Function at 0x14001f0c0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f0]
sub rsp, 0x2f0
mov rax, qword [0x1400e3040]
xor rax, rsp
mov qword [rbp + 0x1e0], rax
mov qword [rsp + 0x78], r9
mov qword [rbp - 0x78], r8
mov qword [rbp - 0x80], rdx
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xor ebx, ebx
mov dword [rbp - 0x54], ebx
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x38], rbx
call fcn.140015410
mov r14, rax
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], bl
lea r8d, [rbx + 0x28]
lea rdx, str.RtlDosApplyFileIsolationRedirection_Ustr
lea rcx, [rsp + 0x58]
call fcn.140001d70
nop
call fcn.14002e730
lea r15, [r14 + 0x40]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rdx, [rsp + 0x58]
mov r13, qword [rsp + 0x70]
cmp r13, 0x10
setae r12b
mov rsi, qword [rsp + 0x58]
cmovae rdx, rsi
movabs rdi, 0xcbf29ce484222325
mov r9, rdi
mov ecx, ebx
movabs r10, 0x100000001b3
mov r8, qword [rsp + 0x68]
test r8, r8
je 0x14001f1b3
nop word [rax + rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r10
inc rcx
cmp rcx, r8
jb 0x14001f1a0
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140015ce0
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x14001f1e2
cmp rcx, qword [r14 + 8]
je 0x14001f1e2
mov r14, qword [rcx + 0x30]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x14001f1ee
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14, rbx
test r12b, r12b
je 0x14001f224
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14001f21c
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f683
mov rcx, rsi
call fcn.14004b1e0
test r14, r14
jne 0x14001f233
mov eax, 0xc0000138
jmp 0x14001f659
call fcn.140015410
mov r14, rax
mov rax, qword [rbp - 0x80]
mov r15, rax
cmp qword [rax + 0x18], 8
jb 0x14001f24c
mov r15, qword [rax]
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
mov r8d, 0x14
lea rdx, str.RtlInitUnicodeString
lea rcx, [rsp + 0x58]
call fcn.140001d70
nop
call fcn.14002e730
lea r12, [r14 + 0x40]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rdx, [rsp + 0x58]
mov r13, qword [rsp + 0x70]
cmp r13, 0x10
setae byte [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
cmovae rdx, rsi
mov r9, rdi
mov rcx, rbx
mov r8, qword [rsp + 0x68]
test r8, r8
je 0x14001f2e3
movabs r10, 0x100000001b3
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r10
inc rcx
cmp rcx, r8
jb 0x14001f2d0
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140015ce0
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x14001f321
cmp rcx, qword [r14 + 8]
je 0x14001f321
mov r14, qword [rcx + 0x30]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test r14, r14
je 0x14001f32b
mov rdx, r15
lea rcx, [rbp - 0x30]
call r14
jmp 0x14001f32b
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
cmp byte [rsp + 0x50], 0
je 0x14001f363
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14001f35b
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f683
mov rcx, rsi
call fcn.14004b1e0
lea rax, [rbp - 0x20]
mov qword [rbp - 0x50], rax
mov dword [rbp - 0x58], 0x1fe0000
mov rax, qword [rsp + 0x78]
cmp rax, 0xffffffffffffffff
je 0x14001f38a
lea rdx, [rbp - 0x38]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ActivateActCtx]
call fcn.140015410
mov r14, rax
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
mov r8d, 0x28
lea rdx, str.RtlDosApplyFileIsolationRedirection_Ustr
lea rcx, [rsp + 0x58]
call fcn.140001d70
nop
call fcn.14002e730
lea r15, [r14 + 0x40]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rdx, [rsp + 0x58]
mov r13, qword [rsp + 0x70]
cmp r13, 0x10
setae r12b
mov rsi, qword [rsp + 0x58]
cmovae rdx, rsi
mov r9, rdi
mov rcx, rbx
mov r8, qword [rsp + 0x68]
test r8, r8
je 0x14001f428
movabs r13, 0x100000001b3
nop dword [rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r13
inc rcx
cmp rcx, r8
jb 0x14001f410
mov r13, qword [rsp + 0x70]
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140015ce0
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x14001f492
cmp rcx, qword [r14 + 8]
je 0x14001f492
mov r14, qword [rcx + 0x30]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test r14, r14
je 0x14001f49b
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x58]
xor r8d, r8d
lea rdx, [rbp - 0x30]
lea ecx, [r8 + 1]
call r14
mov r14d, eax
jmp 0x14001f4a1
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14d, 0xc0000138
test r12b, r12b
je 0x14001f4d7
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14001f4cf
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f683
mov rcx, rsi
call fcn.14004b1e0
mov rdx, qword [rbp - 0x38]
test rdx, rdx
je 0x14001f4f0
cmp qword [rsp + 0x78], 0xffffffffffffffff
je 0x14001f4f0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DeactivateActCtx]
test r14d, r14d
jne 0x14001f539
mov rax, qword [rbp - 0x78]
mov rax, qword [rax + 0x10]
cmp byte [rax + 0x17], r14b
je 0x14001f50d
mov eax, 0xc015001d
jmp 0x14001f659
mov rax, qword [rbp - 0x60]
mov rdx, qword [rax + 8]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14001f520
mov rcx, qword [rbp - 0x80]
call fcn.140001bb0
jmp 0x14001f656
cmp qword [rbp - 0x40], 0
je 0x14001f656
call fcn.140015410
mov r13, rax
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
mov r8d, 0x14
lea rdx, str.RtlFreeUnicodeString
lea rcx, [rsp + 0x58]
call fcn.140001d70
nop
call fcn.14002e730
lea rcx, [r13 + 0x40]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rcx, [rsp + 0x58]
mov r12, qword [rsp + 0x70]
cmp r12, 0x10
setae byte [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
cmovae rcx, rsi
mov rdx, qword [rsp + 0x68]
test rdx, rdx
je 0x14001f5d8
movabs r12, 0x100000001b3
nop dword [rax + rax]
movzx eax, byte [rbx + rcx]
xor rdi, rax
imul rdi, r12
inc rbx
cmp rbx, rdx
jb 0x14001f5c0
mov r12, qword [rsp + 0x70]
mov r9, rdi
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x70]
mov rcx, r13
call fcn.140015ce0
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x14001f616
cmp rdx, qword [r13 + 8]
je 0x14001f616
mov rbx, qword [rdx + 0x30]
lea rcx, [r13 + 0x40]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x14001f621
lea rcx, [rbp - 0x48]
call rbx
jmp 0x14001f621
lea rcx, [r13 + 0x40]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
cmp byte [rsp + 0x50], 0
je 0x14001f656
lea rdx, [r12 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14001f64e
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001f683
mov rcx, rsi
call fcn.14004b1e0
mov eax, r14d
mov rcx, qword [rbp + 0x1e0]
xor rcx, rsp
call fcn.14004b1c0
mov rbx, qword [rsp + 0x330]
add rsp, 0x2f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14008ac40
int3