Function at 0x181d38a4
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffee8
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], eax
mov dword [ebp - 8], eax
mov ebx, dword [0x181dce6c]
lea esi, [ebp - 4]
xor eax, eax
push ebp
push 0x181d3dfd
push dword fs:[eax]
mov dword fs:[eax], esp
push pe_nt_image_headers32
lea eax, [ebp - 0x108]
push eax
mov eax, dword [0x181de660]
push eax
call fcn.181766e4
lea eax, [ebp - 8]
lea edx, [ebp - 0x108]
mov ecx, pe_nt_image_headers32
call fcn.18174344
lea eax, [ebp - 0x10c]
push eax
mov eax, dword [ebp - 8]
call fcn.18174394
mov ecx, eax
sub ecx, 3
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.181745f4
mov edx, dword [ebp - 0x10c]
lea eax, [ebp - 8]
mov ecx, 0x181d3e14
call fcn.181743e0
mov ecx, dword [ebp - 8]
mov dl, 1
mov eax, dword [0x181d250c]
call fcn.18199838
mov dword [esi], eax
push 0x181d3e20
lea eax, [ebp - 0x110]
push eax
mov ecx, 0x181d3e2c
mov edx, 0x181d3e40
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x110]
call fcn.181c7538
movzx eax, ax
mov dword [0x181dca34], eax
push 0x181d3e54
lea eax, [ebp - 0x114]
push eax
mov ecx, 0x181d3e60
mov edx, 0x181d3e70
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x114]
call fcn.181c7538
movzx eax, ax
mov dword [ebx + 0x54], eax
push 0x181d3e80
lea eax, [ebp - 0x118]
push eax
mov ecx, 0x181d3e8c
mov edx, 0x181d3e70
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi]
mov eax, dword [ebp - 0x118]
call fcn.181c7538
movzx eax, ax
mov dword [ebx + 0x68], eax
push 0
mov ecx, 0x181d3ea8
mov edx, 0x181d3e40
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 2], al
push 0
mov ecx, 0x181d3eb8
mov edx, 0x181d3e40
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 3], al
push 2
mov ecx, 0x181d3ec8
mov edx, 0x181d3e40
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov dword [ebx + 8], eax
push 0
mov ecx, 0x181d3edc
mov edx, 0x181d3e40
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 5], al
push 1
mov ecx, 0x181d3ef4
mov edx, 0x181d3e40
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 0x3c], al
push 0
mov ecx, 0x181d3f14
mov edx, 0x181d3e40
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 0x10], al
push 1
mov ecx, 0x181d3f2c
mov edx, 0x181d3e40
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 0x18], al
push 0
mov ecx, 0x181d3f40
mov edx, 0x181d3e40
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 0x19], al
push 0
mov ecx, 0x181d3f54
mov edx, 0x181d3e40
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 0x1a], al
push 0x23
mov ecx, 0x181d3f64
mov edx, 0x181d3e40
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov dword [ebx + 0x1c], eax
push 1
mov ecx, 0x181d3f78
mov edx, 0x181d3f88
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 0x28], al
push 0x32
mov ecx, 0x181d3f98
mov edx, 0x181d3f88
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov dword [ebx + 0x2c], eax
push 2
mov ecx, 0x181d3fa8
mov edx, 0x181d3f88
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov edx, 1
call fcn.18191404
mov dword [ebx + 0x38], eax
push 0x3fb47ae1
push 0x47ae147b
mov ecx, 0x181d3fb8
mov edx, 0x181d3f88
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x24]
fstp dword [ebx + 0x30]
wait
push 0xa
mov ecx, 0x181d3fc8
mov edx, 0x181d3fdc
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov dword [ebx + 0x88], eax
push 0
mov ecx, 0x181d3fe8
mov edx, 0x181d3fdc
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 0x8c], al
push 1
mov ecx, 0x181d4000
mov edx, 0x181d3fdc
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 0x8d], al
push 0
mov ecx, 0x181d4018
mov edx, 0x181d3fdc
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 0x8e], al
push 1
mov ecx, 0x181d4034
mov edx, 0x181d3fdc
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 0x8f], al
push 0
mov ecx, 0x181d4044
mov edx, 0x181d3fdc
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 0x92], al
push 1
mov ecx, 0x181d4054
mov edx, 0x181d3fdc
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 0x90], al
push 1
mov ecx, 0x181d4068
mov edx, 0x181d3fdc
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 0x91], al
push 0
mov ecx, 0x181d4078
mov edx, 0x181d3fdc
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov dword [ebx + 0x94], eax
push 1
mov ecx, 0x181d408c
mov edx, 0x181d3e40
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 4], al
push 0
mov ecx, 0x181d40a0
mov edx, 0x181d3e40
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 0x3d], al
push 0
mov ecx, 0x181d40b8
mov edx, 0x181d3e70
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov dword [ebx + 0x4c], eax
push 0
mov ecx, 0x181d40cc
mov edx, 0x181d3e70
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov dword [ebx + 0x50], eax
push 0x40328000
push 0
mov ecx, 0x181d40e0
mov edx, 0x181d3e70
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x24]
fstp dword [ebx + 0x44]
wait
push 0x402f0000
push 0
mov ecx, 0x181d40f8
mov edx, 0x181d3e70
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x24]
fstp dword [ebx + 0x48]
wait
push 0
mov ecx, 0x181d410c
mov edx, 0x181d3e70
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 0x64], al
push 0x12c
mov ecx, 0x181d4124
mov edx, 0x181d3e70
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov dword [ebx + 0x6c], eax
push 0
mov ecx, 0x181d4144
mov edx, 0x181d3e70
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 0x74], al
push 0
mov ecx, 0x181d415c
mov edx, 0x181d3e70
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 0x59], al
push 0
mov ecx, 0x181d4174
mov edx, 0x181d3e70
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 0x75], al
push 0
mov ecx, 0x181d418c
mov edx, 0x181d3e70
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 0x76], al
push 0
mov ecx, 0x181d41a4
mov edx, 0x181d3e70
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov dword [ebx + 0x14], eax
push 3
mov ecx, 0x181d41b8
mov edx, 0x181d3e70
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 8]
mov dword [ebx + 0x40], eax
push ebp
lea eax, [ebx + 0x98]
mov edx, 0x181d41cc
call fcn.181d295c
pop ecx
push 0
mov ecx, 0x181d3f78
mov edx, 0x181d41e0
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x10]
mov byte [ebx + 0x1b0], al
mov dword [ebx + 0x1b4], 1
xor eax, eax
mov dword [ebx + 0x1bc], eax
push 0x40507333
push 0x33333333
mov ecx, 0x181d41f4
mov edx, 0x181d41e0
mov eax, dword [esi]
mov edi, dword [eax]
call dword [edi + 0x24]
fstp dword [ebx + 0x1c0]
wait
xor eax, eax
mov dword [ebx + 0x1c4], eax
mov eax, dword [esi]
call fcn.18173314
jmp 0x181d3dd7
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x181d3e04
lea eax, [ebp - 0x118]
mov edx, 4
call fcn.181740f8
lea eax, [ebp - 8]
call fcn.181740d4
ret