Function at 0x140007790
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Hash data using djb2
Resolve function by djb2 hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x190
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov r14, qword [rcx + 0x18]
add r14, 0x20
mov rdi, qword [r14]
cmp rdi, r14
je 0x14000784b
nop word [rax + rax]
mov r9, qword [rdi + 0x20]
movsxd rax, dword [r9 + 0x3c]
mov ecx, dword [rax + r9 + 0x88]
test ecx, ecx
je 0x140007843
mov r11d, dword [r9 + rcx + 0x18]
lea rbx, [r9 + rcx]
xor r8d, r8d
test r11d, r11d
je 0x140007843
mov esi, dword [rbx + 0x20]
nop dword [rax + rax]
lea rax, [rsi + r8*4]
mov ecx, dword [rax + r9]
mov eax, 0x1505
add rcx, r9
movsx edx, byte [rcx]
test edx, edx
je 0x14000783b
nop word [rax + rax]
imul eax, eax, 0x21
lea rcx, [rcx + 1]
add eax, edx
movsx edx, byte [rcx]
test edx, edx
jne 0x140007820
cmp eax, 0x66851295
je 0x140007d52
inc r8d
cmp r8d, r11d
jb 0x140007800
mov rdi, qword [rdi]
cmp rdi, r14
jne 0x1400077d0
mov rax, qword [rsp + 0x1c0]
xor edx, edx
lea ecx, [rdx + 2]
call rax
mov dword [rsp + 0x60], 0x130
mov r13, rax
mov rcx, qword gs:[0x30]
mov rdx, qword [rcx + 0x60]
mov r14, qword [rdx + 0x18]
add r14, 0x20
mov rdi, qword [r14]
cmp rdi, r14
je 0x14000790b
nop word [rax + rax]
mov r9, qword [rdi + 0x20]
movsxd rax, dword [r9 + 0x3c]
mov ecx, dword [rax + r9 + 0x88]
test ecx, ecx
je 0x140007903
mov r11d, dword [r9 + rcx + 0x18]
lea rbx, [r9 + rcx]
xor r8d, r8d
test r11d, r11d
je 0x140007903
mov esi, dword [rbx + 0x20]
nop dword [rax + rax]
lea rax, [rsi + r8*4]
mov ecx, dword [rax + r9]
mov eax, 0x1505
add rcx, r9
movsx edx, byte [rcx]
test edx, edx
je 0x1400078fb
nop word [rax + rax]
imul eax, eax, 0x21
lea rcx, [rcx + 1]
add eax, edx
movsx edx, byte [rcx]
test edx, edx
jne 0x1400078e0
cmp eax, 0xa3bf64b4
je 0x140007d6e
inc r8d
cmp r8d, r11d
jb 0x1400078c0
mov rdi, qword [rdi]
cmp rdi, r14
jne 0x140007890
mov rax, qword [rsp + 0x1c0]
call rax
mov r12d, eax
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov r14, qword [rcx + 0x18]
add r14, 0x20
mov rdi, qword [r14]
cmp rdi, r14
je 0x1400079bb
nop dword [rax]
mov r9, qword [rdi + 0x20]
movsxd rax, dword [r9 + 0x3c]
mov ecx, dword [rax + r9 + 0x88]
test ecx, ecx
je 0x1400079b3
mov r11d, dword [r9 + rcx + 0x18]
lea rbx, [r9 + rcx]
xor r8d, r8d
test r11d, r11d
je 0x1400079b3
mov esi, dword [rbx + 0x20]
nop dword [rax + rax]
lea rax, [rsi + r8*4]
mov ecx, dword [rax + r9]
mov eax, 0x1505
add rcx, r9
movsx edx, byte [rcx]
test edx, edx
je 0x1400079ab
nop word [rax + rax]
imul eax, eax, 0x21
lea rcx, [rcx + 1]
add eax, edx
movsx edx, byte [rcx]
test edx, edx
jne 0x140007990
cmp eax, 0x9278b871
je 0x140007d8a
inc r8d
cmp r8d, r11d
jb 0x140007970
mov rdi, qword [rdi]
cmp rdi, r14
jne 0x140007940
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x1c8], rbp
lea rdx, [rsp + 0x60]
mov rcx, r13
mov qword [rsp + 0x1d0], r15
call rax
test eax, eax
je 0x140007c7e
nop word [rax + rax]
mov eax, dword [rsp + 0x80]
cmp rax, r12
je 0x140007c67
mov ecx, dword [rsp + 0x68]
cmp rcx, r12
je 0x140007c67
cmp ecx, 4
je 0x140007c67
movsx ecx, byte [rsp + 0x8c]
lea r8, [rsp + 0x8c]
mov eax, 0x1505
mov edx, ecx
test ecx, ecx
je 0x140007a4d
imul eax, eax, 0x21
lea r8, [r8 + 1]
add eax, edx
movsx edx, byte [r8]
test edx, edx
jne 0x140007a31
cmp eax, 0x2cdbf17f
je 0x140007c67
lea r8, [rsp + 0x8c]
mov eax, 0x1505
mov edx, ecx
test ecx, ecx
je 0x140007a7c
imul eax, eax, 0x21
lea r8, [r8 + 1]
add eax, edx
movsx edx, byte [r8]
test edx, edx
jne 0x140007a60
cmp eax, 0x235482dd
je 0x140007c67
lea r8, [rsp + 0x8c]
mov eax, 0x1505
mov edx, ecx
test ecx, ecx
je 0x140007aac
nop
imul eax, eax, 0x21
lea r8, [r8 + 1]
add eax, edx
movsx edx, byte [r8]
test edx, edx
jne 0x140007a90
cmp eax, 0x61b2703
je 0x140007c67
lea r8, [rsp + 0x8c]
mov eax, 0x1505
mov edx, ecx
test ecx, ecx
je 0x140007adc
nop
imul eax, eax, 0x21
lea r8, [r8 + 1]
add eax, edx
movsx edx, byte [r8]
test edx, edx
jne 0x140007ac0
cmp eax, 0xb3a3f9b3
je 0x140007c67
lea rdx, [rsp + 0x8c]
mov eax, 0x1505
test ecx, ecx
je 0x140007b0b
nop dword [rax]
imul eax, eax, 0x21
lea rdx, [rdx + 1]
add eax, ecx
movsx ecx, byte [rdx]
test ecx, ecx
jne 0x140007af0
cmp eax, 0x30c6dedc
je 0x140007c67
mov ebx, 0x200000
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rsi, rax
call fcn.140007dd0
xor r9d, r9d
mov r8d, ebx
mov rdx, rsi
lea ecx, [r9 + 0x10]
call rax
cmp eax, 0xc0000004
jne 0x140007b6d
nop word [rax + rax]
add rbx, rbx
mov rcx, rsi
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
mov rsi, rax
call fcn.140007dd0
xor r9d, r9d
mov r8d, ebx
mov rdx, rsi
lea ecx, [r9 + 0x10]
call rax
cmp eax, 0xc0000004
je 0x140007b40
inc qword [0x1405776b8]
xor r14d, r14d
cmp dword [rsi], r14d
jbe 0x140007c5e
mov ebx, dword [rsp + 0x68]
lea rbp, [rsi + 8]
nop dword [rax + rax]
movups xmm1, xmmword [rbp]
movd eax, xmm1
movups xmmword [rsp + 0x40], xmm1
movzx eax, ax
cmp eax, ebx
jne 0x140007c4c
mov rax, qword [rsp + 0x40]
shr rax, 0x20
cmp al, 7
jne 0x140007c4c
call fcn.140007ed0
xor edx, edx
mov r8d, ebx
lea ecx, [rdx + 0x40]
call rax
mov r15, rax
mov qword [rsp + 0x1c0], 0
call fcn.1400080d0
call rax
movzx edi, word [rsp + 0x46]
mov rbx, rax
call fcn.140007fd0
xor ecx, ecx
lea r9, [rsp + 0x1c0]
mov dword [rsp + 0x30], ecx
mov r8, rbx
mov dword [rsp + 0x28], ecx
mov edx, edi
mov rcx, r15
mov dword [rsp + 0x20], 0x400
call rax
call fcn.1400081d0
mov rcx, qword [rsp + 0x1c0]
call rax
mov ebx, eax
call fcn.1400082d0
call rax
cmp ebx, eax
je 0x140007da6
call fcn.1400083d0
mov rcx, r15
call rax
call fcn.1400083d0
mov rcx, qword [rsp + 0x1c0]
call rax
mov ebx, dword [rsp + 0x68]
mov eax, dword [rsi]
inc r14
add rbp, 0x18
cmp r14, rax
jb 0x140007b90
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call fcn.140006b90
lea rdx, [rsp + 0x60]
mov rcx, r13
call rax
test eax, eax
jne 0x1400079f0
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov r14, qword [rcx + 0x18]
add r14, 0x20
mov rdi, qword [r14]
cmp rdi, r14
je 0x140007d1b
nop
mov r9, qword [rdi + 0x20]
movsxd rax, dword [r9 + 0x3c]
mov ecx, dword [rax + r9 + 0x88]
test ecx, ecx
je 0x140007d13
mov r11d, dword [r9 + rcx + 0x18]
lea rbx, [r9 + rcx]
xor r8d, r8d
test r11d, r11d
je 0x140007d13
mov esi, dword [rbx + 0x20]
nop dword [rax + rax]
lea rax, [rsi + r8*4]
mov ecx, dword [rax + r9]
mov eax, 0x1505
add rcx, r9
movsx edx, byte [rcx]
test edx, edx
je 0x140007d0b
nop word [rax + rax]
imul eax, eax, 0x21
lea rcx, [rcx + 1]
add eax, edx
movsx edx, byte [rcx]
test edx, edx
jne 0x140007cf0
cmp eax, 0x3870ca07
je 0x140007daa
inc r8d
cmp r8d, r11d
jb 0x140007cd0
mov rdi, qword [rdi]
cmp rdi, r14
jne 0x140007ca0
mov rax, qword [rsp + 0x1c0]
mov rcx, r13
call rax
xor al, al
mov r15, qword [rsp + 0x1d0]
mov rbp, qword [rsp + 0x1c8]
mov rbx, qword [rsp + 0x1d8]
add rsp, 0x190
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x140007853
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x140007913
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x1400079c3
mov al, 1
jmp 0x140007d2a
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x140007d23