Function at 0x1400a0780
Capabilities:
Encode data using xor
Hash data using fnv
Set registry value

Disassembly:
mov rax, rsp
push rbp
push rdi
push r14
lea rbp, [rax - 0x148]
sub rsp, 0x230
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x14031f2d0]
xor rax, rsp
mov qword [rbp + 0x120], rax
mov esi, r8d
mov r14, rdx
call fcn.1400a0070
mov rcx, qword [0x14032ba70]
test byte [rcx + 8], 1
je 0x1400a07dc
mov rax, qword [rcx + 8]
and rax, 0xfffffffffffffffe
mov r9, qword [rax]
jmp 0x1400a07e4
mov r9, qword [rcx + 8]
and r9, 0xfffffffffffffffe
add rcx, 0xb8
lea r8, [0x14072c640]
xor edx, edx
call fcn.14013d4c0
mov rax, qword [0x14032ba70]
mov qword [rax + 0xd8], 1
lea rdi, [rax + 0x10]
mov rbx, qword [rdi + 0x10]
test rbx, rbx
je 0x1400a082d
movsxd rcx, dword [rdi + 8]
cmp ecx, dword [rbx]
jge 0x1400a082d
mov rbx, qword [rbx + rcx*8 + 8]
lea eax, [rcx + 1]
mov dword [rdi + 8], eax
jmp 0x1400a0843
mov rcx, qword [rdi]
call fcn.1400a7400
mov rdx, rax
mov rcx, rdi
call fcn.14013c300
mov rbx, rax
test rbx, rbx
je 0x1400a0896
mov dword [rbx + 0x18], 1
mov dword [rbx + 0x1c], esi
test byte [rbx + 8], 1
je 0x1400a0865
mov rcx, qword [rbx + 8]
and rcx, 0xfffffffffffffffe
mov rdi, qword [rcx]
jmp 0x1400a086d
mov rdi, qword [rbx + 8]
and rdi, 0xfffffffffffffffe
mov rdx, r14
lea rcx, [rbp + 0x50]
call fcn.14000f200
nop
lea rcx, [rbx + 0x10]
mov r9, rdi
lea r8, [rbp + 0x50]
xor edx, edx
call fcn.14013d4c0
nop
lea rcx, [rbp + 0x50]
call fcn.14000f150
xor ecx, ecx
call fcn.14022f11c
mov rdi, rax
xor eax, eax
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0xb8], rax
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], rax
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xd8], rax
lea rcx, [rbp + 0x78]
call fcn.1400c90f0
nop
lea rcx, [0x14072c680]
call fcn.14000f0b0
mov rbx, rax
lea rcx, [rbp + 0x78]
call fcn.14000f0b0
mov r8, rax
mov qword [rsp + 0x20], rbx
mov r9, rdi
lea rdx, str._s_lld_s
lea rcx, [rbp + 0xa0]
call fcn.140010cc0
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x50]
call fcn.14000f200
lea rcx, [rbp + 0x50]
call fcn.14000ed60
mov rbx, rax
lea rcx, [rbp + 0x50]
call fcn.14000f0b0
movabs rdx, 0xcbf29ce484222325
xor esi, esi
mov r8d, esi
test rbx, rbx
je 0x1400a0974
movabs r9, 0x100000001b3
nop dword [rax]
movzx ecx, byte [r8 + rax]
xor rdx, rcx
imul rdx, r9
inc r8
cmp r8, rbx
jb 0x1400a0960
mov qword [0x14032ba88], rdx
lea rcx, [rbp + 0x50]
call fcn.14000f150
xor eax, eax
mov qword [rbp + 0x58], rax
mov qword [rbp + 0x50], rsi
mov dword [rbp + 0x58], esi
mov qword [rbp + 0x60], rsi
lea rcx, [rbp + 0x50]
call fcn.14009fb90
mov rdi, qword [rbp + 0x50]
test eax, eax
jne 0x1400a0a71
mov ebx, dword [0x14032ba88]
xor eax, eax
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0xe8], rax
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], rax
mov qword [rbp + 0x100], rax
mov qword [rbp + 0x108], rax
mov qword [rbp + 0x110], rax
mov qword [rbp + 0x118], rax
lea rcx, [0x14072c680]
call fcn.14000f0b0
mov r9, rax
lea r8, str.install_s
mov edx, 0x40
lea rcx, [rbp + 0xe0]
call fcn.14009fac0
lea rax, [rsp + 0x48]
mov qword [rsp + 0x40], rax
mov r8d, 3
lea rdx, [rbp + 0xe0]
lea rcx, [rsp + 0x40]
call fcn.1400a1d60
mov dword [rbp + 0x70], ebx
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rdx, qword [rsp + 0x40]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea rax, [rsp + 0x48]
mov rcx, qword [rsp + 0x40]
cmp rcx, rax
je 0x1400a0a71
call fcn.140226d80
test rdi, rdi
je 0x1400a0a86
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdi, rsi
mov qword [rbp + 0x50], rsi
mov dword [rbp + 0x58], esi
call fcn.1400a05d0
call fcn.1400a0140
nop
test rdi, rdi
je 0x1400a0aa3
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
lea rcx, [rbp + 0x78]
call fcn.14000f150
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.14013a450
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret