Function at 0x14018385c
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 8], rcx
push rsi
push rdi
push r12
push r14
push r15
mov eax, 0x40
call fcn.14024eae0
sub rsp, rax
mov r8, qword [rdx]
mov r14, rdx
movzx ecx, byte [r8 + 0x18]
mov r12b, byte [r8 + 0x242]
test ecx, ecx
je 0x1401838c1
sub ecx, 1
je 0x1401838a9
sub ecx, 1
je 0x1401838ae
cmp ecx, 1
jne 0x140183aef
mov dil, 1
jmp 0x1401838d6
cmp byte [r8 + 0x211], 0
je 0x1401838c1
mov dil, byte [r8 + 0x210]
jmp 0x1401838c4
xor dil, dil
test dil, dil
jne 0x1401838d6
test r12b, r12b
jne 0x1401838d6
mov rcx, r8
call fcn.140185c6c
mov rax, qword [r14]
xor ebx, ebx
cmp byte [rax + 0x18], bl
je 0x140183aad
lea rdx, [0x14036de78]
lea rcx, [rsp + 0x30]
call fcn.1400b5034
mov rbp, qword [r14]
lea rdx, [0x14036dd30]
mov rcx, rdx
lea rax, [0x14036de50]
mov sil, byte [rbp + 0x19]
lea r10, [0x14036de50]
cmp byte [rcx], sil
je 0x140183925
add rcx, 0x48
cmp rcx, rax
jne 0x14018390d
mov rcx, r10
cmp rcx, rax
je 0x140183adb
mov r11, qword [rbp + 0x20]
movabs r9, 0xcbf29ce484222325
mov qword [rsp + 0x70], r11
xor r8d, r8d
movzx eax, byte [rsp + r8 + 0x70]
movabs r15, 0x100000001b3
xor r9, rax
inc r8
imul r9, r15
cmp r8, 8
jb 0x140183944
mov r8, qword [rcx + 0x38]
mov r15, qword [rcx + 0x10]
and r8, r9
mov r9, qword [rcx + 0x20]
add r8, r8
mov rax, qword [r9 + r8*8 + 8]
cmp rax, r15
je 0x140183997
mov rcx, qword [r9 + r8*8]
jmp 0x14018398f
cmp rax, rcx
je 0x140183997
mov rax, qword [rax + 8]
cmp r11, qword [rax + 0x10]
jne 0x140183986
jmp 0x140183999
xor eax, eax
test rax, rax
lea rcx, [0x14036de50]
cmove rax, r15
cmp byte [rdx], sil
je 0x1401839b7
add rdx, 0x48
cmp rdx, rcx
jne 0x1401839a7
jmp 0x1401839ba
mov r10, rdx
cmp r10, rcx
je 0x140183adb
cmp rax, qword [r10 + 0x10]
je 0x140183a63
mov rcx, qword [rax + 0x18]
mov eax, dword [rcx + 0x20]
test eax, eax
je 0x140183ae2
dec eax
mov dword [rcx + 0x20], eax
test dil, dil
je 0x140183a7f
test r12b, r12b
jne 0x140183a7f
mov rdx, r14
call fcn.140183afc
lea rdi, [0x14036dec8]
mov rax, rdi
lea rbp, [0x14036ded0]
cmp byte [rax], sil
je 0x140183a1d
add rax, 2
cmp rax, rbp
jne 0x140183a0c
mov rax, rbp
cmp rax, rbp
je 0x140183adb
cmp byte [rax + 1], bl
jne 0x140183a7f
mov rcx, qword [0x14036de50]
test rcx, rcx
je 0x140183a47
mov rax, qword [rcx]
mov rbx, rcx
mov rax, qword [rax + 8]
call qword [case.0x14004a846.0]
cmp byte [rdi], sil
je 0x140183a58
add rdi, 2
cmp rdi, rbp
jne 0x140183a47
mov rdi, rbp
cmp rdi, rbp
je 0x140183adb
mov byte [rdi + 1], 1
jmp 0x140183a7f
lea r9, str.DroppedAggregatedActivity
mov qword [rsp + 0x20], rbp
mov ecx, 0x125308e
mov r8d, 0x32
call fcn.140183fb4
lea rcx, [rsp + 0x30]
call fcn.1400b4fc0
test rbx, rbx
je 0x140183ac2
test r12b, r12b
jne 0x140183aad
mov byte [rsp + 0x70], sil
lea rdx, [rsp + 0x70]
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 0x18]
call qword [case.0x14004a846.0]
test rbx, rbx
je 0x140183ac2
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 0x10]
call qword [case.0x14004a846.0]
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
int3
xor edx, edx
mov ecx, 0x125308d
call fcn.1400b3928
int3
xor edx, edx
mov ecx, 0x130818b
call fcn.1400b3928
int3