Function at 0x140183448
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov rax, rsp
push r14
sub rsp, 0x50
mov qword [rax - 0x38], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rdi
lea rcx, [rax - 0x30]
call fcn.140048130
nop
mov r9, qword [rsp + 0x28]
cmp qword [r9 + 0x70], 0
je 0x140183698
mov rax, qword [r9 + 0x60]
test rax, rax
je 0x140183698
cmp qword [rax + 0xd0], 0
je 0x140183698
mov rbx, qword [rax + 0xd0]
lea rcx, [rbx + 0xc0]
mov r11, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 8
jb 0x1401834b6
mov rcx, qword [rcx]
movabs r8, 0xcbf29ce484222325
mov rdx, r8
xor r10d, r10d
add r11, r11
movabs rbp, 0x100000001b3
je 0x1401834e9
movzx eax, byte [r10 + rcx]
xor rdx, rax
imul rdx, rbp
inc r10
cmp r10, r11
jb 0x1401834d5
mov r14d, 0x9e3779b9
lea rdi, [rdx + r14]
lea rcx, [rbx + 0x30]
mov rbx, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 8
jb 0x140183505
mov rcx, qword [rcx]
mov r10, r8
xor r11d, r11d
add rbx, rbx
je 0x140183524
movzx eax, byte [r11 + rcx]
xor r10, rax
imul r10, rbp
inc r11
cmp r11, rbx
jb 0x140183510
shl rdx, 6
mov rax, rdi
shr rax, 2
lea rcx, [r10 + rdx]
movabs rdx, 0x282c15e7f9
add rax, rdx
add rcx, rax
xor rdi, rcx
mov r11, qword [r9 + 0x70]
test r11, r11
je 0x140183649
cmp dword [r11 + 0x58], 0
je 0x140183649
mov r9, qword [r11 + 0xd0]
test r9, r9
je 0x140183649
lea rcx, [r9 + 0xc0]
mov rbx, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 8
jb 0x140183583
mov rcx, qword [rcx]
mov r10, r8
xor edx, edx
add rbx, rbx
je 0x1401835a0
movzx eax, byte [rdx + rcx]
xor r10, rax
imul r10, rbp
inc rdx
cmp rdx, rbx
jb 0x14018358d
mov rcx, rdi
shl rcx, 6
mov rax, rdi
shr rax, 2
add rcx, r10
add rax, r14
add rcx, rax
xor rdi, rcx
lea rcx, [r9 + 0x30]
mov r10, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 8
jb 0x1401835cc
mov rcx, qword [rcx]
mov r9, r8
xor edx, edx
add r10, r10
je 0x1401835e9
movzx eax, byte [rdx + rcx]
xor r9, rax
imul r9, rbp
inc rdx
cmp rdx, r10
jb 0x1401835d6
mov rcx, rdi
shl rcx, 6
mov rax, rdi
shr rax, 2
add rcx, r9
add rax, r14
add rcx, rax
xor rdi, rcx
lea rdx, [r11 + 0x10]
mov r9, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 8
jb 0x140183615
mov rdx, qword [rdx]
xor ecx, ecx
add r9, r9
je 0x14018362f
movzx eax, byte [rcx + rdx]
xor r8, rax
imul r8, rbp
inc rcx
cmp rcx, r9
jb 0x14018361c
mov rcx, rdi
shl rcx, 6
mov rax, rdi
shr rax, 2
add rcx, r8
add rax, r14
add rcx, rax
xor rdi, rcx
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140183693
or eax, 0xffffffff
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x140183693
mov rbx, qword [rsp + 0x30]
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax]
call qword [str.__v__]
or ecx, 0xffffffff
lock xadd dword [rbx + 0xc], ecx
cmp ecx, 1
jne 0x140183693
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rcx]
mov rax, qword [rdx + 8]
call qword [str.__v__]
mov rax, rdi
jmp 0x1401836bb
lea rdx, str.ProcessEvent_should_have_parent_and_child_processes_that_are_not_empty
lea rcx, [rsp + 0x38]
call fcn.140086afc
lea rdx, [0x1403d39e8]
lea rcx, [rsp + 0x38]
call sub.api_ms_win_crt_private_l1_1_0.dll__CxxThrowException
nop
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x70]
add rsp, 0x50
pop r14
ret