Function at 0x4b9a60
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag

Disassembly:
lea r12, [rsp - 0x18]
cmp r12, qword [r14 + 0x10]
jbe 0x4b9dd3
push rbp
mov rbp, rsp
sub rsp, 0x90
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], rbx
xor ecx, ecx
xor edx, edx
xor esi, esi
jmp 0x4b9ab0
mov rdi, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0x70]
mov rdx, rbx
mov rsi, rax
mov rax, qword [rsp + 0xa0]
mov rbx, rdi
cmp rbx, rcx
jle 0x4b9d7a
lea rdi, [rcx + 4]
nop dword [rax]
cmp rbx, rdi
jge 0x4b9aca
mov r8, rbx
jmp 0x4b9ad0
mov r8, rbx
mov rbx, rdi
cmp r8, rbx
jb 0x4b9dc7
nop dword [rax]
cmp rbx, rcx
jb 0x4b9dbc
sub rbx, rcx
mov r9, rbx
neg rbx
sar rbx, 0x3f
and rbx, rcx
nop dword [rax]
test r9, r9
jbe 0x4b9db2
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x68], r9
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x40], rdx
movzx ecx, byte [rax + rbx]
lea rdx, [0x004ea7ba]
mov qword [rsp], rdx
mov qword [rsp + 8], 0x40
mov byte [rsp + 0x10], cl
nop
call fcn.00403920
xorps xmm15, xmm15
mov r14, qword [0x0062a720]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x68]
cmp rcx, 1
jbe 0x4b9da5
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0xa0]
movzx edx, byte [rcx + rax + 1]
lea rbx, [0x004ea7ba]
mov qword [rsp], rbx
mov qword [rsp + 8], 0x40
mov byte [rsp + 0x10], dl
call fcn.00403920
xorps xmm15, xmm15
mov r14, qword [0x0062a720]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x68]
nop dword [rax + rax]
cmp rcx, 2
jbe 0x4b9d96
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0xa0]
movzx edx, byte [rcx + rax + 2]
lea rbx, [0x004ea7ba]
mov qword [rsp], rbx
mov qword [rsp + 8], 0x40
mov byte [rsp + 0x10], dl
call fcn.00403920
xorps xmm15, xmm15
mov r14, qword [0x0062a720]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x68]
cmp rax, 3
jbe 0x4b9d89
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0xa0]
movzx edx, byte [rcx + rax + 3]
mov rbx, qword [rsp + 0x38]
shl rbx, 2
mov rsi, qword [rsp + 0x30]
sar rsi, 4
or rsi, rbx
mov qword [rsp + 0x68], rsi
mov rbx, qword [rsp + 0x18]
mov qword [rsp + 0x48], rbx
lea r8, [0x004ea7ba]
mov qword [rsp], r8
mov qword [rsp + 8], 0x40
mov byte [rsp + 0x10], dl
call fcn.00403920
xorps xmm15, xmm15
mov r14, qword [0x0062a720]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x28], rax
mov rbx, qword [rsp + 0x68]
xor eax, eax
call fcn.00452200
mov rcx, qword [rsp + 0x40]
mov rdi, rax
mov rsi, rbx
xor eax, eax
mov rbx, qword [rsp + 0x78]
call fcn.00451ae0
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0xa0]
movzx esi, byte [rdx + rcx + 2]
cmp sil, 0x3d
je 0x4b9d1c
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x88], rax
mov rbx, qword [rsp + 0x30]
and ebx, 0xf
shl rbx, 4
mov rcx, qword [rsp + 0x48]
sar rcx, 2
or rbx, rcx
xor eax, eax
call fcn.00452200
mov rcx, qword [rsp + 0x58]
mov rdi, rax
mov rsi, rbx
xor eax, eax
mov rbx, qword [rsp + 0x88]
call fcn.00451ae0
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0xa0]
movzx esi, byte [rdx + rcx + 3]
cmp sil, 0x3d
je 0x4b9a92
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x80], rax
mov rbx, qword [rsp + 0x48]
and ebx, 3
shl rbx, 6
mov rcx, qword [rsp + 0x28]
or rbx, rcx
xor eax, eax
call fcn.00452200
mov rcx, qword [rsp + 0x50]
mov rdi, rax
mov rsi, rbx
xor eax, eax
mov rbx, qword [rsp + 0x80]
call fcn.00451ae0
mov rdx, qword [rsp + 0xa0]
jmp 0x4b9a92
mov rax, rsi
mov rbx, rdx
add rsp, 0x90
pop rbp
ret
mov eax, 3
mov rcx, rax
call fcn.00468fc0
mov eax, 2
mov rcx, rax
nop
call fcn.00468fc0
mov eax, 1
mov rcx, rax
call fcn.00468fc0
xor eax, eax
mov rcx, rax
call fcn.00468fc0
mov rax, rcx
mov rcx, rbx
call fcn.00469080
mov rcx, rbx
mov rdx, r8
call fcn.00469000
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
nop dword [rax]
call fcn.00466ce0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
jmp fcn.004b9a60