Function at 0x4d6fa0
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5db8fb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x250
push ebx
push ebp
push esi
push edi
mov esi, ecx
push 0x41f
call fcn.005b3ba7
push 0x40e
mov ecx, esi
mov edi, eax
call fcn.005b3ba7
push 0x40f
mov ecx, esi
call fcn.005b3ba7
push 0x408
mov ecx, esi
call fcn.005b3ba7
push 0x409
mov ecx, esi
mov ebp, eax
call fcn.005b3ba7
push 0x40a
mov ecx, esi
mov dword [esp + 0x40], eax
call fcn.005b3ba7
push 0x40b
mov ecx, esi
mov dword [esp + 0x38], eax
call fcn.005b3ba7
push 0x40c
mov ecx, esi
mov dword [esp + 0x5c], eax
call fcn.005b3ba7
push 0x40d
mov ecx, esi
mov dword [esp + 0x50], eax
call fcn.005b3ba7
push 0x40e
mov ecx, esi
mov dword [esp + 0x30], eax
call fcn.005b3ba7
push 0x40f
mov ecx, esi
mov dword [esp + 0x60], eax
call fcn.005b3ba7
push 0x410
mov ecx, esi
mov dword [esp + 0x48], eax
call fcn.005b3ba7
push 0x411
mov ecx, esi
mov dword [esp + 0x2c], eax
call fcn.005b3ba7
push 0x412
mov ecx, esi
mov dword [esp + 0x28], eax
call fcn.005b3ba7
push 0x413
mov ecx, esi
mov dword [esp + 0x58], eax
call fcn.005b3ba7
push 0x4d6
mov ecx, esi
mov dword [esp + 0x34], eax
call fcn.005b3ba7
push 0x4d7
mov ecx, esi
mov dword [esp + 0x3c], eax
call fcn.005b3ba7
push 0x414
mov ecx, esi
mov dword [esp + 0x44], eax
call fcn.005b3ba7
push 0x415
mov ecx, esi
mov dword [esp + 0x54], eax
call fcn.005b3ba7
push 0
push 0
mov dword [esp + 0x50], eax
push 0x147
mov eax, dword [edi + 0x1c]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push eax
call ebx
mov edx, eax
mov dword [esp + 0x20], edx
lea eax, [edx + 2]
shl eax, 4
cmp edx, 6
mov dword [esp + 0x1c], eax
jne 0x4d711b
mov dword [esp + 0x1c], 0xf0
mov ecx, 0x80
xor eax, eax
lea edi, [esp + 0x60]
cmp edx, 3
rep stosd dword es:[edi], eax
lea edi, [esi + 0x354]
push 1
jne 0x4d723e
lea ecx, [esp + 0x64]
push ecx
push 0x806
mov ecx, edi
call fcn.004be060
lea edx, [esp + 0x60]
mov ecx, esi
push edx
push 0x4b6
call fcn.005b3ba7
mov ecx, eax
call fcn.005b3d5e
push 5
push 0x4b7
mov ecx, esi
call fcn.005b3ba7
mov ecx, eax
call fcn.005b3e88
push 5
push 0x415
mov ecx, esi
call fcn.005b3ba7
mov ecx, eax
call fcn.005b3e88
push 5
push 0x414
mov ecx, esi
call fcn.005b3ba7
mov ecx, eax
call fcn.005b3e88
lea ecx, [esp + 0x60]
push 1
push ecx
push 0x7fc
mov ecx, edi
call fcn.004be060
lea edx, [esp + 0x60]
mov ecx, esi
push edx
push 0x4b1
call fcn.005b3ba7
mov ecx, eax
call fcn.005b3d5e
push 5
push 0x4da
mov ecx, esi
call fcn.005b3ba7
mov ecx, eax
call fcn.005b3e88
lea eax, [esp + 0x60]
push 0
push eax
push 0x7ec
mov ecx, edi
call fcn.004be060
mov ecx, dword [0x87a768]
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0x20]
mov dword [esp + 0x268], 0
cmp eax, 6
ja case.default.0x4d7216
jmp dword [eax*4 + 0x4d7a2c]
lea edx, [esp + 0x60]
lea eax, [esp + 0x18]
push edx
push 0x6d2f10
push str.____s__s___
push eax
call fcn.005ad17a
add esp, 0x10
jmp case.default.0x4d7216
lea eax, [esp + 0x64]
mov ecx, edi
push eax
push 0x801
call fcn.004be060
lea ecx, [esp + 0x60]
push ecx
push 0x4b6
mov ecx, esi
call fcn.005b3ba7
mov ecx, eax
call fcn.005b3d5e
push 0
push 0x4b7
mov ecx, esi
call fcn.005b3ba7
mov ecx, eax
call fcn.005b3e88
push 0
push 0x415
mov ecx, esi
call fcn.005b3ba7
mov ecx, eax
call fcn.005b3e88
push 0
push 0x414
mov ecx, esi
call fcn.005b3ba7
mov ecx, eax
call fcn.005b3e88
cmp dword [esp + 0x20], 2
jne 0x4d71a1
lea edx, [esp + 0x60]
push 0
push edx
push 0x7fc
mov ecx, edi
call fcn.004be060
lea eax, [esp + 0x60]
mov ecx, esi
push eax
push 0x4b1
call fcn.005b3ba7
mov ecx, eax
call fcn.005b3d5e
push 0
jmp 0x4d71ce
lea ecx, [esp + 0x60]
lea edx, [esp + 0x18]
push ecx
push 0x6d2f0c
push str.____s__s___
push edx
call fcn.005ad17a
add esp, 0x10
jmp case.default.0x4d7216
lea eax, [esp + 0x60]
push eax
push 0x74a658
jmp 0x4d7356
lea edx, [esp + 0x60]
lea eax, [esp + 0x18]
push edx
push 0x74a654
push str.____s__s___
push eax
call fcn.005ad17a
add esp, 0x10
jmp case.default.0x4d7216
lea ecx, [esp + 0x60]
lea edx, [esp + 0x18]
push ecx
push 0x74a650
push str.____s__s___
push edx
call fcn.005ad17a
add esp, 0x10
jmp case.default.0x4d7216
lea eax, [esp + 0x60]
push eax
push str.WVUZ
lea ecx, [esp + 0x20]
push str.____s__s___
push ecx
call fcn.005ad17a
add esp, 0x10
jmp case.default.0x4d7216
lea edx, [esp + 0x60]
push 0
push edx
push 0x802
mov ecx, edi
call fcn.004be060
lea eax, [esp + 0x60]
lea ecx, [esp + 0x18]
push eax
push str.____s___
push ecx
call fcn.005ad17a
add esp, 0xc
mov edx, dword [esp + 0x18]
lea ecx, [esi + 0x5c]
push edx
call fcn.005b3d5e
mov eax, dword [esp + 0x1c]
mov ecx, dword [0x8813cc]
mov eax, dword [eax*4 + 0x8813d0]
cmp eax, ecx
je 0x4d769d
and eax, 0xf
xor edi, edi
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
sub esp, 8
lea ecx, [esi + 0x98]
fstp qword [esp]
call fcn.0042d0b0
mov ecx, dword [esp + 0x1c]
push edi
test byte [ecx*4 + 0x8813d0], 0x10
je 0x4d7400
mov edx, dword [esp + 0x40]
push 1
push 0xf1
mov eax, dword [edx + 0x1c]
push eax
call ebx
push edi
push edi
jmp 0x4d7413
mov edx, dword [esp + 0x40]
push edi
push 0xf1
mov eax, dword [edx + 0x1c]
push eax
call ebx
push edi
push 1
mov ecx, dword [ebp + 0x1c]
push 0xf1
push ecx
call ebx
mov ebp, dword [esp + 0x1c]
push edi
test byte [ebp*4 + 0x8813d0], 0x80
je 0x4d744f
mov edx, dword [esp + 0x5c]
push 1
push 0xf1
mov eax, dword [edx + 0x1c]
push eax
call ebx
mov ecx, dword [esp + 0x34]
push edi
push edi
push 0xf1
mov edx, dword [ecx + 0x1c]
push edx
jmp 0x4d746f
mov eax, dword [esp + 0x5c]
push edi
push 0xf1
mov ecx, dword [eax + 0x1c]
push ecx
call ebx
mov edx, dword [esp + 0x34]
push edi
push 1
push 0xf1
mov eax, dword [edx + 0x1c]
push eax
call ebx
mov eax, dword [ebp*4 + 0x8813d0]
push edi
test ah, 1
je 0x4d74a0
mov ecx, dword [esp + 0x50]
push edi
push 0xf1
mov edx, dword [ecx + 0x1c]
push edx
call ebx
mov eax, dword [esp + 0x2c]
push edi
push 1
push 0xf1
mov ecx, dword [eax + 0x1c]
push ecx
jmp 0x4d74c0
mov edx, dword [esp + 0x50]
push 1
push 0xf1
mov eax, dword [edx + 0x1c]
push eax
call ebx
mov ecx, dword [esp + 0x2c]
push edi
push edi
push 0xf1
mov edx, dword [ecx + 0x1c]
push edx
call ebx
mov eax, dword [ebp*4 + 0x8813d0]
push edi
test ah, 2
je 0x4d74f1
mov eax, dword [esp + 0x60]
push 1
push 0xf1
mov ecx, dword [eax + 0x1c]
push ecx
call ebx
mov edx, dword [esp + 0x44]
push edi
push edi
push 0xf1
mov eax, dword [edx + 0x1c]
push eax
jmp 0x4d7511
mov ecx, dword [esp + 0x60]
push edi
push 0xf1
mov edx, dword [ecx + 0x1c]
push edx
call ebx
mov eax, dword [esp + 0x44]
push edi
push 1
push 0xf1
mov ecx, dword [eax + 0x1c]
push ecx
call ebx
cmp dword [esp + 0x20], 2
jne 0x4d7541
mov edx, dword [esp + 0x28]
push edi
push edi
push 0xf1
mov eax, dword [edx + 0x1c]
push eax
call ebx
mov ecx, dword [esp + 0x24]
push edi
push edi
push 0xf1
mov edx, dword [ecx + 0x1c]
push edx
call ebx
jmp 0x4d75f1
mov eax, dword [esp + 0x1c]
mov ebp, 0x400
push edi
test dword [eax*4 + 0x8813d0], ebp
je 0x4d7576
mov ecx, dword [esp + 0x2c]
push 1
push 0xf1
mov edx, dword [ecx + 0x1c]
push edx
call ebx
mov eax, dword [esp + 0x24]
push edi
push edi
push 0xf1
mov ecx, dword [eax + 0x1c]
push ecx
jmp 0x4d7596
mov edx, dword [esp + 0x2c]
push edi
push 0xf1
mov eax, dword [edx + 0x1c]
push eax
call ebx
mov ecx, dword [esp + 0x24]
push edi
push 1
push 0xf1
mov edx, dword [ecx + 0x1c]
push edx
call ebx
cmp dword [esp + 0x20], 3
jne 0x4d75ed
mov eax, dword [0x8814d0]
push edi
test ebp, eax
je 0x4d75cb
mov eax, dword [esp + 0x54]
push 1
push 0xf1
mov ecx, dword [eax + 0x1c]
push ecx
call ebx
mov edx, dword [esp + 0x48]
push edi
push edi
push 0xf1
mov eax, dword [edx + 0x1c]
push eax
jmp 0x4d75eb
mov ecx, dword [esp + 0x54]
push edi
push 0xf1
mov edx, dword [ecx + 0x1c]
push edx
call ebx
mov eax, dword [esp + 0x48]
push edi
push 1
push 0xf1
mov ecx, dword [eax + 0x1c]
push ecx
call ebx
mov ebp, dword [esp + 0x1c]
mov eax, dword [ebp*4 + 0x8813d0]
push edi
test ah, 8
je 0x4d7620
mov edx, dword [esp + 0x58]
push 1
push 0xf1
mov eax, dword [edx + 0x1c]
push eax
call ebx
mov ecx, dword [esp + 0x30]
push edi
push edi
push 0xf1
mov edx, dword [ecx + 0x1c]
push edx
jmp 0x4d7640
mov eax, dword [esp + 0x58]
push edi
push 0xf1
mov ecx, dword [eax + 0x1c]
push ecx
call ebx
mov edx, dword [esp + 0x30]
push edi
push 1
push 0xf1
mov eax, dword [edx + 0x1c]
push eax
call ebx
mov eax, dword [ebp*4 + 0x8813d0]
push edi
test ah, 0x10
je 0x4d7676
mov ecx, dword [esp + 0x3c]
push 1
push 0xf1
mov edx, dword [ecx + 0x1c]
push edx
call ebx
mov eax, dword [esp + 0x40]
push edi
push edi
push 0xf1
mov ecx, dword [eax + 0x1c]
push ecx
call ebx
jmp 0x4d77de
mov edx, dword [esp + 0x3c]
push edi
push 0xf1
mov eax, dword [edx + 0x1c]
push eax
call ebx
mov ecx, dword [esp + 0x40]
push edi
push 1
push 0xf1
mov edx, dword [ecx + 0x1c]
push edx
call ebx
jmp 0x4d77de
push 0
push 0
lea ecx, [esi + 0x98]
call fcn.0042d0b0
mov eax, dword [esp + 0x3c]
push 0
push 0
push 0xf1
mov ecx, dword [eax + 0x1c]
push ecx
call ebx
mov edx, dword [ebp + 0x1c]
push 0
push 0
push 0xf1
push edx
call ebx
mov eax, dword [esp + 0x58]
push 0
push 0
push 0xf1
mov ecx, dword [eax + 0x1c]
push ecx
call ebx
mov edx, dword [esp + 0x34]
push 0
push 0
push 0xf1
mov eax, dword [edx + 0x1c]
push eax
call ebx
mov ecx, dword [esp + 0x4c]
push 0
push 0
push 0xf1
mov edx, dword [ecx + 0x1c]
push edx
call ebx
mov eax, dword [esp + 0x2c]
push 0
push 0
push 0xf1
mov ecx, dword [eax + 0x1c]
push ecx
call ebx
mov edx, dword [esp + 0x5c]
push 0
push 0
push 0xf1
mov eax, dword [edx + 0x1c]
push eax
call ebx
mov ecx, dword [esp + 0x44]
push 0
push 0
push 0xf1
mov edx, dword [ecx + 0x1c]
push edx
call ebx
mov eax, dword [esp + 0x28]
push 0
push 0
push 0xf1
mov ecx, dword [eax + 0x1c]
push ecx
call ebx
mov edx, dword [esp + 0x24]
push 0
push 0
push 0xf1
mov eax, dword [edx + 0x1c]
push eax
call ebx
mov ecx, dword [esp + 0x54]
push 0
push 0
push 0xf1
mov edx, dword [ecx + 0x1c]
push edx
call ebx
push 0
mov eax, dword [esp + 0x34]
push 0
push 0xf1
mov ecx, dword [eax + 0x1c]
push ecx
call ebx
mov edx, dword [esp + 0x38]
push 0
push 0
push 0xf1
mov eax, dword [edx + 0x1c]
push eax
call ebx
mov ecx, dword [esp + 0x40]
push 0
push 0
push 0xf1
mov edx, dword [ecx + 0x1c]
push edx
call ebx
mov eax, dword [esp + 0x48]
push 0
push 0
push 0xf1
mov ecx, dword [eax + 0x1c]
push ecx
call ebx
mov edx, dword [esp + 0x50]
push 0
push 0
push 0xf1
mov eax, dword [edx + 0x1c]
push eax
call ebx
mov ebp, dword [esp + 0x1c]
xor edi, edi
push edi
mov ecx, esi
call fcn.005b3071
mov eax, dword [ebp*4 + 0x8813d4]
mov ecx, dword [0x8813cc]
cmp eax, ecx
je 0x4d788e
mov ebx, dword [esp + 0x20]
cmp ebx, 6
jne 0x4d7834
cmp dword [0x880a70], edi
jne 0x4d7820
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
fdivr qword [0x5efb38]
jmp 0x4d7867
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
fdivr qword [0x5efb30]
jmp 0x4d7867
cmp ebx, 2
jne 0x4d784d
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
fmul qword [0x5e80b8]
jmp 0x4d7867
cmp dword [0x880a70], edi
jne 0x4d787a
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
fdivr qword [0x5efb28]
sub esp, 8
lea ecx, [esi + 0xfc]
fstp qword [esp]
call fcn.0042d0b0
jmp 0x4d789f
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
fdivr qword [0x5efb20]
jmp 0x4d7867
push edi
push edi
lea ecx, [esi + 0xfc]
call fcn.0042d0b0
mov ebx, dword [esp + 0x20]
mov eax, dword [ebp*4 + 0x8813d8]
mov ecx, dword [0x8813cc]
cmp eax, ecx
je 0x4d792b
mov ecx, dword [0x880a70]
cmp ebx, 6
jne 0x4d78f3
cmp ecx, edi
jne 0x4d78d9
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
sub esp, 8
fdivr qword [0x5efb38]
fstp qword [esp]
jmp 0x4d792d
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
sub esp, 8
fdivr qword [0x5efb30]
fstp qword [esp]
jmp 0x4d792d
cmp ecx, edi
jne 0x4d7911
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
sub esp, 8
fdivr qword [0x5efb28]
fstp qword [esp]
jmp 0x4d792d
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
sub esp, 8
fdivr qword [0x5efb20]
fstp qword [esp]
jmp 0x4d792d
push edi
push edi
lea ecx, [esi + 0x160]
call fcn.0042d0b0
mov eax, dword [ebp*4 + 0x8813dc]
mov ecx, dword [0x8813cc]
cmp eax, ecx
je 0x4d795d
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
sub esp, 8
fstp qword [esp]
jmp 0x4d795f
push edi
push edi
lea ecx, [esi + 0x1c4]
call fcn.0042d0b0
mov eax, dword [ebp*4 + 0x8813e0]
mov ecx, dword [0x8813cc]
cmp eax, ecx
je 0x4d798f
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
sub esp, 8
fstp qword [esp]
jmp 0x4d7991
push edi
push edi
lea ecx, [esi + 0x228]
call fcn.0042d0b0
mov eax, dword [ebp*4 + 0x8813e4]
mov ecx, dword [0x8813cc]
cmp eax, ecx
je 0x4d79c1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
sub esp, 8
fstp qword [esp]
jmp 0x4d79c3
push edi
push edi
lea ecx, [esi + 0x28c]
call fcn.0042d0b0
mov eax, dword [ebp*4 + 0x8813e8]
mov ecx, dword [0x8813cc]
cmp eax, ecx
je 0x4d79f3
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edi
fild qword [esp + 0x10]
sub esp, 8
fstp qword [esp]
jmp 0x4d79f5
push edi
push edi
lea ecx, [esi + 0x2f0]
call fcn.0042d0b0
lea ecx, [esp + 0x18]
mov dword [esp + 0x268], 0xffffffff
call fcn.005b4761
mov ecx, dword [esp + 0x260]
pop edi
mov dword fs:[0], ecx
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret 4