Function at 0x140009440
Capabilities:
Hash data with crc32

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xa0
mov rax, qword [0x140177080]
xor rax, rsp
mov qword [rbp + 0x3f], rax
mov rbx, qword [0x140599860]
xor r12d, r12d
mov dword [rbp - 0x1d], r12d
mov qword [rbp - 0x11], r12
mov qword [rbp + 0x17], r12
lea rax, [0x14015a1cc]
mov qword [rbp - 0x29], rax
mov edi, 0xffffffff
mov edx, edi
lea r8, [0x14015a1cd]
mov r9b, 0x57
lea rsi, [0x1401553f0]
nop dword [rax]
cmp r9b, 0x23
jne 0x1400094c2
cmp byte [r8], r9b
jne 0x1400094c2
cmp byte [r8 + 1], r9b
cmove edx, edi
movzx ecx, dl
movzx eax, r9b
xor rcx, rax
shr edx, 8
xor edx, dword [rsi + rcx*4]
movzx r9d, byte [r8]
inc r8
test r9b, r9b
jne 0x1400094b0
not edx
mov dword [rbp - 0x21], edx
lea rax, [0x14001caf0]
mov qword [rbp - 0x19], rax
lea rax, [0x14001cb30]
mov qword [rbp - 9], rax
lea rax, [0x14001cc00]
mov qword [rbp - 1], rax
lea rax, [0x14001cce0]
mov qword [rbp + 7], rax
lea rax, [0x14001ce30]
mov qword [rbp + 0xf], rax
lea rcx, [rbx + 0x5ef8]
lea rdx, [rbp - 0x29]
call fcn.14001db10
mov dword [rbp - 0x1d], r12d
mov qword [rbp - 0x11], r12
mov qword [rbp + 0x17], r12
lea rax, [0x14015b29c]
mov qword [rbp - 0x29], rax
mov eax, edi
lea r8, [0x14015b29d]
mov r9b, 0x54
nop dword [rax]
cmp r9b, 0x23
jne 0x140009562
cmp byte [r8], r9b
jne 0x140009562
cmp byte [r8 + 1], r9b
cmove eax, edi
movzx edx, al
movzx ecx, r9b
xor rdx, rcx
shr eax, 8
xor eax, dword [rsi + rdx*4]
movzx r9d, byte [r8]
inc r8
test r9b, r9b
jne 0x140009550
not eax
mov dword [rbp - 0x21], eax
lea rax, [0x14002a7f0]
mov qword [rbp - 0x19], rax
lea rax, [0x14002a8a0]
mov qword [rbp - 9], rax
lea rax, [0x14002a9a0]
mov qword [rbp - 1], rax
lea rax, [0x14002a850]
mov qword [rbp + 7], rax
lea rax, [0x14002ac30]
mov qword [rbp + 0xf], rax
mov rcx, qword [0x140599860]
add rcx, 0x5ef8
lea rdx, [rbp - 0x29]
call fcn.14001db10
mov rcx, qword [0x140599860]
mov rax, qword [0x140155138]
mov qword [rcx + 0x5f40], rax
mov rax, qword [0x140155148]
mov qword [rcx + 0x5f48], rax
mov rax, qword [0x140155158]
mov qword [rcx + 0x5f50], rax
mov rax, qword [0x140155168]
mov qword [rcx + 0x5f58], rax
mov rax, qword [0x140155178]
mov qword [rcx + 0x5f60], rax
mov rax, qword [0x140155188]
mov qword [rcx + 0x5f68], rax
mov rax, qword [0x140155198]
mov qword [rcx + 0x5f70], rax
mov rax, qword [0x1401551a8]
mov qword [rcx + 0x5f78], rax
lea rax, [0x14001d0c0]
mov qword [rbx + 0xa8], rax
lea rax, [0x14001d210]
mov qword [rbx + 0xb0], rax
mov qword [rbx + 0xb8], rbx
lea rax, [0x14001d2e0]
mov qword [rbx + 0xc0], rax
mov ecx, reloc.WLDAP32.dll_Ordinal_200
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r8, rax
mov r10, qword [0x140599860]
test r10, r10
je 0x1400096f3
mov r9d, dword [r10 + 0x3f70]
movsx rax, word [r10 + 0x6040]
lea rdx, [r10 + 0x6044]
lea rdx, [rdx + rax*8]
cmp dword [rdx], r9d
je 0x1400096e8
lea ecx, [rax + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r10 + 0x6040], cx
movsx rax, cx
lea rdx, [r10 + 0x6044]
lea rdx, [rdx + rax*8]
mov dword [rdx], r9d
mov dword [rdx + 4], r12d
inc word [rdx + 4]
inc dword [r10 + 0x6038]
mov qword [rbp + 0x27], r8
lea rax, [rbp - 0x39]
mov qword [rbp + 0x2f], rax
mov qword [rbp + 0x37], r8
test r8, r8
je 0x140009715
mov rcx, r8
call fcn.140004f00
mov r14, rax
jmp 0x140009718
mov r14, r12
mov ecx, dword [rbx + 0x4adc]
mov edi, dword [rbx + 0x4ad8]
mov esi, 8
cmp edi, ecx
jne 0x140009812
inc edi
test ecx, ecx
je 0x140009742
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x140009744
mov eax, esi
cmp eax, edi
cmovg edi, eax
cmp edi, ecx
jle 0x140009812
movsxd rcx, edi
shl rcx, 3
call fcn.14000b2b0
mov r15, rax
mov rdx, qword [rbx + 0x4ae0]
test rdx, rdx
je 0x140009805
movsxd r8, dword [rbx + 0x4ad8]
shl r8, 3
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov r9, qword [rbx + 0x4ae0]
test r9, r9
je 0x1400097fc
mov r8, qword [0x140599860]
test r8, r8
je 0x1400097fc
mov r10d, dword [r8 + 0x3f70]
movsx r11, word [r8 + 0x6040]
lea rdx, [r8 + 0x6044]
lea rdx, [rdx + r11*8]
cmp dword [rdx], r10d
je 0x1400097f1
lea ecx, [r11 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6040], cx
movsx rax, cx
lea rdx, [r8 + 0x6044]
lea rdx, [rdx + rax*8]
mov dword [rdx], r10d
mov dword [rdx + 4], r12d
inc word [rdx + 6]
inc dword [r8 + 0x603c]
mov rcx, r9
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x4ae0], r15
mov dword [rbx + 0x4adc], edi
movsxd rcx, dword [rbx + 0x4ad8]
mov rax, qword [rbx + 0x4ae0]
mov qword [rax + rcx*8], r14
inc dword [rbx + 0x4ad8]
lea rdi, [rbx + 0x6180]
mov ecx, dword [rdi + 4]
cmp ecx, 0xc01
jge 0x14000985c
test ecx, ecx
je 0x14000984a
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
lea esi, [rcx + rax]
mov edx, 0xc01
cmp esi, edx
cmovg edx, esi
mov rcx, rdi
call fcn.14001e920
movsxd rax, dword [rdi]
cmp eax, 0xc01
jge 0x140009885
mov rcx, rax
cmp rax, 0xc01
jge 0x140009885
mov rax, qword [rdi + 8]
mov byte [rcx + rax], 0
inc rcx
cmp rcx, 0xc01
jl 0x140009871
mov dword [rdi], 0xc01
mov byte [rbx], 1
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.1400bc070
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret