Function at 0x6c64b200
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x4f8
xor r13d, r13d
mov edi, 0x1b
lea rbp, str.h_el
movabs rax, 0x1000000bc
mov r12, rcx
mov ecx, 0xa
mov qword [rsp + 0x30], rax
mov r14, rdx
mov word [rsp + 0x26], cx
mov dword [rsp + 0x3c], 0x258
jmp 0x6c64b259
lea r13d, [rsi + 1]
cmp r13d, edi
jg 0x6c64b28a
lea esi, [rdi + r13]
mov rcx, r14
sar esi, 1
movsxd rbx, esi
shl rbx, 4
add rbx, rbp
mov rdx, qword [rbx]
call qword [sym.imp.ucrtbase.dll_strcmp]
mov r15d, eax
test eax, eax
je 0x6c64b368
jg 0x6c64b250
lea edi, [rsi - 1]
cmp r13d, edi
jle 0x6c64b259
mov rcx, r14
call qword [sym.imp.ucrtbase.dll_strlen]
mov rdx, qword gs:[0x30]
mov rdx, qword [rdx + 0x60]
lea r8, [rax + rax + 2]
mov rcx, qword [rdx + 0x30]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
mov rbx, rax
test rax, rax
je 0x6c64b49f
movsx ax, byte [r14]
mov rdx, rbx
test al, al
je 0x6c64b2e4
nop dword [rax]
add r14, 1
mov word [rdx], ax
add rdx, 2
movsx ax, byte [r14]
test al, al
jne 0x6c64b2d0
xor eax, eax
mov word [rdx], ax
cmp word [rbx], 0
je 0x6c64b4e0
mov rax, rbx
nop word cs:[rax + rax]
add rax, 2
cmp word [rax], 0
jne 0x6c64b300
sub rax, rbx
mov r8, rax
sar r8, 1
mov rdx, rbx
mov rcx, r12
call sym.add_unformatted_text_to_control
lea r9, [rsp + 0x30]
xor r8d, r8d
mov rcx, r12
mov edx, 0x447
call qword [sym.imp.user32.dll_SendMessageW]
lea rdx, [rsp + 0x26]
mov rcx, r12
mov r8d, 1
call sym.add_unformatted_text_to_control
mov r8, rbx
xor edx, edx
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x6c64b49f
mov edx, dword [rbx + 8]
xor r9d, r9d
lea r8, [rsp + 0x28]
lea rbp, [rsp + 0x30]
mov rcx, qword [0x6c663008]
lea r13, [rsp + 0xf0]
call qword [sym.imp.user32.dll_LoadStringW]
mov rdx, qword [rsp + 0x28]
mov rdi, qword [sym.imp.user32.dll_SendMessageW]
movsxd r14, eax
mov rsi, r14
add r14, r14
lea rcx, [rdx + r14]
cmp rdx, rcx
jae 0x6c64b460
nop
mov rbx, rdx
jmp 0x6c64b3c1
cmp rcx, rbx
jbe 0x6c64b460
movzx eax, word [rbx]
mov r8, rbx
add rbx, 2
cmp ax, 0xa
jne 0x6c64b3b8
sub r8, rdx
sar r8, 1
lea eax, [r8 + 1]
cmp eax, 1
jbe 0x6c64b4d0
lea eax, [r8 - 1]
lea r9, [r13 + rax*2 + 2]
mov rax, r13
jmp 0x6c64b409
add rax, 2
add rdx, 2
mov word [rax - 2], cx
cmp rax, r9
je 0x6c64b411
movzx ecx, word [rdx]
test cx, cx
jne 0x6c64b3f8
xor edx, edx
mov word [rax], dx
mov rdx, r13
mov rcx, r12
mov r15d, 1
call sym.add_unformatted_text_to_control
mov r9, rbp
xor r8d, r8d
mov edx, 0x447
mov rcx, r12
call rdi
lea rdx, [rsp + 0x26]
mov rcx, r12
mov r8d, 1
call sym.add_unformatted_text_to_control
mov rdx, rbx
lea rcx, [rdx + r14]
cmp rdx, rcx
jb 0x6c64b3b0
nop word [rax + rax]
test r15d, r15d
jne 0x6c64b4b8
mov rdx, qword [rsp + 0x28]
mov r8d, esi
mov rcx, r12
call sym.add_unformatted_text_to_control
xor r8d, r8d
mov edx, 0x447
mov rcx, r12
lea r9, [rsp + 0x30]
call qword [sym.imp.user32.dll_SendMessageW]
lea rdx, [rsp + 0x26]
mov r8d, 1
mov rcx, r12
call sym.add_unformatted_text_to_control
nop
add rsp, 0x4f8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
cmp word [rdx], 0
je 0x6c64b49f
mov rax, rdx
sub rax, qword [rsp + 0x28]
sar rax, 1
sub esi, eax
mov r8d, esi
jmp 0x6c64b46d
test eax, eax
je 0x6c64b416
mov rax, r13
jmp 0x6c64b411
xor r8d, r8d
jmp 0x6c64b313