Function at 0x1400cc720
Capabilities:
Compress data via zlib inflate or deflate
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x10], edx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x58
mov r14d, edx
mov r12, rcx
test rcx, rcx
je case.0x1400cc81b.16211
cmp qword [rcx + 0x30], 0
je case.0x1400cc81b.16211
cmp qword [rcx + 0x38], 0
je case.0x1400cc81b.16211
mov r13, qword [rcx + 0x28]
test r13, r13
je case.0x1400cc81b.16211
cmp qword [r13], rcx
jne case.0x1400cc81b.16211
mov edx, dword [r13 + 8]
lea eax, [rdx - 0x3f34]
cmp eax, 0x1f
ja case.0x1400cc81b.16211
mov r9, qword [rcx + 0x10]
mov qword [rsp + 0x40], r9
test r9, r9
je case.0x1400cc81b.16211
mov rsi, qword [rcx]
test rsi, rsi
jne 0x1400cc7a6
cmp dword [rcx + 8], esi
jne case.0x1400cc81b.16211
cmp edx, 0x3f3f
jne 0x1400cc7c7
mov dword [r13 + 8], 0x3f40
mov edx, 0x3f40
mov r9, qword [rcx + 0x10]
mov rsi, qword [rcx]
mov qword [rsp + 0x40], r9
mov r10d, dword [rcx + 0x18]
lea eax, [rdx - 0x3f34]
mov edi, dword [rcx + 8]
xor r15d, r15d
mov ebp, dword [r13 + 0x48]
mov r8d, r10d
mov ebx, dword [r13 + 0x4c]
mov dword [rsp + 0xb8], r10d
mov dword [rsp + 0x38], edi
mov dword [rsp + 0xa0], r10d
mov dword [rsp + 0xb0], r15d
cmp eax, 0x1f
ja case.0x1400cc81b.16211
lea r11, [0x140000000]
cdqe
mov ecx, dword [r11 + rax*4 + 0xcdea4]
add rcx, r11
jmp rcx
mov edx, dword [r13 + 0x10]
test edx, edx
jne 0x1400cc832
mov dword [r13 + 8], 0x3f40
jmp 0x1400ccec1
cmp ebx, 0x10
jae 0x1400cc855
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0x10
jb 0x1400cc837
test dl, 2
je 0x1400cc8b1
cmp ebp, 0x8b1f
jne 0x1400cc8b1
cmp dword [r13 + 0x30], 0
jne 0x1400cc871
mov dword [r13 + 0x30], setsockopt
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sym.winvnc.exe_crc32_z
mov r8d, 2
mov dword [r13 + 0x20], eax
lea rdx, [rsp + 0x30]
mov word [rsp + 0x30], 0x8b1f
mov ecx, eax
call sym.winvnc.exe_crc32_z
mov dword [r13 + 0x20], eax
mov ebp, r15d
mov ebx, r15d
mov dword [r13 + 8], 0x3f35
jmp 0x1400cceb4
mov rax, qword [r13 + 0x28]
mov dword [r13 + 0x18], r15d
test rax, rax
je 0x1400cc8c9
mov dword [rax + 0x40], 0xffffffff
mov edx, dword [r13 + 0x10]
test dl, 1
je 0x1400cc999
movzx ecx, bpl
mov eax, ebp
shr eax, 8
shl ecx, 8
add ecx, eax
mov eax, 0x8421085
mul ecx
mov eax, ecx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 4
imul eax, eax, 0x1f
cmp ecx, eax
jne 0x1400cc999
mov eax, ebp
and al, 0xf
cmp al, 8
je 0x1400cc91e
lea rax, str.unknown_compression_method
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400ccec1
mov eax, dword [r13 + 0x30]
add ebx, 0xfffffffc
shr ebp, 4
mov ecx, ebp
and ecx, 0xf
add ecx, 8
test eax, eax
jne 0x1400cc93a
mov dword [r13 + 0x30], ecx
mov eax, ecx
cmp ecx, 0xf
ja 0x1400cc980
cmp ecx, eax
ja 0x1400cc980
mov eax, 1
xor r8d, r8d
shl eax, cl
xor edx, edx
xor ecx, ecx
mov dword [r13 + 0x1c], eax
call sym.winvnc.exe_adler32_z
shr ebp, 8
mov ebx, r15d
not ebp
mov dword [r13 + 0x20], eax
and ebp, 2
mov dword [r12 + 0x4c], eax
or ebp, 0x3f3d
mov dword [r13 + 8], ebp
mov ebp, r15d
jmp 0x1400cceb4
lea rax, str.invalid_window_size
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400ccec1
lea rax, str.incorrect_header_check
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400ccec1
cmp ebx, 0x10
jae 0x1400cc9d5
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0x10
jb 0x1400cc9b7
mov dword [r13 + 0x18], ebp
cmp bpl, 8
je 0x1400cc9f8
lea rax, str.unknown_compression_method
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400ccec1
test ebp, 0xe000
je 0x1400cca19
lea rax, str.unknown_header_flags_set
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400ccec1
mov rdx, qword [r13 + 0x28]
mov ecx, ebp
shr ecx, 8
mov eax, ebp
test rdx, rdx
je 0x1400cca34
mov eax, ecx
and eax, 1
mov dword [rdx], eax
mov eax, dword [r13 + 0x18]
bt eax, 9
jae 0x1400cca62
test byte [r13 + 0x10], 4
je 0x1400cca62
mov byte [rsp + 0x31], cl
lea rdx, [rsp + 0x30]
mov ecx, dword [r13 + 0x20]
mov r8d, 2
mov byte [rsp + 0x30], bpl
call sym.winvnc.exe_crc32_z
mov dword [r13 + 0x20], eax
mov ebp, r15d
mov dword [r13 + 8], 0x3f36
mov ebx, r15d
jmp 0x1400cca77
cmp ebx, 0x20
jae 0x1400cca95
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0x20
jb 0x1400cca77
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400ccaa1
mov dword [rax + 4], ebp
test dword [r13 + 0x18], 0x200
je 0x1400ccae9
test byte [r13 + 0x10], 4
je 0x1400ccae9
mov ecx, dword [r13 + 0x20]
lea rdx, [rsp + 0x30]
mov eax, ebp
mov byte [rsp + 0x30], bpl
shr eax, 8
mov r8d, 4
mov byte [rsp + 0x31], al
mov eax, ebp
shr eax, 0x10
shr ebp, 0x18
mov byte [rsp + 0x32], al
mov byte [rsp + 0x33], bpl
call sym.winvnc.exe_crc32_z
mov dword [r13 + 0x20], eax
mov ebp, r15d
mov dword [r13 + 8], 0x3f37
mov ebx, r15d
jmp 0x1400ccb00
cmp ebx, 0x10
jae 0x1400ccb1e
nop
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0x10
jb 0x1400ccb00
mov rcx, qword [r13 + 0x28]
test rcx, rcx
je 0x1400ccb3c
movzx eax, bpl
mov dword [rcx + 8], eax
mov ecx, ebp
mov rax, qword [r13 + 0x28]
shr ecx, 8
mov dword [rax + 0xc], ecx
jmp 0x1400ccb41
mov ecx, ebp
shr ecx, 8
test dword [r13 + 0x18], 0x200
je 0x1400ccb73
test byte [r13 + 0x10], 4
je 0x1400ccb73
mov byte [rsp + 0x31], cl
lea rdx, [rsp + 0x30]
mov ecx, dword [r13 + 0x20]
mov r8d, 2
mov byte [rsp + 0x30], bpl
call sym.winvnc.exe_crc32_z
mov dword [r13 + 0x20], eax
mov ebp, r15d
mov dword [r13 + 8], 0x3f38
mov ebx, r15d
test dword [r13 + 0x18], 0x400
je 0x1400ccbfc
cmp ebx, 0x10
jae 0x1400ccbae
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0x10
jb 0x1400ccb90
mov rax, qword [r13 + 0x28]
mov dword [r13 + 0x50], ebp
test rax, rax
je 0x1400ccbbe
mov dword [rax + 0x18], ebp
test dword [r13 + 0x18], 0x200
je 0x1400ccbf4
test byte [r13 + 0x10], 4
je 0x1400ccbf4
mov ecx, dword [r13 + 0x20]
lea rdx, [rsp + 0x30]
mov byte [rsp + 0x30], bpl
mov r8d, 2
shr ebp, 8
mov byte [rsp + 0x31], bpl
call sym.winvnc.exe_crc32_z
mov dword [r13 + 0x20], eax
mov ebp, r15d
mov ebx, r15d
jmp 0x1400ccc09
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400ccc09
mov qword [rax + 0x10], r15
mov dword [r13 + 8], 0x3f39
mov ecx, dword [r13 + 0x18]
bt ecx, 0xa
jae 0x1400cccbf
mov eax, dword [r13 + 0x50]
mov r14d, edi
cmp eax, edi
cmovbe r14d, eax
test r14d, r14d
je 0x1400cccb7
mov rdx, qword [r13 + 0x28]
mov r15d, eax
test rdx, rdx
je 0x1400ccc81
mov r10, qword [rdx + 0x10]
test r10, r10
je 0x1400ccc81
mov r8d, dword [rdx + 0x1c]
mov r9d, dword [rdx + 0x18]
mov edx, r8d
sub r9d, eax
mov eax, r14d
sub edx, r9d
lea ecx, [r14 + r9]
cmp ecx, r8d
mov ecx, r9d
cmova eax, edx
add rcx, r10
mov r8d, eax
mov rdx, rsi
call fcn.140134230
mov ecx, dword [r13 + 0x18]
mov r15d, dword [r13 + 0x50]
bt ecx, 9
jae 0x1400ccca1
test byte [r13 + 0x10], 4
je 0x1400ccca1
mov ecx, dword [r13 + 0x20]
mov rdx, rsi
mov r8d, r14d
call sym.winvnc.exe_crc32_z
mov dword [r13 + 0x20], eax
mov eax, r14d
sub edi, r14d
add rsi, rax
mov eax, r15d
sub eax, r14d
mov dword [r13 + 0x50], eax
xor r15d, r15d
test eax, eax
jne 0x1400cd03e
mov dword [r13 + 0x50], r15d
mov dword [r13 + 8], 0x3f3a
test dword [r13 + 0x18], 0x800
je 0x1400ccd53
test edi, edi
je 0x1400cd03e
mov r14d, r15d
mov eax, r14d
inc r14d
movzx r15d, byte [rax + rsi]
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400ccd0e
mov rdx, qword [rax + 0x20]
test rdx, rdx
je 0x1400ccd0e
mov ecx, dword [r13 + 0x50]
cmp ecx, dword [rax + 0x28]
jae 0x1400ccd0e
mov byte [rcx + rdx], r15b
inc dword [r13 + 0x50]
test r15b, r15b
je 0x1400ccd18
cmp r14d, edi
jb 0x1400ccce0
test dword [r13 + 0x18], 0x200
je 0x1400ccd3c
test byte [r13 + 0x10], 4
je 0x1400ccd3c
mov ecx, dword [r13 + 0x20]
mov rdx, rsi
mov r8d, r14d
call sym.winvnc.exe_crc32_z
mov dword [r13 + 0x20], eax
mov eax, r14d
sub edi, r14d
add rsi, rax
test r15b, r15b
jne 0x1400cd03e
xor r15d, r15d
jmp 0x1400ccd60
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400ccd60
mov qword [rax + 0x20], r15
mov dword [r13 + 0x50], r15d
mov dword [r13 + 8], 0x3f3b
test dword [r13 + 0x18], 0x1000
je 0x1400cce03
test edi, edi
je 0x1400cd03e
mov r14d, r15d
nop word [rax + rax]
mov eax, r14d
inc r14d
movzx r15d, byte [rax + rsi]
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400ccdbe
mov rdx, qword [rax + 0x30]
test rdx, rdx
je 0x1400ccdbe
mov ecx, dword [r13 + 0x50]
cmp ecx, dword [rax + 0x38]
jae 0x1400ccdbe
mov byte [rcx + rdx], r15b
inc dword [r13 + 0x50]
test r15b, r15b
je 0x1400ccdc8
cmp r14d, edi
jb 0x1400ccd90
test dword [r13 + 0x18], 0x200
je 0x1400ccdec
test byte [r13 + 0x10], 4
je 0x1400ccdec
mov ecx, dword [r13 + 0x20]
mov rdx, rsi
mov r8d, r14d
call sym.winvnc.exe_crc32_z
mov dword [r13 + 0x20], eax
mov eax, r14d
sub edi, r14d
add rsi, rax
test r15b, r15b
jne 0x1400cd03e
xor r15d, r15d
jmp 0x1400cce10
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400cce10
mov qword [rax + 0x30], r15
mov r10d, dword [rsp + 0xb8]
mov dword [r13 + 8], 0x3f3c
mov edx, dword [r13 + 0x18]
bt edx, 9
jae 0x1400cce7a
cmp ebx, 0x10
jae 0x1400cce4e
nop
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0x10
jb 0x1400cce30
test byte [r13 + 0x10], 4
je 0x1400cce74
movzx eax, word [r13 + 0x20]
cmp ebp, eax
je 0x1400cce74
lea rax, str.header_crc_mismatch
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400ccebc
mov ebp, r15d
mov ebx, r15d
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x1400cce97
sar edx, 9
and edx, 1
mov dword [rax + 0x3c], edx
mov rax, qword [r13 + 0x28]
mov dword [rax + 0x40], 1
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sym.winvnc.exe_crc32_z
mov dword [r13 + 0x20], eax
mov dword [r12 + 0x4c], eax
mov dword [r13 + 8], 0x3f3f
mov r10d, dword [rsp + 0xb8]
mov r9, qword [rsp + 0x40]
mov edx, dword [r13 + 8]
lea eax, [rdx - 0x3f34]
cmp eax, 0x1f
ja case.0x1400cc81b.16211
mov r8d, dword [rsp + 0xa0]
xor r15d, r15d
mov r14d, dword [rsp + 0xa8]
jmp 0x1400cc807
cmp ebx, 0x20
jae 0x1400ccf0f
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0x20
jb 0x1400ccef1
bswap ebp
mov dword [r13 + 0x20], ebp
mov ebx, r15d
mov dword [r12 + 0x4c], ebp
mov ebp, r15d
mov dword [r13 + 8], 0x3f3e
cmp dword [r13 + 0x14], 0
je 0x1400cdd3d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sym.winvnc.exe_adler32_z
mov r10d, dword [rsp + 0xb8]
mov dword [r13 + 0x20], eax
mov dword [r12 + 0x4c], eax
mov dword [r13 + 8], 0x3f3f
lea eax, [r14 - 5]
cmp eax, 1
jbe 0x1400cd03e
cmp dword [r13 + 0xc], 0
je 0x1400ccf82
mov ecx, ebx
mov dword [r13 + 8], 0x3f4e
and ecx, 7
shr ebp, cl
sub ebx, ecx
jmp 0x1400ccebc
cmp ebx, 3
jae 0x1400ccfa5
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 3
jb 0x1400ccf87
mov eax, ebp
shr ebp, 1
and eax, 1
mov dword [r13 + 0xc], eax
mov eax, ebp
and eax, 3
je 0x1400cd0dc
sub eax, 1
je 0x1400cd000
sub eax, 1
je 0x1400ccfed
cmp eax, 1
jne 0x1400cd0e4
lea rax, str.invalid_block_type
shr ebp, 2
mov qword [r12 + 0x20], rax
add ebx, 0xfffffffd
mov dword [r13 + 8], 0x3f51
jmp 0x1400ccebc
shr ebp, 2
add ebx, 0xfffffffd
mov dword [r13 + 8], 0x3f44
jmp 0x1400ccebc
mov dword [r13 + 0x70], 9
lea rax, [0x1401be670]
mov qword [r13 + 0x60], rax
lea rax, [0x1401bee70]
mov qword [r13 + 0x68], rax
mov dword [r13 + 0x74], 5
mov dword [r13 + 8], 0x3f47
cmp r14d, 6
jne 0x1400cd0e4
shr ebp, 2
add ebx, 0xfffffffd
mov r15d, dword [rsp + 0xb0]
mov edx, dword [rsp + 0xa8]
mov r14d, dword [rsp + 0xa0]
mov rcx, qword [rsp + 0x40]
mov eax, dword [rsp + 0xb8]
mov qword [r12 + 0x10], rcx
mov dword [r12 + 0x18], eax
mov qword [r12], rsi
mov dword [r12 + 8], edi
cmp dword [r13 + 0x34], 0
mov dword [r13 + 0x48], ebp
mov dword [r13 + 0x4c], ebx
jne 0x1400cd0ad
cmp r14d, dword [r12 + 0x18]
je 0x1400cddbb
mov eax, dword [r13 + 8]
cmp eax, 0x3f51
jge 0x1400cddbb
cmp eax, 0x3f4e
jl 0x1400cd0ad
cmp edx, 4
je 0x1400cddbb
mov rdx, qword [r12 + 0x10]
mov r8d, r14d
sub r8d, dword [r12 + 0x18]
mov rcx, r12
call fcn.1400cc610
test eax, eax
je 0x1400cddbb
mov dword [r13 + 8], 0x3f52
mov eax, 0xfffffffc
jmp 0x1400cde91
mov dword [r13 + 8], 0x3f41
shr ebp, 2
add ebx, 0xfffffffd
jmp 0x1400ccebc
mov ecx, ebx
and ecx, 7
shr ebp, cl
sub ebx, ecx
cmp ebx, 0x20
jae 0x1400cd11e
nop dword [rax]
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0x20
jb 0x1400cd100
mov eax, ebp
movzx ecx, bp
not eax
shr eax, 0x10
cmp ecx, eax
je 0x1400cd145
lea rax, str.invalid_stored_block_lengths
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400ccec1
mov dword [r13 + 0x50], ecx
mov ebp, r15d
mov dword [r13 + 8], 0x3f42
mov ebx, r15d
cmp r14d, 6
je 0x1400cd03e
mov dword [r13 + 8], 0x3f43
mov ecx, dword [r13 + 0x50]
test ecx, ecx
je 0x1400cd1cb
cmp ecx, edi
mov eax, edi
mov r14d, r10d
cmovbe eax, ecx
cmp eax, r10d
cmovbe r14d, eax
test r14d, r14d
je 0x1400cd03e
mov r8d, r14d
mov rdx, rsi
mov rcx, r9
call fcn.140134230
mov r10d, dword [rsp + 0xb8]
sub edi, r14d
mov r9, qword [rsp + 0x40]
sub r10d, r14d
mov eax, r14d
add r9, rax
mov dword [rsp + 0xb8], r10d
add rsi, rax
mov qword [rsp + 0x40], r9
sub dword [r13 + 0x50], r14d
jmp 0x1400ccec1
mov dword [r13 + 8], 0x3f3f
jmp 0x1400ccec1
cmp ebx, 0xe
jae 0x1400cd1fe
nop dword [rax]
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0xe
jb 0x1400cd1e0
mov ecx, ebp
add ebx, 0xfffffff2
shr ebp, 5
and ecx, 0x1f
mov edx, ebp
add ecx, 0x101
shr ebp, 5
and edx, 0x1f
mov eax, ebp
mov dword [r13 + 0x7c], ecx
and eax, 0xf
shr ebp, 4
add eax, 4
inc edx
mov dword [r13 + 0x80], edx
mov dword [r13 + 0x78], eax
cmp ecx, 0x11e
ja 0x1400cd360
cmp edx, 0x1e
ja 0x1400cd360
mov dword [r13 + 0x84], r15d
mov dword [r13 + 8], 0x3f45
mov eax, dword [r13 + 0x84]
cmp eax, dword [r13 + 0x78]
jae 0x1400cd2c8
cmp ebx, 3
jae 0x1400cd28e
nop dword [rax]
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 3
jb 0x1400cd270
mov eax, dword [r13 + 0x84]
movzx ecx, bp
and cx, 7
shr ebp, 3
add ebx, 0xfffffffd
movzx eax, word [r11 + rax*2 + 0x1bc648]
mov word [r13 + rax*2 + 0x90], cx
inc dword [r13 + 0x84]
mov eax, dword [r13 + 0x84]
cmp eax, dword [r13 + 0x78]
jb 0x1400cd264
cmp eax, 0x13
jae 0x1400cd2fa
nop dword [rax]
mov eax, dword [r13 + 0x84]
movzx eax, word [r11 + rax*2 + 0x1bc648]
mov word [r13 + rax*2 + 0x90], r15w
inc dword [r13 + 0x84]
cmp dword [r13 + 0x84], 0x13
jb 0x1400cd2d0
lea rcx, [r13 + 0x70]
lea rax, [r13 + 0x550]
mov dword [rcx], 7
lea r9, [r13 + 0x88]
mov qword [r13 + 0x60], rax
mov qword [r9], rax
lea rdx, [r13 + 0x90]
lea rax, [r13 + 0x310]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
xor ecx, ecx
lea r8d, [rcx + 0x13]
call fcn.1400d3530
mov dword [rsp + 0xb0], eax
test eax, eax
je 0x1400cd379
lea rax, str.invalid_code_lengths_set
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400cceb4
lea rax, str.too_many_length_or_distance_symbols
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400ccec1
mov dword [r13 + 0x84], r15d
mov edx, 0x3f46
mov dword [r13 + 8], 0x3f46
mov ecx, dword [r13 + 0x80]
mov r10d, dword [r13 + 0x7c]
add ecx, r10d
cmp dword [r13 + 0x84], ecx
jae 0x1400cd5a2
nop dword [rax + rax]
mov ecx, dword [r13 + 0x70]
mov r9d, 1
mov r10, qword [r13 + 0x60]
shl r9d, cl
dec r9d
mov eax, ebp
mov ecx, r9d
and rcx, rax
mov eax, dword [r10 + rcx*4]
mov edx, eax
shr edx, 8
mov r8d, eax
movzx ecx, dl
shr r8d, 0x10
mov dword [rsp + 0x34], eax
cmp ecx, ebx
jbe 0x1400cd423
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
mov ecx, ebp
add ebx, 8
mov eax, r9d
and rax, rcx
mov eax, dword [r10 + rax*4]
mov edx, eax
shr edx, 8
mov r8d, eax
movzx ecx, dl
shr r8d, 0x10
mov dword [rsp + 0x34], eax
cmp ecx, ebx
ja 0x1400cd3e7
cmp r8w, 0x10
jae 0x1400cd45a
movzx ecx, dl
shr eax, 0x10
shr ebp, cl
movzx ecx, dl
sub ebx, ecx
mov ecx, dword [r13 + 0x84]
mov word [r13 + rcx*2 + 0x90], ax
inc dword [r13 + 0x84]
mov r8d, dword [r13 + 0x84]
jmp 0x1400cd587
movzx edx, dl
jne 0x1400cd4b9
add edx, 2
cmp ebx, edx
jae 0x1400cd483
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, edx
jb 0x1400cd466
movzx ecx, byte [rsp + 0x35]
mov eax, dword [r13 + 0x84]
sub ebx, ecx
shr ebp, cl
test eax, eax
je 0x1400cd5d2
mov edx, ebp
add ebx, 0xfffffffe
and edx, 3
shr ebp, 2
add edx, 3
dec eax
movzx r9d, word [r13 + rax*2 + 0x90]
jmp 0x1400cd543
cmp r8w, 0x11
jne 0x1400cd500
add edx, 3
cmp ebx, edx
jae 0x1400cd4e4
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, edx
jb 0x1400cd4c7
movzx ecx, byte [rsp + 0x35]
mov eax, 0xfffffffd
shr ebp, cl
mov r9d, r15d
mov edx, ebp
and edx, 7
add edx, 3
shr ebp, 3
jmp 0x1400cd53f
add edx, 7
cmp ebx, edx
jae 0x1400cd524
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, edx
jb 0x1400cd507
movzx ecx, byte [rsp + 0x35]
mov eax, 0xfffffff9
shr ebp, cl
movzx r9d, r15w
mov edx, ebp
and edx, 0x7f
add edx, 0xb
shr ebp, 7
sub eax, ecx
add ebx, eax
mov ecx, dword [r13 + 0x84]
mov eax, dword [r13 + 0x80]
add ecx, edx
add eax, dword [r13 + 0x7c]
cmp ecx, eax
ja 0x1400cd5d2
nop dword [rax + rax]
mov eax, dword [r13 + 0x84]
mov word [r13 + rax*2 + 0x90], r9w
mov r8d, dword [r13 + 0x84]
lea r8d, [r8 + 1]
mov dword [r13 + 0x84], r8d
add edx, 0xffffffff
jne 0x1400cd560
mov ecx, dword [r13 + 0x80]
mov r10d, dword [r13 + 0x7c]
add ecx, r10d
cmp r8d, ecx
jb 0x1400cd3b0
mov edx, dword [r13 + 8]
cmp edx, 0x3f51
je 0x1400cceb4
cmp word [r13 + 0x290], 0
jne 0x1400cd5eb
lea rax, str.invalid_code____missing_end_of_block
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400cceb4
lea rax, str.invalid_bit_length_repeat
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400cceb4
lea rax, [r13 + 0x550]
mov dword [r13 + 0x70], 9
mov qword [r13 + 0x88], rax
lea r15, [r13 + 0x310]
mov qword [r13 + 0x60], rax
lea rdx, [r13 + 0x90]
lea rax, [r13 + 0x70]
mov qword [rsp + 0x28], r15
lea r9, [r13 + 0x88]
mov qword [rsp + 0x20], rax
mov r8d, r10d
mov ecx, 1
call fcn.1400d3530
mov dword [rsp + 0xb0], eax
test eax, eax
je 0x1400cd659
lea rax, str.invalid_literal_lengths_set
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400cceb4
mov rax, qword [r13 + 0x88]
lea rcx, [r13 + 0x74]
mov r8d, dword [r13 + 0x80]
lea r9, [r13 + 0x88]
mov qword [r13 + 0x68], rax
mov eax, dword [r13 + 0x7c]
mov dword [rcx], 6
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rcx
mov ecx, 2
lea rdx, [rax*2 + 0x90]
add rdx, r13
call fcn.1400d3530
mov dword [rsp + 0xb0], eax
mov r15d, eax
test eax, eax
je 0x1400cd6c6
lea rax, str.invalid_distances_set
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400cceb4
mov edx, dword [rsp + 0xa8]
mov dword [r13 + 8], 0x3f47
cmp edx, 6
je 0x1400cd04d
mov r8d, dword [rsp + 0xa0]
xor r15d, r15d
mov r10d, dword [rsp + 0xb8]
mov dword [r13 + 8], 0x3f48
cmp edi, 6
jb 0x1400cd778
cmp r10d, 0x102
jb 0x1400cd778
mov rcx, qword [rsp + 0x40]
mov edx, r8d
mov qword [r12 + 0x10], rcx
mov rcx, r12
mov dword [r12 + 0x18], r10d
mov qword [r12], rsi
mov dword [r12 + 8], edi
mov dword [r13 + 0x48], ebp
mov dword [r13 + 0x4c], ebx
call fcn.1400d3af0
cmp dword [r13 + 8], 0x3f3f
mov r9, qword [r12 + 0x10]
mov r10d, dword [r12 + 0x18]
mov rsi, qword [r12]
mov edi, dword [r12 + 8]
mov ebp, dword [r13 + 0x48]
mov ebx, dword [r13 + 0x4c]
mov qword [rsp + 0x40], r9
mov dword [rsp + 0xb8], r10d
jne 0x1400ccec1
mov dword [r13 + 0x1be4], 0xffffffff
jmp 0x1400ccec1
mov ecx, dword [r13 + 0x70]
mov edx, 1
mov r10, qword [r13 + 0x60]
shl edx, cl
dec edx
mov eax, ebp
mov ecx, edx
and rcx, rax
mov dword [r13 + 0x1be4], r15d
mov eax, dword [r10 + rcx*4]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
cmp ecx, ebx
jbe 0x1400cd7d7
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
mov ecx, ebp
add ebx, 8
mov eax, edx
and rax, rcx
mov eax, dword [r10 + rax*4]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
cmp ecx, ebx
ja 0x1400cd7a7
test al, al
je 0x1400cd893
test al, 0xf0
jne 0x1400cd893
mov ecx, eax
mov dword [rsp + 0x34], eax
movzx r14d, byte [rsp + 0x35]
mov r8d, 1
shr ecx, 8
mov edx, eax
movzx r9d, cl
movzx ecx, al
add ecx, r9d
shr eax, 0x10
shl r8d, cl
mov ecx, r9d
dec r8d
and r8d, ebp
shr r8d, cl
add r8d, eax
mov eax, dword [r10 + r8*4]
mov ecx, eax
shr ecx, 8
movzx r8d, cl
add r8d, r9d
cmp r8d, ebx
jbe 0x1400cd884
movzx r11d, word [rsp + 0x36]
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
mov r8d, 1
add ebp, eax
movzx ecx, dl
add ecx, r14d
dec edi
shl r8d, cl
inc rsi
dec r8d
mov ecx, r14d
and r8d, ebp
add ebx, 8
shr r8d, cl
add r8d, r11d
mov eax, dword [r10 + r8*4]
mov ecx, eax
shr ecx, 8
movzx r8d, cl
add r8d, r14d
cmp r8d, ebx
ja 0x1400cd838
mov ecx, r14d
shr ebp, cl
sub ebx, r14d
mov dword [r13 + 0x1be4], ecx
mov ecx, eax
shr ecx, 8
movzx ecx, cl
add dword [r13 + 0x1be4], ecx
sub ebx, ecx
shr ebp, cl
mov ecx, eax
shr ecx, 0x10
mov dword [r13 + 0x50], ecx
test al, al
jne 0x1400cd8c0
mov dword [r13 + 8], 0x3f4d
jmp 0x1400cceb4
test al, 0x20
je 0x1400cd8d4
mov dword [r13 + 0x1be4], 0xffffffff
jmp 0x1400cceac
test al, 0x40
je 0x1400cd8f1
lea rax, str.invalid_literal_length_code
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400cceb4
movzx ecx, al
and ecx, 0xf
mov dword [r13 + 8], 0x3f49
mov dword [r13 + 0x58], ecx
mov edx, dword [r13 + 0x58]
test edx, edx
je 0x1400cd949
cmp ebx, edx
jae 0x1400cd92d
nop
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, edx
jb 0x1400cd910
mov ecx, edx
mov eax, 1
shl eax, cl
sub ebx, edx
dec eax
and eax, ebp
shr ebp, cl
add dword [r13 + 0x50], eax
add dword [r13 + 0x1be4], edx
mov eax, dword [r13 + 0x50]
mov dword [r13 + 0x1be8], eax
mov dword [r13 + 8], 0x3f4a
mov ecx, dword [r13 + 0x74]
mov edx, 1
mov r10, qword [r13 + 0x68]
shl edx, cl
dec edx
mov eax, ebp
mov ecx, edx
and rcx, rax
mov eax, dword [r10 + rcx*4]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
cmp ecx, ebx
jbe 0x1400cd9b4
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
mov ecx, ebp
add ebx, 8
mov eax, edx
and rax, rcx
mov eax, dword [r10 + rax*4]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
cmp ecx, ebx
ja 0x1400cd984
test al, 0xf0
jne 0x1400cda6b
mov ecx, eax
mov dword [rsp + 0x34], eax
movzx r14d, byte [rsp + 0x35]
mov r8d, 1
shr ecx, 8
mov edx, eax
movzx r9d, cl
movzx ecx, al
add ecx, r9d
shr eax, 0x10
shl r8d, cl
mov ecx, r9d
dec r8d
and r8d, ebp
shr r8d, cl
add r8d, eax
mov eax, dword [r10 + r8*4]
mov ecx, eax
shr ecx, 8
movzx r8d, cl
add r8d, r9d
cmp r8d, ebx
jbe 0x1400cda5c
movzx r11d, word [rsp + 0x36]
nop dword [rax]
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
mov r8d, 1
add ebp, eax
movzx ecx, dl
add ecx, r14d
dec edi
shl r8d, cl
inc rsi
dec r8d
mov ecx, r14d
and r8d, ebp
add ebx, 8
shr r8d, cl
add r8d, r11d
mov eax, dword [r10 + r8*4]
mov ecx, eax
shr ecx, 8
movzx r8d, cl
add r8d, r14d
cmp r8d, ebx
ja 0x1400cda10
mov ecx, r14d
sub ebx, r14d
shr ebp, cl
add dword [r13 + 0x1be4], ecx
mov r10d, dword [rsp + 0xb8]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
add dword [r13 + 0x1be4], ecx
sub ebx, ecx
shr ebp, cl
test al, 0x40
je 0x1400cdaa3
lea rax, str.invalid_distance_code
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400ccebc
mov r8d, dword [rsp + 0xa0]
mov ecx, eax
shr ecx, 0x10
mov dword [r13 + 0x54], ecx
movzx ecx, al
and ecx, 0xf
mov dword [r13 + 8], 0x3f4b
mov dword [r13 + 0x58], ecx
mov edx, dword [r13 + 0x58]
test edx, edx
je 0x1400cdb0b
cmp ebx, edx
jae 0x1400cdaef
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, edx
jb 0x1400cdad2
mov ecx, edx
mov eax, 1
shl eax, cl
sub ebx, edx
dec eax
and eax, ebp
shr ebp, cl
add dword [r13 + 0x54], eax
add dword [r13 + 0x1be4], edx
mov dword [r13 + 8], 0x3f4c
test r10d, r10d
je 0x1400cd03e
mov eax, dword [r13 + 0x54]
mov ecx, r8d
sub ecx, r10d
cmp eax, ecx
jbe 0x1400cdb7b
sub eax, ecx
cmp eax, dword [r13 + 0x38]
jbe 0x1400cdb55
cmp dword [r13 + 0x1be0], 0
je 0x1400cdb55
lea rax, str.invalid_distance_too_far_back
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400ccebc
mov ecx, dword [r13 + 0x3c]
cmp eax, ecx
jbe 0x1400cdb63
sub eax, ecx
mov ecx, dword [r13 + 0x34]
mov r8d, dword [r13 + 0x50]
sub ecx, eax
mov edx, ecx
mov r9d, r8d
add rdx, qword [r13 + 0x40]
cmp eax, r8d
cmovbe r9d, eax
jmp 0x1400cdb8a
mov rdx, qword [rsp + 0x40]
mov r8d, dword [r13 + 0x50]
sub rdx, rax
mov r9d, r8d
cmp r9d, r10d
mov ecx, r10d
cmovbe ecx, r9d
mov r9, qword [rsp + 0x40]
sub r10d, ecx
sub r8d, ecx
mov dword [rsp + 0xb8], r10d
sub rdx, r9
mov dword [r13 + 0x50], r8d
nop
movzx eax, byte [rdx + r9]
mov byte [r9], al
inc r9
add ecx, 0xffffffff
jne 0x1400cdbb0
mov qword [rsp + 0x40], r9
cmp dword [r13 + 0x50], ecx
jne 0x1400ccec1
mov dword [r13 + 8], 0x3f48
jmp 0x1400ccec1
test r10d, r10d
je 0x1400cd03e
movzx eax, byte [r13 + 0x50]
mov byte [r9], al
inc r9
dec r10d
mov qword [rsp + 0x40], r9
mov dword [rsp + 0xb8], r10d
mov dword [r13 + 8], 0x3f48
jmp 0x1400ccec1
cmp dword [r13 + 0x10], 0
je 0x1400cdcd2
cmp ebx, 0x20
jae 0x1400cdc3e
nop dword [rax]
test edi, edi
je 0x1400cd03e
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0x20
jb 0x1400cdc20
sub r8d, r10d
add dword [r12 + 0x1c], r8d
add dword [r13 + 0x24], r8d
mov eax, dword [r13 + 0x10]
test al, 4
je 0x1400cdc89
test r8d, r8d
je 0x1400cdc89
mov ecx, dword [r13 + 0x20]
mov rdx, r9
sub rdx, r8
cmp dword [r13 + 0x18], 0
je 0x1400cdc6f
call sym.winvnc.exe_crc32_z
jmp 0x1400cdc74
call sym.winvnc.exe_adler32_z
mov r10d, dword [rsp + 0xb8]
mov dword [r13 + 0x20], eax
mov dword [r12 + 0x4c], eax
mov eax, dword [r13 + 0x10]
mov dword [rsp + 0xa0], r10d
mov r14d, r10d
test al, 4
je 0x1400cdcc2
cmp dword [r13 + 0x18], 0
mov eax, ebp
jne 0x1400cdca3
bswap eax
cmp eax, dword [r13 + 0x20]
je 0x1400cdcc2
lea rax, str.incorrect_data_check
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400ccebc
mov ebp, r15d
mov dword [r13 + 8], 0x3f4f
mov ebx, r15d
jmp 0x1400cdcec
mov r14d, dword [rsp + 0xa0]
mov dword [r13 + 8], 0x3f4f
jmp 0x1400cdcec
mov r14d, dword [rsp + 0xa0]
cmp dword [r13 + 0x10], 0
je 0x1400cdd68
cmp dword [r13 + 0x18], 0
je 0x1400cdd68
cmp ebx, 0x20
jae 0x1400cdd1e
nop
test edi, edi
je 0x1400cdda7
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0x20
jb 0x1400cdd00
cmp ebp, dword [r13 + 0x24]
je 0x1400cdd62
lea rax, str.incorrect_length_check
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], 0x3f51
jmp 0x1400ccebc
mov qword [r12 + 0x10], r9
mov eax, 2
mov dword [r12 + 0x18], r10d
mov qword [r12], rsi
mov dword [r12 + 8], edi
mov dword [r13 + 0x48], ebp
mov dword [r13 + 0x4c], ebx
jmp 0x1400cde91
mov ebp, r15d
mov ebx, r15d
mov edx, dword [rsp + 0xa8]
mov r15d, 1
mov dword [r13 + 8], 0x3f50
jmp 0x1400cd055
mov r14d, dword [rsp + 0xa0]
mov r15d, 1
mov edx, dword [rsp + 0xa8]
jmp 0x1400cd055
mov r15d, 0xfffffffd
jmp 0x1400cd046
mov r15d, dword [rsp + 0xb0]
mov edx, dword [rsp + 0xa8]
jmp 0x1400cd055
sub r14d, dword [r12 + 0x18]
mov r10d, dword [rsp + 0x38]
sub r10d, dword [r12 + 8]
add dword [r12 + 0xc], r10d
add dword [r12 + 0x1c], r14d
add dword [r13 + 0x24], r14d
test byte [r13 + 0x10], 4
mov dword [rsp + 0x38], r10d
je 0x1400cde19
test r14d, r14d
je 0x1400cde19
mov rdx, qword [r12 + 0x10]
mov ecx, dword [r13 + 0x20]
mov r8d, r14d
sub rdx, r8
cmp dword [r13 + 0x18], 0
je 0x1400cde06
call sym.winvnc.exe_crc32_z
jmp 0x1400cde0b
call sym.winvnc.exe_adler32_z
mov r10d, dword [rsp + 0x38]
mov dword [r13 + 0x20], eax
mov dword [r12 + 0x4c], eax
mov edx, dword [r13 + 8]
cmp edx, 0x3f47
je 0x1400cde35
cmp edx, 0x3f42
je 0x1400cde35
xor r9d, r9d
mov r8d, r9d
jmp 0x1400cde3e
mov r8d, 0x100
xor r9d, r9d
mov eax, dword [r13 + 0xc]
neg eax
mov eax, 0x80
sbb ecx, ecx
and ecx, 0x40
cmp edx, 0x3f3f
cmove r9d, eax
add ecx, r9d
add ecx, dword [r13 + 0x4c]
add ecx, r8d
mov dword [r12 + 0x48], ecx
test r10d, r10d
jne 0x1400cde71
test r14d, r14d
je 0x1400cde7b
cmp dword [rsp + 0xa8], 4
jne 0x1400cde87
test r15d, r15d
mov eax, 0xfffffffb
cmove r15d, eax
mov eax, r15d
jmp 0x1400cde91
mov eax, 0xfffffffe
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret