Function at 0x10052ac0
Capabilities:
Hash data with crc32
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push esi
mov esi, edx
mov edx, dword [0x1017bfd8]
push edi
mov edi, ecx
mov dword [ebp - 0xc], edx
cmp byte [edx], 0
je 0x10052ce5
cmp byte [edx + 0x2c90], 0
jne 0x10052ce5
cmp dword [edx + 0x1998], 0
jne 0x10052ce5
test esi, esi
jne 0x10052b0a
mov esi, edi
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x10052b01
sub esi, ecx
inc dword [edx + 0x36c]
lea eax, [esi + 1]
push ebx
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
push esi
push edi
push eax
lea ebx, [eax + esi]
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], ebx
call sub.VCRUNTIME140.dll_memcpy
mov esi, dword [ebp - 0x14]
xor edx, edx
add esp, 0x10
mov byte [ebx], 0
xor edi, edi
mov dword [ebp - 8], edx
mov ecx, esi
cmp esi, ebx
jae 0x10052cb1
mov al, byte [ecx]
cmp al, 0xa
je 0x10052cdf
cmp al, 0xd
je 0x10052cdf
mov dword [ebp - 0x10], ecx
mov esi, ecx
cmp ecx, ebx
jae 0x10052b73
mov al, byte [esi]
cmp al, 0xa
je 0x10052b70
cmp al, 0xd
je 0x10052b70
inc esi
cmp esi, ebx
jb 0x10052b61
mov dword [ebp - 0x10], esi
mov byte [esi], 0
mov al, byte [ecx]
cmp al, 0x3b
je 0x10052ca3
cmp al, 0x5b
jne 0x10052c8a
cmp esi, ecx
jbe 0x10052c8a
cmp byte [esi - 1], 0x5d
lea ebx, [esi - 1]
jne 0x10052c87
lea edi, [ecx + 1]
mov byte [ebx], 0
mov eax, ebx
sub eax, edi
push eax
push 0x5d
push edi
call sub.VCRUNTIME140.dll_memchr
add esp, 0xc
mov dword [ebp - 8], eax
test eax, eax
je 0x10052bdf
lea ecx, [eax + 1]
sub ebx, ecx
push ebx
push 0x5b
push ecx
call sub.VCRUNTIME140.dll_memchr
mov ecx, eax
add esp, 0xc
test ecx, ecx
je 0x10052bdf
mov eax, dword [ebp - 8]
lea edx, [ecx + 1]
mov dword [ebp - 8], edx
mov byte [eax], 0
jmp 0x10052be7
mov dword [ebp - 8], edi
mov edi, str.Window
mov cl, byte [edi]
or eax, 0xffffffff
inc edi
test cl, cl
je 0x10052c1f
or esi, 0xffffffff
cmp cl, 0x23
jne 0x10052c03
cmp byte [edi], cl
jne 0x10052c03
cmp byte [edi + 1], cl
cmove eax, esi
movzx edx, al
movzx ecx, cl
xor edx, ecx
shr eax, 8
mov cl, byte [edi]
inc edi
xor eax, dword [edx*4 + 0x1013a068]
test cl, cl
jne 0x10052bf4
mov esi, dword [ebp - 0x10]
mov edi, dword [0x1017bfd8]
xor edx, edx
not eax
mov ecx, dword [edi + 0x2ca4]
test ecx, ecx
jle 0x10052c5e
xor ebx, ebx
cmp edx, ecx
jge 0x10052ce5
mov edi, dword [edi + 0x2cac]
add edi, ebx
cmp dword [edi + 4], eax
je 0x10052c6a
mov edi, dword [0x1017bfd8]
inc edx
add ebx, 0x18
mov ecx, dword [edi + 0x2ca4]
cmp edx, ecx
jl 0x10052c3d
xor edi, edi
mov ebx, dword [ebp - 4]
xor edx, edx
mov dword [ebp - 8], edx
jmp 0x10052ca3
test edi, edi
je 0x10052c60
push dword [ebp - 8]
mov eax, dword [edi + 8]
push edi
push dword [ebp - 0xc]
call eax
mov ebx, dword [ebp - 4]
mov edx, eax
add esp, 0xc
mov dword [ebp - 8], edx
jmp 0x10052ca3
mov ebx, dword [ebp - 4]
test edi, edi
je 0x10052ca3
test edx, edx
je 0x10052ca3
mov eax, dword [edi + 0xc]
push ecx
push edx
push edi
push dword [ebp - 0xc]
call eax
mov edx, dword [ebp - 8]
add esp, 0x10
lea ecx, [esi + 1]
cmp ecx, ebx
jb 0x10052b46
mov esi, dword [ebp - 0x14]
pop ebx
test esi, esi
je 0x10052cc5
mov eax, dword [0x1017bfd8]
test eax, eax
je 0x10052cc5
dec dword [eax + 0x36c]
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, dword [ebp - 0xc]
add esp, 4
pop edi
mov byte [eax + 0x2c90], 1
pop esi
mov esp, ebp
pop ebp
ret
inc ecx
jmp 0x10052b46
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3