Function at 0x14036a0b0
Capabilities:
Hash data with crc32

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 8], rcx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x20
mov rsi, r8
mov rdi, rcx
xor r8d, r8d
mov qword [rcx + 0x28], r8
mov qword [rcx + 0x30], r8
mov qword [rcx + 0x38], r8
mov qword [rcx + 0x40], r8
mov qword [rcx + 0x48], r8
mov qword [rcx + 0x50], r8
mov qword [rcx + 0x58], r8
mov qword [rcx + 0x8c], r8
mov qword [rcx + 0x94], r8
mov qword [rcx + 0x9c], r8
mov qword [rcx + 0xa4], r8
mov qword [rcx + 0xac], r8
mov qword [rcx + 0xb4], r8
mov qword [rcx + 0xec], r8
mov qword [rcx + 0xf4], r8
mov qword [rcx + 0x100], r8
mov qword [rcx + 0x108], r8
mov qword [rcx + 0x110], r8
mov qword [rcx + 0x118], r8
mov qword [rcx + 0x120], r8
mov qword [rcx + 0x128], r8
mov qword [rcx + 0x130], r8
mov qword [rcx + 0x138], r8
mov qword [rcx + 0x140], r8
mov qword [rcx + 0x154], r8
mov qword [rcx + 0x15c], r8
mov dword [rcx + 0x164], r8d
mov qword [rcx + 0x174], r8
mov qword [rcx + 0x190], r8
mov qword [rcx + 0x188], r8
mov qword [rcx + 0x180], r8
mov dword [rcx + 0x17c], r8d
mov qword [rcx + 0x1a0], r8
mov qword [rcx + 0x1a8], r8
mov qword [rcx + 0x1d8], r8
mov qword [rcx + 0x1e0], r8
mov qword [rcx + 0x1e8], r8
mov qword [rcx + 0x1f0], r8
mov qword [rcx + 0x1f8], r8
mov qword [rcx + 0x200], r8
mov qword [rcx + 0x208], r8
mov qword [rcx + 0x210], r8
mov qword [rcx + 0x218], r8
mov qword [rcx + 0x220], r8
mov qword [rcx + 0x228], r8
mov qword [rcx + 0x230], r8
mov qword [rcx + 0x238], r8
mov qword [rcx + 0x240], r8
mov qword [rcx + 0x248], r8
mov qword [rcx + 0x250], r8
mov qword [rcx + 0x258], r8
mov qword [rcx + 0x260], r8
mov qword [rcx + 0x268], r8
mov qword [rcx + 0x280], r8
mov qword [rcx + 0x288], r8
mov qword [rcx + 0x290], r8
mov qword [rcx + 0x298], r8
lea r14, [rcx + 0x2b0]
mov qword [r14 + 0x8c], r8
mov qword [r14 + 0x94], r8
mov qword [r14 + 0xb0], r8
mov qword [r14 + 0xac], r8
mov qword [r14 + 0xc0], r8
mov qword [r14 + 0xb8], r8
mov dword [r14 + 0xb4], r8d
mov qword [r14 + 0xa8], r8
mov qword [r14 + 0xa0], r8
mov dword [r14 + 0x9c], r8d
mov qword [r14 + 0x90], r8
mov qword [r14 + 0x88], r8
mov qword [r14 + 0x80], r8
mov qword [r14 + 0x78], r8
mov qword [r14 + 0x70], r8
mov qword [r14 + 0x68], r8
mov qword [r14 + 0x60], r8
mov qword [r14 + 0x58], r8
mov qword [r14 + 0x50], r8
mov qword [r14 + 0x48], r8
mov qword [r14 + 0x40], r8
mov qword [r14 + 0x30], r8
mov qword [r14 + 0x28], r8
mov qword [r14 + 0x20], r8
mov qword [r14 + 0x18], r8
mov qword [r14 + 0x10], r8
mov qword [r14 + 8], r8
mov qword [r14], r8
mov qword [r14 + 0x38], r8
mov qword [rcx + 0x3b8], r8
mov qword [rcx + 0x3c0], r8
mov qword [rcx + 0x3c8], r8
mov qword [rcx + 0x3d0], r8
mov qword [rcx + 0x3d8], r8
mov qword [rcx + 0x3e0], r8
mov eax, 0xfe
add rcx, 0x3f4
mov ebp, 0xffffffff
nop word [rax + rax]
mov dword [rcx], r8d
lea rcx, [rcx - 4]
add eax, ebp
jne 0x14036a330
mov qword [rdi], rdx
mov rbx, 0xffffffffffffffff
lea rbx, [rbx + 1]
cmp byte [rsi + rbx], 0
jne 0x14036a345
lea rcx, [rbx + 1]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
lea r8, [rbx + 1]
mov rdx, rsi
mov rcx, rax
call fcn.14036f6d0
mov qword [rdi + 8], rax
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rsi + rax], 0
jne 0x14036a373
inc eax
mov dword [rdi + 0x80], eax
mov edx, ebp
movzx r9d, byte [rsi]
lea r8, [rsi + 1]
lea r12, [0x14041df40]
test r9b, r9b
je 0x14036a3cf
nop word [rax + rax]
cmp r9b, 0x23
jne 0x14036a3b2
cmp byte [r8], r9b
jne 0x14036a3b2
cmp byte [r8 + 1], r9b
cmove edx, ebp
movzx ecx, dl
movzx eax, r9b
xor rcx, rax
shr edx, 8
xor edx, dword [r12 + rcx*4]
movzx r9d, byte [r8]
inc r8
test r9b, r9b
jne 0x14036a3a0
not edx
mov dword [rdi + 0x10], edx
mov ecx, dword [rdi + 0x104]
mov ebx, dword [rdi + 0x100]
cmp ebx, ecx
jne 0x14036a44c
inc ebx
test ecx, ecx
je 0x14036a3f5
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x14036a3fa
mov eax, 8
cmp eax, ebx
cmovg ebx, eax
cmp ebx, ecx
jle 0x14036a44c
movsxd rcx, ebx
shl rcx, 2
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rsi, rax
mov rdx, qword [rdi + 0x108]
test rdx, rdx
je 0x14036a43f
movsxd r8, dword [rdi + 0x100]
shl r8, 2
mov rcx, rax
call fcn.14036f6d0
mov rcx, qword [rdi + 0x108]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rdi + 0x108], rsi
mov dword [rdi + 0x104], ebx
movsxd rcx, dword [rdi + 0x100]
mov rax, qword [rdi + 0x108]
lea rcx, [rax + rcx*4]
mov r8d, 4
lea rdx, [rdi + 0x10]
call fcn.14036f6d0
movsxd rcx, dword [rdi + 0x100]
lea eax, [rcx + 1]
mov dword [rdi + 0x100], eax
mov rax, qword [rdi + 0x108]
mov r9d, dword [rax + rcx*4]
not r9d
mov ebx, r9d
lea rdx, [0x140489f9d]
mov r8b, reloc.WLDAP32.dll_Ordinal_35
cmp r8b, 0x23
jne 0x14036a4ab
cmp byte [rdx], r8b
jne 0x14036a4ab
cmp byte [rdx + 1], r8b
cmove ebx, r9d
movzx ecx, bl
movzx eax, r8b
xor rcx, rax
shr ebx, 8
xor ebx, dword [r12 + rcx*4]
movzx r8d, byte [rdx]
inc rdx
test r8b, r8b
jne 0x14036a498
not ebx
mov rax, qword [rdi]
cmp dword [rax + 0x4054], ebx
jne 0x14036a4e8
lea r8, str.MOVE
mov edx, listen
mov ecx, ebx
call fcn.1403574c0
mov dword [rdi + 0x84], ebx
mov dword [rdi + 0x9c], 0x7f7fffff
mov dword [rdi + 0xa0], 0x7f7fffff
mov dword [rdi + 0xa4], 0x3f000000
mov dword [rdi + 0xa8], 0x3f000000
mov word [rdi + 0xdc], 0xffff
mov dword [rdi + 0xe0], 0xffffffff
mov word [rdi + 0xe9], 0
mov byte [rdi + 0xe8], 0
mov dword [rdi + 0xf4], 0x7f7fffff
mov dword [rdi + 0xf8], 0x7f7fffff
mov dword [rdi + 0xec], 0x7f7fffff
mov dword [rdi + 0xf0], 0x7f7fffff
mov dword [rdi + 0x270], 0xffffffff
mov dword [rdi + 0x274], 0xbf800000
mov dword [rdi + 0x2a0], 0x3f800000
mov dword [rdi + 0x2a4], 0xffffffff
mov qword [rdi + 0x2a8], r14
mov rax, qword [rdi]
add rax, 0x3d48
mov qword [r14 + 0x38], rax
mov rcx, qword [rdi + 0x2a8]
mov rax, qword [rdi + 8]
mov qword [rcx + 0x40], rax
mov dword [rdi + 0x3e0], 0x7f7fffff
mov dword [rdi + 0x3e4], 0x7f7fffff
mov dword [rdi + 0x3d8], 0x7f7fffff
mov dword [rdi + 0x3dc], 0x7f7fffff
mov rax, rdi
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
add rsp, 0x20
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret