Function at 0x48b6c8
Capabilities:
Check for peb beingdebugged flag
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffee0
mov eax, 0x5b51c0
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
call fcn.0051a22c
mov dword [ebp - 0x20], 1
lea edx, [ebp + 0xc]
lea eax, [ebp + 0xc]
call fcn.0051a3e0
inc dword [ebp - 0x20]
xor edx, edx
mov word [ebp - 0x2c], 8
mov word [ebp - 0x2c], 0x14
mov dword [ebp - 4], edx
xor ecx, ecx
inc dword [ebp - 0x20]
xor eax, eax
mov word [ebp - 0x2c], 8
mov cl, byte [ebx + 7]
xor edx, edx
push ecx
xor ecx, ecx
mov al, byte [ebx + 6]
push eax
xor eax, eax
mov dl, byte [ebx + 5]
push edx
xor edx, edx
mov cl, byte [ebx + 4]
push ecx
xor ecx, ecx
mov al, byte [ebx + 3]
push eax
xor eax, eax
mov dl, byte [ebx + 2]
push edx
lea edx, [ebp - 0x3d]
mov cl, byte [ebx + 1]
push ecx
mov al, byte [ebx]
push eax
push 0x5b5046
push edx
call sub.cc3260mt.dll__sprintf
mov word [ebp - 0x2c], 0x20
add esp, 0x28
lea edx, [ebp - 0x3d]
lea eax, [ebp - 8]
call fcn.0051a3a8
inc dword [ebp - 0x20]
lea edx, [ebp - 8]
lea eax, [ebp - 4]
call fcn.0051a5fc
dec dword [ebp - 0x20]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0051a5cc
lea edx, [ebp + 0xc]
lea eax, [ebp - 4]
call fcn.0051a6b0
test al, al
je 0x48b7c1
mov al, 1
mov edx, 2
push eax
lea eax, [ebp - 4]
dec dword [ebp - 0x20]
call fcn.0051a5cc
dec dword [ebp - 0x20]
lea eax, [ebp + 0xc]
mov edx, 2
call fcn.0051a5cc
pop eax
mov edx, dword [ebp - 0x3c]
mov dword fs:[0], edx
jmp 0x48bb48
mov word [ebp - 0x2c], 0x2c
xor ecx, ecx
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], ecx
push eax
inc dword [ebp - 0x20]
xor edx, edx
mov dl, byte [ebx]
xor eax, eax
mov dword [ebp - 0x48], edx
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x50], ecx
xor ecx, ecx
mov byte [ebp - 0x4c], 0
mov al, byte [ebx + 1]
mov dword [ebp - 0x54], eax
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x5c], edx
xor edx, edx
mov byte [ebp - 0x58], 0
mov cl, byte [ebx + 2]
mov dword [ebp - 0x60], ecx
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x68], eax
xor eax, eax
mov byte [ebp - 0x64], 0
mov dl, byte [ebx + 3]
mov dword [ebp - 0x6c], edx
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x74], ecx
xor ecx, ecx
mov byte [ebp - 0x70], 0
mov al, byte [ebx + 4]
mov dword [ebp - 0x78], eax
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x80], edx
xor edx, edx
mov byte [ebp - 0x7c], 0
mov cl, byte [ebx + 5]
mov dword [ebp - 0x84], ecx
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x8c], eax
xor eax, eax
mov byte [ebp - 0x88], 0
mov dl, byte [ebx + 6]
mov dword [ebp - 0x90], edx
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x98], ecx
mov ecx, 8
mov byte [ebp - 0x94], 0
mov al, byte [ebx + 7]
mov dword [ebp - 0x9c], eax
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0xa4], edx
mov byte [ebp - 0xa0], 0
push 0
push 0
push 0x42742c
push 3
mov dword [ebp - 0x10], ecx
push ecx
push 8
push 0
call fcn.00519e84
add esp, 0x1c
mov dword [ebp - 0x14], eax
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x50]
mov dword [esi], eax
mov dl, byte [ebp - 0x4c]
mov byte [esi + 4], dl
mov edi, dword [ebp - 0x14]
add edi, 8
mov eax, dword [ebp - 0x5c]
mov dword [edi], eax
mov dl, byte [ebp - 0x58]
mov byte [edi + 4], dl
mov ecx, dword [ebp - 0x14]
add ecx, 0x10
mov dword [ebp - 0xa8], ecx
mov eax, dword [ebp - 0xa8]
mov edx, dword [ebp - 0x68]
mov dword [eax], edx
mov ecx, dword [ebp - 0xa8]
mov al, byte [ebp - 0x64]
mov byte [ecx + 4], al
mov edx, dword [ebp - 0x14]
add edx, 0x18
mov dword [ebp - 0xac], edx
mov ecx, dword [ebp - 0xac]
mov eax, dword [ebp - 0x74]
mov dword [ecx], eax
mov edx, dword [ebp - 0xac]
mov cl, byte [ebp - 0x70]
mov byte [edx + 4], cl
mov eax, dword [ebp - 0x14]
add eax, 0x20
mov dword [ebp - 0xb0], eax
mov edx, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0x80]
mov dword [edx], ecx
mov eax, dword [ebp - 0xb0]
mov dl, byte [ebp - 0x7c]
mov byte [eax + 4], dl
mov ecx, dword [ebp - 0x14]
add ecx, 0x28
mov dword [ebp - 0xb4], ecx
mov eax, dword [ebp - 0xb4]
mov edx, dword [ebp - 0x8c]
mov dword [eax], edx
mov ecx, dword [ebp - 0xb4]
mov al, byte [ebp - 0x88]
mov byte [ecx + 4], al
mov edx, dword [ebp - 0x14]
add edx, 0x30
mov dword [ebp - 0xb8], edx
mov ecx, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x98]
mov dword [ecx], eax
mov edx, dword [ebp - 0xb8]
mov cl, byte [ebp - 0x94]
mov byte [edx + 4], cl
mov eax, dword [ebp - 0x14]
add eax, 0x38
mov dword [ebp - 0xbc], eax
mov edx, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0xa4]
mov dword [edx], ecx
mov eax, dword [ebp - 0xbc]
mov dl, byte [ebp - 0xa0]
mov byte [eax + 4], dl
lea ecx, [ebp - 0x14]
inc dword [ebp - 0x20]
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x44]
mov edx, dword [eax]
push edx
mov edx, 0x5b5067
lea eax, [ebp - 0xc]
call fcn.0051a3a8
inc dword [ebp - 0x20]
xor edx, edx
mov dl, byte [ebx]
mov eax, dword [eax]
mov dword [ebp - 0xc0], edx
xor edx, edx
mov ecx, dword [ebp - 0xc0]
mov dword [ebp - 0xc8], ecx
mov byte [ebp - 0xc4], 0
mov dl, byte [ebx + 1]
mov dword [ebp - 0xcc], edx
xor edx, edx
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 0xd4], ecx
mov byte [ebp - 0xd0], 0
mov dl, byte [ebx + 2]
mov dword [ebp - 0xd8], edx
xor edx, edx
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xe0], ecx
mov byte [ebp - 0xdc], 0
mov dl, byte [ebx + 3]
mov dword [ebp - 0xe4], edx
xor edx, edx
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0xec], ecx
mov byte [ebp - 0xe8], 0
mov dl, byte [ebx + 4]
mov dword [ebp - 0xf0], edx
xor edx, edx
mov ecx, dword [ebp - 0xf0]
mov dword [ebp - 0xf8], ecx
mov byte [ebp - 0xf4], 0
mov dl, byte [ebx + 5]
mov dword [ebp - 0xfc], edx
xor edx, edx
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x104], ecx
mov byte [ebp - 0x100], 0
mov dl, byte [ebx + 6]
mov dword [ebp - 0x108], edx
xor edx, edx
mov ecx, dword [ebp - 0x108]
mov dword [ebp - 0x110], ecx
mov byte [ebp - 0x10c], 0
mov dl, byte [ebx + 7]
mov dword [ebp - 0x114], edx
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x11c], ecx
mov byte [ebp - 0x118], 0
mov dword [ebp - 0x120], 8
mov ecx, dword [ebp - 0x120]
pop edx
dec ecx
call sub.rtl60.bpl__Sysutils_Format_qqrx17System_AnsiStringpx14System_TVarRecxi
lea edx, [ebp - 0x18]
lea eax, [ebp - 4]
call fcn.0051a5fc
dec dword [ebp - 0x20]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0051a5cc
dec dword [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
push ecx
call sub.cc3260mt.dll___bdla_qpv
pop ecx
mov word [ebp - 0x2c], 8
dec dword [ebp - 0x20]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0051a5cc
lea edx, [ebp + 0xc]
lea eax, [ebp - 4]
call fcn.0051a6b0
push eax
dec dword [ebp - 0x20]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0051a5cc
dec dword [ebp - 0x20]
lea eax, [ebp + 0xc]
mov edx, 2
call fcn.0051a5cc
pop eax
mov edx, dword [ebp - 0x3c]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret