Function at 0x6fdc6c
Capabilities:
Check for peb beingdebugged flag

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffa0
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x60], eax
mov eax, dword [0x83a4b8]
lea ebx, [ebp - 0x4c]
xor edx, edx
push ebp
push 0x6fde2d
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, byte [eax + 0x757d]
mov byte [ebx], dl
mov dl, byte [eax + 0x757e]
mov byte [ebx + 1], dl
mov dl, byte [eax + 0x757f]
mov byte [ebx + 2], dl
mov dl, byte [eax + 0x7580]
mov byte [ebx + 3], dl
mov dl, byte [eax + 0x7581]
mov byte [ebx + 4], dl
mov dl, byte [eax + 0x7582]
mov byte [ebx + 5], dl
mov dl, byte [eax + 0x7583]
mov byte [ebx + 6], dl
mov dl, byte [eax + 0x7584]
mov byte [ebx + 7], dl
mov dl, byte [eax + 0x7585]
mov byte [ebx + 8], dl
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebx + 9], edx
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebx + 0xd], edx
mov dl, byte [eax + 0x7590]
mov byte [ebx + 0x11], dl
mov dl, byte [eax + 0x7591]
mov byte [ebx + 0x12], dl
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebx + 0x13], edx
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebx + 0x17], edx
mov dl, byte [eax + 0x759c]
mov byte [ebx + 0x1b], dl
mov dl, byte [eax + 0x759d]
mov byte [ebx + 0x1c], dl
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebx + 0x1d], edx
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebx + 0x21], edx
mov dl, byte [eax + 0x75a8]
mov byte [ebx + 0x25], dl
mov dl, byte [eax + 0x75a9]
mov byte [ebx + 0x26], dl
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebx + 0x27], edx
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebx + 0x2b], edx
mov dl, byte [eax + 0x75b4]
mov byte [ebx + 0x2f], dl
mov dl, byte [eax + 0x75b5]
mov byte [ebx + 0x30], dl
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebx + 0x31], edx
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebx + 0x35], edx
mov dl, byte [eax + 0x75c0]
mov byte [ebx + 0x39], dl
mov dl, byte [eax + 0x75c1]
mov byte [ebx + 0x3a], dl
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebx + 0x3b], edx
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebx + 0x3f], edx
mov dl, byte [eax + 0x75dd]
mov byte [ebx + 0x43], dl
mov edx, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebx + 0x44], edx
mov eax, dword [eax + reloc.kernel32.dll_DeleteCriticalSection]
mov dword [ebx + 0x48], eax
push 0
push 0
push 0
lea eax, [ebp - 0x5c]
push eax
xor ecx, ecx
xor edx, edx
mov ax, 0x5f5
call fcn.0049a678
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
lea esi, [ebp - 0x5c]
lea edi, reloc.kernel32.dll_DeleteCriticalSection
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x60]
mov eax, ebx
mov edx, 0x4c
call fcn.0049ab8c
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
lea edx, reloc.kernel32.dll_DeleteCriticalSection
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov ebx, dword [eax]
call dword [ebx + 0xf8]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6fde34
lea eax, [ebp - 0x60]
call fcn.00405140
ret