Function at 0x14003cba0
Capabilities:
Encode data using xor
Get hostname
Get session user name
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1d0]
sub rsp, 0x2d0
mov dword [rbp + 0x210], 0x10
lea rdx, [rbp + 0x210]
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov r14, 0xffffffffffffffff
lea r13d, [r14 + 0xb]
xor esi, esi
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], rsi
mov word [rsp + 0x40], si
test eax, eax
je 0x14003cc79
mov r15d, dword [rbp + 0x210]
lea r12, [r15 + r15]
lea rcx, [rsp + 0x40]
cmp r15, 7
ja 0x14003cc39
mov qword [rsp + 0x50], r15
mov r8, r12
lea rdx, [rsp + 0x60]
call fcn.140073d70
mov word [rsp + r12 + 0x40], si
jmp 0x14003cc96
mov rdi, r15
or rdi, 7
cmp rdi, r13
cmovb rdi, r13
lea rdx, [rdi + 1]
call fcn.140037c60
mov rbx, rax
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], rdi
mov r8, r12
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.140073d70
mov word [r12 + rbx], si
mov qword [rsp + 0x40], rbx
jmp 0x14003cc96
mov r8, r14
nop dword [rax]
inc r8
cmp word [rsi + r8*2], si
jne 0x14003cc80
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.140037b30
mov dword [rbp + 0x210], 0x101
lea rdx, [rbp + 0x210]
lea rcx, [rbp - 0x40]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], si
test eax, eax
je 0x14003cd40
mov r14d, dword [rbp + 0x210]
lea r15, [r14 + r14]
lea rcx, [rsp + 0x20]
cmp r14, 7
ja 0x14003ccf7
mov qword [rsp + 0x30], r14
mov r8, r15
lea rdx, [rbp - 0x40]
call fcn.140073d70
mov word [rsp + r15 + 0x20], si
jmp 0x14003cd5a
mov rdi, r14
or rdi, 7
cmp rdi, r13
cmovb rdi, r13
lea rdx, [rdi + 1]
call fcn.140037c60
mov rbx, rax
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], rdi
mov r8, r15
lea rdx, [rbp - 0x40]
mov rcx, rax
call fcn.140073d70
mov word [r15 + rbx], si
mov qword [rsp + 0x20], rbx
jmp 0x14003cd5a
inc r14
cmp word [rsi + r14*2], 0
jne 0x14003cd40
mov r8, r14
xor edx, edx
lea rcx, [rsp + 0x20]
call fcn.140037b30
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae rdx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x50]
lea r14, [rdx + rax*2]
lea rbx, [rsp + 0x40]
cmovae rbx, qword [rsp + 0x40]
mov rdi, rsi
mov qword [rsp + 0x70], rsi
mov r13d, 0xf
mov qword [rsp + 0x78], r13
mov byte [rsp + 0x60], 0
mov rdx, r14
sub rdx, rbx
sar rdx, 1
cmp rdx, 0x10
jb 0x14003cdba
lea rcx, [rsp + 0x60]
call fcn.140037720
mov qword [rsp + 0x70], rsi
mov r13, qword [rsp + 0x78]
cmp rbx, r14
je 0x14003ce09
nop
movzx r9d, byte [rbx]
cmp rdi, r13
jae 0x14003cdec
lea rax, [rdi + 1]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
cmp r13, 0x10
cmovae rax, qword [rsp + 0x60]
mov byte [rax + rdi], r9b
mov byte [rax + rdi + 1], 0
jmp 0x14003cdf6
lea rcx, [rsp + 0x60]
call fcn.140037870
add rbx, 2
mov r13, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x70]
cmp rbx, r14
jne 0x14003cdc0
lea rdx, [rsp + 0x20]
cmp qword [rsp + 0x38], 8
cmovae rdx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x30]
lea r12, [rdx + rax*2]
lea rbx, [rsp + 0x20]
cmovae rbx, qword [rsp + 0x20]
mov r14, rsi
mov qword [rbp - 0x70], rsi
mov r15d, 0xf
mov qword [rbp - 0x68], r15
mov byte [rbp - 0x80], 0
mov rdx, r12
sub rdx, rbx
sar rdx, 1
cmp rdx, 0x10
jb 0x14003ce63
lea rcx, [rbp - 0x80]
call fcn.140037720
mov qword [rbp - 0x70], rsi
mov r15, qword [rbp - 0x68]
cmp rbx, r12
je 0x14003ceb4
nop dword [rax + rax]
movzx r9d, byte [rbx]
cmp r14, r15
jae 0x14003ce9a
lea rax, [r14 + 1]
mov qword [rbp - 0x70], rax
lea rax, [rbp - 0x80]
cmp r15, 0x10
cmovae rax, qword [rbp - 0x80]
mov byte [rax + r14], r9b
mov byte [rax + r14 + 1], 0
jmp 0x14003cea3
lea rcx, [rbp - 0x80]
call fcn.140037870
add rbx, 2
mov r15, qword [rbp - 0x68]
mov r14, qword [rbp - 0x70]
cmp rbx, r12
jne 0x14003ce70
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rdi
cmp rax, r14
jb 0x14003d1ec
lea rdx, [rsp + 0x60]
cmp r13, 0x10
cmovae rdx, qword [rsp + 0x60]
mov qword [rbp + 0x210], rdx
lea rax, [rbp - 0x80]
cmp r15, 0x10
cmovae rax, qword [rbp - 0x80]
mov qword [rbp + 0x220], rax
lea rax, [r14 + rdi]
mov ebx, 0xf
lea r12, [rbp - 0x60]
cmp rax, rbx
jbe 0x14003cf9a
mov rbx, rax
or rbx, 0xf
cmp rbx, rcx
jbe 0x14003cf51
mov rbx, rcx
movabs rax, 0x8000000000000027
mov rcx, rax
call fcn.140071a78
test rax, rax
je 0x14003d1e0
lea r12, [rax + 0x27]
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
lea rax, [r14 + rdi]
mov rdx, qword [rbp + 0x210]
jmp 0x14003cf96
mov ecx, 0x16
cmp rbx, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14003cf79
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14003d1e6
jmp 0x14003cf26
test rcx, rcx
je 0x14003cf93
call fcn.140071a78
mov r12, rax
lea rax, [r14 + rdi]
mov rdx, qword [rbp + 0x210]
jmp 0x14003cf96
mov r12, rsi
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rbx
mov r8, rdi
mov rcx, r12
call fcn.140073d70
lea rcx, [r12 + rdi]
mov r8, r14
mov rdx, qword [rbp + 0x220]
call fcn.140073d70
lea rax, [r14 + rdi]
mov byte [r12 + rax], 0
lea rdx, [rbp - 0x60]
mov rbx, qword [rbp - 0x60]
mov rdi, qword [rbp - 0x48]
cmp rdi, 0x10
cmovae rdx, rbx
movabs r8, 0xcbf29ce484222325
mov rcx, rsi
mov r9, qword [rbp - 0x50]
test r9, r9
je 0x14003d013
movabs r10, 0x100000001b3
nop dword [rax]
movzx eax, byte [rcx + rdx]
xor r8, rax
imul r8, r10
inc rcx
cmp rcx, r9
jb 0x14003d000
lea r9, [rbp - 0x4b]
movabs r10, 0xcccccccccccccccd
nop dword [rax]
nop word [rax + rax]
dec r9
mov rax, r10
mul r8
shr rdx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8, rdx
test rdx, rdx
jne 0x14003d030
mov r14, qword [rbp + 0x218]
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], 0xf
mov byte [r14], dl
lea rax, [rbp - 0x4b]
cmp r9, rax
je 0x14003d08b
lea r8, [rbp - 0x4b]
sub r8, r9
mov rdx, r9
mov rcx, r14
call fcn.140037080
cmp rdi, 0x10
jb 0x14003d0c2
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14003d0ba
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003d1e0
mov rcx, rbx
call fcn.140071ab4
cmp r15, 0x10
jb 0x14003d0fa
lea rdx, [r15 + 1]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003d0f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003d1e0
call fcn.140071ab4
cmp r13, 0x10
jb 0x14003d133
lea rdx, [r13 + 1]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003d12e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003d1e0
call fcn.140071ab4
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x14003d171
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003d16c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003d1e0
call fcn.140071ab4
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], si
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x14003d1c2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003d1bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003d1e0
call fcn.140071ab4
mov rax, r14
mov rbx, qword [rsp + 0x328]
add rsp, 0x2d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140077e4c
int3
call fcn.140036c60
int3
call fcn.140036d00
int3