Function at 0x7ff6ff0a4f50
Capabilities:
Check for peb beingdebugged flag
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x338
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x7ff6ff13a080]
xor rax, rsp
mov qword [rbp + 0x2e8], rax
mov byte [rbp], 0
mov rax, qword [rsp + 0x350]
mov rax, qword [rax + 0x30]
mov qword [rbp + 0x30], rax
mov rax, qword [rbp + 0x30]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rbp + 0x30]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x78], rax
mov eax, 8
imul rax, rax, 0
mov rcx, qword [rbp + 0x78]
mov eax, dword [rcx + rax + 0x88]
mov rcx, qword [rbp + 0x30]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x48], rax
mov rax, qword [rbp + 0x48]
mov eax, dword [rax + 0x20]
mov rcx, qword [rbp + 0x30]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x88], rax
mov rax, qword [rbp + 0x48]
mov eax, dword [rax + 0x1c]
mov rcx, qword [rbp + 0x30]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x98], rax
mov rax, qword [rbp + 0x48]
mov eax, dword [rax + 0x24]
mov rcx, qword [rbp + 0x30]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x90], rax
mov rax, qword [rbp + 0x48]
cmp dword [rax + 0x18], 0
je 0x7ff6ff0a5880
lea rax, [rbp + 2]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 3]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 2]
movzx r8d, byte [rbp + 3]
movzx edx, byte [rbp + 4]
lea rcx, [rbp + 0x120]
call fcn.7ff6ff0aef60
mov rcx, rax
call fcn.7ff6ff0aa000
mov rdx, rax
lea rcx, [rbp + 0x2c8]
call fcn.7ff6ff0ac780
nop
mov rax, qword [rsp + 0x350]
mov rdx, qword [rax + 0x50]
lea rcx, [rbp + 0x2c8]
call fcn.7ff6ff0ac590
lea rcx, [rbp + 0x2c8]
call fcn.7ff6ff0ac570
mov qword [rbp + 0x80], rax
mov rdx, qword [rbp + 0x80]
mov rcx, qword [0x7ff6ff13b3e8]
call fcn.7ff6ff0b83b0
mov qword [rbp + 0x260], rax
lea rcx, [rbp + 0x260]
call fcn.7ff6ff0a3f70
mov rax, qword [rbp + 0x48]
cmp dword [rax + 0x18], 0x40
jne 0x7ff6ff0a5103
mov rdx, qword [rbp + 0x260]
mov rcx, qword [0x7ff6ff13b3e8]
call fcn.7ff6ff0b7e90
mov byte [rbp + 5], 0
lea rcx, [rbp + 0x2c8]
call fcn.7ff6ff0ac750
movzx eax, byte [rbp + 5]
jmp 0x7ff6ff0a5884
mov dword [rbp + 0x24], 0
jmp 0x7ff6ff0a5114
mov eax, dword [rbp + 0x24]
inc eax
mov dword [rbp + 0x24], eax
mov rax, qword [rbp + 0x48]
mov eax, dword [rax + 0x18]
cmp dword [rbp + 0x24], eax
jae 0x7ff6ff0a5860
movsxd rax, dword [rbp + 0x24]
mov rcx, qword [rbp + 0x88]
mov eax, dword [rcx + rax*4]
mov rcx, qword [rbp + 0x30]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x50], rax
movsxd rax, dword [rbp + 0x24]
mov rcx, qword [rbp + 0x90]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rbp + 0x98]
mov eax, dword [rcx + rax*4]
mov rcx, qword [rbp + 0x30]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x70], rax
lea rax, [rbp + 6]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 7]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 8]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 6]
movzx r8d, byte [rbp + 7]
movzx edx, byte [rbp + 8]
lea rcx, [rbp + 0x240]
call fcn.7ff6ff0af0d0
mov rcx, rax
call fcn.7ff6ff0a9dd0
mov rdx, rax
mov rcx, qword [rbp + 0x50]
call qword [sym.imp.ucrtbase.dll_strcmp]
test eax, eax
jne 0x7ff6ff0a51cf
jmp 0x7ff6ff0a510c
lea rax, [rbp + 9]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xa]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xb]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 9]
movzx r8d, byte [rbp + 0xa]
movzx edx, byte [rbp + 0xb]
lea rcx, [rbp + 0x130]
call fcn.7ff6ff0af150
mov rcx, rax
call fcn.7ff6ff0aa000
mov qword [rbp + 0xa0], rax
mov rax, qword [rsp + 0x350]
mov rax, qword [rax + 0x30]
mov qword [rbp + 0xa8], rax
mov r8, qword [rbp + 0xa0]
mov rdx, qword [rbp + 0xa8]
mov rcx, qword [rbp + 0x70]
call fcn.7ff6ff0a3ab0
movzx eax, al
test eax, eax
jne 0x7ff6ff0a525e
jmp 0x7ff6ff0a510c
mov rdx, qword [rbp + 0x50]
mov rcx, qword [rbp + 0x30]
call fcn.7ff6ff0a3d80
mov dword [rbp + 0x3c], eax
mov rdx, qword [rbp + 0x50]
mov rcx, qword [rbp + 0x260]
call fcn.7ff6ff0a3d80
mov dword [rbp + 0x40], eax
movsxd rax, dword [rbp + 0x3c]
mov rcx, qword [rbp + 0x30]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x60], rax
movsxd rax, dword [rbp + 0x40]
mov rcx, qword [rbp + 0x260]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x68], rax
mov eax, dword [rbp + 0x40]
cmp dword [rbp + 0x3c], eax
jne 0x7ff6ff0a56bd
mov rcx, qword [rbp + 0x60]
call fcn.7ff6ff0a36d0
mov dword [rbp + 0x58], eax
mov rcx, qword [rbp + 0x68]
call fcn.7ff6ff0a36d0
mov dword [rbp + 0x38], eax
mov eax, dword [rbp + 0x38]
cmp dword [rbp + 0x58], eax
jne 0x7ff6ff0a5478
mov byte [rbp + 1], 0
mov dword [rbp + 0x28], 0
jmp 0x7ff6ff0a52ed
mov eax, dword [rbp + 0x28]
inc eax
mov dword [rbp + 0x28], eax
mov eax, dword [rbp + 0x38]
cmp dword [rbp + 0x28], eax
jge 0x7ff6ff0a5317
movsxd rax, dword [rbp + 0x28]
mov rcx, qword [rbp + 0x60]
movzx eax, byte [rcx + rax]
movsxd rcx, dword [rbp + 0x28]
mov rdx, qword [rbp + 0x68]
movzx ecx, byte [rdx + rcx]
cmp eax, ecx
je 0x7ff6ff0a5315
mov byte [rbp + 1], 1
jmp 0x7ff6ff0a52e5
movzx eax, byte [rbp + 1]
test eax, eax
je 0x7ff6ff0a5473
lea rax, [rbp + 0xc]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xd]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xe]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0xc]
movzx r8d, byte [rbp + 0xd]
movzx edx, byte [rbp + 0xe]
lea rcx, [rbp + 0x140]
call fcn.7ff6ff0af150
mov rcx, rax
call fcn.7ff6ff0aa000
mov qword [rbp + 0xb0], rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
mov qword [rbp + 0xb8], rax
mov rax, qword [rbp + 0x60]
mov rax, qword [rax + 2]
mov qword [rbp + 0xc0], rax
mov r8, qword [rbp + 0xb0]
mov rdx, qword [rbp + 0xb8]
mov rcx, qword [rbp + 0xc0]
call fcn.7ff6ff0a3ab0
movzx eax, al
test eax, eax
je 0x7ff6ff0a53c5
jmp 0x7ff6ff0a510c
mov byte [rbp], 1
lea rcx, [rbp + 0x2a8]
call fcn.7ff6ff0accd0
nop
mov rdx, qword [rbp + 0x50]
lea rcx, [rbp + 0x2a8]
call fcn.7ff6ff0ac910
lea rax, [rbp + 0xf]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x10]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x11]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0xf]
movzx r8d, byte [rbp + 0x10]
movzx edx, byte [rbp + 0x11]
lea rcx, [rbp + 0x150]
call fcn.7ff6ff0af1a0
mov rcx, rax
call fcn.7ff6ff0aa000
mov rdx, rax
lea rcx, [rbp + 0x2a8]
call fcn.7ff6ff0ac910
lea rdx, [rbp + 0x2a8]
lea rcx, [0x7ff6ff13b118]
call fcn.7ff6ff0ac2c0
lea rcx, [rbp + 0x2a8]
call fcn.7ff6ff0ac8f0
nop
lea rcx, [rbp + 0x2a8]
call fcn.7ff6ff0acb20
jmp 0x7ff6ff0a56b8
lea rax, [rbp + 0x12]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x13]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x14]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x12]
movzx r8d, byte [rbp + 0x13]
movzx edx, byte [rbp + 0x14]
lea rcx, [rbp + 0x160]
call fcn.7ff6ff0af150
mov rcx, rax
call fcn.7ff6ff0aa000
mov qword [rbp + 0xc8], rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x10]
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0x60]
mov rax, qword [rax + 2]
mov qword [rbp + 0xd8], rax
mov r8, qword [rbp + 0xc8]
mov rdx, qword [rbp + 0xd0]
mov rcx, qword [rbp + 0xd8]
call fcn.7ff6ff0a3ab0
movzx eax, al
test eax, eax
je 0x7ff6ff0a551a
jmp 0x7ff6ff0a510c
lea rcx, [rbp + 0x268]
call fcn.7ff6ff0accd0
nop
mov rdx, qword [rbp + 0x50]
lea rcx, [rbp + 0x268]
call fcn.7ff6ff0ac910
lea rax, [rbp + 0x15]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x16]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x17]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x15]
movzx r8d, byte [rbp + 0x16]
movzx edx, byte [rbp + 0x17]
lea rcx, [rbp + 0x170]
call fcn.7ff6ff0af1f0
mov rcx, rax
call fcn.7ff6ff0aa000
mov rdx, rax
lea rcx, [rbp + 0x268]
call fcn.7ff6ff0ac910
movsxd rax, dword [rbp + 0x58]
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.7ff6ff0a3380
mov qword [rbp + 0xe0], rax
mov rax, qword [rbp + 0xe0]
mov qword [rbp + 0xe8], rax
mov rdx, qword [rbp + 0xe8]
lea rcx, [rbp + 0x268]
call fcn.7ff6ff0acad0
nop
lea rcx, [rbp + 0x1b0]
call fcn.7ff6ff0acb20
lea rax, [rbp + 0x18]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x19]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x1a]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x18]
movzx r8d, byte [rbp + 0x19]
movzx edx, byte [rbp + 0x1a]
lea rcx, [rbp + 0x180]
call fcn.7ff6ff0af240
mov rcx, rax
call fcn.7ff6ff0aa000
mov rdx, rax
lea rcx, [rbp + 0x268]
call fcn.7ff6ff0ac910
movsxd rax, dword [rbp + 0x38]
mov rdx, rax
lea rcx, [rbp + 0x1d0]
call fcn.7ff6ff0a3380
mov qword [rbp + 0xf0], rax
mov rax, qword [rbp + 0xf0]
mov qword [rbp + 0xf8], rax
mov rdx, qword [rbp + 0xf8]
lea rcx, [rbp + 0x268]
call fcn.7ff6ff0acad0
nop
lea rcx, [rbp + 0x1d0]
call fcn.7ff6ff0acb20
lea rdx, [rbp + 0x268]
lea rcx, [0x7ff6ff13b118]
call fcn.7ff6ff0ac2c0
lea rcx, [rbp + 0x268]
call fcn.7ff6ff0ac8f0
mov byte [rbp], 1
lea rcx, [rbp + 0x268]
call fcn.7ff6ff0acb20
jmp 0x7ff6ff0a585b
lea rcx, [rbp + 0x288]
call fcn.7ff6ff0accd0
nop
mov rdx, qword [rbp + 0x50]
lea rcx, [rbp + 0x288]
call fcn.7ff6ff0ac910
lea rax, [rbp + 0x1b]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x1c]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x1d]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x1b]
movzx r8d, byte [rbp + 0x1c]
movzx edx, byte [rbp + 0x1d]
lea rcx, [rbp + 0x190]
call fcn.7ff6ff0af290
mov rcx, rax
call fcn.7ff6ff0aa000
mov rdx, rax
lea rcx, [rbp + 0x288]
call fcn.7ff6ff0ac910
movsxd rax, dword [rbp + 0x3c]
mov rdx, rax
lea rcx, [rbp + 0x1f0]
call fcn.7ff6ff0a3380
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x108], rax
mov rdx, qword [rbp + 0x108]
lea rcx, [rbp + 0x288]
call fcn.7ff6ff0acad0
nop
lea rcx, [rbp + 0x1f0]
call fcn.7ff6ff0acb20
lea rax, [rbp + 0x1e]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x1f]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x20]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x1e]
movzx r8d, byte [rbp + 0x1f]
movzx edx, byte [rbp + 0x20]
lea rcx, [rbp + 0x1a0]
call fcn.7ff6ff0af240
mov rcx, rax
call fcn.7ff6ff0aa000
mov rdx, rax
lea rcx, [rbp + 0x288]
call fcn.7ff6ff0ac910
movsxd rax, dword [rbp + 0x40]
mov rdx, rax
lea rcx, [rbp + 0x210]
call fcn.7ff6ff0a3380
mov qword [rbp + 0x110], rax
mov rax, qword [rbp + 0x110]
mov qword [rbp + 0x118], rax
mov rdx, qword [rbp + 0x118]
lea rcx, [rbp + 0x288]
call fcn.7ff6ff0acad0
nop
lea rcx, [rbp + 0x210]
call fcn.7ff6ff0acb20
lea rdx, [rbp + 0x288]
lea rcx, [0x7ff6ff13b118]
call fcn.7ff6ff0ac2c0
lea rcx, [rbp + 0x288]
call fcn.7ff6ff0ac8f0
mov byte [rbp], 1
lea rcx, [rbp + 0x288]
call fcn.7ff6ff0acb20
jmp 0x7ff6ff0a510c
mov rdx, qword [rbp + 0x260]
mov rcx, qword [0x7ff6ff13b3e8]
call fcn.7ff6ff0b7e90
nop
lea rcx, [rbp + 0x2c8]
call fcn.7ff6ff0ac750
movzx eax, byte [rbp]
mov rcx, qword [rbp + 0x2e8]
xor rcx, rsp
call fcn.7ff6ff11b770
add rsp, 0x338
pop rdi
pop rbp
ret