Function at 0x6b7e50
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005f933
mov eax, dword fs:[0]
push eax
push ebx
push esi
push edi
mov eax, dword [0x100746ac]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov eax, dword [0x10074000]
mov edx, dword [eax + 0xc]
mov ecx, 0x10074000
call edx
add eax, 0x10
mov dword [esi], eax
xor ebx, ebx
mov dword [ebp - 4], ebx
mov eax, dword [0x10074000]
mov edx, dword [eax + 0xc]
mov ecx, 0x10074000
call edx
add eax, 0x10
mov dword [esi + 4], eax
mov byte [ebp - 4], 1
mov eax, dword [0x10074000]
mov edx, dword [eax + 0xc]
mov ecx, 0x10074000
call edx
add eax, 0x10
mov dword [esi + 8], eax
mov byte [ebp - 4], 2
mov eax, dword [0x10074000]
mov edx, dword [eax + 0xc]
mov ecx, 0x10074000
call edx
add eax, 0x10
mov dword [esi + 0xc], eax
mov eax, 0xf
mov dword [esi + 0x28], eax
mov dword [esi + 0x24], ebx
mov byte [esi + 0x14], bl
mov dword [esi + 0x44], eax
mov dword [esi + 0x40], ebx
mov byte [esi + 0x30], bl
mov dword [esi + 0x60], eax
mov dword [esi + 0x5c], ebx
mov byte [esi + 0x4c], bl
mov dword [esi + 0x7c], eax
mov dword [esi + 0x78], ebx
mov byte [esi + 0x68], bl
mov dword [esi + 0x98], eax
mov dword [esi + 0x94], ebx
mov byte [esi + 0x84], bl
mov byte [ebp - 4], 8
mov ecx, dword [esi]
mov edi, dword [ecx - 0x10]
cmp dword [ecx - 0xc], ebx
lea eax, [ecx - 0x10]
je 0x6b7f6b
cmp dword [eax + 0xc], ebx
lea edx, [eax + 0xc]
jge 0x6b7f47
cmp dword [ecx - 8], ebx
jge 0x6b7f3b
push 0x80070057
call fcn.0069abd0
mov dword [ecx - 0xc], ebx
mov eax, dword [esi]
xor ecx, ecx
mov word [eax], cx
jmp 0x6b7f6b
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x6b7f5d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [edi]
mov eax, dword [edx + 0xc]
mov ecx, edi
call eax
add eax, 0x10
mov dword [esi], eax
mov ecx, dword [esi + 4]
mov edi, dword [ecx - 0x10]
cmp dword [ecx - 0xc], ebx
lea eax, [ecx - 0x10]
je 0x6b7fc2
cmp dword [eax + 0xc], ebx
lea edx, [eax + 0xc]
jge 0x6b7f9d
cmp dword [ecx - 8], ebx
jge 0x6b7f90
push 0x80070057
call fcn.0069abd0
mov dword [ecx - 0xc], ebx
mov ecx, dword [esi + 4]
xor edx, edx
mov word [ecx], dx
jmp 0x6b7fc2
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x6b7fb3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [edi]
mov eax, dword [edx + 0xc]
mov ecx, edi
call eax
add eax, 0x10
mov dword [esi + 4], eax
mov ecx, dword [esi + 8]
mov edi, dword [ecx - 0x10]
cmp dword [ecx - 0xc], ebx
lea eax, [ecx - 0x10]
je 0x6b8019
cmp dword [eax + 0xc], ebx
lea edx, [eax + 0xc]
jge 0x6b7ff4
cmp dword [ecx - 8], ebx
jge 0x6b7fe7
push 0x80070057
call fcn.0069abd0
mov dword [ecx - 0xc], ebx
mov ecx, dword [esi + 8]
xor edx, edx
mov word [ecx], dx
jmp 0x6b8019
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x6b800a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [edi]
mov eax, dword [edx + 0xc]
mov ecx, edi
call eax
add eax, 0x10
mov dword [esi + 8], eax
mov ecx, dword [esi + 0xc]
mov edi, dword [ecx - 0x10]
cmp dword [ecx - 0xc], ebx
lea eax, [ecx - 0x10]
je 0x6b8070
cmp dword [eax + 0xc], ebx
lea edx, [eax + 0xc]
jge 0x6b804b
cmp dword [ecx - 8], ebx
jge 0x6b803e
push 0x80070057
call fcn.0069abd0
mov dword [ecx - 0xc], ebx
mov ecx, dword [esi + 0xc]
xor edx, edx
mov word [ecx], dx
jmp 0x6b8070
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x6b8061
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [edi]
mov eax, dword [edx + 0xc]
mov ecx, edi
call eax
add eax, 0x10
mov dword [esi + 0xc], eax
mov ecx, esi
mov dword [esi + 0x10], ebx
call fcn.006c99e0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4