Function at 0x7ff70b5384f0
Capabilities:
Access peb ldr_data
Encode data using xor
Execute anti-debugging instructions
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov r13, r9
mov rbp, r8
mov rsi, rdx
mov r15, rcx
test rdx, rdx
je 0x7ff70b538537
cmp dword [r8], 0
jne 0x7ff70b538662
test r9, r9
je 0x7ff70b53866b
mov rdx, qword [0x7ff70b692398]
test rdx, rdx
jne 0x7ff70b5389f5
mov rax, qword gs:[0x60]
xor ebp, ebp
mov edi, 0xfe41426b
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
movups xmmword [rsp + 0x40], xmm0
sub cx, 8
test ebp, ebp
je 0x7ff70b5385c3
mov r9, qword [rsp + 0x48]
mov r10d, 0x811c9dc5
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
cmp r9, r11
je 0x7ff70b5385ba
nop
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
add r9, 2
xor r8d, r10d
imul r10d, r8d, 0x1000193
cmp r9, r11
jne 0x7ff70b538590
cmp r10d, ebp
jne 0x7ff70b5389a6
mov rbx, qword [rax + 0x30]
test rbx, rbx
je 0x7ff70b5389ae
movsxd rcx, dword [rbx + 0x3c]
mov rdx, qword [rcx + rbx + 0x88]
mov r12, rdx
mov esi, edx
shr r12, 0x20
add rsi, rbx
cmp rsi, rbx
je 0x7ff70b5389a6
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x7ff70b5389a6
mov r15d, dword [rsi + 0x20]
dec r11d
mov r10d, 0x811c9dc5
lea rcx, [r15 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx ecx, byte [r9]
inc r9
test cl, cl
je 0x7ff70b53864c
movsx edx, cl
lea r9, [r9 + 1]
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
movzx ecx, byte [r9 - 1]
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
test cl, cl
jne 0x7ff70b538621
cmp r10d, edi
je 0x7ff70b5388ed
test r11d, r11d
jne 0x7ff70b538602
mov rax, qword [rax]
jmp 0x7ff70b538560
test r13, r13
je 0x7ff70b538537
mov r10, qword [0x7ff70b6925e8]
test r10, r10
jne 0x7ff70b5388ba
mov rax, qword gs:[0x60]
xor r14d, r14d
mov edi, 0x6c6ce526
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
movups xmmword [rsp + 0x40], xmm0
sub cx, 8
test r14d, r14d
je 0x7ff70b538703
mov r9, qword [rsp + 0x48]
mov r10d, 0x811c9dc5
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
cmp r9, r11
je 0x7ff70b5386fa
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
add r9, 2
xor r8d, r10d
imul r10d, r8d, 0x1000193
cmp r9, r11
jne 0x7ff70b5386d0
cmp r10d, r14d
jne 0x7ff70b538856
mov rbx, qword [rax + 0x30]
test rbx, rbx
je 0x7ff70b53885e
movsxd rcx, dword [rbx + 0x3c]
mov rdx, qword [rcx + rbx + 0x88]
mov r12, rdx
mov esi, edx
shr r12, 0x20
add rsi, rbx
cmp rsi, rbx
je 0x7ff70b538856
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x7ff70b538856
mov r15d, dword [rsi + 0x20]
dec r11d
mov r10d, 0x811c9dc5
lea rcx, [rbx + r11*4]
mov r8d, dword [rcx + r15]
add r8, rbx
movzx r9d, byte [r8]
inc r8
test r9b, r9b
je 0x7ff70b53878e
movsx ecx, r9b
lea r8, [r8 + 1]
sub r9b, 0x41
mov edx, ecx
or edx, 0x20
cmp r9b, 0x19
movzx r9d, byte [r8 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r9b, r9b
jne 0x7ff70b538762
cmp r10d, edi
je 0x7ff70b5387a0
test r11d, r11d
jne 0x7ff70b538742
mov rax, qword [rax]
jmp 0x7ff70b5386a0
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov r10d, dword [rcx + rdx*4]
add r10, rbx
cmp r10, rsi
jbe 0x7ff70b538861
lea rax, [r12 + rsi]
cmp r10, rax
jae 0x7ff70b538861
movzx edx, byte [r10]
mov edi, 0x811c9dc5
mov r14d, edi
cmp dl, 0x2e
je 0x7ff70b538808
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r10 + 1]
cmova ecx, eax
inc r10
xor ecx, r14d
imul r14d, ecx, 0x1000193
cmp dl, 0x2e
jne 0x7ff70b5387e0
movzx edx, byte [r10 + 1]
inc r10
test dl, dl
je 0x7ff70b538845
nop dword [rax]
nop dword [rax + rax]
movsx eax, dl
lea r10, [r10 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r10]
cmova ecx, eax
xor ecx, edi
imul edi, ecx, 0x1000193
test dl, dl
jne 0x7ff70b538820
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x7ff70b5386a0
xor r10d, r10d
mov qword [0x7ff70b6925e8], r10
nop dword [rax + rax]
rdtsc
shl rdx, 0x20
or rax, rdx
lea rcx, [rax + rax*4]
mov qword [0x7ff70b6925f0], rcx
cmp rcx, r10
je 0x7ff70b538870
mov rsi, qword [rsp + 0x98]
xor r10, rcx
mov rbp, qword [rsp + 0xa0]
mov eax, ecx
mov r15, qword [rsp + 0x90]
xor eax, 0x6c6ce526
mov dword [0x7ff70b6925e0], eax
mov qword [0x7ff70b6925e8], r10
jmp 0x7ff70b5388c1
mov rcx, qword [0x7ff70b6925f0]
mov r9d, dword [rsi]
xor r10, rcx
mov r8, qword [rsi + 8]
mov ecx, 0x10001
mov qword [rsp + 0x30], rbp
mov rdx, r15
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], 0
call r10
jmp 0x7ff70b538a08
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov r8d, dword [rcx + rdx*4]
add r8, rbx
cmp r8, rsi
jbe 0x7ff70b5389b1
lea rax, [r12 + rsi]
cmp r8, rax
jae 0x7ff70b5389b1
movzx edx, byte [r8]
mov ebp, 0x811c9dc5
mov edi, ebp
cmp dl, 0x2e
je 0x7ff70b538956
nop dword [rax + rax]
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 + 1]
cmova ecx, eax
inc r8
xor ecx, ebp
imul ebp, ecx, 0x1000193
cmp dl, 0x2e
jne 0x7ff70b538930
movzx edx, byte [r8 + 1]
inc r8
test dl, dl
je 0x7ff70b538995
nop dword [rax]
nop word [rax + rax]
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8]
cmova ecx, eax
xor ecx, edi
imul edi, ecx, 0x1000193
test dl, dl
jne 0x7ff70b538970
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x7ff70b538560
xor r8d, r8d
mov qword [0x7ff70b692398], r8
nop dword [rax + rax]
rdtsc
shl rdx, 0x20
or rax, rdx
lea rcx, [rax + rax*4]
mov qword [0x7ff70b6923a0], rcx
cmp rcx, r8
je 0x7ff70b5389c0
mov rdx, rcx
mov eax, ecx
xor rdx, r8
xor eax, 0xfe41426b
mov qword [0x7ff70b692398], rdx
mov dword [0x7ff70b692390], eax
jmp 0x7ff70b5389fc
mov rcx, qword [0x7ff70b6923a0]
xor rdx, rcx
mov ecx, 0x57
call rdx
xor eax, eax
mov rbx, qword [rsp + 0xa8]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret