Function at 0x1800a51c0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xb0
xor r15d, r15d
mov dword [rbp + 0x67], r15d
mov dword [rbp - 0x49], 0x2f382e28
mov dword [rbp - 0x45], 0x39736f6e
mov word [rbp - 0x41], 0x3131
mov byte [rbp - 0x3f], 0x5d
xorps xmm0, xmm0
movups xmmword [rbp - 0x31], xmm0
mov qword [rbp - 0x21], r15
mov ebx, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x19], rbx
mov byte [rbp - 0x31], r15b
mov dword [rbp + 0x67], 1
xor r8d, r8d
lea edx, [rbx - 4]
lea rcx, [rbp - 0x31]
call fcn.180014330
mov ecx, r15d
cmp rcx, 0xb
jae 0x1800a5655
movzx edx, byte [rbp + rcx - 0x49]
xor dl, 0x5d
cmp qword [rbp - 0x21], rcx
jbe 0x1800a564f
lea rax, [rbp - 0x31]
cmp qword [rbp - 0x19], 0x10
cmovae rax, qword [rbp - 0x31]
mov byte [rcx + rax], dl
inc rcx
cmp rcx, 0xb
jl 0x1800a5232
lea rcx, [rbp - 0x31]
cmp qword [rbp - 0x19], 0x10
cmovae rcx, qword [rbp - 0x31]
call fcn.18005e500
mov rsi, rax
lea rcx, [rbp - 0x31]
call fcn.180014c00
mov dword [rbp - 0x49], 0x27323729
mov dword [rbp - 0x45], 0x206a3036
mov word [rbp - 0x41], 0x2828
mov byte [rbp - 0x3f], 0x44
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
mov qword [rbp - 1], r15
mov qword [rbp + 7], rbx
mov byte [rbp - 0x11], 0
mov dword [rbp + 0x67], 2
xor r8d, r8d
lea edx, [r8 + 0xb]
lea rcx, [rbp - 0x11]
call fcn.180014330
mov rcx, r15
cmp rcx, 0xb
jae 0x1800a5679
movzx edx, byte [rbp + rcx - 0x49]
xor dl, 0x44
cmp qword [rbp - 1], rcx
jbe 0x1800a5673
lea rax, [rbp - 0x11]
cmp qword [rbp + 7], 0x10
cmovae rax, qword [rbp - 0x11]
mov byte [rcx + rax], dl
inc rcx
cmp rcx, 0xb
jl 0x1800a52cc
lea rcx, [rbp - 0x11]
cmp qword [rbp + 7], 0x10
cmovae rcx, qword [rbp - 0x11]
call fcn.18005e500
mov rdi, rax
lea rcx, [rbp - 0x11]
call fcn.180014c00
test rsi, rsi
je 0x1800a55de
test rdi, rdi
je 0x1800a55de
movdqa xmm0, xmmword [0x1801cf450]
movdqu xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x39], 0x56
xorps xmm0, xmm0
movups xmmword [rbp + 0xf], xmm0
mov qword [rbp + 0x1f], r15
mov qword [rbp + 0x27], rbx
mov byte [rbp + 0xf], 0
mov dword [rbp + 0x67], 4
mov byte [rsp + 0x20], 0
mov r9d, reloc.WS2_32.dll_recvfrom
movzx r8d, byte [rbp + 0x67]
mov edx, r9d
lea rcx, [rbp + 0xf]
call fcn.180015110
mov rcx, r15
cmp rcx, 0x11
jae 0x1800a566d
movzx edx, byte [rbp + rcx - 0x49]
xor dl, 0x56
cmp qword [rbp + 0x1f], rcx
jbe 0x1800a5667
lea rax, [rbp + 0xf]
cmp qword [rbp + 0x27], 0x10
cmovae rax, qword [rbp + 0xf]
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 0x11
jl 0x1800a537d
lea rdx, [rbp + 0xf]
cmp qword [rbp + 0x27], 0x10
cmovae rdx, qword [rbp + 0xf]
mov rcx, rsi
call fcn.18005e610
mov qword [0x1805e4948], rax
lea rcx, [rbp + 0xf]
call fcn.180014c00
mov dword [rbp - 0x49], 0x4e4c4b76
mov dword [rbp - 0x45], 0x415d4740
mov dword [rbp - 0x41], 0x4d484c5b
mov word [rbp - 0x3d], 0x514c
mov byte [rbp - 0x3b], 0x29
mov qword [rbp - 0x29], 0
mov qword [rbp - 0x19], rbx
mov byte [rbp - 0x31], 0
mov dword [rbp + 0x67], 8
mov rax, rbx
mov qword [rbp - 0x21], rbx
xor r8d, r8d
mov qword [rbp - 0x31], r8
mov byte [rbp - 0x22], r8b
mov rcx, r15
cmp rcx, 0xf
jae 0x1800a5661
movzx edx, byte [rbp + rcx - 0x49]
xor dl, 0x29
cmp rax, rcx
jbe 0x1800a565b
lea rax, [rbp - 0x31]
cmp rbx, 0x10
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 0xf
jge 0x1800a5461
mov rbx, qword [rbp - 0x19]
mov rax, qword [rbp - 0x21]
mov r8, qword [rbp - 0x31]
jmp 0x1800a5420
lea rdx, [rbp - 0x31]
cmp qword [rbp - 0x19], 0x10
cmovae rdx, qword [rbp - 0x31]
mov rcx, rdi
call fcn.18005e610
mov qword [0x1805e4940], rax
lea rcx, [rbp - 0x31]
call fcn.180014c00
lea rsi, [0x1805e5610]
lea r12, [0x1805e58e0]
nop word [rax + rax]
mov rax, qword [0x1805e4998]
test rax, rax
jne 0x1800a5563
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r14, qword [rax]
mov r11, r14
nop word [rax + rax]
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x1800a5543
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x1800a5543
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
lea rax, [r9 + r8*4]
mov eax, dword [rax + rdi]
add rax, r9
mov edx, 0x41c60513
movzx ecx, byte [rax]
inc rax
test cl, cl
je 0x1800a553e
nop dword [rax]
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [rax]
lea rax, [rax + 1]
test cl, cl
jne 0x1800a5520
cmp edx, 0x5650dc76
je 0x1800a5589
test r8d, r8d
jne 0x1800a5500
mov rax, qword [r11]
mov r11, rax
cmp rax, r14
je 0x1800a5559
cmp qword [rax + 0x30], 0
jne 0x1800a54d0
mov rax, r15
mov qword [0x1805e4998], rax
mov rcx, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x1800a5570
mov rcx, qword [rsi]
call rax
test rax, rax
jne 0x1800a55a2
add rsi, 0x28
cmp rsi, r12
jne 0x1800a54a0
lea ecx, [rax + 9]
jmp 0x1800a55b3
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x1800a555c
mov ecx, dword [rsi + 0x20]
lea eax, [rcx - 7]
cmp eax, 1
jbe 0x1800a55b1
xor al, al
jmp 0x1800a55b3
mov al, 1
mov byte [0x1805e3348], al
cmp ecx, 8
sete byte [0x1805e4e48]
lea rax, [0x1805dd910]
lea rdx, [0x1805ddd00]
cmp dword [rax], ecx
je 0x1800a55fc
add rax, 0x70
cmp rax, rdx
jne 0x1800a55d1
xor al, al
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
movups xmm0, xmmword [rax + 8]
movaps xmmword [0x1805e4da0], xmm0
movups xmm1, xmmword [rax + 0x18]
movaps xmmword [0x1805e4db0], xmm1
movups xmm0, xmmword [rax + 0x28]
movaps xmmword [0x1805e4dc0], xmm0
movups xmm1, xmmword [rax + 0x38]
movaps xmmword [0x1805e4dd0], xmm1
movups xmm0, xmmword [rax + 0x48]
movaps xmmword [0x1805e4de0], xmm0
movups xmm1, xmmword [rax + 0x58]
movaps xmmword [0x1805e4df0], xmm1
movsd xmm0, qword [rax + 0x68]
movsd qword [0x1805e4e00], xmm0
mov al, 1
jmp 0x1800a55e0
call fcn.180014f60
nop
call fcn.180014d90
nop
call fcn.180014f60
int3
call fcn.180014d90
nop
call fcn.180014f60
int3
call fcn.180014d90
nop
call fcn.180014f60
int3
call fcn.180014d90
int3