Function at 0x770ca0
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x38
mov esi, ecx
mov edi, dword [ebp + 8]
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], 0x771170
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
mov ebx, dword [esi]
push ebx
call fcn.00797f30
add esp, 4
add eax, ebx
add eax, 0xa
mov word [edi], 7
mov dword [ebp - 0x2c], eax
mov dword [edi + 2], eax
lea eax, [edi + 6]
mov ecx, dword [esi + 0x30]
mov edx, dword [ebp + 0xc]
add edx, 0xfffffffa
push edx
push eax
call fcn.00771e10
lea ecx, [edi + eax]
add ecx, 6
mov eax, dword [esi]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], ecx
mov ecx, dword [esi + 0x2c]
test ecx, ecx
je 0x770edc
mov eax, dword [ecx]
lea ebx, [ebp - 0x44]
lea edx, [ebp - 0x20]
push ebx
push edx
call dword [eax + 8]
mov dword [ebp - 0x28], 0
add edi, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x24]
sub edi, ecx
lea eax, [ebp - 0x28]
push eax
push edi
push dword [esi]
push ecx
call fcn.00797fa0
add esp, 0x10
mov ecx, dword [esi + 0x30]
push ebx
call fcn.00771d40
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 1
lea ecx, [ebp - 0x20]
push ebx
call fcn.007c7480
lea ecx, [ebp - 0x20]
push dword [ebp - 0x30]
push dword [ebp - 0x24]
call fcn.007c74c0
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
sub edx, eax
je 0x770dce
mov esi, edx
mov ecx, edx
and esi, 7
je 0x770d97
and ecx, 0xfffffff8
nop dword [eax + eax]
mov byte [eax], 0
inc eax
dec esi
jne 0x770d90
cmp edx, 8
jb 0x770dce
xor edx, edx
nop
mov byte [eax + edx], 0
mov byte [eax + edx + 1], 0
mov byte [eax + edx + 2], 0
mov byte [eax + edx + 3], 0
mov byte [eax + edx + 4], 0
mov byte [eax + edx + 5], 0
mov byte [eax + edx + 6], 0
mov byte [eax + edx + 7], 0
add edx, 8
cmp ecx, edx
jne 0x770da0
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
sub edx, eax
je 0x770e31
mov esi, edx
mov ecx, edx
and esi, 7
je 0x770df7
and ecx, 0xfffffff8
nop word cs:[eax + eax]
mov byte [eax], 0
inc eax
dec esi
jne 0x770df0
cmp edx, 8
jb 0x770e2e
xor edx, edx
nop
mov byte [eax + edx], 0
mov byte [eax + edx + 1], 0
mov byte [eax + edx + 2], 0
mov byte [eax + edx + 3], 0
mov byte [eax + edx + 4], 0
mov byte [eax + edx + 5], 0
mov byte [eax + edx + 6], 0
mov byte [eax + edx + 7], 0
add edx, 8
cmp ecx, edx
jne 0x770e00
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x770ec6
mov ecx, dword [ebp - 0x38]
sub ecx, eax
je 0x770eba
mov edi, ecx
mov esi, eax
mov edx, ecx
and edi, 7
je 0x770e67
mov edx, ecx
and edx, 0xfffffff8
mov esi, eax
nop word cs:[eax + eax]
mov byte [esi], 0
inc esi
dec edi
jne 0x770e60
cmp ecx, 8
jb 0x770ebc
xor edi, edi
nop
mov byte [esi + edi], 0
mov byte [esi + edi + 1], 0
mov byte [esi + edi + 2], 0
mov byte [esi + edi + 3], 0
mov byte [esi + edi + 4], 0
mov byte [esi + edi + 5], 0
mov byte [esi + edi + 6], 0
mov byte [esi + edi + 7], 0
add edi, 8
cmp edx, edi
jne 0x770e70
cmp ecx, 0x1000
jb 0x770ebc
mov edx, dword [eax - 4]
add eax, 0xfffffffc
sub eax, edx
cmp eax, 0x20
jae 0x770ee1
add ecx, 0x23
mov eax, edx
jmp 0x770ebc
xor ecx, ecx
push ecx
push eax
call fcn.008ea1ad
add esp, 8
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
mov eax, dword [ebp - 0x2c]
add esp, 0x38
pop esi
pop edi
pop ebx
pop ebp
ret 8
call fcn.008ebd8d
mov dword [ebp - 0x10], 0
call fcn.008cd651
nop dword [eax]
push ebp
sub esp, 0x10
add ebp, 0xc
call fcn.00901a00
nop dword [eax]
push ebp
sub esp, 0x10
add ebp, 0xc
lea ecx, [ebp - 0x44]
call fcn.006c40c0
add esp, 0x10
pop ebp
ret