Function at 0x14005b100
Capabilities:
Check for peb beingdebugged flag

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x90
mov qword [rax - 0x68], 0xfffffffffffffffe
mov rdi, r8
mov rsi, rdx
mov r12, rcx
mov r13, rdx
mov qword [rsp + 0x48], rdx
xor ebx, ebx
mov qword [rsp + 0x30], rbx
xor r14d, r14d
mov dword [rsp + 0x38], r14d
xor r15d, r15d
mov dword [rsp + 0x3c], r15d
test rbx, rbx
je 0x14005b169
test r14d, r14d
je 0x14005b169
mov r8d, r14d
xor edx, edx
mov rcx, rbx
call fcn.140060230
nop
and dword [rsp + 0xe8], 0
mov eax, dword [0x1400921a0]
mov dword gs:[0x68], eax
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
mov r9, rbx
mov r8d, 1
mov edx, r15d
mov rcx, qword [r12]
call fcn.14005f720
nop
mov dword [rsi], eax
cmp eax, 0xc0000023
je 0x14005b1bb
cmp eax, 0x80000005
jne 0x14005b267
mov ecx, dword [rsp + 0xe8]
test ecx, ecx
je 0x14005b36a
add ecx, 2
mov dword [rsp + 0xe8], ecx
mov r8d, ecx
mov rax, qword gs:[0x60]
mov edx, 8
mov rcx, qword [rax + 0x30]
test rbx, rbx
je 0x14005b1ff
mov r9d, r8d
mov r8, qword [rsp + 0x30]
call qword [sym.imp.ntdll.dll_RtlReAllocateHeap]
nop
jmp 0x14005b206
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
nop
mov qword [rsp + 0x30], rax
mov rbx, rax
test rax, rax
jne 0x14005b21e
mov dword [rsi], 0xc000009a
jmp 0x14005b374
mov r14d, dword [rsp + 0xe8]
mov dword [rsp + 0x38], r14d
mov eax, dword [0x1400921a0]
mov dword gs:[0x68], eax
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
mov r9, rbx
mov r8d, 1
mov edx, r15d
mov rcx, qword [r12]
call fcn.14005f720
nop
mov dword [rsi], eax
mov eax, dword [r13]
test eax, eax
js 0x14005b358
cmp dword [rbx + 0x10], 0
jbe 0x14005b358
mov eax, dword [rbx + 8]
mov dword [rsp + 0x40], eax
lea r9, [rbx + rax]
mov qword [rsp + 0x68], r9
mov eax, dword [rbx + 4]
mov dword [rsp + 0x44], eax
lea rcx, [rbx + 0x14]
mov qword [rsp + 0x70], rcx
mov edx, dword [rbx + 0x10]
shr rdx, 1
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rdx
cmp eax, 4
jne 0x14005b32a
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x80], xmm0
call fcn.140028628
nop
xor eax, 0x530cff3
cmp eax, 0x4019ea1f
je 0x14005b318
cmp eax, 0x6d97adb2
je 0x14005b308
cmp eax, 0x7e2c4854
je 0x14005b2f8
cmp eax, 0xd18b87b9
jne 0x14005b32a
mov eax, dword [r9]
neg eax
sbb cl, cl
and cl, 4
mov al, byte [rdi]
and al, 0xfb
jmp 0x14005b326
mov eax, dword [r9]
neg eax
sbb cl, cl
and cl, 0x10
mov al, byte [rdi]
and al, 0xef
jmp 0x14005b326
mov eax, dword [r9]
neg eax
sbb cl, cl
and cl, 2
mov al, byte [rdi]
and al, 0xfd
jmp 0x14005b326
mov eax, dword [r9]
neg eax
sbb cl, cl
and cl, 8
mov al, byte [rdi]
and al, 0xf7
or cl, al
mov byte [rdi], cl
jmp 0x14005b358
inc r15d
mov dword [rsp + 0x3c], r15d
mov eax, dword [rsi]
test eax, eax
jns 0x14005b151
cmp eax, 0x8000001a
jne 0x14005b374
and dword [rsi], 0
test rbx, rbx
je 0x14005b39a
mov rcx, qword gs:[0x60]
mov r8, qword [rsp + 0x30]
xor edx, edx
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
nop
and qword [rsp + 0x30], 0
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret