Function at 0x140004f80
Capabilities:
Contain obfuscated stackstrings
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push rbx
sub rsp, 0x50
mov rbx, rcx
mov ecx, 4
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
mov eax, dword [rcx + rdx]
cmp dword [0x1401e0948], eax
jle 0x140005045
lea rcx, [0x1401e0948]
call fcn.1400cdba0
cmp dword [0x1401e0948], 0xffffffff
jne 0x140005045
mov dword [rsp + 0x20], 0x6c46654b
mov dword [rsp + 0x24], 0x45687375
mov dword [rsp + 0x28], 0x7269746e
mov dword [rsp + 0x2c], 0x625465
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
lea rax, [rsp + 0x20]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140005000
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x30]
call fcn.14000e820
nop
lea r8, [rsp + 0x30]
mov rcx, rbx
call fcn.140005790
mov qword [0x1401e08c0], rax
lea rcx, [rsp + 0x30]
call fcn.14000b3e0
nop
lea rcx, [0x1401e0948]
call fcn.1400cdb34
mov r8, qword [0x1401e08c0]
test r8, r8
jne 0x140005059
xor al, al
add rsp, 0x50
pop rbx
ret
mov rcx, rbx
add rsp, 0x50
pop rbx
jmp 0x14000bfc0
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
mov rax, qword [0x140127240]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov qword [rbp + 0x1f], r8
mov qword [rbp - 0x29], rcx
test r8, r8
je 0x14000c58f
xor r15d, r15d
mov r14d, 0xf7d723d7
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r11, qword [rax + 0x30]
test r11, r11
je 0x14000c1f8
cmp word [rax + 0x48], 0
je 0x14000c1f8
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test r15d, r15d
je 0x14000c0a3
psrldq xmm0, 8
movq r9, xmm0
movzx ecx, cx
shr rcx, 1
lea rbx, [r9 + rcx*2]
mov r10d, 0x91faaf65
cmp r9, rbx
je 0x14000c09a
nop dword [rax + rax]
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
add r9, 2
cmp r9, rbx
jne 0x14000c070
cmp r10d, r15d
jne 0x14000c1f8
movsxd rcx, dword [r11 + 0x3c]
mov rdx, qword [rcx + r11 + 0x88]
mov r13, rdx
shr r13, 0x20
mov esi, edx
add rsi, r11
cmp rsi, r11
je 0x14000c1f8
mov edi, dword [rsi + 0x18]
test edi, edi
je 0x14000c1f8
mov r8d, dword [rsi + 0x1c]
add r8, r11
mov qword [rbp - 0x21], r8
mov ecx, dword [rsi + 0x24]
add rcx, r11
mov qword [rbp - 0x19], rcx
mov r9d, dword [rsi + 0x20]
nop dword [rax + rax]
dec edi
movzx ecx, word [rcx + rdi*2]
mov ebx, dword [r8 + rcx*4]
add rbx, r11
lea rcx, [r9 + rdi*4]
mov r9d, dword [rcx + r11]
add r9, r11
cmp rbx, rsi
jbe 0x14000c11b
lea rcx, [rsi + r13]
cmp rbx, rcx
jae 0x14000c11b
mov r12b, 1
jmp 0x14000c11e
xor r12b, r12b
mov r10d, 0x91faaf65
movzx ecx, byte [r9]
inc r9
test cl, cl
je 0x14000c15e
nop
movsx edx, cl
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
movzx ecx, byte [r9]
lea r9, [r9 + 1]
test cl, cl
jne 0x14000c130
mov r8, qword [rbp - 0x21]
cmp r10d, r14d
je 0x14000c177
test edi, edi
mov rcx, qword [rbp - 0x19]
mov r9d, dword [rsi + 0x20]
jne 0x14000c0f0
mov rax, qword [rax]
jmp 0x14000c020
test r12b, r12b
je 0x14000c200
mov r15d, 0x91faaf65
mov r14d, r15d
movzx edx, byte [rbx]
cmp dl, 0x2e
je 0x14000c1b7
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r15d
imul r15d, ecx, 0x1000193
inc rbx
movzx edx, byte [rbx]
cmp dl, 0x2e
jne 0x14000c191
inc rbx
movzx edx, byte [rbx]
test dl, dl
je 0x14000c1e7
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r14d
imul r14d, ecx, 0x1000193
lea rbx, [rbx + 1]
movzx edx, byte [rbx]
test dl, dl
jne 0x14000c1c1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14000c020
test rbx, rbx
je 0x14000c58f
mov word [rbp + 0xf], 0xb848
mov word [rbp + 0x19], 0xe0ff
mov rax, qword [rbp + 0x1f]
mov qword [rbp + 0x11], rax
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1401e0928], eax
jle 0x14000c517
lea rcx, [0x1401e0928]
call fcn.1400cdba0
cmp dword [0x1401e0928], 0xffffffff
jne 0x14000c517
mov al, 0xd4
mov dl, 0xf9
mov r8b, 0xab
mov r9b, 0xcf
mov r10b, 0xce
mov r11b, 0xae
mov dil, 0xfc
mov sil, 0xfe
mov r14b, 0xfd
mov r15b, WSAGetLastError
xorps xmm0, xmm0
xor r12d, r12d
movups xmmword [rbp - 0x3f], xmm0
mov word [rbp - 0x2f], r12w
movzx ecx, al
movzx eax, cl
and al, 0x91
add al, al
sub cl, al
sub cl, 0x66
mov byte [rbp - 0x49], cl
movzx ecx, dl
movzx eax, cl
and al, 0x92
add al, al
sub cl, al
sub cl, 0x65
mov byte [rbp - 0x48], cl
movzx ecx, r8b
movzx eax, cl
and al, 0x93
add al, al
sub cl, al
sub cl, 0x64
mov byte [rbp - 0x47], cl
movzx ecx, r9b
movzx eax, cl
and al, 0x94
add al, al
sub cl, al
sub cl, 0x63
mov byte [rbp - 0x46], cl
movzx ecx, r10b
movzx eax, cl
and al, 0x95
add al, al
sub cl, al
sub cl, 0x62
mov byte [rbp - 0x45], cl
movzx ecx, r11b
movzx eax, cl
and al, 0x96
add al, al
sub cl, al
sub cl, 0x61
mov byte [rbp - 0x44], cl
movzx ecx, dil
movzx eax, cl
and al, 0x97
add al, al
sub cl, al
sub cl, 0x60
mov byte [rbp - 0x43], cl
movzx ecx, sil
movzx eax, cl
and al, 0x98
add al, al
sub cl, al
sub cl, 0x5f
mov byte [rbp - 0x42], cl
movzx ecx, r14b
movzx eax, cl
and al, 0x99
add al, al
sub cl, al
sub cl, 0x5e
mov byte [rbp - 0x41], cl
movzx ecx, r15b
movzx eax, cl
and al, 0x9a
add al, al
sub cl, al
sub cl, 0x5d
mov byte [rbp - 0x40], cl
movd eax, xmm0
movzx ecx, al
movzx eax, cl
and al, 0x9b
add al, al
sub cl, al
sub cl, 0x5c
mov byte [rbp - 0x3f], cl
movzx ecx, byte [rbp - 0x3e]
movzx eax, cl
and al, 0x9c
add al, al
sub cl, al
sub cl, 0x5b
mov byte [rbp - 0x3e], cl
movzx ecx, byte [rbp - 0x3d]
movzx eax, cl
and al, 0x9d
add al, al
sub cl, al
sub cl, 0x5a
mov byte [rbp - 0x3d], cl
movzx ecx, byte [rbp - 0x3c]
movzx eax, cl
and al, 0x9e
add al, al
sub cl, al
sub cl, 0x59
mov byte [rbp - 0x3c], cl
movzx ecx, byte [rbp - 0x3b]
movzx eax, cl
and al, 0x9f
add al, al
sub cl, al
sub cl, 0x58
mov byte [rbp - 0x3b], cl
movzx ecx, byte [rbp - 0x3a]
movzx eax, cl
and al, 0xa0
add al, al
sub cl, al
sub cl, 0x57
mov byte [rbp - 0x3a], cl
movzx ecx, byte [rbp - 0x39]
movzx eax, cl
and al, 0xa1
add al, al
sub cl, al
sub cl, 0x56
mov byte [rbp - 0x39], cl
movzx ecx, byte [rbp - 0x38]
movzx eax, cl
and al, 0xa2
add al, al
sub cl, al
sub cl, 0x55
mov byte [rbp - 0x38], cl
movzx ecx, byte [rbp - 0x37]
movzx eax, cl
and al, 0xa3
add al, al
sub cl, al
sub cl, 0x54
mov byte [rbp - 0x37], cl
movzx ecx, byte [rbp - 0x36]
movzx eax, cl
and al, 0xa4
add al, al
sub cl, al
sub cl, 0x53
mov byte [rbp - 0x36], cl
movzx ecx, byte [rbp - 0x35]
movzx eax, cl
and al, 0xa5
add al, al
sub cl, al
sub cl, 0x52
mov byte [rbp - 0x35], cl
movzx ecx, byte [rbp - 0x34]
movzx eax, cl
and al, 0xa6
add al, al
sub cl, al
sub cl, 0x51
mov byte [rbp - 0x34], cl
movzx ecx, byte [rbp - 0x33]
movzx eax, cl
and al, 0xa7
add al, al
sub cl, al
sub cl, 0x50
mov byte [rbp - 0x33], cl
movzx ecx, byte [rbp - 0x32]
movzx eax, cl
and al, 0xa8
add al, al
sub cl, al
sub cl, 0x4f
mov byte [rbp - 0x32], cl
movzx ecx, byte [rbp - 0x31]
movzx eax, cl
and al, 0xa9
add al, al
sub cl, al
sub cl, 0x4e
mov byte [rbp - 0x31], cl
movzx ecx, byte [rbp - 0x30]
movzx eax, cl
and al, 0xaa
add al, al
sub cl, al
sub cl, 0x4d
mov byte [rbp - 0x30], cl
movzx ecx, r12b
movzx eax, cl
and al, r8b
add al, al
sub cl, al
sub cl, 0x4c
mov byte [rbp - 0x2f], cl
movzx ecx, byte [rbp - 0x2e]
movzx eax, cl
and al, 0xac
add al, al
sub cl, al
sub cl, 0x4b
mov byte [rbp - 0x2e], cl
movzx ecx, r12b
mov eax, ecx
movabs rdx, 0xe347aa7058d1faad
and rax, rdx
imul rax, rax, 0xfffffffffffffffe
add rax, rdx
add rcx, rax
add cl, 9
mov byte [rbp - 0x2d], cl
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x49]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r12b
jne 0x14000c4d1
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x11]
call fcn.14000e820
nop
lea r8, [rbp - 0x11]
mov rdi, qword [rbp - 0x29]
mov rcx, rdi
call fcn.140005790
mov qword [0x1401e08d0], rax
lea rcx, [rbp - 0x11]
call fcn.14000b3e0
nop
lea rcx, [0x1401e0928]
call fcn.1400cdb34
jmp 0x14000c51b
mov rdi, qword [rbp - 0x29]
mov r8, qword [0x1401e08d0]
test r8, r8
je 0x14000c58f
mov r9d, recvfrom
lea rdx, [rbp + 0x1f]
mov rcx, rdi
call fcn.140004bb0
test al, al
je 0x14000c58f
movzx eax, byte [rbp + 0xf]
cmp byte [rbp + 0x1f], al
jne 0x14000c561
movzx eax, byte [rbp + 0x10]
cmp byte [rbp + 0x20], al
jne 0x14000c561
movzx eax, byte [rbp + 0x19]
cmp byte [rbp + 0x29], al
jne 0x14000c561
movzx eax, byte [rbp + 0x1a]
cmp byte [rbp + 0x2a], al
je 0x14000c58f
lea r8, [rbp + 0xf]
mov rdx, qword [0x1401e08d0]
mov rcx, rdi
call fcn.140004c60
test al, al
je 0x14000c58f
call rbx
lea r8, [rbp + 0x1f]
mov rdx, qword [0x1401e08d0]
mov rcx, rdi
call fcn.140004c60
jmp 0x14000c591
xor al, al
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1400cdad0
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret