Function at 0x5a3678
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff8
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 4], edx
mov ebx, eax
mov esi, dword [ebp + 8]
xor eax, eax
push ebp
push 0x5a3865
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, edi
call fcn.005b95d4
cmp edx, 0
jne 0x5a36af
cmp eax, 0
jne 0x5a36af
call fcn.0040d93c
mov eax, ebx
call fcn.005a3598
mov eax, dword [ebx + 0x18]
shl eax, 3
mov edx, dword [ebx + 0x1c]
mov dword [edx + eax*8 + 0x1c], esi
mov ecx, dword [ebx + 0x18]
mov edx, esi
mov eax, ebx
call fcn.005a3554
mov eax, dword [ebp - 4]
call fcn.005b95c8
mov edx, dword [ebx + 0x18]
shl edx, 3
mov ecx, dword [ebx + 0x1c]
mov dword [ecx + edx*8 + 8], eax
mov eax, edi
call fcn.005b95d4
push edx
push eax
mov eax, dword [ebx + 0x18]
shl eax, 3
mov edx, dword [ebx + 0x1c]
pop dword [edx + eax*8 + 0x10]
pop dword [edx + eax*8 + 0x14]
cmp esi, 0xffffffff
jne 0x5a3715
mov eax, dword [ebx + 0x18]
shl eax, 3
mov edx, dword [ebx + 0x1c]
mov eax, dword [edx + eax*8 + 8]
mov dword [ebp - 8], eax
jmp 0x5a373c
mov eax, dword [ebx + 0x18]
shl eax, 3
mov edx, dword [ebx + 0x1c]
mov eax, dword [edx + eax*8 + 8]
xor edx, edx
push edx
push eax
mov eax, esi
shl eax, 3
mov edx, dword [ebx + 0x1c]
mov edx, dword [edx + eax*8 + 4]
mov eax, ebx
call fcn.005b999c
mov dword [ebp - 8], eax
mov eax, edi
call fcn.005b95d4
push edx
push eax
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.005b96ac
mov edi, eax
mov eax, dword [ebp - 8]
shl eax, 2
lea eax, [eax + eax*2]
mov edx, dword [ebx + 0x10]
lea esi, [edx + eax*8]
mov eax, dword [ebx + 0x18]
shl eax, 3
mov edx, dword [ebx + 0x1c]
lea eax, [edx + eax*8]
mov edx, dword [esi]
call fcn.00404cf8
mov eax, dword [ebx + 0x18]
shl eax, 3
mov edx, dword [ebx + 0x1c]
mov ecx, dword [ebp - 8]
mov dword [edx + eax*8 + 4], ecx
mov eax, dword [ebx + 0x18]
shl eax, 3
mov edx, dword [ebx + 0x1c]
mov dword [edx + eax*8 + 0x24], edi
mov eax, dword [ebx + 0x18]
shl eax, 3
mov edx, dword [ebx + 0x1c]
lea eax, [edx + eax*8 + 0x18]
mov edx, dword [esi + 0x4c]
mov edx, dword [edx + edi*4]
call fcn.00404cf8
mov eax, dword [esi + 0x48]
mov eax, dword [eax + edi*4]
mov edx, dword [0x6086f8]
movzx edx, byte [edx + 3]
mov eax, dword [eax + edx*4]
mov edx, dword [ebx + 0x18]
shl edx, 3
mov ecx, dword [ebx + 0x1c]
mov dword [ecx + edx*8 + 0x28], eax
mov eax, dword [esi + 0x48]
mov eax, dword [eax + edi*4]
mov edx, dword [0x6086f8]
movzx edx, byte [edx + 1]
mov eax, dword [eax + edx*4]
add eax, dword [esi + 0x2c]
mov edx, dword [esi + 0x48]
mov edx, dword [edx + edi*4]
mov ecx, dword [0x6086f8]
movzx ecx, byte [ecx + 7]
add eax, dword [edx + ecx*4]
mov edx, dword [esi + 0x48]
mov edx, dword [edx + edi*4]
mov ecx, dword [0x6086f8]
movzx ecx, byte [ecx + 8]
add eax, dword [edx + ecx*4]
mov edx, dword [ebx + 0x18]
shl edx, 3
mov ecx, dword [ebx + 0x1c]
mov dword [ecx + edx*8 + 0x2c], eax
mov eax, dword [esi + 0x48]
mov eax, dword [eax + edi*4]
mov edx, dword [0x6086f8]
movzx edx, byte [edx + 7]
mov eax, dword [eax + edx*4]
mov edx, dword [esi + 0x48]
mov edx, dword [edx + edi*4]
mov ecx, dword [0x6086f8]
movzx ecx, byte [ecx + 8]
add eax, dword [edx + ecx*4]
mov edx, dword [esi + 0x48]
mov edx, dword [edx + edi*4]
mov ecx, dword [0x6086f8]
movzx ecx, byte [ecx + 2]
mov edx, dword [edx + ecx*4]
sub edx, eax
mov eax, dword [ebx + 0x18]
shl eax, 3
mov ecx, dword [ebx + 0x1c]
mov dword [ecx + eax*8 + 0x30], edx
mov bl, 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x5a3871
mov eax, dword [0x6088cc]
mov eax, dword [eax]
call fcn.00480d94
mov eax, ebx
pop edi
pop esi
pop ebx
pop ecx
pop ecx
pop ebp
ret 4