Function at 0x140004d10
Capabilities:
Contain obfuscated stackstrings
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rbx, rcx
mov ecx, 4
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
mov eax, dword [rcx + rdx]
cmp dword [0x1401df9d8], eax
jle 0x140005046
lea rcx, [0x1401df9d8]
call fcn.1400ccd50
cmp dword [0x1401df9d8], 0xffffffff
jne 0x140005046
mov dword [rbp - 0x30], 0x71136e13
mov dword [rbp - 0x2c], 0x78746e78
mov dword [rbp - 0x28], 0x60706262
mov dword [rbp - 0x24], 0x1a7c7d05
mov dword [rbp - 0x20], 0x787c7879
mov word [rbp - 0x1c], 0xd16f
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x1a], xmm0
mov dword [rbp - 0xa], eax
xor r9d, r9d
movabs r11, 0xd6791f99277ad935
mov r10, r11
lea rax, [rbp - 0x2f]
sub r10, rax
nop word [rax + rax]
lea r8, [rbp - 0x2f]
add r8, r9
lea eax, [r9 + 0x21]
and al, byte [r8 - 1]
mov ecx, 0x1d
sub cl, al
add cl, cl
add cl, byte [r8 - 1]
add cl, r9b
mov byte [r8 - 1], cl
movzx ecx, byte [r8]
lea eax, [r9 + 0x22]
and al, cl
add al, al
sub cl, al
add cl, 0x3b
add cl, r9b
mov byte [r8], cl
lea eax, [r9 + 0x23]
and al, byte [r8 + 1]
mov ecx, 0x1e
sub cl, al
add cl, cl
add cl, byte [r8 + 1]
add cl, r9b
mov byte [r8 + 1], cl
lea ecx, [r9 + 0x24]
and cl, byte [r8 + 2]
add cl, cl
movzx eax, r9b
sub al, cl
add al, 0x3d
add byte [r8 + 2], al
lea eax, [r9 + 0x25]
and al, byte [r8 + 3]
mov ecx, 0x1f
sub cl, al
add cl, cl
add cl, byte [r8 + 3]
add cl, r9b
mov byte [r8 + 3], cl
lea ecx, [r9 + 0x26]
and cl, byte [r8 + 4]
add cl, cl
movzx eax, r9b
sub al, cl
add al, 0x3f
add byte [r8 + 4], al
lea eax, [r9 + 0x27]
and al, byte [r8 + 5]
mov ecx, 0x20
sub cl, al
add cl, cl
add cl, r9b
add byte [r8 + 5], cl
movzx ecx, byte [r8 + 6]
lea eax, [r9 + 0x28]
and al, cl
add al, al
sub cl, al
add cl, 0x41
add cl, r9b
mov byte [r8 + 6], cl
lea eax, [r9 + 0x29]
and al, byte [r8 + 7]
mov ecx, 0x21
sub cl, al
add cl, cl
add cl, byte [r8 + 7]
add cl, r9b
mov byte [r8 + 7], cl
movzx ecx, byte [r8 + 8]
lea eax, [r9 + 0x2a]
and al, cl
add al, al
sub cl, al
add cl, 0x43
add cl, r9b
mov byte [r8 + 8], cl
lea eax, [r9 + 0x2b]
and al, byte [r8 + 9]
mov ecx, 0x22
sub cl, al
add cl, cl
add cl, byte [r8 + 9]
add cl, r9b
mov byte [r8 + 9], cl
movzx ecx, byte [r8 + 0xa]
lea eax, [r9 + 0x2c]
and al, cl
add al, al
sub cl, al
add cl, 0x45
add cl, r9b
mov byte [r8 + 0xa], cl
lea eax, [r9 + 0x2d]
and al, byte [r8 + 0xb]
mov ecx, 0x23
sub cl, al
add cl, cl
add cl, byte [r8 + 0xb]
add cl, r9b
mov byte [r8 + 0xb], cl
movzx ecx, byte [r8 + 0xc]
lea eax, [r9 + 0x2e]
and al, cl
add al, al
sub cl, al
add cl, 0x47
add cl, r9b
mov byte [r8 + 0xc], cl
lea eax, [r9 + 0x2f]
and al, byte [r8 + 0xd]
mov ecx, 0x24
sub cl, al
add cl, cl
add cl, byte [r8 + 0xd]
add cl, r9b
mov byte [r8 + 0xd], cl
movzx ecx, byte [r8 + 0xe]
lea eax, [r9 + 0x30]
and al, cl
add al, al
sub cl, al
add cl, 0x49
add cl, r9b
mov byte [r8 + 0xe], cl
lea eax, [r9 + 0x31]
and al, byte [r8 + 0xf]
mov ecx, 0x25
sub cl, al
add cl, cl
add cl, byte [r8 + 0xf]
add cl, r9b
mov byte [r8 + 0xf], cl
movzx ecx, byte [r8 + 0x10]
lea eax, [r9 + 0x32]
and al, cl
add al, al
sub cl, al
add cl, 0x4b
add cl, r9b
mov byte [r8 + 0x10], cl
lea eax, [r9 + 0x33]
and al, byte [r8 + 0x11]
mov ecx, 0x26
sub cl, al
add cl, cl
add cl, byte [r8 + 0x11]
add cl, r9b
mov byte [r8 + 0x11], cl
movzx ecx, byte [r8 + 0x12]
lea eax, [r9 + 0x34]
and al, cl
add al, al
sub cl, al
add cl, 0x4d
add cl, r9b
mov byte [r8 + 0x12], cl
movzx edx, byte [r8 + 0x13]
lea rax, [r8 + r10]
and rax, rdx
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r11
add rcx, r9
add cl, 0x19
mov byte [r8 + 0x13], cl
add r9, 0x15
cmp r9, 0x2a
jb 0x140004db0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
lea rax, [rbp - 0x30]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140005005
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x50]
call fcn.14000e180
nop
lea r8, [rbp - 0x50]
mov rcx, rbx
call fcn.140005340
mov qword [0x1401df9e0], rax
lea rcx, [rbp - 0x50]
call fcn.14000ac00
nop
lea rcx, [0x1401df9d8]
call fcn.1400ccce4
mov r8, qword [0x1401df9e0]
test r8, r8
jne 0x140005062
xor al, al
mov rbx, qword [rsp + 0x80]
add rsp, 0x70
pop rbp
ret
mov rcx, rbx
mov rbx, qword [rsp + 0x80]
add rsp, 0x70
pop rbp
jmp fcn.14000bb60