Function at 0x100010a68
Capabilities:
Check for peb beingdebugged flag

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x90
mov rax, qword [0x100032100]
xor rax, rsp
mov qword [rsp + 0x80], rax
mov rcx, qword [0x100032a70]
xor r14d, r14d
lea rdx, [r11 - 0x68]
mov r15d, r14d
mov rsi, r14
mov r12d, r14d
mov qword [r11 - 0x80], r14
mov dword [r11 - 0x78], r14d
mov dword [r11 - 0x74], r14d
mov qword [r11 - 0x70], r14
mov qword [r11 - 0x68], r14
call fcn.100017430
cmp eax, r14d
mov ebx, eax
jge 0x100010adf
mov ecx, 0xc1008005
call fcn.100016f4c
jmp 0x100011050
lea rcx, [0x100001698]
call fcn.100015fec
mov rbp, rax
cmp rax, r14
jne 0x100010b02
mov ebx, 0xc000000d
mov ecx, 0xc1008019
jmp 0x100010fd5
cmp dword [rax + 0x18], r14d
jbe 0x100010af3
mov rdi, qword [rax + 0x20]
lea rdx, [0x100007c60]
mov rcx, rdi
call qword [sym.imp.msvcrt.dll__wcsicmp]
mov r13d, 1
cmp eax, r14d
jne 0x100010b63
movdqu xmm0, xmmword [0x100007eb0]
movdqu xmmword [rsp + 0x70], xmm0
mov r12d, r13d
cmp r12d, dword [rbp + 0x18]
jae 0x100010af3
mov rcx, qword [rsp + 0x50]
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x70]
call fcn.10001b3ac
cmp eax, r14d
mov ebx, eax
jge 0x100010b85
mov ecx, 0xc100800e
jmp 0x100010fd5
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.10001761c
cmp eax, r14d
jge 0x100010b35
movdqu xmm0, xmmword [0x100007f40]
movdqu xmmword [rsp + 0x70], xmm0
jmp 0x100010b38
mov rcx, qword [rsp + 0x48]
lea rdx, [rsp + 0x58]
call fcn.10001b598
cmp eax, r14d
mov ebx, eax
jl 0x100010b59
mov edx, dword [rsp + 0x5c]
mov ecx, r12d
lea r8, [rsp + 0x40]
mov rcx, qword [rbp + rcx*8 + 0x20]
call fcn.100011d90
cmp eax, r14d
mov ebx, eax
jge 0x100010bc2
mov ecx, 0xc100801a
jmp 0x100010fd5
mov ecx, dword [rbp + 0x18]
add r12d, r13d
cmp r12d, ecx
jae 0x100010af3
mov eax, dword [rsp + 0x40]
shr eax, 0x18
and eax, 0xf
sub eax, r13d
je 0x100010f0c
sub eax, r13d
je 0x100010ea2
sub eax, r13d
je 0x100010e1e
sub eax, r13d
je 0x100010d7c
sub eax, r13d
je 0x100010d3d
sub eax, r13d
je 0x100010d10
cmp eax, r13d
jne 0x100010af3
mov rax, qword gs:[0x30]
sub ecx, r12d
xor edx, edx
shl ecx, 3
mov dword [rsp + 0x30], ecx
mov rcx, qword [rax + 0x60]
mov r8d, dword [rsp + 0x30]
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov qword [rsp + 0x38], rax
cmp rax, r14
je 0x100010ee8
mov dword [rsp + 0x60], 8
mov r13d, r14d
movsxd rcx, r12d
cmp dword [rbp + 0x18], r12d
je 0x100010cd4
mov r14, rax
lea rdi, [rbp + rcx*8 + 0x20]
mov r8d, dword [rsp + 0x40]
mov edx, dword [rsp + 0x5c]
mov rcx, qword [rdi]
lea rax, [rsp + 0x60]
lea r9, [rsp + 0x68]
mov qword [rsp + 0x20], rax
call fcn.1000118b4
mov ebx, eax
test eax, eax
js 0x100010cfe
mov rax, qword [rsp + 0x68]
xor edx, edx
mov rcx, qword [rax]
mov qword [r14], rcx
mov rax, qword gs:[0x30]
mov r8, qword [rsp + 0x68]
mov rcx, qword [rax + 0x60]
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
mov eax, dword [rbp + 0x18]
inc r13d
sub eax, r12d
add rdi, 8
add r14, 8
cmp r13d, eax
jb 0x100010c6c
xor r14d, r14d
mov rsi, qword [0x100032a60]
lea rdi, [0x100032a60]
cmp rsi, rdi
je 0x100010f5c
mov rax, qword [rsi]
mov qword [0x100032a60], rax
mov qword [rax + 8], rdi
jmp 0x100010f5f
mov ecx, 0xc100801e
call fcn.100016f4c
xor r14d, r14d
jmp 0x100010fda
mov rcx, qword [rbp + r12*8 + 0x20]
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x38]
mov dword [rsp + 0x30], 2
call fcn.1000119cc
cmp eax, r14d
mov ebx, eax
jge 0x100010cd4
mov ecx, 0xc100801f
jmp 0x100010fd5
mov r8d, dword [rsp + 0x40]
mov edx, dword [rsp + 0x5c]
mov rcx, qword [rbp + r12*8 + 0x20]
lea rax, [rsp + 0x30]
lea r9, [rsp + 0x38]
mov dword [rsp + 0x30], 8
mov qword [rsp + 0x20], rax
call fcn.1000118b4
cmp eax, r14d
mov ebx, eax
jge 0x100010cd4
mov ecx, 0xc100801e
jmp 0x100010fd5
lea rcx, [0x100001820]
call fcn.100015fec
lea rcx, [0x100001838]
mov rdi, rax
call fcn.100015fec
lea rcx, [0x100001848]
mov r13, rax
call fcn.100015fec
mov ecx, r14d
cmp rdi, r14
je 0x100010db7
mov ecx, 1
lea r15d, [rcx + 1]
cmp r13, r14
je 0x100010dc4
inc ecx
mov r15d, 3
cmp rax, r14
je 0x100010dd1
inc ecx
mov r15d, 1
mov edi, dword [rbp + 0x18]
sub edi, r12d
cmp ecx, r14d
jbe 0x100010df0
cmp ecx, 1
ja 0x100010de6
cmp edi, 1
je 0x100010df0
mov ecx, 0xc1008033
jmp 0x100010fd5
lea rcx, [rbp + r12*8 + 0x20]
lea r8, [rsp + 0x38]
mov edx, edi
call fcn.100017514
cmp eax, r14d
mov ebx, eax
jge 0x100010e12
mov ecx, 0xc100801d
jmp 0x100010fd5
shl edi, 4
mov dword [rsp + 0x30], edi
jmp 0x100010cd4
mov rax, qword gs:[0x30]
mov r8d, 0x10
xor edx, edx
mov rcx, qword [rax + 0x60]
mov dword [rsp + 0x30], r8d
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov qword [rsp + 0x38], rax
cmp rax, r14
je 0x100010ee8
mov rdi, qword [rbp + r12*8 + 0x20]
lea rdx, [0x100007c60]
mov rcx, rdi
call qword [sym.imp.msvcrt.dll__wcsicmp]
cmp eax, r14d
jne 0x100010e80
movdqu xmm0, xmmword [0x100007eb0]
mov rax, qword [rsp + 0x38]
movdqu xmmword [rax], xmm0
jmp 0x100010cd4
mov rdx, qword [rsp + 0x38]
mov rcx, rdi
call fcn.10001761c
cmp eax, r14d
mov ebx, eax
jge 0x100010cd4
mov ecx, 0xc100801c
jmp 0x100010fd5
mov rdi, qword [rbp + r12*8 + 0x20]
or rcx, 0xffffffffffffffff
xor eax, eax
repne scasw ax, word [rdi]
xor edx, edx
not rcx
sub rcx, r13
lea eax, [rcx + rcx + 2]
mov dword [rsp + 0x30], eax
mov rax, qword gs:[0x30]
mov edi, dword [rsp + 0x30]
mov rcx, qword [rax + 0x60]
mov r8, rdi
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov qword [rsp + 0x38], rax
cmp rax, r14
jne 0x100010ef2
mov ebx, 0xc000009a
jmp 0x100010fda
mov r8, qword [rbp + r12*8 + 0x20]
mov rcx, qword [rsp + 0x38]
shr rdi, 1
mov rdx, rdi
call fcn.100029b90
jmp 0x100010cd4
mov rdx, qword [rbp + r12*8 + 0x20]
mov ecx, dword [rsp + 0x40]
lea rax, [rsp + 0x30]
lea r9, [rsp + 0x38]
lea r8, [rsp + 0x44]
mov qword [rsp + 0x20], rax
call fcn.100011470
cmp eax, r14d
mov ebx, eax
jge 0x100010cd4
mov ecx, 0xc100801b
jmp 0x100010fd5
mov rsi, r14
cmp rsi, r14
je 0x100010f89
mov rdx, qword [rsi + 0x10]
mov ecx, 0xc100803a
call fcn.100016f4c
mov ebx, 0xc000000d
jmp 0x100010fda
mov r9, qword [rsp + 0x38]
cmp r15d, r14d
jne 0x100010fb0
mov eax, dword [rsp + 0x30]
mov r8d, dword [rsp + 0x44]
mov edx, dword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
mov dword [rsp + 0x20], eax
call fcn.10001bc84
jmp 0x100010fc9
mov r8d, dword [rsp + 0x40]
mov rcx, qword [rsp + 0x50]
lea rdx, [rsp + 0x70]
mov dword [rsp + 0x20], r15d
call fcn.100018a80
cmp eax, r14d
mov ebx, eax
jge 0x100010fda
mov ecx, 0xc1008020
call fcn.100016f4c
cmp rbp, r14
je 0x100010ffb
mov rax, qword gs:[0x30]
mov r8, rbp
xor edx, edx
mov rcx, qword [rax + 0x60]
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
cmp rsi, r14
je 0x10001101c
mov rax, qword gs:[0x30]
mov r8, rsi
xor edx, edx
mov rcx, qword [rax + 0x60]
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
cmp qword [rsp + 0x38], r14
je 0x100011041
mov rax, qword gs:[0x30]
mov r8, qword [rsp + 0x38]
xor edx, edx
mov rcx, qword [rax + 0x60]
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
mov rcx, qword [rsp + 0x48]
cmp rcx, r14
je 0x100011050
call fcn.10002094c
mov rcx, qword [rsp + 0x50]
cmp rcx, r14
je 0x100011065
call fcn.10001a238
cmp ebx, r14d
cmovge ebx, eax
mov ecx, ebx
call qword [sym.imp.ntdll.dll_RtlNtStatusToDosError]
mov ecx, eax
call fcn.100016fbc
mov eax, ebx
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.1000296e0
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret