Function at 0x495520
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4cc928
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x68
mov ecx, dword [ebp + 8]
mov al, 1
cmp al, byte [ecx + 2]
push ebx
push esi
sbb esi, esi
and esi, dword [0x4f0b14]
xor ecx, ecx
push edi
mov edi, dword [0x4f0b10]
xor edx, edx
mov dword [esp + 0x18], edi
mov byte [esp + 0x12], 0
mov byte [esp + 0x11], 0
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x28], ecx
mov ebx, dword [ebp + 0x14]
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x14], ecx
mov byte [esp + 0x13], dl
mov al, byte [ebx]
cmp al, 0x20
je 0x49559a
cmp al, 9
jne 0x49559d
inc ebx
jmp 0x495590
cmp byte [ebx], 0x2a
jne 0x495762
jmp 0x4955b0
push 0x4e460c
inc ebx
call fcn.0049be50
add esp, 4
push 7
push eax
push ebx
call fcn.004babb4
add esp, 0xc
test eax, eax
jne 0x495615
add ebx, 7
mov byte [esp + 0x13], 1
test esi, esi
jne 0x4955df
mov byte [esp + 0x11], 1
test ebx, ebx
je 0x49574b
mov dl, byte [ebx]
test dl, dl
je 0x49574b
mov ecx, 0x4d9558
mov al, 0x20
cmp dl, al
je 0x495735
mov al, byte [ecx + 1]
inc ecx
test al, al
jne 0x4955f8
mov dl, byte [ebx + 1]
inc ebx
test dl, dl
jne 0x4955f1
jmp 0x49574b
push 1
push 0x4e4b84
push ebx
call fcn.004babb4
add esp, 0xc
test eax, eax
jne 0x49569d
mov al, byte [ebx + 1]
inc ebx
test al, al
je 0x4955da
cmp al, 0x20
je 0x4955da
cmp al, 9
je 0x4955da
push 0x3b
lea edx, [esp + 0x38]
push ebx
push edx
call fcn.004bd1c0
add esp, 0xc
mov edi, 0x4d9558
lea eax, [esp + 0x34]
mov byte [esp + 0x6f], 0
call fcn.004099e0
test eax, eax
je 0x495663
mov byte [eax], 0
cmp byte [esp + 0x34], 0
je 0x4955da
lea eax, [esp + 0x34]
call fcn.0040dd50
movzx eax, al
neg eax
sbb eax, eax
and eax, 6
add eax, 0xa
push eax
lea ecx, [esp + 0x38]
push 0
push ecx
call fcn.004bc2a6
mov dword [esp + 0x2c], eax
add esp, 0xc
jmp 0x4955df
push 1
push 0x4e22dc
push ebx
call fcn.004babb4
add esp, 0xc
test eax, eax
jne 0x4955df
mov al, byte [ebx + 1]
inc ebx
test al, al
je 0x4955da
cmp al, 0x20
je 0x4955da
cmp al, 9
je 0x4955da
push 0x3b
lea edx, [esp + 0x38]
push ebx
push edx
call fcn.004bd1c0
add esp, 0xc
mov edi, 0x4d9558
lea eax, [esp + 0x34]
mov byte [esp + 0x6f], 0
call fcn.004099e0
test eax, eax
je 0x4956fb
mov byte [eax], 0
cmp byte [esp + 0x34], 0
je 0x4955da
lea eax, [esp + 0x34]
call fcn.0040dd50
movzx eax, al
neg eax
sbb eax, eax
and eax, 6
add eax, 0xa
push eax
lea ecx, [esp + 0x38]
push 0
push ecx
call fcn.004bc2a6
mov dword [esp + 0x28], eax
add esp, 0xc
jmp 0x4955df
mov al, byte [ebx]
cmp al, 0x20
je 0x49573f
cmp al, 9
jne 0x495742
inc ebx
jmp 0x495735
cmp byte [ebx], 0x2a
je 0x4955b0
cmp byte [esp + 0x11], 0
mov edi, dword [esp + 0x18]
jne 0x495855
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov al, byte [edi + 0x17]
test al, al
jne 0x49576f
mov eax, dword [edi + 0xc]
mov al, byte [eax + 0x17]
cmp al, 2
je 0x495855
cmp byte [esp + 0x13], 0
je 0x49579d
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp + 0xc]
push eax
lea eax, [esp + 0x1c]
push eax
mov eax, ecx
mov ecx, edx
lea edx, [esp + 0x34]
call fcn.00495c50
add esp, 0xc
jmp 0x4957b3
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
push eax
lea eax, [esp + 0x28]
push eax
mov eax, edx
call fcn.00495b40
add esp, 8
mov byte [esp + 0x12], al
test al, al
je 0x495855
mov eax, dword [esp + 0x14]
test eax, eax
je 0x49583f
mov ebx, dword [esp + 0x18]
mov edi, dword [esp + 0x2c]
push eax
mov eax, ebx
call fcn.004a6340
xor edi, edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x30], edi
cmp esi, edi
je 0x4957f8
mov ecx, dword [esp + 0x14]
push 0x18
push edi
push ecx
mov eax, esi
call fcn.00401570
cmp byte [ebx + 0x17], 0
jne 0x495803
mov eax, dword [ebx + 0xc]
jmp 0x495805
mov eax, ebx
cmp byte [eax + 0x17], 2
jne 0x495839
cmp dword [0x4f2354], edi
je 0x495839
push 1
mov ecx, 0x4f2348
call fcn.004049f0
cmp eax, edi
jne 0x49586b
xor eax, eax
mov ecx, dword [esp + 0x74]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
and byte [eax + 0x15], 0x86
jmp 0x49586b
mov eax, dword [esp + 0x24]
test eax, eax
je 0x49586b
cdq
push 0x18
push edx
push eax
mov eax, edi
call fcn.00401570
jmp 0x49586b
test edi, edi
je 0x495860
mov ecx, edi
call fcn.0041a480
test esi, esi
je 0x49586b
mov ecx, esi
call fcn.0041a480
mov eax, dword [ebp + 8]
xor edx, edx
cmp byte [esp + 0x12], dl
sete dl
push edx
push eax
call fcn.0042d1e0
mov esi, dword [esp + 0x2c]
mov edi, eax
test esi, esi
je 0x4958a1
mov ecx, dword [esp + 0x28]
push ecx
push 0
push esi
call fcn.004c16a0
add esp, 0xc
push esi
call fcn.004ba14c
add esp, 4
mov ecx, dword [esp + 0x74]
mov eax, edi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x10