Function at 0x1401ee440
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x50
mov rsi, rdx
mov rdi, rcx
mov rax, qword [0x1404fe040]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov eax, dword [rcx + 0x20]
test r8d, 0x180
je 0x1401ee557
bt eax, 0xb
mov rdi, qword [rdi + 0x18]
jae 0x1401ee8af
mov rbx, qword [0x140510dd0]
cmp qword [0x140510dc8], 0
jne 0x1401ee499
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor rbx, rdi
cmp qword [rsi + 0x10], 0
jne 0x1401ee874
lea rax, [rsp + 0x3a]
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rax + 6], rcx
mov qword [rax], rcx
mov byte [rax - 1], 0x40
lea rcx, [rsp + 0x39]
cmp rbx, 0x80
jae 0x1401ee531
mov r14, rcx
mov byte [rax], bl
sub r14, rcx
add r14, 2
mov rdi, qword [rsi]
mov r8d, r14d
mov rcx, qword [rdi + 0x18]
lea rbx, [rcx + r8]
cmp rbx, qword [rdi + 0x10]
ja 0x1401ee841
test r8, r8
je 0x1401ee502
lea rdx, [rsp + 0x39]
call fcn.1402d2020
mov qword [rdi + 0x18], rbx
add dword [rsi + 0x20], r14d
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
cmp rcx, qword [0x1404fe040]
je 0x1401ee521
call fcn.140297b50
int3
add rsp, 0x50
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rdx, rbx
mov r8d, edx
or r8b, 0x80
mov byte [rax], r8b
shr rbx, 7
inc rax
cmp rdx, 0x3fff
ja 0x1401ee531
lea r14, [rax - 1]
jmp 0x1401ee4d2
and eax, 0x1802
mov rcx, qword [rdi]
mov rbx, qword [rdi + 0x18]
test rcx, rcx
setne dl
cmp eax, 0x1000
setne r8b
and r8b, dl
cmp r8b, 1
jne 0x1401ee65a
movabs rdx, 0x100000001b3
mov r12d, ebx
shr r12d, 8
mov r14d, ebx
shr r14d, 0x10
mov r15d, ebx
shr r15d, 0x18
mov r11, rbx
shr r11, 0x20
mov r10, rbx
shr r10, 0x28
mov r8, rbx
shr r8, 0x30
mov r9, rbx
shr r9, 0x38
and rbx, 0xff
movabs r13, 0xcbf29ce484222325
xor r13, rbx
imul r13, rdx
and r12d, 0xff
xor r12, r13
imul r12, rdx
and r14d, 0xff
xor r14, r12
imul r14, rdx
xor r14, r15
imul r14, rdx
and r11, 0xff
xor r11, r14
imul r11, rdx
and r10, 0xff
xor r10, r11
imul r10, rdx
and r8, 0xff
xor r8, r10
imul r8, rdx
xor r8, r9
imul r8, rdx
mov r9b, byte [rcx]
test r9b, r9b
je 0x1401ee88e
inc rcx
nop word cs:[rax + rax]
movzx ebx, r9b
xor rbx, r8
imul rbx, rdx
movzx r9d, byte [rcx]
inc rcx
mov r8, rbx
test r9b, r9b
jne 0x1401ee640
cmp eax, 0x800
jne 0x1401ee7de
cmp qword [rsi + 0x10], 0
jne 0x1401ee881
lea rax, [rsp + 0x3a]
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rax + 6], rcx
mov qword [rax], rcx
mov byte [rax - 1], 0x50
lea rcx, [rsp + 0x39]
cmp rbx, 0x80
jae 0x1401ee779
mov r14, rcx
mov byte [rax], bl
sub r14, rcx
add r14, 2
mov rbx, qword [rsi]
mov r8d, r14d
mov rcx, qword [rbx + 0x18]
lea r15, [rcx + r8]
cmp r15, qword [rbx + 0x10]
ja 0x1401ee853
test r8, r8
je 0x1401ee6cf
lea rdx, [rsp + 0x39]
call fcn.1402d2020
mov qword [rbx + 0x18], r15
add dword [rsi + 0x20], r14d
mov rdi, qword [rdi]
test rdi, rdi
je 0x1401ee50a
movabs r12, 0x7ffffffffffffff7
mov rcx, rdi
call fcn.1402b7c90
cmp rax, r12
ja 0x1401ee8a5
mov r14, rax
lea rbx, [rsp + 0x20]
cmp rax, 0x16
ja 0x1401ee79f
mov byte [rsp + 0x37], r14b
mov rcx, rbx
lea r15, [rcx + r14]
cmp rdi, rcx
setb al
cmp rdi, r15
setae dl
or dl, al
je 0x1401ee8a3
test r14, r14
je 0x1401ee740
mov rdx, rdi
mov r8, r14
call fcn.1402d2020
mov byte [r15], 0
movsx r9, byte [rsp + 0x37]
test r9, r9
cmovs r9, qword [rsp + 0x28]
cmovs rbx, qword [rsp + 0x20]
mov rcx, rsi
mov edx, 7
mov r8, rbx
call fcn.1401e70a0
cmp byte [rsp + 0x37], 0
jns 0x1401ee50a
jmp 0x1401ee865
mov rdx, rbx
mov r8d, edx
or r8b, 0x80
mov byte [rax], r8b
shr rbx, 7
inc rax
cmp rdx, 0x3fff
ja 0x1401ee779
lea r14, [rax - 1]
jmp 0x1401ee69f
mov rax, r14
or rax, 7
lea rcx, [rax + 1]
cmp rax, 0x17
mov r15d, 0x19
cmovne r15, rcx
mov rcx, r15
call fcn.1402965cc
mov rcx, rax
mov qword [rsp + 0x20], rax
add r12, 9
or r12, r15
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r14
jmp 0x1401ee718
cmp eax, 2
jne 0x1401ee8db
cmp qword [rsi + 0x10], 0
jne 0x1401ee896
lea rax, [rsp + 0x3a]
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rax + 6], rcx
mov qword [rax], rcx
mov byte [rax - 1], 0x30
lea rcx, [rsp + 0x39]
cmp rbx, 0x80
jb 0x1401ee69c
mov rdx, rbx
mov r8d, edx
or r8b, 0x80
mov byte [rax], r8b
shr rbx, 7
inc rax
cmp rdx, 0x3fff
jbe 0x1401ee796
jmp 0x1401ee81e
lea rdx, [rsp + 0x39]
mov rcx, rdi
call fcn.1401e7ff0
jmp 0x1401ee506
lea rdx, [rsp + 0x39]
mov rcx, rbx
call fcn.1401e7ff0
jmp 0x1401ee6d3
mov rcx, qword [rsp + 0x20]
call fcn.140296608
jmp 0x1401ee50a
mov rcx, rsi
call fcn.1401e7220
jmp 0x1401ee4a7
mov rcx, rsi
call fcn.1401e7220
jmp 0x1401ee670
mov rbx, r8
jmp 0x1401ee65a
mov rcx, rsi
call fcn.1401e7220
jmp 0x1401ee7f2
ud2
lea rcx, [rsp + 0x20]
call fcn.1402d34d0
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.140297b50
mov rcx, rsi
mov edx, 8
mov r8, rdi
add rsp, 0x50
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp fcn.1401ed6d0
cmp eax, 0x1000
jne 0x1401ee6d7
mov rcx, rsi
mov edx, ntohl
mov r8, rbx
call fcn.1401ed6d0
jmp 0x1401ee6d7