Function at 0x14000ce80
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1e0]
sub rsp, 0x2e0
mov rax, qword [0x140064040]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
mov qword [rsp + 0x70], r8
mov r12, rdx
mov qword [rsp + 0x78], rdx
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
xor ebx, ebx
mov dword [rbp - 0x64], ebx
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x70], rbx
call fcn.140001b30
mov r14, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbx
lea r8d, [rbx + 0x28]
lea rdx, str.RtlDosApplyFileIsolationRedirection_Ustr
lea rcx, [rsp + 0x50]
call fcn.140002a20
nop
call fcn.140006c20
lea r15, [r14 + 0x40]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rdx, [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
mov r13, qword [rsp + 0x68]
cmp r13, 0xf
cmova rdx, rsi
movabs rdi, 0xcbf29ce484222325
mov r9, rdi
mov ecx, ebx
movabs r10, 0x100000001b3
mov r8, qword [rsp + 0x60]
test r8, r8
je 0x14000cf73
nop word [rax + rax]
movzx eax, byte [rdx + rcx]
xor r9, rax
imul r9, r10
inc rcx
cmp rcx, r8
jb 0x14000cf60
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x80]
mov rcx, r14
call fcn.140002dc0
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x14000cfa2
cmp rcx, qword [r14 + 8]
je 0x14000cfa2
mov r14, qword [rcx + 0x30]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x14000cfae
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14, rbx
cmp r13, 0xf
jbe 0x14000cfe5
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14000cfdd
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d3e8
mov rcx, rsi
call fcn.14002675c
test r14, r14
jne 0x14000cff4
mov eax, 0xc0000138
jmp 0x14000d3b8
call fcn.140001b30
mov r14, rax
mov r15, r12
cmp qword [r12 + 0x18], 7
jbe 0x14000d00b
mov r15, qword [r12]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbx
mov r8d, 0x14
lea rdx, str.RtlInitUnicodeString
lea rcx, [rsp + 0x50]
call fcn.140002a20
nop
call fcn.140006c20
lea r12, [r14 + 0x40]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rdx, [rsp + 0x50]
mov rsi, qword [rsp + 0x50]
mov r13, qword [rsp + 0x68]
cmp r13, 0xf
cmova rdx, rsi
mov r9, rdi
mov rcx, rbx
mov r8, qword [rsp + 0x60]
test r8, r8
je 0x14000d093
movabs r10, 0x100000001b3
nop dword [rax + rax]
movzx eax, byte [rdx + rcx]
xor r9, rax
imul r9, r10
inc rcx
cmp rcx, r8
jb 0x14000d080
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x80]
mov rcx, r14
call fcn.140002dc0
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x14000d0d1
cmp rcx, qword [r14 + 8]
je 0x14000d0d1
mov r14, qword [rcx + 0x30]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test r14, r14
je 0x14000d0db
mov rdx, r15
lea rcx, [rbp - 0x48]
call r14
jmp 0x14000d0db
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
cmp r13, 0xf
jbe 0x14000d112
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14000d10a
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d3e8
mov rcx, rsi
call fcn.14002675c
lea rax, [rbp - 0x30]
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x68], 0x1fe0000
call fcn.140001b30
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbx
mov r8d, 0x28
lea rdx, str.RtlDosApplyFileIsolationRedirection_Ustr
lea rcx, [rsp + 0x50]
call fcn.140002a20
nop
call fcn.140006c20
lea r15, [rsi + 0x40]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rdx, [rsp + 0x50]
mov r14, qword [rsp + 0x50]
mov r13, qword [rsp + 0x68]
cmp r13, 0xf
cmova rdx, r14
mov r9, rdi
mov rcx, rbx
mov r8, qword [rsp + 0x60]
test r8, r8
je 0x14000d1b8
movabs r13, 0x100000001b3
nop word [rax + rax]
movzx eax, byte [rdx + rcx]
xor r9, rax
imul r9, r13
inc rcx
cmp rcx, r8
jb 0x14000d1a0
mov r13, qword [rsp + 0x68]
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x80]
mov rcx, rsi
call fcn.140002dc0
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x14000d220
cmp rcx, qword [rsi + 8]
je 0x14000d220
mov rsi, qword [rcx + 0x30]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rsi, rsi
je 0x14000d229
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
lea rax, [rbp - 0x70]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x68]
xor r8d, r8d
lea rdx, [rbp - 0x48]
lea ecx, [r8 + 1]
call rsi
mov esi, eax
jmp 0x14000d22e
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, 0xc0000138
cmp r13, 0xf
jbe 0x14000d265
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14000d25d
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d3e8
mov rcx, r14
call fcn.14002675c
test esi, esi
jne 0x14000d2ab
mov rax, qword [rsp + 0x70]
mov rax, qword [rax + 0x10]
cmp byte [rax + 0x17], sil
je 0x14000d282
mov eax, 0xc015001d
jmp 0x14000d3b8
mov rax, qword [rbp - 0x70]
mov rdx, qword [rax + 8]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x14000d291
mov rcx, qword [rsp + 0x78]
call fcn.140002880
jmp 0x14000d3b6
cmp qword [rbp - 0x50], 0
je 0x14000d3b6
call fcn.140001b30
mov r13, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbx
mov r8d, 0x14
lea rdx, str.RtlFreeUnicodeString
lea rcx, [rsp + 0x50]
call fcn.140002a20
nop
call fcn.140006c20
lea rcx, [r13 + 0x40]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rcx, [rsp + 0x50]
mov r14, qword [rsp + 0x50]
mov r15, qword [rsp + 0x68]
cmp r15, 0xf
cmova rcx, r14
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x14000d33a
movabs r15, 0x100000001b3
movzx eax, byte [rcx + rbx]
xor rdi, rax
imul rdi, r15
inc rbx
cmp rbx, rdx
jb 0x14000d322
mov r15, qword [rsp + 0x68]
mov r9, rdi
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x80]
mov rcx, r13
call fcn.140002dc0
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x14000d378
cmp rdx, qword [r13 + 8]
je 0x14000d378
mov rbx, qword [rdx + 0x30]
lea rcx, [r13 + 0x40]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x14000d383
lea rcx, [rbp - 0x58]
call rbx
jmp 0x14000d383
lea rcx, [r13 + 0x40]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
cmp r15, 0xf
jbe 0x14000d3b6
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14000d3ae
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d3e8
mov rcx, r14
call fcn.14002675c
mov eax, esi
mov rcx, qword [rbp + 0x1d0]
xor rcx, rsp
call fcn.1400264c0
lea r11, [rsp + 0x2e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14002d454
int3