Function at 0x180001020
Capabilities:
Hash data with crc32

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r13
lea rbp, [rsp - 0x17]
sub rsp, 0xe0
mov rax, qword [0x180030010]
xor rax, rsp
mov qword [rbp + 0xf], rax
mov rax, qword [rbp + 0x77]
lea rdx, [rbp - 0x69]
mov r13, qword [rbp + 0x67]
lea rcx, [rbp - 0x21]
xor esi, esi
mov qword [rbp - 0x49], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x51], rax
mov eax, 0xe334
mov word [rbp - 0x55], ax
lea r9d, [rsi + 0x44]
mov qword [rbp - 9], rsi
lea r8d, [rsi + 0x36]
mov qword [rbp - 1], rsi
mov dword [rbp + 7], esi
mov dword [rbp + 0xb], esi
mov dword [rbp - 0x69], 0x10c947d1
mov dword [rbp - 0x65], 0x88aa5c0
mov dword [rbp - 0x61], 0x538fd1fa
mov dword [rbp - 0x5d], 0x19513f96
mov dword [rbp - 0x59], 0xf6987778
mov word [rsp + 0x20], 0x4a
call fcn.180001690
lea rax, [rbp - 0x21]
mov rdi, 0xffffffffffffffff
mov qword [rbp - 0x79], rax
mov rbx, qword [rbp - 0x79]
inc rdi
cmp word [rbx + rdi*2], si
jne 0x1800010c0
dec rdi
cmp rdi, 0xffffffffffffffff
jne 0x1800010d9
mov eax, 0xffffffff
jmp 0x1800010fe
lea rcx, [rdi - 1]
mov rdx, rbx
call fcn.180004530
movzx edx, word [rbx + rdi*2]
mov ecx, eax
xor rdx, rcx
shr eax, 8
movzx edx, dl
lea rcx, [0x18002b810]
xor eax, dword [rcx + rdx*4]
not eax
mov ecx, eax
call fcn.180005ab0
test rax, rax
jne 0x180001114
mov rcx, rbx
call fcn.1800057a0
mov qword [rsp + 0x110], r12
mov edx, 0x7d8b5cd9
mov qword [rsp + 0x118], r14
mov rcx, rax
mov qword [rsp + 0x120], r15
call fcn.180005c90
mov rdi, rax
test rax, rax
je 0x180001356
mov ecx, 0x41fcfba8
call fcn.180005ab0
mov edx, 0x1514817c
mov rcx, rax
call fcn.180005c90
mov r15, rax
test rax, rax
je 0x180001356
mov ecx, 0x41fcfba8
call fcn.180005ab0
mov edx, 0x45af3d7
mov rcx, rax
call fcn.180005c90
mov r12, rax
test rax, rax
je 0x180001356
mov ecx, 0x41fcfba8
call fcn.180005ab0
mov edx, 0x8e5b3288
mov rcx, rax
call fcn.180005c90
mov r14, rax
test rax, rax
je 0x180001356
lea rax, [rbp - 0x71]
mov dword [rbp - 0x71], 0x450041
mov dword [rbp - 0x6d], 0x53
lea rcx, [rbp - 9]
mov qword [rbp - 0x79], rax
xor r9d, r9d
mov rdx, qword [rbp - 0x79]
xor r8d, r8d
call rdi
mov ebx, eax
test eax, eax
js 0x180001336
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
xor edx, edx
mov rcx, rax
lea r8d, [rdx + 0x10]
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rsi, rax
test rax, rax
jne 0x180001205
mov ebx, 0xc0000017
jmp 0x180001336
mov r9d, 8
lea rdx, str.SHA256
xor r8d, r8d
lea rcx, [rbp - 1]
call rdi
mov ebx, eax
test eax, eax
jne 0x180001316
mov rcx, qword [rbp - 1]
lea r9, [0x18002b728]
xor edi, edi
lea r8d, [rax + 0x11]
mov dword [rsp + 0x40], edi
lea rdx, [0x180030a30]
mov dword [rsp + 0x38], 0x10
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], 0x8c
mov dword [rsp + 0x20], 0x10
call r15
mov ebx, eax
test eax, eax
js 0x180001316
lea r9d, [rdi + 0x2a]
mov word [rsp + 0x20], 0x4e
lea r8d, [rdi + 0x43]
lea rdx, [0x18002b640]
lea rcx, [rbp - 0x41]
call fcn.1800018a0
lea rax, [rbp - 0x41]
mov dword [rsp + 0x28], edi
mov qword [rbp - 0x79], rax
lea r9d, [rdi + 4]
mov rdx, qword [rbp - 0x79]
lea rax, [rbp + 7]
mov rcx, qword [rbp - 9]
lea r8, [rbp + 0xb]
mov qword [rsp + 0x20], rax
call r12
mov ebx, eax
test eax, eax
js 0x180001316
lea r9d, [rdi + 0x4c]
mov word [rsp + 0x20], 0x48
lea r8d, [rdi + 0x4a]
lea rcx, [rbp - 0x41]
call fcn.180001ae0
lea rax, [rbp - 0x41]
mov rdx, rsi
mov qword [rbp - 0x79], rax
mov rax, qword [rbp - 0x51]
mov qword [rsp + 0x48], rax
mov rax, qword [rbp - 0x49]
mov qword [rsp + 0x40], rax
mov eax, dword [rbp + 0x6f]
mov dword [rsp + 0x38], eax
mov rax, qword [rbp - 0x79]
mov rcx, qword [rbp - 9]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x20
mov qword [rsp + 0x20], rax
call fcn.180001390
mov ebx, eax
xor eax, eax
mov rdi, rsi
mov ecx, 0x10
rep stosb byte [rdi], al
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rsi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rbp - 9]
test rcx, rcx
je 0x180001344
xor edx, edx
call r14
mov rcx, qword [rbp - 1]
test rcx, rcx
je 0x180001352
xor edx, edx
call r14
mov eax, ebx
jmp 0x18000135b
mov eax, 1
mov r15, qword [rsp + 0x120]
mov r14, qword [rsp + 0x118]
mov r12, qword [rsp + 0x110]
mov rcx, qword [rbp + 0xf]
xor rcx, rsp
call fcn.180006f50
add rsp, 0xe0
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
ret