Function at 0x1800541e0
Capabilities:
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
mov qword [r11 + 0x20], rbx
mov qword [r11 + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rcx, qword [0x1800b2cd8]
mov rax, qword [rcx + 0x18]
mov qword [r11 + 0x10], rax
mov rax, qword [rcx + 0x20]
mov qword [r11 + 0x18], rax
mov rbp, qword [rcx + 0x28]
mov ecx, dword [0x1800b3c94]
mov rax, qword gs:[0x58]
mov edx, 4
mov r14, qword [rax + rcx*8]
add r14, rdx
movabs r13, 0xcbf29ce484222325
movabs r12, 0x100000001b3
mov eax, dword [r14]
cmp dword [0x1800b6470], eax
jle 0x1800542aa
lea rcx, [0x1800b6470]
call fcn.18005ee18
cmp dword [0x1800b6470], 0xffffffff
jne 0x1800542aa
mov r8, qword [rsp + 0x78]
test r8, r8
je 0x180054295
mov rax, qword [0x1800b4f20]
mov r8, qword [rax + r8 + 0x18]
mov rdx, r13
nop dword [rax]
movsx rcx, byte [r8]
lea r8, [r8 + 1]
xor rdx, rcx
imul rdx, r12
test cl, cl
jne 0x180054280
jmp 0x180054297
xor edx, edx
mov qword [0x1800b6468], rdx
lea rcx, [0x1800b6470]
call fcn.18005edac
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x28], rax
xor r9d, r9d
lea r8, [rsp + 0x70]
xor edx, edx
lea rcx, [0x1800b5028]
call qword [sym.imp.KERNEL32.dll_InitOnceBeginInitialize]
test eax, eax
je 0x18005478a
cmp dword [rsp + 0x70], 0
je 0x18005430b
lea rcx, [rsp + 0x20]
call fcn.180054790
xor r8d, r8d
xor edx, edx
lea rcx, [0x1800b5028]
call qword [sym.imp.KERNEL32.dll_InitOnceComplete]
test eax, eax
je 0x180054784
xor ebx, ebx
mov r10, qword [rsp + 0x80]
cmp dword [r10 + 0x10], ebx
jbe 0x180054406
movabs rsi, 0xf984545cfa78101f
movabs r15, 0x2d0a42b1a4f18a79
nop dword [rax]
nop word [rax + rax]
mov rax, qword [r10 + 8]
mov rdi, qword [rax + rbx*8]
mov r9, qword [0x1800b4f20]
add r9, rdi
mov r11, qword [r9]
cmp r11, qword [r9 + 8]
je 0x1800543fa
mov r8, qword [r9 + 0x18]
mov rax, r13
nop word [rax + rax]
movsx rdx, byte [r8]
lea r8, [r8 + 1]
xor rax, rdx
imul rax, r12
test dl, dl
jne 0x180054370
cmp rax, rsi
je 0x1800543fa
cmp rax, r15
je 0x1800543fa
mov eax, dword [r9 + 0x38]
cmp dword [r11 + 0x20], eax
je 0x1800543fa
mov dword [r11 + 0x20], eax
add rdi, qword [0x1800b4f20]
mov eax, dword [r14]
cmp dword [0x1800b64e0], eax
jle 0x1800543e6
lea rcx, [0x1800b64e0]
call fcn.18005ee18
cmp dword [0x1800b64e0], 0xffffffff
jne 0x1800543e6
mov rax, qword [0x1800b2cd8]
mov rdx, qword [rax]
add rdx, qword [0x1800b5038]
mov qword [0x1800b64d8], rdx
lea rcx, [0x1800b64e0]
call fcn.18005edac
mov dl, 1
mov rcx, rdi
call qword [0x1800b64d8]
nop
mov r10, qword [rsp + 0x80]
inc ebx
cmp ebx, dword [r10 + 0x10]
jb 0x180054340
xor esi, esi
cmp dword [rbp + 0x10], esi
jbe 0x18005476c
movabs r15, 0xdb76082138fdee7f
movabs r13, 0xfca7b000ade2abcb
mov rax, qword [rbp + 8]
mov rdi, qword [rax + rsi*8]
mov rax, qword [rdi]
mov rdx, qword [rax + 0x718]
mov rcx, rdi
call rdx
nop
test al, al
je 0x1800544a4
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x18005448c
cmp dword [rax + 0x3c], 0xc8
jne 0x18005448c
mov rax, qword [0x1800b2cc8]
mov ecx, dword [rax + 0x14]
lea ecx, [rcx*2 + 1]
cmp ecx, 0xffffffff
je 0x180054761
mov rdx, qword [0x1800b4f20]
add rdx, rdi
cmp dword [rdx + 0x38], ecx
je 0x180054761
mov dword [rdx + 0x38], ecx
mov rcx, rdx
jmp 0x18005475c
mov rax, qword [0x1800b2cc8]
mov edx, dword [rax + 0x14]
add edx, edx
mov rcx, qword [0x1800b4f20]
jmp 0x180054751
mov rax, qword [0x1800b4f20]
mov rdx, qword [rax + rdi + 0x18]
movabs rbx, 0xcbf29ce484222325
nop word [rax + rax]
movsx rcx, byte [rdx]
lea rdx, [rdx + 1]
xor rbx, rcx
imul rbx, r12
test cl, cl
jne 0x1800544c0
mov eax, dword [r14]
cmp dword [0x1800b64c8], eax
jle 0x180054517
lea rcx, [0x1800b64c8]
call fcn.18005ee18
cmp dword [0x1800b64c8], 0xffffffff
jne 0x180054517
mov rax, qword [0x1800b2cd8]
mov rcx, qword [rax]
add rcx, qword [0x1800b5048]
mov qword [0x1800b64c0], rcx
lea rcx, [0x1800b64c8]
call fcn.18005edac
mov rcx, rdi
call qword [0x1800b64c0]
mov r8, rax
test rax, rax
je 0x180054683
movabs rax, 0x37d1bfa7d195ebf9
cmp rbx, rax
je 0x1800545d3
movabs rax, 0x92fe97d6caa88c20
cmp rbx, rax
je 0x1800545d3
movabs rax, 0xa854d43ddb55ddcc
cmp rbx, rax
je 0x1800545d3
movabs rax, 0xb8f3ad4931029355
cmp rbx, rax
je 0x1800545d3
movabs rax, 0xaedcd71796ade290
cmp rbx, rax
je 0x1800545d3
cmp rbx, r15
je 0x1800545d3
movabs rax, 0xf17870527758213f
cmp rbx, rax
je 0x180054761
movabs rax, 0x8499db0ed7bb81cf
cmp rbx, rax
je 0x180054761
mov rcx, qword [0x1800b4f20]
mov eax, dword [rcx + r8 + 0x38]
cmp eax, 0xffffffff
je 0x180054761
add rcx, rdi
cmp dword [rcx + 0x38], eax
je 0x180054761
mov dword [rcx + 0x38], eax
jmp 0x18005475c
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x1800545e6
cmp r8, rax
jne 0x180054761
cmp rbx, r15
jne 0x180054664
movabs rax, 0x222b948fbf568318
cmp qword [0x1800b6468], rax
jne 0x180054644
mov rax, qword [0x1800b4f20]
mov r8d, dword [rax + r8 + 0x38]
cmp r8d, 0xffffffff
je 0x180054761
lea rcx, [rax + rdi]
cmp dword [rcx + 0x38], r8d
je 0x180054761
mov dword [rcx + 0x38], r8d
mov rax, qword [rcx]
cmp rax, qword [rcx + 8]
je 0x180054633
mov qword [rcx + 8], rax
lea rdx, str.Yone
call fcn.18005a020
jmp 0x180054761
mov rcx, qword [0x1800b4f20]
add rcx, rdi
cmp dword [rcx + 0x38], 0
je 0x180054761
mov dword [rcx + 0x38], 0
jmp 0x18005475c
mov rax, qword [0x1800b2cc8]
mov edx, dword [rax + 0x1c]
cmp edx, 0xffffffff
je 0x180054761
mov rcx, qword [0x1800b4f20]
jmp 0x180054751
mov rax, qword [0x1800b2cc8]
mov rdx, qword [rax + 0x48]
mov rax, qword [rdx + 8]
mov rcx, rdx
cmp byte [rax + 0x19], 0
jne 0x1800546b8
nop dword [rax + rax]
cmp qword [rax + 0x20], rbx
jae 0x1800546ac
mov rax, qword [rax + 0x10]
jmp 0x1800546b2
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x1800546a0
cmp byte [rcx + 0x19], 0
jne 0x1800546dc
cmp rbx, qword [rcx + 0x20]
jb 0x1800546dc
cmp rcx, rdx
je 0x1800546dc
mov eax, dword [rcx + 0x28]
test eax, eax
je 0x1800546dc
lea edx, [rax - 1]
mov rcx, qword [0x1800b4f20]
jmp 0x180054751
movabs rax, 0x1ecf7680ae6d72bd
cmp rbx, rax
jne 0x1800546f6
cmp qword [0x1800b6468], r13
je 0x18005473c
jmp 0x180054761
movabs rax, 0xfcb981acde90c192
cmp rbx, rax
jne 0x18005471a
movabs rax, 0x6972baf895e90386
cmp qword [0x1800b6468], rax
je 0x18005473c
jmp 0x180054761
movabs rax, 0xfc61c19e80fc9d68
cmp rbx, rax
jne 0x180054761
movabs rax, 0xf01bf70c1ff22b66
cmp qword [0x1800b6468], rax
jne 0x180054761
mov rcx, qword [0x1800b4f20]
mov rax, qword [rsp + 0x78]
mov edx, dword [rcx + rax + 0x38]
cmp edx, 0xffffffff
je 0x180054761
add rcx, rdi
cmp dword [rcx + 0x38], edx
je 0x180054761
mov dword [rcx + 0x38], edx
call fcn.18005a110
inc esi
cmp esi, dword [rbp + 0x10]
jb 0x180054425
mov rbx, qword [rsp + 0x88]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18005e320
int3
call fcn.18007109c
int3