Function at 0x10026790
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10059138
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x1006c3ac]
xor eax, esp
push eax
lea eax, [esp + 0x38]
mov dword fs:[0], eax
push 0x1006f354
mov dword [esp + 0x30], 0x1006f354
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [esp + 0x30], 1
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [esp + 0x40], edi
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x18], edi
je 0x10026a78
cmp dword [esp + 0x18], eax
jb 0x1002680c
call fcn.1003f767
mov ebx, dword [esi + 0xc]
lea eax, [esp + 0x24]
add ebx, edi
push eax
call fcn.10026dc0
mov eax, dword [esp + 0x24]
mov ebx, dword [0x1006f34c]
test eax, eax
je 0x10026831
cmp eax, dword [0x1006f334]
je 0x10026836
call fcn.1003f767
cmp dword [esp + 0x28], ebx
jne 0x10026a4d
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp dword [esp + 0x18], ecx
jb 0x10026862
call fcn.1003f767
mov ebx, dword [esi + 0xc]
mov ecx, dword [esi + 0x10]
sub ecx, ebx
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x1c], ebx
cmp dword [esp + 0x18], eax
jb 0x1002688a
call fcn.1003f767
mov ecx, dword [esi + 0xc]
add ecx, edi
call fcn.10026cc0
mov ecx, dword [edi + ebx]
mov edx, eax
mov esi, dword [edx]
lea eax, [ecx - 0x10]
sub esi, 0x10
mov dword [esp + 0x14], edx
cmp eax, esi
je 0x100268f7
cmp dword [esi + 0xc], 0
jl 0x100268e6
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x100268e6
call fcn.10002fe0
mov dword [esp + 0x20], eax
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x100268d7
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x14]
add ecx, 0x10
mov dword [edx], ecx
jmp 0x100268f7
mov ebx, dword [ecx - 0xc]
mov eax, dword [esp + 0x14]
push ecx
call fcn.10002f40
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
mov ecx, dword [edi + ebx + 4]
mov esi, dword [eax + 4]
add eax, 4
add ecx, 0xfffffff0
sub esi, 0x10
cmp ecx, esi
je 0x10026962
cmp dword [esi + 0xc], 0
jl 0x10026951
mov edx, dword [ecx]
cmp edx, dword [esi]
jne 0x10026951
mov eax, ecx
call fcn.10002fe0
mov dword [esp + 0x20], eax
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002693f
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
add ecx, 0x10
add eax, 4
mov dword [eax], ecx
jmp 0x10026962
mov ecx, dword [edi + ebx + 4]
mov ebx, dword [ecx - 0xc]
push ecx
call fcn.10002f40
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
mov ecx, dword [edi + ebx + 8]
mov esi, dword [eax + 8]
add eax, 8
add ecx, 0xfffffff0
sub esi, 0x10
cmp ecx, esi
je 0x100269cd
cmp dword [esi + 0xc], 0
jl 0x100269bc
mov edx, dword [ecx]
cmp edx, dword [esi]
jne 0x100269bc
mov eax, ecx
call fcn.10002fe0
mov dword [esp + 0x20], eax
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x100269aa
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
add ecx, 0x10
add eax, 8
mov dword [eax], ecx
jmp 0x100269cd
mov ecx, dword [edi + ebx + 8]
mov ebx, dword [ecx - 0xc]
push ecx
call fcn.10002f40
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [edi + ebx + 0xc]
mov dword [ecx + 0xc], edx
mov eax, dword [edi + ebx + 0x10]
mov esi, dword [ecx + 0x10]
add ecx, 0x10
add eax, 0xfffffff0
sub esi, 0x10
cmp eax, esi
je 0x10026a3f
cmp dword [esi + 0xc], 0
jl 0x10026a2c
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x10026a2c
call fcn.10002fe0
mov dword [esp + 0x20], eax
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10026a1a
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x14]
add ecx, 0x10
add eax, 0x10
mov dword [eax], ecx
jmp 0x10026a3f
mov eax, dword [edi + ebx + 0x10]
mov ebx, dword [eax - 0xc]
push eax
mov eax, ecx
call fcn.10002f40
mov ebx, dword [esp + 0x1c]
mov edx, dword [edi + ebx + 0x14]
mov eax, dword [esp + 0x14]
mov esi, dword [ebp + 8]
mov dword [eax + 0x14], edx
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov ebx, dword [esp + 0x18]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
inc ebx
add eax, edx
add edi, 0x18
mov dword [esp + 0x18], ebx
cmp ebx, eax
jb 0x10026801
push 0x1006f354
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret