Function at 0x1401836d4
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov rax, rsp
push r12
push r14
push r15
sub rsp, 0x60
mov qword [rax - 0x58], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rcx, qword [rdx]
lea rdx, [rax - 0x40]
call fcn.1401754a8
mov rdx, rax
lea rcx, [rsp + 0x28]
call fcn.140048130
nop
or r14d, 0xffffffff
mov rbx, qword [rsp + 0x40]
test rbx, rbx
je 0x140183756
mov eax, r14d
lock xadd dword [rbx + 8], eax
add eax, r14d
jne 0x140183756
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [str.__v__]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
add eax, r14d
jne 0x140183756
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 8]
call qword [str.__v__]
mov r9, qword [rsp + 0x28]
mov rax, qword [r9 + 0x70]
test rax, rax
je 0x140183994
cmp qword [rax + 0xd0], 0
je 0x140183994
mov rax, qword [r9 + 0x60]
test rax, rax
je 0x140183994
cmp qword [rax + 0xd0], 0
je 0x140183994
mov rsi, rax
mov r11, qword [rax + 0xd0]
lea rcx, [r11 + 0xc0]
mov rbx, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 8
jb 0x1401837b0
mov rcx, qword [rcx]
movabs r8, 0xcbf29ce484222325
mov rdx, r8
xor r10d, r10d
add rbx, rbx
movabs r15, 0x100000001b3
je 0x1401837e3
movzx eax, byte [r10 + rcx]
xor rdx, rax
imul rdx, r15
inc r10
cmp r10, rbx
jb 0x1401837cf
mov r12d, 0x9e3779b9
lea rdi, [rdx + r12]
lea rcx, [r11 + 0x30]
mov rbx, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 8
jb 0x1401837ff
mov rcx, qword [rcx]
mov r10, r8
xor r11d, r11d
add rbx, rbx
je 0x14018381e
movzx eax, byte [r11 + rcx]
xor r10, rax
imul r10, r15
inc r11
cmp r11, rbx
jb 0x14018380a
shl rdx, 6
mov rax, rdi
shr rax, 2
lea rcx, [r10 + rdx]
movabs rdx, 0x282c15e7f9
add rax, rdx
add rcx, rax
xor rdi, rcx
lea rdx, [rsi + 0x10]
mov r11, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 8
jb 0x140183852
mov rdx, qword [rdx]
mov rcx, r8
xor r10d, r10d
add r11, r11
je 0x140183871
movzx eax, byte [r10 + rdx]
xor rcx, rax
imul rcx, r15
inc r10
cmp r10, r11
jb 0x14018385d
mov rax, rdi
shl rax, 6
mov rdx, rdi
shr rdx, 2
add rcx, rax
lea rax, [rdx + r12]
add rcx, rax
xor rdi, rcx
mov rax, qword [r9 + 0x70]
test rax, rax
je 0x140183945
cmp dword [rax + 0x58], 0
je 0x140183945
mov r10, qword [rax + 0xd0]
test r10, r10
je 0x140183945
lea rcx, [r10 + 0xc0]
mov r11, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 8
jb 0x1401838c8
mov rcx, qword [rcx]
mov r9, r8
xor edx, edx
add r11, r11
je 0x1401838e5
movzx eax, byte [rdx + rcx]
xor r9, rax
imul r9, r15
inc rdx
cmp rdx, r11
jb 0x1401838d2
mov rcx, rdi
shl rcx, 6
mov rax, rdi
shr rax, 2
add rcx, r9
add rax, r12
add rcx, rax
xor rdi, rcx
lea rcx, [r10 + 0x30]
mov r9, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 8
jb 0x140183911
mov rcx, qword [rcx]
xor edx, edx
add r9, r9
je 0x14018392b
movzx eax, byte [rdx + rcx]
xor r8, rax
imul r8, r15
inc rdx
cmp rdx, r9
jb 0x140183918
mov rcx, rdi
shl rcx, 6
mov rax, rdi
shr rax, 2
add rcx, r8
add rax, r12
add rcx, rax
xor rdi, rcx
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14018398f
mov eax, r14d
lock xadd dword [rcx + 8], eax
add eax, r14d
jne 0x14018398f
mov rbx, qword [rsp + 0x30]
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [str.__v__]
mov ecx, r14d
lock xadd dword [rbx + 0xc], ecx
add ecx, r14d
jne 0x14018398f
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rcx]
mov rax, qword [rdx + 8]
call qword [str.__v__]
mov rax, rdi
jmp 0x1401839b7
lea rdx, str.ProcessEvent_should_have_parent_and_child_processes_that_are_not_empty
lea rcx, [rsp + 0x48]
call fcn.140086afc
lea rdx, [0x1403d39e8]
lea rcx, [rsp + 0x48]
call sub.api_ms_win_crt_private_l1_1_0.dll__CxxThrowException
nop
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop r12
ret
jmp 0x1401836d4