Function at 0x140066f40
Capabilities:
Access peb ldr_data
Encode data using xor
Execute anti-debugging instructions
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov r13, r9
mov rbp, r8
mov rsi, rdx
mov r15, rcx
test rdx, rdx
je 0x140066f87
cmp dword [r8], 0
jne 0x1400670b2
test r9, r9
je 0x1400670bb
mov rdx, qword [0x1401bf3e0]
test rdx, rdx
jne 0x140067445
mov rax, qword gs:[0x60]
xor ebp, ebp
mov edi, 0xfe41426b
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
movups xmmword [rsp + 0x40], xmm0
sub cx, 8
test ebp, ebp
je 0x140067013
mov r9, qword [rsp + 0x48]
mov r10d, 0x811c9dc5
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
cmp r9, r11
je 0x14006700a
nop
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
add r9, 2
xor r8d, r10d
imul r10d, r8d, 0x1000193
cmp r9, r11
jne 0x140066fe0
cmp r10d, ebp
jne 0x1400673f6
mov rbx, qword [rax + 0x30]
test rbx, rbx
je 0x1400673fe
movsxd rcx, dword [rbx + 0x3c]
mov rdx, qword [rcx + rbx + 0x88]
mov r12, rdx
mov esi, edx
shr r12, 0x20
add rsi, rbx
cmp rsi, rbx
je 0x1400673f6
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1400673f6
mov r15d, dword [rsi + 0x20]
dec r11d
mov r10d, 0x811c9dc5
lea rcx, [r15 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx ecx, byte [r9]
inc r9
test cl, cl
je 0x14006709c
movsx edx, cl
lea r9, [r9 + 1]
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
movzx ecx, byte [r9 - 1]
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
test cl, cl
jne 0x140067071
cmp r10d, edi
je 0x14006733d
test r11d, r11d
jne 0x140067052
mov rax, qword [rax]
jmp 0x140066fb0
test r13, r13
je 0x140066f87
mov r10, qword [0x1401bf630]
test r10, r10
jne 0x14006730a
mov rax, qword gs:[0x60]
xor r14d, r14d
mov edi, 0x6c6ce526
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
movups xmmword [rsp + 0x40], xmm0
sub cx, 8
test r14d, r14d
je 0x140067153
mov r9, qword [rsp + 0x48]
mov r10d, 0x811c9dc5
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
cmp r9, r11
je 0x14006714a
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
add r9, 2
xor r8d, r10d
imul r10d, r8d, 0x1000193
cmp r9, r11
jne 0x140067120
cmp r10d, r14d
jne 0x1400672a6
mov rbx, qword [rax + 0x30]
test rbx, rbx
je 0x1400672ae
movsxd rcx, dword [rbx + 0x3c]
mov rdx, qword [rcx + rbx + 0x88]
mov r12, rdx
mov esi, edx
shr r12, 0x20
add rsi, rbx
cmp rsi, rbx
je 0x1400672a6
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x1400672a6
mov r15d, dword [rsi + 0x20]
dec r11d
mov r10d, 0x811c9dc5
lea rcx, [rbx + r11*4]
mov r8d, dword [rcx + r15]
add r8, rbx
movzx r9d, byte [r8]
inc r8
test r9b, r9b
je 0x1400671de
movsx ecx, r9b
lea r8, [r8 + 1]
sub r9b, 0x41
mov edx, ecx
or edx, 0x20
cmp r9b, 0x19
movzx r9d, byte [r8 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r9b, r9b
jne 0x1400671b2
cmp r10d, edi
je 0x1400671f0
test r11d, r11d
jne 0x140067192
mov rax, qword [rax]
jmp 0x1400670f0
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov r10d, dword [rcx + rdx*4]
add r10, rbx
cmp r10, rsi
jbe 0x1400672b1
lea rax, [r12 + rsi]
cmp r10, rax
jae 0x1400672b1
movzx edx, byte [r10]
mov edi, 0x811c9dc5
mov r14d, edi
cmp dl, 0x2e
je 0x140067258
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r10 + 1]
cmova ecx, eax
inc r10
xor ecx, r14d
imul r14d, ecx, 0x1000193
cmp dl, 0x2e
jne 0x140067230
movzx edx, byte [r10 + 1]
inc r10
test dl, dl
je 0x140067295
nop dword [rax]
nop dword [rax + rax]
movsx eax, dl
lea r10, [r10 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r10]
cmova ecx, eax
xor ecx, edi
imul edi, ecx, 0x1000193
test dl, dl
jne 0x140067270
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x1400670f0
xor r10d, r10d
mov qword [0x1401bf630], r10
nop dword [rax + rax]
rdtsc
shl rdx, 0x20
or rax, rdx
lea rcx, [rax + rax*4]
mov qword [0x1401bf638], rcx
cmp rcx, r10
je 0x1400672c0
mov rsi, qword [rsp + 0x98]
xor r10, rcx
mov rbp, qword [rsp + 0xa0]
mov eax, ecx
mov r15, qword [rsp + 0x90]
xor eax, 0x6c6ce526
mov dword [0x1401bf628], eax
mov qword [0x1401bf630], r10
jmp 0x140067311
mov rcx, qword [0x1401bf638]
mov r9d, dword [rsi]
xor r10, rcx
mov r8, qword [rsi + 8]
mov ecx, 0x10001
mov qword [rsp + 0x30], rbp
mov rdx, r15
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], 0
call r10
jmp 0x140067458
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov r8d, dword [rcx + rdx*4]
add r8, rbx
cmp r8, rsi
jbe 0x140067401
lea rax, [r12 + rsi]
cmp r8, rax
jae 0x140067401
movzx edx, byte [r8]
mov ebp, 0x811c9dc5
mov edi, ebp
cmp dl, 0x2e
je 0x1400673a6
nop dword [rax + rax]
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 + 1]
cmova ecx, eax
inc r8
xor ecx, ebp
imul ebp, ecx, 0x1000193
cmp dl, 0x2e
jne 0x140067380
movzx edx, byte [r8 + 1]
inc r8
test dl, dl
je 0x1400673e5
nop dword [rax]
nop word [rax + rax]
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8]
cmova ecx, eax
xor ecx, edi
imul edi, ecx, 0x1000193
test dl, dl
jne 0x1400673c0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x140066fb0
xor r8d, r8d
mov qword [0x1401bf3e0], r8
nop dword [rax + rax]
rdtsc
shl rdx, 0x20
or rax, rdx
lea rcx, [rax + rax*4]
mov qword [0x1401bf3e8], rcx
cmp rcx, r8
je 0x140067410
mov rdx, rcx
mov eax, ecx
xor rdx, r8
xor eax, 0xfe41426b
mov qword [0x1401bf3e0], rdx
mov dword [0x1401bf3d8], eax
jmp 0x14006744c
mov rcx, qword [0x1401bf3e8]
xor rdx, rcx
mov ecx, 0x57
call rdx
xor eax, eax
mov rbx, qword [rsp + 0xa8]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret