Function at 0x140123270
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x250]
sub rsp, 0x350
mov rax, qword [0x140713740]
xor rax, rsp
mov qword [rbp + 0x240], rax
mov qword [rsp + 0x68], r9
mov qword [rsp + 0x58], r8
mov qword [rsp + 0x70], rdx
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
xorps xmm1, xmm1
movups xmmword [rbp], xmm1
movups xmmword [rbp + 0x10], xmm0
xor ebx, ebx
mov qword [rbp - 8], rbx
mov qword [rbp + 0x20], rbx
call fcn.1400fd420
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], rbx
mov qword [rbp - 0x50], rbx
mov r8d, 0x28
lea rdx, str.RtlDosApplyFileIsolationRedirection_Ustr
lea rcx, [rbp - 0x68]
call fcn.1400fe440
nop
call fcn.14010e720
lea rax, [r15 + 0x40]
mov qword [rsp + 0x50], rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea r8, [rbp - 0x68]
mov rsi, qword [rbp - 0x68]
mov r13, qword [rbp - 0x50]
cmp r13, 0xf
cmova r8, rsi
movabs r14, 0xcbf29ce484222325
mov rdx, r14
mov ecx, ebx
movabs r9, 0x100000001b3
mov rdi, qword [rbp - 0x58]
test rdi, rdi
je 0x140123364
nop word [rax + rax]
movzx eax, byte [r8 + rcx]
xor rdx, rax
imul rdx, r9
inc rcx
cmp rcx, rdi
jb 0x140123350
mov rcx, qword [r15 + 0x30]
and rcx, rdx
add rcx, rcx
mov rax, qword [r15 + 0x18]
mov rbx, qword [rax + rcx*8 + 8]
mov r12, qword [r15 + 8]
cmp rbx, r12
je 0x1401233ce
mov r15, qword [rax + rcx*8]
nop dword [rax]
nop dword [rax + rax]
lea rdx, [rbx + 0x10]
mov rax, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x1401233a2
mov rdx, qword [rdx]
lea rcx, [rbp - 0x68]
cmp r13, 0xf
cmova rcx, rsi
cmp rdi, rax
jne 0x1401233bf
mov r8, rdi
call fcn.14041c7a0
test eax, eax
je 0x1401233ca
cmp rbx, r15
je 0x1401233ce
mov rbx, qword [rbx + 8]
jmp 0x140123390
xor edi, edi
jmp 0x1401233d2
xor edi, edi
mov ebx, edi
test rbx, rbx
cmove rbx, r12
mov rcx, qword [rsp + 0x50]
cmp rbx, r12
je 0x1401233ef
mov rbx, qword [rbx + 0x30]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x1401233f8
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rbx, rdi
cmp r13, 0xf
jbe 0x14012342f
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140123427
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14012386f
mov rcx, rsi
call fcn.1403e5198
test rbx, rbx
jne 0x14012343e
mov eax, 0xc0000138
jmp 0x140123845
call fcn.1400fd420
mov r15, rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x50], rax
cmp qword [rax + 0x18], 7
jbe 0x14012345f
mov rax, qword [rax]
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rdi
mov qword [rbp - 0x30], rdi
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.RtlInitUnicodeString
lea rcx, [rbp - 0x48]
call fcn.1400fe440
nop
call fcn.14010e720
lea rax, [r15 + 0x40]
mov qword [rsp + 0x60], rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea r8, [rbp - 0x48]
mov rsi, qword [rbp - 0x48]
mov r13, qword [rbp - 0x30]
cmp r13, 0xf
cmova r8, rsi
mov rdx, r14
mov rcx, rdi
mov rdi, qword [rbp - 0x38]
test rdi, rdi
je 0x1401234e4
movabs r9, 0x100000001b3
nop dword [rax]
movzx eax, byte [r8 + rcx]
xor rdx, rax
imul rdx, r9
inc rcx
cmp rcx, rdi
jb 0x1401234d0
mov rcx, qword [r15 + 0x30]
and rcx, rdx
add rcx, rcx
mov rax, qword [r15 + 0x18]
mov rbx, qword [rax + rcx*8 + 8]
mov r12, qword [r15 + 8]
cmp rbx, r12
je 0x14012354e
mov r15, qword [rax + rcx*8]
nop dword [rax]
nop dword [rax + rax]
lea rdx, [rbx + 0x10]
mov rax, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x140123522
mov rdx, qword [rdx]
lea rcx, [rbp - 0x48]
cmp r13, 0xf
cmova rcx, rsi
cmp rdi, rax
jne 0x14012353f
mov r8, rdi
call fcn.14041c7a0
test eax, eax
je 0x14012354a
cmp rbx, r15
je 0x14012354e
mov rbx, qword [rbx + 8]
jmp 0x140123510
xor edi, edi
jmp 0x140123552
xor edi, edi
mov ebx, edi
test rbx, rbx
cmove rbx, r12
mov rcx, qword [rsp + 0x60]
cmp rbx, r12
je 0x14012357f
mov rbx, qword [rbx + 0x30]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x140123586
mov rdx, qword [rsp + 0x50]
lea rcx, [rbp + 0x28]
call rbx
jmp 0x140123586
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
cmp r13, 0xf
jbe 0x1401235bd
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1401235b5
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14012386f
mov rcx, rsi
call fcn.1403e5198
lea rax, [rbp + 0x40]
mov qword [rbp + 8], rax
mov dword [rbp], 0x1fe0000
mov rax, qword [rsp + 0x68]
cmp rax, 0xffffffffffffffff
je 0x1401235e4
lea rdx, [rbp + 0x20]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ActivateActCtx]
call fcn.1400fd420
mov r13, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x70], rdi
mov r8d, 0x28
lea rdx, str.RtlDosApplyFileIsolationRedirection_Ustr
lea rcx, [rsp + 0x78]
call fcn.1400fe440
nop
call fcn.14010e720
lea rcx, [r13 + 0x40]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rdx, [rsp + 0x78]
mov rsi, qword [rsp + 0x78]
mov r15, qword [rbp - 0x70]
cmp r15, 0xf
cmova rdx, rsi
mov rcx, rdi
mov rdi, qword [rbp - 0x78]
test rdi, rdi
je 0x140123667
movabs r15, 0x100000001b3
nop
movzx eax, byte [rcx + rdx]
xor r14, rax
imul r14, r15
inc rcx
cmp rcx, rdi
jb 0x140123650
mov r15, qword [rbp - 0x70]
mov rcx, qword [r13 + 0x30]
and rcx, r14
add rcx, rcx
mov rax, qword [r13 + 0x18]
mov rbx, qword [rax + rcx*8 + 8]
mov r12, qword [r13 + 8]
cmp rbx, r12
je 0x1401236cf
mov r14, qword [rax + rcx*8]
nop word [rax + rax]
lea rdx, [rbx + 0x10]
mov rax, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x1401236a2
mov rdx, qword [rdx]
lea rcx, [rsp + 0x78]
cmp r15, 0xf
cmova rcx, rsi
cmp rdi, rax
jne 0x1401236c0
mov r8, rdi
call fcn.14041c7a0
test eax, eax
je 0x1401236cb
cmp rbx, r14
je 0x1401236cf
mov rbx, qword [rbx + 8]
jmp 0x140123690
xor edi, edi
jmp 0x1401236d3
xor edi, edi
mov ebx, edi
test rbx, rbx
cmove rbx, r12
lea rcx, [r13 + 0x40]
cmp rbx, r12
je 0x140123729
mov rbx, qword [rbx + 0x30]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x14012372f
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
lea rax, [rbp - 8]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rbp]
xor r8d, r8d
lea rdx, [rbp + 0x28]
mov ecx, 1
call rbx
mov edi, eax
jmp 0x140123734
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edi, 0xc0000138
cmp r15, 0xf
jbe 0x14012376b
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140123763
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14012386f
mov rcx, rsi
call fcn.1403e5198
mov rdx, qword [rbp + 0x20]
test rdx, rdx
je 0x140123784
cmp qword [rsp + 0x68], 0xffffffffffffffff
je 0x140123784
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DeactivateActCtx]
test edi, edi
jne 0x1401237b8
mov rax, qword [rsp + 0x58]
mov rax, qword [rax + 0x10]
cmp byte [rax + 0x17], dil
je 0x1401237a1
mov eax, 0xc015001d
jmp 0x140123845
mov rdx, qword [rbp - 8]
mov rdx, qword [rdx + 8]
mov rcx, qword [rsp + 0x70]
call fcn.1400fdc80
jmp 0x140123843
cmp qword [rbp + 0x18], 0
je 0x140123843
call fcn.1400fd420
mov rbx, rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.RtlFreeUnicodeString
lea rcx, [rbp - 0x28]
call fcn.1400fe440
nop
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x28]
mov rcx, rbx
call fcn.140123880
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x140123843
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14012383e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14012386f
call fcn.1403e5198
mov eax, edi
mov rcx, qword [rbp + 0x240]
xor rcx, rsp
call fcn.1403e5550
mov rbx, qword [rsp + 0x390]
add rsp, 0x350
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1403eb834
int3