Function at 0x531c80
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59c2c8
mov eax, dword fs:[0]
push eax
sub esp, 0x44c
mov eax, dword [0x601018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
mov dword [ebp - 4], eax
mov ebx, edx
mov dword [ebp - 0x454], eax
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x14], 0xf
mov byte [ebx], al
xor edi, edi
mov eax, 0x5bc564
mov esi, ebx
mov dword [ebp - 0x44c], ecx
mov dword [ebp - 0x458], ebx
call fcn.00402fe0
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x41c], eax
mov byte [ebp - 0x42c], al
lea edi, [eax + 2]
mov eax, 0x5cffe0
lea esi, [ebp - 0x42c]
mov dword [ebp - 0x454], 1
mov dword [ebp - 0x418], 0xf
call fcn.00402fe0
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 4], 1
cmp dword [eax + 0x30], 0
jle 0x531d36
cmp dword [eax + 0x34], 0
jl 0x531d36
mov cl, 1
jmp 0x531d38
xor cl, cl
movzx ecx, cl
mov dword [ebp - 0x450], ecx
test ecx, ecx
je 0x531da0
mov edx, dword [eax + 0x34]
mov eax, dword [eax + 0x30]
push edx
push eax
push str._d__d_obj___
mov esi, 0x400
lea edi, [ebp - 0x410]
call fcn.004f9520
mov eax, edi
add esp, 0xc
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x531d70
sub eax, edx
push eax
lea eax, [ebp - 0x410]
mov ecx, ebx
call fcn.00445440
push 0
lea ecx, [ebp - 0x42c]
push ecx
or eax, 0xffffffff
mov esi, ebx
call fcn.00445560
mov eax, dword [ebp - 0x44c]
mov edx, dword [eax + 0x38]
push edx
push str.__Filter__Standard__Length__d
mov esi, 0x400
lea edi, [ebp - 0x410]
call fcn.004f9520
mov eax, edi
add esp, 8
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x531dc1
sub eax, edx
push eax
lea eax, [ebp - 0x410]
mov ecx, ebx
call fcn.00445440
push 0
lea eax, [ebp - 0x42c]
push eax
or eax, 0xffffffff
mov esi, ebx
call fcn.00445560
mov ecx, dword [ebp - 0x44c]
mov edx, dword [ecx + 0xc4]
push edx
push str.__R__d
mov esi, 0x400
lea edi, [ebp - 0x410]
call fcn.004f9520
mov eax, edi
add esp, 8
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x531e15
sub eax, esi
push eax
lea eax, [ebp - 0x410]
mov ecx, ebx
call fcn.00445440
push 0
lea eax, [ebp - 0x42c]
push eax
or eax, 0xffffffff
mov esi, ebx
call fcn.00445560
mov ecx, dword [ebp - 0x44c]
mov edx, dword [ecx + 0xc8]
push edx
push str.__V__d
mov esi, 0x400
lea edi, [ebp - 0x410]
call fcn.004f9520
mov eax, edi
add esp, 8
lea esi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x531e70
sub eax, esi
push eax
lea eax, [ebp - 0x410]
mov ecx, ebx
call fcn.00445440
push 0
lea eax, [ebp - 0x42c]
push eax
or eax, 0xffffffff
mov esi, ebx
call fcn.00445560
push 4
mov eax, str.__P
mov ecx, ebx
call fcn.00445440
mov ecx, dword [ebp - 0x44c]
add ecx, 0xac
push ecx
lea ebx, [ebp - 0x448]
call fcn.0052fc30
push 0
mov byte [ebp - 4], 2
mov esi, dword [ebp - 0x458]
push eax
or eax, 0xffffffff
call fcn.00445560
mov ebx, 0x10
mov byte [ebp - 4], 1
cmp dword [ebp - 0x434], ebx
jb 0x531ef6
mov edx, dword [ebp - 0x448]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push 0
lea eax, [ebp - 0x42c]
push eax
or eax, 0xffffffff
call fcn.00445560
push 5
mov eax, str.__O__
mov ecx, esi
call fcn.00445440
mov edi, dword [ebp - 0x44c]
push 0
lea ecx, [edi + 0x13c]
push ecx
or eax, 0xffffffff
call fcn.00445560
push 1
mov eax, 0x5eb344
mov ecx, esi
call fcn.00445440
push 0
lea edx, [ebp - 0x42c]
push edx
or eax, 0xffffffff
call fcn.00445560
push 5
mov eax, str.__U__
mov ecx, esi
call fcn.00445440
push 0
add edi, 0x104
push edi
or eax, 0xffffffff
call fcn.00445560
push 1
mov eax, 0x5eb344
mov ecx, esi
call fcn.00445440
push 0
lea eax, [ebp - 0x42c]
push eax
or eax, 0xffffffff
call fcn.00445560
cmp dword [ebp - 0x450], 0
je 0x531fa0
push 0xc
mov eax, str.___r_nendobj_r_n
mov ecx, esi
call fcn.00445440
cmp dword [ebp - 0x418], ebx
jb 0x531fb8
mov ecx, dword [ebp - 0x42c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00596083
mov esp, ebp
pop ebp
ret