Function at 0x14006e220
Capabilities:
Access peb ldr_data
Encode data using xor
Execute anti-debugging instructions
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov r13, r9
mov rbp, r8
mov rsi, rdx
mov r15, rcx
test rdx, rdx
je 0x14006e267
cmp dword [r8], 0
jne 0x14006e392
test r9, r9
je 0x14006e39b
mov rdx, qword [0x1401c5320]
test rdx, rdx
jne 0x14006e765
mov rax, qword gs:[0x60]
xor edi, edi
mov r14d, 0xfe41426b
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test edi, edi
je 0x14006e2f3
psrldq xmm0, 8
mov r10d, 0x811c9dc5
movq r9, xmm0
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
cmp r9, r11
je 0x14006e2ea
nop
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
add r9, 2
xor r8d, r10d
imul r10d, r8d, 0x1000193
cmp r9, r11
jne 0x14006e2c0
cmp r10d, edi
jne 0x14006e71c
mov rbx, qword [rax + 0x30]
test rbx, rbx
je 0x14006e724
movsxd rcx, dword [rbx + 0x3c]
mov rdx, qword [rcx + rbx + 0x88]
mov r12, rdx
mov esi, edx
shr r12, 0x20
add rsi, rbx
cmp rsi, rbx
je 0x14006e71c
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14006e71c
mov r15d, dword [rsi + 0x20]
dec r11d
mov r10d, 0x811c9dc5
lea rcx, [r15 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx ecx, byte [r9]
inc r9
test cl, cl
je 0x14006e37c
movsx edx, cl
lea r9, [r9 + 1]
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
movzx ecx, byte [r9 - 1]
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
test cl, cl
jne 0x14006e351
cmp r10d, r14d
je 0x14006e63d
test r11d, r11d
jne 0x14006e332
mov rax, qword [rax]
jmp 0x14006e290
test r13, r13
je 0x14006e267
mov r10, qword [0x1401c5570]
test r10, r10
jne 0x14006e60a
mov rax, qword gs:[0x60]
xor edi, edi
mov r14d, 0x6c6ce526
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test edi, edi
je 0x14006e433
psrldq xmm0, 8
mov r10d, 0x811c9dc5
movq r9, xmm0
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
cmp r9, r11
je 0x14006e42a
nop
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
add r9, 2
xor r8d, r10d
imul r10d, r8d, 0x1000193
cmp r9, r11
jne 0x14006e400
cmp r10d, edi
jne 0x14006e5a6
mov rbx, qword [rax + 0x30]
test rbx, rbx
je 0x14006e5ae
movsxd rcx, dword [rbx + 0x3c]
mov rdx, qword [rcx + rbx + 0x88]
mov r12, rdx
mov esi, edx
shr r12, 0x20
add rsi, rbx
cmp rsi, rbx
je 0x14006e5a6
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14006e5a6
mov r15d, dword [rsi + 0x20]
dec r11d
mov r10d, 0x811c9dc5
lea rcx, [r15 + r11*4]
mov r8d, dword [rcx + rbx]
add r8, rbx
movzx r9d, byte [r8]
inc r8
test r9b, r9b
je 0x14006e4be
movsx ecx, r9b
lea r8, [r8 + 1]
sub r9b, 0x41
mov edx, ecx
or edx, 0x20
cmp r9b, 0x19
movzx r9d, byte [r8 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r9b, r9b
jne 0x14006e492
cmp r10d, r14d
je 0x14006e4d0
test r11d, r11d
jne 0x14006e472
mov rax, qword [rax]
jmp 0x14006e3d0
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov r10d, dword [rcx + rdx*4]
add r10, rbx
cmp r10, rsi
jbe 0x14006e5b1
lea rax, [r12 + rsi]
cmp r10, rax
jae 0x14006e5b1
movzx edx, byte [r10]
mov edi, 0x811c9dc5
mov dword [rsp + 0x40], edi
mov r8d, edi
mov dword [rsp + 0x44], edi
cmp dl, 0x2e
je 0x14006e54a
nop word [rax + rax]
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r10 + 1]
cmova ecx, eax
inc r10
xor ecx, edi
imul edi, ecx, 0x1000193
cmp dl, 0x2e
jne 0x14006e520
mov dword [rsp + 0x40], edi
movzx edx, byte [r10 + 1]
inc r10
test dl, dl
je 0x14006e58c
nop word [rax + rax]
movsx eax, dl
lea r10, [r10 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r10]
cmova ecx, eax
xor ecx, r8d
imul r8d, ecx, 0x1000193
test dl, dl
jne 0x14006e560
mov dword [rsp + 0x44], r8d
mov rax, qword gs:[0x60]
mov r14, qword [rsp + 0x40]
shr r14, 0x20
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14006e3d0
xor r10d, r10d
mov qword [0x1401c5570], r10
nop dword [rax + rax]
rdtsc
shl rdx, 0x20
or rax, rdx
lea rcx, [rax + rax*4]
mov qword [0x1401c5578], rcx
cmp rcx, r10
je 0x14006e5c0
mov rsi, qword [rsp + 0x98]
xor r10, rcx
mov rbp, qword [rsp + 0xa0]
mov eax, ecx
mov r15, qword [rsp + 0x90]
xor eax, 0x6c6ce526
mov dword [0x1401c5568], eax
mov qword [0x1401c5570], r10
jmp 0x14006e611
mov rcx, qword [0x1401c5578]
mov r9d, dword [rsi]
xor r10, rcx
mov r8, qword [rsi + 8]
mov ecx, 0x10001
mov qword [rsp + 0x30], rbp
mov rdx, r15
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], 0
call r10
jmp 0x14006e778
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov r8d, dword [rcx + rdx*4]
add r8, rbx
cmp r8, rsi
jbe 0x14006e727
lea rax, [r12 + rsi]
cmp r8, rax
jae 0x14006e727
movzx edx, byte [r8]
mov edi, 0x811c9dc5
mov dword [rsp + 0x98], edi
mov r9d, edi
mov dword [rsp + 0x9c], edi
cmp dl, 0x2e
je 0x14006e6bd
nop word [rax + rax]
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 + 1]
cmova ecx, eax
inc r8
xor ecx, edi
imul edi, ecx, 0x1000193
cmp dl, 0x2e
jne 0x14006e690
mov dword [rsp + 0x98], edi
movzx edx, byte [r8 + 1]
inc r8
test dl, dl
je 0x14006e6ff
nop dword [rax]
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14006e6d0
mov dword [rsp + 0x9c], r9d
mov rax, qword gs:[0x60]
mov r14, qword [rsp + 0x98]
shr r14, 0x20
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14006e290
xor r8d, r8d
mov qword [0x1401c5320], r8
nop
rdtsc
shl rdx, 0x20
or rax, rdx
lea rcx, [rax + rax*4]
mov qword [0x1401c5328], rcx
cmp rcx, r8
je 0x14006e730
mov rdx, rcx
mov eax, ecx
xor rdx, r8
xor eax, 0xfe41426b
mov qword [0x1401c5320], rdx
mov dword [0x1401c5318], eax
jmp 0x14006e76c
mov rcx, qword [0x1401c5328]
xor rdx, rcx
mov ecx, 0x57
call rdx
xor eax, eax
mov rbx, qword [rsp + 0xa8]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret