Function at 0x1800544a0
Capabilities:
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
mov qword [r11 + 0x20], rbx
mov qword [r11 + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rcx, qword [0x1800b2d38]
mov rax, qword [rcx + 0x18]
mov qword [r11 + 0x10], rax
mov rax, qword [rcx + 0x20]
mov qword [r11 + 0x18], rax
mov rbp, qword [rcx + 0x28]
mov ecx, dword [0x1800b3c54]
mov rax, qword gs:[0x58]
mov edx, 4
mov r14, qword [rax + rcx*8]
add r14, rdx
movabs r13, 0xcbf29ce484222325
movabs r12, 0x100000001b3
mov eax, dword [r14]
cmp dword [0x1800b6430], eax
jle 0x18005456a
lea rcx, [0x1800b6430]
call fcn.18005f080
cmp dword [0x1800b6430], 0xffffffff
jne 0x18005456a
mov r8, qword [rsp + 0x78]
test r8, r8
je 0x180054555
mov rax, qword [0x1800b4ee0]
mov r8, qword [rax + r8 + 0x18]
mov rdx, r13
nop dword [rax]
movsx rcx, byte [r8]
lea r8, [r8 + 1]
xor rdx, rcx
imul rdx, r12
test cl, cl
jne 0x180054540
jmp 0x180054557
xor edx, edx
mov qword [0x1800b6428], rdx
lea rcx, [0x1800b6430]
call fcn.18005f014
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x28], rax
xor r9d, r9d
lea r8, [rsp + 0x70]
xor edx, edx
lea rcx, [0x1800b4fe8]
call qword [sym.imp.KERNEL32.dll_InitOnceBeginInitialize]
test eax, eax
je 0x180054a4a
cmp dword [rsp + 0x70], 0
je 0x1800545cb
lea rcx, [rsp + 0x20]
call fcn.180054a50
xor r8d, r8d
xor edx, edx
lea rcx, [0x1800b4fe8]
call qword [sym.imp.KERNEL32.dll_InitOnceComplete]
test eax, eax
je 0x180054a44
xor ebx, ebx
mov r10, qword [rsp + 0x80]
cmp dword [r10 + 0x10], ebx
jbe 0x1800546c6
movabs rsi, 0xf984545cfa78101f
movabs r15, 0x2d0a42b1a4f18a79
nop dword [rax]
nop word [rax + rax]
mov rax, qword [r10 + 8]
mov rdi, qword [rax + rbx*8]
mov r9, qword [0x1800b4ee0]
add r9, rdi
mov r11, qword [r9]
cmp r11, qword [r9 + 8]
je 0x1800546ba
mov r8, qword [r9 + 0x18]
mov rax, r13
nop word [rax + rax]
movsx rdx, byte [r8]
lea r8, [r8 + 1]
xor rax, rdx
imul rax, r12
test dl, dl
jne 0x180054630
cmp rax, rsi
je 0x1800546ba
cmp rax, r15
je 0x1800546ba
mov eax, dword [r9 + 0x38]
cmp dword [r11 + 0x20], eax
je 0x1800546ba
mov dword [r11 + 0x20], eax
add rdi, qword [0x1800b4ee0]
mov eax, dword [r14]
cmp dword [0x1800b64a0], eax
jle 0x1800546a6
lea rcx, [0x1800b64a0]
call fcn.18005f080
cmp dword [0x1800b64a0], 0xffffffff
jne 0x1800546a6
mov rax, qword [0x1800b2d38]
mov rdx, qword [rax]
add rdx, qword [0x1800b4ff8]
mov qword [0x1800b6498], rdx
lea rcx, [0x1800b64a0]
call fcn.18005f014
mov dl, 1
mov rcx, rdi
call qword [0x1800b6498]
nop
mov r10, qword [rsp + 0x80]
inc ebx
cmp ebx, dword [r10 + 0x10]
jb 0x180054600
xor esi, esi
cmp dword [rbp + 0x10], esi
jbe 0x180054a2c
movabs r15, 0xdb76082138fdee7f
movabs r13, 0xfca7b000ade2abcb
mov rax, qword [rbp + 8]
mov rdi, qword [rax + rsi*8]
mov rax, qword [rdi]
mov rdx, qword [rax + 0x718]
mov rcx, rdi
call rdx
nop
test al, al
je 0x180054764
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x18005474c
cmp dword [rax + 0x3c], 0xc8
jne 0x18005474c
mov rax, qword [0x1800b2d28]
mov ecx, dword [rax + 0x14]
lea ecx, [rcx*2 + 1]
cmp ecx, 0xffffffff
je 0x180054a21
mov rdx, qword [0x1800b4ee0]
add rdx, rdi
cmp dword [rdx + 0x38], ecx
je 0x180054a21
mov dword [rdx + 0x38], ecx
mov rcx, rdx
jmp 0x180054a1c
mov rax, qword [0x1800b2d28]
mov edx, dword [rax + 0x14]
add edx, edx
mov rcx, qword [0x1800b4ee0]
jmp 0x180054a11
mov rax, qword [0x1800b4ee0]
mov rdx, qword [rax + rdi + 0x18]
movabs rbx, 0xcbf29ce484222325
nop word [rax + rax]
movsx rcx, byte [rdx]
lea rdx, [rdx + 1]
xor rbx, rcx
imul rbx, r12
test cl, cl
jne 0x180054780
mov eax, dword [r14]
cmp dword [0x1800b6488], eax
jle 0x1800547d7
lea rcx, [0x1800b6488]
call fcn.18005f080
cmp dword [0x1800b6488], 0xffffffff
jne 0x1800547d7
mov rax, qword [0x1800b2d38]
mov rcx, qword [rax]
add rcx, qword [0x1800b5008]
mov qword [0x1800b6480], rcx
lea rcx, [0x1800b6488]
call fcn.18005f014
mov rcx, rdi
call qword [0x1800b6480]
mov r8, rax
test rax, rax
je 0x180054943
movabs rax, 0x37d1bfa7d195ebf9
cmp rbx, rax
je 0x180054893
movabs rax, 0x92fe97d6caa88c20
cmp rbx, rax
je 0x180054893
movabs rax, 0xa854d43ddb55ddcc
cmp rbx, rax
je 0x180054893
movabs rax, 0xb8f3ad4931029355
cmp rbx, rax
je 0x180054893
movabs rax, 0xaedcd71796ade290
cmp rbx, rax
je 0x180054893
cmp rbx, r15
je 0x180054893
movabs rax, 0xf17870527758213f
cmp rbx, rax
je 0x180054a21
movabs rax, 0x8499db0ed7bb81cf
cmp rbx, rax
je 0x180054a21
mov rcx, qword [0x1800b4ee0]
mov eax, dword [rcx + r8 + 0x38]
cmp eax, 0xffffffff
je 0x180054a21
add rcx, rdi
cmp dword [rcx + 0x38], eax
je 0x180054a21
mov dword [rcx + 0x38], eax
jmp 0x180054a1c
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x1800548a6
cmp r8, rax
jne 0x180054a21
cmp rbx, r15
jne 0x180054924
movabs rax, 0x222b948fbf568318
cmp qword [0x1800b6428], rax
jne 0x180054904
mov rax, qword [0x1800b4ee0]
mov r8d, dword [rax + r8 + 0x38]
cmp r8d, 0xffffffff
je 0x180054a21
lea rcx, [rax + rdi]
cmp dword [rcx + 0x38], r8d
je 0x180054a21
mov dword [rcx + 0x38], r8d
mov rax, qword [rcx]
cmp rax, qword [rcx + 8]
je 0x1800548f3
mov qword [rcx + 8], rax
lea rdx, str.Yone
call fcn.18005a320
jmp 0x180054a21
mov rcx, qword [0x1800b4ee0]
add rcx, rdi
cmp dword [rcx + 0x38], 0
je 0x180054a21
mov dword [rcx + 0x38], 0
jmp 0x180054a1c
mov rax, qword [0x1800b2d28]
mov edx, dword [rax + 0x1c]
cmp edx, 0xffffffff
je 0x180054a21
mov rcx, qword [0x1800b4ee0]
jmp 0x180054a11
mov rax, qword [0x1800b2d28]
mov rdx, qword [rax + 0x48]
mov rax, qword [rdx + 8]
mov rcx, rdx
cmp byte [rax + 0x19], 0
jne 0x180054978
nop dword [rax + rax]
cmp qword [rax + 0x20], rbx
jae 0x18005496c
mov rax, qword [rax + 0x10]
jmp 0x180054972
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x180054960
cmp byte [rcx + 0x19], 0
jne 0x18005499c
cmp rbx, qword [rcx + 0x20]
jb 0x18005499c
cmp rcx, rdx
je 0x18005499c
mov eax, dword [rcx + 0x28]
test eax, eax
je 0x18005499c
lea edx, [rax - 1]
mov rcx, qword [0x1800b4ee0]
jmp 0x180054a11
movabs rax, 0x1ecf7680ae6d72bd
cmp rbx, rax
jne 0x1800549b6
cmp qword [0x1800b6428], r13
je 0x1800549fc
jmp 0x180054a21
movabs rax, 0xfcb981acde90c192
cmp rbx, rax
jne 0x1800549da
movabs rax, 0x6972baf895e90386
cmp qword [0x1800b6428], rax
je 0x1800549fc
jmp 0x180054a21
movabs rax, 0xfc61c19e80fc9d68
cmp rbx, rax
jne 0x180054a21
movabs rax, 0xf01bf70c1ff22b66
cmp qword [0x1800b6428], rax
jne 0x180054a21
mov rcx, qword [0x1800b4ee0]
mov rax, qword [rsp + 0x78]
mov edx, dword [rcx + rax + 0x38]
cmp edx, 0xffffffff
je 0x180054a21
add rcx, rdi
cmp dword [rcx + 0x38], edx
je 0x180054a21
mov dword [rcx + 0x38], edx
call fcn.18005a410
inc esi
cmp esi, dword [rbp + 0x10]
jb 0x1800546e5
mov rbx, qword [rsp + 0x88]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18005e5a0
int3
call fcn.1800717cc
int3