Function at 0x654ef4
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe0
push ebx
push esi
xor edx, edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 4], eax
lea esi, [ebp - 4]
xor eax, eax
push ebp
push 0x65576c
push dword fs:[eax]
mov dword fs:[eax], esp
mov ecx, dword [esi]
mov dl, 1
mov eax, dword [0x603a5c]
call fcn.00606408
mov ebx, eax
mov eax, dword [esi]
mov dword [eax + 0x5a0], ebx
mov eax, dword [esi]
mov edx, dword [eax + 0x3f4]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x68]
lea edx, [ebp - 0x14]
mov eax, dword [esi]
mov eax, dword [eax + 0x3fc]
call fcn.00471324
lea edx, [ebp - 0x14]
mov eax, ebx
call fcn.00471344
xor eax, eax
mov dword [ebx + 0x238], eax
mov dword [ebx + 0x23c], 0x80000000
mov word [ebx + 0x240], 0x3fff
xor eax, eax
mov dword [ebx + 0x280], eax
mov dword [ebx + 0x284], 0xa0000000
mov word [ebx + 0x288], 0x4002
push 0x4002
push 0xa0000000
push 0
mov eax, ebx
call fcn.006077a4
push 0x4007
push 0xfa000000
push 0
mov eax, ebx
call fcn.00607750
mov eax, dword [esi]
mov eax, dword [eax + 0x414]
call fcn.00478434
mov edx, eax
inc edx
mov eax, ebx
call fcn.004784b4
mov eax, dword [esi]
mov dword [ebx + 0x21c], eax
mov dword [ebx + 0x218], 0x655f8c
mov eax, dword [esi]
mov dword [ebx + 0x1cc], eax
mov dword [ebx + 0x1c8], 0x655f50
mov ecx, dword [esi]
mov dl, 1
mov eax, dword [0x603a5c]
call fcn.00606408
mov ebx, eax
mov eax, dword [esi]
mov dword [eax + 0x5a4], ebx
mov eax, dword [esi]
mov edx, dword [eax + 0x3f4]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x68]
lea edx, [ebp - 0x14]
mov eax, dword [esi]
mov eax, dword [eax + 0x400]
call fcn.00471324
lea edx, [ebp - 0x14]
mov eax, ebx
call fcn.00471344
xor eax, eax
mov dword [ebx + 0x238], eax
mov dword [ebx + 0x23c], 0x80000000
mov word [ebx + 0x240], 0x3fff
xor eax, eax
mov dword [ebx + 0x280], eax
mov dword [ebx + 0x284], 0xa0000000
mov word [ebx + 0x288], 0x4002
push 0x3fff
push 0x80000000
push 0
mov eax, ebx
call fcn.006077a4
push 0x4005
push 0xc8000000
push 0
mov eax, ebx
call fcn.00607750
mov eax, dword [esi]
mov eax, dword [eax + 0x418]
call fcn.00478434
mov edx, eax
inc edx
mov eax, ebx
call fcn.004784b4
mov eax, dword [esi]
mov dword [ebx + 0x21c], eax
mov dword [ebx + 0x218], 0x655fc0
mov eax, dword [esi]
mov dword [ebx + 0x1cc], eax
mov dword [ebx + 0x1c8], 0x655ff4
mov eax, dword [esi]
mov edx, dword [eax + 0x5a4]
mov eax, dword [esi]
mov eax, dword [eax + 0x404]
call fcn.004650cc
mov ecx, dword [esi]
mov dl, 1
mov eax, dword [0x603a5c]
call fcn.00606408
mov ebx, eax
mov eax, dword [esi]
mov dword [eax + 0x5a8], ebx
mov eax, dword [esi]
mov edx, dword [eax + 0x3f4]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x68]
lea edx, [ebp - 0x14]
mov eax, dword [esi]
mov eax, dword [eax + 0x40c]
call fcn.00471324
lea edx, [ebp - 0x14]
mov eax, ebx
call fcn.00471344
xor eax, eax
mov dword [ebx + 0x238], eax
mov dword [ebx + 0x23c], 0x80000000
mov word [ebx + 0x240], 0x3fff
xor eax, eax
mov dword [ebx + 0x280], eax
mov dword [ebx + 0x284], 0xa0000000
mov word [ebx + 0x288], 0x4002
push 0x3fff
push 0x80000000
push 0
mov eax, ebx
call fcn.006077a4
push 0x4005
push 0xc8000000
push 0
mov eax, ebx
call fcn.00607750
mov eax, dword [esi]
mov eax, dword [eax + 0x418]
call fcn.00478434
mov edx, eax
add dx, 2
mov eax, ebx
call fcn.004784b4
mov eax, dword [esi]
mov dword [ebx + 0x21c], eax
mov dword [ebx + 0x218], 0x655fc0
mov eax, dword [esi]
mov dword [ebx + 0x1cc], eax
mov dword [ebx + 0x1c8], 0x656020
mov eax, dword [esi]
mov edx, dword [eax + 0x5a8]
mov eax, dword [esi]
mov eax, dword [eax + 0x410]
call fcn.004650cc
mov ecx, dword [esi]
mov dl, 1
mov eax, dword [0x603a5c]
call fcn.00606408
mov ebx, eax
mov eax, dword [esi]
mov dword [eax + 0x5c8], ebx
mov eax, dword [esi]
mov edx, dword [eax + 0x344]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x68]
lea edx, [ebp - 0x14]
mov eax, dword [esi]
mov eax, dword [eax + 0x368]
call fcn.00471324
lea edx, [ebp - 0x14]
mov eax, ebx
call fcn.00471344
mov dl, 1
mov eax, ebx
call fcn.006074fc
mov dl, 2
mov eax, ebx
call fcn.00607828
mov dword [ebx + 0x238], 0xcccccccd
mov dword [ebx + 0x23c], 0xcccccccc
mov word [ebx + 0x240], 0x3ffb
xor eax, eax
mov dword [ebx + 0x280], eax
mov dword [ebx + 0x284], 0x80000000
mov word [ebx + 0x288], 0x3fff
mov eax, dword [esi]
mov eax, dword [eax + 0x370]
call fcn.00478434
mov edx, eax
inc edx
mov eax, ebx
call fcn.004784b4
mov eax, dword [esi]
mov dword [ebx + 0x2ac], eax
mov dword [ebx + 0x2a8], 0x655de4
mov eax, dword [esi]
mov dword [ebx + 0x21c], eax
mov dword [ebx + 0x218], 0x655dc8
mov eax, dword [esi]
mov dword [ebx + 0x1cc], eax
mov dword [ebx + 0x1c8], 0x655dc0
mov eax, dword [esi]
mov edx, dword [eax + 0x5c8]
mov eax, dword [esi]
mov eax, dword [eax + 0x354]
call fcn.004650cc
mov ecx, dword [esi]
mov dl, 1
mov eax, dword [0x603a5c]
call fcn.00606408
mov ebx, eax
mov eax, dword [esi]
mov dword [eax + 0x5c4], ebx
mov eax, dword [esi]
mov edx, dword [eax + 0x344]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x68]
lea edx, [ebp - 0x14]
mov eax, dword [esi]
mov eax, dword [eax + 0x36c]
call fcn.00471324
lea edx, [ebp - 0x14]
mov eax, ebx
call fcn.00471344
lea edx, [ebp - 0x18]
mov eax, dword [esi]
mov eax, dword [eax + 0x5c8]
call fcn.006072c8
mov edx, dword [ebp - 0x18]
mov eax, ebx
call fcn.00607274
mov dl, 1
mov eax, ebx
call fcn.006074fc
mov dl, 2
mov eax, ebx
call fcn.00607828
mov dword [ebx + 0x238], 0xcccccccd
mov dword [ebx + 0x23c], 0xcccccccc
mov word [ebx + 0x240], 0x3ffb
xor eax, eax
mov dword [ebx + 0x280], eax
mov dword [ebx + 0x284], 0x80000000
mov word [ebx + 0x288], 0x3fff
mov eax, dword [esi]
mov eax, dword [eax + 0x370]
call fcn.00478434
mov edx, eax
add dx, 2
mov eax, ebx
call fcn.004784b4
mov eax, dword [esi]
mov dword [ebx + 0x2ac], eax
mov dword [ebx + 0x2a8], 0x655dd8
mov eax, dword [esi]
mov dword [ebx + 0x21c], eax
mov dword [ebx + 0x218], 0x655f40
mov eax, dword [esi]
mov dword [ebx + 0x1cc], eax
mov dword [ebx + 0x1c8], 0x655df0
mov eax, dword [esi]
mov edx, dword [eax + 0x5c4]
mov eax, dword [esi]
mov eax, dword [eax + 0x358]
call fcn.004650cc
push ebp
mov eax, dword [esi]
mov eax, dword [eax + 0x47c]
push eax
mov eax, dword [esi]
mov eax, dword [eax + 0x48c]
xor ecx, ecx
mov edx, 1
call fcn.00654dac
pop ecx
mov edx, dword [esi]
mov dword [edx + 0x5c0], eax
push ebp
mov eax, dword [esi]
mov eax, dword [eax + 0x480]
push eax
mov eax, dword [esi]
mov eax, dword [eax + 0x490]
mov ecx, 1
mov edx, 3
call fcn.00654dac
pop ecx
mov edx, dword [esi]
mov dword [edx + 0x5ac], eax
push ebp
mov eax, dword [esi]
mov eax, dword [eax + 0x484]
push eax
mov eax, dword [esi]
mov eax, dword [eax + 0x494]
mov ecx, 2
xor edx, edx
call fcn.00654dac
pop ecx
mov edx, dword [esi]
mov dword [edx + 0x5b8], eax
push ebp
mov eax, dword [esi]
mov eax, dword [eax + 0x488]
push eax
mov eax, dword [esi]
mov eax, dword [eax + 0x498]
mov ecx, 3
mov edx, 2
call fcn.00654dac
pop ecx
mov edx, dword [esi]
mov dword [edx + 0x5bc], eax
push ebp
mov eax, dword [esi]
mov eax, dword [eax + 0x4a0]
push eax
mov eax, dword [esi]
mov eax, dword [eax + 0x4a8]
mov ecx, 4
mov edx, 5
call fcn.00654dac
pop ecx
mov edx, dword [esi]
mov dword [edx + 0x5b4], eax
push ebp
mov eax, dword [esi]
mov eax, dword [eax + 0x4a4]
push eax
mov eax, dword [esi]
mov eax, dword [eax + 0x4ac]
mov ecx, 5
mov edx, 6
call fcn.00654dac
pop ecx
mov edx, dword [esi]
mov dword [edx + 0x5b0], eax
mov ecx, dword [esi]
mov dl, 1
mov eax, dword [0x615e88]
call fcn.0061896c
mov ebx, eax
mov eax, dword [esi]
mov dword [eax + 0x56c], ebx
mov eax, dword [esi]
mov edx, dword [eax + 0x438]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x68]
xor edx, edx
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x64]
lea edx, [ebp - 0x14]
mov eax, dword [esi]
mov eax, dword [eax + 0x43c]
call fcn.00471324
lea edx, [ebp - 0x14]
mov eax, ebx
call fcn.00471344
mov edx, 0xff00000f
mov eax, ebx
call fcn.00471b24
mov eax, dword [0x65577c]
or eax, dword [ebx + 0x50]
mov dword [ebx + 0x50], eax
mov dl, 2
mov eax, ebx
call fcn.0061a390
mov edx, 1
mov eax, ebx
call fcn.00619ff0
xor edx, edx
mov eax, ebx
call fcn.0061e2c8
mov dl, byte [0x655780]
not edx
and dl, byte [ebx + 0x24d]
mov eax, ebx
call fcn.00619534
mov dl, byte [0x655784]
not edx
and dl, byte [ebx + 0x24f]
mov eax, ebx
call fcn.006195a4
mov dl, 1
mov eax, ebx
call fcn.006194a0
mov dl, byte [0x655788]
not edx
and dl, byte [ebx + 0x250]
mov eax, ebx
call fcn.00619638
xor edx, edx
mov eax, ebx
call fcn.006198c0
xor edx, edx
mov eax, ebx
call fcn.00619828
mov dl, 6
mov eax, dword [ebx + 0x22c]
call fcn.006188a8
xor edx, edx
call fcn.006181d0
mov dl, 3
mov eax, dword [ebx + 0x22c]
call fcn.006188a8
xor edx, edx
call fcn.006181d0
xor edx, edx
mov eax, dword [ebx + 0x22c]
call fcn.006188a8
xor edx, edx
call fcn.006181d0
mov dl, 5
mov eax, dword [ebx + 0x22c]
call fcn.006188a8
xor edx, edx
call fcn.006181d0
mov dl, 1
mov eax, dword [ebx + 0x22c]
call fcn.006188a8
xor edx, edx
call fcn.006181d0
mov dl, 2
mov eax, dword [ebx + 0x22c]
call fcn.006188a8
xor edx, edx
call fcn.006181d0
lea ecx, [ebp - 0x20]
xor edx, edx
xor eax, eax
call fcn.0041d6c0
lea edx, [ebp - 0x20]
mov eax, ebx
call fcn.00619958
xor edx, edx
mov eax, ebx
call fcn.006196cc
mov eax, dword [esi]
push eax
push 0x65774c
mov eax, ebx
call fcn.00619b00
mov ecx, dword [esi]
mov dl, 1
mov eax, dword [0x615e88]
call fcn.0061896c
mov ebx, eax
mov eax, dword [esi]
mov dword [eax + 0x574], ebx
mov eax, dword [esi]
mov edx, dword [eax + 0x380]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x68]
lea edx, [ebp - 0x14]
mov eax, dword [esi]
mov eax, dword [eax + 0x38c]
call fcn.00471324
lea edx, [ebp - 0x14]
mov eax, ebx
call fcn.00471344
mov dl, byte [0x655788]
not edx
and dl, byte [ebx + 0x250]
mov eax, ebx
call fcn.00619638
mov dl, byte [0x65578c]
not edx
and dl, byte [ebx + 0x24f]
mov eax, ebx
call fcn.006195a4
xor edx, edx
mov eax, ebx
call fcn.006198c0
xor edx, edx
mov eax, ebx
call fcn.00619828
mov eax, dword [ebx + 0x22c]
mov dl, 4
call fcn.006188a8
xor edx, edx
call fcn.006182bc
xor edx, edx
mov eax, ebx
call fcn.0061e2c8
mov dl, 2
mov eax, ebx
call fcn.0061a390
mov eax, dword [esi]
push eax
push 0x65775c
mov eax, ebx
call fcn.00619b00
mov eax, dword [esi]
mov dword [ebx + 0x2fc], eax
mov dword [ebx + 0x2f8], 0x65776c
mov eax, dword [esi]
mov dword [ebx + 0x2d4], eax
mov dword [ebx + 0x2d0], 0x65796c
mov ecx, dword [esi]
mov dl, 1
mov eax, dword [0x605980]
call fcn.00608f34
mov ebx, eax
mov eax, dword [esi]
mov dword [eax + 0x54c], ebx
mov eax, dword [esi]
mov eax, dword [eax + 0x4d0]
mov edx, dword [eax + 0x30]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x68]
lea edx, [ebp - 0x14]
mov eax, dword [esi]
mov eax, dword [eax + 0x4d0]
call fcn.00471324
lea edx, [ebp - 0x14]
mov eax, dword [esi]
mov eax, dword [eax + 0x54c]
call fcn.00471344
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x655773
lea eax, [ebp - 0x18]
call fcn.00404be8
ret