Function at 0x6b8900
Capabilities:
Terminate process

Disassembly:
mov eax, dword [0x6b21d4]
test eax, eax
jne case.0x6b8f5f.0
push ebp
push esi
mov dword [0x6b21d4], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
add dword [0x6b447c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor eax, dword [0x6b447c]
and eax, 0x3fdffffe
or eax, 0x200001
mov dword [0x6b447c], eax
xor eax, eax
push eax
mov dword [eax*4 + 0x6b44a0], 0
call fcn.006b9910
add esp, 4
cmp eax, 0x64
jl 0x6b8942
push 0x6b4460
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x6a5afc
call esi
push 0x6a5aec
call esi
push 0x6a5ae0
call esi
push 0x6a5ad4
call esi
push 0x6a5ac8
call esi
mov eax, dword [0x6a5a68]
mov ebp, dword [0x6a5a6c]
mov cx, word [ebp]
add ebp, 8
mov word [0x6b278c], cx
mov si, word [ebp - 6]
mov ecx, dword [0x6b278c]
mov word [0x6b278e], si
mov edx, dword [ebp - 4]
and ecx, 0xffff
cmp ecx, 0x654d
mov dword [0x6b2784], edx
mov dword [0x6a5a6c], ebp
jg 0x6b8c3b
je 0x6b8c24
cmp ecx, 0x1992
jg 0x6b8b4a
je 0x6b8b2b
cmp ecx, 0x704
jg 0x6b8ad3
je 0x6b8aaf
cmp ecx, 0xe4
je 0x6b8a7b
cmp ecx, 0x342
je 0x6b8a6e
cmp ecx, 0x611
jne 0x6b8994
xor ecx, ecx
mov cx, si
cmp ecx, 0x68
je 0x6b8a3c
cmp ecx, 0x28e
jne 0x6b8a51
mov ecx, dword [eax]
and ecx, 0xffff
jmp 0x6b8a44
mov ecx, dword [eax]
and ecx, 0xff
mov dword [eax], ecx
mov edx, dword [0x6b2784]
mov eax, dword [0x6a5a68]
mov ecx, dword [eax]
add eax, 4
test ecx, ecx
mov dword [0x6a5a68], eax
je 0x6b8994
mov dword [0x6a5a6c], edx
jmp 0x6b8994
xor ecx, ecx
mov cx, si
mov dword [eax + ecx*4], edx
jmp 0x6b898f
mov ecx, dword [eax]
push ecx
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [eax + 0xc]
push ecx
mov ecx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
push ecx
push eax
call edx
mov ecx, dword [0x6a5a68]
mov dword [ecx + 0x14], eax
mov eax, dword [0x6a5a68]
add eax, 0x14
mov dword [0x6a5a68], eax
jmp 0x6b8994
push esi
push edx
call fcn.006b8850
mov dx, word [0x6b278e]
inc eax
push eax
mov eax, dword [0x6b2784]
push edx
push eax
call fcn.006b87f0
add esp, 0x14
jmp 0x6b898f
sub ecx, 0x96f
je 0x6b8f42
sub ecx, 0x723
je 0x6b8b14
sub ecx, 0x77
jne 0x6b8994
mov ecx, dword [eax]
mov eax, dword [eax + 4]
push ecx
push eax
call edx
mov ecx, dword [0x6a5a68]
mov dword [ecx + 4], eax
mov eax, dword [0x6a5a68]
add eax, 4
mov dword [0x6a5a68], eax
jmp 0x6b8994
push esi
push edx
call fcn.006b8850
mov ecx, dword [0x6a5a68]
add esp, 8
add dword [ecx], eax
jmp 0x6b898f
mov eax, dword [eax]
push eax
push esi
push edx
call fcn.006b87f0
mov eax, dword [0x6a5a68]
add esp, 0xc
add eax, 4
mov dword [0x6a5a68], eax
jmp 0x6b8994
cmp ecx, 0x3345
jg 0x6b8bcc
je 0x6b8bb5
sub ecx, 0x1a44
je 0x6b8b9e
sub ecx, 0x801
je 0x6b8b84
sub ecx, 0x72
jne 0x6b8994
push esi
push edx
call fcn.006b8850
mov ecx, dword [0x6a5a68]
add esp, 8
sub dword [ecx], eax
jmp 0x6b898f
mov ecx, dword [eax]
xor edx, edx
mov dx, si
mov dword [0x6a5a6c], ecx
lea eax, [eax + edx*4]
mov dword [0x6a5a68], eax
jmp 0x6b8994
sub eax, 4
mov dword [0x6a5a68], eax
call edx
mov ecx, dword [0x6a5a68]
mov dword [ecx], eax
jmp 0x6b898f
push esi
push edx
call fcn.006b8850
mov ecx, dword [0x6a5a68]
add esp, 8
and dword [ecx], eax
jmp 0x6b898f
cmp ecx, 0x3dc8
je 0x6b8bff
cmp ecx, 0x5211
je 0x6b8bed
cmp ecx, 0x5910
je 0x6b8f37
jmp 0x6b8994
mov eax, dword [eax]
push eax
push esi
push edx
call fcn.006b87f0
add esp, 0xc
jmp 0x6b898f
push esi
push edx
call fcn.006b8850
mov cx, word [0x6b278e]
mov edx, dword [0x6b2784]
dec eax
push eax
push ecx
push edx
call fcn.006b87f0
add esp, 0x14
jmp 0x6b898f
push esi
push edx
call fcn.006b8850
mov ecx, dword [0x6a5a68]
add esp, 8
or dword [ecx], eax
jmp 0x6b898f
cmp ecx, 0xaa61
jg 0x6b8de6
je 0x6b8dba
cmp ecx, 0x74bb
jg 0x6b8d23
je 0x6b8d0c
cmp ecx, 0x65ab
je 0x6b8cda
cmp ecx, 0x698a
je 0x6b8cc9
cmp ecx, 0x7123
jne 0x6b8994
xor ecx, ecx
mov cx, si
cmp ecx, 0x68
je 0x6b8c97
cmp ecx, 0x28e
jne 0x6b8cac
mov ecx, dword [eax]
and ecx, 0xffff
jmp 0x6b8c9f
mov ecx, dword [eax]
and ecx, 0xff
mov dword [eax], ecx
mov edx, dword [0x6b2784]
mov eax, dword [0x6a5a68]
mov ecx, dword [eax]
add eax, 4
test ecx, ecx
mov dword [0x6a5a68], eax
jne 0x6b8994
mov dword [0x6a5a6c], edx
jmp 0x6b8994
push 0
push esi
push edx
call fcn.006b87f0
add esp, 0xc
jmp 0x6b898f
mov ecx, dword [eax]
xor edx, edx
mov dx, si
add eax, 4
cmp ecx, edx
mov dword [0x6a5a68], eax
je 0x6b8994
sub eax, 4
mov dword [0x6a5a68], eax
mov dword [eax], ebp
mov edx, dword [0x6b2784]
mov dword [0x6a5a6c], edx
jmp 0x6b898f
push esi
push edx
call fcn.006b8850
mov ecx, dword [0x6a5a68]
add esp, 8
xor dword [ecx], eax
jmp 0x6b898f
cmp ecx, 0x8109
je 0x6b8d8a
cmp ecx, 0x9104
je 0x6b8d6f
cmp ecx, 0x9b73
jne 0x6b8994
mov ecx, dword [eax]
push ecx
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
push ecx
push eax
call edx
mov ecx, dword [0x6a5a68]
mov dword [ecx + 0x10], eax
mov eax, dword [0x6a5a68]
add eax, 0x10
mov dword [0x6a5a68], eax
jmp 0x6b8994
push esi
push edx
call fcn.006b8850
mov edx, eax
mov eax, dword [0x6a5a68]
add esp, 8
imul edx, dword [eax]
mov dword [eax], edx
jmp 0x6b898f
mov edx, dword [eax]
xor ecx, ecx
mov cx, si
add eax, 4
cmp edx, ecx
mov dword [0x6a5a68], eax
jne 0x6b8994
sub eax, 4
mov dword [0x6a5a68], eax
mov dword [eax], ebp
mov eax, dword [0x6b2784]
mov dword [0x6a5a6c], eax
jmp 0x6b898f
mov ecx, dword [eax]
push ecx
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
push ecx
push eax
call edx
mov ecx, dword [0x6a5a68]
mov dword [ecx + 0xc], eax
mov eax, dword [0x6a5a68]
add eax, 0xc
mov dword [0x6a5a68], eax
jmp 0x6b8994
cmp ecx, 0xbde4
jg 0x6b8ec2
je 0x6b8e86
cmp ecx, 0xb323
je 0x6b8e5e
cmp ecx, 0xba51
je 0x6b8e4c
cmp ecx, 0xbae4
jne 0x6b8994
mov ecx, dword [eax]
push ecx
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [eax + 0xc]
push ecx
mov ecx, dword [eax + 0x10]
push ecx
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0x18]
push ecx
push eax
call edx
mov ecx, dword [0x6a5a68]
mov dword [ecx + 0x18], eax
mov eax, dword [0x6a5a68]
add eax, 0x18
mov dword [0x6a5a68], eax
jmp 0x6b8994
mov eax, dword [eax]
push eax
call edx
mov ecx, dword [0x6a5a68]
mov dword [ecx], eax
jmp 0x6b898f
mov ecx, dword [eax]
push ecx
mov ecx, dword [eax + 4]
mov eax, dword [eax + 8]
push ecx
push eax
call edx
mov ecx, dword [0x6a5a68]
mov dword [ecx + 8], eax
mov eax, dword [0x6a5a68]
add eax, 8
mov dword [0x6a5a68], eax
jmp 0x6b8994
mov ecx, dword [eax]
push ecx
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [eax + 8]
push ecx
mov ecx, dword [eax + 0xc]
push ecx
mov ecx, dword [eax + 0x10]
push ecx
mov ecx, dword [eax + 0x14]
push ecx
mov ecx, dword [eax + 0x18]
mov eax, dword [eax + 0x1c]
push ecx
push eax
call edx
mov ecx, dword [0x6a5a68]
mov dword [ecx + 0x1c], eax
mov eax, dword [0x6a5a68]
add eax, 0x1c
mov dword [0x6a5a68], eax
jmp 0x6b8994
cmp ecx, 0xbed7
je 0x6b8f22
cmp ecx, 0xcd03
je 0x6b8efd
cmp ecx, 0xfb52
jne 0x6b8994
push esi
push edx
call fcn.006b8850
mov ecx, dword [0x6a5a68]
mov esi, eax
xor edx, edx
add esp, 8
mov eax, dword [ecx]
div esi
mov dword [ecx], eax
jmp 0x6b898f
push esi
push edx
call fcn.006b8850
mov ecx, dword [0x6a5a68]
add esp, 8
sub ecx, 4
mov dword [0x6b2784], eax
mov dword [0x6a5a68], ecx
mov dword [ecx], eax
jmp 0x6b898f
sub eax, 4
mov dword [0x6a5a68], eax
mov dword [eax], ebp
mov edx, dword [0x6b2784]
mov eax, dword [0x6a5a68]
mov dword [0x6a5a6c], edx
jmp 0x6b8994
xor eax, eax
mov ax, si
pop esi
cmp eax, 0xb
mov dword [0x6b22bc], eax
pop ebp
ja case.default.0x6b8f5f
xor edx, edx
mov dl, byte [eax + 0x6b9084]
jmp dword [edx*4 + 0x6b9074]
mov eax, dword [0x6b20b4]
test eax, eax
jne 0x6b8ff7
cmp dword [0x6b21d4], 1
jbe 0x6b8ff7
push 0x6b22f4
call fcn.006ba970
test ax, ax
je 0x6b8f93
and eax, 0xffff
ret 0xc
mov ax, word [0x6a2fc0]
push 0
push eax
push 0x6b22f4
call fcn.006baf90
test ax, ax
je 0x6b8fb3
and eax, 0xffff
ret 0xc
push 0x6b20c0
push 0x6b22f4
call fcn.006ba9f0
test ax, ax
je 0x6b8fcf
and eax, 0xffff
ret 0xc
mov ecx, dword [0x6a2fbc]
mov dx, word [0x6a2fb4]
mov ax, word [0x6a2008]
push ecx
push edx
push eax
push 0x6b22f4
call fcn.006bb070
and eax, 0xffff
ret 0xc
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 8]
mov eax, dword [esp + 4]
push ecx
push edx
push eax
call dword [0x6a5084]
ret 0xc
push 0
push 0
push 0x6b22f4
call fcn.006bb720
push 1
call dword [sym.imp.MSVCRT.dll_exit]
mov dword [0x6b22bc], 2
and word [0x6a2004], 0xfffe
push 0x2010
call fcn.006b8070
push eax
call fcn.006b9bb0
add esp, 8
push 0
push 0
push 0x6b22f4
call fcn.006bb720
test byte [0x6a2004], 1
jne 0x6b906f
mov ecx, dword [0x6b22bc]
push ecx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
xor eax, eax
ret 0xc