Function at 0x6f2940
Capabilities:
Access peb ldr_data

Disassembly:
push esi
pushfd
mov esi, dword [0x1560740]
push ecx
mov ecx, dword [0x671512]
rol esi, cl
pop ecx
popfd
xchg dword [esp], esi
jmp 0x6f2947
push 0xffffffffffffffff
jmp 0x4022b2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
mov eax, dword [esp + 0x24]
push ebx
push ebp
push esi
push edi
mov esi, ecx
push eax
mov dword [esp + 0x14], esi
call fcn.006d5f10
xor edx, edx
mov dword [esi], 0x8721a0
xor eax, eax
lea edi, [esi + 0x5e0]
mov ecx, 6
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x30]
mov ebp, dword [eax*4 + 0xa9b0c8]
movsx ebx, word [ebp + 0x4a]
mov ecx, 5
mov dword [esi + 0x594], ecx
mov dword [esi + 0x590], ecx
lea ecx, [esi + 0x610]
mov dword [ecx], edx
mov dword [ecx + 4], edx
mov dword [ecx + 8], edx
lea ecx, [esi + 0x61c]
mov dword [ecx], edx
mov dword [ecx + 4], edx
mov dword [ecx + 8], edx
mov byte [esi + 0x63d], dl
mov dword [esi + 0x5a0], edx
mov dword [esi + 0x5a4], edx
mov dword [esi + 0x5a8], edx
mov ecx, dword [0xb7cb84]
mov dword [esi + 0x600], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], edx
push eax
mov ecx, esi
mov dword [esp + 0x2c], edx
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], edx
call fcn.006d6a40
lea edx, [esi + 0x5b0]
mov edi, edx
xor eax, eax
mov ecx, 0xc
push edx
rep stosd dword es:[edi], eax
mov edx, dword [esi + 0x18]
push edx
call fcn.004c5440
movzx eax, bl
imul eax, eax, 0xe0
lea eax, [eax + 0xc2b9dc]
add esp, 8
mov dword [esi + 0x384], eax
mov eax, dword [eax + 0xd0]
push ebx
mov ecx, 0xc2b9c8
mov dword [esi + 0x38c], eax
call fcn.006f52d0
push ebx
mov ecx, 0xc2b9c8
mov dword [esi + 0x388], eax
call fcn.006f5300
push 1
lea ecx, [esi + 0x437]
push ecx
lea edx, [esi + 0x436]
mov dword [esi + 0x5f8], eax
push edx
lea eax, [esi + 0x435]
push eax
lea ecx, [esi + 0x434]
push ecx
mov ecx, ebp
call fcn.004c8500
mov ecx, dword [esi + 0x384]
mov edx, dword [ecx + 4]
mov dword [esi + 0x8c], edx
fld dword [ecx + 0xc]
fmul dword [0x858b8c]
lea eax, [ecx + 0x14]
lea edx, [esi + 0xa4]
fstp dword [esi + 0x90]
mov edi, dword [eax]
mov dword [edx], edi
mov edi, dword [eax + 4]
mov dword [edx + 4], edi
mov eax, dword [eax + 8]
mov dword [edx + 8], eax
mov dword [esi + 0x9c], 0x3dcccccd
mov edx, dword [ecx + 0x24]
mov dword [esi + 0xa0], edx
fld dword [ecx + 0x10]
fcomp dword [0x858c58]
fnstsw ax
test ah, 0x41
jne 0x6f2afe
fld dword [ecx + 0x10]
fdiv dword [0x872184]
fmul dword [0x858b8c]
fstp dword [esi + 0x98]
jmp 0x6f2b07
mov eax, dword [ecx + 0x10]
mov dword [esi + 0x98], eax
mov ecx, dword [esi + 0x40]
mov dl, byte [esi + 0x5ac]
xor ebx, ebx
or ecx, 0x8000100
mov dword [esi + 0x40], ecx
or dl, 7
xor eax, eax
mov dword [esi + 0x494], ebx
mov dword [esi + 0x49c], ebx
mov dword [esi + 0x4a0], ebx
mov dword [esi + 0x58c], ebx
mov byte [esi + 0x63c], bl
mov dword [esi + 0x640], 0x40e00000
mov dword [esi + 0x604], ebx
mov byte [esi + 0x5ac], dl
mov dword [esi + 0x5fc], 0xc61c3ff6
mov dword [esi + 0x608], ebx
mov dword [esi + 0x60c], ebx
mov word [esi + 0x644], bx
lea edi, [esi + 0x748]
mov ecx, 0x20
rep stosd dword es:[edi], eax
cmp word [esi + 0x22], 0x1e4
mov byte [esi + 0x4ab], 0x14
mov byte [esi + 0x5ea], 2
jne 0x6f2bb3
mov dword [esi + 0x5e0], 0x3ea0d97c
mov dword [esi + 0x5e4], 0xbea0d97c
mov word [esi + 0x5e8], 4
jmp 0x6f2bd0
mov dword [esi + 0x5e0], 0x3f20d97c
mov dword [esi + 0x5e4], 0xbf20d97c
mov word [esi + 0x5e8], 3
push esi
lea ecx, [esi + 0x138]
call fcn.004f7670
mov ecx, dword [esp + 0x20]
pop edi
mov dword [esi + 0x62c], ebx
mov dword [esi + 0x628], ebx
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1c
ret 8