Function at 0x6f1a9c
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], eax
lea ebx, [ebp - 4]
xor eax, eax
push ebp
push 0x6f1fff
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebx]
mov eax, dword [eax + 0x390]
mov eax, dword [eax + 0x3c]
mov edx, dword [ebx]
mov edx, dword [edx + 0x394]
cmp eax, dword [edx + 0xc]
je 0x6f1bb4
mov edx, dword [ebx]
mov edx, dword [edx + 0x43c]
cmp eax, dword [edx + 0xc]
je 0x6f1bb4
mov edx, dword [ebx]
mov edx, dword [edx + 0x44c]
cmp eax, dword [edx + 0xc]
je 0x6f1bb4
mov edx, dword [ebx]
mov edx, dword [edx + 0x480]
cmp eax, dword [edx + 0xc]
je 0x6f1bb4
mov edx, dword [ebx]
mov edx, dword [edx + 0x4b0]
cmp eax, dword [edx + 0xc]
je 0x6f1bb4
mov edx, dword [ebx]
mov edx, dword [edx + 0x568]
cmp eax, dword [edx + 0xc]
je 0x6f1bb4
mov edx, dword [ebx]
mov edx, dword [edx + 0x4e0]
cmp eax, dword [edx + 0xc]
je 0x6f1bb4
mov edx, dword [ebx]
mov edx, dword [edx + 0x5f8]
cmp eax, dword [edx + 0xc]
je 0x6f1bb4
mov edx, dword [ebx]
mov edx, dword [edx + 0x5cc]
cmp eax, dword [edx + 0xc]
je 0x6f1bb4
mov edx, dword [ebx]
mov edx, dword [edx + 0x63c]
cmp eax, dword [edx + 0xc]
je 0x6f1bb4
mov edx, dword [ebx]
mov edx, dword [edx + 0x678]
cmp eax, dword [edx + 0xc]
je 0x6f1bb4
mov edx, dword [ebx]
mov edx, dword [edx + 0x6c0]
cmp eax, dword [edx + 0xc]
je 0x6f1bb4
mov edx, dword [ebx]
mov edx, dword [edx + 0x708]
cmp eax, dword [edx + 0xc]
je 0x6f1bb4
mov edx, dword [ebx]
mov edx, dword [edx + 0x78c]
cmp eax, dword [edx + 0xc]
je 0x6f1bb4
mov edx, dword [ebx]
mov edx, dword [edx + 0x7dc]
cmp eax, dword [edx + 0xc]
je 0x6f1bb4
mov edx, dword [ebx]
mov edx, dword [edx + 0x398]
cmp eax, dword [edx + 0xc]
jne 0x6f1c9b
lea eax, [ebp - 8]
push eax
mov eax, dword [ebx]
mov eax, dword [eax + 0x83c]
mov ecx, 0x6f201c
mov edx, 0x6f208c
call fcn.006a3c74
push 4
lea edx, [ebp - 0xc]
mov eax, dword [ebx]
call fcn.005116c8
mov eax, dword [ebp - 0xc]
call fcn.00406e68
push eax
mov eax, dword [ebp - 8]
call fcn.00406e68
push eax
mov eax, dword [ebx]
call fcn.00519fe4
push eax
call sub.user32.dll_MessageBoxW
cmp eax, 6
jne 0x6f1fd4
mov eax, dword [ebx]
add eax, 0x8b4
xor edx, edx
call fcn.00406ddc
mov eax, dword [ebx]
add eax, 0x8b8
xor edx, edx
call fcn.00406ddc
mov eax, dword [ebx]
add eax, 0x8bc
xor edx, edx
call fcn.00406ddc
mov eax, dword [ebx]
add eax, 0x8c0
xor edx, edx
call fcn.00406ddc
mov eax, dword [ebx]
add eax, 0x894
xor edx, edx
call fcn.00406ddc
mov eax, dword [ebx]
add eax, 0x898
xor edx, edx
call fcn.00406ddc
mov eax, dword [ebx]
add eax, 0x89c
xor edx, edx
call fcn.00406ddc
mov eax, dword [ebx]
add eax, 0x8a0
xor edx, edx
call fcn.00406ddc
mov eax, dword [ebx]
add eax, 0x8a4
xor edx, edx
call fcn.00406ddc
mov eax, dword [ebx]
add eax, 0x8a8
xor edx, edx
call fcn.00406ddc
push ebp
call fcn.006f19c0
pop ecx
jmp 0x6f1fd4
mov edx, dword [ebx]
mov edx, dword [edx + 0x398]
cmp eax, dword [edx + 0xc]
jne 0x6f1d32
lea eax, [ebp - 8]
push eax
mov edx, 0x6f208c
mov eax, dword [ebx]
mov eax, dword [eax + 0x83c]
push eax
mov ecx, 0x6f201c
pop eax
call fcn.006a3c74
push 4
lea edx, [ebp - 0x10]
mov eax, dword [ebx]
call fcn.005116c8
mov eax, dword [ebp - 0x10]
call fcn.00406e68
push eax
mov eax, dword [ebp - 8]
call fcn.00406e68
push eax
mov eax, dword [ebx]
call fcn.00519fe4
push eax
call sub.user32.dll_MessageBoxW
cmp eax, 6
jne 0x6f1fd4
mov eax, dword [ebx]
call fcn.006f23a0
mov eax, dword [ebx]
add eax, 0x864
xor edx, edx
call fcn.00406ddc
mov eax, dword [ebx]
call fcn.0070992c
mov eax, dword [ebx]
call fcn.00709c28
push 0
call sub.kernel32.dll_GetCurrentProcess
push eax
call sub.kernel32.dll_TerminateProcess
jmp 0x6f1fd4
mov edx, dword [ebx]
mov edx, dword [edx + 0x3e0]
cmp eax, dword [edx + 0xc]
jne 0x6f1d5a
mov eax, dword [ebx]
call fcn.004f7ffc
mov eax, dword [ebx]
mov eax, dword [eax + 0x428]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x30]
jmp 0x6f1fd4
mov eax, dword [ebx]
mov eax, dword [eax + 0x390]
mov eax, dword [eax + 0x3c]
mov edx, dword [ebx]
mov edx, dword [edx + 0x404]
cmp eax, dword [edx + 0xc]
je 0x6f1d7f
mov edx, dword [ebx]
mov edx, dword [edx + 0x724]
cmp eax, dword [edx + 0xc]
jne 0x6f1da5
push 0
mov eax, dword [ebx]
mov edx, dword [eax + 0x3c0]
xor ecx, ecx
mov eax, dword [ebx]
call fcn.00705b98
mov ecx, 0x6f20b4
mov dl, 2
mov eax, dword [ebx]
call fcn.006f08cc
jmp 0x6f1fd4
mov edx, dword [ebx]
mov edx, dword [edx + 0x3d0]
cmp eax, dword [edx + 0xc]
jne 0x6f1e0a
mov eax, dword [ebx]
call fcn.006f23a0
mov eax, dword [ebx]
call fcn.0070992c
mov eax, dword [ebx]
call fcn.00709c28
mov eax, dword [ebx]
cmp byte [eax + 0x840], 0
je 0x6f1df8
mov dl, 0x10
mov eax, 2
call fcn.005240ac
test al, al
je 0x6f1fd4
push 0
call sub.kernel32.dll_GetCurrentProcess
push eax
call sub.kernel32.dll_TerminateProcess
jmp 0x6f1fd4
push 0
call sub.kernel32.dll_GetCurrentProcess
push eax
call sub.kernel32.dll_TerminateProcess
jmp 0x6f1fd4
mov edx, dword [ebx]
mov edx, dword [edx + 0x3c0]
cmp eax, dword [edx + 0xc]
jne 0x6f1fcf
mov eax, dword [ebx]
call fcn.006f23a0
push 1
mov ecx, 0x6f20c4
mov edx, 0x6f20e0
mov eax, 0x80000002
call fcn.005242e4
cmp eax, 1
jne 0x6f1e4d
lea eax, [ebp - 0x14]
call fcn.006ed830
mov eax, dword [ebp - 0x14]
call fcn.005254c0
mov eax, dword [0x733b44]
cmp dword [eax], 0
je 0x6f1ea2
mov eax, dword [0x733b44]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov edi, dword [eax + 8]
dec edi
test edi, edi
jl 0x6f1ea2
inc edi
xor esi, esi
mov eax, dword [0x733b44]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov edx, esi
call fcn.0067fbf8
cmp byte [eax + 0x39], 0
je 0x6f1e9e
mov eax, dword [0x733b44]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov edx, esi
call fcn.0067fbf8
mov edx, dword [eax + 4]
mov eax, dword [ebx]
call fcn.006f3938
inc esi
dec edi
jne 0x6f1e6c
mov eax, dword [0x733894]
cmp dword [eax], 0
je 0x6f1ef7
mov eax, dword [0x733894]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov edi, dword [eax + 8]
dec edi
test edi, edi
jl 0x6f1ef7
inc edi
xor esi, esi
mov eax, dword [0x733894]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov edx, esi
call fcn.0067fbf8
cmp byte [eax + 0x39], 0
je 0x6f1ef3
mov eax, dword [0x733894]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov edx, esi
call fcn.0067fbf8
mov edx, dword [eax + 4]
mov eax, dword [ebx]
call fcn.006f3938
inc esi
dec edi
jne 0x6f1ec1
mov eax, dword [ebx]
call fcn.00709954
mov eax, dword [0x733894]
mov eax, dword [eax]
call fcn.0067fa00
mov edi, eax
dec edi
test edi, edi
jl 0x6f1f63
inc edi
xor esi, esi
mov eax, dword [0x733894]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov edx, esi
call fcn.0067fbf8
mov eax, dword [eax + 4]
mov edx, 0x6f2128
call fcn.00407428
jne 0x6f1f5f
mov eax, dword [0x733894]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov edx, esi
call fcn.0067fbf8
cmp byte [eax + 0x39], 0
je 0x6f1f5f
mov ecx, 0x6f2140
mov edx, 0x6f2168
mov eax, 0x6f2128
call fcn.006edb24
inc esi
dec edi
jne 0x6f1f14
mov eax, dword [ebx]
mov eax, dword [eax + 0x894]
mov edx, 0x6f2184
call fcn.00407428
je 0x6f1f9f
mov eax, dword [ebx]
mov eax, dword [eax + 0x89c]
mov edx, 0x6f2184
call fcn.00407428
je 0x6f1f9f
mov eax, dword [ebx]
mov eax, dword [eax + 0x8a4]
mov edx, 0x6f2184
call fcn.00407428
jne 0x6f1fa6
mov eax, dword [ebx]
call fcn.00709ae0
mov eax, dword [ebx]
call fcn.0070992c
mov eax, dword [ebx]
call fcn.00709b30
mov eax, dword [ebx]
call fcn.00709c28
call fcn.00671cbc
push 0
call sub.kernel32.dll_GetCurrentProcess
push eax
call sub.kernel32.dll_TerminateProcess
jmp 0x6f1fd4
call fcn.00671cbc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6f2006
lea eax, [ebp - 0x14]
call fcn.00406dcc
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.00406dd4
lea eax, [ebp - 8]
call fcn.00406dcc
ret