Function at 0x1010b5c0
Capabilities:
Hash data with crc32
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push esi
mov esi, edx
mov edx, dword [0x101e6b78]
push edi
mov edi, ecx
mov dword [ebp - 0xc], edx
cmp byte [edx], 0
je 0x1010b7e5
cmp byte [edx + 0x2c94], 0
jne 0x1010b7e5
cmp dword [edx + 0x1998], 0
jne 0x1010b7e5
test esi, esi
jne 0x1010b60a
mov esi, edi
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x1010b601
sub esi, ecx
inc dword [edx + 0x36c]
lea eax, [esi + 1]
push ebx
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
push esi
push edi
push eax
lea ebx, [eax + esi]
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], ebx
call sub.VCRUNTIME140.dll_memcpy
mov esi, dword [ebp - 0x14]
xor edx, edx
add esp, 0x10
mov byte [ebx], 0
xor edi, edi
mov dword [ebp - 8], edx
mov ecx, esi
cmp esi, ebx
jae 0x1010b7b1
mov al, byte [ecx]
cmp al, 0xa
je 0x1010b7df
cmp al, 0xd
je 0x1010b7df
mov dword [ebp - 0x10], ecx
mov esi, ecx
cmp ecx, ebx
jae 0x1010b673
mov al, byte [esi]
cmp al, 0xa
je 0x1010b670
cmp al, 0xd
je 0x1010b670
inc esi
cmp esi, ebx
jb 0x1010b661
mov dword [ebp - 0x10], esi
mov byte [esi], 0
mov al, byte [ecx]
cmp al, 0x3b
je 0x1010b7a3
cmp al, 0x5b
jne 0x1010b78a
cmp esi, ecx
jbe 0x1010b78a
cmp byte [esi - 1], 0x5d
lea ebx, [esi - 1]
jne 0x1010b787
lea edi, [ecx + 1]
mov byte [ebx], 0
mov eax, ebx
sub eax, edi
push eax
push 0x5d
push edi
call sub.VCRUNTIME140.dll_memchr
add esp, 0xc
mov dword [ebp - 8], eax
test eax, eax
je 0x1010b6df
lea ecx, [eax + 1]
sub ebx, ecx
push ebx
push 0x5b
push ecx
call sub.VCRUNTIME140.dll_memchr
mov ecx, eax
add esp, 0xc
test ecx, ecx
je 0x1010b6df
mov eax, dword [ebp - 8]
lea edx, [ecx + 1]
mov dword [ebp - 8], edx
mov byte [eax], 0
jmp 0x1010b6e7
mov dword [ebp - 8], edi
mov edi, str.Window
mov cl, byte [edi]
or eax, 0xffffffff
inc edi
test cl, cl
je 0x1010b71f
or esi, 0xffffffff
cmp cl, 0x23
jne 0x1010b703
cmp byte [edi], cl
jne 0x1010b703
cmp byte [edi + 1], cl
cmove eax, esi
movzx edx, al
movzx ecx, cl
xor edx, ecx
shr eax, 8
mov cl, byte [edi]
inc edi
xor eax, dword [edx*4 + 0x101752a0]
test cl, cl
jne 0x1010b6f4
mov esi, dword [ebp - 0x10]
mov edi, dword [0x101e6b78]
xor edx, edx
not eax
mov ecx, dword [edi + 0x2ca8]
test ecx, ecx
jle 0x1010b75e
xor ebx, ebx
cmp edx, ecx
jge 0x1010b7e5
mov edi, dword [edi + 0x2cb0]
add edi, ebx
cmp dword [edi + 4], eax
je 0x1010b76a
mov edi, dword [0x101e6b78]
inc edx
add ebx, 0x18
mov ecx, dword [edi + 0x2ca8]
cmp edx, ecx
jl 0x1010b73d
xor edi, edi
mov ebx, dword [ebp - 4]
xor edx, edx
mov dword [ebp - 8], edx
jmp 0x1010b7a3
test edi, edi
je 0x1010b760
push dword [ebp - 8]
mov eax, dword [edi + 8]
push edi
push dword [ebp - 0xc]
call eax
mov ebx, dword [ebp - 4]
mov edx, eax
add esp, 0xc
mov dword [ebp - 8], edx
jmp 0x1010b7a3
mov ebx, dword [ebp - 4]
test edi, edi
je 0x1010b7a3
test edx, edx
je 0x1010b7a3
mov eax, dword [edi + 0xc]
push ecx
push edx
push edi
push dword [ebp - 0xc]
call eax
mov edx, dword [ebp - 8]
add esp, 0x10
lea ecx, [esi + 1]
cmp ecx, ebx
jb 0x1010b646
mov esi, dword [ebp - 0x14]
pop ebx
test esi, esi
je 0x1010b7c5
mov eax, dword [0x101e6b78]
test eax, eax
je 0x1010b7c5
dec dword [eax + 0x36c]
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, dword [ebp - 0xc]
add esp, 4
pop edi
mov byte [eax + 0x2c94], 1
pop esi
mov esp, ebp
pop ebp
ret
inc ecx
jmp 0x1010b646
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3