Function at 0x402090
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x415cb0
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x14
mov eax, dword [0x478010]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x20], ecx
mov dword [ebp - 4], 0
mov byte [ebp - 0x15], 0
mov eax, dword fs:[0x30]
mov al, byte [eax + 2]
mov byte [ebp - 0x15], al
mov dword [ebp - 0x1c], str.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
mov dword [ebp - 0x24], str.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
movsx eax, byte [ebp - 0x15]
test eax, eax
je 0x4020f5
mov byte [ebp - 0x16], 1
jmp 0x4020f9
mov byte [ebp - 0x16], 0
mov al, byte [ebp - 0x16]
jmp 0x402121
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0040a5ce
mov esp, ebp
pop ebp
ret