Function at 0x441110
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push 0xffffffffffffffff
push 0x560678
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
push edi
mov eax, dword [0x5b7b5c]
xor eax, esp
push eax
lea eax, [esp + 0x2c]
mov dword fs:[0], eax
mov edi, ecx
xor ebx, ebx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x24], ebx
mov byte [esp + 0x28], bl
push ebx
mov dword [esp + 0x38], ebx
call fcn.004ff96a
push 0x1000
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x2c], ebx
mov byte [esp + 0x30], bl
mov dword [esp + 0x28], 0x1000
call fcn.004ff95f
add esp, 8
mov dword [esp + 0x24], eax
push 1
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x30], 5
call fcn.0043a6f0
push 4
mov dword [esp + 0x14], 0xbcd
call fcn.004ff95f
movzx ecx, byte [esp + 0x17]
mov esi, eax
mov byte [esi], cl
movzx edx, byte [esp + 0x16]
mov byte [esi + 1], dl
movzx eax, byte [esp + 0x15]
push 4
mov byte [esi + 2], al
movzx ecx, byte [esp + 0x18]
push esi
lea edx, [esp + 0x1c]
push 4
push edx
mov byte [esi + 3], cl
call fcn.0053f74e
push esi
call fcn.004ff96a
add esp, 0x18
push 4
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
call fcn.0043a6f0
mov esi, dword [esp + 0x40]
push esi
lea ecx, [esp + 0x1c]
call fcn.0043a770
mov ecx, dword [esp + 0x3c]
push esi
push ecx
lea ecx, [esp + 0x20]
call fcn.0043a6f0
push 4
mov dword [esp + 0x44], ebx
call fcn.004ff95f
movzx edx, byte [esp + 0x47]
mov esi, eax
mov byte [esi], dl
movzx eax, byte [esp + 0x46]
mov byte [esi + 1], al
movzx ecx, byte [esp + 0x45]
push 4
mov byte [esi + 2], cl
movzx edx, byte [esp + 0x48]
push esi
lea eax, [esp + 0x4c]
push 4
push eax
mov byte [esi + 3], dl
call fcn.0053f74e
push esi
call fcn.004ff96a
add esp, 0x18
push 4
lea ecx, [esp + 0x44]
push ecx
lea ecx, [esp + 0x20]
call fcn.0043a6f0
mov edx, dword [esp + 0x4c]
push edx
lea ecx, [esp + 0x1c]
call fcn.0043a770
mov esi, dword [esp + 0x50]
push esi
lea ecx, [esp + 0x1c]
call fcn.0043a770
lea eax, [esp + 0x18]
push eax
mov ecx, edi
call fcn.0043fc20
test eax, eax
je 0x4412e8
lea edx, [esp + 0x18]
push edx
mov ecx, edi
call fcn.0043f490
test eax, eax
jne 0x4412bf
mov eax, dword [esp + 0x24]
push eax
call fcn.004ff96a
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x28
ret 0x18
movzx eax, byte [esp + 0x28]
cmp eax, 0x67
je 0x44130c
cmp eax, 0x65
jne 0x4412e8
lea ecx, [esp + 0x18]
call fcn.0043a7f0
lea ecx, [esp + 0x18]
call fcn.0043a7f0
push eax
mov ecx, edi
call fcn.0043bc90
mov ecx, dword [esp + 0x24]
push ecx
call fcn.004ff96a
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x28
ret 0x18
lea ecx, [esp + 0x18]
call fcn.0043a7f0
cmp eax, 0xbcd
je 0x441340
mov edx, dword [esp + 0x24]
push edx
call fcn.004ff96a
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x28
ret 0x18
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x1c]
call fcn.0043a860
mov ecx, dword [esp + 0x14]
cmp ecx, esi
jne 0x4412e8
mov edx, dword [esp + 0x48]
push ecx
push eax
mov eax, dword [esp + 0x4c]
push edx
push eax
call fcn.0053f74e
mov ecx, dword [esp + 0x34]
push ecx
call fcn.004ff96a
add esp, 0x14
mov eax, 1
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x28
ret 0x18