Function at 0x41cd90
Capabilities:
Check for peb beingdebugged flag
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x48febd
mov eax, dword fs:[0]
push eax
sub esp, 0x110
mov eax, dword [0x4b30f0]
xor eax, esp
mov dword [esp + 0x10c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4b30f0]
xor eax, esp
push eax
lea eax, [esp + 0x124]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x134]
mov edi, ecx
xor ebx, ebx
mov dword [esp + 0x14], ebx
mov ecx, 0x49b478
mov eax, 0x49b4cc
push 0x3a
mov dword [esp + 0x58], ecx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x84], eax
mov dword [esp + 0x50], eax
lea ecx, [esp + 0xea]
xor eax, eax
push ebx
push ecx
mov dword [esp + 0x24], edi
mov esi, edx
mov dword [esp + 0x64], 0x49b47c
mov dword [esp + 0x68], 0x49b484
mov dword [esp + 0x6c], 0x49b48c
mov dword [esp + 0x70], 0x49b494
mov dword [esp + 0x74], 0x49b49c
mov dword [esp + 0x78], 0x49b4a4
mov dword [esp + 0x7c], 0x49b4ac
mov dword [esp + 0x80], 0x49b4b4
mov dword [esp + 0x84], 0x49b4bc
mov dword [esp + 0x88], 0x49b4c4
mov dword [esp + 0x90], 0x49b4d4
mov dword [esp + 0x94], str.AS_tN
mov dword [esp + 0x98], 0x49b4e4
mov dword [esp + 0x9c], 0x49b4ec
mov dword [esp + 0xa0], str.ASmQ
mov dword [esp + 0xa4], 0x49b4fc
mov dword [esp + 0xa8], str.ASkQ
mov dword [esp + 0xac], str.AS_N
mov dword [esp + 0xb0], 0x49b514
mov dword [esp + 0xb4], 0x49b51c
mov dword [esp + 0xb8], 0x49b524
mov dword [esp + 0xbc], 0x49b52c
mov dword [esp + 0xc0], 0x49b534
mov dword [esp + 0xc4], 0x49b53c
mov dword [esp + 0xc8], 0x49b544
mov dword [esp + 0xcc], 0x49b54c
mov dword [esp + 0xd0], 0x49b554
mov dword [esp + 0xd4], 0x49b55c
mov dword [esp + 0xd8], str._tNAS
mov dword [esp + 0x30], 0x49b56c
mov dword [esp + 0x34], 0x49b570
mov dword [esp + 0x38], 0x49b574
mov dword [esp + 0x3c], 0x49b578
mov dword [esp + 0x40], 0x49b57c
mov dword [esp + 0x44], 0x49b580
mov dword [esp + 0x48], 0x49b584
mov dword [esp + 0x4c], 0x49b588
mov dword [esp + 0x50], 0x49b58c
mov dword [esp + 0x54], 0x49b590
mov dword [esp + 0x5c], 0x49b594
mov word [esp + 0xf0], ax
call fcn.00473360
xor eax, eax
mov dword [esp + 0xde], eax
mov dword [esp + 0xe2], eax
mov dword [esp + 0xe6], eax
mov dword [esp + 0xea], eax
mov word [esp + 0xee], ax
movzx eax, word [esi + 2]
xor edx, edx
add esp, 0xc
mov word [esp + 0xd0], dx
cmp ax, 0xd
jae 0x41d140
lea edx, [esp + 0xd0]
cmp dword [esp + 0x138], ebx
je 0x41d001
movzx eax, ax
mov ecx, dword [esp + eax*4 + 0x20]
push ecx
push 0x49b598
call fcn.0041d190
add esp, 8
jmp 0x41d01f
movzx ecx, ax
mov eax, dword [esp + ecx*4 + 0x20]
sub edx, eax
lea ebx, [ebx]
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, bx
jne 0x41d010
movzx edx, word [esi + 2]
lea edi, [esp + 0xd0]
mov dword [ebp], edx
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
cmp ax, bx
jne 0x41d030
cmp word [esi + 6], 0x1f
mov eax, dword [0x49b5a0]
mov dword [edi], eax
jae 0x41d11e
movzx ecx, word [esi + 6]
mov dword [ebp + 4], ecx
movzx edx, word [esi + 6]
mov eax, dword [esp + edx*4 + 0x54]
mov edx, eax
nop
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x41d060
lea edi, [esp + 0xd0]
sub eax, edx
add edi, 0xfffffffe
jmp 0x41d080
mov cx, word [edi + 2]
add edi, 2
cmp cx, bx
jne 0x41d080
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
lea eax, [esp + 0xd0]
rep movsb byte es:[edi], byte [esi]
mov edx, eax
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x41d0a5
lea edi, [esp + 0xe4]
sub eax, edx
add edi, 0xfffffffe
lea esp, [esp]
mov cx, word [edi + 2]
add edi, 2
cmp cx, bx
jne 0x41d0c0
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
lea eax, [esp + 0x1c]
rep movsb byte es:[edi], byte [esi]
push eax
lea ecx, [esp + 0xe8]
call fcn.00403a70
mov esi, 1
mov dword [esp + 0x12c], esi
mov edi, dword [esp + 0x18]
lea ecx, [esp + 0x1c]
push ecx
push edi
call fcn.004012a0
mov dword [esp + 0x14], esi
mov byte [esp + 0x12c], bl
lea ecx, [esp + 0x1c]
call fcn.004011b0
jmp 0x41d15a
mov esi, dword [esp + 0x18]
push esi
mov ecx, 0x49a68c
call fcn.00403a70
mov dword [esp + 0x12c], ebx
mov dword [esp + 0x14], 1
mov eax, esi
jmp 0x41d15c
push edi
mov ecx, 0x49a68c
call fcn.00403a70
mov dword [esp + 0x12c], ebx
mov dword [esp + 0x14], 1
mov eax, edi
mov ecx, dword [esp + 0x124]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x10c]
xor ecx, esp
call fcn.0046f1bd
add esp, 0x11c
ret 8