Function at 0x140004400
Capabilities:
Encode data using xor
Hash data with crc32
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1070]
mov eax, 0x1180
call fcn.14006f890
sub rsp, rax
mov rax, qword [0x14008e7c0]
xor rax, rsp
mov qword [rbp + 0x1060], rax
mov r8, qword [rbp + 0x10d8]
xor r13d, r13d
mov rsi, rcx
mov qword [rbp - 0x68], r9
movzx ecx, r13w
mov qword [rbp - 0x38], rdx
mov eax, r13d
mov dword [rbp - 0x78], ecx
mov r10, rdx
mov dword [rbp - 0x7c], ecx
mov r14, qword [rsi + 0x68]
mov ebx, r13d
mov r12, qword [rsi]
mov r15d, r13d
mov dword [rbp - 0x80], ecx
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], r14
test r14, r14
je 0x140004ffc
cmp dword [rsi + 0x14], 2
jne 0x140004ffc
test rdx, rdx
je 0x140004ffc
mov edx, dword [r14 + 0x64]
mov r11d, 0xffffffff
test edx, edx
jne 0x1400044c3
cmp qword [rbp + 0x10d0], r11
jbe 0x1400044c3
mov dword [r14 + 0x64], 1
mov edx, 1
cmp byte [r10], 0x2f
je 0x140004ff1
mov eax, dword [rsi + 0x10]
test edx, edx
je 0x1400044e7
cmp eax, r11d
jne 0x1400044fe
mov dword [rsi + 0x1c], 2
xor eax, eax
jmp 0x140005003
mov edx, r13d
cmp eax, 0xffff
jne 0x1400044fe
mov dword [r14 + 0x64], 1
mov edx, 1
mov r9, 0xffffffffffffffff
inc r9
cmp byte [r10 + r9], bl
jne 0x140004505
mov qword [rbp - 0x40], r9
cmp r9, 0xffff
ja 0x140004ff1
mov rdi, qword [rsi + 0x20]
test rdi, rdi
jne 0x14000452d
mov edi, r13d
jmp 0x140004538
lea ecx, [rdi - 1]
mov eax, ecx
and eax, dword [rsi]
sub edi, eax
and edi, ecx
mov rcx, qword [r14 + 8]
lea rax, [rcx + 0x4a]
add rax, r9
cmp rax, r11
jb 0x140004556
mov dword [rsi + 0x1c], reloc.WS2_32.dll_ntohs
xor eax, eax
jmp 0x140005003
test edx, edx
jne 0x14000457a
lea rcx, [rcx + r9*2]
mov eax, edi
add rcx, 0x472
add rcx, rax
add rcx, qword [rsi]
cmp rcx, r11
jbe 0x14000457a
mov dword [r14 + 0x64], 1
test r8, r8
je 0x1400045dc
mov rax, qword [r8]
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x18]
mov qword [rbp + 0x10], rax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
test eax, eax
je 0x1400045a2
mov dword [rbp - 0x80], r13d
mov dword [rbp - 0x7c], r13d
jmp 0x1400045dc
movzx ecx, word [rbp - 0x10]
mov eax, dword [rbp - 0x18]
shl cx, 6
add cx, word [rbp - 0x14]
shl cx, 5
sar eax, 1
add cx, ax
movzx eax, word [rbp - 4]
mov dword [rbp - 0x7c], ecx
mov ecx, 0x301
shl ax, 4
add ax, word [rbp - 8]
add cx, ax
shl cx, 5
add cx, word [rbp - 0xc]
mov dword [rbp - 0x80], ecx
mov eax, edi
lea rcx, [rbp + 0x60]
mov qword [rbp + 0x18], rax
mov eax, 0x1000
cmp edi, eax
mov r8d, edi
mov qword [rbp - 0x30], r12
cmova r8d, eax
xor edx, edx
call sub.VCRUNTIME140.dll_memset
test edi, edi
je 0x14000464e
mov rax, r12
nop word [rax + rax]
mov ecx, 0x1000
lea r8, [rbp + 0x60]
cmp edi, ecx
mov r14d, edi
mov rdx, rax
cmova r14d, ecx
mov rcx, qword [rsi + 0x60]
mov r9d, r14d
mov r13d, r14d
call qword [rsi + 0x50]
cmp rax, r13
jne 0x140004687
mov rax, qword [rbp - 0x30]
add rax, r13
mov qword [rbp - 0x30], rax
sub edi, r14d
jne 0x140004610
mov r14, qword [rbp - 0x50]
xor r13d, r13d
add r12, qword [rbp + 0x18]
lea rdi, [rsi + 0x1c]
mov rax, qword [rbp + 0x10d0]
lea r10, [rsi + 0x60]
mov qword [rbp - 0x60], rdi
lea r11, [rsi + 0x50]
mov qword [rbp - 0x50], r10
mov qword [rbp + 0x10], r11
mov qword [rbp - 0x30], r12
cmp rax, 4
jb 0x14000469c
mov r8d, 8
mov dword [rbp - 0x78], r8d
jmp 0x1400046a0
mov dword [rsi + 0x1c], reloc.WS2_32.dll_send
xor eax, eax
mov dword [rsi + 0x1c], reloc.WS2_32.dll_send
jmp 0x140005003
mov r8d, dword [rbp - 0x78]
cmp dword [r14 + 0x64], ebx
je 0x140004817
mov edx, 0xffffffff
cmp rax, rdx
jae 0x1400046b9
cmp r12, rdx
jb 0x140004738
cmp r12, rdx
mov word [rbp + 0x40], 1
lea rax, [rbp + 0x40]
lea rcx, [rbp - 0x30]
mov qword [rbp - 0x48], rax
cmovb rcx, r13
lea rdx, [rbp + 0x44]
mov eax, r13d
test rcx, rcx
je 0x140004722
mov rcx, qword [rcx]
lea rdx, [rbp + 0x4c]
mov eax, ecx
mov byte [rbp + 0x44], cl
shr eax, 8
mov byte [rbp + 0x45], al
mov eax, ecx
shr eax, 0x10
mov byte [rbp + 0x46], al
mov eax, ecx
shr eax, 0x18
mov byte [rbp + 0x47], al
shr rcx, 0x20
mov eax, ecx
mov byte [rbp + 0x48], cl
shr eax, 8
mov byte [rbp + 0x49], al
mov eax, ecx
shr eax, 0x10
shr ecx, 0x18
mov byte [rbp + 0x4a], al
mov eax, 8
mov byte [rbp + 0x4b], cl
mov byte [rbp + 0x42], al
shr ax, 8
mov byte [rbp + 0x43], al
lea rax, [rbp + 0x40]
sub edx, eax
mov qword [rbp - 0x58], rdx
jmp 0x14000473c
mov rdx, qword [rbp - 0x58]
mov r14, qword [rbp - 0x40]
movzx eax, r8w
neg ax
mov byte [rbp + 0x28], r8b
movzx eax, r8w
mov byte [rbp + 0x3c], dl
sbb cl, cl
mov dword [rbp + 0x20], 0x4034b50
shr ax, 8
lea r8, [rbp + 0x20]
mov byte [rbp + 0x29], al
and cl, 0x14
mov eax, dword [rbp - 0x7c]
mov r9d, reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0x2a], al
shr ax, 8
mov byte [rbp + 0x2b], al
mov eax, dword [rbp - 0x80]
mov byte [rbp + 0x2c], al
shr ax, 8
mov byte [rbp + 0x2d], al
movzx eax, r14w
shr ax, 8
mov byte [rbp + 0x3b], al
movzx eax, dx
shr ax, 8
mov rdx, r12
mov byte [rbp + 0x24], cl
mov rcx, qword [rsi + 0x60]
mov byte [rbp + 0x3d], al
mov word [rbp + 0x25], 0x800
mov byte [rbp + 0x27], 8
mov qword [rbp + 0x2e], rbx
mov dword [rbp + 0x36], ebx
mov byte [rbp + 0x3a], r14b
call qword [rsi + 0x50]
cmp rax, 0x1e
jne 0x14000480a
mov r8, qword [rbp - 0x38]
add r12, rax
mov rcx, qword [rsi + 0x60]
mov rdx, r12
mov r9, r14
call qword [rsi + 0x50]
cmp rax, r14
jne 0x14000480a
mov rax, qword [rbp - 0x58]
lea r8, [rbp + 0x40]
mov rcx, qword [rsi + 0x60]
add r12, r14
mov r9d, eax
mov rdx, r12
mov edi, eax
call qword [rsi + 0x50]
cmp rax, rdi
jne 0x140004806
add r12, rdi
jmp 0x1400048c9
mov rdi, qword [rbp - 0x60]
mov dword [rdi], reloc.WS2_32.dll_send
xor eax, eax
jmp 0x140005003
mov eax, 0xffffffff
cmp r12, rax
ja 0x140004fe7
mov r14, qword [rbp - 0x40]
movzx eax, r8w
neg ax
mov byte [rbp + 0x28], r8b
movzx eax, r8w
mov dword [rbp + 0x20], 0x4034b50
sbb cl, cl
mov word [rbp + 0x25], 0x800
shr ax, 8
lea r8, [rbp + 0x20]
mov byte [rbp + 0x29], al
and cl, 0x14
mov eax, dword [rbp - 0x7c]
mov r9d, reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0x2a], al
mov rdx, r12
shr ax, 8
mov byte [rbp + 0x2b], al
mov eax, dword [rbp - 0x80]
mov byte [rbp + 0x2c], al
shr ax, 8
mov byte [rbp + 0x2d], al
movzx eax, r14w
shr ax, 8
mov byte [rbp + 0x24], cl
mov rcx, qword [r10]
mov byte [rbp + 0x3b], al
mov byte [rbp + 0x27], 8
mov qword [rbp + 0x2e], rbx
mov dword [rbp + 0x36], ebx
mov byte [rbp + 0x3a], r14b
mov word [rbp + 0x3c], bx
call qword [r11]
cmp rax, 0x1e
jne 0x14000480a
mov r8, qword [rbp - 0x38]
add r12, rax
mov rcx, qword [rsi + 0x60]
mov rdx, r12
mov r9, r14
call qword [rsi + 0x50]
cmp rax, r14
jne 0x14000480a
add r12, r14
mov r14, qword [rbp + 0x10d0]
test r14, r14
je 0x140004d17
mov rcx, qword [rsi + 0x40]
mov edx, 1
mov r8d, 0x10000
call qword [rsi + Ordinal_41]
mov qword [rbp - 0x20], rax
mov rdi, rax
test rax, rax
jne 0x140004907
mov r15, qword [rbp - 0x60]
mov dword [r15], reloc.WS2_32.dll_recv
jmp 0x140005003
cmp r14, 3
ja 0x140004a9c
lea r14, [0x140082df0]
nop dword [rax + rax]
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__ftelli64]
test r15, r15
js 0x140004a8c
cmp rax, r15
je 0x140004950
mov rcx, qword [rbp - 0x68]
xor r8d, r8d
mov rdx, r15
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fseeki64]
test eax, eax
jne 0x140004a8c
mov r9, qword [rbp - 0x68]
mov edx, 1
mov r8d, 0x10000
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov rdi, rax
test rax, rax
je 0x140004a88
cmp rax, 0x10000
ja 0x140004a6f
add r15, rax
cmp r15, qword [rbp + 0x10d0]
ja 0x140004a6f
mov r8, qword [rbp - 0x20]
mov r9, rax
mov rcx, qword [rsi + 0x60]
mov rdx, r12
call qword [rsi + 0x50]
mov rdx, qword [rbp - 0x20]
cmp rax, rdi
jne 0x140004a5a
not ebx
mov r10, rdi
cmp rdi, 4
jb 0x140004a30
mov r8, rdi
shr r8, 2
imul r9, r8, 0xfffffffffffffffc
add r9, rdi
nop word [rax + rax]
movzx eax, byte [rdx]
mov ecx, ebx
xor rcx, rax
shr ebx, 8
movzx eax, cl
movzx ecx, byte [rdx + 1]
xor ebx, dword [r14 + rax*4]
mov eax, ebx
shr ebx, 8
xor rcx, rax
movzx eax, cl
movzx ecx, byte [rdx + 2]
xor ebx, dword [r14 + rax*4]
mov eax, ebx
shr ebx, 8
xor rcx, rax
movzx eax, cl
movzx ecx, byte [rdx + 3]
add rdx, 4
xor ebx, dword [r14 + rax*4]
mov eax, ebx
shr ebx, 8
xor rcx, rax
movzx eax, cl
xor ebx, dword [r14 + rax*4]
sub r8, 1
jne 0x1400049d0
mov rdi, r9
test r9, r9
je 0x140004a4c
nop dword [rax]
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
mov ecx, ebx
shr ebx, 8
xor rcx, rax
movzx eax, cl
xor ebx, dword [r14 + rax*4]
sub rdi, 1
jne 0x140004a30
mov rdi, qword [rbp - 0x20]
not ebx
add r12, r10
jmp 0x140004920
mov rcx, qword [rsi + 0x40]
call qword [rsi + Ordinal_50]
xor eax, eax
mov dword [rsi + 0x1c], reloc.WS2_32.dll_send
jmp 0x140005003
mov rdx, qword [rbp - 0x20]
mov rcx, qword [rsi + 0x40]
call qword [rsi + Ordinal_50]
xor eax, eax
mov dword [rsi + 0x1c], reloc.WS2_32.dll_sendto
jmp 0x140005003
mov rdi, qword [rbp - 0x20]
mov rax, r15
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x28], rax
jmp 0x140004d03
mov rcx, qword [rsi + 0x40]
mov edx, 1
mov r8d, 0x4df78
call qword [rsi + Ordinal_41]
mov qword [rbp - 0x60], rax
mov r14, rax
test rax, rax
jne 0x140004ad2
mov rcx, qword [rsi + 0x40]
mov rdx, rdi
call qword [rsi + Ordinal_50]
xor eax, eax
mov dword [rsi + 0x1c], reloc.WS2_32.dll_recv
jmp 0x140005003
mov rax, qword [0x1400825f4]
lea r8, [rbp - 0x18]
mov r9d, eax
mov qword [rbp - 0x18], rsi
bts r9d, 0x13
mov qword [rbp - 0x10], r12
test r13b, r13b
mov qword [rbp - 8], r13
mov rcx, r14
cmove r9d, eax
call fcn.140003800
test eax, eax
je 0x140004b26
mov rcx, qword [rsi + 0x40]
mov rdx, r14
call qword [rsi + Ordinal_50]
mov rcx, qword [rsi + 0x40]
mov rdx, rdi
call qword [rsi + Ordinal_50]
xor eax, eax
mov dword [rsi + 0x1c], reloc.WLDAP32.dll_Ordinal_27
jmp 0x140005003
lea r14, [0x140082df0]
nop dword [rax]
mov rcx, qword [rbp - 0x68]
mov r12d, r13d
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__ftelli64]
test r15, r15
js 0x140004ba8
cmp rax, r15
je 0x140004b5b
mov rcx, qword [rbp - 0x68]
xor r8d, r8d
mov rdx, r15
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fseeki64]
test eax, eax
jne 0x140004ba8
mov r9, qword [rbp - 0x68]
mov edx, 1
mov r8d, 0x10000
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
mov rdi, rax
cmp rax, 0x10000
jbe 0x140004bab
mov rax, qword [rsi + 0x30]
mov rdx, qword [rbp - 0x60]
mov rcx, qword [rsi + 0x40]
mov dword [rsi + 0x1c], reloc.WS2_32.dll_sendto
call rax
mov rdi, qword [rbp - 0x20]
mov rcx, qword [rsi + 0x40]
mov rdx, rdi
call qword [rsi + Ordinal_50]
xor eax, eax
jmp 0x140005003
mov rdi, r13
add r15, rdi
cmp r15, qword [rbp + 0x10d0]
ja 0x140004b7e
mov rdx, qword [rbp - 0x20]
mov r8, rdi
mov qword [rbp - 0x70], r15
not ebx
cmp rdi, 4
jb 0x140004c35
mov r9, rdi
shr r9, 2
imul r8, r9, 0xfffffffffffffffc
add r8, rdi
nop dword [rax + rax]
movzx eax, byte [rdx]
mov ecx, ebx
xor rcx, rax
shr ebx, 8
movzx eax, cl
movzx ecx, byte [rdx + 1]
xor ebx, dword [r14 + rax*4]
mov eax, ebx
shr ebx, 8
xor rcx, rax
movzx eax, cl
movzx ecx, byte [rdx + 2]
xor ebx, dword [r14 + rax*4]
mov eax, ebx
shr ebx, 8
xor rcx, rax
movzx eax, cl
movzx ecx, byte [rdx + 3]
add rdx, 4
xor ebx, dword [r14 + rax*4]
mov eax, ebx
shr ebx, 8
xor rcx, rax
movzx eax, cl
xor ebx, dword [r14 + rax*4]
sub r9, 1
jne 0x140004be0
test r8, r8
je 0x140004c5c
nop word [rax + rax]
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
mov ecx, ebx
shr ebx, 8
xor rcx, rax
movzx eax, cl
xor ebx, dword [r14 + rax*4]
sub r8, 1
jne 0x140004c40
mov rax, qword [rsi + 0x58]
not ebx
test rax, rax
je 0x140004c78
mov rcx, qword [rsi + 0x60]
call rax
test eax, eax
mov eax, 3
cmovne r12d, eax
test rdi, rdi
mov qword [rbp + 0x18], rdi
mov rdi, qword [rbp - 0x20]
lea r8, [rbp + 0x18]
mov eax, 4
mov rdx, rdi
cmove r12d, eax
mov dword [rsp + 0x28], r12d
mov r12, qword [rbp - 0x60]
mov rcx, r12
call fcn.140003440
cmp eax, 1
je 0x140004cd6
test eax, eax
je 0x140004b30
mov rax, qword [rsi + 0x30]
mov rdx, r12
mov rcx, qword [rsi + 0x40]
mov dword [rsi + 0x1c], ntohs
call rax
mov rcx, qword [rsi + 0x40]
mov rdx, rdi
call qword [rsi + Ordinal_50]
xor eax, eax
jmp 0x140005003
mov rax, qword [rsi + 0x30]
mov rdx, r12
mov rcx, qword [rsi + 0x40]
call rax
mov rax, qword [rbp - 0x70]
mov r15, qword [rbp - 8]
mov r12, qword [rbp - 0x10]
mov qword [rbp - 0x28], rax
lea rax, [rsi + 0x50]
mov qword [rbp + 0x10], rax
lea rax, [rsi + 0x60]
mov qword [rbp - 0x50], rax
mov rcx, qword [rsi + 0x40]
mov rdx, rdi
mov qword [rbp - 0x20], r15
lea r15, [rsi + 0x1c]
call qword [rsi + Ordinal_50]
jmp 0x140004d1b
lea r15, [rsi + 0x1c]
mov r14, qword [rbp - 0x20]
mov eax, ebx
shr eax, 8
mov byte [rbp - 0x13], al
mov eax, ebx
shr eax, 0x10
mov byte [rbp - 0x12], al
mov eax, ebx
shr eax, 0x18
cmp qword [rbp - 0x48], 0
mov dword [rbp - 0x18], 0x8074b50
mov byte [rbp - 0x14], bl
mov byte [rbp - 0x11], al
jne 0x140004dac
mov eax, 0xffffffff
cmp r14, rax
jbe 0x140004d60
mov dword [r15], Ordinal_35
xor eax, eax
jmp 0x140005003
mov r15, qword [rbp - 0x70]
mov eax, r14d
shr eax, 8
mov edi, reloc.WS2_32.dll_recv
mov byte [rbp - 0xf], al
mov eax, r14d
shr eax, 0x10
mov byte [rbp - 0xe], al
mov eax, r14d
shr eax, 0x18
mov byte [rbp - 0xd], al
mov eax, r15d
shr eax, 8
mov byte [rbp - 0xb], al
mov eax, r15d
shr eax, 0x10
mov byte [rbp - 0xa], al
mov eax, r15d
shr eax, 0x18
mov byte [rbp - 9], al
mov byte [rbp - 0x10], r14b
mov byte [rbp - 0xc], r15b
jmp 0x140004e33
mov r15, qword [rbp - 0x70]
mov eax, r14d
shr eax, 8
mov rcx, r14
mov byte [rbp - 0xf], al
mov rdx, r15
shr rcx, 0x20
mov eax, r14d
shr eax, 0x10
mov edi, Ordinal_27
mov byte [rbp - 0xe], al
mov eax, r14d
shr eax, 0x18
mov byte [rbp - 0xd], al
mov eax, ecx
shr eax, 8
mov byte [rbp - 0xb], al
mov eax, ecx
shr eax, 0x10
mov byte [rbp - 0xa], al
mov eax, r15d
shr eax, 8
mov byte [rbp - 7], al
mov eax, r15d
shr eax, 0x10
mov byte [rbp - 6], al
mov eax, r15d
shr eax, 0x18
shr rdx, 0x20
mov byte [rbp - 5], al
mov eax, edx
shr eax, 8
mov byte [rbp - 3], al
mov eax, edx
shr eax, 0x10
mov byte [rbp - 0xc], cl
shr ecx, 0x18
mov byte [rbp - 4], dl
shr edx, 0x18
mov byte [rbp - 1], dl
mov byte [rbp - 0x10], r14b
mov byte [rbp - 9], cl
mov byte [rbp - 8], r15b
mov byte [rbp - 2], al
mov rax, qword [rbp - 0x50]
lea r8, [rbp - 0x18]
mov r9, rdi
mov rdx, r12
mov rcx, qword [rax]
mov rax, qword [rbp + 0x10]
call qword [rax]
cmp rax, rdi
jne 0x1400044e0
mov r11, qword [rbp - 0x48]
add r12, rdi
mov r10, qword [rbp - 0x30]
test r11, r11
je 0x140004f83
mov eax, 0xffffffff
mov word [rbp + 0x40], 1
cmp r10, rax
lea r9, [rbp - 0x30]
lea rcx, [rbp - 0x28]
cmovb r9, r13
lea r8, [rbp - 0x20]
cmp r15, rax
lea rdx, [rbp + 0x44]
cmovb rcx, r13
cmovb r8, r13
test rcx, rcx
je 0x140004ede
mov rcx, qword [rcx]
lea rdx, [rbp + 0x4c]
mov eax, ecx
mov byte [rbp + 0x44], cl
shr eax, 8
mov r13d, 8
mov byte [rbp + 0x45], al
mov eax, ecx
shr eax, 0x10
mov byte [rbp + 0x46], al
mov eax, ecx
shr eax, 0x18
shr rcx, 0x20
mov byte [rbp + 0x47], al
mov eax, ecx
shr eax, 8
mov byte [rbp + 0x49], al
mov eax, ecx
shr eax, 0x10
mov byte [rbp + 0x48], cl
shr ecx, 0x18
mov byte [rbp + 0x4b], cl
mov byte [rbp + 0x4a], al
test r8, r8
je 0x140004f25
mov rcx, qword [r8]
mov eax, ecx
mov byte [rdx], cl
shr eax, 8
mov byte [rdx + 1], al
mov eax, ecx
shr eax, 0x10
mov byte [rdx + 2], al
mov eax, ecx
shr eax, 0x18
shr rcx, 0x20
mov byte [rdx + 3], al
mov eax, ecx
shr eax, 8
mov byte [rdx + 5], al
mov eax, ecx
mov byte [rdx + 4], cl
shr eax, 0x10
shr ecx, 0x18
mov byte [rdx + 6], al
mov byte [rdx + 7], cl
add rdx, 8
add r13d, 8
test r9, r9
je 0x140004f6c
mov rcx, qword [r9]
mov eax, ecx
mov byte [rdx], cl
shr eax, 8
mov byte [rdx + 1], al
mov eax, ecx
shr eax, 0x10
mov byte [rdx + 2], al
mov eax, ecx
shr eax, 0x18
shr rcx, 0x20
mov byte [rdx + 3], al
mov eax, ecx
shr eax, 8
mov byte [rdx + 5], al
mov eax, ecx
mov byte [rdx + 4], cl
shr eax, 0x10
shr ecx, 0x18
mov byte [rdx + 6], al
mov byte [rdx + 7], cl
add rdx, 8
add r13d, 8
lea rax, [rbp + 0x40]
mov byte [rbp + 0x42], r13b
shr r13w, 8
sub edx, eax
mov byte [rbp + 0x43], r13b
mov eax, edx
jmp 0x140004f87
mov rax, qword [rbp - 0x58]
mov ecx, dword [rbp - 0x80]
mov r9, r11
movzx r8d, word [rbp - 0x40]
mov rdx, qword [rbp - 0x38]
mov qword [rsp + 0x70], r10
mov word [rsp + 0x68], cx
mov ecx, dword [rbp - 0x7c]
mov word [rsp + 0x60], cx
mov ecx, dword [rbp - 0x78]
mov word [rsp + 0x58], 0x808
mov word [rsp + 0x50], cx
mov rcx, rsi
mov dword [rsp + 0x48], ebx
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r15
mov word [rsp + 0x20], ax
call fcn.140003fb0
test eax, eax
je 0x1400044e0
inc dword [rsi + 0x10]
mov eax, 1
mov qword [rsi], r12
jmp 0x140005003
mov dword [rdi], Ordinal_32
xor eax, eax
jmp 0x140005003
mov dword [rsi + 0x1c], Ordinal_27
xor eax, eax
jmp 0x140005003
mov dword [rsi + 0x1c], Ordinal_27
mov rcx, qword [rbp + 0x1060]
xor rcx, rsp
call fcn.14006ef50
mov rbx, qword [rsp + 0x11d0]
add rsp, 0x1180
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret