Function at 0x6eeae0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x40
nop
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], 0x6f05a0
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
lea esi, [ebp - 0x4c]
mov ecx, esi
push 0xa570a4
call fcn.00742990
mov dword [ebp - 0x10], 1
mov ecx, esi
call fcn.007429e0
mov eax, 0x9a40dc
add eax, dword [0x9a40dc]
mov dword [ebp - 0x44], eax
mov eax, dword [0x9a40e0]
mov dword [ebp - 0x30], eax
mov eax, 0x9a40d4
add eax, dword [0x9a40d4]
mov dword [ebp - 0x2c], eax
test byte [0xa4a787], 1
jne 0x6eecbd
nop
push fcn.006eeae0
call fcn.00742ae0
add esp, 4
mov dword [ebp - 0x28], eax
nop
cmp dword [0xa18ed4], 0x4fd79f09
mov esi, dword [0xa18ed0]
jne 0x6eeba4
lea eax, [esi - 1]
add esi, esi
mov edx, 1
sub edx, esi
mov ecx, eax
sub ecx, edx
imul ecx, edx
mov esi, eax
shl esi, cl
xor esi, ecx
sub esi, eax
imul esi, eax
mov ecx, eax
shl esi, cl
jmp 0x6eeba7
lea eax, [esi + 1]
and esi, eax
nop
mov dword [0xa18ed0], eax
mov dword [ebp - 0x3c], esi
test esi, esi
je 0x6eecd6
mov dword [ebp - 0x20], 0
nop
cmp dword [0xa18edc], 0xeb65ba5c
setne byte [ebp - 0x24]
cmp dword [ebp - 0x28], 0
mov dword [ebp - 0x10], 1
jne 0x6eebfb
nop
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor ecx, ecx
movzx edx, byte [ebp - 0x24]
mov cl, dl
lea ecx, [ecx*2 + 4]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
push dword [ebp - 0x28]
call fcn.006ecaf0
add esp, 4
nop
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
nop
cmp dword [ebp - 0x3c], 0
sete cl
movzx edx, byte [0x9a40ec]
cmp dl, byte [ebp - 0x20]
setne dl
and dl, cl
or dl, byte [0xa56fe4]
and dl, 1
mov byte [0xa56fe4], dl
mov dword [0xa570ec], eax
mov dword [ebp - 0x10], 2
push 1
push 0
push 1
call fcn.006eea10
add esp, 0xc
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], edx
lea ecx, [ebp - 0x4c]
call fcn.007429c0
mov eax, dword [ebp - 0x24]
or eax, dword [ebp - 0x20]
je 0x6eecb2
nop
mov dword [ebp - 0x38], 0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 0
lea eax, [ebp - 0x38]
push eax
push ecx
call fcn.00882280
nop
mov dword [ebp - 0x10], 0xffffffff
mov ecx, dword [ebp - 0x20]
call dword [0xa0535c]
mov dword [ebp - 0x10], 3
push 0
push 1
push dword [ebp - 0x28]
call ecx
nop
mov dword [ebp - 0x10], 0
lea eax, [ebp - 0x34]
push eax
call fcn.008822c0
nop
mov dword [0xa570ec], 0
lea ecx, [ebp - 0x4c]
call fcn.007429a0
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
add esp, 0x40
pop esi
pop edi
pop ebx
pop ebp
ret
nop
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ecx]
xor eax, eax
cmp dword [ebp - 0x30], 0
jle 0x6eebba
add esi, ecx
xor edx, edx
cmp dword [0xa18ed8], 0x8057c4e4
sete dl
lea ecx, [edx*2 + 1]
mov dword [ebp - 0x40], ecx
nop
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
xor ecx, ecx
jmp 0x6eed32
mov ebx, dword [ebp - 0x20]
xor bl, dl
mov dword [ebp - 0x20], ebx
inc eax
cmp eax, dword [ebp - 0x30]
jge 0x6eebc1
nop
mov ebx, dword [ebp - 0x44]
lea edx, [ebx + eax]
mov edi, esi
sub edi, edx
mov edx, dword [ebp - 0x24]
sbb edx, 0
cmp edi, dword [ebp - 0x40]
sbb edx, 0
movzx edx, byte [ebx + eax]
jge 0x6eed20
lea ebx, [ecx + 1]
add eax, edi
add eax, 3
mov edx, dword [ebp - 0x2c]
lea esi, [edx + ecx*4]
add esi, 4
add esi, dword [edx + ecx*4 + 4]
xor edx, edx
mov ecx, ebx
mov dword [ebp - 0x24], 0
jmp 0x6eed20