Function at 0xcd3a80
Capabilities:
Compress data via zlib inflate or deflate

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
mov edi, ecx
mov ebx, edx
mov dword [ebp - 0x10], ebx
test edi, edi
je 0xcd4414
cmp dword [edi + 0x20], 0
je 0xcd4414
cmp dword [edi + 0x24], 0
je 0xcd4414
mov esi, dword [edi + 0x1c]
test esi, esi
je 0xcd4414
cmp dword [esi], edi
jne 0xcd4414
mov eax, dword [esi + 4]
cmp eax, 0x2a
je 0xcd3af0
cmp eax, 0x39
je 0xcd3af0
cmp eax, 0x45
je 0xcd3af0
cmp eax, 0x49
je 0xcd3af0
cmp eax, 0x5b
je 0xcd3af0
cmp eax, 0x67
je 0xcd3af0
cmp eax, 0x71
je 0xcd3af0
cmp eax, 0x29a
jne 0xcd4414
cmp dword [edi + 0xc], 0
je 0xcd440d
cmp dword [edi + 4], 0
je 0xcd3b09
cmp dword [edi], 0
je 0xcd440d
cmp eax, 0x29a
jne 0xcd3b19
cmp ebx, 4
jne 0xcd440d
cmp dword [edi + 0x10], 0
je 0xcd3b8c
cmp dword [esi + 0x14], 0
mov edx, dword [esi + 0x28]
mov dword [esi + 0x28], ebx
je 0xcd3b46
call fcn.00cd32c0
cmp dword [edi + 0x10], 0
jne 0xcd3b78
mov dword [esi + 0x28], 0xffffffff
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [edi + 4], 0
jne 0xcd3b78
xor eax, eax
mov ecx, 9
cmp edx, 4
cmovg eax, ecx
add edx, edx
sub edx, eax
xor ecx, ecx
cmp ebx, 4
mov eax, 9
cmovg ecx, eax
lea eax, [ebx + ebx]
sub eax, ecx
cmp eax, edx
jg 0xcd3b78
cmp ebx, 4
jne 0xcd3b8c
mov eax, dword [esi + 4]
cmp eax, 0x29a
jne 0xcd3b9f
cmp dword [edi + 4], 0
je 0xcd3c5c
mov dword [edi + 0x18], 0xa3f0e4
mov eax, 0xfffffffb
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x2a
jne 0xcd3c5c
mov ecx, dword [esi + 0x30]
shl ecx, 0xc
sub ecx, 0x7800
cmp dword [esi + 0x88], 2
mov dword [ebp - 8], ecx
jge 0xcd3bf0
mov eax, dword [esi + 0x84]
cmp eax, 2
jl 0xcd3bf0
cmp eax, 6
jge 0xcd3bda
mov edx, 0x40
lea eax, [edx + 0x20]
jmp 0xcd3bf5
jne 0xcd3be6
mov edx, pe_nt_image_headers32
lea eax, [edx + 0x20]
jmp 0xcd3bf5
mov edx, 0xc0
lea eax, [edx + 0x20]
jmp 0xcd3bf5
xor edx, edx
lea eax, [edx + 0x20]
or ecx, edx
cmp dword [esi + 0x6c], 0
je 0xcd3c02
mov ecx, dword [ebp - 8]
or ecx, eax
mov eax, 0x8421085
mul ecx
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 4
inc ecx
mov edx, ecx
shl edx, 5
sub edx, ecx
mov ecx, esi
call fcn.00cd3310
cmp dword [esi + 0x6c], 0
je 0xcd3c3d
movzx edx, word [edi + 0x32]
mov ecx, esi
call fcn.00cd3310
movzx edx, word [edi + 0x30]
mov ecx, esi
call fcn.00cd3310
mov dword [edi + 0x30], 1
mov ecx, edi
mov dword [esi + 4], 0x71
call fcn.00cd32c0
cmp dword [esi + 0x14], 0
jne 0xcd3b36
cmp dword [esi + 4], 0x39
jne 0xcd3e7b
mov dword [edi + 0x30], 0
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 8]
mov byte [ecx + eax], 0x1f
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 8]
inc ecx
mov dword [esi + 0x14], ecx
mov byte [ecx + eax], 0x8b
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 8]
inc ecx
mov dword [esi + 0x14], ecx
mov byte [ecx + eax], 8
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x1c]
inc edx
mov dword [esi + 0x14], edx
test eax, eax
jne 0xcd3d42
mov eax, dword [esi + 8]
mov byte [edx + eax], 0
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 8]
inc ecx
mov dword [esi + 0x14], ecx
mov byte [ecx + eax], 0
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 8]
inc ecx
mov dword [esi + 0x14], ecx
mov byte [ecx + eax], 0
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 8]
inc ecx
mov dword [esi + 0x14], ecx
mov byte [ecx + eax], 0
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 8]
inc ecx
mov dword [esi + 0x14], ecx
mov byte [ecx + eax], 0
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x84]
inc edx
mov dword [esi + 0x14], edx
cmp eax, 9
jne 0xcd3cfa
mov cl, 2
jmp 0xcd3d0e
cmp dword [esi + 0x88], 2
jge 0xcd3d0c
cmp eax, 2
jl 0xcd3d0c
xor cl, cl
jmp 0xcd3d0e
mov cl, 4
mov eax, dword [esi + 8]
mov byte [edx + eax], cl
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 8]
inc ecx
mov dword [esi + 0x14], ecx
mov byte [ecx + eax], 0xa
mov ecx, edi
inc dword [esi + 0x14]
mov dword [esi + 4], 0x71
call fcn.00cd32c0
cmp dword [esi + 0x14], 0
jne 0xcd3b36
jmp 0xcd3e7b
mov ecx, dword [eax + 0x2c]
mov eax, dword [eax + 0x10]
neg ecx
sbb cl, cl
and cl, 2
neg eax
sbb al, al
and al, 4
add cl, al
mov eax, dword [esi + 0x1c]
mov eax, dword [eax + 0x1c]
neg eax
sbb al, al
and al, 8
add cl, al
mov eax, dword [esi + 0x1c]
mov eax, dword [eax + 0x24]
neg eax
sbb al, al
and al, 0x10
add cl, al
mov eax, dword [esi + 0x1c]
cmp dword [eax], 0
setne al
add cl, al
mov eax, dword [esi + 8]
mov byte [edx + eax], cl
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x1c]
inc edx
mov ecx, dword [esi + 8]
mov dword [esi + 0x14], edx
movzx eax, byte [eax + 4]
mov byte [edx + ecx], al
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x1c]
inc edx
mov ecx, dword [esi + 8]
mov dword [esi + 0x14], edx
movzx eax, byte [eax + 5]
mov byte [edx + ecx], al
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x1c]
inc edx
mov ecx, dword [esi + 8]
mov dword [esi + 0x14], edx
movzx eax, byte [eax + 6]
mov byte [edx + ecx], al
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x1c]
inc edx
mov ecx, dword [esi + 8]
mov dword [esi + 0x14], edx
movzx eax, byte [eax + 7]
mov byte [edx + ecx], al
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x84]
inc edx
mov dword [esi + 0x14], edx
cmp eax, 9
jne 0xcd3dea
mov cl, 2
jmp 0xcd3dfe
cmp dword [esi + 0x88], 2
jge 0xcd3dfc
cmp eax, 2
jl 0xcd3dfc
xor cl, cl
jmp 0xcd3dfe
mov cl, 4
mov eax, dword [esi + 8]
mov byte [edx + eax], cl
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x1c]
inc edx
mov ecx, dword [esi + 8]
mov dword [esi + 0x14], edx
mov al, byte [eax + 0xc]
mov byte [edx + ecx], al
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x1c]
inc edx
mov dword [esi + 0x14], edx
cmp dword [eax + 0x10], 0
je 0xcd3e4c
mov ecx, dword [esi + 8]
movzx eax, byte [eax + 0x14]
mov byte [edx + ecx], al
mov edx, dword [esi + 0x14]
mov eax, dword [esi + 0x1c]
inc edx
mov ecx, dword [esi + 8]
mov dword [esi + 0x14], edx
movzx eax, byte [eax + 0x15]
mov byte [edx + ecx], al
mov edx, dword [esi + 0x14]
inc edx
mov dword [esi + 0x14], edx
mov eax, dword [esi + 0x1c]
cmp dword [eax + 0x2c], 0
je 0xcd3e6d
mov eax, dword [esi + 8]
test eax, eax
je 0xcd3e6a
mov ecx, dword [edi + 0x30]
push edx
mov edx, eax
call fcn.00cd1840
add esp, 4
mov dword [edi + 0x30], eax
mov dword [esi + 0x20], 0
mov dword [esi + 4], 0x45
mov eax, dword [esi + 4]
cmp eax, 0x45
jne 0xcd3fd2
mov eax, dword [esi + 0x1c]
cmp dword [eax + 0x10], 0
je 0xcd3fc9
movzx eax, word [eax + 0x14]
sub eax, dword [esi + 0x20]
mov edx, dword [esi + 0x14]
mov ecx, edx
mov ebx, dword [esi + 0xc]
mov dword [ebp - 4], eax
add eax, edx
mov dword [ebp - 8], edx
cmp eax, ebx
jbe 0xcd3f72
mov eax, dword [esi + 0x1c]
sub ebx, ecx
push ebx
mov dword [ebp - 0xc], ebx
mov eax, dword [eax + 0x10]
add eax, dword [esi + 0x20]
push eax
mov eax, dword [esi + 8]
add eax, ecx
push eax
call fcn.00c16e70
mov eax, dword [esi + 0x1c]
add esp, 0xc
mov ecx, dword [esi + 0xc]
mov dword [esi + 0x14], ecx
cmp dword [eax + 0x2c], 0
je 0xcd3f03
mov eax, dword [ebp - 8]
cmp ecx, eax
jbe 0xcd3f03
mov edx, dword [esi + 8]
sub ecx, eax
add edx, eax
jne 0xcd3ef4
xor eax, eax
jmp 0xcd3f00
push ecx
mov ecx, dword [edi + 0x30]
call fcn.00cd1840
add esp, 4
mov dword [edi + 0x30], eax
add dword [esi + 0x20], ebx
mov ebx, dword [edi + 0x1c]
mov ecx, ebx
mov dword [ebp - 8], ebx
call fcn.00cd73e0
mov eax, dword [ebx + 0x14]
mov ebx, dword [edi + 0x10]
cmp eax, ebx
cmovbe ebx, eax
test ebx, ebx
je 0xcd3f4e
mov eax, dword [ebp - 8]
push ebx
push dword [eax + 0x10]
push dword [edi + 0xc]
call fcn.00c16e70
mov ecx, dword [ebp - 8]
add esp, 0xc
add dword [edi + 0xc], ebx
add dword [ecx + 0x10], ebx
add dword [edi + 0x14], ebx
sub dword [edi + 0x10], ebx
sub dword [ecx + 0x14], ebx
jne 0xcd3f4e
mov eax, dword [ecx + 8]
mov dword [ecx + 0x10], eax
mov ecx, dword [esi + 0x14]
test ecx, ecx
jne 0xcd3b36
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0xc]
mov ebx, dword [esi + 0xc]
mov dword [ebp - 4], eax
add eax, ecx
mov dword [ebp - 8], ecx
cmp eax, ebx
ja 0xcd3eb3
mov eax, dword [esi + 0x1c]
mov ebx, dword [ebp - 4]
push ebx
mov eax, dword [eax + 0x10]
add eax, dword [esi + 0x20]
push eax
mov eax, dword [esi + 8]
add eax, ecx
push eax
call fcn.00c16e70
mov ecx, dword [esi + 0x14]
add esp, 0xc
mov eax, dword [esi + 0x1c]
add ecx, ebx
mov dword [esi + 0x14], ecx
cmp dword [eax + 0x2c], 0
je 0xcd3fc2
mov eax, dword [ebp - 8]
cmp ecx, eax
jbe 0xcd3fc2
mov edx, dword [esi + 8]
sub ecx, eax
add edx, eax
jne 0xcd3fb3
xor eax, eax
jmp 0xcd3fbf
push ecx
mov ecx, dword [edi + 0x30]
call fcn.00cd1840
add esp, 4
mov dword [edi + 0x30], eax
mov dword [esi + 0x20], 0
mov dword [esi + 4], 0x49
jmp 0xcd3fdb
cmp eax, 0x49
jne 0xcd40db
mov eax, dword [esi + 0x1c]
cmp dword [eax + 0x1c], 0
je 0xcd40d2
mov ecx, dword [esi + 0x14]
mov ebx, ecx
mov dword [ebp - 8], ecx
cmp ebx, dword [esi + 0xc]
jne 0xcd4074
mov eax, dword [esi + 0x1c]
cmp dword [eax + 0x2c], 0
je 0xcd401e
cmp ebx, ecx
jbe 0xcd401e
mov edx, dword [esi + 8]
sub ebx, ecx
add edx, ecx
jne 0xcd400f
xor eax, eax
jmp 0xcd401b
mov ecx, dword [edi + 0x30]
push ebx
call fcn.00cd1840
add esp, 4
mov dword [edi + 0x30], eax
mov ebx, dword [edi + 0x1c]
mov ecx, ebx
mov dword [ebp - 8], ebx
call fcn.00cd73e0
mov eax, dword [ebx + 0x14]
mov ebx, dword [edi + 0x10]
cmp eax, ebx
cmovbe ebx, eax
test ebx, ebx
je 0xcd4066
mov eax, dword [ebp - 8]
push ebx
push dword [eax + 0x10]
push dword [edi + 0xc]
call fcn.00c16e70
mov ecx, dword [ebp - 8]
add esp, 0xc
add dword [edi + 0xc], ebx
add dword [ecx + 0x10], ebx
add dword [edi + 0x14], ebx
sub dword [edi + 0x10], ebx
sub dword [ecx + 0x14], ebx
jne 0xcd4066
mov eax, dword [ecx + 8]
mov dword [ecx + 0x10], eax
mov ebx, dword [esi + 0x14]
test ebx, ebx
jne 0xcd3b36
mov dword [ebp - 8], ebx
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0x20]
mov eax, dword [eax + 0x1c]
mov dl, byte [ecx + eax]
lea eax, [ecx + 1]
mov dword [esi + 0x20], eax
mov eax, dword [esi + 8]
mov byte [ebx + eax], dl
mov ebx, dword [esi + 0x14]
inc ebx
mov dword [esi + 0x14], ebx
test dl, dl
je 0xcd409f
mov ecx, dword [ebp - 8]
jmp 0xcd3ff0
mov eax, dword [esi + 0x1c]
cmp dword [eax + 0x2c], 0
je 0xcd40cb
mov eax, dword [ebp - 8]
cmp ebx, eax
jbe 0xcd40cb
mov edx, dword [esi + 8]
sub ebx, eax
add edx, eax
jne 0xcd40bc
xor eax, eax
jmp 0xcd40c8
mov ecx, dword [edi + 0x30]
push ebx
call fcn.00cd1840
add esp, 4
mov dword [edi + 0x30], eax
mov dword [esi + 0x20], 0
mov dword [esi + 4], 0x5b
jmp 0xcd40e4
cmp eax, 0x5b
jne 0xcd41f4
mov eax, dword [esi + 0x1c]
cmp dword [eax + 0x24], 0
je 0xcd41e8
mov ecx, dword [esi + 0x14]
mov ebx, ecx
mov dword [ebp - 8], ecx
nop dword [eax]
cmp ebx, dword [esi + 0xc]
jne 0xcd4184
mov eax, dword [esi + 0x1c]
cmp dword [eax + 0x2c], 0
je 0xcd412e
cmp ebx, ecx
jbe 0xcd412e
mov edx, dword [esi + 8]
sub ebx, ecx
add edx, ecx
jne 0xcd411f
xor eax, eax
jmp 0xcd412b
mov ecx, dword [edi + 0x30]
push ebx
call fcn.00cd1840
add esp, 4
mov dword [edi + 0x30], eax
mov ebx, dword [edi + 0x1c]
mov ecx, ebx
mov dword [ebp - 8], ebx
call fcn.00cd73e0
mov eax, dword [ebx + 0x14]
mov ebx, dword [edi + 0x10]
cmp eax, ebx
cmovbe ebx, eax
test ebx, ebx
je 0xcd4176
mov eax, dword [ebp - 8]
push ebx
push dword [eax + 0x10]
push dword [edi + 0xc]
call fcn.00c16e70
mov ecx, dword [ebp - 8]
add esp, 0xc
add dword [edi + 0xc], ebx
add dword [ecx + 0x10], ebx
add dword [edi + 0x14], ebx
sub dword [edi + 0x10], ebx
sub dword [ecx + 0x14], ebx
jne 0xcd4176
mov eax, dword [ecx + 8]
mov dword [ecx + 0x10], eax
mov ebx, dword [esi + 0x14]
test ebx, ebx
jne 0xcd3b36
mov dword [ebp - 8], ebx
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0x20]
mov eax, dword [eax + 0x24]
mov dl, byte [ecx + eax]
lea eax, [ecx + 1]
mov dword [esi + 0x20], eax
mov eax, dword [esi + 8]
mov byte [ebx + eax], dl
mov ebx, dword [esi + 0x14]
inc ebx
mov dword [esi + 0x14], ebx
test dl, dl
je 0xcd41af
mov ecx, dword [ebp - 8]
jmp 0xcd4100
mov eax, dword [esi + 0x1c]
cmp dword [eax + 0x2c], 0
je 0xcd41e8
mov eax, dword [ebp - 8]
cmp ebx, eax
jbe 0xcd41e8
mov edx, dword [esi + 8]
sub ebx, eax
add edx, eax
jne 0xcd41d9
mov ebx, dword [ebp - 0x10]
xor eax, eax
mov dword [edi + 0x30], eax
mov dword [esi + 4], 0x67
jmp 0xcd41f9
mov ecx, dword [edi + 0x30]
push ebx
call fcn.00cd1840
add esp, 4
mov dword [edi + 0x30], eax
mov ebx, dword [ebp - 0x10]
mov dword [esi + 4], 0x67
jmp 0xcd41f9
cmp eax, 0x67
jne 0xcd425c
mov eax, dword [esi + 0x1c]
cmp dword [eax + 0x2c], 0
je 0xcd4244
mov edx, dword [esi + 0x14]
lea eax, [edx + 2]
cmp eax, dword [esi + 0xc]
jbe 0xcd421f
mov ecx, edi
call fcn.00cd32c0
mov edx, dword [esi + 0x14]
test edx, edx
jne 0xcd3b36
mov ecx, dword [esi + 8]
movzx eax, byte [edi + 0x30]
mov byte [edx + ecx], al
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 8]
inc edx
mov dword [esi + 0x14], edx
movzx eax, byte [edi + 0x31]
mov byte [edx + ecx], al
inc dword [esi + 0x14]
mov dword [edi + 0x30], 0
mov ecx, edi
mov dword [esi + 4], 0x71
call fcn.00cd32c0
cmp dword [esi + 0x14], 0
jne 0xcd3b36
cmp dword [edi + 4], 0
jne 0xcd427d
cmp dword [esi + 0x74], 0
jne 0xcd427d
test ebx, ebx
je 0xcd3b3d
cmp dword [esi + 4], 0x29a
je 0xcd430f
mov eax, dword [esi + 0x84]
test eax, eax
jne 0xcd4290
push ebx
push esi
call fcn.00cd29d0
jmp 0xcd42c4
mov ecx, dword [esi + 0x88]
cmp ecx, 2
jne 0xcd42a6
mov edx, ebx
mov ecx, esi
call fcn.00cd1b20
jmp 0xcd42c7
cmp ecx, 3
jne 0xcd42b6
mov edx, ebx
mov ecx, esi
call fcn.00cd1d10
jmp 0xcd42c7
lea eax, [eax + eax*2]
mov eax, dword [eax*4 + 0xa39680]
push ebx
push esi
call eax
add esp, 8
cmp eax, 2
je 0xcd42d1
cmp eax, 3
jne 0xcd42d8
mov dword [esi + 4], 0x29a
test eax, eax
je 0xcd43f3
cmp eax, 2
je 0xcd43f3
cmp eax, 1
jne 0xcd430f
push 0
push 0
xor edx, edx
mov ecx, esi
call fcn.00cd8e20
add esp, 8
mov ecx, edi
call fcn.00cd32c0
cmp dword [edi + 0x10], 0
je 0xcd3b36
cmp ebx, 4
jne 0xcd3b3d
mov eax, dword [esi + 0x18]
test eax, eax
jg 0xcd4329
pop edi
pop esi
lea eax, [ebx - 3]
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 2
jne 0xcd43bb
mov edx, dword [esi + 0x14]
movzx eax, byte [edi + 0x30]
mov ecx, dword [esi + 8]
mov byte [edx + ecx], al
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 8]
inc edx
mov dword [esi + 0x14], edx
movzx eax, byte [edi + 0x31]
mov byte [edx + ecx], al
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 8]
inc edx
mov dword [esi + 0x14], edx
movzx eax, byte [edi + 0x32]
mov byte [edx + ecx], al
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 8]
inc edx
mov dword [esi + 0x14], edx
movzx eax, byte [edi + 0x33]
mov byte [edx + ecx], al
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 8]
inc edx
mov dword [esi + 0x14], edx
movzx eax, byte [edi + 8]
mov byte [edx + ecx], al
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 8]
inc edx
mov dword [esi + 0x14], edx
movzx eax, byte [edi + 9]
mov byte [edx + ecx], al
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 8]
inc edx
mov dword [esi + 0x14], edx
movzx eax, byte [edi + 0xa]
mov byte [edx + ecx], al
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 8]
inc edx
mov dword [esi + 0x14], edx
movzx eax, byte [edi + 0xb]
mov byte [edx + ecx], al
inc dword [esi + 0x14]
jmp 0xcd43d1
movzx edx, word [edi + 0x32]
mov ecx, esi
call fcn.00cd3310
movzx edx, word [edi + 0x30]
mov ecx, esi
call fcn.00cd3310
mov ecx, edi
call fcn.00cd32c0
mov eax, dword [esi + 0x18]
test eax, eax
jle 0xcd43e4
neg eax
mov dword [esi + 0x18], eax
xor eax, eax
cmp dword [esi + 0x14], eax
pop edi
pop esi
sete al
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [edi + 0x10], 0
jne 0xcd3b3d
pop edi
mov dword [esi + 0x28], 0xffffffff
xor eax, eax
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [edi + 0x18], 0xa3f0b4
pop edi
pop esi
mov eax, 0xfffffffe
pop ebx
mov esp, ebp
pop ebp
ret