Function at 0x407190
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x434100
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x14
mov eax, dword [0x49f868]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x20], ecx
mov dword [ebp - 4], 0
mov byte [ebp - 0x15], 0
mov eax, dword fs:[0x30]
mov al, byte [eax + 2]
mov byte [ebp - 0x15], al
mov dword [ebp - 0x1c], str.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
mov dword [ebp - 0x24], str.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
movsx eax, byte [ebp - 0x15]
test eax, eax
je 0x4071f5
mov byte [ebp - 0x16], 1
jmp 0x4071f9
mov byte [ebp - 0x16], 0
mov al, byte [ebp - 0x16]
jmp 0x407221
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e8d2
mov esp, ebp
pop ebp
ret