Function at 0x1004ab80
Capabilities:
Hash data with crc32
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x2c
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], 0x1005f000
mov edx, dword fs:[0]
mov dword [ebp - 0x18], edx
mov dword fs:[0], eax
mov dword [ecx + 0x154], 0
mov dword [ecx + 0x150], 0
mov dword [ecx + 0x158], 0
xorps xmm2, xmm2
movups xmmword [ecx + 0x174], xmm2
movups xmmword [ecx + 0x184], xmm2
movups xmmword [ecx + 0x194], xmm2
movups xmmword [ecx + 0xc], xmm2
movups xmmword [ecx + 0x1c], xmm2
movups xmmword [ecx + 0x2c], xmm2
mov dword [ecx + 0x40], 0
mov dword [ecx + 0x3c], 0
movups xmmword [ecx + 0x58], xmm2
movups xmmword [ecx + 0x68], xmm2
movups xmmword [ecx + 0xb8], xmm2
movups xmmword [ecx + 0xc8], xmm2
movups xmmword [ecx + 0xd8], xmm2
movups xmmword [ecx + 0xe8], xmm2
mov dword [ecx + 0xfc], 0
mov dword [ecx + 0xf8], 0
mov dword [ecx + 0x100], 0xbf800000
movups xmmword [ecx + 0x104], xmm2
movaps xmm1, xmmword [0x101a8870]
movups xmmword [ecx + 0x124], xmm1
movups xmm0, xmmword [ecx + 0x124]
movups xmmword [ecx + 0x114], xmm0
movaps xmm0, xmmword [0x101a8880]
movups xmmword [ecx + 0x134], xmm0
mov word [ecx + 0x144], 0
mov byte [ecx + 0x146], 0
mov dword [ecx + 0x148], 0
mov dword [ecx + 0x14c], 0
movaps xmm0, xmmword [0x101a8890]
movups xmmword [ecx + 0x15c], xmm0
movsd xmm0, qword [0x101a88a0]
movsd qword [ecx + 0x16c], xmm0
lea eax, [ecx + 0x1c0]
mov dword [ebp - 0x38], eax
movups xmmword [ecx + 0x1b4], xmm2
movups xmmword [ecx + 0x1a4], xmm2
mov dword [ecx + 0x1c8], 0
mov dword [ecx + 0x1c4], 0
movups xmmword [ecx + 0x1cc], xmm1
movups xmmword [ecx + 0x1dc], xmm1
movups xmmword [ecx + 0x1ec], xmm1
movups xmmword [ecx + 0x1fc], xmm1
movups xmmword [ecx + 0x20c], xmm1
mov dword [ebp - 0x20], ecx
add ecx, 0x224
mov dword [ebp - 0x10], 0
call fcn.10085ad0
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x20]
lea ecx, [edx + 0x254]
mov dword [ebp - 0x34], ecx
lea ecx, [edx + 0x260]
mov dword [ebp - 0x30], ecx
lea ecx, [edx + 0x278]
add eax, 0x1908
xorps xmm0, xmm0
movups xmmword [edx + 0x254], xmm0
mov dword [edx + 0x268], 0
mov dword [edx + 0x264], 0
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x28], ecx
push eax
call fcn.1004b1b0
movaps xmm0, xmmword [0x101a8870]
mov eax, dword [ebp - 0x20]
movups xmmword [eax + 0x308], xmm0
movups xmmword [eax + 0x318], xmm0
push dword [ebp + 0xc]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ecx, dword [0x10259f60]
test ecx, ecx
je 0x1004ad99
inc dword [ecx + 0x36c]
inc eax
mov dword [ebp - 0x24], eax
mov ecx, dword [0x10259f68]
mov dword [ebp - 0x10], 2
push ecx
push eax
call dword [0x101fd77c]
add esp, 8
mov esi, eax
push dword [ebp - 0x24]
mov edi, dword [ebp + 0xc]
push edi
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x20]
mov dword [eax], esi
movzx ebx, byte [edi]
test bl, bl
je 0x1004ae24
lea ecx, [edi + 2]
mov edx, 0xffffffff
mov eax, 0xffffffff
jmp 0x1004ae09
movzx esi, bl
movzx edi, al
shr eax, 8
xor edi, esi
xor eax, dword [edi*4 + 0x101a8104]
inc ecx
mov bl, bh
test bh, bh
je 0x1004ae20
mov bh, byte [ecx - 1]
cmp bl, 0x23
jne 0x1004adf0
cmp bh, 0x23
jne 0x1004adf0
cmp byte [ecx], 0x23
cmove eax, edx
mov bh, 0x23
jmp 0x1004adf0
not eax
jmp 0x1004ae26
xor eax, eax
mov edi, dword [ebp - 0x20]
mov dword [edi + 4], eax
mov ecx, dword [edi + 0x1c0]
cmp ecx, dword [edi + 0x1c4]
mov ebx, dword [ebp + 0xc]
jne 0x1004af14
lea esi, [ecx + 1]
test ecx, ecx
je 0x1004ae55
mov edx, ecx
shr edx, 0x1f
add edx, ecx
sar edx, 1
add edx, ecx
jmp 0x1004ae5a
mov edx, 8
cmp edx, esi
cmovg esi, edx
cmp ecx, esi
jge 0x1004af14
mov dword [ebp - 0x24], esi
lea eax, [esi*4]
mov ecx, dword [0x10259f60]
test ecx, ecx
je 0x1004ae88
inc dword [ecx + 0x36c]
mov dword [ebp - 0x10], 2
mov ecx, dword [0x10259f68]
mov dword [ebp - 0x10], 2
push ecx
push eax
call dword [0x101fd77c]
add esp, 8
mov edx, eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x1c8]
test eax, eax
je 0x1004aef6
mov esi, dword [ebp - 0x20]
mov ecx, dword [esi + 0x1c0]
shl ecx, 2
push ecx
push eax
mov dword [ebp - 0x2c], edx
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 0x1c8]
test eax, eax
je 0x1004aee3
mov ecx, dword [0x10259f60]
test ecx, ecx
je 0x1004aee3
dec dword [ecx + 0x36c]
push dword [0x10259f68]
push eax
call dword [0x101fd780]
add esp, 8
mov edx, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x20]
mov dword [edi + 0x1c8], edx
mov eax, dword [ebp - 0x24]
mov dword [edi + 0x1c4], eax
mov eax, dword [edi + 4]
mov ecx, dword [edi + 0x1c0]
mov ebx, dword [ebp + 0xc]
lea edx, [edi + 0x2c]
mov esi, dword [edi + 0x1c8]
mov dword [esi + ecx*4], eax
mov esi, dword [edi + 0x1c0]
lea eax, [esi + 1]
mov dword [edi + 0x1c0], eax
xorps xmm0, xmm0
movups xmmword [edi + 8], xmm0
movups xmmword [edi + 0x14], xmm0
movups xmmword [edx + 0x10], xmm0
movups xmmword [edx], xmm0
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
inc eax
mov dword [edi + 0x4c], eax
test esi, esi
js 0x1004b131
lea eax, [edi + 0x308]
mov dword [ebp - 0x24], eax
mov ecx, dword [edi + 0x1c8]
mov edx, dword [ecx + esi*4]
not edx
mov bl, 0x23
mov esi, 0x101ef56e
mov ecx, edx
jmp 0x1004af99
movzx edi, bl
movzx eax, cl
shr ecx, 8
xor eax, edi
xor ecx, dword [eax*4 + 0x101a8104]
inc esi
mov bl, bh
test bh, bh
je 0x1004afb0
mov bh, byte [esi - 1]
cmp bl, 0x23
jne 0x1004af80
cmp bh, 0x23
jne 0x1004af80
cmp byte [esi], 0x23
cmove ecx, edx
mov bh, 0x23
jmp 0x1004af80
not ecx
mov edx, dword [0x10259f60]
cmp dword [edx + 0x1a04], ecx
jne 0x1004afc6
mov dword [edx + 0x1a0c], ecx
cmp dword [edx + 0x1a08], ecx
mov eax, dword [ebp - 0x20]
jne 0x1004afd8
mov byte [edx + 0x1a18], 1
mov dword [eax + 0x50], ecx
movaps xmm0, xmmword [0x101a88b0]
movups xmmword [eax + 0x54], xmm0
mov dword [eax + 0x64], 0x7f7fffff
mov dword [eax + 0x68], 0x3f000000
mov dword [eax + 0x6c], 0x3f000000
xorps xmm0, xmm0
movups xmmword [eax + 0x70], xmm0
mov dword [eax + 0x7f], 0
mov byte [eax + 0x83], 0xff
mov dword [eax + 0x84], 0xffff0000
mov word [eax + 0x88], 0xffff
mov dword [eax + 0x8c], 0
mov dword [eax + 0x94], 0xffffffff
mov dword [eax + 0x90], 0xffffffff
mov byte [eax + 0x98], 0
movaps xmm1, xmmword [0x101a88c0]
movups xmmword [eax + 0x9c], xmm1
mov dword [eax + 0xc0], 0x7f7fffff
mov dword [eax + 0xc4], 0x7f7fffff
movaps xmm1, xmmword [0x101a88d0]
movups xmmword [eax + 0xac], xmm1
mov dword [eax + 0xbc], 0x7f7fffff
mov dword [eax + 0x21c], 0xffffffff
mov dword [eax + 0x220], 0
mov dword [eax + 0x26c], 0x3f800000
mov dword [eax + 0x270], 0xffffffff
mov ecx, dword [ebp - 0x28]
mov dword [eax + 0x274], ecx
mov ecx, dword [eax]
mov dword [eax + 0x2a4], ecx
mov dword [eax + 0x304], 0
mov dword [eax + 0x300], 0
movups xmmword [eax + 0x2ec], xmm0
movaps xmm0, xmmword [0x101a8870]
movups xmmword [eax + 0x318], xmm0
movups xmm0, xmmword [eax + 0x318]
mov ecx, dword [ebp - 0x24]
movups xmmword [ecx], xmm0
mov dword [eax + 0x2fc], 0
movaps xmm0, xmmword [0x101a88e0]
movups xmmword [eax + 0x328], xmm0
mov dword [eax + 0x33c], 0x7fffffff
mov dword [eax + 0x338], 0x7fffffff
mov ecx, dword [ebp - 0x18]
mov dword fs:[0], ecx
add esp, 0x2c
pop esi
pop edi
pop ebx
pop ebp
ret 8
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop dword [eax]
push ebp
sub esp, 0xc
add ebp, 0xc
mov ecx, dword [ebp - 0x28]
call fcn.1004b3a0
add esp, 0xc
pop ebp
ret