Function at 0x547020
Capabilities:
Check for peb beingdebugged flag

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x5d5eb0
push eax
mov dword fs:[0], esp
sub esp, 8
push esi
mov esi, ecx
push edi
mov eax, dword [esi + 0xa0]
mov dword [esi + 0x1c0], 0x4b0
lea ecx, [eax - 1]
cmp ecx, 4
ja case.0x547058.3
jmp dword [ecx*4 + 0x547520]
mov edi, dword [esp + 0x20]
lea ecx, [edi - 1]
cmp ecx, 0xd
ja case.0x547077.6
xor edx, edx
mov dl, byte [ecx + 0x54754c]
jmp dword [edx*4 + 0x547534]
push ecx
mov dword [esi + 0xa0], 2
mov eax, esp
mov dword [esp + 0x2c], esp
push 0xcd9d
push eax
call fcn.004ec350
add esp, 8
mov ecx, esi
call fcn.005467f0
mov ecx, dword [0x639698]
mov dword [esp + 0x20], ecx
mov edx, dword [esi + 0xa8]
lea eax, [esp + 0x20]
push edx
push 0x625a90
push eax
mov dword [esp + 0x24], 0
call fcn.0058aded
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 0xac]
add esp, 0xc
mov ecx, dword [ecx - 8]
mov eax, dword [edx - 8]
add al, cl
push 1
add al, 2
push 0x637de0
mov ecx, esi
mov byte [esp + 0x30], al
call fcn.00546850
lea eax, [esp + 0x28]
push 1
push eax
mov ecx, esi
call fcn.00546850
mov eax, dword [esi + 0xac]
mov ecx, dword [eax - 8]
inc ecx
push ecx
push eax
mov ecx, esi
call fcn.00546850
mov eax, dword [esp + 0x20]
mov ecx, dword [eax - 8]
inc ecx
push ecx
push eax
mov ecx, esi
call fcn.00546850
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], 0xffffffff
call fcn.005936db
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
add esp, 0x14
ret 0xc
push ecx
mov dword [esi + 0xa0], 3
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xcd9e
push ecx
jmp 0x5474fc
mov edx, dword [esp + 0x28]
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.00593749
jmp 0x547504
push ecx
mov dword [esi + 0xa0], 0
mov eax, esp
mov dword [esp + 0x2c], esp
push 0xcd9f
push eax
jmp 0x5474fc
mov eax, dword [esp + 0x24]
mov edi, 3
cmp eax, edi
jle 0x547216
mov eax, dword [esp + 0x28]
cmp byte [eax], 0x52
jne 0x547216
add eax, 2
push eax
call fcn.0057322b
add esp, 4
test eax, eax
jle 0x5471ec
mov ecx, dword [esi + 0xa4]
push 0
push eax
push ecx
call fcn.00576767
add esp, 0xc
test eax, eax
jne 0x5471ec
push ecx
mov dword [esi + 0xa0], edi
mov edx, esp
mov dword [esp + 0x2c], esp
push 0xcd9e
jmp 0x5474fb
push 2
push 0x637c6c
mov ecx, esi
call fcn.00546850
push ecx
mov dword [esi + 0xa0], 0
mov eax, esp
mov dword [esp + 0x2c], esp
push 0xcda0
push eax
jmp 0x5474fc
push ecx
mov dword [esi + 0xa0], 0
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xcda1
push ecx
jmp 0x5474fc
push ecx
mov edx, esp
mov dword [esp + 0x2c], esp
push edi
push eax
push edx
jmp 0x54736b
mov edi, dword [esp + 0x20]
lea ecx, [edi - 2]
cmp ecx, 0xc
ja case.0x547259.6
xor edx, edx
mov dl, byte [ecx + 0x547570]
jmp dword [edx*4 + 0x54755c]
push ecx
mov dword [esi + 0xa0], 3
mov eax, esp
mov dword [esp + 0x2c], esp
push 0xcd9e
push eax
jmp 0x5474fc
mov edx, dword [esp + 0x28]
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.00593749
jmp 0x547504
push ecx
mov dword [esi + 0xa0], 0
mov eax, esp
mov dword [esp + 0x2c], esp
push 0xcd9f
push eax
jmp 0x5474fc
mov eax, dword [esp + 0x24]
mov edi, 3
cmp eax, edi
jle 0x54732b
mov eax, dword [esp + 0x28]
cmp byte [eax], 0x52
jne 0x54732b
add eax, 2
push eax
call fcn.0057322b
add esp, 4
test eax, eax
jle 0x547301
mov ecx, dword [esi + 0xa4]
push 0
push eax
push ecx
call fcn.00576767
add esp, 0xc
test eax, eax
jne 0x547301
push ecx
mov dword [esi + 0xa0], edi
mov edx, esp
mov dword [esp + 0x2c], esp
push 0xcd9e
jmp 0x5474fb
push 2
push 0x637c6c
mov ecx, esi
call fcn.00546850
push ecx
mov dword [esi + 0xa0], 0
mov eax, esp
mov dword [esp + 0x2c], esp
push 0xcda0
push eax
jmp 0x5474fc
push ecx
mov dword [esi + 0xa0], 0
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0xcda1
push ecx
jmp 0x5474fc
push ecx
mov edx, esp
mov dword [esp + 0x2c], esp
push edi
push eax
push edx
jmp 0x54736b
mov edx, dword [esp + 0x20]
mov ecx, edx
sub ecx, 0xe
je 0x5473bf
dec ecx
je 0x547396
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
push eax
push ecx
mov ecx, esi
call fcn.00547580
mov ecx, esi
call fcn.005467f0
mov dword [esi + 0xa0], 0
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
add esp, 0x14
ret 0xc
push 2
push 0x637ddc
mov ecx, esi
call fcn.00546850
push ecx
mov dword [esi + 0xa0], 5
mov edx, esp
mov dword [esp + 0x2c], esp
push 0xcda2
jmp 0x5474fb
push ecx
mov dword [esi + 0xa0], 0
mov eax, esp
mov dword [esp + 0x2c], esp
push 0xcd9f
push eax
jmp 0x5474fc
mov edx, dword [esp + 0x20]
mov ecx, edx
sub ecx, 0xe
je 0x5474e5
sub ecx, 2
je 0x5473fb
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
jmp 0x547368
push ecx
mov dword [esi + 0xa0], 0
mov edx, esp
mov dword [esp + 0x2c], esp
push 0xcda3
push edx
call fcn.004ec350
add esp, 8
mov ecx, esi
call fcn.005467f0
mov eax, dword [0x63fd4c]
test eax, eax
je 0x5474c2
mov eax, dword [0x639698]
mov dword [esp + 0x24], eax
lea ecx, [esi + 0xac]
lea edx, [esp + 0xc]
push ecx
push 0x637c80
push edx
mov dword [esp + 0x24], 1
call fcn.005939e4
push str._sent_r_n
push eax
lea eax, [esp + 0x10]
mov byte [esp + 0x20], 2
push eax
call fcn.00593970
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x1c], 3
call fcn.00593814
lea ecx, [esp + 8]
mov byte [esp + 0x18], 2
call fcn.005936db
lea ecx, [esp + 0xc]
mov byte [esp + 0x18], 1
call fcn.005936db
mov ecx, dword [0x63fd4c]
mov eax, dword [esp + 0x24]
add ecx, 0xc0
push 0
push 0
push eax
mov edx, dword [ecx]
push 0x22
call dword [edx + 4]
lea ecx, [esp + 0x24]
mov dword [esp + 0x18], 0xffffffff
call fcn.005936db
mov ecx, dword [esi + 0x1c]
push 0
push 0
push 0x10
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
add esp, 0x14
ret 0xc
push ecx
mov dword [esi + 0xa0], 0
mov edx, esp
mov dword [esp + 0x2c], esp
push 0xcd9f
push edx
call fcn.004ec350
add esp, 8
mov ecx, esi
call fcn.005467f0
mov ecx, dword [esp + 0x10]
pop edi
mov dword fs:[0], ecx
pop esi
add esp, 0x14
ret 0xc