Function at 0x431520
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4eead0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x50
mov eax, dword [esp + 0x64]
push ebx
push ebp
push esi
mov cl, byte [eax]
mov dl, byte [eax + 1]
mov byte [esp + 0x70], cl
mov cl, byte [eax + 2]
mov byte [esp + 0xc], dl
mov dl, byte [eax + 3]
mov byte [esp + 0x10], cl
mov cl, byte [eax + 4]
mov byte [esp + 0x14], dl
mov dl, byte [eax + 5]
mov byte [esp + 0x18], cl
mov cl, byte [eax + 6]
mov byte [esp + 0x1c], dl
mov dl, byte [eax + 7]
push edi
mov byte [esp + 0x24], cl
mov ecx, 8
xor eax, eax
lea edi, [esp + 0x2c]
xor esi, esi
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x28], esi
and ecx, 0xff
mov byte [esp + 0x28], dl
mov eax, ecx
and ecx, 7
shr eax, 3
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x10]
and eax, 0xff
mov edx, eax
shr edx, 6
lea ecx, [edx + ecx*4]
mov edx, eax
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x14]
shr edx, 1
and edx, 0x1f
and ecx, 0xff
mov dword [esp + 0x34], edx
mov edx, ecx
and eax, 1
and ecx, 0xf
shr edx, 4
shl eax, 4
add edx, eax
mov eax, dword [esp + 0x18]
and eax, 0xff
mov dword [esp + 0x38], edx
mov edx, eax
shr edx, 7
lea ecx, [edx + ecx*2]
mov edx, eax
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x1c]
shr edx, 2
and edx, 0x1f
and ecx, 0xff
mov dword [esp + 0x40], edx
mov edx, ecx
and ecx, 0x1f
and eax, 3
shr edx, 5
mov dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x20]
lea eax, [edx + eax*8]
and ecx, 0xff
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x24]
mov edx, ecx
and eax, 0xff
shr edx, 3
mov dword [esp + 0x4c], edx
mov edx, eax
shr edx, 6
and ecx, 7
lea ecx, [edx + ecx*4]
mov edx, eax
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x28]
shr edx, 1
and edx, 0x1f
and ecx, 0xff
mov dword [esp + 0x54], edx
mov edx, ecx
and eax, 1
shr edx, 4
shl eax, 4
add edx, eax
mov eax, dword [0x50a0e0]
and ecx, 0xf
mov dword [esp + 0x58], edx
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x68], esi
mov dword [esp + 0x74], eax
mov ebx, dword [0x4f9318]
mov byte [esp + 0x68], 1
lea edi, [esp + 0x2c]
mov ebp, 0xd
jmp 0x4316a2
mov eax, dword [esp + 0x74]
cmp dword [eax - 8], esi
je 0x431709
mov edx, dword [eax - 0xc]
lea ecx, [eax - 0xc]
cmp edx, esi
jl 0x4316e2
lea edx, [eax - 0xc]
cmp edx, dword [0x50a0e4]
je 0x431709
push ecx
call dword [0x4f9320]
test eax, eax
jg 0x4316d7
mov eax, dword [esp + 0x74]
add eax, 0xfffffff4
push eax
call fcn.004dcaa6
add esp, 4
mov eax, dword [0x50a0e0]
mov dword [esp + 0x74], eax
jmp 0x431709
mov ecx, 0x51d42c
test ecx, ecx
jne 0x4316ef
xor eax, eax
jmp 0x4316f6
push 0x51d42c
call ebx
push 0x51d42c
push eax
lea ecx, [esp + 0x7c]
call fcn.00402200
mov eax, dword [esp + 0x74]
mov ecx, dword [edi]
cmp ecx, esi
jl 0x431721
cmp ecx, 9
jg 0x431721
push ecx
lea edx, [esp + 0x78]
push 0x50dc3c
push edx
jmp 0x431739
cmp ecx, 0xa
jl 0x431748
cmp ecx, 0x1f
jg 0x431748
add ecx, 0x37
lea eax, [esp + 0x74]
push ecx
push 0x50b3d8
push eax
call fcn.004073f0
mov eax, dword [esp + 0x80]
add esp, 0xc
mov ecx, dword [eax - 8]
push eax
push ecx
lea ecx, [esp + 0x18]
call fcn.00406dd0
add edi, 4
dec ebp
jne 0x43169e
mov eax, dword [esp + 0x10]
mov ebp, dword [esp + 0x70]
mov edx, dword [eax - 0xc]
lea ecx, [eax - 0xc]
cmp edx, esi
jl 0x43177e
push ecx
mov dword [ebp], eax
call dword [0x4f9310]
jmp 0x4317de
mov edx, dword [0x50a0e0]
cmp eax, esi
mov dword [ebp], edx
mov edi, eax
jne 0x431791
xor ebx, ebx
jmp 0x431796
push eax
call ebx
mov ebx, eax
mov eax, dword [ebp]
cmp dword [eax - 0xc], 1
jg 0x4317a4
cmp ebx, dword [eax - 4]
jle 0x4317b7
mov ecx, ebp
call fcn.004020f0
push ebx
mov ecx, ebp
call fcn.00402090
cmp eax, esi
je 0x4317de
lea eax, [ebx + ebx]
mov esi, edi
mov edi, dword [ebp]
mov ecx, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp]
mov dword [ecx - 8], ebx
mov edx, dword [ebp]
mov word [eax + edx], 0
mov eax, dword [esp + 0x74]
mov edx, dword [0x50a0e4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x43180d
add eax, 0xfffffff4
push eax
call dword [0x4f9320]
test eax, eax
jg 0x43180d
mov edx, dword [esp + 0x74]
add edx, 0xfffffff4
push edx
call fcn.004dcaa6
add esp, 4
mov eax, dword [esp + 0x10]
mov edx, dword [0x50a0e4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x43183c
add eax, 0xfffffff4
push eax
call dword [0x4f9320]
test eax, eax
jg 0x43183c
mov edx, dword [esp + 0x10]
add edx, 0xfffffff4
push edx
call fcn.004dcaa6
add esp, 4
mov ecx, dword [esp + 0x60]
pop edi
mov eax, ebp
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x5c
ret 8