Function at 0x7ff70b500d00
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov r13, r9
mov rbx, r8
mov rbp, rdx
cmp byte [rcx], 0
je 0x7ff70b500d3c
mov rdi, rbx
mov rsi, rdx
mov rcx, r9
rep movsb byte [rdi], byte [rsi]
jmp 0x7ff70b50107e
mov rdx, qword [0x7ff70b6921c8]
add rdx, 0x228
mov qword [rsp + 0x90], rdx
mov rax, qword gs:[0x30]
mov esi, dword [rax + 0x48]
mov r8, qword [rsp + 0x90]
mov eax, dword [r8 + 4]
cmp esi, eax
jne 0x7ff70b500d86
mov rax, qword [rsp + 0x90]
mov ecx, dword [rax]
inc ecx
mov rax, qword [rsp + 0x90]
mov dword [rax], ecx
jmp 0x7ff70b500dc5
mov rdi, qword [rsp + 0x90]
mov r9d, 1
mov eax, dword [rdi + 8]
cmp eax, r9d
je 0x7ff70b500da9
xor eax, eax
lock cmpxchg dword [rdi + 8], r9d
cmp eax, r9d
jne 0x7ff70b500dc1
mov ecx, dword [rdx + 0xc]
mov eax, dword [rdx + 0xc]
inc eax
mov dword [rdx + 0xc], eax
cmp ecx, 0x1fffffff
jbe 0x7ff70b500dbd
int3
pause
jmp 0x7ff70b500d94
mov dword [r8 + 4], esi
xor r15d, r15d
mov qword [rsp + 0x30], r15
mov rdi, qword [0x7ff70b6923e0]
test rdi, rdi
jne 0x7ff70b501025
mov r14d, r15d
mov r11d, 0xaedfae25
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rsp + 0x38], xmm0
movd ecx, xmm0
sub cx, 8
test r14d, r14d
je 0x7ff70b500e5f
mov rsi, qword [rsp + 0x40]
movzx ecx, cx
shr rcx, 1
lea r9, [rsi + rcx*2]
mov r8d, 0x811c9dc5
cmp rsi, r9
je 0x7ff70b500e56
movsx ecx, byte [rsi]
mov edx, ecx
sub cl, 0x41
mov edi, edx
or edi, 0x20
cmp cl, 0x19
cmova edi, edx
xor edi, r8d
imul r8d, edi, 0x1000193
add rsi, 2
cmp rsi, r9
jne 0x7ff70b500e30
cmp r8d, r14d
jne 0x7ff70b500fbb
mov r10, qword [rax + 0x30]
test r10, r10
je 0x7ff70b500fc8
movsxd rcx, dword [r10 + 0x3c]
mov rdx, qword [rcx + r10 + 0x88]
mov r12, rdx
shr r12, 0x20
mov ebx, edx
add rbx, r10
cmp rbx, r10
je 0x7ff70b500fbb
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x7ff70b500fbb
mov r15d, dword [rbx + 0x20]
nop
dec r9d
lea rcx, [r15 + r9*4]
mov edi, dword [rcx + r10]
add rdi, r10
mov r8d, 0x811c9dc5
movzx esi, byte [rdi]
inc rdi
test sil, sil
je 0x7ff70b500eea
nop
movsx ecx, sil
sub sil, 0x41
mov edx, ecx
or edx, 0x20
cmp sil, 0x19
cmova edx, ecx
xor edx, r8d
imul r8d, edx, 0x1000193
movzx esi, byte [rdi]
lea rdi, [rdi + 1]
test sil, sil
jne 0x7ff70b500ec0
cmp r8d, r11d
je 0x7ff70b500efc
test r9d, r9d
jne 0x7ff70b500ea0
mov rax, qword [rax]
jmp 0x7ff70b500e00
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
cmp rcx, rbx
jbe 0x7ff70b500fc3
lea rax, [r12 + rbx]
cmp rcx, rax
jae 0x7ff70b500fc3
mov r14d, 0x811c9dc5
mov r11d, r14d
movzx edi, byte [rcx]
cmp dil, 0x2e
je 0x7ff70b500f6a
nop dword [rax + rax]
movsx eax, dil
sub dil, 0x41
mov edx, eax
or edx, 0x20
cmp dil, 0x19
cmova edx, eax
xor edx, r14d
imul r14d, edx, 0x1000193
inc rcx
movzx edi, byte [rcx]
cmp dil, 0x2e
jne 0x7ff70b500f40
inc rcx
movzx edi, byte [rcx]
test dil, dil
je 0x7ff70b500faa
nop word [rax + rax]
movsx eax, dil
sub dil, 0x41
mov edx, eax
or edx, 0x20
cmp dil, 0x19
cmova edx, eax
xor edx, r11d
imul r11d, edx, 0x1000193
lea rcx, [rcx + 1]
movzx edi, byte [rcx]
test dil, dil
jne 0x7ff70b500f80
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x7ff70b500e00
xor r15d, r15d
jmp 0x7ff70b500fce
xor r15d, r15d
mov ecx, r15d
mov qword [0x7ff70b6923e0], rcx
nop word [rax + rax]
rdtsc
shl rdx, 0x20
or rax, rdx
lea rdx, [rax + rax*4]
mov qword [0x7ff70b6923e8], rdx
cmp rdx, rcx
je 0x7ff70b500fe0
mov rdi, rdx
xor rdi, rcx
mov qword [0x7ff70b6923e0], rdi
mov eax, edx
xor eax, 0xaedfae25
mov dword [0x7ff70b6923d8], eax
mov rbx, qword [rsp + 0xa0]
mov rbp, qword [rsp + 0x98]
jmp 0x7ff70b50102c
mov rdx, qword [0x7ff70b6923e8]
xor rdi, rdx
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov r9, r13
mov r8, rbx
mov rdx, rbp
mov rcx, qword [0x7ff70b68ddf0]
call rdi
nop
mov rax, qword [rsp + 0x90]
mov ecx, dword [rax]
mov rax, qword [rsp + 0x90]
test ecx, ecx
je 0x7ff70b501072
mov ecx, dword [rax]
dec ecx
mov rax, qword [rsp + 0x90]
mov dword [rax], ecx
jmp 0x7ff70b50107e
mov dword [rax + 4], r15d
mov dword [rax + 8], r15d
mov dword [rax + 0xc], r15d
mov al, 1
mov rbx, qword [rsp + 0xa8]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret