Function at 0x6c9080
Capabilities:
Access peb ldr_data
Read file on windows

Disassembly:
push 0xffffffffffffffff
push 0x75fae9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2e0
push ebx
mov ebx, ecx
mov ecx, dword [ebx + 8]
push ebp
mov eax, dword [ebx + 0xc]
push esi
lea esi, [ebx + 4]
push edi
push eax
push ecx
mov ecx, esi
mov dword [esp + 0x20], ebx
call fcn.006d8d80
lea ecx, [ebx + 0x14]
call fcn.006d8300
mov edi, dword [esp + 0x300]
xor ebp, ebp
lea eax, [esp + 0x34]
push ebp
push eax
lea ecx, [esp + 0x18]
push 4
push ecx
push edi
mov dword [esp + 0x24], ebp
call dword [sym.imp.kernel32.dll_ReadFile]
mov dl, byte [esp + 0x17]
mov dword [esp + 0x28], ebp
mov byte [esp + 0x24], dl
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], ebp
mov dword [esp + 0x2f8], ebp
mov ebp, dword [esp + 0x10]
test ebp, ebp
jle 0x6c9341
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0xc]
mov edi, dword [ebx + 8]
sub ecx, eax
sar ecx, 2
cmp ecx, ebp
mov dword [esp + 0x1c], 0
jae 0x6c91d7
mov ecx, esi
call fcn.0045f660
cmp ebp, eax
jae 0x6c913b
mov ecx, esi
call fcn.0045f660
mov ebx, eax
jmp 0x6c913d
mov ebx, ebp
mov ecx, esi
call fcn.0045f660
add eax, ebx
mov dword [esp + 0x40], eax
jns 0x6c914e
xor eax, eax
lea edx, [eax*4]
push edx
call fcn.00726f70
add esp, 4
mov ebx, eax
mov eax, dword [esi + 4]
mov ecx, esi
push ebx
push edi
push eax
call fcn.00642560
lea ecx, [esp + 0x1c]
mov dword [esp + 0x3c], eax
push ecx
push ebp
push eax
mov ecx, esi
call fcn.006d7730
mov edx, dword [esp + 0x3c]
mov ecx, dword [esi + 8]
lea eax, [edx + ebp*4]
push eax
push ecx
push edi
mov ecx, esi
call fcn.00642560
mov edx, dword [esi + 8]
mov eax, dword [esi + 4]
push edx
push eax
mov ecx, esi
call fcn.006bc100
mov eax, dword [esi + 4]
push eax
call fcn.00726ea6
mov ecx, dword [esp + 0x44]
add esp, 4
lea edx, [ebx + ecx*4]
mov ecx, esi
mov dword [esi + 0xc], edx
call fcn.0045f660
add eax, ebp
mov ebp, dword [esp + 0x10]
mov dword [esi + 4], ebx
lea eax, [ebx + eax*4]
mov ebx, dword [esp + 0x18]
mov dword [esi + 8], eax
jmp 0x6c927d
mov ecx, eax
sub ecx, edi
sar ecx, 2
cmp ecx, ebp
jae 0x6c9235
lea ecx, [ebp*4]
mov dword [esp + 0x18], ecx
add ecx, edi
push ecx
push eax
push edi
mov ecx, esi
call fcn.00642560
mov eax, dword [esi + 8]
lea edx, [esp + 0x1c]
mov ecx, eax
push edx
sub ecx, edi
sar ecx, 2
sub ebp, ecx
mov ecx, esi
push ebp
push eax
call fcn.006d7730
mov eax, dword [esi + 8]
cmp edi, eax
je 0x6c9227
mov edx, dword [esp + 0x1c]
mov dword [edi], edx
add edi, 4
cmp edi, eax
jne 0x6c921a
mov eax, dword [esp + 0x18]
mov ecx, dword [esi + 8]
add ecx, eax
mov dword [esi + 8], ecx
jmp 0x6c9279
test ebp, ebp
jbe 0x6c927d
shl ebp, 2
push eax
push eax
sub eax, ebp
mov ecx, esi
push eax
call fcn.00642560
mov ecx, dword [esi + 8]
mov eax, ecx
sub eax, ebp
cmp edi, eax
je 0x6c9262
mov edx, dword [eax - 4]
sub eax, 4
sub ecx, 4
cmp eax, edi
mov dword [ecx], edx
jne 0x6c9253
lea eax, [edi + ebp]
cmp edi, eax
je 0x6c9276
mov ecx, dword [esp + 0x1c]
mov dword [edi], ecx
add edi, 4
cmp edi, eax
jne 0x6c9269
add dword [esi + 8], ebp
mov ebp, dword [esp + 0x10]
mov eax, dword [ebx + 8]
lea edx, [esp + 0x34]
push 0
lea ecx, [ebp*4]
push edx
mov edx, dword [esp + 0x308]
push ecx
push eax
push edx
call dword [sym.imp.kernel32.dll_ReadFile]
lea eax, [esp + 0x24]
mov ecx, ebx
push eax
call fcn.006e2060
test eax, eax
jne 0x6c92e0
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
push ecx
push edx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x300], 0xffffffff
call fcn.006bc100
mov eax, dword [esp + 0x28]
push eax
call fcn.00726ea6
add esp, 4
xor eax, eax
jmp 0x6c94a0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x28]
cmp dword [edx + ecx*4], 0x150
jne 0x6c92f9
mov eax, dword [ebx + 8]
cmp dword [eax], 6
je 0x6c933a
mov eax, dword [esi + 8]
mov ecx, dword [esi + 4]
push eax
push ecx
mov ecx, esi
call fcn.006d8d80
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
push eax
push ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x300], 0xffffffff
call fcn.006bc100
mov edx, dword [esp + 0x28]
push edx
call fcn.00726ea6
add esp, 4
xor eax, eax
jmp 0x6c94a0
mov edi, dword [esp + 0x300]
lea eax, [esp + 0x34]
push 0
push eax
lea ecx, [esp + 0x40]
push 4
push ecx
push edi
call dword [sym.imp.kernel32.dll_ReadFile]
lea edx, [esp + 0x17]
lea ecx, [esp + 0x4c]
push edx
call fcn.006b8ea0
lea eax, [esp + 0x23]
lea ecx, [esp + 0x5c]
push eax
mov byte [esp + 0x2fc], 1
call fcn.006b8ea0
lea ecx, [esp + 0x21]
mov byte [esp + 0x2f8], 2
push ecx
lea ecx, [esp + 0x70]
call fcn.006b8ea0
push fcn.00404460
push 0x4b95f0
push 0xb
lea edx, [esp + 0x88]
push 0x10
push edx
mov byte [esp + 0x30c], 3
call fcn.00727513
lea eax, [esp + 0x22]
lea ecx, [esp + 0x12c]
push eax
mov byte [esp + 0x2fc], 4
call fcn.006b8ea0
lea ecx, [esp + 0x20]
mov byte [esp + 0x2f8], 5
push ecx
lea ecx, [esp + 0x140]
call fcn.006b8ea0
mov eax, dword [esp + 0x38]
xor ebp, ebp
test eax, eax
mov byte [esp + 0x2f8], 7
jle 0x6c9476
mov eax, dword [esp + 0x10]
xor esi, esi
test eax, eax
jle 0x6c9425
mov edx, dword [esp + 0x28]
mov eax, dword [ebx + 8]
mov ecx, dword [edx + esi*4]
mov eax, dword [eax + esi*4]
lea edx, [esp + ecx + 0x48]
mov ecx, ebx
push edx
push eax
push edi
call fcn.006e1e30
mov eax, dword [esp + 0x10]
inc esi
cmp esi, eax
jl 0x6c9401
mov ecx, dword [esp + 0x48]
lea edx, [esp + 0x48]
lea eax, [esp + 0x18]
mov dword [esp + 0x18], ecx
push edx
push eax
lea ecx, [esp + 0x1a0]
call fcn.006d1080
lea ecx, [esp + 0x40]
push eax
push ecx
lea ecx, [ebx + 0x14]
mov byte [esp + 0x300], 8
call fcn.006d0f90
lea ecx, [esp + 0x19c]
mov byte [esp + 0x2f8], 7
call fcn.006ce630
mov eax, dword [esp + 0x38]
inc ebp
cmp ebp, eax
jl 0x6c93f7
lea ecx, [esp + 0x48]
mov byte [esp + 0x2f8], 0
call fcn.006ce630
lea ecx, [esp + 0x24]
mov dword [esp + 0x2f8], 0xffffffff
call fcn.005ba330
mov eax, 1
mov ecx, dword [esp + 0x2f0]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x2ec
ret 4