Function at 0x14006a9c0
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
mov rax, qword [0x140398130]
xor rax, rsp
mov qword [rbp + 0xd8], rax
movzx ebx, r9b
mov r12, r8
mov r13, rdx
mov qword [rbp + 0x30], rdx
mov qword [rbp + 0x38], r8
xor esi, esi
mov dword [rsp + 0x30], esi
mov byte [rbp + 0x40], sil
mov qword [rbp + 0x48], rsi
mov qword [rbp + 0x28], rsi
lea rax, [rbp + 0x28]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x48]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x40]
mov r8, rdx
lea rdx, [rbp + 0x58]
lea rcx, [0x14039d278]
call fcn.1400753a0
nop
cmp byte [rbp + 0x40], sil
je 0x14006aada
mov rdi, qword [r12 + 0x10]
mov rcx, r12
mov r11, qword [r12 + 0x18]
cmp r11, 8
jb 0x14006aa5f
mov rcx, qword [r12]
lea rdx, [rbp + 0x58]
cmp qword [rbp + 0x70], 8
cmovae rdx, qword [rbp + 0x58]
mov r10, qword [rbp + 0x68]
cmp r10, rdi
jne 0x14006aa9d
mov r8, r10
test r10, r10
je 0x14006b553
sub rcx, rdx
movzx eax, word [rdx]
cmp ax, word [rdx + rcx]
jne 0x14006aa9d
add rdx, 2
sub r8, 1
jne 0x14006aa85
jmp 0x14006b553
mov rdx, qword [rbp + 0x48]
test bl, bl
je 0x14006aaac
inc rdx
mov qword [rbp + 0x48], rdx
mov rcx, qword [rbp + 0x28]
shl rcx, 5
add rcx, qword [0x14039d278]
mov r9, r12
cmp r11, 8
jb 0x14006aac8
mov r9, qword [r12]
mov qword [rsp + 0x20], rdi
mov r8, r10
call fcn.14006a600
jmp 0x14006ae5a
mov eax, 4
mov r14, 0xffffffffffffffff
test bl, bl
je 0x14006ab3d
mov r8, r12
lea rcx, [rbp - 0x18]
call fcn.1400750f0
mov rbx, rax
mov dword [rsp + 0x30], 1
lea edx, [r14 + 0x23]
mov rcx, rax
call fcn.140085390
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x38], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x28], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 7
mov word [rbx], si
lea r15, [rbp - 0x38]
mov edi, 0x1003
mov dword [rsp + 0x30], edi
jmp 0x14006abf5
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], rsi
mov qword [rbp - 0x80], rsi
mov rdi, qword [r12 + 0x10]
mov rsi, r12
cmp qword [r12 + 0x18], 8
jb 0x14006ab62
mov rsi, qword [r12]
movabs rbx, 0x7ffffffffffffffe
cmp rdi, rbx
ja 0x14006b59a
cmp rdi, 8
jae 0x14006ab92
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], 7
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x68], xmm0
jmp 0x14006abe8
mov rax, rdi
or rax, 7
cmp rax, rbx
ja 0x14006abad
mov rbx, rax
mov ecx, 0xa
cmp rax, rcx
cmovb rbx, rcx
mov rdx, rbx
add rdx, 1
cmovb rdx, r14
lea rcx, [rsp + 0x68]
call fcn.140085b50
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rbx
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.140315cb0
mov eax, 4
lea r15, [rsp + 0x68]
mov edi, eax
mov dword [rsp + 0x30], eax
xor esi, esi
mov dword [rsp + 0x38], Ordinal_79
mov qword [rsp + 0x3c], 0x4a0010
mov dword [rsp + 0x44], 0x5d
mov dword [rsp + 0x48], 0x560010
mov qword [rsp + 0x4c], 4
mov dword [rsp + 0x54], 0
mov dword [rsp + 0x58], 0x63cc0000
mov dword [rsp + 0x5c], 0x3050009
mov word [rsp + 0x60], WSAStartup
mov ebx, esi
lea r10, [rsp + 0x50]
nop word [rax + rax]
lea r11d, [rbx + rbx*2]
movzx ecx, word [rsp + r11*2 + 0x38]
mov word [r10], cx
movzx eax, bx
add ax, ax
lea esi, [rax + rbx]
movzx r8d, byte [rsp + 0x5c]
add r8w, si
xor r8w, cx
mov word [r10], r8w
xor dl, dl
lea eax, [r11 + 1]
movzx r9d, word [rsp + rax*2 + 0x38]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r9w
shr ax, cl
test al, 1
jne 0x14006aca7
inc dl
cmp dl, 4
jne 0x14006ac90
jmp 0x14006acb8
movzx r8d, r8w
movzx eax, byte [rsp + 0x5f]
btc r8d, eax
mov word [r10], r8w
mov dl, 5
lea eax, [r11 + 2]
lea r11, [rsp + 0x38]
lea r11, [r11 + rax*2]
movzx r9d, word [r11]
nop dword [rax + rax]
movzx ecx, dl
movzx eax, r9w
shr ax, cl
test al, 1
jne 0x14006ace7
inc dl
cmp dl, 8
jne 0x14006acd0
jmp 0x14006acfb
movzx ecx, r8w
movzx eax, byte [rsp + 0x5e]
btc ecx, eax
movzx r8d, cx
mov word [r10], cx
xor cl, cl
movzx edx, word [r11]
movzx eax, dx
shr ax, cl
test al, 1
jne 0x14006ad14
inc cl
cmp cl, 5
jne 0x14006ad01
jmp 0x14006ad28
movzx ecx, r8w
movzx eax, byte [rsp + 0x5d]
btc ecx, eax
movzx r8d, cx
mov word [r10], cx
movzx eax, byte [rsp + 0x5b]
add ax, si
xor ax, r8w
mov word [r10], ax
inc ebx
add r10, 2
cmp ebx, 4
jne 0x14006ac50
mov r8, r13
lea rcx, [rbp + 8]
call fcn.1400750f0
nop
lea rcx, [rsp + 0x50]
nop dword [rax]
inc r14
cmp word [rcx + r14*2], 0
jne 0x14006ad60
mov r8, r14
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140085d20
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x48], xmm1
xor esi, esi
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
bts edi, 0xa
mov dword [rsp + 0x30], edi
mov r9, r15
lea r8, [rbp - 0x58]
lea rcx, [rbp - 0x78]
call fcn.14006a7c0
bts edi, 0xb
mov dword [rsp + 0x30], edi
mov rdx, qword [0x14039d280]
cmp rdx, qword [0x14039d288]
je 0x14006adf5
movups xmm0, xmmword [rbp - 0x78]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp - 0x68]
movups xmmword [rdx + 0x10], xmm1
movdqa xmm0, xmmword [0x140377120]
movdqu xmmword [rbp - 0x68], xmm0
mov word [rbp - 0x78], si
add qword [0x14039d280], 0x20
jmp 0x14006ae06
lea r8, [rbp - 0x78]
lea rcx, [0x14039d278]
call fcn.140085130
nop
lea rcx, [rbp - 0x78]
call fcn.140085e10
nop
lea rcx, [rbp - 0x58]
call fcn.140085e10
nop
lea rcx, [rbp + 8]
call fcn.140085e10
nop
test dil, 4
je 0x14006ae38
and edi, 0xfffffffb
lea rcx, [rsp + 0x68]
call fcn.140085e10
nop
test dil, 2
je 0x14006ae4b
and edi, 0xfffffffd
lea rcx, [rbp - 0x38]
call fcn.140085e10
nop
test dil, 1
je 0x14006ae5a
lea rcx, [rbp - 0x18]
call fcn.140085e10
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa8], xmm1
xor r8d, r8d
lea rdx, [0x140374568]
lea rcx, [rbp + 0x98]
call fcn.1400855f0
nop
mov rbx, qword [0x14039d278]
mov rdi, qword [0x14039d280]
cmp rbx, rdi
je 0x14006aee4
nop dword [rax]
lea r8, [0x140373e00]
mov rdx, rbx
lea rcx, [rbp - 0x18]
call fcn.140076390
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x14006aec2
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x98]
call fcn.140085d20
nop
lea rcx, [rbp - 0x18]
call fcn.140085e10
add rbx, 0x20
cmp rbx, rdi
jne 0x14006aea0
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x78]
call fcn.140084980
nop
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x14006af99
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x14006af99
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rsi]
add r9, rbx
mov r10d, 0x415b59bb
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14006af94
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x14006af60
cmp r10d, 0xcd95cedc
je 0x14006afa1
test r11d, r11d
jne 0x14006af40
mov rax, qword [rax]
jmp 0x14006af10
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r10d, dword [rcx + rax*4]
add r10, rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14039d290]
call r10
cmp eax, 0xffffffff
je 0x14006b2bd
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
movups xmmword [rbp + 0xc8], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x14006b089
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x14006b089
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rsi]
add r9, rbx
mov r10d, 0xacf2a1fd
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14006b084
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x14006b050
cmp r10d, 0x87e43349
je 0x14006b091
test r11d, r11d
jne 0x14006b030
mov rax, qword [rax]
jmp 0x14006b000
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r10d, dword [rcx + rax*4]
add r10, rbx
lea rax, [rbp + 0xb8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xffffffff
mov r9d, 0xffffffff
xor r8d, r8d
lea edx, [r8 + 2]
mov rcx, qword [0x14039d290]
call r10
mov dword [rbp + 0x50], 0
lea r15, [rbp + 0x78]
cmp qword [rbp + 0x90], 0x10
cmovae r15, qword [rbp + 0x78]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x14006b189
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x14006b189
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0x72a72384
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14006b184
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x14006b150
cmp r10d, 0x3e0b82d
je 0x14006b191
test r11d, r11d
jne 0x14006b130
mov rax, qword [rax]
jmp 0x14006b100
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r10d, dword [rcx + rax*4]
add r10, rbx
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0x50]
mov r8d, dword [rbp + 0x88]
mov rdx, r15
mov rcx, qword [0x14039d290]
call r10
mov rcx, qword gs:[0x60]
test eax, eax
mov rax, qword [rcx + 0x18]
mov rax, qword [rax + 0x10]
jne 0x14006b300
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x14006b279
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x14006b279
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0xe1f9a709
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14006b274
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x14006b240
cmp r10d, 0xcdfbbf92
je 0x14006b281
test r11d, r11d
jne 0x14006b220
mov rax, qword [rax]
jmp 0x14006b1f0
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r10d, dword [rcx + rax*4]
add r10, rbx
lea rax, [rbp + 0xb8]
mov qword [rsp + 0x20], rax
xor edx, edx
mov r9d, 0xffffffff
mov r8d, r9d
mov rcx, qword [0x14039d290]
call r10
nop
lea rcx, [rbp + 0x78]
call fcn.140087070
nop
lea rcx, [rbp + 0x98]
call fcn.140085e10
nop
lea rcx, [rbp + 0x58]
call fcn.140085e10
nop
mov rcx, r13
call fcn.140085e10
nop
mov rcx, r12
call fcn.140085e10
xor al, al
jmp 0x14006b570
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x14006b389
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x14006b389
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rsi]
add r9, rbx
mov r10d, 0xafba9548
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14006b384
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x14006b350
cmp r10d, 0x7c31e1d6
je 0x14006b391
test r11d, r11d
jne 0x14006b330
mov rax, qword [rax]
jmp 0x14006b300
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov edx, dword [rcx + rax*4]
add rdx, rbx
mov rcx, qword [0x14039d290]
call rdx
mov rcx, qword gs:[0x60]
test eax, eax
mov rax, qword [rcx + 0x18]
mov rax, qword [rax + 0x10]
jne 0x14006b470
nop dword [rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x14006b45d
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x14006b45d
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rsi]
add r9, rbx
mov r10d, 0xc13f31a1
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14006b458
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x14006b420
cmp r10d, 0x71d91a1a
je 0x14006b281
test r11d, r11d
jne 0x14006b400
mov rax, qword [rax]
jmp 0x14006b3d0
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x14006b4f8
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x14006b4f8
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0x2c0d2d44
movzx ecx, byte [r9]
inc r9
test cl, cl
je 0x14006b4f3
nop
movsx edx, cl
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
movzx ecx, byte [r9]
lea r9, [r9 + 1]
test cl, cl
jne 0x14006b4c0
cmp r10d, 0xa547d8a3
je 0x14006b500
test r11d, r11d
jne 0x14006b4a0
mov rax, qword [rax]
jmp 0x14006b470
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r10d, dword [rcx + rax*4]
add r10, rbx
lea rax, [rbp + 0xb8]
mov qword [rsp + 0x20], rax
xor edx, edx
mov r9d, 0xffffffff
mov r8d, r9d
mov rcx, qword [0x14039d290]
call r10
nop
lea rcx, [rbp + 0x78]
call fcn.140087070
nop
lea rcx, [rbp + 0x98]
call fcn.140085e10
nop
lea rcx, [rbp + 0x58]
call fcn.140085e10
nop
mov rcx, r13
call fcn.140085e10
nop
mov rcx, r12
call fcn.140085e10
mov al, 1
mov rcx, qword [rbp + 0xd8]
xor rcx, rsp
call fcn.1403139c0
mov rbx, qword [rsp + 0x220]
add rsp, 0x1e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140086af0
nop