Function at 0x1400b39d0
Capabilities:
Compress data via zlib inflate or deflate
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x58
mov r11d, edx
mov r12, rcx
test rcx, rcx
je case.default.0x1400b3aca
cmp qword [rcx + 0x30], 0
je case.default.0x1400b3aca
cmp qword [rcx + 0x38], 0
je case.default.0x1400b3aca
mov r13, qword [rcx + 0x28]
test r13, r13
je case.default.0x1400b3aca
cmp qword [r13], rcx
jne case.default.0x1400b3aca
mov edx, dword [r13 + 8]
lea eax, [rdx - 0x3f34]
cmp eax, 0x1f
ja case.default.0x1400b3aca
mov r9, qword [rcx + 0x10]
mov qword [rbp - 0x18], r9
test r9, r9
je case.default.0x1400b3aca
mov rsi, qword [rcx]
test rsi, rsi
jne 0x1400b3a5d
cmp dword [rcx + 8], esi
jne case.default.0x1400b3aca
cmp edx, 0x3f3f
jne 0x1400b3a7d
mov dword [r13 + 8], 0x3f40
mov edx, 0x3f40
mov r9, qword [rcx + 0x10]
mov rsi, qword [rcx]
mov qword [rbp - 0x18], r9
mov r10d, dword [rcx + 0x18]
lea eax, [rdx - 0x3f34]
mov edi, dword [rcx + 8]
xor r15d, r15d
mov r14d, dword [r13 + 0x48]
mov r8d, r10d
mov ebx, dword [r13 + 0x4c]
mov dword [rbp + 0x60], r10d
mov dword [rbp - 0x1c], edi
mov dword [rbp - 0x24], r10d
mov dword [rbp + 0x58], r15d
cmp eax, 0x1e
ja case.default.0x1400b3aca
cdqe
lea rcx, [0x140000000]
mov ecx, dword [rcx + rax*4 + 0xb50b0]
lea rax, [0x140000000]
add rcx, rax
jmp rcx
mov edx, dword [r13 + 0x10]
test edx, edx
jne 0x1400b3ae1
mov dword [r13 + 8], 0x3f40
jmp 0x1400b415e
cmp ebx, 0x10
jae 0x1400b3b05
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
add ebx, 8
cmp ebx, 0x10
jb 0x1400b3ae6
test dl, 2
je 0x1400b3b60
cmp r14d, 0x8b1f
jne 0x1400b3b60
cmp dword [r13 + 0x30], 0
jne 0x1400b3b22
mov dword [r13 + 0x30], InitCommonControls
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sym.AmazonVNCViewer.exe_crc32_z
mov r8d, 2
mov dword [r13 + 0x20], eax
lea rdx, [rbp - 0x28]
mov word [rbp - 0x28], 0x8b1f
mov ecx, eax
call sym.AmazonVNCViewer.exe_crc32_z
mov dword [r13 + 0x20], eax
mov r14d, r15d
mov ebx, r15d
mov dword [r13 + 8], 0x3f35
jmp 0x1400b4156
mov rax, qword [r13 + 0x28]
mov dword [r13 + 0x18], r15d
test rax, rax
je 0x1400b3b78
mov dword [rax + 0x40], 0xffffffff
mov edx, dword [r13 + 0x10]
test dl, 1
je 0x1400b3c50
movzx ecx, r14b
mov eax, r14d
shr eax, 8
shl ecx, 8
add ecx, eax
mov eax, 0x8421085
mul ecx
mov eax, ecx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 4
imul eax, eax, 0x1f
cmp ecx, eax
jne 0x1400b3c50
mov eax, r14d
and al, 0xf
cmp al, 8
je 0x1400b3bcf
lea rax, str.unknown_compression_method
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400b415e
mov eax, dword [r13 + 0x30]
add ebx, 0xfffffffc
shr r14d, 4
mov ecx, r14d
and ecx, 0xf
add ecx, 8
test eax, eax
jne 0x1400b3bed
mov dword [r13 + 0x30], ecx
mov eax, ecx
cmp ecx, 0xf
ja 0x1400b3c37
cmp ecx, eax
ja 0x1400b3c37
mov eax, 1
xor r8d, r8d
shl eax, cl
xor edx, edx
xor ecx, ecx
mov dword [r13 + 0x1c], eax
call sym.AmazonVNCViewer.exe_adler32_z
shr r14d, 8
mov ebx, r15d
not r14d
mov dword [r13 + 0x20], eax
and r14d, 2
mov dword [r12 + 0x4c], eax
or r14d, 0x3f3d
mov dword [r13 + 8], r14d
mov r14d, r15d
jmp 0x1400b4156
lea rax, str.invalid_window_size
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400b415e
lea rax, str.incorrect_header_check
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400b415e
cmp ebx, 0x10
jae 0x1400b3c8f
nop
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
add ebx, 8
cmp ebx, 0x10
jb 0x1400b3c70
mov dword [r13 + 0x18], r14d
cmp r14b, 8
je 0x1400b3cb2
lea rax, str.unknown_compression_method
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400b415e
test r14d, 0xe000
je 0x1400b3cd4
lea rax, str.unknown_header_flags_set
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400b415e
mov rdx, qword [r13 + 0x28]
mov ecx, r14d
shr ecx, 8
mov eax, r14d
test rdx, rdx
je 0x1400b3cf1
mov eax, ecx
and eax, 1
mov dword [rdx], eax
mov eax, dword [r13 + 0x18]
bt eax, 9
jae 0x1400b3d1c
test byte [r13 + 0x10], 4
je 0x1400b3d1c
mov byte [rbp - 0x27], cl
lea rdx, [rbp - 0x28]
mov ecx, dword [r13 + 0x20]
mov r8d, 2
mov byte [rbp - 0x28], r14b
call sym.AmazonVNCViewer.exe_crc32_z
mov dword [r13 + 0x20], eax
mov r14d, r15d
mov dword [r13 + 8], 0x3f36
mov ebx, r15d
jmp 0x1400b3d31
cmp ebx, 0x20
jae 0x1400b3d50
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
add ebx, 8
cmp ebx, 0x20
jb 0x1400b3d31
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400b3d5d
mov dword [rax + 4], r14d
test dword [r13 + 0x18], 0x200
je 0x1400b3da3
test byte [r13 + 0x10], 4
je 0x1400b3da3
mov ecx, dword [r13 + 0x20]
lea rdx, [rbp - 0x28]
mov eax, r14d
mov byte [rbp - 0x28], r14b
shr eax, 8
mov r8d, 4
mov byte [rbp - 0x27], al
mov eax, r14d
shr eax, 0x10
shr r14d, 0x18
mov byte [rbp - 0x26], al
mov byte [rbp - 0x25], r14b
call sym.AmazonVNCViewer.exe_crc32_z
mov dword [r13 + 0x20], eax
mov r14d, r15d
mov dword [r13 + 8], 0x3f37
mov ebx, r15d
jmp 0x1400b3db8
cmp ebx, 0x10
jae 0x1400b3dd7
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
add ebx, 8
cmp ebx, 0x10
jb 0x1400b3db8
mov rdx, qword [r13 + 0x28]
mov ecx, r14d
shr ecx, 8
test rdx, rdx
je 0x1400b3df4
movzx eax, r14b
mov dword [rdx + 8], eax
mov rax, qword [r13 + 0x28]
mov dword [rax + 0xc], ecx
test dword [r13 + 0x18], 0x200
je 0x1400b3e23
test byte [r13 + 0x10], 4
je 0x1400b3e23
mov byte [rbp - 0x27], cl
lea rdx, [rbp - 0x28]
mov ecx, dword [r13 + 0x20]
mov r8d, 2
mov byte [rbp - 0x28], r14b
call sym.AmazonVNCViewer.exe_crc32_z
mov dword [r13 + 0x20], eax
mov r14d, r15d
mov dword [r13 + 8], 0x3f38
mov ebx, r15d
test dword [r13 + 0x18], 0x400
je 0x1400b3eac
cmp ebx, 0x10
jae 0x1400b3e5f
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
add ebx, 8
cmp ebx, 0x10
jb 0x1400b3e40
mov rax, qword [r13 + 0x28]
mov dword [r13 + 0x50], r14d
test rax, rax
je 0x1400b3e70
mov dword [rax + 0x18], r14d
test dword [r13 + 0x18], 0x200
je 0x1400b3ea4
test byte [r13 + 0x10], 4
je 0x1400b3ea4
mov ecx, dword [r13 + 0x20]
lea rdx, [rbp - 0x28]
mov byte [rbp - 0x28], r14b
mov r8d, 2
shr r14d, 8
mov byte [rbp - 0x27], r14b
call sym.AmazonVNCViewer.exe_crc32_z
mov dword [r13 + 0x20], eax
mov r14d, r15d
mov ebx, r15d
jmp 0x1400b3eb9
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400b3eb9
mov qword [rax + 0x10], r15
mov dword [r13 + 8], 0x3f39
mov ecx, dword [r13 + 0x18]
bt ecx, 0xa
jae 0x1400b3f65
mov eax, dword [r13 + 0x50]
mov r15d, edi
cmp eax, edi
cmovbe r15d, eax
test r15d, r15d
je 0x1400b3f5a
mov r8, qword [r13 + 0x28]
mov r12d, eax
test r8, r8
je 0x1400b3f27
mov r9, qword [r8 + 0x10]
test r9, r9
je 0x1400b3f27
mov edx, dword [r8 + 0x18]
mov ecx, dword [r8 + 0x1c]
sub edx, eax
lea eax, [r15 + rdx]
cmp eax, ecx
jbe 0x1400b3f0c
sub ecx, edx
jmp 0x1400b3f0f
mov ecx, r15d
mov r8d, ecx
mov ecx, edx
mov rdx, rsi
add rcx, r9
call fcn.14011fbe0
mov ecx, dword [r13 + 0x18]
mov r12d, dword [r13 + 0x50]
bt ecx, 9
jae 0x1400b3f47
test byte [r13 + 0x10], 4
je 0x1400b3f47
mov ecx, dword [r13 + 0x20]
mov rdx, rsi
mov r8d, r15d
call sym.AmazonVNCViewer.exe_crc32_z
mov dword [r13 + 0x20], eax
mov eax, r15d
sub edi, r15d
add rsi, rax
mov eax, r12d
sub eax, r15d
mov dword [r13 + 0x50], eax
test eax, eax
jne 0x1400b42de
xor r15d, r15d
mov dword [r13 + 0x50], r15d
mov dword [r13 + 8], 0x3f3a
test dword [r13 + 0x18], 0x800
je 0x1400b4003
test edi, edi
je 0x1400b42de
nop word [rax + rax]
mov eax, r15d
inc r15d
movzx r12d, byte [rax + rsi]
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400b3fbe
mov rdx, qword [rax + 0x20]
test rdx, rdx
je 0x1400b3fbe
mov ecx, dword [r13 + 0x50]
cmp ecx, dword [rax + 0x28]
jae 0x1400b3fbe
mov byte [rcx + rdx], r12b
inc dword [r13 + 0x50]
test r12b, r12b
je 0x1400b3fc8
cmp r15d, edi
jb 0x1400b3f90
test dword [r13 + 0x18], 0x200
je 0x1400b3fec
test byte [r13 + 0x10], 4
je 0x1400b3fec
mov ecx, dword [r13 + 0x20]
mov rdx, rsi
mov r8d, r15d
call sym.AmazonVNCViewer.exe_crc32_z
mov dword [r13 + 0x20], eax
mov eax, r15d
sub edi, r15d
add rsi, rax
test r12b, r12b
jne 0x1400b42de
xor r15d, r15d
jmp 0x1400b4010
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400b4010
mov qword [rax + 0x20], r15
mov dword [r13 + 0x50], r15d
mov dword [r13 + 8], 0x3f3b
test dword [r13 + 0x18], 0x1000
je 0x1400b40a3
test edi, edi
je 0x1400b42de
nop
mov eax, r15d
inc r15d
movzx r12d, byte [rax + rsi]
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400b405e
mov rdx, qword [rax + 0x30]
test rdx, rdx
je 0x1400b405e
mov ecx, dword [r13 + 0x50]
cmp ecx, dword [rax + 0x38]
jae 0x1400b405e
mov byte [rcx + rdx], r12b
inc dword [r13 + 0x50]
test r12b, r12b
je 0x1400b4068
cmp r15d, edi
jb 0x1400b4030
test dword [r13 + 0x18], 0x200
je 0x1400b408c
test byte [r13 + 0x10], 4
je 0x1400b408c
mov ecx, dword [r13 + 0x20]
mov rdx, rsi
mov r8d, r15d
call sym.AmazonVNCViewer.exe_crc32_z
mov dword [r13 + 0x20], eax
mov eax, r15d
sub edi, r15d
add rsi, rax
test r12b, r12b
jne 0x1400b42de
xor r15d, r15d
jmp 0x1400b40b0
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400b40b0
mov qword [rax + 0x30], r15
mov r12, qword [rbp + 0x48]
mov r10d, dword [rbp + 0x60]
mov dword [r13 + 8], 0x3f3c
mov edx, dword [r13 + 0x18]
bt edx, 9
jae 0x1400b411c
cmp ebx, 0x10
jae 0x1400b40ef
nop
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
add ebx, 8
cmp ebx, 0x10
jb 0x1400b40d0
test byte [r13 + 0x10], 4
je 0x1400b4116
movzx eax, word [r13 + 0x20]
cmp r14d, eax
je 0x1400b4116
lea rax, str.header_crc_mismatch
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400b415a
mov r14d, r15d
mov ebx, r15d
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400b4139
sar edx, 9
and edx, 1
mov dword [rax + 0x3c], edx
mov rax, qword [r13 + 0x28]
mov dword [rax + 0x40], 1
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sym.AmazonVNCViewer.exe_crc32_z
mov dword [r13 + 0x20], eax
mov dword [r12 + 0x4c], eax
mov dword [r13 + 8], 0x3f3f
mov r10d, dword [rbp + 0x60]
mov r9, qword [rbp - 0x18]
mov edx, dword [r13 + 8]
lea eax, [rdx - 0x3f34]
cmp eax, 0x1e
ja case.default.0x1400b3aca
mov r8d, dword [rbp - 0x24]
xor r15d, r15d
mov r11d, dword [rbp + 0x50]
jmp 0x1400b3ab0
cmp ebx, 0x20
jae 0x1400b41a5
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
add ebx, 8
cmp ebx, 0x20
jb 0x1400b4186
bswap r14d
mov dword [r13 + 0x20], r14d
mov ebx, r15d
mov dword [r12 + 0x4c], r14d
mov r14d, r15d
mov dword [r13 + 8], 0x3f3e
cmp dword [r13 + 0x14], 0
je 0x1400b4f8f
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sym.AmazonVNCViewer.exe_adler32_z
mov r10d, dword [rbp + 0x60]
mov r11d, dword [rbp + 0x50]
mov dword [r13 + 0x20], eax
mov dword [r12 + 0x4c], eax
mov dword [r13 + 8], 0x3f3f
lea eax, [r11 - 5]
cmp eax, 1
jbe 0x1400b42de
cmp dword [r13 + 0xc], 0
je 0x1400b421a
mov ecx, ebx
mov dword [r13 + 8], 0x3f4e
and ecx, 7
shr r14d, cl
sub ebx, ecx
jmp 0x1400b415a
cmp ebx, 3
jae 0x1400b423f
nop
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
add ebx, 8
cmp ebx, 3
jb 0x1400b4220
mov eax, r14d
shr r14d, 1
and eax, 1
mov dword [r13 + 0xc], eax
mov eax, r14d
and eax, 3
je 0x1400b4367
sub eax, 1
je 0x1400b429f
sub eax, 1
je 0x1400b428b
cmp eax, 1
jne 0x1400b436f
lea rax, str.invalid_block_type
shr r14d, 2
mov qword [r12 + 0x20], rax
add ebx, 0xfffffffd
mov dword [r13 + 8], 0x3f51
jmp 0x1400b415a
shr r14d, 2
add ebx, 0xfffffffd
mov dword [r13 + 8], 0x3f44
jmp 0x1400b415a
mov dword [r13 + 0x70], 9
lea rax, [0x14018e540]
mov qword [r13 + 0x60], rax
lea rax, [0x14018ed40]
mov qword [r13 + 0x68], rax
mov dword [r13 + 0x74], 5
mov dword [r13 + 8], 0x3f47
cmp r11d, 6
jne 0x1400b436f
shr r14d, 2
add ebx, 0xfffffffd
mov r12d, dword [rbp + 0x58]
mov edx, dword [rbp + 0x50]
mov r15, qword [rbp + 0x48]
mov rcx, qword [rbp - 0x18]
mov eax, dword [rbp + 0x60]
mov qword [r15 + 0x10], rcx
mov dword [r15 + 0x18], eax
mov qword [r15], rsi
mov dword [r15 + 8], edi
cmp dword [r13 + 0x34], 0
mov dword [r13 + 0x4c], ebx
mov ebx, dword [rbp - 0x24]
mov dword [r13 + 0x48], r14d
jne 0x1400b433a
cmp ebx, dword [r15 + 0x18]
je 0x1400b4fd8
mov eax, dword [r13 + 8]
cmp eax, 0x3f51
jge 0x1400b4fd8
cmp eax, 0x3f4e
jl 0x1400b433a
cmp edx, 4
je 0x1400b4fd8
mov rdx, qword [r15 + 0x10]
mov r8d, ebx
sub r8d, dword [r15 + 0x18]
mov rcx, r15
call fcn.1400b38c0
test eax, eax
je 0x1400b4fd8
mov dword [r13 + 8], 0x3f52
mov eax, 0xfffffffc
jmp 0x1400b509f
mov dword [r13 + 8], 0x3f41
shr r14d, 2
add ebx, 0xfffffffd
jmp 0x1400b415a
mov ecx, ebx
and ecx, 7
shr r14d, cl
sub ebx, ecx
cmp ebx, 0x20
jae 0x1400b43af
nop word [rax + rax]
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
add ebx, 8
cmp ebx, 0x20
jb 0x1400b4390
mov eax, r14d
movzx ecx, r14w
not eax
shr eax, 0x10
cmp ecx, eax
je 0x1400b43d8
lea rax, str.invalid_stored_block_lengths
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400b415e
mov dword [r13 + 0x50], ecx
mov r14d, r15d
mov dword [r13 + 8], 0x3f42
mov ebx, r15d
cmp r11d, 6
je 0x1400b42de
mov dword [r13 + 8], 0x3f43
mov ecx, dword [r13 + 0x50]
test ecx, ecx
je 0x1400b4454
cmp ecx, edi
mov eax, edi
mov r15d, r10d
cmovbe eax, ecx
cmp eax, r10d
cmovbe r15d, eax
test r15d, r15d
je 0x1400b42de
mov r8d, r15d
mov rdx, rsi
mov rcx, r9
call fcn.14011fbe0
mov r10d, dword [rbp + 0x60]
sub edi, r15d
mov r9, qword [rbp - 0x18]
sub r10d, r15d
mov eax, r15d
add r9, rax
mov dword [rbp + 0x60], r10d
add rsi, rax
mov qword [rbp - 0x18], r9
sub dword [r13 + 0x50], r15d
jmp 0x1400b415e
mov dword [r13 + 8], 0x3f3f
jmp 0x1400b415e
cmp ebx, 0xe
jae 0x1400b4485
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
add ebx, 8
cmp ebx, 0xe
jb 0x1400b4466
mov ecx, r14d
add ebx, 0xfffffff2
shr r14d, 5
and ecx, 0x1f
mov edx, r14d
add ecx, 0x101
shr r14d, 5
and edx, 0x1f
mov eax, r14d
mov dword [r13 + 0x7c], ecx
and eax, 0xf
shr r14d, 4
add eax, 4
inc edx
mov dword [r13 + 0x80], edx
mov dword [r13 + 0x78], eax
cmp ecx, 0x11e
ja 0x1400b45eb
cmp edx, 0x1e
ja 0x1400b45eb
mov dword [r13 + 0x84], r15d
mov dword [r13 + 8], 0x3f45
mov eax, dword [r13 + 0x84]
lea rdx, [0x140000000]
cmp eax, dword [r13 + 0x78]
jae 0x1400b455a
cmp ebx, 3
jae 0x1400b451f
nop dword [rax]
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
add ebx, 8
cmp ebx, 3
jb 0x1400b4500
mov eax, dword [r13 + 0x84]
movzx ecx, r14w
and cx, 7
shr r14d, 3
add ebx, 0xfffffffd
movzx eax, word [rdx + rax*2 + 0x18edc0]
mov word [r13 + rax*2 + 0x90], cx
inc dword [r13 + 0x84]
mov eax, dword [r13 + 0x84]
cmp eax, dword [r13 + 0x78]
jb 0x1400b44f8
cmp eax, 0x13
jae 0x1400b4589
nop
mov eax, dword [r13 + 0x84]
movzx eax, word [rdx + rax*2 + 0x18edc0]
mov word [r13 + rax*2 + 0x90], r15w
inc dword [r13 + 0x84]
cmp dword [r13 + 0x84], 0x13
jb 0x1400b4560
lea rcx, [r13 + 0x70]
lea rax, [r13 + 0x550]
mov dword [rcx], 7
lea r9, [r13 + 0x88]
mov qword [r13 + 0x60], rax
mov qword [r9], rax
lea rdx, [r13 + 0x90]
lea rax, [r13 + 0x310]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
xor ecx, ecx
lea r8d, [rcx + 0x13]
call fcn.1400ba650
mov dword [rbp + 0x58], eax
test eax, eax
je 0x1400b4604
lea rax, str.invalid_code_lengths_set
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400b4156
lea rax, str.too_many_length_or_distance_symbols
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400b415e
mov dword [r13 + 0x84], r15d
mov edx, 0x3f46
mov dword [r13 + 8], 0x3f46
mov eax, dword [r13 + 0x80]
add eax, dword [r13 + 0x7c]
cmp dword [r13 + 0x84], eax
jae 0x1400b482d
mov ecx, dword [r13 + 0x70]
mov r9d, 1
mov r10, qword [r13 + 0x60]
shl r9d, cl
dec r9d
mov eax, r14d
mov ecx, r9d
and rcx, rax
mov eax, dword [r10 + rcx*4]
mov edx, eax
shr edx, 8
mov r8d, eax
movzx ecx, dl
shr r8d, 0x10
mov dword [rbp - 0x20], eax
cmp ecx, ebx
jbe 0x1400b46a4
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
mov eax, r9d
add ebx, 8
mov ecx, r14d
and rcx, rax
mov eax, dword [r10 + rcx*4]
mov edx, eax
shr edx, 8
mov r8d, eax
movzx ecx, dl
shr r8d, 0x10
mov dword [rbp - 0x20], eax
cmp ecx, ebx
ja 0x1400b4667
cmp r8w, 0x10
jae 0x1400b46dc
movzx ecx, dl
shr eax, 0x10
shr r14d, cl
movzx ecx, dl
sub ebx, ecx
mov ecx, dword [r13 + 0x84]
mov word [r13 + rcx*2 + 0x90], ax
inc dword [r13 + 0x84]
mov ecx, dword [r13 + 0x84]
jmp 0x1400b4816
jne 0x1400b473e
movzx edx, dl
add edx, 2
cmp ebx, edx
jae 0x1400b4706
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
add ebx, 8
cmp ebx, edx
jb 0x1400b46e8
movzx ecx, byte [rbp - 0x1f]
mov eax, dword [r13 + 0x84]
sub ebx, ecx
shr r14d, cl
test eax, eax
je 0x1400b485d
mov edx, r14d
add ebx, 0xfffffffe
and edx, 3
shr r14d, 2
add edx, 3
dec eax
movzx r8d, word [r13 + rax*2 + 0x90]
jmp 0x1400b47d2
movzx eax, dl
cmp r8w, 0x11
jne 0x1400b478c
lea edx, [rax + 3]
cmp ebx, edx
jae 0x1400b476e
nop
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
add ebx, 8
cmp ebx, edx
jb 0x1400b4750
movzx ecx, byte [rbp - 0x1f]
mov eax, 0xfffffffd
shr r14d, cl
mov r8d, r15d
mov edx, r14d
and edx, 7
add edx, 3
shr r14d, 3
jmp 0x1400b47ce
lea edx, [rax + 7]
cmp ebx, edx
jae 0x1400b47b1
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
add ebx, 8
cmp ebx, edx
jb 0x1400b4793
movzx ecx, byte [rbp - 0x1f]
mov eax, 0xfffffff9
shr r14d, cl
movzx r8d, r15w
mov edx, r14d
and edx, 0x7f
add edx, 0xb
shr r14d, 7
sub eax, ecx
add ebx, eax
mov ecx, dword [r13 + 0x84]
mov eax, dword [r13 + 0x80]
add ecx, edx
add eax, dword [r13 + 0x7c]
cmp ecx, eax
ja 0x1400b485d
nop word [rax + rax]
mov eax, dword [r13 + 0x84]
mov word [r13 + rax*2 + 0x90], r8w
mov ecx, dword [r13 + 0x84]
lea ecx, [rcx + 1]
mov dword [r13 + 0x84], ecx
add edx, 0xffffffff
jne 0x1400b47f0
mov eax, dword [r13 + 0x80]
add eax, dword [r13 + 0x7c]
cmp ecx, eax
jb 0x1400b4630
mov edx, dword [r13 + 8]
cmp edx, 0x3f51
je 0x1400b4156
cmp word [r13 + 0x290], 0
jne 0x1400b4876
lea rax, str.invalid_code____missing_end_of_block
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400b4156
lea rax, str.invalid_bit_length_repeat
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400b4156
mov r8d, dword [r13 + 0x7c]
lea rax, [r13 + 0x550]
mov qword [r13 + 0x88], rax
lea r12, [r13 + 0x310]
mov qword [r13 + 0x60], rax
lea rdx, [r13 + 0x90]
lea rax, [r13 + 0x70]
mov qword [rsp + 0x28], r12
lea r9, [r13 + 0x88]
mov dword [rax], 9
mov ecx, 1
mov qword [rsp + 0x20], rax
call fcn.1400ba650
mov dword [rbp + 0x58], eax
test eax, eax
je 0x1400b48e3
mov r12, qword [rbp + 0x48]
lea rax, str.invalid_literal_lengths_set
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400b4156
mov rax, qword [r13 + 0x88]
lea rcx, [r13 + 0x74]
mov r8d, dword [r13 + 0x80]
lea r9, [r13 + 0x88]
mov qword [r13 + 0x68], rax
mov eax, dword [r13 + 0x7c]
mov dword [rcx], 6
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rcx
mov ecx, 2
lea rdx, [rax*2 + 0x90]
add rdx, r13
call fcn.1400ba650
mov dword [rbp + 0x58], eax
mov r12d, eax
test eax, eax
je 0x1400b4950
mov r12, qword [rbp + 0x48]
lea rax, str.invalid_distances_set
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400b4156
mov edx, dword [rbp + 0x50]
mov dword [r13 + 8], 0x3f47
cmp edx, 6
je 0x1400b42e5
mov r12, qword [rbp + 0x48]
xor r15d, r15d
mov r8d, dword [rbp - 0x24]
mov r10d, dword [rbp + 0x60]
mov dword [r13 + 8], 0x3f48
cmp edi, 6
jb 0x1400b49f4
cmp r10d, 0x102
jb 0x1400b49f4
mov rcx, qword [rbp - 0x18]
mov edx, r8d
mov qword [r12 + 0x10], rcx
mov rcx, r12
mov dword [r12 + 0x18], r10d
mov qword [r12], rsi
mov dword [r12 + 8], edi
mov dword [r13 + 0x48], r14d
mov dword [r13 + 0x4c], ebx
call fcn.1400bab50
cmp dword [r13 + 8], 0x3f3f
mov r9, qword [r12 + 0x10]
mov r10d, dword [r12 + 0x18]
mov rsi, qword [r12]
mov edi, dword [r12 + 8]
mov r14d, dword [r13 + 0x48]
mov ebx, dword [r13 + 0x4c]
mov qword [rbp - 0x18], r9
mov dword [rbp + 0x60], r10d
jne 0x1400b415e
mov dword [r13 + 0x1be4], 0xffffffff
jmp 0x1400b415e
mov ecx, dword [r13 + 0x70]
mov edx, 1
mov r10, qword [r13 + 0x60]
shl edx, cl
dec edx
mov eax, r14d
mov ecx, edx
and rcx, rax
mov dword [r13 + 0x1be4], r15d
mov eax, dword [r10 + rcx*4]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
cmp ecx, ebx
jbe 0x1400b4a56
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
mov eax, edx
add ebx, 8
mov ecx, r14d
and rcx, rax
mov eax, dword [r10 + rcx*4]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
cmp ecx, ebx
ja 0x1400b4a24
test al, al
je 0x1400b4b11
test al, 0xf0
jne 0x1400b4b11
mov ecx, eax
mov dword [rbp - 0x20], eax
movzx r15d, byte [rbp - 0x1f]
mov r8d, 1
shr ecx, 8
mov edx, eax
movzx r9d, cl
movzx ecx, al
add ecx, r9d
shr eax, 0x10
shl r8d, cl
mov ecx, r9d
dec r8d
and r8d, r14d
shr r8d, cl
add r8d, eax
mov eax, dword [r10 + r8*4]
mov ecx, eax
shr ecx, 8
movzx r8d, cl
add r8d, r9d
cmp r8d, ebx
jbe 0x1400b4b01
movzx r11d, word [rbp - 0x1e]
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
mov r8d, 1
add r14d, eax
movzx ecx, dl
add ecx, r15d
dec edi
shl r8d, cl
inc rsi
dec r8d
mov ecx, r15d
and r8d, r14d
add ebx, 8
shr r8d, cl
add r8d, r11d
mov eax, dword [r10 + r8*4]
mov ecx, eax
shr ecx, 8
movzx r8d, cl
add r8d, r15d
cmp r8d, ebx
ja 0x1400b4ab4
mov ecx, r15d
shr r14d, cl
sub ebx, r15d
mov dword [r13 + 0x1be4], ecx
mov ecx, eax
shr ecx, 8
movzx ecx, cl
add dword [r13 + 0x1be4], ecx
sub ebx, ecx
shr r14d, cl
mov ecx, eax
shr ecx, 0x10
mov dword [r13 + 0x50], ecx
test al, al
jne 0x1400b4b3f
mov dword [r13 + 8], 0x3f4d
jmp 0x1400b4156
test al, 0x20
je 0x1400b4b53
mov dword [r13 + 0x1be4], 0xffffffff
jmp 0x1400b414e
test al, 0x40
je 0x1400b4b70
lea rax, str.invalid_literal_length_code
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400b4156
movzx ecx, al
and ecx, 0xf
mov dword [r13 + 8], 0x3f49
mov dword [r13 + 0x58], ecx
mov edx, dword [r13 + 0x58]
test edx, edx
je 0x1400b4bcc
cmp ebx, edx
jae 0x1400b4bae
nop
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
add ebx, 8
cmp ebx, edx
jb 0x1400b4b90
mov ecx, edx
mov eax, 1
shl eax, cl
sub ebx, edx
dec eax
and eax, r14d
shr r14d, cl
add dword [r13 + 0x50], eax
add dword [r13 + 0x1be4], edx
mov eax, dword [r13 + 0x50]
mov dword [r13 + 0x1be8], eax
mov dword [r13 + 8], 0x3f4a
mov ecx, dword [r13 + 0x74]
mov edx, 1
mov r10, qword [r13 + 0x68]
shl edx, cl
dec edx
mov eax, r14d
mov ecx, edx
and rcx, rax
mov eax, dword [r10 + rcx*4]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
cmp ecx, ebx
jbe 0x1400b4c3a
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
mov eax, edx
add ebx, 8
mov ecx, r14d
and rcx, rax
mov eax, dword [r10 + rcx*4]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
cmp ecx, ebx
ja 0x1400b4c08
test al, 0xf0
jne 0x1400b4ced
mov ecx, eax
mov dword [rbp - 0x20], eax
movzx r15d, byte [rbp - 0x1f]
mov r8d, 1
shr ecx, 8
mov edx, eax
movzx r9d, cl
movzx ecx, al
add ecx, r9d
shr eax, 0x10
shl r8d, cl
mov ecx, r9d
dec r8d
and r8d, r14d
shr r8d, cl
add r8d, eax
mov eax, dword [r10 + r8*4]
mov ecx, eax
shr ecx, 8
movzx r8d, cl
add r8d, r9d
cmp r8d, ebx
jbe 0x1400b4cdd
movzx r11d, word [rbp - 0x1e]
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
mov r8d, 1
add r14d, eax
movzx ecx, dl
add ecx, r15d
dec edi
shl r8d, cl
inc rsi
dec r8d
mov ecx, r15d
and r8d, r14d
add ebx, 8
shr r8d, cl
add r8d, r11d
mov eax, dword [r10 + r8*4]
mov ecx, eax
shr ecx, 8
movzx r8d, cl
add r8d, r15d
cmp r8d, ebx
ja 0x1400b4c90
mov ecx, r15d
sub ebx, r15d
shr r14d, cl
add dword [r13 + 0x1be4], ecx
mov r10d, dword [rbp + 0x60]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
add dword [r13 + 0x1be4], ecx
sub ebx, ecx
shr r14d, cl
test al, 0x40
je 0x1400b4d22
lea rax, str.invalid_distance_code
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400b415a
mov r8d, dword [rbp - 0x24]
mov ecx, eax
shr ecx, 0x10
mov dword [r13 + 0x54], ecx
movzx ecx, al
and ecx, 0xf
mov dword [r13 + 8], 0x3f4b
mov dword [r13 + 0x58], ecx
mov edx, dword [r13 + 0x58]
test edx, edx
je 0x1400b4d8c
cmp ebx, edx
jae 0x1400b4d6e
nop dword [rax]
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
add ebx, 8
cmp ebx, edx
jb 0x1400b4d50
mov ecx, edx
mov eax, 1
shl eax, cl
sub ebx, edx
dec eax
and eax, r14d
shr r14d, cl
add dword [r13 + 0x54], eax
add dword [r13 + 0x1be4], edx
mov dword [r13 + 8], 0x3f4c
test r10d, r10d
je 0x1400b42de
mov eax, dword [r13 + 0x54]
mov ecx, r8d
sub ecx, r10d
cmp eax, ecx
jbe 0x1400b4dfc
sub eax, ecx
cmp eax, dword [r13 + 0x38]
jbe 0x1400b4dd6
cmp dword [r13 + 0x1be0], 0
je 0x1400b4dd6
lea rax, str.invalid_distance_too_far_back
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400b415a
mov ecx, dword [r13 + 0x3c]
cmp eax, ecx
jbe 0x1400b4de4
sub eax, ecx
mov ecx, dword [r13 + 0x34]
mov r8d, dword [r13 + 0x50]
sub ecx, eax
mov edx, ecx
mov r9d, r8d
add rdx, qword [r13 + 0x40]
cmp eax, r8d
cmovbe r9d, eax
jmp 0x1400b4e0a
mov rdx, qword [rbp - 0x18]
mov r8d, dword [r13 + 0x50]
sub rdx, rax
mov r9d, r8d
cmp r9d, r10d
mov ecx, r10d
cmovbe ecx, r9d
mov r9, qword [rbp - 0x18]
sub r10d, ecx
sub r8d, ecx
mov dword [rbp + 0x60], r10d
sub rdx, r9
mov dword [r13 + 0x50], r8d
nop dword [rax]
movzx eax, byte [rdx + r9]
mov byte [r9], al
inc r9
add ecx, 0xffffffff
jne 0x1400b4e30
mov qword [rbp - 0x18], r9
cmp dword [r13 + 0x50], ecx
jne 0x1400b415e
mov dword [r13 + 8], 0x3f48
jmp 0x1400b415e
test r10d, r10d
je 0x1400b42de
movzx eax, byte [r13 + 0x50]
mov byte [r9], al
inc r9
dec r10d
mov qword [rbp - 0x18], r9
mov dword [rbp + 0x60], r10d
mov dword [r13 + 8], 0x3f48
jmp 0x1400b415e
cmp dword [r13 + 0x10], 0
je 0x1400b4f36
cmp ebx, 0x20
jae 0x1400b4eb6
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
add ebx, 8
cmp ebx, 0x20
jb 0x1400b4e97
sub r8d, r10d
add dword [r12 + 0x1c], r8d
add dword [r13 + 0x24], r8d
mov eax, dword [r13 + 0x10]
test al, 4
je 0x1400b4efd
test r8d, r8d
je 0x1400b4efd
mov ecx, dword [r13 + 0x20]
mov rdx, r9
sub rdx, r8
cmp dword [r13 + 0x18], 0
je 0x1400b4ee7
call sym.AmazonVNCViewer.exe_crc32_z
jmp 0x1400b4eec
call sym.AmazonVNCViewer.exe_adler32_z
mov r10d, dword [rbp + 0x60]
mov dword [r13 + 0x20], eax
mov dword [r12 + 0x4c], eax
mov eax, dword [r13 + 0x10]
mov dword [rbp - 0x24], r10d
test al, 4
je 0x1400b4f30
cmp dword [r13 + 0x18], 0
mov eax, r14d
jne 0x1400b4f11
bswap eax
cmp eax, dword [r13 + 0x20]
je 0x1400b4f30
lea rax, str.incorrect_data_check
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400b415a
mov r14d, r15d
mov ebx, r15d
mov dword [r13 + 8], 0x3f4f
cmp dword [r13 + 0x10], 0
je 0x1400b4fba
cmp dword [r13 + 0x18], 0
je 0x1400b4fba
cmp ebx, 0x20
jae 0x1400b4f70
test edi, edi
je 0x1400b42de
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add r14d, eax
inc rsi
add ebx, 8
cmp ebx, 0x20
jb 0x1400b4f51
cmp r14d, dword [r13 + 0x24]
je 0x1400b4fb4
lea rax, str.incorrect_length_check
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400b415a
mov qword [r12 + 0x10], r9
mov eax, 2
mov dword [r12 + 0x18], r10d
mov qword [r12], rsi
mov dword [r12 + 8], edi
mov dword [r13 + 0x48], r14d
mov dword [r13 + 0x4c], ebx
jmp 0x1400b509f
mov r14d, r15d
mov ebx, r15d
mov dword [r13 + 8], 0x3f50
mov r12d, 1
jmp 0x1400b42e2
mov r12d, 0xfffffffd
jmp 0x1400b42e2
sub ebx, dword [r15 + 0x18]
mov r10d, dword [rbp - 0x1c]
sub r10d, dword [r15 + 8]
add dword [r15 + 0xc], r10d
add dword [r15 + 0x1c], ebx
add dword [r13 + 0x24], ebx
test byte [r13 + 0x10], 4
mov dword [rbp - 0x1c], r10d
je 0x1400b502c
test ebx, ebx
je 0x1400b502c
mov rdx, qword [r15 + 0x10]
mov ecx, dword [r13 + 0x20]
mov r8d, ebx
sub rdx, r8
cmp dword [r13 + 0x18], 0
je 0x1400b501b
call sym.AmazonVNCViewer.exe_crc32_z
jmp 0x1400b5020
call sym.AmazonVNCViewer.exe_adler32_z
mov r10d, dword [rbp - 0x1c]
mov dword [r13 + 0x20], eax
mov dword [r15 + 0x4c], eax
mov edx, dword [r13 + 8]
cmp edx, 0x3f47
je 0x1400b5048
cmp edx, 0x3f42
je 0x1400b5048
xor r9d, r9d
mov r8d, r9d
jmp 0x1400b5051
mov r8d, 0x100
xor r9d, r9d
mov eax, dword [r13 + 0xc]
neg eax
mov eax, 0x80
sbb ecx, ecx
and ecx, 0x40
cmp edx, 0x3f3f
cmove r9d, eax
lea eax, [r8 + rcx]
add r9d, eax
add r9d, dword [r13 + 0x4c]
mov dword [r15 + 0x48], r9d
test r10d, r10d
jne 0x1400b5083
test ebx, ebx
je 0x1400b5089
cmp dword [rbp + 0x50], 4
jne 0x1400b5095
test r12d, r12d
mov eax, 0xfffffffb
cmove r12d, eax
mov eax, r12d
jmp 0x1400b509f
mov eax, 0xfffffffe
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret