Function at 0x435400
Capabilities:
Check for peb beingdebugged flag

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x59ce70
push eax
mov dword fs:[0], esp
sub esp, 8
push esi
mov esi, ecx
push edi
mov eax, dword [esi + 0x90]
mov dword [esi + 0x1b0], 0x4b0
lea ecx, [eax - 1]
cmp ecx, 4
ja case.0x435438.3
jmp dword [ecx*4 + 0x435900]
mov edi, dword [esp + 0x20]
lea ecx, [edi - 1]
cmp ecx, 0xd
ja case.0x435457.6
xor edx, edx
mov dl, byte [ecx + 0x43592c]
jmp dword [edx*4 + 0x435914]
push ecx
mov dword [esi + 0x90], 2
mov eax, esp
mov dword [esp + 0x2c], esp
push 0xcd9d
push eax
call fcn.005054c0
add esp, 8
mov ecx, esi
call fcn.00434c60
mov ecx, dword [0x614cb0]
mov dword [esp + 0x20], ecx
mov edx, dword [esi + 0x98]
lea eax, [esp + 0x20]
push edx
push 0x600838
push eax
mov dword [esp + 0x24], 0
call fcn.0056d732
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 0x9c]
add esp, 0xc
mov ecx, dword [ecx - 8]
mov eax, dword [edx - 8]
add al, cl
push 1
add al, 2
push 0x608260
mov ecx, esi
mov byte [esp + 0x30], al
call fcn.0042f680
lea eax, [esp + 0x28]
push 1
push eax
mov ecx, esi
call fcn.0042f680
mov eax, dword [esi + 0x9c]
mov ecx, dword [eax - 8]
inc ecx
push ecx
push eax
mov ecx, esi
call fcn.0042f680
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 8]
inc ecx
push ecx
push eax
mov ecx, esi
call fcn.0042f680
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], 0xffffffff
call fcn.00575ae8
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
add esp, 0x14
ret 0xc
push ecx
mov dword [esi + 0x90], 3
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xcd9e
push ecx
jmp 0x4358dc
mov edx, dword [esp + 0x28]
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.00575b56
jmp 0x4358e4
push ecx
mov dword [esi + 0x90], 0
mov eax, esp
mov dword [esp + 0x2c], esp
push 0xcd9f
push eax
jmp 0x4358dc
mov eax, dword [esp + 0x24]
mov edi, 3
cmp eax, edi
jle 0x4355f6
mov eax, dword [esp + 0x28]
cmp byte [eax], 0x52
jne 0x4355f6
add eax, 2
push eax
call fcn.00556abb
add esp, 4
test eax, eax
jle 0x4355cc
mov ecx, dword [esi + 0x94]
push 0
push eax
push ecx
call fcn.00558409
add esp, 0xc
test eax, eax
jne 0x4355cc
push ecx
mov dword [esi + 0x90], edi
mov edx, esp
mov dword [esp + 0x2c], esp
push 0xcd9e
jmp 0x4358db
push 2
push 0x607f60
mov ecx, esi
call fcn.0042f680
push ecx
mov dword [esi + 0x90], 0
mov eax, esp
mov dword [esp + 0x2c], esp
push 0xcda0
push eax
jmp 0x4358dc
push ecx
mov dword [esi + 0x90], 0
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xcda1
push ecx
jmp 0x4358dc
push ecx
mov edx, esp
mov dword [esp + 0x2c], esp
push edi
push eax
push edx
jmp 0x43574b
mov edi, dword [esp + 0x20]
lea ecx, [edi - 2]
cmp ecx, 0xc
ja case.0x435639.6
xor edx, edx
mov dl, byte [ecx + 0x435950]
jmp dword [edx*4 + 0x43593c]
push ecx
mov dword [esi + 0x90], 3
mov eax, esp
mov dword [esp + 0x2c], esp
push 0xcd9e
push eax
jmp 0x4358dc
mov edx, dword [esp + 0x28]
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.00575b56
jmp 0x4358e4
push ecx
mov dword [esi + 0x90], 0
mov eax, esp
mov dword [esp + 0x2c], esp
push 0xcd9f
push eax
jmp 0x4358dc
mov eax, dword [esp + 0x24]
mov edi, 3
cmp eax, edi
jle 0x43570b
mov eax, dword [esp + 0x28]
cmp byte [eax], 0x52
jne 0x43570b
add eax, 2
push eax
call fcn.00556abb
add esp, 4
test eax, eax
jle 0x4356e1
mov ecx, dword [esi + 0x94]
push 0
push eax
push ecx
call fcn.00558409
add esp, 0xc
test eax, eax
jne 0x4356e1
push ecx
mov dword [esi + 0x90], edi
mov edx, esp
mov dword [esp + 0x2c], esp
push 0xcd9e
jmp 0x4358db
push 2
push 0x607f60
mov ecx, esi
call fcn.0042f680
push ecx
mov dword [esi + 0x90], 0
mov eax, esp
mov dword [esp + 0x2c], esp
push 0xcda0
push eax
jmp 0x4358dc
push ecx
mov dword [esi + 0x90], 0
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xcda1
push ecx
jmp 0x4358dc
push ecx
mov edx, esp
mov dword [esp + 0x2c], esp
push edi
push eax
push edx
jmp 0x43574b
mov edx, dword [esp + 0x20]
mov ecx, edx
sub ecx, 0xe
je 0x43579f
dec ecx
je 0x435776
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
push eax
push ecx
mov ecx, esi
call fcn.00435960
mov ecx, esi
call fcn.00434c60
mov dword [esi + 0x90], 0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
add esp, 0x14
ret 0xc
push 2
push 0x60825c
mov ecx, esi
call fcn.0042f680
push ecx
mov dword [esi + 0x90], 5
mov edx, esp
mov dword [esp + 0x2c], esp
push 0xcda2
jmp 0x4358db
push ecx
mov dword [esi + 0x90], 0
mov eax, esp
mov dword [esp + 0x2c], esp
push 0xcd9f
push eax
jmp 0x4358dc
mov edx, dword [esp + 0x20]
mov ecx, edx
sub ecx, 0xe
je 0x4358c5
sub ecx, 2
je 0x4357db
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
jmp 0x435748
push ecx
mov dword [esi + 0x90], 0
mov edx, esp
mov dword [esp + 0x2c], esp
push 0xcda3
push edx
call fcn.005054c0
add esp, 8
mov ecx, esi
call fcn.00434c60
mov eax, dword [0x64fe78]
test eax, eax
je 0x4358a2
mov eax, dword [0x614cb0]
mov dword [esp + 0x24], eax
lea ecx, [esi + 0x9c]
lea edx, [esp + 0xc]
push ecx
push 0x607f88
push edx
mov dword [esp + 0x24], 1
call fcn.00575df1
push str._sent_r_n
push eax
lea eax, [esp + 0x10]
mov byte [esp + 0x20], 2
push eax
call fcn.00575d7d
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x1c], 3
call fcn.00575c21
lea ecx, [esp + 8]
mov byte [esp + 0x18], 2
call fcn.00575ae8
lea ecx, [esp + 0xc]
mov byte [esp + 0x18], 1
call fcn.00575ae8
mov ecx, dword [0x64fe78]
mov eax, dword [esp + 0x24]
add ecx, 0xc0
push 0
push 0
push eax
mov edx, dword [ecx]
push 0x1f
call dword [edx + 4]
lea ecx, [esp + 0x24]
mov dword [esp + 0x18], 0xffffffff
call fcn.00575ae8
mov ecx, dword [esi + 0x1c]
push 0
push 0
push 0x10
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
add esp, 0x14
ret 0xc
push ecx
mov dword [esi + 0x90], 0
mov edx, esp
mov dword [esp + 0x2c], esp
push 0xcd9f
push edx
call fcn.005054c0
add esp, 8
mov ecx, esi
call fcn.00434c60
mov ecx, dword [esp + 0x10]
pop edi
mov dword fs:[0], ecx
pop esi
add esp, 0x14
ret 0xc