Function at 0x475cd0
Capabilities:
Check for peb beingdebugged flag
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
push 0xffffffffffffffff
push 0x4f3936
mov eax, dword fs:[0]
push eax
sub esp, 0xbc
mov eax, dword [0x54d000]
xor eax, esp
mov dword [esp + 0xb4], eax
push esi
push edi
mov eax, dword [0x54d000]
xor eax, esp
push eax
lea eax, [esp + 0xc8]
mov dword fs:[0], eax
mov esi, ecx
push 0x30
lea eax, [esp + 0x94]
push 0
push eax
call fcn.004dc9b0
add esp, 0xc
mov dword [esp + 0x90], vtable.IFunc.0
call fcn.004b64a0
mov dword [esp + 0x94], eax
call fcn.00496280
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x9c], eax
mov eax, dword [ecx + 8]
mov dword [esp + 0xa0], eax
mov eax, dword [ecx + 0x54]
mov dword [esp + 0x98], eax
lea eax, [esp + 0xa8]
push eax
mov dword [esp + 0x94], vtable.IFuncFlag.0
mov dword [esp + 0xa8], vtable.CCriticalSection.0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov dword [esp + 0x90], vtable.CFuncFlag.0
push ecx
push 0x15c4
push 0
push 0
lea ecx, [esp + 0xa0]
mov dword [esp + 0xe0], 0
call fcn.004aab10
mov ecx, dword [esi + 0x64]
xor edi, edi
mov eax, dword [ecx + 0x30]
mov dword [esi + 0x98], eax
mov eax, dword [ecx + 0x30]
add eax, 0x15be
mov dword [esi + 0x9c], eax
movzx eax, word [eax + 2]
mov dword [esi + 0xa0], eax
mov eax, dword [esi + 0x3c]
sub eax, dword [esi + 0x38]
sar eax, 2
test eax, eax
je 0x475e04
mov eax, dword [esi + 0x38]
mov ecx, esi
mov edx, dword [esi]
push dword [eax + edi*4]
call dword [edx + 0xc4]
mov eax, dword [esi + 0x3c]
inc edi
sub eax, dword [esi + 0x38]
sar eax, 2
cmp edi, eax
jb 0x475de6
push 0x30
lea eax, [esp + 0x64]
push 0
push eax
call fcn.004dc9b0
add esp, 0xc
mov dword [esp + 0x60], vtable.IFunc.0
call fcn.004b64a0
mov dword [esp + 0x64], eax
call fcn.00496280
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x6c], eax
mov eax, dword [ecx + 8]
mov dword [esp + 0x70], eax
mov eax, dword [ecx + 0x54]
mov dword [esp + 0x68], eax
lea eax, [esp + 0x78]
push eax
mov dword [esp + 0x64], vtable.IFuncFlag.0
mov dword [esp + 0x78], vtable.CCriticalSection.0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov dword [esp + 0x60], vtable.CFuncFlag.0
mov byte [esp + 0xd0], 1
lea ecx, [esp + 0x34]
xorps xmm0, xmm0
mov dword [esp + 0x4c], 0
movdqa xmmword [esp + 0x34], xmm0
movq qword [esp + 0x44], xmm0
call fcn.004a42b0
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x34], vtable.CFuncSave.0
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x48], eax
mov eax, dword [ecx + 0x10]
mov dword [esp + 0x4c], eax
mov byte [esp + 0xd0], 2
xorps xmm0, xmm0
movdqa xmmword [esp + 0x14], xmm0
mov dword [esp + 0x24], 0
call fcn.004b64a0
mov edi, eax
mov dword [esp + 0x18], edi
call fcn.00496280
mov ecx, dword [edi + 8]
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x54]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], vtable.CFuncSelect.0
push 0
push 0
lea ecx, [esp + 0x68]
mov byte [esp + 0xd8], 3
call fcn.00457400
mov eax, dword [esi + 0xa0]
lea ecx, [esp + 0x14]
inc eax
push eax
call fcn.0042e720
mov eax, dword [esi + 0xa0]
lea ecx, [esp + 0x34]
inc eax
push eax
call fcn.004ae3b0
mov eax, dword [esi + 0xa0]
lea ecx, [esp + 0x60]
push 0
inc eax
push eax
call fcn.004aa180
push ecx
push 1
push 0x39
push 0
lea ecx, [esp + 0x70]
call fcn.004aacb0
push 0
push str._Config_OneMes
mov ecx, dword [0x58dc90]
call fcn.004c8eb0
push 0x549bac
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 3
push eax
call fcn.004dd2ec
int3