Function at 0x1400d0d40
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x50
mov rsi, rdx
mov rdi, rcx
mov rax, qword [0x1401eb038]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov eax, dword [rcx + 0x20]
test r8d, 0x180
jne 0x1400d0fcd
and eax, 0x1802
mov rcx, qword [rdi]
mov rbx, qword [rdi + 0x18]
test rcx, rcx
je 0x1400d0e63
cmp eax, 0x1000
je 0x1400d0e63
movabs rdx, 0x100000001b3
mov r12d, ebx
shr r12d, 8
mov r14d, ebx
shr r14d, 0x10
mov r15d, ebx
shr r15d, 0x18
mov r11, rbx
shr r11, 0x20
mov r10, rbx
shr r10, 0x28
mov r8, rbx
shr r8, 0x30
mov r9, rbx
shr r9, 0x38
and rbx, 0xff
movabs r13, 0xcbf29ce484222325
xor r13, rbx
imul r13, rdx
and r12d, 0xff
xor r12, r13
imul r12, rdx
and r14d, 0xff
xor r14, r12
imul r14, rdx
xor r14, r15
imul r14, rdx
and r11, 0xff
xor r11, r14
imul r11, rdx
and r10, 0xff
xor r10, r11
imul r10, rdx
and r8, 0xff
xor r8, r10
imul r8, rdx
xor r8, r9
imul r8, rdx
mov r9b, byte [rcx]
test r9b, r9b
je 0x1400d116a
inc rcx
movzx ebx, r9b
xor rbx, r8
imul rbx, rdx
mov r9b, byte [rcx]
inc rcx
mov r8, rbx
test r9b, r9b
jne 0x1400d0e4a
cmp eax, 0x800
jne 0x1400d0f48
cmp qword [rsi + 0x10], 0
jne 0x1400d1150
lea rax, [rsp + 0x3a]
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rax + 6], rcx
mov qword [rax], rcx
mov byte [rax - 1], 0x50
lea rcx, [rsp + 0x39]
cmp rbx, 0x80
jae 0x1400d0fa7
mov r14, rcx
mov byte [rax], bl
sub r14, rcx
add r14, 2
mov rbx, qword [rsi]
mov r8d, r14d
mov rcx, qword [rbx + 0x18]
lea r15, [rcx + r8]
cmp r15, qword [rbx + 0x10]
ja 0x1400d111d
test r8, r8
je 0x1400d0ed8
lea rdx, [rsp + 0x39]
call fcn.14012a790
mov qword [rbx + 0x18], r15
add dword [rsi + 0x20], r14d
mov rdx, qword [rdi]
test rdx, rdx
je 0x1400d0f2a
lea rdi, [rsp + 0x20]
mov rcx, rdi
call fcn.140162800
movzx r9d, byte [rdi + 0x17]
test r9b, r9b
js 0x1400d0f05
and r9d, 0x7f
jmp 0x1400d0f0f
mov r9, qword [rsp + 0x28]
mov rdi, qword [rsp + 0x20]
mov rcx, rsi
mov edx, 7
mov r8, rdi
call fcn.1400caa70
cmp byte [rsp + 0x37], 0
js 0x1400d118c
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.140127eb0
nop
add rsp, 0x50
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp eax, 2
jne 0x1400d119b
cmp qword [rsi + 0x10], 0
jne 0x1400d115d
lea rax, [rsp + 0x3a]
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rax + 6], rcx
mov qword [rax], rcx
mov byte [rax - 1], 0x30
lea rcx, [rsp + 0x39]
cmp rbx, 0x80
jb 0x1400d0ea5
mov rdx, rbx
mov r8d, edx
or r8b, 0x80
mov byte [rax], r8b
shr rbx, 7
inc rax
cmp rdx, 0x3fff
jbe 0x1400d0fc4
jmp 0x1400d0f88
mov rdx, rbx
mov r8d, edx
or r8b, 0x80
mov byte [rax], r8b
shr rbx, 7
inc rax
cmp rdx, 0x3fff
ja 0x1400d0fa7
lea r14, [rax - 1]
jmp 0x1400d0ea8
bt eax, 0xb
mov rdi, qword [rdi + 0x18]
jae 0x1400d108b
mov rbx, qword [0x1401fb1f8]
cmp qword [0x1401fb1f0], 0
jne 0x1400d0ff2
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor rbx, rdi
cmp qword [rsi + 0x10], 0
jne 0x1400d1172
lea rax, [rsp + 0x3a]
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rax + 6], rcx
mov qword [rax], rcx
mov byte [rax - 1], 0x40
lea rcx, [rsp + 0x39]
cmp rbx, 0x80
jae 0x1400d1068
mov r14, rcx
mov byte [rax], bl
sub r14, rcx
add r14, 2
mov rdi, qword [rsi]
mov r8d, r14d
mov rcx, qword [rdi + 0x18]
lea rbx, [rcx + r8]
cmp rbx, qword [rdi + 0x10]
ja 0x1400d112f
test r8, r8
je 0x1400d105b
lea rdx, [rsp + 0x39]
call fcn.14012a790
mov qword [rdi + 0x18], rbx
add dword [rsi + 0x20], r14d
jmp 0x1400d0f2a
mov rdx, rbx
mov r8d, edx
or r8b, 0x80
mov byte [rax], r8b
shr rbx, 7
inc rax
cmp rdx, 0x3fff
ja 0x1400d1068
lea r14, [rax - 1]
jmp 0x1400d102b
cmp qword [rsi + 0x10], 0
jne 0x1400d117f
lea rax, [rsp + 0x3a]
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rax + 6], rcx
mov qword [rax], rcx
mov byte [rax - 1], 0x40
lea rcx, [rsp + 0x39]
cmp rdi, 0x80
jae 0x1400d10fa
mov rbx, rcx
mov byte [rax], dil
sub rbx, rcx
add rbx, 2
mov rdi, qword [rsi]
mov r8d, ebx
mov rcx, qword [rdi + 0x18]
lea r14, [rcx + r8]
cmp r14, qword [rdi + 0x10]
ja 0x1400d1141
test r8, r8
je 0x1400d10ee
lea rdx, [rsp + 0x39]
call fcn.14012a790
mov qword [rdi + 0x18], r14
add dword [rsi + 0x20], ebx
jmp 0x1400d0f2a
mov rdx, rdi
mov r8d, edx
or r8b, 0x80
mov byte [rax], r8b
shr rdi, 7
inc rax
cmp rdx, 0x3fff
ja 0x1400d10fa
lea rbx, [rax - 1]
jmp 0x1400d10c1
lea rdx, [rsp + 0x39]
mov rcx, rbx
call fcn.1400cba90
jmp 0x1400d0edc
lea rdx, [rsp + 0x39]
mov rcx, rdi
call fcn.1400cba90
jmp 0x1400d105f
lea rdx, [rsp + 0x39]
mov rcx, rdi
call fcn.1400cba90
jmp 0x1400d10f2
mov rcx, rsi
call fcn.1400cabe0
jmp 0x1400d0e79
mov rcx, rsi
call fcn.1400cabe0
jmp 0x1400d0f5c
mov rbx, r8
jmp 0x1400d0e63
mov rcx, rsi
call fcn.1400cabe0
jmp 0x1400d1000
mov rcx, rsi
call fcn.1400cabe0
jmp 0x1400d1096
mov rcx, qword [rsp + 0x20]
call fcn.14012733c
jmp 0x1400d0f2a
cmp eax, 0x1000
jne 0x1400d0ee0
mov rcx, rsi
mov edx, SafeArrayDestroy
mov r8, rbx
call fcn.1400cfd10
jmp 0x1400d0ee0