Function at 0x77cbefca
Capabilities:
Check for peb beingdebugged flag

Disassembly:
mov dword [ebp - 0x1c], 6
jmp 0x77cbf0bd
push 0x57
pop eax
jmp 0x77cbf0db
cmp dword [ebp + 0x10], 2
je 0x77cbb457
cmp dword [ebp + 0x10], 7
jne 0x77cbf093
jmp 0x77cbb457
mov ecx, dword [ecx]
jmp 0x77cbf056
mov ecx, dword [ebp + 0x18]
mov dword [eax], ecx
jmp 0x77cbf0b1
cmp dword [ebp + 0x24], ebx
jne 0x77cbeff3
jmp 0x77c978d9
cmp dword [ebp + 0x10], 1
jne 0x77cb3153
mov edx, dword [ebp + 0x18]
cmp edx, 2
jbe 0x77cbf093
mov eax, edx
shr eax, 1
lea eax, [ecx + eax*2]
cmp word [eax - 2], bx
je 0x77cbf093
add edx, 2
mov ecx, dword [ebp + 0x24]
cmp edx, dword [ecx]
ja 0x77cbf093
mov word [eax], bx
jmp 0x77cbf093
push 0x30
push 0x77cbf0e8
call fcn.77cd5e30
xor ebx, ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x28], ebx
cmp dword [ebp + 0x18], ebx
jne 0x77c978d9
cmp dword [ebp + 0x20], ebx
jne 0x77cbb43f
mov edi, dword [ebp + 0x14]
cmp edi, ebx
je 0x77c978d9
mov esi, dword [ebp + 0x10]
cmp esi, ebx
je 0x77c978d9
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp + 8]
call fcn.77cd5e99
cmp eax, ebx
je 0x77c978cd
mov word [ebp - 0x40], bx
mov ecx, dword [edi]
and ecx, 0x7fffffff
cmp ecx, 0x7fff
ja 0x77ce519f
mov cx, word [edi]
add cx, cx
mov word [ebp - 0x3e], cx
mov dword [ebp - 0x3c], esi
mov dword [ebp + 8], ebx
mov ecx, dword [ebp + 0x24]
cmp ecx, ebx
jne 0x77cbb42e
xor ecx, ecx
mov dword [ebp + 0x18], ecx
mov dword [ebp - 0x34], ecx
test al, 1
jne 0x77ce51aa
lea ecx, [ebp + 8]
push ecx
lea ecx, [ebp + 0x18]
push ecx
push dword [ebp + 0x20]
lea ecx, [ebp + 0x10]
push ecx
lea ecx, [ebp - 0x40]
push ecx
push dword [ebp + 0xc]
push eax
call fcn.77cbf6c2
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jne 0x77cbf093
mov ecx, dword [ebp + 0x20]
cmp ecx, ebx
jne 0x77cbb44d
cmp word [ebp - 0x40], 2
jb 0x77cbf0a6
movzx eax, word [ebp - 0x40]
shr eax, 1
dec eax
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
mov eax, dword [ebp + 0x24]
cmp eax, ebx
jne 0x77cbb435
mov eax, dword [ebp + 0x1c]
cmp eax, ebx
je 0x77cbf0bd
mov ecx, dword [ebp + 0x10]
mov dword [eax], ecx
cmp dword [ebp - 0x20], ebx
jne 0x77ce5346
cmp dword [ebp - 0x24], ebx
jne 0x77ce5361
cmp dword [ebp - 0x28], ebx
jne 0x77ce536f
mov eax, dword [ebp - 0x1c]
call fcn.77cd5e80
ret 0x20
mov word [ebp - 0x3e], 0xfffe
jmp 0x77cbf043
mov esi, eax
push 0xfffffffffffffffe
pop edi
and esi, edi
lea eax, [ebp - 0x2c]
push eax
push esi
call fcn.77d1296e
test eax, eax
jne 0x77ce52cd
cmp dword [ebp - 0x2c], 5
jb 0x77ce51d3
cmp dword [ebp - 0x2c], 0xa
jbe 0x77ce52cd
mov eax, dword fs:[0x18]
mov ecx, dword [ebp + 0x18]
add ecx, 2
push ecx
push ebx
mov eax, dword [eax + 0x30]
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov dword [ebp - 0x20], eax
cmp eax, ebx
jne 0x77ce5200
mov dword [ebp - 0x1c], 8
jmp 0x77cbf0bd
mov dword [ebp - 4], ebx
lea ecx, [ebp + 8]
push ecx
lea ecx, [ebp + 0x18]
push ecx
push eax
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp + 0xc]
push esi
call fcn.77d106d3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], edi
jmp 0x77ce524f
cmp eax, ebx
je 0x77ce525a
cmp eax, 0xea
jne 0x77ce526f
cmp dword [ebp + 0x18], 0x7fff0000
jbe 0x77ce526f
mov dword [ebp - 0x1c], 0xd
jmp 0x77cbf0bd
cmp eax, ebx
jne 0x77ce52af
cmp dword [ebp + 0x10], 1
je 0x77ce5285
cmp dword [ebp + 0x10], 7
je 0x77ce5285
cmp dword [ebp + 0x10], 2
jne 0x77ce528f
cmp dword [ebp + 0x18], 2
jb 0x77ce528f
sub dword [ebp + 0x18], 2
mov eax, dword [ebp + 0x18]
cmp eax, dword [ebp - 0x34]
ja 0x77ce52a8
push eax
push dword [ebp - 0x20]
push dword [ebp + 0x20]
call sub.ntdll.dll_memcpy
add esp, 0xc
jmp 0x77ce52af
mov dword [ebp - 0x1c], 0xd
push dword [ebp - 0x20]
push ebx
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlFreeHeap]
mov dword [ebp - 0x20], ebx
jmp 0x77cbf083
mov dword [ebp - 4], 1
lea eax, [ebp + 8]
push eax
lea eax, [ebp + 0x18]
push eax
push dword [ebp + 0x20]
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp + 0xc]
push esi
call fcn.77d106d3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], edi
jmp 0x77ce5322
cmp dword [ebp - 0x1c], ebx
je 0x77ce5334
cmp dword [ebp - 0x1c], 0xea
jne 0x77cbf083
cmp dword [ebp + 0x18], 0x7fff0000
jbe 0x77cbf083
jmp 0x77ce5263
push dword [ebp - 0x20]
push ebx
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlFreeHeap]
jmp 0x77cbf0c6
lea eax, [ebp - 0x24]
push eax
call fcn.77cd6449
jmp 0x77cbf0cf
mov esi, 0x77d26580
push esi
call dword [sym.imp.ntdll.dll_RtlEnterCriticalSection]
push dword [ebp - 0x28]
call fcn.77cbf2f9
push esi
call dword [sym.imp.ntdll.dll_RtlLeaveCriticalSection]
jmp 0x77cbf0d8