Function at 0x140067bf0
Capabilities:
Access peb ldr_data
Encode data using xor
Execute anti-debugging instructions
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov r13, r9
mov rbp, r8
mov rsi, rdx
mov r15, rcx
test rdx, rdx
je 0x140067c37
cmp dword [r8], 0
jne 0x140067d62
test r9, r9
je 0x140067d6b
mov rdx, qword [0x1401c03e0]
test rdx, rdx
jne 0x1400680f5
mov rax, qword gs:[0x60]
xor ebp, ebp
mov edi, 0xfe41426b
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
movups xmmword [rsp + 0x40], xmm0
sub cx, 8
test ebp, ebp
je 0x140067cc3
mov r9, qword [rsp + 0x48]
mov r10d, 0x811c9dc5
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
cmp r9, r11
je 0x140067cba
nop
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
add r9, 2
xor r8d, r10d
imul r10d, r8d, 0x1000193
cmp r9, r11
jne 0x140067c90
cmp r10d, ebp
jne 0x1400680a6
mov rbx, qword [rax + 0x30]
test rbx, rbx
je 0x1400680ae
movsxd rcx, dword [rbx + 0x3c]
mov rdx, qword [rcx + rbx + 0x88]
mov r12, rdx
mov esi, edx
shr r12, 0x20
add rsi, rbx
cmp rsi, rbx
je 0x1400680a6
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1400680a6
mov r15d, dword [rsi + 0x20]
dec r11d
mov r10d, 0x811c9dc5
lea rcx, [r15 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx ecx, byte [r9]
inc r9
test cl, cl
je 0x140067d4c
movsx edx, cl
lea r9, [r9 + 1]
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
movzx ecx, byte [r9 - 1]
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
test cl, cl
jne 0x140067d21
cmp r10d, edi
je 0x140067fed
test r11d, r11d
jne 0x140067d02
mov rax, qword [rax]
jmp 0x140067c60
test r13, r13
je 0x140067c37
mov r10, qword [0x1401c0630]
test r10, r10
jne 0x140067fba
mov rax, qword gs:[0x60]
xor r14d, r14d
mov edi, 0x6c6ce526
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
movups xmmword [rsp + 0x40], xmm0
sub cx, 8
test r14d, r14d
je 0x140067e03
mov r9, qword [rsp + 0x48]
mov r10d, 0x811c9dc5
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
cmp r9, r11
je 0x140067dfa
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
add r9, 2
xor r8d, r10d
imul r10d, r8d, 0x1000193
cmp r9, r11
jne 0x140067dd0
cmp r10d, r14d
jne 0x140067f56
mov rbx, qword [rax + 0x30]
test rbx, rbx
je 0x140067f5e
movsxd rcx, dword [rbx + 0x3c]
mov rdx, qword [rcx + rbx + 0x88]
mov r12, rdx
mov esi, edx
shr r12, 0x20
add rsi, rbx
cmp rsi, rbx
je 0x140067f56
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x140067f56
mov r15d, dword [rsi + 0x20]
dec r11d
mov r10d, 0x811c9dc5
lea rcx, [rbx + r11*4]
mov r8d, dword [rcx + r15]
add r8, rbx
movzx r9d, byte [r8]
inc r8
test r9b, r9b
je 0x140067e8e
movsx ecx, r9b
lea r8, [r8 + 1]
sub r9b, 0x41
mov edx, ecx
or edx, 0x20
cmp r9b, 0x19
movzx r9d, byte [r8 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r9b, r9b
jne 0x140067e62
cmp r10d, edi
je 0x140067ea0
test r11d, r11d
jne 0x140067e42
mov rax, qword [rax]
jmp 0x140067da0
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov r10d, dword [rcx + rdx*4]
add r10, rbx
cmp r10, rsi
jbe 0x140067f61
lea rax, [r12 + rsi]
cmp r10, rax
jae 0x140067f61
movzx edx, byte [r10]
mov edi, 0x811c9dc5
mov r14d, edi
cmp dl, 0x2e
je 0x140067f08
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r10 + 1]
cmova ecx, eax
inc r10
xor ecx, r14d
imul r14d, ecx, 0x1000193
cmp dl, 0x2e
jne 0x140067ee0
movzx edx, byte [r10 + 1]
inc r10
test dl, dl
je 0x140067f45
nop dword [rax]
nop dword [rax + rax]
movsx eax, dl
lea r10, [r10 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r10]
cmova ecx, eax
xor ecx, edi
imul edi, ecx, 0x1000193
test dl, dl
jne 0x140067f20
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x140067da0
xor r10d, r10d
mov qword [0x1401c0630], r10
nop dword [rax + rax]
rdtsc
shl rdx, 0x20
or rax, rdx
lea rcx, [rax + rax*4]
mov qword [0x1401c0638], rcx
cmp rcx, r10
je 0x140067f70
mov rsi, qword [rsp + 0x98]
xor r10, rcx
mov rbp, qword [rsp + 0xa0]
mov eax, ecx
mov r15, qword [rsp + 0x90]
xor eax, 0x6c6ce526
mov dword [0x1401c0628], eax
mov qword [0x1401c0630], r10
jmp 0x140067fc1
mov rcx, qword [0x1401c0638]
mov r9d, dword [rsi]
xor r10, rcx
mov r8, qword [rsi + 8]
mov ecx, 0x10001
mov qword [rsp + 0x30], rbp
mov rdx, r15
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], 0
call r10
jmp 0x140068108
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov r8d, dword [rcx + rdx*4]
add r8, rbx
cmp r8, rsi
jbe 0x1400680b1
lea rax, [r12 + rsi]
cmp r8, rax
jae 0x1400680b1
movzx edx, byte [r8]
mov ebp, 0x811c9dc5
mov edi, ebp
cmp dl, 0x2e
je 0x140068056
nop dword [rax + rax]
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 + 1]
cmova ecx, eax
inc r8
xor ecx, ebp
imul ebp, ecx, 0x1000193
cmp dl, 0x2e
jne 0x140068030
movzx edx, byte [r8 + 1]
inc r8
test dl, dl
je 0x140068095
nop dword [rax]
nop word [rax + rax]
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8]
cmova ecx, eax
xor ecx, edi
imul edi, ecx, 0x1000193
test dl, dl
jne 0x140068070
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x140067c60
xor r8d, r8d
mov qword [0x1401c03e0], r8
nop dword [rax + rax]
rdtsc
shl rdx, 0x20
or rax, rdx
lea rcx, [rax + rax*4]
mov qword [0x1401c03e8], rcx
cmp rcx, r8
je 0x1400680c0
mov rdx, rcx
mov eax, ecx
xor rdx, r8
xor eax, 0xfe41426b
mov qword [0x1401c03e0], rdx
mov dword [0x1401c03d8], eax
jmp 0x1400680fc
mov rcx, qword [0x1401c03e8]
xor rdx, rcx
mov ecx, 0x57
call rdx
xor eax, eax
mov rbx, qword [rsp + 0xa8]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret