Function at 0x140006cf0
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
mov rax, qword gs:[0x60]
mov rbp, rcx
mov rdx, qword [rax + 0x18]
mov rax, qword [rdx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
mov r9, qword [r11 + 0x30]
xor r14d, r14d
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140006d98
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140006d98
mov edi, dword [rbx + 0x20]
nop dword [rax + rax]
dec r8d
mov edx, 0xa895e1c7
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140006d93
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140006d70
cmp edx, 0xc65ff727
je 0x1400070bc
test r8d, r8d
jne 0x140006d50
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x140006dad
cmp qword [rax + 0x30], r14
jne 0x140006d24
mov rax, r14
call rax
test eax, eax
jne 0x140006df6
call fcn.140004b00
test eax, eax
jne 0x140006df6
mov rax, qword gs:[0x60]
cmp byte [rax + 2], r14b
jne 0x140006df6
call fcn.140004cf0
test eax, eax
jne 0x140006df6
call fcn.140004fc0
test eax, eax
jne 0x140006df6
call fcn.140005340
test eax, eax
jne 0x140006df6
call fcn.1400056c0
test eax, eax
je 0x140006ea4
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
nop dword [rax]
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140006e88
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140006e88
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x1476a447
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140006e83
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140006e60
cmp edx, 0x9e09687
je 0x1400070d8
test r8d, r8d
jne 0x140006e40
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x140006e9d
cmp qword [rax + 0x30], r14
jne 0x140006e10
mov rax, r14
xor ecx, ecx
call rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
nop dword [rax + rax]
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140006f38
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140006f38
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x787f80a1
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140006f33
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140006f10
cmp edx, 0x421561cb
je 0x1400070f4
test r8d, r8d
jne 0x140006ef0
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x140006f4d
cmp qword [rax + 0x30], r14
jne 0x140006ec0
mov rax, r14
lea rcx, str.SbieDll.dll
call rax
test rax, rax
jne 0x140006f78
call fcn.140002b50
test eax, eax
jne 0x140006f78
mov rcx, qword [rbp + 8]
call fcn.140003500
test eax, eax
je 0x140007024
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
nop
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140007008
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140007008
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x3760eb8e
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140007003
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140006fe0
cmp edx, 0xc622456
je 0x140007110
test r8d, r8d
jne 0x140006fc0
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x14000701d
cmp qword [rax + 0x30], r14
jne 0x140006f90
mov rax, r14
xor ecx, ecx
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400070b7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400070b7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x38bb8225
lea rcx, [rdi + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x1400070b2
nop
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x140007090
cmp r8d, 0x513efda1
je 0x14000712c
test r9d, r9d
jne 0x140007070
mov rax, qword [rax]
jmp 0x140007040
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x140006db0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x140006ea0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x140006f50
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x140007020
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
call rax
test eax, eax
je 0x140007204
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
nop dword [rax]
nop dword [rax + rax]
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x1400071e8
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x1400071e8
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x4f0291bd
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1400071e3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1400071c0
cmp edx, 0xa9afcddd
je 0x1400072bb
test r8d, r8d
jne 0x1400071a0
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x1400071fd
cmp qword [rax + 0x30], r14
jne 0x140007170
mov rax, r14
xor ecx, ecx
call rax
call fcn.1400049f0
test al, al
je 0x1400072f4
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
nop dword [rax + rax]
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x1400072a4
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x1400072a4
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x7cb14d53
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x14000729f
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140007280
cmp edx, 0xee0f4983
je 0x1400072d7
test r8d, r8d
jne 0x140007260
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x1400072ef
cmp qword [rax + 0x30], r14
jne 0x140007230
jmp 0x1400072ef
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x140007200
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov r14d, dword [rcx + rdx*4]
add r14, r9
xor ecx, ecx
call r14
mov rbx, qword [rsp + 0x30]
xor al, al
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
ret