Function at 0x140067c60
Capabilities:
Access peb ldr_data
Encode data using xor
Execute anti-debugging instructions
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov r13, r9
mov rbp, r8
mov rsi, rdx
mov r15, rcx
test rdx, rdx
je 0x140067ca7
cmp dword [r8], 0
jne 0x140067dd2
test r9, r9
je 0x140067ddb
mov rdx, qword [0x1401c03e0]
test rdx, rdx
jne 0x140068165
mov rax, qword gs:[0x60]
xor ebp, ebp
mov edi, 0xfe41426b
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
movups xmmword [rsp + 0x40], xmm0
sub cx, 8
test ebp, ebp
je 0x140067d33
mov r9, qword [rsp + 0x48]
mov r10d, 0x811c9dc5
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
cmp r9, r11
je 0x140067d2a
nop
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
add r9, 2
xor r8d, r10d
imul r10d, r8d, 0x1000193
cmp r9, r11
jne 0x140067d00
cmp r10d, ebp
jne 0x140068116
mov rbx, qword [rax + 0x30]
test rbx, rbx
je 0x14006811e
movsxd rcx, dword [rbx + 0x3c]
mov rdx, qword [rcx + rbx + 0x88]
mov r12, rdx
mov esi, edx
shr r12, 0x20
add rsi, rbx
cmp rsi, rbx
je 0x140068116
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x140068116
mov r15d, dword [rsi + 0x20]
dec r11d
mov r10d, 0x811c9dc5
lea rcx, [r15 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx ecx, byte [r9]
inc r9
test cl, cl
je 0x140067dbc
movsx edx, cl
lea r9, [r9 + 1]
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
movzx ecx, byte [r9 - 1]
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
test cl, cl
jne 0x140067d91
cmp r10d, edi
je 0x14006805d
test r11d, r11d
jne 0x140067d72
mov rax, qword [rax]
jmp 0x140067cd0
test r13, r13
je 0x140067ca7
mov r10, qword [0x1401c0630]
test r10, r10
jne 0x14006802a
mov rax, qword gs:[0x60]
xor r14d, r14d
mov edi, 0x6c6ce526
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
movups xmmword [rsp + 0x40], xmm0
sub cx, 8
test r14d, r14d
je 0x140067e73
mov r9, qword [rsp + 0x48]
mov r10d, 0x811c9dc5
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
cmp r9, r11
je 0x140067e6a
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
add r9, 2
xor r8d, r10d
imul r10d, r8d, 0x1000193
cmp r9, r11
jne 0x140067e40
cmp r10d, r14d
jne 0x140067fc6
mov rbx, qword [rax + 0x30]
test rbx, rbx
je 0x140067fce
movsxd rcx, dword [rbx + 0x3c]
mov rdx, qword [rcx + rbx + 0x88]
mov r12, rdx
mov esi, edx
shr r12, 0x20
add rsi, rbx
cmp rsi, rbx
je 0x140067fc6
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x140067fc6
mov r15d, dword [rsi + 0x20]
dec r11d
mov r10d, 0x811c9dc5
lea rcx, [rbx + r11*4]
mov r8d, dword [rcx + r15]
add r8, rbx
movzx r9d, byte [r8]
inc r8
test r9b, r9b
je 0x140067efe
movsx ecx, r9b
lea r8, [r8 + 1]
sub r9b, 0x41
mov edx, ecx
or edx, 0x20
cmp r9b, 0x19
movzx r9d, byte [r8 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r9b, r9b
jne 0x140067ed2
cmp r10d, edi
je 0x140067f10
test r11d, r11d
jne 0x140067eb2
mov rax, qword [rax]
jmp 0x140067e10
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov r10d, dword [rcx + rdx*4]
add r10, rbx
cmp r10, rsi
jbe 0x140067fd1
lea rax, [r12 + rsi]
cmp r10, rax
jae 0x140067fd1
movzx edx, byte [r10]
mov edi, 0x811c9dc5
mov r14d, edi
cmp dl, 0x2e
je 0x140067f78
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r10 + 1]
cmova ecx, eax
inc r10
xor ecx, r14d
imul r14d, ecx, 0x1000193
cmp dl, 0x2e
jne 0x140067f50
movzx edx, byte [r10 + 1]
inc r10
test dl, dl
je 0x140067fb5
nop dword [rax]
nop dword [rax + rax]
movsx eax, dl
lea r10, [r10 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r10]
cmova ecx, eax
xor ecx, edi
imul edi, ecx, 0x1000193
test dl, dl
jne 0x140067f90
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x140067e10
xor r10d, r10d
mov qword [0x1401c0630], r10
nop dword [rax + rax]
rdtsc
shl rdx, 0x20
or rax, rdx
lea rcx, [rax + rax*4]
mov qword [0x1401c0638], rcx
cmp rcx, r10
je 0x140067fe0
mov rsi, qword [rsp + 0x98]
xor r10, rcx
mov rbp, qword [rsp + 0xa0]
mov eax, ecx
mov r15, qword [rsp + 0x90]
xor eax, 0x6c6ce526
mov dword [0x1401c0628], eax
mov qword [0x1401c0630], r10
jmp 0x140068031
mov rcx, qword [0x1401c0638]
mov r9d, dword [rsi]
xor r10, rcx
mov r8, qword [rsi + 8]
mov ecx, 0x10001
mov qword [rsp + 0x30], rbp
mov rdx, r15
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], 0
call r10
jmp 0x140068178
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov r8d, dword [rcx + rdx*4]
add r8, rbx
cmp r8, rsi
jbe 0x140068121
lea rax, [r12 + rsi]
cmp r8, rax
jae 0x140068121
movzx edx, byte [r8]
mov ebp, 0x811c9dc5
mov edi, ebp
cmp dl, 0x2e
je 0x1400680c6
nop dword [rax + rax]
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 + 1]
cmova ecx, eax
inc r8
xor ecx, ebp
imul ebp, ecx, 0x1000193
cmp dl, 0x2e
jne 0x1400680a0
movzx edx, byte [r8 + 1]
inc r8
test dl, dl
je 0x140068105
nop dword [rax]
nop word [rax + rax]
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8]
cmova ecx, eax
xor ecx, edi
imul edi, ecx, 0x1000193
test dl, dl
jne 0x1400680e0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x140067cd0
xor r8d, r8d
mov qword [0x1401c03e0], r8
nop dword [rax + rax]
rdtsc
shl rdx, 0x20
or rax, rdx
lea rcx, [rax + rax*4]
mov qword [0x1401c03e8], rcx
cmp rcx, r8
je 0x140068130
mov rdx, rcx
mov eax, ecx
xor rdx, r8
xor eax, 0xfe41426b
mov qword [0x1401c03e0], rdx
mov dword [0x1401c03d8], eax
jmp 0x14006816c
mov rcx, qword [0x1401c03e8]
xor rdx, rcx
mov ecx, 0x57
call rdx
xor eax, eax
mov rbx, qword [rsp + 0xa8]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret