Function at 0x34b37b620
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x4f8
xor r13d, r13d
mov edi, 0x1b
lea r14, str.h_8K
movabs rax, 0x1000000bc
mov r12, rcx
mov ecx, 0xa
mov qword [rsp + 0x30], rax
mov rbp, rdx
mov word [rsp + 0x26], cx
mov dword [rsp + 0x3c], 0x258
jmp 0x34b37b679
lea r13d, [rsi + 1]
cmp r13d, edi
jg 0x34b37b6aa
lea esi, [rdi + r13]
mov rcx, rbp
sar esi, 1
movsxd rbx, esi
shl rbx, 4
add rbx, r14
mov rdx, qword [rbx]
call qword [sym.imp.ucrtbase.dll_strcmp]
mov r15d, eax
test eax, eax
je 0x34b37b780
jg 0x34b37b670
lea edi, [rsi - 1]
cmp r13d, edi
jle 0x34b37b679
mov rcx, rbp
call qword [sym.imp.ucrtbase.dll_strlen]
mov rdx, qword gs:[0x30]
mov rdx, qword [rdx + 0x60]
lea r8, [rax + rax + 2]
mov rcx, qword [rdx + 0x30]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
mov rbx, rax
test rax, rax
je 0x34b37b8bf
movsx ax, byte [rbp]
mov rdx, rbx
test al, al
je 0x34b37b703
nop dword [rax]
inc rbp
mov word [rdx], ax
add rdx, 2
movsx ax, byte [rbp]
test al, al
jne 0x34b37b6f0
xor eax, eax
mov word [rdx], ax
cmp word [rbx], 0
je 0x34b37b8f9
mov rax, rbx
nop dword [rax]
add rax, 2
cmp word [rax], 0
jne 0x34b37b718
sub rax, rbx
mov r8, rax
sar r8, 1
mov rdx, rbx
mov rcx, r12
call sym.add_unformatted_text_to_control
lea r9, [rsp + 0x30]
xor r8d, r8d
mov rcx, r12
mov edx, 0x447
call qword [sym.imp.user32.dll_SendMessageW]
lea rdx, [rsp + 0x26]
mov rcx, r12
mov r8d, 1
call sym.add_unformatted_text_to_control
mov r8, rbx
xor edx, edx
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x34b37b8bf
mov edx, dword [rbx + 8]
xor r9d, r9d
lea r8, [rsp + 0x28]
lea rbp, [rsp + 0x30]
mov rcx, qword [0x34b393008]
lea r14, [rsp + 0xf0]
call qword [sym.imp.user32.dll_LoadStringW]
mov rdx, qword [rsp + 0x28]
mov rdi, qword [sym.imp.user32.dll_SendMessageW]
movsxd rsi, eax
mov r13, rsi
add rsi, rsi
lea rcx, [rdx + rsi]
cmp rdx, rcx
jae 0x34b37b880
nop word [rax + rax]
mov rbx, rdx
jmp 0x34b37b7e1
cmp rbx, rcx
jae 0x34b37b880
movzx eax, word [rbx]
mov r8, rbx
add rbx, 2
cmp ax, 0xa
jne 0x34b37b7d8
sub r8, rdx
mov rcx, r14
sar r8, 1
lea eax, [r8 + 1]
cmp eax, 1
ja 0x34b37b824
jmp 0x34b37b8d3
dec eax
add rcx, 2
add rdx, 2
mov word [rcx - 2], r9w
cmp eax, 1
je 0x34b37b82e
movzx r9d, word [rdx]
test r9w, r9w
jne 0x34b37b810
xor edx, edx
mov word [rcx], dx
mov rdx, r14
mov rcx, r12
mov r15d, 1
call sym.add_unformatted_text_to_control
mov r9, rbp
xor r8d, r8d
mov edx, 0x447
mov rcx, r12
call rdi
lea rdx, [rsp + 0x26]
mov rcx, r12
mov r8d, 1
call sym.add_unformatted_text_to_control
mov rdx, rbx
lea rcx, [rdx + rsi]
cmp rdx, rcx
jb 0x34b37b7d0
nop word [rax + rax]
test r15d, r15d
jne 0x34b37b8e0
mov rdx, qword [rsp + 0x28]
mov r8d, r13d
mov rcx, r12
call sym.add_unformatted_text_to_control
xor r8d, r8d
mov edx, 0x447
mov rcx, r12
lea r9, [rsp + 0x30]
call qword [sym.imp.user32.dll_SendMessageW]
lea rdx, [rsp + 0x26]
mov r8d, 1
mov rcx, r12
call sym.add_unformatted_text_to_control
nop
add rsp, 0x4f8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
test eax, eax
je 0x34b37b833
jmp 0x34b37b82e
cmp word [rdx], 0
je 0x34b37b8bf
mov rax, rdx
sub rax, qword [rsp + 0x28]
mov r8d, r13d
sar rax, 1
sub r8d, eax
jmp 0x34b37b88d
xor r8d, r8d
jmp 0x34b37b72b