Function at 0x1400fa180
Capabilities:
Compress data via zlib inflate or deflate
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x10], edx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x58
mov r8d, edx
mov r12, rcx
test rcx, rcx
je case.0x1400fa283.16211
cmp qword [rcx + 0x30], 0
je case.0x1400fa283.16211
cmp qword [rcx + 0x38], 0
je case.0x1400fa283.16211
mov rax, qword [rcx + 0x28]
test rax, rax
je case.0x1400fa283.16211
cmp qword [rax], rcx
jne case.0x1400fa283.16211
mov eax, dword [rax + 8]
sub eax, 0x3f34
cmp eax, 0x1f
ja case.0x1400fa283.16211
cmp qword [rcx + 0x10], 0
je case.0x1400fa283.16211
cmp qword [rcx], 0
jne 0x1400fa1fb
cmp dword [rcx + 8], 0
jne case.0x1400fa283.16211
mov r13, qword [rcx + 0x28]
mov eax, dword [r13 + 8]
cmp eax, 0x3f3f
jne 0x1400fa217
mov dword [r13 + 8], 0x3f40
mov eax, 0x3f40
mov r10d, dword [rcx + 0x18]
xor r11d, r11d
mov r9, qword [rcx + 0x10]
add eax, 0xffffc0cc
mov esi, dword [rcx + 8]
mov edx, r10d
mov rbp, qword [rcx]
mov r14d, dword [r13 + 0x48]
mov ebx, dword [r13 + 0x4c]
mov dword [rsp + 0xb0], edx
mov qword [rsp + 0x40], r9
mov dword [rsp + 0xb8], r10d
mov dword [rsp + 0x38], esi
mov dword [rsp + 0xa0], r11d
cmp eax, 0x1f
ja case.0x1400fa283.16211
cdqe
lea rcx, sym.MZ_IMv5KL1E__heg__.WR_V._MO3UyZO___cZWnN
lea rdi, [r13 + 0x74]
lea r15, [r13 + 0x70]
mov ecx, dword [rcx + rax*4 + 0xfba18]
lea rax, sym.MZ_IMv5KL1E__heg__.WR_V._MO3UyZO___cZWnN
add rcx, rax
jmp rcx
mov edx, dword [r13 + 0x10]
test edx, edx
jne 0x1400fa29a
mov dword [r13 + 8], 0x3f40
jmp 0x1400fa352
cmp ebx, 0x10
jae 0x1400fa2c0
nop
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0x10
jb 0x1400fa2a0
test dl, 2
je 0x1400fa37b
cmp r14d, 0x8b1f
jne 0x1400fa37b
cmp dword [r13 + 0x30], 0
jne 0x1400fa2e5
mov dword [r13 + 0x30], 0xf
mov byte [rsp + 0x30], r14b
lea r9, [rsp + 0x30]
shr r14d, 8
lea r10, sym.MZ_IMv5KL1E__heg__.WR_V._MO3UyZO___cZWnN
mov byte [rsp + 0x31], r14b
mov r8d, 2
mov edx, 0xffffffff
nop word [rax + rax]
movzx ecx, byte [r9]
lea r9, [r9 + 1]
mov eax, edx
shr edx, 8
xor rcx, rax
movzx eax, cl
xor edx, dword [r10 + rax*4 + 0x176880]
sub r8, 1
jne 0x1400fa310
not edx
mov dword [r13 + 8], 0x3f35
mov dword [r13 + 0x20], edx
mov r14d, r11d
mov ebx, r11d
mov r9, qword [rsp + 0x40]
mov r10d, dword [rsp + 0xb8]
mov edx, dword [rsp + 0xb0]
mov eax, dword [r13 + 8]
sub eax, 0x3f34
cmp eax, 0x1f
ja case.0x1400fa283.16211
mov r8d, dword [rsp + 0xa8]
xor r11d, r11d
jmp 0x1400fa261
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400fa38b
mov dword [rax + 0x40], 0xffffffff
test byte [r13 + 0x10], 1
je 0x1400fa465
movzx ecx, r14b
mov eax, r14d
shr eax, 8
shl ecx, 8
add ecx, eax
mov eax, 0x8421085
mul ecx
mov eax, ecx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 4
imul eax, eax, 0x1f
cmp ecx, eax
jne 0x1400fa465
mov eax, r14d
and al, 0xf
cmp al, 8
je 0x1400fa3e4
lea rax, str.unknown_compression_method
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400fa352
mov eax, dword [r13 + 0x30]
add ebx, 0xfffffffc
shr r14d, 4
mov ecx, r14d
and ecx, 0xf
add ecx, 8
test eax, eax
jne 0x1400fa402
mov dword [r13 + 0x30], ecx
mov eax, ecx
cmp ecx, 0xf
ja 0x1400fa44c
cmp ecx, eax
ja 0x1400fa44c
shr r14d, 8
mov eax, 1
not r14d
shl eax, cl
and r14d, 2
mov dword [r13 + 0x1c], eax
or r14d, 0x3f3d
mov dword [r13 + 0x18], r11d
mov dword [r13 + 0x20], 1
mov ebx, r11d
mov dword [r12 + 0x4c], 1
mov dword [r13 + 8], r14d
mov r14d, r11d
jmp 0x1400fa352
lea rax, str.invalid_window_size
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400fa352
lea rax, str.incorrect_header_check
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400fa352
cmp ebx, 0x10
jae 0x1400fa4a3
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0x10
jb 0x1400fa483
mov dword [r13 + 0x18], r14d
cmp r14b, 8
je 0x1400fa4c6
lea rax, str.unknown_compression_method
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400fa359
test r14d, 0xe000
je 0x1400fa4e8
lea rax, str.unknown_header_flags_set
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400fa359
mov rdx, qword [r13 + 0x28]
mov ecx, r14d
shr ecx, 8
test rdx, rdx
je 0x1400fa4fe
mov eax, ecx
and eax, 1
mov dword [rdx], eax
test dword [r13 + 0x18], 0x200
lea r10, sym.MZ_IMv5KL1E__heg__.WR_V._MO3UyZO___cZWnN
je 0x1400fa557
test byte [r13 + 0x10], 4
je 0x1400fa557
mov edx, dword [r13 + 0x20]
lea r9, [rsp + 0x30]
not edx
mov byte [rsp + 0x30], r14b
mov byte [rsp + 0x31], cl
mov r8d, 2
movzx eax, byte [r9]
lea r9, [r9 + 1]
mov ecx, edx
shr edx, 8
xor rcx, rax
movzx eax, cl
xor edx, dword [r10 + rax*4 + 0x176880]
sub r8, 1
jne 0x1400fa530
not edx
mov dword [r13 + 0x20], edx
mov r14d, r11d
mov dword [r13 + 8], 0x3f36
mov ebx, r11d
jmp 0x1400fa573
lea r10, sym.MZ_IMv5KL1E__heg__.WR_V._MO3UyZO___cZWnN
cmp ebx, 0x20
jae 0x1400fa593
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0x20
jb 0x1400fa573
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400fa5a0
mov dword [rax + 4], r14d
test dword [r13 + 0x18], 0x200
je 0x1400fa617
test byte [r13 + 0x10], 4
je 0x1400fa617
mov edx, dword [r13 + 0x20]
lea r9, [rsp + 0x30]
mov eax, r14d
mov byte [rsp + 0x30], r14b
shr eax, 8
mov r8d, 4
mov byte [rsp + 0x31], al
not edx
mov eax, r14d
shr eax, 0x10
shr r14d, 0x18
mov byte [rsp + 0x33], r14b
mov byte [rsp + 0x32], al
nop dword [rax]
nop dword [rax + rax]
movzx ecx, byte [r9]
lea r9, [r9 + 1]
mov eax, edx
shr edx, 8
xor rcx, rax
movzx eax, cl
xor edx, dword [r10 + rax*4 + 0x176880]
sub r8, 1
jne 0x1400fa5f0
not edx
mov dword [r13 + 0x20], edx
mov r14d, r11d
mov dword [r13 + 8], 0x3f37
mov ebx, r11d
jmp 0x1400fa633
lea r10, sym.MZ_IMv5KL1E__heg__.WR_V._MO3UyZO___cZWnN
cmp ebx, 0x10
jae 0x1400fa653
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0x10
jb 0x1400fa633
mov rdx, qword [r13 + 0x28]
mov ecx, r14d
shr ecx, 8
test rdx, rdx
je 0x1400fa670
movzx eax, r14b
mov dword [rdx + 8], eax
mov rax, qword [r13 + 0x28]
mov dword [rax + 0xc], ecx
test dword [r13 + 0x18], 0x200
je 0x1400fa6c7
test byte [r13 + 0x10], 4
je 0x1400fa6c7
mov edx, dword [r13 + 0x20]
lea r9, [rsp + 0x30]
not edx
mov byte [rsp + 0x30], r14b
mov byte [rsp + 0x31], cl
mov r8d, 2
nop dword [rax + rax]
movzx ecx, byte [r9]
lea r9, [r9 + 1]
mov eax, edx
shr edx, 8
xor rcx, rax
movzx eax, cl
xor edx, dword [r10 + rax*4 + 0x176880]
sub r8, 1
jne 0x1400fa6a0
not edx
mov dword [r13 + 0x20], edx
mov r14d, r11d
mov dword [r13 + 8], 0x3f38
mov ebx, r11d
jmp 0x1400fa6de
lea r10, sym.MZ_IMv5KL1E__heg__.WR_V._MO3UyZO___cZWnN
test dword [r13 + 0x18], 0x400
je 0x1400fa78f
cmp ebx, 0x10
jae 0x1400fa711
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0x10
jb 0x1400fa6f1
mov rax, qword [r13 + 0x28]
mov dword [r13 + 0x50], r14d
test rax, rax
je 0x1400fa722
mov dword [rax + 0x18], r14d
test dword [r13 + 0x18], 0x200
je 0x1400fa787
test byte [r13 + 0x10], 4
je 0x1400fa787
mov edx, dword [r13 + 0x20]
lea r9, [rsp + 0x30]
mov byte [rsp + 0x30], r14b
mov r8d, 2
shr r14d, 8
not edx
mov byte [rsp + 0x31], r14b
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r9]
lea r9, [r9 + 1]
mov ecx, edx
shr edx, 8
xor rcx, rax
movzx eax, cl
xor edx, dword [r10 + rax*4 + 0x176880]
sub r8, 1
jne 0x1400fa760
not edx
mov dword [r13 + 0x20], edx
mov r14d, r11d
mov ebx, r11d
jmp 0x1400fa79c
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400fa79c
mov qword [rax + 0x10], r11
mov dword [r13 + 8], 0x3f39
test dword [r13 + 0x18], 0x400
je 0x1400fa850
mov eax, dword [r13 + 0x50]
mov edi, esi
cmp eax, esi
cmovbe edi, eax
test edi, edi
je 0x1400fa848
mov rcx, qword [r13 + 0x28]
mov r15d, eax
test rcx, rcx
je 0x1400fa811
mov r10, qword [rcx + 0x10]
test r10, r10
je 0x1400fa811
mov r9d, dword [rcx + 0x18]
mov r8d, dword [rcx + 0x1c]
sub r9d, eax
cmp r9d, r8d
jae 0x1400fa811
mov edx, r8d
lea ecx, [rdi + r9]
sub edx, r9d
mov eax, edi
cmp ecx, r8d
mov ecx, r9d
cmova eax, edx
add rcx, r10
mov r8d, eax
mov rdx, rbp
call fcn.14013dba8
mov r15d, dword [r13 + 0x50]
test dword [r13 + 0x18], 0x200
je 0x1400fa835
test byte [r13 + 0x10], 4
je 0x1400fa835
mov ecx, dword [r13 + 0x20]
mov rdx, rbp
mov r8d, edi
call fcn.1400f9590
mov dword [r13 + 0x20], eax
mov eax, edi
sub esi, edi
add rbp, rax
mov eax, r15d
sub eax, edi
mov dword [r13 + 0x50], eax
xor r11d, r11d
test eax, eax
jne 0x1400fa8ec
mov dword [r13 + 0x50], r11d
mov dword [r13 + 8], 0x3f3a
test dword [r13 + 0x18], 0x800
je 0x1400fa98a
test esi, esi
je 0x1400fa8ec
mov edi, r11d
nop dword [rax]
nop word [rax + rax]
mov eax, edi
inc edi
movzx r15d, byte [rax + rbp]
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400fa8ac
mov rdx, qword [rax + 0x20]
test rdx, rdx
je 0x1400fa8ac
mov ecx, dword [r13 + 0x50]
cmp ecx, dword [rax + 0x28]
jae 0x1400fa8ac
mov byte [rcx + rdx], r15b
inc dword [r13 + 0x50]
test r15b, r15b
je 0x1400fa8b5
cmp edi, esi
jb 0x1400fa880
test dword [r13 + 0x18], 0x200
je 0x1400fa8dc
test byte [r13 + 0x10], 4
je 0x1400fa8dc
mov ecx, dword [r13 + 0x20]
mov rdx, rbp
mov r8d, edi
call fcn.1400f9590
mov dword [r13 + 0x20], eax
xor r11d, r11d
mov eax, edi
sub esi, edi
add rbp, rax
test r15b, r15b
je 0x1400fa997
mov edi, dword [rsp + 0xa0]
mov r15d, dword [rsp + 0xa8]
mov rax, qword [rsp + 0x40]
mov qword [r12 + 0x10], rax
mov eax, dword [rsp + 0xb8]
mov dword [r12 + 0x18], eax
mov qword [r12], rbp
mov dword [r12 + 8], esi
cmp dword [r13 + 0x34], 0
mov dword [r13 + 0x4c], ebx
mov ebx, dword [rsp + 0xb0]
mov dword [r13 + 0x48], r14d
jne 0x1400fa95b
cmp ebx, dword [r12 + 0x18]
je 0x1400fb938
mov eax, dword [r13 + 8]
cmp eax, 0x3f51
jge 0x1400fb938
cmp eax, 0x3f4e
jl 0x1400fa95b
cmp r15d, 4
je 0x1400fb938
mov rdx, qword [r12 + 0x10]
mov r8d, ebx
sub r8d, dword [r12 + 0x18]
mov rcx, r12
call fcn.1400fca20
test eax, eax
je 0x1400fb938
mov dword [r13 + 8], 0x3f52
mov eax, 0xfffffffc
jmp 0x1400fba06
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400fa997
mov qword [rax + 0x20], r11
mov dword [r13 + 0x50], r11d
mov dword [r13 + 8], 0x3f3b
test dword [r13 + 0x18], 0x1000
je 0x1400faa2e
test esi, esi
je 0x1400fa8ec
mov edi, r11d
nop dword [rax]
mov eax, edi
inc edi
movzx r15d, byte [rax + rbp]
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400fa9ec
mov rdx, qword [rax + 0x30]
test rdx, rdx
je 0x1400fa9ec
mov ecx, dword [r13 + 0x50]
cmp ecx, dword [rax + 0x38]
jae 0x1400fa9ec
mov byte [rcx + rdx], r15b
inc dword [r13 + 0x50]
test r15b, r15b
je 0x1400fa9f5
cmp edi, esi
jb 0x1400fa9c0
test dword [r13 + 0x18], 0x200
je 0x1400faa1c
test byte [r13 + 0x10], 4
je 0x1400faa1c
mov ecx, dword [r13 + 0x20]
mov rdx, rbp
mov r8d, edi
call fcn.1400f9590
mov dword [r13 + 0x20], eax
xor r11d, r11d
mov eax, edi
sub esi, edi
add rbp, rax
test r15b, r15b
jne 0x1400fa8ec
jmp 0x1400faa3b
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400faa3b
mov qword [rax + 0x30], r11
mov r9, qword [rsp + 0x40]
mov r10d, dword [rsp + 0xb8]
mov dword [r13 + 8], 0x3f3c
mov edx, dword [r13 + 0x18]
bt edx, 9
jae 0x1400faab0
cmp ebx, 0x10
jae 0x1400faa80
nop
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0x10
jb 0x1400faa60
test byte [r13 + 0x10], 4
je 0x1400faaaa
movzx eax, word [r13 + 0x20]
cmp r14d, eax
je 0x1400faaaa
lea rax, str.header_crc_mismatch
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400fa352
mov r14d, r11d
mov ebx, r11d
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400faacd
sar edx, 9
and edx, 1
mov dword [rax + 0x3c], edx
mov rax, qword [r13 + 0x28]
mov dword [rax + 0x40], 1
mov dword [r13 + 0x20], r11d
mov dword [r12 + 0x4c], r11d
mov dword [r13 + 8], 0x3f3f
jmp 0x1400fa352
cmp ebx, 0x20
jae 0x1400fab08
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0x20
jb 0x1400faae8
mov ecx, r14d
mov eax, r14d
shl eax, 0x10
and ecx, 0xff00
add ecx, eax
mov ebx, r11d
mov eax, r14d
shl ecx, 8
shr eax, 8
and eax, 0xff00
shr r14d, 0x18
add eax, ecx
add eax, r14d
mov r14d, r11d
mov dword [r13 + 0x20], eax
mov dword [r12 + 0x4c], eax
mov dword [r13 + 8], 0x3f3e
cmp dword [r13 + 0x14], 0
je 0x1400fb8ea
mov dword [r13 + 0x20], 1
mov dword [r12 + 0x4c], 1
mov dword [r13 + 8], 0x3f3f
lea eax, [r8 - 5]
cmp eax, 1
jbe 0x1400fa8ec
cmp dword [r13 + 0xc], 0
je 0x1400fab96
mov ecx, ebx
mov dword [r13 + 8], 0x3f4e
and ecx, 7
shr r14d, cl
sub ebx, ecx
jmp 0x1400fa359
cmp ebx, 3
jae 0x1400fabc0
nop dword [rax + rax]
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 3
jb 0x1400faba0
mov eax, r14d
shr r14d, 1
and eax, 1
mov dword [r13 + 0xc], eax
mov eax, r14d
and eax, 3
je 0x1400fac59
sub eax, 1
je 0x1400fac1c
sub eax, 1
je 0x1400fac08
cmp eax, 1
jne 0x1400fac61
lea rax, str.invalid_block_type
shr r14d, 2
mov qword [r12 + 0x20], rax
add ebx, 0xfffffffd
mov dword [r13 + 8], 0x3f51
jmp 0x1400fa359
shr r14d, 2
add ebx, 0xfffffffd
mov dword [r13 + 8], 0x3f44
jmp 0x1400fa359
mov dword [r15], 9
lea rax, [0x140175ea0]
mov qword [r13 + 0x60], rax
lea rax, [0x1401766a0]
mov qword [r13 + 0x68], rax
mov dword [rdi], 5
mov dword [r13 + 8], 0x3f47
cmp r8d, 6
jne 0x1400fac61
shr r14d, 2
add ebx, 0xfffffffd
jmp 0x1400fa8ec
mov dword [r13 + 8], 0x3f41
shr r14d, 2
add ebx, 0xfffffffd
jmp 0x1400fa359
mov ecx, ebx
and ecx, 7
shr r14d, cl
sub ebx, ecx
cmp ebx, 0x20
jae 0x1400faca0
nop dword [rax]
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0x20
jb 0x1400fac80
mov eax, r14d
movzx ecx, r14w
not eax
shr eax, 0x10
cmp ecx, eax
je 0x1400facc9
lea rax, str.invalid_stored_block_lengths
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400fa359
mov dword [r13 + 0x50], ecx
mov r14d, r11d
mov dword [r13 + 8], 0x3f42
mov ebx, r11d
cmp r8d, 6
je 0x1400fa8ec
mov dword [r13 + 8], 0x3f43
mov eax, dword [r13 + 0x50]
test eax, eax
je 0x1400fad4e
cmp eax, esi
mov r15d, esi
cmovbe r15d, eax
cmp r15d, r10d
cmova r15d, r10d
test r15d, r15d
je 0x1400fa8ec
mov r8d, r15d
mov rdx, rbp
mov rcx, r9
mov edi, r15d
call fcn.14013dba8
mov r10d, dword [rsp + 0xb8]
sub esi, r15d
mov r9, qword [rsp + 0x40]
sub r10d, r15d
add r9, rdi
mov dword [rsp + 0xb8], r10d
add rbp, rdi
mov qword [rsp + 0x40], r9
sub dword [r13 + 0x50], r15d
jmp 0x1400fa352
mov dword [r13 + 8], 0x3f3f
jmp 0x1400fa359
cmp ebx, 0xe
jae 0x1400fad80
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0xe
jb 0x1400fad60
mov ecx, r14d
add ebx, 0xfffffff2
shr r14d, 5
and ecx, 0x1f
mov edx, r14d
add ecx, 0x101
shr r14d, 5
and edx, 0x1f
mov eax, r14d
mov dword [r13 + 0x7c], ecx
and eax, 0xf
shr r14d, 4
add eax, 4
inc edx
mov dword [r13 + 0x80], edx
mov dword [r13 + 0x78], eax
cmp ecx, 0x11e
ja 0x1400faee1
cmp edx, 0x1e
ja 0x1400faee1
mov dword [r13 + 0x84], r11d
mov dword [r13 + 8], 0x3f45
mov eax, dword [r13 + 0x84]
lea rdx, sym.MZ_IMv5KL1E__heg__.WR_V._MO3UyZO___cZWnN
cmp eax, dword [r13 + 0x78]
jae 0x1400fae53
cmp ebx, 3
jae 0x1400fae18
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 3
jb 0x1400fadf8
mov eax, dword [r13 + 0x84]
movzx ecx, r14w
and cx, 7
shr r14d, 3
add ebx, 0xfffffffd
movzx eax, word [rdx + rax*2 + 0x176720]
mov word [r13 + rax*2 + 0x90], cx
inc dword [r13 + 0x84]
mov eax, dword [r13 + 0x84]
cmp eax, dword [r13 + 0x78]
jb 0x1400fadf3
cmp eax, 0x13
jae 0x1400fae7e
movzx eax, word [rdx + rax*2 + 0x176720]
mov word [r13 + rax*2 + 0x90], r11w
mov eax, dword [r13 + 0x84]
inc eax
mov dword [r13 + 0x84], eax
cmp eax, 0x13
jb 0x1400fae58
lea rax, [r13 + 0x550]
mov dword [r15], 7
lea r9, [r13 + 0x88]
mov qword [r13 + 0x60], rax
xor ecx, ecx
mov qword [r9], rax
lea rax, [r13 + 0x310]
mov qword [rsp + 0x28], rax
lea rdx, [r13 + 0x90]
mov qword [rsp + 0x20], r15
lea r8d, [rcx + 0x13]
call fcn.1400fc480
mov dword [rsp + 0xa0], eax
test eax, eax
je 0x1400faefa
lea rax, str.invalid_code_lengths_set
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400fa345
lea rax, str.too_many_length_or_distance_symbols
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400fa352
xor r11d, r11d
mov dword [r13 + 8], 0x3f46
mov dword [r13 + 0x84], r11d
mov eax, dword [r13 + 0x80]
add eax, dword [r13 + 0x7c]
cmp dword [r13 + 0x84], eax
jae 0x1400fb15d
nop dword [rax]
nop dword [rax + rax]
mov ecx, dword [r15]
mov r9d, 1
mov r10, qword [r13 + 0x60]
shl r9d, cl
dec r9d
mov eax, r14d
mov ecx, r9d
and rcx, rax
mov eax, dword [r10 + rcx*4]
mov r8d, eax
shr r8d, 8
mov edx, eax
movzx ecx, r8b
shr edx, 0x10
mov dword [rsp + 0x34], eax
cmp ecx, ebx
jbe 0x1400fafab
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
mov ecx, r14d
add ebx, 8
mov eax, r9d
and rax, rcx
mov eax, dword [r10 + rax*4]
mov r8d, eax
shr r8d, 8
mov ecx, eax
movzx edx, r8b
shr ecx, 0x10
mov dword [rsp + 0x34], eax
cmp edx, ebx
ja 0x1400faf68
movzx edx, cx
cmp dx, 0x10
jae 0x1400fafe7
mov ecx, r8d
shr r14d, cl
mov ecx, eax
shr ecx, 8
movzx ecx, cl
sub ebx, ecx
shr eax, 0x10
mov ecx, dword [r13 + 0x84]
mov word [r13 + rcx*2 + 0x90], ax
inc dword [r13 + 0x84]
mov r8d, dword [r13 + 0x84]
jmp 0x1400fb133
jne 0x1400fb057
shr eax, 8
movzx edx, r8b
add edx, 2
movzx r9d, al
cmp ebx, edx
jae 0x1400fb01f
nop dword [rax + rax]
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, edx
jb 0x1400fb000
mov eax, dword [r13 + 0x84]
mov ecx, r9d
shr r14d, cl
sub ebx, r9d
test eax, eax
je 0x1400fb149
mov edx, r14d
add ebx, 0xfffffffe
and edx, 3
shr r14d, 2
add edx, 3
dec eax
movzx r9d, word [r13 + rax*2 + 0x90]
jmp 0x1400fb0f6
movzx r9d, byte [rsp + 0x35]
cmp dx, 0x11
movzx edx, r8b
jne 0x1400fb0af
add edx, 3
cmp ebx, edx
jae 0x1400fb08f
nop
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, edx
jb 0x1400fb070
mov ecx, r9d
mov eax, 0xfffffffd
shr r14d, cl
mov edx, r14d
shr r14d, 3
and edx, 7
add edx, 3
sub eax, r9d
mov r9d, r11d
jmp 0x1400fb0f4
add edx, 7
cmp ebx, edx
jae 0x1400fb0d5
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, edx
jb 0x1400fb0b6
mov ecx, r9d
mov eax, 0xfffffff9
shr r14d, cl
mov edx, r14d
shr r14d, 7
and edx, 0x7f
add edx, 0xb
sub eax, r9d
movzx r9d, r11w
add ebx, eax
mov r8d, dword [r13 + 0x84]
mov eax, dword [r13 + 0x80]
add eax, dword [r13 + 0x7c]
lea ecx, [r8 + rdx]
cmp ecx, eax
ja 0x1400fb149
mov eax, r8d
mov word [r13 + rax*2 + 0x90], r9w
mov r8d, dword [r13 + 0x84]
lea r8d, [r8 + 1]
mov dword [r13 + 0x84], r8d
add edx, 0xffffffff
jne 0x1400fb110
mov eax, dword [r13 + 0x80]
add eax, dword [r13 + 0x7c]
cmp r8d, eax
jb 0x1400faf30
jmp 0x1400fb15d
lea rax, str.invalid_bit_length_repeat
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
cmp dword [r13 + 8], 0x3f51
je 0x1400fa345
cmp word [r13 + 0x290], 0
jne 0x1400fb18f
lea rax, str.invalid_code____missing_end_of_block
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400fa345
mov r8d, dword [r13 + 0x7c]
lea rax, [r13 + 0x550]
mov dword [r15], 9
lea rdx, [r13 + 0x90]
mov qword [r13 + 0x88], rax
lea r15, [r13 + 0x310]
mov qword [r13 + 0x60], rax
lea r9, [r13 + 0x88]
lea rax, [r13 + 0x70]
mov qword [rsp + 0x28], r15
mov ecx, 1
mov qword [rsp + 0x20], rax
call fcn.1400fc480
mov dword [rsp + 0xa0], eax
test eax, eax
je 0x1400fb1fd
lea rax, str.invalid_literal_lengths_set
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400fa345
mov rax, qword [r13 + 0x88]
lea rcx, [r13 + 0x74]
mov r8d, dword [r13 + 0x80]
lea r9, [r13 + 0x88]
mov qword [r13 + 0x68], rax
mov eax, dword [r13 + 0x7c]
mov dword [rcx], 6
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rcx
mov ecx, 2
lea rdx, [rax*2 + 0x90]
add rdx, r13
call fcn.1400fc480
mov dword [rsp + 0xa0], eax
test eax, eax
je 0x1400fb267
lea rax, str.invalid_distances_set
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400fa345
mov r15d, dword [rsp + 0xa8]
mov dword [r13 + 8], 0x3f47
cmp r15d, 6
je 0x1400fb931
mov r9, qword [rsp + 0x40]
lea r15, [r13 + 0x70]
mov edx, dword [rsp + 0xb0]
lea rdi, [r13 + 0x74]
mov r10d, dword [rsp + 0xb8]
xor r11d, r11d
mov dword [r13 + 8], 0x3f48
cmp esi, 6
jb 0x1400fb31f
cmp r10d, 0x102
jb 0x1400fb31f
mov qword [r12 + 0x10], r9
mov rcx, r12
mov dword [r12 + 0x18], r10d
mov qword [r12], rbp
mov dword [r12 + 8], esi
mov dword [r13 + 0x48], r14d
mov dword [r13 + 0x4c], ebx
call fcn.1400fbf80
cmp dword [r13 + 8], 0x3f3f
mov r9, qword [r12 + 0x10]
mov r10d, dword [r12 + 0x18]
mov rbp, qword [r12]
mov esi, dword [r12 + 8]
mov r14d, dword [r13 + 0x48]
mov ebx, dword [r13 + 0x4c]
mov qword [rsp + 0x40], r9
mov dword [rsp + 0xb8], r10d
jne 0x1400fa352
mov dword [r13 + 0x1be4], 0xffffffff
jmp 0x1400fa352
mov ecx, dword [r15]
mov edx, 1
mov r9, qword [r13 + 0x60]
shl edx, cl
dec edx
mov eax, r14d
mov ecx, edx
and rcx, rax
mov dword [r13 + 0x1be4], r11d
mov eax, dword [r9 + rcx*4]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
cmp ecx, ebx
jbe 0x1400fb383
nop
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
mov ecx, r14d
add ebx, 8
mov eax, edx
and rax, rcx
mov eax, dword [r9 + rax*4]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
cmp ecx, ebx
ja 0x1400fb350
test al, al
je 0x1400fb421
test al, 0xf0
jne 0x1400fb421
mov ecx, eax
mov r10d, eax
shr ecx, 8
mov r11d, 1
movzx r8d, cl
movzx ecx, al
add ecx, r8d
shr r10d, 0x10
shl r11d, cl
mov ecx, r8d
lea eax, [r11 - 1]
and eax, r14d
shr eax, cl
add eax, r10d
mov eax, dword [r9 + rax*4]
mov ecx, eax
shr ecx, 8
movzx edx, cl
add edx, r8d
cmp edx, ebx
jbe 0x1400fb411
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
mov ecx, r8d
lea eax, [r11 - 1]
inc rbp
and eax, r14d
add ebx, 8
shr eax, cl
add eax, r10d
mov eax, dword [r9 + rax*4]
mov ecx, eax
shr ecx, 8
movzx edx, cl
add edx, r8d
cmp edx, ebx
ja 0x1400fb3d4
mov ecx, r8d
mov dword [r13 + 0x1be4], r8d
shr r14d, cl
sub ebx, r8d
mov ecx, eax
shr ecx, 8
movzx ecx, cl
add dword [r13 + 0x1be4], ecx
sub ebx, ecx
shr r14d, cl
mov ecx, eax
shr ecx, 0x10
mov dword [r13 + 0x50], ecx
test al, al
jne 0x1400fb44f
mov dword [r13 + 8], 0x3f4d
jmp 0x1400fa345
test al, 0x20
je 0x1400fb46b
mov dword [r13 + 0x1be4], 0xffffffff
mov dword [r13 + 8], 0x3f3f
jmp 0x1400fa345
test al, 0x40
je 0x1400fb488
lea rax, str.invalid_literal_length_code
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400fa345
movzx ecx, al
and ecx, 0xf
mov dword [r13 + 8], 0x3f49
mov dword [r13 + 0x58], ecx
mov edx, dword [r13 + 0x58]
test edx, edx
je 0x1400fb4e3
cmp ebx, edx
jae 0x1400fb4c5
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, edx
jb 0x1400fb4a6
mov ecx, edx
mov eax, 1
shl eax, cl
sub ebx, edx
dec eax
and eax, r14d
shr r14d, cl
add dword [r13 + 0x50], eax
add dword [r13 + 0x1be4], edx
mov eax, dword [r13 + 0x50]
mov dword [r13 + 0x1be8], eax
mov dword [r13 + 8], 0x3f4a
mov ecx, dword [rdi]
mov edx, 1
mov r9, qword [r13 + 0x68]
shl edx, cl
dec edx
mov eax, r14d
mov ecx, edx
and rcx, rax
mov eax, dword [r9 + rcx*4]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
cmp ecx, ebx
jbe 0x1400fb553
nop dword [rax]
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
mov ecx, r14d
add ebx, 8
mov eax, edx
and rax, rcx
mov eax, dword [r9 + rax*4]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
cmp ecx, ebx
ja 0x1400fb520
test al, 0xf0
jne 0x1400fb5ed
mov ecx, eax
mov r10d, eax
shr ecx, 8
mov r11d, 1
movzx r8d, cl
movzx ecx, al
add ecx, r8d
shr r10d, 0x10
shl r11d, cl
mov ecx, r8d
lea eax, [r11 - 1]
and eax, r14d
shr eax, cl
add eax, r10d
mov eax, dword [r9 + rax*4]
mov ecx, eax
shr ecx, 8
movzx edx, cl
add edx, r8d
cmp edx, ebx
jbe 0x1400fb5dd
nop dword [rax]
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
mov ecx, r8d
lea eax, [r11 - 1]
inc rbp
and eax, r14d
add ebx, 8
shr eax, cl
add eax, r10d
mov eax, dword [r9 + rax*4]
mov ecx, eax
shr ecx, 8
movzx edx, cl
add edx, r8d
cmp edx, ebx
ja 0x1400fb5a0
mov ecx, r8d
sub ebx, r8d
shr r14d, cl
add dword [r13 + 0x1be4], r8d
mov r9, qword [rsp + 0x40]
mov ecx, eax
mov r10d, dword [rsp + 0xb8]
shr ecx, 8
movzx ecx, cl
add dword [r13 + 0x1be4], ecx
sub ebx, ecx
shr r14d, cl
test al, 0x40
je 0x1400fb62b
lea rax, str.invalid_distance_code
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400fa352
mov ecx, eax
mov dword [r13 + 8], 0x3f4b
shr ecx, 0x10
mov dword [r13 + 0x54], ecx
movzx ecx, al
and ecx, 0xf
mov dword [r13 + 0x58], ecx
mov edx, dword [r13 + 0x58]
test edx, edx
je 0x1400fb68f
cmp ebx, edx
jae 0x1400fb671
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, edx
jb 0x1400fb652
mov ecx, edx
mov eax, 1
shl eax, cl
sub ebx, edx
dec eax
and eax, r14d
shr r14d, cl
add dword [r13 + 0x54], eax
add dword [r13 + 0x1be4], edx
mov edx, dword [rsp + 0xb0]
mov dword [r13 + 8], 0x3f4c
test r10d, r10d
je 0x1400fa8ec
mov r8d, dword [r13 + 0x54]
mov eax, edx
sub eax, r10d
cmp r8d, eax
jbe 0x1400fb711
sub r8d, eax
cmp r8d, dword [r13 + 0x38]
jbe 0x1400fb6e1
cmp dword [r13 + 0x1be0], 0
je 0x1400fb6e1
lea rax, str.invalid_distance_too_far_back
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400fa359
mov eax, dword [r13 + 0x3c]
mov rcx, qword [r13 + 0x40]
cmp r8d, eax
jbe 0x1400fb6fa
mov edx, dword [r13 + 0x34]
sub r8d, eax
sub edx, r8d
jmp 0x1400fb6ff
sub eax, r8d
mov edx, eax
mov eax, dword [r13 + 0x50]
add rdx, rcx
cmp r8d, eax
mov ecx, eax
cmovbe ecx, r8d
jmp 0x1400fb71d
mov eax, dword [r13 + 0x50]
mov rdx, r9
sub rdx, r8
mov ecx, eax
cmp ecx, r10d
cmova ecx, r10d
sub r10d, ecx
sub eax, ecx
mov dword [rsp + 0xb8], r10d
sub rdx, r9
mov dword [r13 + 0x50], eax
nop dword [rax + rax]
movzx eax, byte [rdx + r9]
mov byte [r9], al
inc r9
add ecx, 0xffffffff
jne 0x1400fb740
mov edx, dword [rsp + 0xb0]
mov qword [rsp + 0x40], r9
cmp dword [r13 + 0x50], ecx
jne 0x1400fa359
mov dword [r13 + 8], 0x3f48
jmp 0x1400fa359
test r10d, r10d
je 0x1400fa8ec
movzx eax, byte [r13 + 0x50]
mov byte [r9], al
inc r9
dec r10d
mov qword [rsp + 0x40], r9
mov dword [rsp + 0xb8], r10d
mov dword [r13 + 8], 0x3f48
jmp 0x1400fa359
cmp dword [r13 + 0x10], 0
je 0x1400fb88a
cmp ebx, 0x20
jae 0x1400fb7d4
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0x20
jb 0x1400fb7b4
sub edx, r10d
add dword [r12 + 0x1c], edx
add dword [r13 + 0x24], edx
test byte [r13 + 0x10], 4
je 0x1400fb824
test edx, edx
je 0x1400fb824
mov ecx, dword [r13 + 0x20]
mov r8d, edx
mov rdx, r9
sub rdx, r8
cmp dword [r13 + 0x18], 0
je 0x1400fb806
call fcn.1400f9590
jmp 0x1400fb80b
call fcn.1400f92a0
mov r9, qword [rsp + 0x40]
xor r11d, r11d
mov r10d, dword [rsp + 0xb8]
mov dword [r13 + 0x20], eax
mov dword [r12 + 0x4c], eax
test byte [r13 + 0x10], 4
mov edx, r10d
mov dword [rsp + 0xb0], edx
je 0x1400fb884
cmp dword [r13 + 0x18], 0
mov ecx, r14d
jne 0x1400fb865
and ecx, 0xff00
mov eax, r14d
shl eax, 0x10
add ecx, eax
mov eax, r14d
shr eax, 8
and eax, 0xff00
shl ecx, 8
add ecx, eax
mov eax, r14d
shr eax, 0x18
add ecx, eax
cmp ecx, dword [r13 + 0x20]
je 0x1400fb884
lea rax, str.incorrect_data_check
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400fa359
mov r14d, r11d
mov ebx, r11d
mov dword [r13 + 8], 0x3f4f
mov edx, dword [r13 + 0x10]
test edx, edx
je 0x1400fb915
cmp dword [r13 + 0x18], 0
je 0x1400fb915
cmp ebx, 0x20
jae 0x1400fb8c6
test esi, esi
je 0x1400fa8ec
movzx eax, byte [rbp]
mov ecx, ebx
shl eax, cl
dec esi
add r14d, eax
inc rbp
add ebx, 8
cmp ebx, 0x20
jb 0x1400fb8a6
test dl, 4
je 0x1400fb90f
cmp r14d, dword [r13 + 0x24]
je 0x1400fb90f
lea rax, str.incorrect_length_check
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400fa352
mov qword [r12 + 0x10], r9
mov eax, 2
mov dword [r12 + 0x18], r10d
mov qword [r12], rbp
mov dword [r12 + 8], esi
mov dword [r13 + 0x48], r14d
mov dword [r13 + 0x4c], ebx
jmp 0x1400fba06
mov r14d, r11d
mov ebx, r11d
mov dword [r13 + 8], 0x3f50
mov edi, 1
jmp 0x1400fa8f3
mov edi, 0xfffffffd
jmp 0x1400fa8f3
mov edi, eax
jmp 0x1400fa8fb
sub ebx, dword [r12 + 0x18]
mov r10d, dword [rsp + 0x38]
sub r10d, dword [r12 + 8]
add dword [r12 + 0xc], r10d
add dword [r12 + 0x1c], ebx
add dword [r13 + 0x24], ebx
test byte [r13 + 0x10], 4
mov dword [rsp + 0x38], r10d
je 0x1400fb995
test ebx, ebx
je 0x1400fb995
mov rdx, qword [r12 + 0x10]
mov ecx, dword [r13 + 0x20]
mov r8d, ebx
sub rdx, r8
cmp dword [r13 + 0x18], 0
je 0x1400fb982
call fcn.1400f9590
jmp 0x1400fb987
call fcn.1400f92a0
mov r10d, dword [rsp + 0x38]
mov dword [r13 + 0x20], eax
mov dword [r12 + 0x4c], eax
mov edx, dword [r13 + 8]
cmp edx, 0x3f47
je 0x1400fb9b1
cmp edx, 0x3f42
je 0x1400fb9b1
xor r9d, r9d
mov r8d, r9d
jmp 0x1400fb9ba
mov r8d, 0x100
xor r9d, r9d
mov eax, dword [r13 + 0xc]
neg eax
mov eax, pe_nt_image_headers64
sbb ecx, ecx
and ecx, 0x40
cmp edx, 0x3f3f
cmove r9d, eax
lea eax, [r8 + rcx]
add r9d, eax
add r9d, dword [r13 + 0x4c]
mov dword [r12 + 0x48], r9d
test r10d, r10d
jne 0x1400fb9ed
test ebx, ebx
je 0x1400fb9f3
cmp r15d, 4
jne 0x1400fb9fd
test edi, edi
mov eax, 0xfffffffb
cmove edi, eax
mov eax, edi
jmp 0x1400fba06
mov eax, 0xfffffffe
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret