Function at 0x180017f90
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov r15, r8
mov r12, rcx
xor edi, edi
mov dword [rbp + 0x48], edi
test r8, r8
je 0x180018270
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x20], dil
lea r8d, [rdi + 0x1a]
lea rdx, str.MmAllocateIndependentPages
lea rcx, [rbp - 0x20]
call fcn.1800052d0
nop
mov ebx, 1
mov dword [rbp + 0x48], ebx
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rdx, qword [rbp - 0x20]
movabs rsi, 0xcbf29ce484222325
mov r9, rsi
mov ecx, edi
movabs r13, 0x100000001b3
mov r8, qword [rbp - 0x10]
test r8, r8
je 0x180018033
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r13
inc rcx
cmp rcx, r8
jb 0x180018020
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x50]
call fcn.18001a570
cmp qword [rax + 8], 0
je 0x1800180bc
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x40], 0
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.MmSetPageProtection
lea rcx, [rbp - 0x40]
call fcn.1800052d0
mov ebx, 3
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae rdx, qword [rbp - 0x40]
mov r9, rsi
mov rcx, rdi
mov r8, qword [rbp - 0x30]
test r8, r8
je 0x1800180a3
nop
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r13
inc rcx
cmp rcx, r8
jb 0x180018090
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x50]
call fcn.18001a570
cmp qword [rax + 8], 0
je 0x1800180bc
mov r14b, 1
jmp 0x1800180bf
xor r14b, r14b
test bl, 2
je 0x1800180d1
and ebx, 0xfffffffd
lea rcx, [rbp - 0x40]
call fcn.180005250
nop
test bl, 1
je 0x1800180df
lea rcx, [rbp - 0x20]
call fcn.180005250
test r14b, r14b
je 0x180018270
mov qword [rbp + 0x50], rdi
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x20], 0
mov r8d, reloc.WS2_32.dll_inet_ntoa
lea rdx, str.ntoskrnl.exe
lea rcx, [rbp - 0x20]
call fcn.1800052d0
nop
lea rcx, [rbp - 0x20]
call fcn.18001d100
mov r14, rax
lea rcx, [rbp - 0x20]
call fcn.180005250
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x20], 0
mov r8d, 0x1a
lea rdx, str.MmAllocateIndependentPages
lea rcx, [rbp - 0x20]
call fcn.1800052d0
nop
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rdx, qword [rbp - 0x20]
mov r9, rsi
mov rcx, rdi
mov r8, qword [rbp - 0x10]
test r8, r8
je 0x180018183
nop dword [rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r13
inc rcx
cmp rcx, r8
jb 0x180018170
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x50]
call fcn.18001a570
mov rax, qword [rbp - 0x48]
test rax, rax
je 0x18001828d
mov r8, qword [rax + 0x30]
add r8, r14
mov r9, r15
lea rdx, [rbp + 0x50]
mov rcx, r12
call fcn.180019230
movzx ebx, al
lea rcx, [rbp - 0x20]
call fcn.180005250
test bl, bl
je 0x180018270
mov byte [rbp + 0x48], 0
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x20], 0
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.MmSetPageProtection
lea rcx, [rbp - 0x20]
call fcn.1800052d0
nop
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
mov rdx, qword [rbp - 0x10]
test rdx, rdx
je 0x180018223
nop dword [rax]
movzx eax, byte [rdi + rcx]
xor rsi, rax
imul rsi, r13
inc rdi
cmp rdi, rdx
jb 0x180018210
mov r9, rsi
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x50]
call fcn.18001a570
mov rax, qword [rbp - 0x48]
test rax, rax
je 0x18001829a
mov r8, qword [rax + 0x30]
add r8, r14
mov qword [rsp + 0x20], r15
mov rdi, qword [rbp + 0x50]
mov r9, rdi
lea rdx, [rbp + 0x48]
mov rcx, r12
call fcn.1800198a0
movzx ebx, al
lea rcx, [rbp - 0x20]
call fcn.180005250
test bl, bl
je 0x180018270
mov rax, rdi
jmp 0x180018272
xor eax, eax
mov rbx, qword [rsp + 0xc0]
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rcx, str.invalid_unordered_map_K__T__key
call fcn.1800777d4
nop
lea rcx, str.invalid_unordered_map_K__T__key
call fcn.1800777d4
int3