Function at 0x401200
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x449161
mov eax, dword fs:[0]
push eax
sub esp, 0x490
mov eax, dword [0x4531f0]
xor eax, esp
mov dword [esp + 0x488], eax
push ebx
push esi
push edi
mov eax, dword [0x4531f0]
xor eax, esp
push eax
lea eax, [esp + 0x4a0]
mov dword fs:[0], eax
mov edi, ecx
lea esi, [esp + 0x20]
mov dword [esp + 0x18], edi
call fcn.00407010
xor ecx, ecx
mov dword [esp + 0x4a8], ecx
mov eax, dword [esp + 0x20]
movzx edx, word [eax]
mov dword [esp + 0x38], edx
movzx edx, word [eax + 2]
movzx eax, word [eax + 4]
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], eax
mov dword [esp + 0x4c], vtable.PPGPolicy::SuperPro.0
mov word [esp + 0x454], 0xffff
mov byte [esp + 0x456], cl
mov dword [esp + 0x458], ecx
mov byte [esp + 0x4a8], 1
movzx ecx, word [edi + 4]
push ecx
lea edi, [esp + 0x50]
call fcn.00407450
mov ebx, edi
call fcn.004074d0
test al, al
je case.default.0x40159f
mov esi, dword [esp + 0x20]
movzx edx, word [esi + 0xe]
movzx eax, word [esi + 6]
movzx ecx, word [esi + 0xc]
mov dword [esp + 0x1c], edx
movzx edx, word [esi + 0x10]
mov dword [esp + 0x40], ecx
xor ecx, ecx
mov dword [esp + 0x48], eax
push eax
lea edi, [esp + 0x1b]
lea ebx, [esp + 0x40]
lea eax, [esp + 0x50]
mov dword [esp + 0x48], edx
mov dword [esp + 0x40], ecx
mov byte [esp + 0x1b], cl
call fcn.00407710
test al, al
jne 0x401363
mov edi, dword [esp + 0x18]
lea eax, [esp + 0x4c]
call fcn.00401160
cmp byte [esp + 0x456], 0
mov dword [esp + 0x4c], vtable.PPGPolicy::SuperPro.0
je 0x401336
push 0
push 0
lea eax, [esp + 0x58]
push eax
call fcn.00407e20
call fcn.00407ee0
mov byte [esp + 0x456], 0
mov ecx, dword [esp + 0x2c]
push ecx
call fcn.00434c6c
mov edx, dword [esp + 0x2c]
add esp, 4
push edx
call fcn.00434c6c
mov eax, dword [esp + 0x28]
add esp, 4
push eax
call fcn.00434c6c
add esp, 4
push esi
jmp 0x401dad
mov cx, word [esp + 0x1c]
cmp word [esp + 0x3c], cx
jne 0x401bf0
cmp byte [esp + 0x17], 1
jne 0x401bf0
xor eax, eax
xor ebx, ebx
lea edx, [esp + 0x1c]
mov dword [esp + 0x469], eax
mov dword [esp + 0x46d], eax
mov byte [esp + 0x471], al
mov dword [esp + 0x45d], eax
mov dword [esp + 0x461], eax
mov byte [esp + 0x465], al
mov dword [esp + 0x475], eax
mov dword [esp + 0x479], eax
mov byte [esp + 0x47d], al
push edx
lea eax, [esp + 0x24]
push eax
mov byte [esp + 0x470], bl
mov byte [esp + 0x464], bl
mov byte [esp + 0x47c], bl
mov dword [esp + 0x24], ebx
call fcn.00407180
mov esi, dword [esp + 0x1c]
mov byte [esp + 0x16], bl
movzx ax, byte [esp + 0x16]
add ax, si
mov word [esp + 0x1c], ax
lea edi, [esp + 0x17]
lea ebx, [esp + 0x3c]
push eax
lea eax, [esp + 0x50]
call fcn.00407710
lea ecx, [esp + 0x50]
push ecx
mov bl, al
call fcn.00407dd0
test bl, bl
movzx eax, ax
jne 0x401433
cmp ax, 4
jne 0x401701
jmp 0x4014ce
mov bl, byte [esp + 0x16]
test bl, bl
je 0x401465
cmp bl, 1
je 0x401465
mov edx, dword [esp + 0x20]
movzx eax, word [edx + 0xc]
movzx ecx, ax
movzx eax, si
sub eax, ecx
cdq
and edx, 3
add eax, edx
sar eax, 2
movzx edx, al
mov eax, dword [esp + 0x28]
lea eax, [eax + edx*4]
jmp 0x401488
mov ecx, dword [esp + 0x20]
movzx eax, word [ecx + 0xc]
mov ecx, dword [esp + 0x2c]
movzx edx, ax
movzx eax, si
sub eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
movzx eax, al
lea eax, [ecx + eax*4]
movzx ecx, word [eax]
movzx eax, word [eax + 2]
movzx edx, bl
and edx, 0x80000001
jns 0x40149f
dec edx
or edx, 0xfffffffe
inc edx
movzx ebx, cx
je 0x4014a7
movzx ebx, ax
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
push 3
push eax
mov eax, dword [esp + 0x40]
push ecx
push edx
push eax
lea eax, [esp + 0x60]
call fcn.004077a0
test al, al
je 0x401701
mov al, byte [esp + 0x16]
add al, 1
cmp al, 4
mov byte [esp + 0x16], al
jb 0x4013f1
lea ecx, [esp + 0x40]
push ecx
mov dword [esp + 0x44], 0
call fcn.00434889
mov edx, dword [0x490b18]
mov eax, dword [edx + 0xc]
add esp, 4
mov ecx, 0x490b18
call eax
add eax, 0x10
mov dword [esp + 0x1c], eax
movzx eax, si
push eax
mov byte [esp + 0x4ac], 2
mov ecx, dword [esp + 0x44]
mov eax, 0x24924925
mul ecx
mov eax, ecx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 2
lea edx, [eax*8]
sub edx, eax
sub ecx, edx
push ecx
push str._d_target_cell:__d
lea ecx, [esp + 0x28]
call fcn.00402170
mov byte [esp + 0x4b4], 1
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0xc
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x401573
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x40]
mov eax, 0x24924925
mul ecx
mov eax, ecx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 2
lea edx, [eax*8]
sub edx, eax
mov eax, ecx
sub eax, edx
cmp eax, 6
ja case.default.0x40159f
jmp dword [eax*4 + 0x401ddc]
lea eax, [esp + 0x474]
push eax
lea ecx, [esp + 0x46c]
push ecx
push esi
lea edx, [esp + 0x2c]
push edx
call fcn.00407210
push esi
lea edi, [esp + 0x460]
lea ebx, [esp + 0x46c]
lea eax, [esp + 0x50]
call fcn.004078e0
test al, al
je 0x401701
mov eax, 0xa
mov ecx, ebx
mov edx, edi
lea ebx, [ebx]
mov esi, dword [edx]
cmp esi, dword [ecx]
jne 0x401608
sub eax, 4
add ecx, 4
add edx, 4
cmp eax, 4
jae 0x4015f0
test eax, eax
je 0x401665
movzx esi, byte [edx]
movzx edi, byte [ecx]
sub esi, edi
jne 0x401657
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x401665
movzx esi, byte [edx]
movzx edi, byte [ecx]
sub esi, edi
jne 0x401657
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x401665
movzx esi, byte [edx]
movzx edi, byte [ecx]
sub esi, edi
jne 0x401657
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x401665
movzx esi, byte [edx]
movzx eax, byte [ecx]
sub esi, eax
je 0x401665
test esi, esi
mov eax, 1
jg 0x401667
or eax, 0xffffffff
jmp 0x401667
xor eax, eax
test eax, eax
je case.default.0x40159f
mov eax, 0xa
lea ecx, [esp + 0x474]
lea edx, [esp + 0x45c]
mov esi, dword [edx]
cmp esi, dword [ecx]
jne 0x40169a
sub eax, 4
add ecx, 4
add edx, 4
cmp eax, 4
jae 0x401682
test eax, eax
je 0x4016f7
movzx esi, byte [edx]
movzx edi, byte [ecx]
sub esi, edi
jne 0x4016e9
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x4016f7
movzx esi, byte [edx]
movzx edi, byte [ecx]
sub esi, edi
jne 0x4016e9
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x4016f7
movzx esi, byte [edx]
movzx edi, byte [ecx]
sub esi, edi
jne 0x4016e9
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x4016f7
movzx esi, byte [edx]
movzx ecx, byte [ecx]
sub esi, ecx
je 0x4016f7
test esi, esi
mov eax, 1
jg 0x4016f9
or eax, 0xffffffff
jmp 0x4016f9
xor eax, eax
test eax, eax
je case.default.0x40159f
lea eax, [esp + 0x4c]
mov edi, dword [esp + 0x18]
call fcn.00401160
lea ecx, [esp + 0x4c]
call fcn.004010e0
lea esi, [esp + 0x20]
call fcn.00407130
jmp 0x401db5
lea edx, [esp + 0x474]
push edx
lea eax, [esp + 0x46c]
push eax
add esi, 2
push esi
lea ecx, [esp + 0x2c]
push ecx
call fcn.00407210
push esi
lea edi, [esp + 0x460]
lea ebx, [esp + 0x46c]
lea eax, [esp + 0x50]
call fcn.004078e0
test al, al
je 0x401701
mov eax, 0xa
lea ecx, [esp + 0x474]
mov edx, edi
lea ecx, [ecx]
mov esi, dword [edx]
cmp esi, dword [ecx]
jne 0x40178c
sub eax, 4
add ecx, 4
add edx, 4
cmp eax, 4
jae 0x401770
test eax, eax
je 0x4016f7
movzx esi, byte [edx]
movzx edi, byte [ecx]
sub esi, edi
jne 0x4016e9
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x4016f7
movzx esi, byte [edx]
movzx edi, byte [ecx]
sub esi, edi
jne 0x4016e9
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x4016f7
movzx esi, byte [edx]
movzx edi, byte [ecx]
sub esi, edi
jne 0x4016e9
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x4016f7
movzx esi, byte [edx]
movzx edx, byte [ecx]
sub esi, edx
jmp 0x4016e7
mov eax, dword [esp + 0x20]
movzx ecx, word [eax + 0xc]
movzx eax, si
sub eax, ecx
cdq
and edx, 3
add eax, edx
sar eax, 2
movzx edx, al
mov eax, dword [esp + 0x28]
movzx ecx, word [eax + edx*4]
movzx ebx, word [eax + edx*4 + 2]
lea eax, [eax + edx*4]
push ecx
mov ecx, dword [esp + 0x3c]
push ecx
mov edi, esi
lea eax, [esp + 0x54]
call fcn.00407850
test al, al
je 0x401701
lea edx, [esp + 0x474]
push edx
lea eax, [esp + 0x46c]
push eax
push esi
lea ecx, [esp + 0x2c]
push ecx
call fcn.00407210
push esi
lea edi, [esp + 0x460]
lea ebx, [esp + 0x46c]
lea eax, [esp + 0x50]
call fcn.004078e0
test al, al
je 0x401701
mov eax, 0xa
lea ecx, [esp + 0x474]
mov edx, edi
mov edi, dword [edx]
cmp edi, dword [ecx]
jne 0x401899
sub eax, 4
add ecx, 4
add edx, 4
cmp eax, 4
jae 0x401881
test eax, eax
je 0x4018f6
movzx edi, byte [edx]
movzx ebx, byte [ecx]
sub edi, ebx
jne 0x4018e8
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x4018f6
movzx edi, byte [edx]
movzx ebx, byte [ecx]
sub edi, ebx
jne 0x4018e8
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x4018f6
movzx edi, byte [edx]
movzx ebx, byte [ecx]
sub edi, ebx
jne 0x4018e8
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x4018f6
movzx edi, byte [edx]
movzx edx, byte [ecx]
sub edi, edx
je 0x4018f6
test edi, edi
mov eax, 1
jg 0x4018f8
or eax, 0xffffffff
jmp 0x4018f8
xor eax, eax
test eax, eax
jne 0x401701
mov eax, dword [esp + 0x20]
movzx ecx, word [eax + 0xc]
movzx eax, si
sub eax, ecx
mov ecx, dword [esp + 0x34]
cdq
and edx, 3
add eax, edx
sar eax, 2
movzx edx, al
mov eax, dword [esp + 0x2c]
movzx ebx, word [eax + edx*4]
movzx edi, word [eax + edx*4 + 2]
push 3
lea eax, [eax + edx*4]
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x3c]
push esi
push ecx
push edx
push eax
lea eax, [esp + 0x60]
call fcn.004077a0
test al, al
je 0x401701
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
push 3
lea ecx, [esi + 1]
push ecx
mov ecx, dword [esp + 0x40]
push edx
push eax
push ecx
mov ebx, edi
lea eax, [esp + 0x60]
call fcn.004077a0
test al, al
je 0x401701
mov edx, dword [str.E0EABD19AE]
mov eax, dword [0x44dbc8]
mov cx, word [0x44dbcc]
mov dword [esp + 0x484], eax
mov dword [esp + 0x480], edx
mov dl, byte [0x44dbce]
mov word [esp + 0x488], cx
mov ecx, dword [esp + 0x40]
mov byte [esp + 0x48a], dl
mov eax, 0x24924925
mul ecx
mov eax, ecx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 2
mov dl, 7
imul dl
sub cl, al
xor eax, eax
mov byte [esp + 0x48c], al
mov dword [esp + 0x48d], eax
mov dword [esp + 0x491], eax
mov byte [esp + 0x495], al
push esi
lea edi, [esp + 0x490]
lea ebx, [esp + 0x484]
lea eax, [esp + 0x50]
mov byte [esp + 0x484], cl
call fcn.004078e0
test al, al
je 0x401701
mov eax, 0xa
mov ecx, ebx
mov edx, edi
mov esi, dword [edx]
cmp esi, dword [ecx]
jne 0x401a2f
sub eax, 4
add ecx, 4
add edx, 4
cmp eax, 4
jae 0x401a13
test eax, eax
je 0x4016f7
movzx esi, byte [edx]
movzx edi, byte [ecx]
sub esi, edi
jne 0x4016e9
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x4016f7
movzx esi, byte [edx]
movzx edi, byte [ecx]
sub esi, edi
jne 0x4016e9
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x4016f7
movzx esi, byte [edx]
movzx edi, byte [ecx]
sub esi, edi
jne 0x4016e9
sub eax, 1
add ecx, 1
add edx, 1
test eax, eax
je 0x4016f7
movzx esi, byte [edx]
movzx eax, byte [ecx]
sub esi, eax
jmp 0x4016e7
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
mov edi, dword [esp + 0x38]
mov ebx, dword [esp + 0x44]
push 1
push esi
push ecx
push edx
push edi
lea eax, [esp + 0x60]
call fcn.004077a0
test al, al
je 0x401701
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
push 1
lea eax, [esi + 1]
push eax
push ecx
push edx
push edi
lea eax, [esp + 0x60]
call fcn.004077a0
test al, al
je 0x401701
mov ecx, dword [esp + 0x30]
push 1
lea eax, [esi + 2]
push eax
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x3c]
push eax
push ecx
push edi
lea eax, [esp + 0x60]
call fcn.004077a0
test al, al
je 0x401701
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
push 1
lea edx, [esi + 3]
push edx
push eax
push ecx
push edi
lea eax, [esp + 0x60]
call fcn.004077a0
test al, al
lea eax, [esp + 0x4c]
je 0x401705
push esi
lea edi, [esp + 0x1b]
lea ebx, [esp + 0x40]
call fcn.00407710
test al, al
je 0x401701
mov esi, dword [esp + 0x44]
cmp word [esp + 0x3c], si
jne 0x401701
cmp byte [esp + 0x17], 1
jne 0x401701
mov edx, dword [esp + 0x1c]
push edx
lea eax, [esp + 0x50]
call fcn.00407710
test al, al
je 0x401b82
cmp word [esp + 0x3c], si
jne 0x401b82
cmp byte [esp + 0x17], 1
je case.default.0x40159f
mov edi, dword [esp + 0x18]
lea eax, [esp + 0x4c]
call fcn.00401160
lea ecx, [esp + 0x4c]
call fcn.004010e0
lea esi, [esp + 0x20]
call fcn.00407130
jmp 0x401db5
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x38]
mov edi, dword [esp + 0x18]
mov bx, word [edi + 4]
push 1
push 1
push eax
push ecx
push edx
lea eax, [esp + 0x60]
call fcn.004077a0
mov bl, al
lea eax, [esp + 0x50]
push eax
call fcn.00407dd0
test bl, bl
movzx eax, ax
jne 0x401be7
cmp ax, 4
je case.default.0x40159f
lea eax, [esp + 0x4c]
jmp 0x401709
mov esi, dword [esp + 0x38]
mov ebx, dword [esp + 0x44]
mov byte [esp + 0x16], 0
movzx di, byte [esp + 0x16]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
add di, di
add di, word [esp + 0x40]
push 1
lea eax, [esp + 0x50]
push edi
push ecx
push edx
push esi
call fcn.004077a0
test al, al
je 0x401cec
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
push 1
add edi, 1
push edi
push eax
push ecx
push esi
lea eax, [esp + 0x60]
call fcn.004077a0
test al, al
je 0x401cec
mov al, byte [esp + 0x16]
add al, 1
cmp al, 0x18
mov byte [esp + 0x16], al
jb 0x401bfd
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x1c]
push 1
push ecx
push edx
push eax
push esi
lea eax, [esp + 0x60]
call fcn.004077a0
test al, al
jne case.default.0x40159f
mov edi, dword [esp + 0x18]
lea eax, [esp + 0x4c]
call fcn.00401160
cmp byte [esp + 0x456], 0
mov dword [esp + 0x4c], vtable.PPGPolicy::SuperPro.0
je 0x401cbb
push 0
push 0
lea ecx, [esp + 0x58]
push ecx
call fcn.00407e20
call fcn.00407ee0
mov byte [esp + 0x456], 0
mov edx, dword [esp + 0x2c]
push edx
call fcn.00434c6c
mov eax, dword [esp + 0x2c]
add esp, 4
push eax
call fcn.00434c6c
mov ecx, dword [esp + 0x28]
add esp, 4
push ecx
call fcn.00434c6c
mov edx, dword [esp + 0x24]
add esp, 4
push edx
jmp 0x401dad
mov edi, dword [esp + 0x18]
lea eax, [esp + 0x4c]
call fcn.00401160
cmp byte [esp + 0x456], 0
mov dword [esp + 0x4c], vtable.PPGPolicy::SuperPro.0
je 0x401d26
push 0
push 0
lea edx, [esp + 0x58]
push edx
call fcn.00407e20
call fcn.00407ee0
mov byte [esp + 0x456], 0
mov eax, dword [esp + 0x2c]
push eax
call fcn.00434c6c
mov ecx, dword [esp + 0x2c]
add esp, 4
push ecx
call fcn.00434c6c
mov edx, dword [esp + 0x28]
add esp, 4
push edx
call fcn.00434c6c
mov eax, dword [esp + 0x24]
add esp, 4
push eax
jmp 0x401dad
cmp byte [esp + 0x456], 0
mov dword [esp + 0x4c], vtable.PPGPolicy::SuperPro.0
je 0x401d81
push 0
push 0
lea eax, [esp + 0x58]
push eax
call fcn.00407e20
call fcn.00407ee0
mov byte [esp + 0x456], 0
mov ecx, dword [esp + 0x2c]
push ecx
call fcn.00434c6c
mov edx, dword [esp + 0x2c]
add esp, 4
push edx
call fcn.00434c6c
mov eax, dword [esp + 0x28]
add esp, 4
push eax
call fcn.00434c6c
mov ecx, dword [esp + 0x24]
add esp, 4
push ecx
call fcn.00434c6c
add esp, 4
mov ecx, dword [esp + 0x4a0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x488]
xor ecx, esp
call fcn.0043436f
mov esp, ebp
pop ebp
ret