Function at 0x650e0a
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
push ebx
push esi
mov byte [ebp - 0x10], 1
mov byte [ebp - 1], 1
call fcn.0064edbb
push dword [ebp + 8]
lea eax, [ebp - 0x2c]
push eax
call dword [0x48581004]
mov esi, dword [0x48581048]
xor ebx, ebx
push ebx
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x3c], eax
push 3
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x44]
push eax
push 0x10e0000
lea eax, [ebp - 8]
push eax
mov dword [ebp - 0x44], 0x18
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x38], 0x40
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
call esi
cmp eax, ebx
jge 0x650e7e
push eax
push 0x485828e0
push 0x48581784
call fcn.0064ee6f
add esp, 0xc
push dword [ebp - 8]
call fcn.00650896
cmp eax, ebx
jge 0x650e9d
push eax
push 0x485828a4
push 0x48581784
call fcn.0064ee6f
add esp, 0xc
push dword [ebp - 8]
call dword [0x48581028]
push 0x4021
push 3
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x44]
push eax
push 0x100001
lea eax, [ebp - 8]
push eax
call esi
cmp eax, ebx
mov dword [ebp - 0xc], eax
jge 0x650ece
xor eax, eax
jmp 0x65107f
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
push edi
push 0x268
push ebx
push dword [eax + 0x18]
call dword [0x4858102c]
mov edi, eax
cmp edi, ebx
mov dword [ebp - 0x18], edi
je 0x651072
push dword [ebp - 0x10]
lea eax, [ebp - 0x24]
push ebx
push 1
push 3
push 0x268
push edi
push eax
push ebx
push ebx
push ebx
push dword [ebp - 8]
call dword [0x485810c4]
cmp eax, ebx
mov dword [ebp - 0xc], eax
jl 0x650f28
mov eax, dword [edi + 0x3c]
shr eax, 1
mov byte [ebp - 0x10], bl
mov word [edi + eax*2 + 0x5e], bx
jmp 0x650f4a
cmp eax, 0x80000006
jne 0x650f34
mov dword [ebp - 0xc], ebx
jmp 0x650f47
push eax
push 0x48582874
push 0x48581784
call fcn.0064ee6f
add esp, 0xc
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x65105e
mov eax, dword [edi + 0x38]
mov ecx, eax
and ecx, 0x10
jne 0x650f62
test ah, 0x40
je 0x650f97
cmp ecx, ebx
je 0x651055
lea esi, [edi + 0x5e]
push 0x48581120
push esi
call fcn.00651658
test eax, eax
pop ecx
pop ecx
je 0x651055
push 0x4858286c
push esi
call fcn.00651658
test eax, eax
pop ecx
pop ecx
je 0x651055
push dword [ebp + 8]
call fcn.006514e8
pop ecx
mov ecx, dword [edi + 0x3c]
shr ecx, 1
lea esi, [ecx + eax + 2]
mov dword [ebp - 0x1c], eax
lea eax, [esi + esi]
push eax
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
push ebx
push dword [eax + 0x18]
call dword [0x4858102c]
cmp eax, ebx
mov dword [ebp - 0x14], eax
je 0x65103d
mov edi, dword [ebp - 0x14]
lea ecx, [esi + esi]
mov edx, ecx
shr ecx, 2
xor eax, eax
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
dec esi
rep stosb byte es:[edi], al
mov edi, dword [ebp + 8]
push esi
mov esi, dword [ebp - 0x14]
push edi
push esi
call fcn.006514ee
mov eax, dword [ebp - 0x1c]
add esp, 0xc
cmp word [edi + eax*2 - 2], 0x5c
je 0x65100a
push 0x4858111c
push esi
call fcn.006514e2
pop ecx
pop ecx
mov eax, dword [ebp - 0x18]
add eax, 0x5e
push eax
push esi
call fcn.006514e2
mov eax, dword [ebp + 0xc]
pop ecx
pop ecx
inc eax
push eax
push esi
call fcn.00650e0a
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
push esi
push ebx
push dword [eax + 0x18]
call dword [0x48581030]
mov edi, dword [ebp - 0x18]
jmp 0x651055
push dword [ebp - 0xc]
push 0x4858282c
push 0x48581784
call fcn.0064ee6f
add esp, 0xc
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
jne 0x650ef4
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
push edi
push ebx
push dword [eax + 0x18]
call dword [0x48581030]
push dword [ebp - 8]
call dword [0x48581028]
mov eax, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
leave
ret 8