checks the process environment block (peb) for a "beingdebugged" field (gets set if process is launched in a debugger) possible bypass: once the peb byte is set, set the value to 0 before the application checks
source not stored for this graph (policy: none)
nothing calls this directly
no outgoing calls
no test coverage detected