Function at 0x100070d5
Capabilities:
Terminate process

Disassembly:
mov eax, 0x1003cb2b
call fcn.1003baf8
sub esp, 0xc
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x18], edi
mov dword [ebp - 4], 0xe
xor ebx, ebx
mov byte [0x1004e6b3], 1
cmp dword [0x1006c9ec], ebx
je 0x1000712a
push 0x1388
push dword [0x1006c9ec]
call dword [0x1006ca88]
test eax, eax
je 0x10007124
push ebx
push dword [0x1006c9ec]
call dword [0x1006ca0c]
mov dword [0x1006c9ec], ebx
cmp dword [0x1006c9f0], ebx
je 0x1000715a
push 0x898
push dword [0x1006c9f0]
call dword [0x1006ca88]
test eax, eax
je 0x10007154
push ebx
push dword [0x1006c9f0]
call dword [0x1006ca0c]
mov dword [0x1006c9f0], ebx
mov esi, 0xc8
cmp dword [0x1006c9f4], ebx
je 0x1000718b
push esi
push dword [0x1006c9f4]
call dword [0x1006ca88]
test eax, eax
je 0x10007185
push ebx
push dword [0x1006c9f4]
call dword [0x1006ca0c]
mov dword [0x1006c9f4], ebx
mov eax, dword [edi + 0x416c]
test eax, eax
je 0x100071b4
push esi
push eax
call dword [0x1006ca88]
test eax, eax
je 0x100071ae
push ebx
push dword [edi + 0x416c]
call dword [0x1006ca0c]
mov dword [edi + 0x416c], ebx
cmp dword [0x1004e6b4], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov esi, dword [sym.imp.KERNEL32.dll_TerminateProcess]
je 0x10007200
lea eax, [ebp - 0x10]
push eax
push dword [0x1004e6b4]
call ebx
test eax, eax
je 0x100071e1
cmp dword [ebp - 0x10], 0x103
jne 0x100071eb
push 0
push dword [0x1004e6b4]
call esi
mov ecx, dword [0x1004e6b4]
call fcn.1000b40a
mov dword [0x1004e6b4], 0
cmp dword [0x1004e9e4], 0
je 0x10007244
lea eax, [ebp - 0x14]
push eax
push dword [0x1004e9e4]
call ebx
test eax, eax
je 0x10007222
cmp dword [ebp - 0x14], 0x103
jne 0x1000722f
xor ebx, ebx
push ebx
push dword [0x1004e9e4]
call esi
jmp 0x10007231
xor ebx, ebx
mov ecx, dword [0x1004e9e4]
call fcn.1000b40a
mov dword [0x1004e9e4], ebx
jmp 0x10007246
xor ebx, ebx
mov ecx, dword [edi + 8]
test ecx, ecx
je 0x10007255
call fcn.1000b40a
mov dword [edi + 8], ebx
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x10007264
call fcn.1000b40a
mov dword [edi + 0xc], ebx
mov ecx, dword [edi + 0x10]
test ecx, ecx
je 0x10007273
call fcn.1000b40a
mov dword [edi + 0x10], ebx
cmp dword [0x1006c9e8], ebx
je 0x1000728c
mov ecx, dword [0x1006c9e8]
call fcn.1000b40a
mov dword [0x1006c9e8], ebx
push ebx
push 1
lea ecx, [edi + 0x419c]
call fcn.10009482
mov ecx, dword [edi + 0x4198]
sub ecx, 0x10
call fcn.1000b0c2
push ebx
push 1
lea ecx, [edi + 0x4180]
call fcn.10009482
lea ecx, [edi + 0x413c]
call fcn.10008c43
lea ecx, [edi + 0x4130]
call fcn.10008c43
lea ecx, [edi + 0x4124]
call fcn.10008c43
lea ecx, [edi + 0x40e0]
call fcn.10002bd7
lea ecx, [edi + 0x40d0]
call fcn.10008eba
push ebx
push 1
lea ecx, [edi + 0x40a8]
call fcn.10009482
lea esi, [edi + 0x4090]
mov ecx, esi
call fcn.100096cc
push dword [esi]
call fcn.1000dfc1
mov dword [esi], ebx
pop ecx
lea esi, [edi + 0x407c]
mov ecx, esi
call fcn.100096cc
push dword [esi]
call fcn.1000dfc1
pop ecx
lea ecx, [edi + 0x60]
mov dword [esi], ebx
call fcn.10008c43
lea ecx, [edi + 0x54]
call fcn.10008c43
lea ecx, [edi + 0x48]
call fcn.10008c43
push ebx
push 1
lea ecx, [edi + 0x30]
call fcn.10009482
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret