Function at 0x56c480
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x38
mov esi, ecx
mov edi, dword [ebp + 8]
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], 0x56cbe0
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
mov ebx, dword [esi]
push ebx
call fcn.00596050
add esp, 4
add eax, ebx
add eax, 0x12
mov word [edi], 3
mov dword [ebp - 0x2c], eax
mov dword [edi + 2], eax
lea eax, [edi + 6]
mov ecx, dword [esi + 0x30]
mov edx, dword [ebp + 0xc]
add edx, 0xfffffffa
push edx
push eax
call fcn.0056d870
lea ecx, [edi + eax]
add ecx, 6
mov eax, dword [esi]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], ecx
mov ecx, dword [esi + 0x2c]
test ecx, ecx
je 0x56c6bc
mov eax, dword [ecx]
lea ebx, [ebp - 0x44]
lea edx, [ebp - 0x20]
push ebx
push edx
call dword [eax + 8]
mov dword [ebp - 0x28], 0
add edi, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x24]
sub edi, ecx
lea eax, [ebp - 0x28]
push eax
push edi
push dword [esi]
push ecx
call fcn.00596090
add esp, 0x10
mov ecx, dword [esi + 0x30]
push ebx
call fcn.0056d7d0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 1
lea ecx, [ebp - 0x20]
push ebx
call fcn.005cb0a0
lea ecx, [ebp - 0x20]
push dword [ebp - 0x30]
push dword [ebp - 0x24]
call fcn.005cb0e0
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
sub edx, eax
je 0x56c5ae
mov esi, edx
mov ecx, edx
and esi, 7
je 0x56c577
and ecx, 0xfffffff8
nop dword [eax + eax]
mov byte [eax], 0
inc eax
dec esi
jne 0x56c570
cmp edx, 8
jb 0x56c5ae
xor edx, edx
nop
mov byte [eax + edx], 0
mov byte [eax + edx + 1], 0
mov byte [eax + edx + 2], 0
mov byte [eax + edx + 3], 0
mov byte [eax + edx + 4], 0
mov byte [eax + edx + 5], 0
mov byte [eax + edx + 6], 0
mov byte [eax + edx + 7], 0
add edx, 8
cmp ecx, edx
jne 0x56c580
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
sub edx, eax
je 0x56c611
mov esi, edx
mov ecx, edx
and esi, 7
je 0x56c5d7
and ecx, 0xfffffff8
nop word cs:[eax + eax]
mov byte [eax], 0
inc eax
dec esi
jne 0x56c5d0
cmp edx, 8
jb 0x56c60e
xor edx, edx
nop
mov byte [eax + edx], 0
mov byte [eax + edx + 1], 0
mov byte [eax + edx + 2], 0
mov byte [eax + edx + 3], 0
mov byte [eax + edx + 4], 0
mov byte [eax + edx + 5], 0
mov byte [eax + edx + 6], 0
mov byte [eax + edx + 7], 0
add edx, 8
cmp ecx, edx
jne 0x56c5e0
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x56c6a6
mov ecx, dword [ebp - 0x38]
sub ecx, eax
je 0x56c69a
mov edi, ecx
mov esi, eax
mov edx, ecx
and edi, 7
je 0x56c647
mov edx, ecx
and edx, 0xfffffff8
mov esi, eax
nop word cs:[eax + eax]
mov byte [esi], 0
inc esi
dec edi
jne 0x56c640
cmp ecx, 8
jb 0x56c69c
xor edi, edi
nop
mov byte [esi + edi], 0
mov byte [esi + edi + 1], 0
mov byte [esi + edi + 2], 0
mov byte [esi + edi + 3], 0
mov byte [esi + edi + 4], 0
mov byte [esi + edi + 5], 0
mov byte [esi + edi + 6], 0
mov byte [esi + edi + 7], 0
add edi, 8
cmp edx, edi
jne 0x56c650
cmp ecx, 0x1000
jb 0x56c69c
mov edx, dword [eax - 4]
add eax, 0xfffffffc
sub eax, edx
cmp eax, 0x20
jae 0x56c6c1
add ecx, 0x23
mov eax, edx
jmp 0x56c69c
xor ecx, ecx
push ecx
push eax
call fcn.0071996d
add esp, 8
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
mov eax, dword [ebp - 0x2c]
add esp, 0x38
pop esi
pop edi
pop ebx
pop ebp
ret 8
call fcn.0071b54d
mov dword [ebp - 0x10], 0
call fcn.006fce21
nop dword [eax]
push ebp
sub esp, 0x10
add ebp, 0xc
call fcn.007311e0
nop dword [eax]
push ebp
sub esp, 0x10
add ebp, 0xc
lea ecx, [ebp - 0x44]
call fcn.004b8850
add esp, 0x10
pop ebp
ret