Function at 0x401a79
Capabilities:
Check for debugger via api

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41391a
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x14
mov eax, dword [0x4ab1c8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x24], str.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
and dword [ebp - 4], 0
and dword [ebp - 0x18], 0
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
cmp dword [ebp - 0x18], 0
je 0x401ad7
mov byte [ebp - 0x19], 1
jmp 0x401adb
mov byte [ebp - 0x19], 0
mov al, byte [ebp - 0x19]
jmp 0x401afd
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004090dc
leave
ret