Function at 0x4070a0
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x434130
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x20
mov eax, dword [0x48e868]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x1c], str.aop6UPQPmghigg2tVDr7GqS4fha3lhbSmL37o4iHsbEpEpKAd9yOhHnFgc0fySYzJmeOCuDPP99Ps0vTvQLCHwde9482KOOSqEHXIwjg2SyuFQGj
mov dword [ebp - 4], 0
mov dword [ebp - 0x2c], str.3iUvhmpRT1z2xd50iMqpwD959E3XFCLvEdJbB1hBjaoDfNMbzSAFEwjCqeYrJK4AIa7HJB2glEo1ym54asvyU635Sb8zinwYz8MiB7yt6ukrSk1lnonkA505n7ptOsL50kSMlyLiGoOplEfAXLHV8gSBHqDpyqW8chNFgXG96UksJN0h82kVfqv1CfoNqhQkSLj6VmoPki6mCL3KvNovMmJ6Ou8d2vOGaPtP3O3BkBgXc3Mge1qwSTxYXQ5jI7IaCMIhzqT2WEHioDaWRRdrMQVfGKnUuC5BkbLuEfh841euQ6GQpMVp263NypU375YHJQGbCoAgs1nPTsuRlx3bhs5Y4OrL1127OVRE3YieQLzMAigOA4n9sQhwGGxmjxujYL2TEaYaYa5TCFgo
mov dword [ebp - 0x20], str.IqwtBd6cOgSaL3KBYdFulj6LwpHd6bcck3hTzO2sMFW2IwQ5CVW0Do773v5KldWwEsktEDbrDOPSYHY91wBvsH11KFFCNjb7a2S4y4REiWdW74Sl
mov dword [ebp - 0x28], str.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
mov byte [ebp - 0x15], 0
mov dword [ebp - 0x30], str.QuLfttsfMJAVHTOaNjWyvbagYLVLxfMtzs6quIgrjibnzeVsPN0UeE97bmicVXPNeUSm0fT5oXrxm6WJeJTCBeJM8SmPWx7f9iydgotBNkSLfdVi2l5yyoTR6xkw7ChXD6Y8mlgcNBUSGEDHkTlCMwHCP4gxhcEo3Soc86EKaAManPrGeKRBKKm2EK9Dvza6Jkrs8tdRcEQoHbKpcF6cJUzkJcNwswbrf9FnJSNRijchc0tDqAdr0KmekYn1TmP2kWqjDmqVbvfbG7uRdKJpd1OBI0wav2TpKusAv2bU5GVhSyUXF4Y5b86xivkFwgXMvfXrrPq41pVg6fh2e4vsMXjUeRwIPE3FXik8D2umQlBkf2AsES0z2JtlyCA1PLBOLo7WkkFyil2cKBjRfTM95KrqQIDatYGP2rm1LWJkkGnjlcaVvkYY0S8BB6eE2SUKoGE3ypm78uMB8nTvAQq3K2CItRMY6s2rYMsH9nDfX1aS0IqG3wivaCYpo3kG53AhxC1FSW7JGOlUC2z0eyr5DYHwBk6gsoaoxcibJbJOsbstLt7GjgrY8kJeJ1vgKCgGoGYWaVW1NWJkhDMMm8yWcKuVlX4YSYYEyqyJYg2YL6tQefS3BmROpIcJ9PXdbIXGMWLqtLmonfBx7PzxatMGi7KH4zlyuE1mHpMkRHv6QnUSn0umAJPjnNBgSOMJNG1SM2fwOhPRfJ2DeEn9pJpvgHIhsUm40b5PaiO8oCteNf19L6gRNjUeVGSvQTGpTUC4zOam2RlCQyulX7pOCqNsMBEvexRe9ciMEiN4H2qCUHFpe4xwgzLs2HjnGBPQ8axpscQxu3YKTShUuwT2VzkaRbz65Di1jMXdXMXIvOlmxL8qQO69KP1MFwxHM8WW3TJ9VK2N5QtdXLLAVSfg2SVMevjAg6nj7rR1N0T2UC8Qq3hDe8G6KvgKFPL05iDogLzXACtM9xNHjren8p5GyC6iA8w1Wal22IosYWFsg1M00sSdUIJMlEaGf5hFcsBrY2kyW0AtjOxNb4WockcV1bjYV3jMqKHhySg2efq91bxkUokycGVamyqiIJX1f5DlzlHkpI3GBoNOS9pRG1UzPvRTROpvi3bTcnnvGM2esE07bjQbEw9GQuRdkrljEtrPHX63cwHYCBqVo5GUguJoNJsMMj7mSuPGE8LM4OjkQsUVxWgcS9S0hWhdl8lxEiSKIFyAexlFDCa2S7LUA4dJ4WDc6J1S8KjTx3Yj3eMqpRAfSYjFl7mcJee4xaXodsOCP4ifxJbAiAEocTbem61U4DwVDbnQjeOJ9844AdK7dfbtYNiVQT9vubXYKvdTVycFRa8NF2JWuiLgDh5JTTWT454wEMb0KFoojvzPWLlbP9KoCDrawVTnvLhTuFKqysFdLwWiXUBPdfPvgC5Uid0vNfXnRjTGXOj118PPfkjP93DPEHQzgQTsyIcdF4b4z58zSD0B5meWXnBsQnJQ0OAtX5jK6Nf1g8DYzlQ7NWLArsICSnlje7YriNzCeahTM46NQth62Dx8pTTjHA23hCqu41rtcdsRI6r936BAIAk0OH1j13QE19J1aszYdpSOszjA5cCQSBKmYegsoR66ehzFcvUSfx1G4CHY3WT5GGpQIp31mBlTzz3B9SeFVzAnHjjlmsLcwFuozvBpTawOOiuklCmpTDK6AGpvFiiGcw13cvitFGRTnnSR9wzqcY3mIvexznq0bm3WAoiVs58HwcywAyd9jLLxcfw4y3jPxxDha2xhdTyptB3XlUz45aYMh7xi29pi1ATkHlIQcVurOhHqKadMt55dFYcu30s2aSF2LpfK03jb1K45txQoBkAfHdWiHUAWBtOFn8XGpT7zAFUpJvRUOp5nf5rjcaNrM4w9korAgtg7tFKNPqoXt0igVGuzcPYNzQclq7zJvszUuOlWIPAdlILnyOsJevhFtfeeS80ihgrEpEIUWvCpz9N22Yc0Ha6YBQ6Qhg9fL0HyOac4
mov eax, dword fs:[0x30]
mov al, byte [eax + 2]
mov byte [ebp - 0x15], al
movsx eax, byte [ebp - 0x15]
test eax, eax
je 0x40711a
mov byte [ebp - 0x16], 1
jmp 0x40711e
mov byte [ebp - 0x16], 0
mov al, byte [ebp - 0x16]
jmp 0x407146
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e8f2
mov esp, ebp
pop ebp
ret