2 + 0x70], dx
inc dword [esi + 0x68]
cmp dword [esi + 0x68], eax
jb 0x474fe0
lea eax, [esi + 0x530]
lea ecx, [esi + 0x6c]
mov dword [ecx], eax
mov dword [esi + 0x4c], eax
lea edx, [esi + 0x2f0]
push edx
lea eax, [esi + 0x54]
push eax
push ecx
mov dword [eax], 7
push 0x13
lea eax, [esi + 0x70]
push eax
push 0
call fcn.00476500
add esp, 0x18
mov dword [ebp - 0x28], eax
test eax, eax
mov eax, dword [ebp - 8]
je 0x475052
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x18], str.invalid_code_lengths_set
jmp 0x475951
mov edx, dword [ebp + 8]
mov dword [edx + 0x18], str.too_many_length_or_distance_symbols
jmp 0x475951
mov dword [esi + 0x68], 0
mov dword [esi], 0x12
mov edx, dword [esi + 0x64]
add edx, dword [esi + 0x60]
cmp dword [esi + 0x68], edx
jae 0x475253
mov edi, edi
mov ecx, dword [esi + 0x54]
mov edx, 1
shl edx, cl
mov ecx, dword [esi + 0x4c]
dec edx
and edx, ebx
mov ecx, dword [ecx + edx*4]
mov edx, ecx
shr edx, 8
movzx edx, dl
mov dword [ebp - 0xc], ecx
cmp edx, edi
jbe 0x4750d1
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
mov ecx, dword [esi + 0x54]
inc eax
add edi, 8
add ebx, edx
mov edx, 1
shl edx, cl
mov ecx, dword [esi + 0x4c]
mov dword [ebp - 8], eax
dec edx
and edx, ebx
mov ecx, dword [ecx + edx*4]
mov edx, ecx
shr edx, 8
movzx edx, dl
mov dword [ebp - 0xc], ecx
cmp edx, edi
ja 0x475092
mov edx, ecx
shr edx, 0x10
mov dword [ebp - 0x2c], edx
cmp dx, 0x10
jae 0x4750f9
shr ecx, 8
movzx ecx, cl
shr ebx, cl
sub edi, ecx
mov ecx, dword [esi + 0x68]
mov word [esi + ecx*2 + 0x70], dx
inc dword [esi + 0x68]
jmp 0x475244
jne 0x47516a
mov edx, ecx
shr edx, 8
movzx edx, dl
add edx, 2
cmp edi, edx
jae 0x47513a
lea ebx, [ebx]
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
mov ecx, dword [ebp - 0xc]
inc eax
add edi, 8
add ebx, edx
movzx edx, ch
add edx, 2
mov dword [ebp - 8], eax
cmp edi, edx
jb 0x475110
movzx ecx, ch
shr ebx, cl
sub edi, ecx
mov ecx, dword [esi + 0x68]
test ecx, ecx
je 0x475275
movzx ecx, word [esi + ecx*2 + 0x6e]
mov dword [ebp - 0x18], ecx
mov ecx, ebx
and ecx, 3
add ecx, 3
shr ebx, 2
mov dword [ebp - 0xc], ecx
sub edi, 2
jmp 0x47520f
cmp word [ebp - 0xa], 0x11
movzx ecx, ch
mov dword [ebp - 0x24], ecx
jne 0x4751be
lea edx, [ecx + 3]
cmp edi, edx
jae 0x4751a7
mov edi, edi
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
mov ecx, dword [ebp - 0x24]
inc eax
add edi, 8
add ebx, edx
lea edx, [ecx + 3]
mov dword [ebp - 8], eax
cmp edi, edx
jb 0x475180
shr ebx, cl
mov edx, ebx
and edx, 7
add edx, 3
mov dword [ebp - 0xc], edx
shr ebx, 3
mov edx, 0xfffffffd
jmp 0x475201
lea edx, [ecx + 7]
cmp edi, edx
jae 0x4751ec
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
mov ecx, dword [ebp - 0x24]
inc eax
add edi, 8
add ebx, edx
lea edx, [ecx + 7]
mov dword [ebp - 8], eax
cmp edi, edx
jb 0x4751c5
shr ebx, cl
mov edx, ebx
and edx, 0x7f
add edx, 0xb
mov dword [ebp - 0xc], edx
shr ebx, 7
mov edx, 0xfffffff9
sub edx, ecx
mov ecx, dword [ebp - 0xc]
add edi, edx
mov dword [ebp - 0x18], 0
mov edx, dword [esi + 0x68]
add edx, ecx
mov ecx, dword [esi + 0x64]
add ecx, dword [esi + 0x60]
cmp edx, ecx
ja 0x475284
cmp dword [ebp - 0xc], 0
je 0x475244
mov ecx, dword [ebp - 0x18]
jmp 0x475230
mov edx, dword [esi + 0x68]
dec dword [ebp - 0xc]
mov word [esi + edx*2 + 0x70], cx
inc dword [esi + 0x68]
cmp dword [ebp - 0xc], 0
jne 0x475230
mov ecx, dword [esi + 0x64]
add ecx, dword [esi + 0x60]
cmp dword [esi + 0x68], ecx
jb 0x475070
cmp dword [esi], 0x1d
je 0x475957
cmp word [esi + 0x270], 0
jne 0x475293
mov edx, dword [ebp + 8]
mov dword [edx + 0x18], str.invalid_code____missing_end_of_block
jmp 0x475951
mov edx, dword [ebp + 8]
mov dword [edx + 0x18], str.invalid_bit_length_repeat
jmp 0x475951
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x18], str.invalid_bit_length_repeat
jmp 0x475951
lea eax, [esi + 0x530]
lea ecx, [esi + 0x6c]
mov dword [ecx], eax
mov dword [esi + 0x4c], eax
lea edx, [esi + 0x2f0]
push edx
lea eax, [esi + 0x54]
push eax
push ecx
mov dword [eax], 9
mov eax, dword [esi + 0x60]
push eax
lea ecx, [esi + 0x70]
push ecx
push 1
call fcn.00476500
add esp, 0x18
mov dword [ebp - 0x28], eax
test eax, eax
je 0x4752de
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 8]
mov dword [edx + 0x18], str.invalid_literal_lengths_set
jmp 0x475951
mov eax, dword [esi + 0x6c]
lea ecx, [esi + 0x6c]
mov dword [esi + 0x50], eax
lea edx, [esi + 0x2f0]
push edx
mov edx, dword [esi + 0x60]
lea eax, [esi + 0x58]
push eax
push ecx
mov ecx, dword [esi + 0x64]
mov dword [eax], 6
push ecx
lea eax, [esi + edx*2 + 0x70]
push eax
push 2
call fcn.00476500
add esp, 0x18
mov dword [ebp - 0x28], eax
test eax, eax
mov eax, dword [ebp - 8]
je 0x475328
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x18], str.invalid_distances_set
jmp 0x475951
cmp dword [ebp + 0xc], 6
mov dword [esi], 0x13
je 0x4759ae
mov dword [esi], 0x14
cmp dword [ebp - 4], 6
jb 0x4753b4
cmp dword [ebp - 0x10], 0x102
jb 0x4753b4
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x10]
mov dword [eax + 0xc], edx
mov edx, dword [ebp - 8]
mov dword [eax], edx
mov edx, dword [ebp - 0x20]
mov dword [eax + 0x10], ecx
mov ecx, dword [ebp - 4]
push edx
mov dword [eax + 4], ecx
push eax
mov dword [esi + 0x38], ebx
mov dword [esi + 0x3c], edi
call fcn.004760e0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 0x10]
mov ebx, dword [esi + 0x38]
mov edi, dword [esi + 0x3c]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [eax]
mov dword [ebp - 0x10], edx
mov edx, dword [eax + 4]
add esp, 8
cmp dword [esi], 0xb
mov dword [ebp - 8], ecx
mov dword [ebp - 4], edx
mov eax, ecx
jne 0x475957
mov dword [esi + 0x1bc4], 0xffffffff
jmp 0x475957
mov ecx, dword [esi + 0x54]
mov edx, 1
shl edx, cl
mov ecx, dword [esi + 0x4c]
mov dword [esi + 0x1bc4], 0
dec edx
and edx, ebx
mov edx, dword [ecx + edx*4]
mov ecx, edx
shr ecx, 8
movzx ecx, cl
mov dword [ebp - 0xc], edx
cmp ecx, edi
jbe 0x47541f
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
mov ecx, dword [esi + 0x54]
inc eax
add edi, 8
add ebx, edx
mov edx, 1
shl edx, cl
mov ecx, dword [esi + 0x4c]
mov dword [ebp - 8], eax
dec edx
and edx, ebx
mov edx, dword [ecx + edx*4]
mov ecx, edx
shr ecx, 8
movzx ecx, cl
mov dword [ebp - 0xc], edx
cmp ecx, edi
ja 0x4753e0
test dl, dl
je 0x4754e7
test dl, 0xf0
jne 0x4754e7
mov ecx, edx
shr ecx, 8
mov dword [ebp - 0x2c], ecx
movzx ecx, cl
mov dword [ebp - 0x18], ecx
movzx ecx, dl
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x24], edx
mov edx, 1
shl edx, cl
mov ecx, dword [ebp - 0x18]
dec edx
and edx, ebx
shr edx, cl
mov ecx, dword [ebp - 0xc]
shr ecx, 0x10
add edx, ecx
mov ecx, dword [esi + 0x4c]
mov ecx, dword [ecx + edx*4]
mov dword [ebp - 0xc], ecx
shr ecx, 8
movzx edx, cl
movzx ecx, byte [ebp - 0x2c]
add edx, ecx
cmp edx, edi
jbe 0x4754d6
jmp 0x475480
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
mov ecx, edi
shl edx, cl
mov ecx, dword [ebp - 0x24]
dec dword [ebp - 4]
inc eax
add ebx, edx
movzx edx, ch
movzx ecx, cl
add ecx, edx
mov dword [ebp - 0x18], edx
mov edx, 1
shl edx, cl
mov ecx, dword [ebp - 0x18]
add edi, 8
mov dword [ebp - 8], eax
dec edx
and edx, ebx
shr edx, cl
movzx ecx, word [ebp - 0x22]
add edx, ecx
mov ecx, dword [esi + 0x4c]
mov ecx, dword [ecx + edx*4]
mov dword [ebp - 0xc], ecx
shr ecx, 8
movzx edx, cl
add edx, dword [ebp - 0x18]
cmp edx, edi
ja 0x475480
movzx ecx, byte [ebp - 0x23]
mov edx, dword [ebp - 0xc]
shr ebx, cl
sub edi, ecx
mov dword [esi + 0x1bc4], ecx
mov ecx, edx
shr ecx, 8
movzx ecx, cl
add dword [esi + 0x1bc4], ecx
shr ebx, cl
sub edi, ecx
mov dword [ebp - 0x18], ecx
mov ecx, edx
shr ecx, 0x10
mov dword [esi + 0x40], ecx
test dl, dl
jne 0x475513
mov dword [esi], 0x19
jmp 0x475957
test dl, 0x20
je 0x47552d
mov dword [esi + 0x1bc4], 0xffffffff
mov dword [esi], 0xb
jmp 0x475957
test dl, 0x40
je 0x475541
mov edx, dword [ebp + 8]
mov dword [edx + 0x18], str.invalid_literal_length_code
jmp 0x475951
movzx ecx, dl
and ecx, 0xf
mov dword [esi + 0x48], ecx
mov dword [esi], 0x15
mov ecx, dword [esi + 0x48]
test ecx, ecx
je 0x47559c
cmp edi, ecx
jae 0x475582
jmp 0x475560
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, dword [esi + 0x48]
jb 0x475560
mov ecx, dword [esi + 0x48]
mov edx, 1
shl edx, cl
sub edi, ecx
dec edx
and edx, ebx
add dword [esi + 0x40], edx
shr ebx, cl
add dword [esi + 0x1bc4], ecx
mov ecx, dword [esi + 0x40]
mov dword [esi + 0x1bc8], ecx
mov dword [esi], 0x16
mov ecx, dword [esi + 0x58]
mov edx, 1
shl edx, cl
mov ecx, dword [esi + 0x50]
dec edx
and edx, ebx
mov edx, dword [ecx + edx*4]
mov ecx, edx
shr ecx, 8
movzx ecx, cl
mov dword [ebp - 0xc], edx
cmp ecx, edi
jbe 0x47560f
lea ecx, [ecx]
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
mov ecx, dword [esi + 0x58]
inc eax
add edi, 8
add ebx, edx
mov edx, 1
shl edx, cl
mov ecx, dword [esi + 0x50]
mov dword [ebp - 8], eax
dec edx
and edx, ebx
mov edx, dword [ecx + edx*4]
mov ecx, edx
shr ecx, 8
movzx ecx, cl
mov dword [ebp - 0xc], edx
cmp ecx, edi
ja 0x4755d0
test dl, 0xf0
jne 0x4756c7
mov ecx, edx
shr ecx, 8
mov dword [ebp - 0x2c], ecx
movzx ecx, cl
mov dword [ebp - 0x18], ecx
movzx ecx, dl
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x24], edx
mov edx, 1
shl edx, cl
mov ecx, dword [ebp - 0x18]
dec edx
and edx, ebx
shr edx, cl
mov ecx, dword [ebp - 0xc]
shr ecx, 0x10
add edx, ecx
mov ecx, dword [esi + 0x50]
mov ecx, dword [ecx + edx*4]
mov dword [ebp - 0xc], ecx
shr ecx, 8
movzx edx, cl
movzx ecx, byte [ebp - 0x2c]
add edx, ecx
cmp edx, edi
jbe 0x4756b6
nop
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
mov ecx, edi
shl edx, cl
mov ecx, dword [ebp - 0x24]
dec dword [ebp - 4]
inc eax
add ebx, edx
movzx edx, ch
movzx ecx, cl
add ecx, edx
mov dword [ebp - 0x18], edx
mov edx, 1
shl edx, cl
mov ecx, dword [ebp - 0x18]
add edi, 8
mov dword [ebp - 8], eax
dec edx
and edx, ebx
shr edx, cl
movzx ecx, word [ebp - 0x22]
add edx, ecx
mov ecx, dword [esi + 0x50]
mov ecx, dword [ecx + edx*4]
mov dword [ebp - 0xc], ecx
shr ecx, 8
movzx edx, cl
add edx, dword [ebp - 0x18]
cmp edx, edi
ja 0x475660
movzx ecx, byte [ebp - 0x23]
mov edx, dword [ebp - 0xc]
shr ebx, cl
sub edi, ecx
add dword [esi + 0x1bc4], ecx
mov ecx, edx
shr ecx, 8
movzx ecx, cl
add dword [esi + 0x1bc4], ecx
shr ebx, cl
sub edi, ecx
mov dword [ebp - 0x18], ecx
test dl, 0x40
je 0x4756f0
mov edx, dword [ebp + 8]
mov dword [edx + 0x18], str.invalid_distance_code
jmp 0x475951
mov ecx, edx
movzx edx, dl
shr ecx, 0x10
and edx, 0xf
mov dword [esi + 0x44], ecx
mov dword [esi + 0x48], edx
mov dword [esi], 0x17
mov ecx, dword [esi + 0x48]
test ecx, ecx
je 0x47574e
cmp edi, ecx
jae 0x475734
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, dword [esi + 0x48]
jb 0x475712
mov ecx, dword [esi + 0x48]
mov edx, 1
shl edx, cl
sub edi, ecx
dec edx
and edx, ebx
add dword [esi + 0x44], edx
shr ebx, cl
add dword [esi + 0x1bc4], ecx
mov dword [esi], 0x18
cmp dword [ebp - 0x10], 0
je 0x4759ae
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x10]
mov ecx, dword [esi + 0x44]
cmp ecx, edx
jbe 0x4757bf
sub ecx, edx
mov dword [ebp - 0xc], ecx
cmp ecx, dword [esi + 0x2c]
jbe 0x47578d
cmp dword [esi + 0x1bc0], 0
je 0x47578d
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x18], str.invalid_distance_too_far_back
jmp 0x475951
mov edx, dword [esi + 0x30]
cmp ecx, edx
jbe 0x4757a3
sub ecx, edx
mov edx, dword [esi + 0x34]
add edx, dword [esi + 0x28]
mov dword [ebp - 0xc], ecx
sub edx, ecx
jmp 0x4757ae
mov edx, dword [esi + 0x34]
sub edx, ecx
add edx, dword [esi + 0x30]
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x24], edx
mov edx, dword [esi + 0x40]
mov dword [ebp - 0x2c], edx
cmp ecx, edx
jbe 0x4757d0
mov ecx, edx
jmp 0x4757cd
mov edx, dword [ebp - 0x1c]
sub edx, ecx
mov ecx, dword [esi + 0x40]
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x10]
cmp ecx, edx
jbe 0x4757dc
mov ecx, edx
mov dword [ebp - 0xc], ecx
sub edx, ecx
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x2c]
sub edx, ecx
mov dword [esi + 0x40], edx
lea esp, [esp]
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1c]
mov dl, byte [edx]
mov byte [ecx], dl
mov edx, 1
add dword [ebp - 0x24], edx
add ecx, edx
sub dword [ebp - 0xc], edx
mov dword [ebp - 0x1c], ecx
jne 0x4757f0
cmp dword [esi + 0x40], 0
jne 0x475957
mov dword [esi], 0x14
jmp 0x475957
cmp dword [ebp - 0x10], 0
je 0x4759ae
mov ecx, dword [ebp - 0x1c]
mov dl, byte [esi + 0x40]
mov byte [ecx], dl
inc ecx
dec dword [ebp - 0x10]
mov dword [ebp - 0x1c], ecx
mov dword [esi], 0x14
jmp 0x475957
cmp dword [esi + 8], 0
je 0x475901
cmp edi, 0x20
jae 0x475876
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0x20
jb 0x475854
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
add dword [edx + 0x14], ecx
add dword [esi + 0x1c], ecx
mov dword [ebp - 0x20], ecx
test ecx, ecx
je 0x4758ba
mov edx, dword [esi + 0x18]
mov eax, ecx
mov ecx, dword [ebp - 0x1c]
push eax
sub ecx, eax
cmp dword [esi + 0x10], 0
push ecx
push edx
je 0x4758a6
call fcn.004774f0
jmp 0x4758ab
call fcn.00476970
mov ecx, dword [ebp + 8]
mov dword [esi + 0x18], eax
mov dword [ecx + 0x30], eax
mov eax, dword [ebp - 8]
add esp, 0xc
cmp dword [esi + 0x10], 0
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x20], edx
mov ecx, ebx
jne 0x4758ec
and ecx, 0xff00
mov edx, ebx
shl edx, 0x10
add ecx, edx
mov edx, ebx
shr edx, 8
and edx, 0xff00
shl ecx, 8
add ecx, edx
mov edx, ebx
shr edx, 0x18
add ecx, edx
cmp ecx, dword [esi + 0x18]
je 0x4758fd
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x18], str.incorrect_data_check
jmp 0x475951
xor ebx, ebx
xor edi, edi
mov dword [esi], 0x1b
cmp dword [esi + 8], 0
je 0x475998
cmp dword [esi + 0x10], 0
je 0x475998
cmp edi, 0x20
jae 0x475942
cmp dword [ebp - 4], 0
je 0x4759ae
movzx edx, byte [eax]
dec dword [ebp - 4]
mov ecx, edi
shl edx, cl
inc eax
add edi, 8
mov dword [ebp - 8], eax
add ebx, edx
cmp edi, 0x20
jb 0x475920
cmp ebx, dword [esi + 0x1c]
je 0x475994
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x18], str.incorrect_length_check
mov dword [esi], 0x1d
mov ecx, dword [esi]
cmp ecx, 0x1e
jbe 0x4746a3
pop edi
pop ebx
mov eax, 0xfffffffe
pop esi
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x1c]
mov dword [edx], eax
mov eax, dword [ebp - 4]
mov dword [edx + 0xc], ecx
mov ecx, dword [ebp - 0x10]
mov dword [edx + 4], eax
mov dword [edx + 0x10], ecx
mov dword [esi + 0x3c], edi
pop edi
mov dword [esi + 0x38], ebx
pop ebx
mov eax, 2
pop esi
mov esp, ebp
pop ebp
ret
xor ebx, ebx
xor edi, edi
mov dword [esi], 0x1c
mov dword [ebp - 0x28], 1
jmp 0x4759ae
mov dword [ebp - 0x28], 0xfffffffd
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x1c]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0x10]
mov dword [ecx], eax
mov eax, dword [ebp - 4]
mov dword [ecx + 0x10], edx
mov dword [ecx + 4], eax
cmp dword [esi + 0x28], 0
mov dword [esi + 0x38], ebx
mov dword [esi + 0x3c], edi
jne 0x4759eb
mov edx, dword [ebp - 0x20]
cmp edx, dword [ecx + 0x10]
je 0x475a16
mov eax, dword [esi]
cmp eax, 0x1d
jge 0x475a16
cmp eax, 0x1a
jl 0x4759eb
cmp dword [ebp + 0xc], 4
je 0x475a16
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x20]
mov edx, dword [eax + 0xc]
sub ecx, dword [eax + 0x10]
push edx
call fcn.00474530
add esp, 4
test eax, eax
je 0x475a16
mov dword [esi], 0x1e
pop edi
pop ebx
mov eax, 0xfffffffc
pop esi
mov esp, ebp
pop ebp
ret
mov edi, dword [ebp + 8]
mov eax, dword [ebp - 0x30]
sub eax, dword [edi + 4]
mov ebx, dword [ebp - 0x20]
sub ebx, dword [edi + 0x10]
add dword [edi + 8], eax
add dword [edi + 0x14], ebx
add dword [esi + 0x1c], ebx
cmp dword [esi + 8], 0
mov dword [ebp - 0x30], eax
je 0x475a6b
test ebx, ebx
je 0x475a6b
cmp dword [esi + 0x10], 0
push ebx
je 0x475a53
mov eax, dword [edi + 0xc]
mov ecx, dword [esi + 0x18]
sub eax, ebx
push eax
push ecx
call fcn.004774f0
jmp 0x475a62
mov edx, dword [edi + 0xc]
mov eax, dword [esi + 0x18]
sub edx, ebx
push edx
push eax
call fcn.00476970
mov dword [esi + 0x18], eax
add esp, 0xc
mov dword [edi + 0x30], eax
mov eax, dword [esi]
cmp eax, 0x13
je 0x475a7e
mov dword [ebp + 8], 0
cmp eax, 0xe
jne 0x475a85
mov dword [ebp + 8], 0x100
mov ecx, dword [esi + 4]
neg ecx
sbb ecx, ecx
xor edx, edx
and ecx, 0x40
cmp eax, 0xb
setne dl
add ecx, dword [ebp + 8]
dec edx
and edx, 0x80
add edx, ecx
add edx, dword [esi + 0x3c]
cmp dword [ebp - 0x30], 0
mov dword [edi + 0x2c], edx
jne 0x475ab3
test ebx, ebx
je 0x475ab9
cmp dword [ebp + 0xc], 4
jne 0x475ad0
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x47469c
pop edi
pop ebx
mov eax, 0xfffffffb
pop esi
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x28]
pop edi
pop ebx
pop esi
mov esp, ebp
pop ebp
ret
mov eax, 0xfffffffe
pop esi
mov esp, ebp
pop ebp
ret