Function at 0x402160
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x415c80
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x14
mov eax, dword [0x478010]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x20], ecx
mov dword [ebp - 4], 0
mov byte [ebp - 0x15], 0
mov dword [ebp - 0x1c], str.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
mov eax, dword fs:[0x30]
mov al, byte [eax + 2]
mov byte [ebp - 0x15], al
movsx eax, byte [ebp - 0x15]
test eax, eax
je 0x4021be
mov byte [ebp - 0x16], 1
jmp 0x4021c2
mov byte [ebp - 0x16], 0
mov al, byte [ebp - 0x16]
jmp 0x4021f3
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0040a56e
mov esp, ebp
pop ebp
ret