Function at 0x68afff
Capabilities:
Access peb ldr_data
Get ntdll base address
Get number of processors
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x103b4409
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x105623f8]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x18], esi
mov dword [esi], 0x104ad85c
xor eax, eax
lea edi, [esi + 0xc]
mov dword [esi + 4], eax
mov byte [esi + 8], al
mov ecx, 7
xor edx, edx
mov dword [edi + 0x18], ecx
mov dword [edi + 0x14], eax
mov word [edi + 4], dx
mov byte [edi + 0x1c], al
lea ebx, [esi + 0x2c]
mov dword [ebx + 0x18], ecx
mov dword [ebx + 0x14], eax
mov word [ebx + 4], dx
mov dword [esp + 0x30], eax
mov byte [ebx + 0x1c], al
mov dword [esi + 0x4c], eax
mov byte [esi + 0x50], al
mov dword [esi + 0x54], eax
mov byte [esi + 0x58], al
mov dword [esi + 0x5c], eax
mov byte [esi + 0x60], al
mov dword [esi + 0x64], eax
mov byte [esi + 0x68], al
mov dword [esi + 0x84], ecx
xor ecx, ecx
mov dword [esi + 0x80], eax
mov word [esi + 0x70], cx
mov byte [esi + 0x88], al
mov dword [esi + 0xa4], 7
mov dword [esi + 0xa0], eax
mov word [esi + 0x90], dx
mov byte [esi + 0xa8], al
mov byte [esi + 0xac], al
mov byte [esi + 0xad], al
mov byte [esi + 0xae], al
mov byte [esi + 0xaf], al
mov byte [esi + 0xb0], al
mov byte [esi + 0xb1], al
mov dword [esi + 0xcc], 7
mov dword [esi + 0xc8], eax
mov word [esi + 0xb8], cx
mov byte [esi + 0xd0], al
mov byte [esi + 0xd4], al
mov byte [esi + 0xd5], al
mov dword [esi + 0xf0], 7
mov dword [esi + 0xec], eax
mov word [esi + 0xdc], dx
mov byte [esi + 0xf4], al
mov dword [esi + 0xf8], eax
mov byte [esi + 0xfc], al
mov dword [esi + 0x100], eax
mov byte [esi + 0x104], al
mov dword [esi + 0x108], eax
mov byte [esi + 0x10c], al
mov dword [esi + 0x128], 7
mov dword [esi + 0x124], eax
mov word [esi + 0x114], cx
mov byte [esi + 0x12c], al
mov ecx, esi
mov byte [esp + 0x30], 6
call fcn.006811af
mov eax, dword [ebp + 8]
mov edx, dword [eax + 8]
mov dword [esp + 0x20], edx
lea edx, [esp + 0x1c]
lea ecx, [esi + 4]
cmp ecx, edx
je 0x68b188
mov edx, dword [eax + 4]
mov dword [ecx], edx
add ecx, 4
lea edx, [esp + 0x20]
cmp ecx, edx
je 0x68b199
mov dl, byte [esp + 0x20]
mov byte [ecx], dl
add eax, 0xc
push eax
mov ecx, edi
call fcn.0058033f
mov edi, dword [ebp + 8]
lea eax, [edi + 0x2c]
push eax
mov ecx, ebx
call fcn.0058033f
mov ecx, dword [edi + 0x4c]
mov edx, dword [edi + 0x50]
lea ebx, [esp + 0x1c]
lea eax, [esi + 0x4c]
cmp eax, ebx
je 0x68b1c5
mov dword [eax], ecx
add eax, 4
lea ecx, [esp + 0x20]
cmp eax, ecx
je 0x68b1d2
mov byte [eax], dl
mov ecx, dword [edi + 0x54]
mov edx, dword [edi + 0x58]
lea ebx, [esp + 0x1c]
lea eax, [esi + 0x54]
cmp eax, ebx
je 0x68b1e5
mov dword [eax], ecx
add eax, 4
lea ecx, [esp + 0x20]
cmp eax, ecx
je 0x68b1f2
mov byte [eax], dl
mov ecx, dword [edi + 0x5c]
mov edx, dword [edi + 0x60]
lea ebx, [esp + 0x1c]
lea eax, [esi + 0x5c]
cmp eax, ebx
je 0x68b205
mov dword [eax], ecx
add eax, 4
lea ecx, [esp + 0x20]
cmp eax, ecx
je 0x68b212
mov byte [eax], dl
mov ecx, dword [edi + 0x64]
mov edx, dword [edi + 0x68]
lea ebx, [esp + 0x1c]
lea eax, [esi + 0x64]
cmp eax, ebx
je 0x68b225
mov dword [eax], ecx
add eax, 4
lea ecx, [esp + 0x20]
cmp eax, ecx
je 0x68b232
mov byte [eax], dl
lea edx, [edi + 0x6c]
push edx
lea ecx, [esi + 0x6c]
call fcn.0058033f
lea eax, [edi + 0x8c]
push eax
lea ecx, [esi + 0x8c]
call fcn.0058033f
mov cx, word [edi + 0xac]
lea edx, [esp + 0x14]
lea eax, [esi + 0xac]
cmp eax, edx
je 0x68b267
mov byte [eax], cl
inc eax
lea edx, [esp + 0x15]
cmp eax, edx
je 0x68b272
mov byte [eax], ch
mov cx, word [edi + 0xae]
lea edx, [esp + 0x14]
lea eax, [esi + 0xae]
cmp eax, edx
je 0x68b289
mov byte [eax], cl
inc eax
lea edx, [esp + 0x15]
cmp eax, edx
je 0x68b294
mov byte [eax], ch
mov cx, word [edi + 0xb0]
lea edx, [esp + 0x14]
lea eax, [esi + 0xb0]
cmp eax, edx
je 0x68b2ab
mov byte [eax], cl
inc eax
lea edx, [esp + 0x15]
cmp eax, edx
je 0x68b2b6
mov byte [eax], ch
lea eax, [edi + 0xb4]
push eax
lea ecx, [esi + 0xb4]
call fcn.0058033f
mov cx, word [edi + 0xd4]
lea edx, [esp + 0x14]
lea eax, [esi + 0xd4]
cmp eax, edx
je 0x68b2df
mov byte [eax], cl
inc eax
lea edx, [esp + 0x15]
cmp eax, edx
je 0x68b2ea
mov byte [eax], ch
lea eax, [edi + 0xd8]
push eax
lea ecx, [esi + 0xd8]
call fcn.0058033f
mov ecx, dword [edi + 0xf8]
mov edx, dword [edi + 0xfc]
lea ebx, [esp + 0x1c]
lea eax, [esi + 0xf8]
cmp eax, ebx
je 0x68b318
mov dword [eax], ecx
add eax, 4
lea ecx, [esp + 0x20]
cmp eax, ecx
je 0x68b325
mov byte [eax], dl
mov ecx, dword [edi + 0x100]
mov edx, dword [edi + 0x104]
lea ebx, [esp + 0x1c]
lea eax, [esi + 0x100]
cmp eax, ebx
je 0x68b341
mov dword [eax], ecx
add eax, 4
lea ecx, [esp + 0x20]
cmp eax, ecx
je 0x68b34e
mov byte [eax], dl
mov ecx, dword [edi + 0x108]
mov edx, dword [edi + 0x10c]
lea ebx, [esp + 0x1c]
lea eax, [esi + 0x108]
cmp eax, ebx
je 0x68b36a
mov dword [eax], ecx
add eax, 4
lea ecx, [esp + 0x20]
cmp eax, ecx
je 0x68b377
mov byte [eax], dl
add edi, 0x110
push edi
lea ecx, [esi + 0x110]
call fcn.0058033f
mov eax, esi
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4