Function at 0x4cb6e7
Capabilities:
Check for peb beingdebugged flag

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x24
push ebx
shr ecx, 0x18
push esi
mov esi, edx
and ecx, 0xf
xor edx, edx
mov dword [ebp - 0xc], esi
mov dword [ebp - 8], edx
mov ebx, edx
push edi
sub ecx, 1
je 0x4cb992
sub ecx, 1
je 0x4cb90b
sub ecx, 1
je 0x4cb8bf
sub ecx, 1
je 0x4cb7d7
sub ecx, 1
je 0x4cb7a9
sub ecx, 1
je 0x4cb77a
mov ebx, dword [ebp + 8]
sub ecx, 1
je 0x4cb76b
mov eax, dword fs:[0x30]
push ebx
push edx
push dword [eax + 0x18]
call dword [fcn.004212d8]
mov edi, eax
test edi, edi
jne 0x4cb75b
mov ebx, 0xc0000017
jmp 0x4cb9e9
push ebx
push esi
push edi
call fcn.004d6f10
add esp, 0xc
jmp 0x4cb8f8
test bl, 7
je 0x4cb73a
mov ebx, 0xc0000024
jmp 0x4cb9e9
mov eax, dword [ebp + 8]
xor ebx, ebx
dec eax
inc ebx
cmp eax, ebx
ja 0x4cb770
mov eax, dword fs:[0x30]
push ebx
push edx
push dword [eax + 0x18]
call dword [fcn.004212d8]
mov edi, eax
test edi, edi
je 0x4cb751
cmp byte [esi], 0
setne al
mov byte [edi], al
jmp 0x4cb8f8
push 8
pop ebx
cmp dword [ebp + 8], ebx
jne 0x4cb770
mov eax, dword fs:[0x30]
push ebx
push edx
push dword [eax + 0x18]
call dword [fcn.004212d8]
mov edi, eax
test edi, edi
je 0x4cb751
mov eax, dword [esi]
mov dword [edi], eax
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
jmp 0x4cb8f8
mov eax, dword [ebp + 8]
test al, 0xf
jne 0x4cb770
shr eax, 4
mov esi, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
test eax, eax
je 0x4cb835
mov edi, dword [ebp - 0xc]
push edx
lea eax, [ebp - 0x24]
push eax
call dword [fcn.0042132c]
lea eax, [ebp - 0x24]
push eax
push edi
call dword [0x421324]
mov ebx, eax
test ebx, ebx
js 0x4cb9e9
movzx ecx, word [ebp - 0x24]
lea eax, [ebp - 0x24]
add ecx, 2
push eax
add esi, ecx
call dword [0x421320]
mov eax, dword [ebp - 0x14]
add edi, 0x10
inc eax
push 0
mov dword [ebp - 0x14], eax
pop edx
cmp eax, dword [ebp - 0x18]
jb 0x4cb7f0
mov eax, dword fs:[0x30]
add esi, 2
push esi
push edx
mov dword [ebp - 0x10], esi
push dword [eax + 0x18]
call dword [fcn.004212d8]
mov edi, eax
test edi, edi
je 0x4cb751
xor esi, esi
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x18], esi
jbe 0x4cb8b8
mov eax, dword [ebp - 0xc]
lea ecx, [ebp - 0x24]
push ecx
push eax
call dword [0x421324]
mov ebx, eax
test ebx, ebx
js 0x4cba56
movzx esi, word [ebp - 0x24]
add esi, 2
push esi
push dword [ebp - 0x20]
push dword [ebp - 0x14]
call fcn.004d6f10
add dword [ebp - 0x14], esi
lea eax, [ebp - 0x24]
add esp, 0xc
push eax
call dword [0x421320]
mov esi, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
inc esi
add eax, 0x10
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0xc], eax
cmp esi, dword [ebp - 0x18]
jb 0x4cb866
mov eax, dword [ebp - 0x14]
xor esi, esi
xor ecx, ecx
mov word [eax], cx
jmp 0x4cb8ed
cmp dword [ebp + 8], 0x10
jne 0x4cb770
lea eax, [ebp - 0x24]
push eax
push esi
call dword [0x421324]
mov ebx, eax
test ebx, ebx
js 0x4cb9e9
movzx esi, word [ebp - 0x24]
mov edi, dword [ebp - 0x20]
add esi, 2
mov dword [ebp - 0x10], esi
xor esi, esi
test ebx, ebx
js 0x4cba58
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebp + 0x10]
mov dword [eax], edi
xor edi, edi
mov eax, dword [ebp + 0x14]
mov dword [eax], ebx
mov ebx, edi
jmp 0x4cb9e9
mov eax, dword [ebp + 8]
test al, 1
jne 0x4cb770
mov ecx, eax
mov byte [ebp - 1], dl
xor edi, edi
shr ecx, 1
je 0x4cb935
cmp word [esi], di
je 0x4cb930
add esi, 2
sub ecx, 1
jne 0x4cb921
jmp 0x4cb935
mov dl, 1
mov byte [ebp - 1], dl
mov esi, eax
mov dword [ebp - 0x10], esi
test dl, dl
jne 0x4cb94a
lea esi, [eax + 2]
mov dword [ebp - 0x10], esi
cmp esi, eax
jb 0x4cb98b
mov ebx, edi
mov eax, dword fs:[0x30]
push esi
push edi
push dword [eax + 0x18]
call dword [fcn.004212d8]
mov edi, eax
test edi, edi
je 0x4cb751
push dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
push ecx
push edi
call fcn.004d6f10
add esp, 0xc
cmp byte [ebp - 1], 0
jne 0x4cb8eb
xor eax, eax
mov word [esi + edi - 2], ax
jmp 0x4cb8eb
mov ebx, 0xc0000095
jmp 0x4cb9e9
cmp dword [esi], 6
lea eax, [ebp - 8]
mov edx, dword [ebp + 8]
mov ecx, esi
push eax
jne 0x4cb9a7
call fcn.004cba97
jmp 0x4cb9af
push dword [ebp + 0xc]
call fcn.004cf7f6
mov ebx, eax
test ebx, ebx
js 0x4cb9ce
mov eax, dword [ebp - 8]
mov dword [ebp - 0x1c], eax
mov esi, dword [eax + 8]
add esi, 0x10
mov dword [ebp - 0x10], esi
cmp esi, 0x10
jae 0x4cb9f4
mov ebx, 0xc000000d
xor esi, esi
cmp dword [ebp - 8], 0
je 0x4cb9e9
push dword [ebp - 8]
mov eax, dword fs:[0x30]
push esi
push dword [eax + 0x18]
call dword [fcn.004212dc]
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword fs:[0x30]
push esi
xor esi, esi
push esi
push dword [eax + 0x18]
call dword [fcn.004212d8]
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x4cba15
mov ebx, 0xc0000017
jmp 0x4cb9d0
mov esi, dword [ebp - 0xc]
mov edi, eax
mov eax, dword [ebp - 0x1c]
lea esi, [esi + 4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [eax + 8]
mov edi, dword [ebp - 0x18]
push dword [ebp - 8]
lea eax, [edi + 0x10]
push eax
call fcn.004d6f10
mov eax, dword fs:[0x30]
add esp, 0xc
xor esi, esi
push dword [ebp - 8]
push esi
push dword [eax + 0x18]
call dword [fcn.004212dc]
mov dword [ebp - 8], esi
jmp 0x4cb8ed
xor esi, esi
test edi, edi
je 0x4cb9e9
mov eax, dword fs:[0x30]
push edi
push esi
push dword [eax + 0x18]
call dword [fcn.004212dc]
jmp 0x4cb9d0