Function at 0x140004970
Capabilities:
Encode data using xor
Hash data using crc32b
Move file
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
mov dword [rsp + 0x10], edx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xd0]
sub rsp, 0x1d0
mov rbx, qword [rbp + 0x130]
xorps xmm0, xmm0
mov edi, r8d
mov dword [r9], 0xffffffff
mov esi, edx
mov r13d, ecx
xor eax, eax
lea rdx, str.M_u.ckp
mov r8d, ecx
mov dword [rbp - 0x10], eax
xor r12d, r12d
lea rcx, [rsp + 0x50]
mov dword [rbx], r12d
mov r14, r9
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
call fcn.140001790
lea rdx, [0x14001ef24]
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov r15, rax
test rax, rax
jne 0x140004a2b
cmp dword [rbp + 0x138], 1
jle 0x140004a24
lea rdx, [rsp + 0x50]
lea rcx, str.No_checkpoint_file___s__found._n
call fcn.140001020
xor eax, eax
jmp 0x140004c6c
mov edx, 1
lea rcx, [rbp - 0x70]
mov r9, r15
lea r8d, [rdx + 0x62]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
movsxd rcx, eax
mov r9d, esi
mov eax, dword [0x1400b3bf4]
lea rdx, str._u__d__d__d
mov dword [rsp + 0x28], eax
mov r8d, r13d
mov dword [rsp + 0x20], edi
mov byte [rbp + rcx - 0x70], r12b
lea rcx, [rbp]
call fcn.140001790
lea rdx, [rbp]
lea rcx, [rbp - 0x70]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
mov esi, dword [rbp + 0x138]
lea rcx, [rbp - 0x70]
mov rdi, 0xffffffffffffffff
cmp rax, rcx
jne 0x140004ca8
lea rcx, [rbp]
mov rax, rdi
nop dword [rax]
inc rax
cmp byte [rcx + rax], r12b
jne 0x140004aa0
cmp eax, 0x46
jge 0x140004cc5
cdqe
lea rsi, [rbp - 0x70]
add rsi, rax
lea rdx, [0x14001ef58]
mov rcx, rsi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
lea rcx, [rbp + 0x70]
mov r14, rax
cmp rax, rsi
jbe 0x140004af7
mov rbx, rax
mov rdx, rsi
sub rbx, rsi
mov r8, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + rbx + 0x70], r12b
mov rbx, qword [rbp + 0x130]
jmp 0x140004b0a
lea r8, str.mfakto_0.15pre8_Win
lea rdx, [0x14001ef5c]
call fcn.140001790
mov r8, qword [rbp + 0x128]
lea rdx, str.:__d__d
mov r9, rbx
mov rcx, r14
call fcn.1400017f0
mov eax, dword [rbx]
lea rdx, str._u__d__d__d__s:__d__d
mov r14, qword [rbp + 0x128]
lea rcx, [rbp]
mov r9d, dword [rbp + 0x118]
mov r8d, r13d
mov dword [rsp + 0x40], eax
mov eax, dword [r14]
mov dword [rsp + 0x38], eax
lea rax, [rbp + 0x70]
mov qword [rsp + 0x30], rax
mov eax, dword [0x1400b3bf4]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + 0x120]
mov dword [rsp + 0x20], eax
call fcn.140001790
mov r9d, r12d
lea rcx, [rbp]
mov rax, rdi
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r9b
jne 0x140004b80
movsxd rsi, eax
test eax, eax
jle 0x140004beb
mov r11, r12
nop dword [rax]
nop word [rax + rax]
movsx ebx, byte [rbp + r11]
mov r10d, 7
nop dword [rax]
movzx ecx, r10b
lea r8d, [r9 + r9]
mov edx, ebx
mov eax, r8d
sar edx, cl
xor eax, 0x4c11db7
mov ecx, r9d
and edx, 1
shr ecx, 0x1f
mov r9d, r8d
cmp cl, dl
cmovne r9d, eax
sub r10d, 1
jns 0x140004bb0
inc r11
cmp r11, rsi
jl 0x140004ba0
mov rbx, qword [rbp + 0x130]
mov eax, dword [rbx]
lea rdx, str._u__d__d__d__s:__d__d__08X
mov dword [rsp + 0x48], r9d
lea rcx, [rbp]
mov r9d, dword [rbp + 0x118]
mov r8d, r13d
mov dword [rsp + 0x40], eax
mov eax, dword [r14]
mov dword [rsp + 0x38], eax
lea rax, [rbp + 0x70]
mov qword [rsp + 0x30], rax
mov eax, dword [0x1400b3bf4]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + 0x120]
mov dword [rsp + 0x20], eax
call fcn.140001790
movsxd rcx, eax
mov eax, dword [0x1400b3bf4]
cmp dword [r14], eax
jae 0x140004c87
cmp dword [rbx], r12d
jl 0x140004c87
mov r8, rcx
lea rdx, [rbp]
lea rcx, [rbp - 0x70]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x140004c87
mov rcx, r15
lea r12d, [rax + 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov eax, r12d
mov rbx, qword [rsp + 0x210]
add rsp, 0x1d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov esi, dword [rbp + 0x138]
test esi, esi
jle 0x140004cc5
lea r8, [rbp - 0x70]
lea rdx, [rsp + 0x50]
lea rcx, str.Cannot_use_checkpoint_file___s_:_Bad_content___s_._n
call fcn.140001020
jmp 0x140004cc5
test esi, esi
jle 0x140004cc5
lea r9, [rbp]
lea r8, [rbp - 0x70]
lea rdx, [rsp + 0x50]
lea rcx, str.Cannot_use_checkpoint_file___s_:_Content___s__does_not_match_expected___s_._n
call fcn.140001020
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov r9d, r12d
lea rax, [rbp - 0x70]
inc rdi
cmp byte [rax + rdi], r9b
jne 0x140004cd5
movsxd rdi, edi
test rdi, rdi
jle 0x140004d3b
mov r11, r12
nop dword [rax]
movsx ebx, byte [rbp + r11 - 0x70]
mov r10d, 7
nop dword [rax]
movzx ecx, r10b
lea r8d, [r9 + r9]
mov edx, ebx
mov eax, r8d
sar edx, cl
xor eax, 0x4c11db7
mov ecx, r9d
and edx, 1
shr ecx, 0x1f
mov r9d, r8d
cmp cl, dl
cmovne r9d, eax
sub r10d, 1
jns 0x140004d00
inc r11
cmp r11, rdi
jl 0x140004cf0
mov rbx, qword [rbp + 0x130]
mov r8d, r13d
lea rdx, str.M_u.ckp.bad__08X
lea rcx, [rsp + 0x68]
call fcn.140001790
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_rename]
test eax, eax
jne 0x140004d7d
test esi, esi
jle 0x140004d7d
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x50]
lea rcx, str.Renamed_bad_checkpoint_file___s__to___s__n
call fcn.140001020
mov r8d, r13d
lea rdx, str.M_u.ckp.bu
lea rcx, [rsp + 0x68]
call fcn.140001790
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x68]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_rename]
test eax, eax
jne 0x140004c69
cmp esi, 1
jle 0x140004dc4
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x68]
lea rcx, str.Renamed_backup_file___s__to___s___trying_to_load_it._n
call fcn.140001020
mov eax, dword [0x1400b3c70]
mov r9, r14
mov r8d, dword [rbp + 0x120]
mov ecx, r13d
mov edx, dword [rbp + 0x118]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbx
call fcn.140004970
jmp 0x140004c6c