Function at 0x18000a500
Capabilities:
Contain obfuscated stackstrings
Hash data with crc32

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xc0
mov rax, qword [0x18007e010]
xor rax, rsp
mov qword [rbp + 0x3f], rax
mov rdi, qword [0x18007f050]
xor esi, esi
mov dword [rbp - 0x1d], esi
mov qword [rbp - 0x11], rsi
mov qword [rbp + 0x17], rsi
mov dword [rbp - 0x48], 0x646e6957
mov word [rbp - 0x44], 0x776f
mov byte [rbp - 0x42], sil
lea ecx, [rsi + 7]
call fcn.18006bdb8
mov edx, dword [rbp - 0x48]
mov dword [rax], edx
movzx edx, word [rbp - 0x44]
mov word [rax + 4], dx
movzx edx, sil
mov byte [rax + 6], dl
mov qword [rbp - 0x29], rax
mov dword [rbp - 0x48], 0x646e6957
mov word [rbp - 0x44], 0x776f
mov byte [rbp - 0x42], sil
lea ecx, [rsi + 7]
call fcn.18006bdb8
mov ecx, dword [rbp - 0x48]
mov dword [rax], ecx
movzx ecx, word [rbp - 0x44]
mov word [rax + 4], cx
mov byte [rax + 6], sil
mov ebx, 0xffffffff
mov edx, ebx
movzx r9d, byte [rax]
lea r8, [rax + 1]
lea r14, [0x180070510]
test r9b, r9b
je 0x18000a5e7
cmp r9b, 0x23
jne 0x18000a5ca
cmp byte [r8], r9b
jne 0x18000a5ca
cmp byte [r8 + 1], r9b
cmove edx, ebx
movzx ecx, dl
movzx eax, r9b
xor rcx, rax
shr edx, 8
xor edx, dword [r14 + rcx*4]
movzx r9d, byte [r8]
inc r8
test r9b, r9b
jne 0x18000a5b8
not edx
mov dword [rbp - 0x21], edx
lea rax, [0x180019e20]
mov qword [rbp - 0x19], rax
lea rax, [0x180019eb0]
mov qword [rbp - 9], rax
lea rax, [0x180019f80]
mov qword [rbp - 1], rax
lea rax, [0x18001a090]
mov qword [rbp + 7], rax
lea rax, [0x18001a1e0]
mov qword [rbp + 0xf], rax
lea rcx, [rbp - 0x29]
call fcn.180019890
mov dword [rbp - 0x1d], esi
mov qword [rbp - 0x11], rsi
mov qword [rbp + 0x17], rsi
mov dword [rbp - 0x48], 0x6c626154
mov word [rbp - 0x44], 0x65
mov ecx, 6
call fcn.18006bdb8
mov ecx, dword [rbp - 0x48]
mov dword [rax], ecx
movzx ecx, word [rbp - 0x44]
mov word [rax + 4], cx
mov qword [rbp - 0x29], rax
mov dword [rbp - 0x41], 0x62615425
mov word [rbp - 0x3d], 0x656c
mov byte [rbp - 0x3b], sil
mov edx, ebx
lea r8, [rbp - 0x3f]
mov r9b, 0x54
nop dword [rax]
cmp r9b, 0x23
jne 0x18000a692
cmp byte [r8], r9b
jne 0x18000a692
cmp byte [r8 + 1], r9b
cmove edx, ebx
movzx ecx, dl
movzx eax, r9b
xor rcx, rax
shr edx, 8
xor edx, dword [r14 + rcx*4]
movzx r9d, byte [r8]
inc r8
test r9b, r9b
jne 0x18000a680
not edx
mov dword [rbp - 0x21], edx
lea rax, [0x1800490f0]
mov qword [rbp - 0x19], rax
lea rax, [0x1800491e0]
mov qword [rbp - 9], rax
lea rax, [0x1800492f0]
mov qword [rbp - 1], rax
lea rax, [0x180049190]
mov qword [rbp + 7], rax
lea rax, [0x180049620]
mov qword [rbp + 0xf], rax
lea rcx, [rbp - 0x29]
call fcn.180019890
mov rax, qword [0x18007f050]
test rax, rax
je 0x18000a706
inc dword [rax + 0xf4]
mov ecx, 0xb8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
mov qword [rbp - 0x49], rax
lea rax, [rbp - 0x39]
mov qword [rbp + 0x27], rax
mov qword [rbp + 0x2f], rbx
test rbx, rbx
je 0x18000a79a
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx + 0x20], xmm0
movups xmmword [rbx + 0x48], xmm0
movups xmmword [rbx + 0x58], xmm0
movups xmmword [rbx + 0x68], xmm0
lea rcx, [rbx + 0x78]
mov qword [rbp + 0x37], rcx
lea rax, [0x18001b070]
mov qword [rsp + 0x20], rax
lea r9, [0x18001b7f0]
mov edx, 0x10
lea r8d, [rdx - 0xe]
call fcn.18006bdc0
mov qword [rbx + 0x98], rsi
mov qword [rbx + 0xa0], rsi
mov qword [rbx + 0xa8], rsi
mov qword [rbx + 0xb0], rsi
mov qword [rbx + 0x30], 0xffffffffffffffff
mov qword [rbx + 0x40], rsi
mov qword [rbx + 0x38], rsi
jmp 0x18000a79d
mov rbx, rsi
mov ecx, dword [rdi + 0x485c]
mov r14d, dword [rdi + 0x4858]
mov esi, 8
cmp r14d, ecx
jne 0x18000a84b
inc r14d
test ecx, ecx
je 0x18000a7ca
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x18000a7cc
mov eax, esi
cmp eax, r14d
cmovg r14d, eax
cmp r14d, ecx
jle 0x18000a84b
mov rax, qword [0x18007f050]
test rax, rax
je 0x18000a7ea
inc dword [rax + 0xf4]
movsxd rcx, r14d
shl rcx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
mov rdx, qword [rdi + 0x4860]
test rdx, rdx
je 0x18000a83d
movsxd r8, dword [rdi + 0x4858]
shl r8, 3
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rcx, qword [rdi + 0x4860]
test rcx, rcx
je 0x18000a837
mov rax, qword [0x18007f050]
test rax, rax
je 0x18000a837
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rdi + 0x4860], r15
mov dword [rdi + 0x485c], r14d
movsxd rcx, dword [rdi + 0x4858]
mov rax, qword [rdi + 0x4860]
mov qword [rax + rcx*8], rbx
inc dword [rdi + 0x4858]
lea rbx, [rdi + 0x5d68]
mov ecx, dword [rbx + 4]
cmp ecx, 0xc01
jge 0x18000a895
test ecx, ecx
je 0x18000a883
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
lea esi, [rcx + rax]
mov edx, 0xc01
cmp esi, edx
cmovg edx, esi
mov rcx, rbx
call fcn.18001ba80
movsxd rax, dword [rbx]
cmp eax, 0xc01
jge 0x18000a8c4
mov rcx, rax
cmp rax, 0xc01
jge 0x18000a8c4
nop word [rax + rax]
mov rax, qword [rbx + 8]
mov byte [rcx + rax], 0
inc rcx
cmp rcx, 0xc01
jl 0x18000a8b0
mov dword [rbx], 0xc01
mov byte [rdi], 1
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.18006ba20
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret