Function at 0x140007770
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Hash data using djb2
Resolve function by djb2 hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x190
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov r14, qword [rcx + 0x18]
add r14, 0x20
mov rdi, qword [r14]
cmp rdi, r14
je 0x14000782b
nop word [rax + rax]
mov r9, qword [rdi + 0x20]
movsxd rax, dword [r9 + 0x3c]
mov ecx, dword [rax + r9 + 0x88]
test ecx, ecx
je 0x140007823
mov r11d, dword [r9 + rcx + 0x18]
lea rbx, [r9 + rcx]
xor r8d, r8d
test r11d, r11d
je 0x140007823
mov esi, dword [rbx + 0x20]
nop dword [rax + rax]
lea rax, [rsi + r8*4]
mov ecx, dword [rax + r9]
mov eax, 0x1505
add rcx, r9
movsx edx, byte [rcx]
test edx, edx
je 0x14000781b
nop word [rax + rax]
imul eax, eax, 0x21
lea rcx, [rcx + 1]
add eax, edx
movsx edx, byte [rcx]
test edx, edx
jne 0x140007800
cmp eax, 0x66851295
je 0x140007d32
inc r8d
cmp r8d, r11d
jb 0x1400077e0
mov rdi, qword [rdi]
cmp rdi, r14
jne 0x1400077b0
mov rax, qword [rsp + 0x1c0]
xor edx, edx
lea ecx, [rdx + 2]
call rax
mov dword [rsp + 0x60], 0x130
mov r13, rax
mov rcx, qword gs:[0x30]
mov rdx, qword [rcx + 0x60]
mov r14, qword [rdx + 0x18]
add r14, 0x20
mov rdi, qword [r14]
cmp rdi, r14
je 0x1400078eb
nop word [rax + rax]
mov r9, qword [rdi + 0x20]
movsxd rax, dword [r9 + 0x3c]
mov ecx, dword [rax + r9 + 0x88]
test ecx, ecx
je 0x1400078e3
mov r11d, dword [r9 + rcx + 0x18]
lea rbx, [r9 + rcx]
xor r8d, r8d
test r11d, r11d
je 0x1400078e3
mov esi, dword [rbx + 0x20]
nop dword [rax + rax]
lea rax, [rsi + r8*4]
mov ecx, dword [rax + r9]
mov eax, 0x1505
add rcx, r9
movsx edx, byte [rcx]
test edx, edx
je 0x1400078db
nop word [rax + rax]
imul eax, eax, 0x21
lea rcx, [rcx + 1]
add eax, edx
movsx edx, byte [rcx]
test edx, edx
jne 0x1400078c0
cmp eax, 0xa3bf64b4
je 0x140007d4e
inc r8d
cmp r8d, r11d
jb 0x1400078a0
mov rdi, qword [rdi]
cmp rdi, r14
jne 0x140007870
mov rax, qword [rsp + 0x1c0]
call rax
mov r12d, eax
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov r14, qword [rcx + 0x18]
add r14, 0x20
mov rdi, qword [r14]
cmp rdi, r14
je 0x14000799b
nop dword [rax]
mov r9, qword [rdi + 0x20]
movsxd rax, dword [r9 + 0x3c]
mov ecx, dword [rax + r9 + 0x88]
test ecx, ecx
je 0x140007993
mov r11d, dword [r9 + rcx + 0x18]
lea rbx, [r9 + rcx]
xor r8d, r8d
test r11d, r11d
je 0x140007993
mov esi, dword [rbx + 0x20]
nop dword [rax + rax]
lea rax, [rsi + r8*4]
mov ecx, dword [rax + r9]
mov eax, 0x1505
add rcx, r9
movsx edx, byte [rcx]
test edx, edx
je 0x14000798b
nop word [rax + rax]
imul eax, eax, 0x21
lea rcx, [rcx + 1]
add eax, edx
movsx edx, byte [rcx]
test edx, edx
jne 0x140007970
cmp eax, 0x9278b871
je 0x140007d6a
inc r8d
cmp r8d, r11d
jb 0x140007950
mov rdi, qword [rdi]
cmp rdi, r14
jne 0x140007920
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x1c8], rbp
lea rdx, [rsp + 0x60]
mov rcx, r13
mov qword [rsp + 0x1d0], r15
call rax
test eax, eax
je 0x140007c5e
nop word [rax + rax]
mov eax, dword [rsp + 0x80]
cmp rax, r12
je 0x140007c47
mov ecx, dword [rsp + 0x68]
cmp rcx, r12
je 0x140007c47
cmp ecx, 4
je 0x140007c47
movsx ecx, byte [rsp + 0x8c]
lea r8, [rsp + 0x8c]
mov eax, 0x1505
mov edx, ecx
test ecx, ecx
je 0x140007a2d
imul eax, eax, 0x21
lea r8, [r8 + 1]
add eax, edx
movsx edx, byte [r8]
test edx, edx
jne 0x140007a11
cmp eax, 0x2cdbf17f
je 0x140007c47
lea r8, [rsp + 0x8c]
mov eax, 0x1505
mov edx, ecx
test ecx, ecx
je 0x140007a5c
imul eax, eax, 0x21
lea r8, [r8 + 1]
add eax, edx
movsx edx, byte [r8]
test edx, edx
jne 0x140007a40
cmp eax, 0x235482dd
je 0x140007c47
lea r8, [rsp + 0x8c]
mov eax, 0x1505
mov edx, ecx
test ecx, ecx
je 0x140007a8c
nop
imul eax, eax, 0x21
lea r8, [r8 + 1]
add eax, edx
movsx edx, byte [r8]
test edx, edx
jne 0x140007a70
cmp eax, 0x61b2703
je 0x140007c47
lea r8, [rsp + 0x8c]
mov eax, 0x1505
mov edx, ecx
test ecx, ecx
je 0x140007abc
nop
imul eax, eax, 0x21
lea r8, [r8 + 1]
add eax, edx
movsx edx, byte [r8]
test edx, edx
jne 0x140007aa0
cmp eax, 0xb3a3f9b3
je 0x140007c47
lea rdx, [rsp + 0x8c]
mov eax, 0x1505
test ecx, ecx
je 0x140007aeb
nop dword [rax]
imul eax, eax, 0x21
lea rdx, [rdx + 1]
add eax, ecx
movsx ecx, byte [rdx]
test ecx, ecx
jne 0x140007ad0
cmp eax, 0x30c6dedc
je 0x140007c47
mov ebx, 0x200000
mov ecx, ebx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rsi, rax
call fcn.140007db0
xor r9d, r9d
mov r8d, ebx
mov rdx, rsi
lea ecx, [r9 + 0x10]
call rax
cmp eax, 0xc0000004
jne 0x140007b4d
nop word [rax + rax]
add rbx, rbx
mov rcx, rsi
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
mov rsi, rax
call fcn.140007db0
xor r9d, r9d
mov r8d, ebx
mov rdx, rsi
lea ecx, [r9 + 0x10]
call rax
cmp eax, 0xc0000004
je 0x140007b20
inc qword [0x140945928]
xor r14d, r14d
cmp dword [rsi], r14d
jbe 0x140007c3e
mov ebx, dword [rsp + 0x68]
lea rbp, [rsi + 8]
nop dword [rax + rax]
movups xmm1, xmmword [rbp]
movd eax, xmm1
movups xmmword [rsp + 0x40], xmm1
movzx eax, ax
cmp eax, ebx
jne 0x140007c2c
mov rax, qword [rsp + 0x40]
shr rax, 0x20
cmp al, 7
jne 0x140007c2c
call fcn.140007eb0
xor edx, edx
mov r8d, ebx
lea ecx, [rdx + 0x40]
call rax
mov r15, rax
mov qword [rsp + 0x1c0], 0
call fcn.1400080b0
call rax
movzx edi, word [rsp + 0x46]
mov rbx, rax
call fcn.140007fb0
xor ecx, ecx
lea r9, [rsp + 0x1c0]
mov dword [rsp + 0x30], ecx
mov r8, rbx
mov dword [rsp + 0x28], ecx
mov edx, edi
mov rcx, r15
mov dword [rsp + 0x20], 0x400
call rax
call fcn.1400081b0
mov rcx, qword [rsp + 0x1c0]
call rax
mov ebx, eax
call fcn.1400082b0
call rax
cmp ebx, eax
je 0x140007d86
call fcn.1400083b0
mov rcx, r15
call rax
call fcn.1400083b0
mov rcx, qword [rsp + 0x1c0]
call rax
mov ebx, dword [rsp + 0x68]
mov eax, dword [rsi]
inc r14
add rbp, 0x18
cmp r14, rax
jb 0x140007b70
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call fcn.140006cc0
lea rdx, [rsp + 0x60]
mov rcx, r13
call rax
test eax, eax
jne 0x1400079d0
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov r14, qword [rcx + 0x18]
add r14, 0x20
mov rdi, qword [r14]
cmp rdi, r14
je 0x140007cfb
nop
mov r9, qword [rdi + 0x20]
movsxd rax, dword [r9 + 0x3c]
mov ecx, dword [rax + r9 + 0x88]
test ecx, ecx
je 0x140007cf3
mov r11d, dword [r9 + rcx + 0x18]
lea rbx, [r9 + rcx]
xor r8d, r8d
test r11d, r11d
je 0x140007cf3
mov esi, dword [rbx + 0x20]
nop dword [rax + rax]
lea rax, [rsi + r8*4]
mov ecx, dword [rax + r9]
mov eax, 0x1505
add rcx, r9
movsx edx, byte [rcx]
test edx, edx
je 0x140007ceb
nop word [rax + rax]
imul eax, eax, 0x21
lea rcx, [rcx + 1]
add eax, edx
movsx edx, byte [rcx]
test edx, edx
jne 0x140007cd0
cmp eax, 0x3870ca07
je 0x140007d8a
inc r8d
cmp r8d, r11d
jb 0x140007cb0
mov rdi, qword [rdi]
cmp rdi, r14
jne 0x140007c80
mov rax, qword [rsp + 0x1c0]
mov rcx, r13
call rax
xor al, al
mov r15, qword [rsp + 0x1d0]
mov rbp, qword [rsp + 0x1c8]
mov rbx, qword [rsp + 0x1d8]
add rsp, 0x190
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x140007833
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x1400078f3
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x1400079a3
mov al, 1
jmp 0x140007d0a
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x140007d03