Function at 0x6f8c60
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x4ec
nop
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], 0x6fc950
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
call fcn.006fc340
mov ebx, dword [0xa7fd77]
mov ecx, ebx
not ecx
mov edi, eax
xor edi, 0x4da30ee7
mov dword [ebp - 0x20], eax
xor eax, 0xb25cf118
mov edx, eax
and edx, ecx
mov esi, edi
and esi, ebx
or esi, edx
mov dword [ebp - 0x28], edi
xor esi, edi
mov dword [ebp - 0x38], eax
mov edx, eax
and edx, ebx
or edx, esi
cmp edx, 0xffffffff
je 0x6f8cef
nop
cmp dword [0xa7fda7], 0
je 0x6f8cef
test bl, 1
mov eax, ebx
sete bl
mov bh, byte [ebp + 0x10]
xor bh, 1
test bl, bh
mov ebx, eax
jne 0x6f941e
nop
mov eax, dword [0x9d7810]
mov dword [ebp - 0x54], eax
mov eax, dword [0x9d7804]
mov dword [ebp - 0x3c], eax
mov eax, 0x9d795c
add eax, dword [0x9d795c]
mov dword [ebp - 0x60], eax
test bl, 1
je 0x6f8d89
nop
test byte [0xa8c615], 1
jne 0x6f8d89
mov dword [ebp - 0x30], 0
cmp edx, 0xffffffff
je 0x6f942f
nop
mov edx, dword [0xa7fd7b]
mov edi, dword [ebp - 0x20]
mov esi, edi
xor esi, 0x4da30ff7
test edx, esi
je 0x6f9ad8
add edx, edx
mov dword [0xa7fd7b], edx
mov edx, edi
xor edx, 0x4da30fe2
xor edi, 0xb25cf01d
mov eax, ebx
xor ebx, edx
xor eax, edi
and edi, ecx
or edi, ebx
xor edx, ecx
and edx, eax
and edx, edi
not edx
mov dword [0xa7fd77], edx
mov dword [0xa7fd9b], 0x6f86e0
mov edi, 0x6f86e0
jmp 0x6fa25b
nop
mov dword [0xa7fda3], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xc0], xmm0
cmp dword [0xa7fd8b], 0
jns 0x6f8dfb
nop
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, dword [ebp - 0x20]
mov ecx, esi
xor ecx, 0x4da30fef
mov dword [ebp + ecx - 0xc0], eax
call sub.KERNEL32.dll_GetCurrentThread
mov ecx, esi
xor ecx, 0x4da30feb
mov dword [ebp + ecx - 0xc0], eax
mov eax, dword [0xa7fd8b]
mov ecx, esi
xor ecx, eax
xor ecx, 0x8da30fe7
mov edx, esi
xor edx, 0x725cf018
or edx, eax
and edx, ecx
lea ecx, [ebp - 0xc0]
push edx
call fcn.0074bf70
call sub.KERNEL32.dll_GetProcessHeap
mov edi, dword [ebp - 0x20]
xor edi, 0x4da30f7b
push edi
push 0
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov esi, eax
test eax, eax
jne 0x6f8e31
nop
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, dword [ebp - 0x20]
xor ecx, 0x4da30ff5
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
mov dword [ebp - 0x24], edi
mov dword [esi], edi
push esi
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
jne 0x6f8e68
call sub.KERNEL32.dll_GetProcessHeap
push esi
push 0
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, dword [ebp - 0x20]
xor ecx, 0x4da30f18
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
push dword [ebp + 0xc]
push 1
push 0
call fcn.0091de22
call fcn.006e4270
cmp dword [0xa8c5d4], 0
jne 0x6f8f10
nop
mov edi, dword [ebp - 0x20]
mov eax, edi
xor eax, 0x4da30f2f
push eax
call fcn.0091d7fd
add esp, 4
mov dword [eax], 0x954b00
mov ecx, edi
xor ecx, 0x4da30ffb
mov edx, edi
xor edx, 0x4da30fc7
mov dword [eax + ecx], 0
mov ecx, edi
xor ecx, 0x4da30fe8
mov dword [eax + edx], ecx
mov ecx, edi
xor ecx, 0x4da30feb
mov byte [eax + ecx], 0
mov ecx, edi
xor ecx, 0x4da30fef
mov dword [eax + ecx], 0x954b60
mov ecx, edi
xor ecx, 0x4da30fc3
mov dword [eax + ecx], 0
mov ecx, edi
xor ecx, 0x4da30fcf
mov dword [eax + ecx], 0
mov ecx, edi
xor ecx, 0x4da30fe3
mov dword [eax + ecx], 0
mov dword [0xa8c5d4], eax
nop
mov eax, dword [0xa8c5d4]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x20]
mov ecx, eax
xor ecx, 0x4da30fcb
mov dword [ebp - 0x34], ecx
cmp eax, 0x4da30f7b
nop
mov edx, dword [ebp - 0x24]
je 0x6f904a
nop
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x34]
add ecx, eax
cmp edx, 1
mov ebx, edx
adc ebx, 0
xor edi, edi
cmp edx, 8
nop
mov dword [ebp - 0x30], ebx
jb 0x6f8fd7
mov eax, ecx
sub eax, esi
cmp eax, 0x20
mov eax, dword [ebp - 0x24]
jb 0x6f8fd7
xor edi, edi
cmp eax, 0x20
jb 0x6f8fab
mov edi, ebx
and edi, 0xffffffe0
mov eax, dword [ebp - 0x64]
mov edx, dword [ebp - 0x34]
add eax, edx
add eax, 0x10
xor ebx, ebx
nop dword [eax + eax]
nop
movups xmm0, xmmword [esi + ebx]
movups xmm1, xmmword [esi + ebx + 0x10]
movups xmmword [eax + ebx - 0x10], xmm0
movups xmmword [eax + ebx], xmm1
add ebx, 0x20
cmp edi, ebx
jne 0x6f8f80
cmp dword [ebp - 0x24], edi
mov ebx, dword [ebp - 0x30]
je 0x6f904a
test bl, 0x18
je 0x6f8fd7
mov eax, edi
mov edi, ebx
and edi, 0xfffffff8
nop word cs:[eax + eax]
nop
movsd xmm0, qword [esi + eax]
movsd qword [ecx + eax], xmm0
add eax, 8
cmp edi, eax
jne 0x6f8fc0
cmp dword [ebp - 0x24], edi
je 0x6f904a
mov eax, ebx
mov ebx, edi
and eax, 3
je 0x6f8ffc
mov ebx, edi
nop word cs:[eax + eax]
nop
movzx edx, byte [esi + ebx]
mov byte [ecx + ebx], dl
inc ebx
dec eax
jne 0x6f8ff0
sub edi, dword [ebp - 0x30]
cmp edi, 0xfffffffc
mov edx, dword [ebp - 0x24]
ja 0x6f904a
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x34]
add eax, ecx
add eax, 3
nop word cs:[eax + eax]
nop
movzx ecx, byte [esi + ebx]
mov byte [eax + ebx - 3], cl
movzx ecx, byte [esi + ebx + 1]
mov byte [eax + ebx - 2], cl
movzx ecx, byte [esi + ebx + 2]
mov byte [eax + ebx - 1], cl
movzx ecx, byte [esi + ebx + 3]
mov byte [eax + ebx], cl
add ebx, 4
cmp edx, ebx
jne 0x6f9020
nop
mov dword [ebp - 0x10], 0xffffffff
mov ebx, dword [ebp - 0x64]
mov ecx, ebx
call fcn.006b15d0
mov ecx, ebx
call fcn.006b15f0
call sub.KERNEL32.dll_GetProcessHeap
push esi
push 0
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [0xa8d668], 0
jne 0x6f90ae
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x4da30b1f
mov dword [ebp - 0x30], eax
push eax
call fcn.0091d7fd
add esp, 4
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x24], eax
mov ecx, eax
call fcn.0066b2e0
nop
mov eax, dword [ebp - 0x24]
mov dword [0xa8d668], eax
nop
mov ebx, dword [ebp - 0x64]
nop
mov esi, dword [0xa8d668]
mov edi, dword [ebp - 0x20]
mov eax, edi
xor eax, 0x4da30e27
mov ecx, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [esi + eax], ecx
mov dword [ebp - 0x10], 0xffffffff
push 0
call ecx
mov ecx, edi
xor ecx, 0x4da30fcf
mov dword [ebp - 0xac], ecx
mov dword [ebx + ecx], eax
mov edx, edi
xor edx, 0x4da30fe1
mov eax, edi
xor eax, 0x9e7
mov ecx, edi
xor ecx, 0x4da30d3a
cmp word [ebx + edx], ax
seta byte [esi + ecx]
mov eax, edi
xor eax, 0x9e6
mov ecx, edi
xor ecx, 0x4da30d39
mov dword [ebp - 0xa8], edx
cmp word [ebx + edx], ax
mov dword [ebp - 0x5c], esi
seta byte [esi + ecx]
mov esi, 0xa7fd77
sub esi, dword [0xa7fd97]
lea eax, [ebp - 0x4f8]
push 0x400
push 0
push eax
call fcn.009350b0
add esp, 0xc
mov eax, edi
xor eax, 0x4da30be7
mov dword [ebp - 0x30], eax
push eax
lea eax, [ebp - 0x4f8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, ebx
mov ebx, edi
xor ebx, 0x4da30fc3
mov dword [eax + ebx], esi
xor edi, 0x4da30fef
mov dword [ebp - 0x8c], edi
lea ecx, [eax + edi]
lea eax, [ebp - 0x4f8]
push eax
call fcn.00798e10
call fcn.006f8530
mov dword [ebp - 0x70], 0
mov eax, dword [0xa8bed7]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 3
mov dword [ebp - 0x58], ebx
push ebx
call fcn.0091d7fd
add esp, 4
mov ecx, eax
mov eax, dword [0xa8bed3]
mov edx, dword [ebp - 0x24]
add eax, edx
add eax, 0xa7fd77
mov dword [ebp - 0x10], 6
push eax
mov dword [ebp - 0x24], ecx
call fcn.007949e0
nop
mov esi, dword [ebp - 0x70]
mov edi, dword [ebp - 0x24]
cmp esi, edi
sete al
test esi, esi
sete cl
xor cl, al
jne 0x6f91f5
mov ecx, esi
call fcn.0065b950
push dword [ebp - 0x58]
push esi
call fcn.0091d82d
add esp, 8
nop
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x10], 3
mov ecx, dword [ebp - 0x5c]
push edi
call fcn.006a92f0
test al, al
jne 0x6f9226
nop
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
nop
mov ecx, dword [ebp - 0x20]
xor ecx, 0x4da30f18
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
mov eax, dword [ebp - 0x30]
test dword [0xa7fd77], eax
je 0x6f93cf
nop
mov ecx, dword [ebp - 0x20]
xor ecx, 0x4da30b87
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x24], ecx
cmp dword [eax + ecx], 0
je 0x6f93cf
lea ecx, [ebp - 0xf8]
lea eax, [ebp - 0x4f8]
push eax
call fcn.00794f10
nop
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x24]
mov eax, dword [eax + ecx]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 7
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xf8]
push eax
call fcn.00796780
nop
mov eax, dword [ebp - 0x20]
mov ecx, eax
xor ecx, 0x4da30fe3
lea esi, [ecx + ebp]
add esi, 0xffffff24
mov edx, eax
xor edx, 0x4da30fff
xor eax, 0x4da30fe8
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x30], eax
cmp dword [ebp + edx - 0xdc], eax
jbe 0x6f92c3
mov esi, dword [ebp + ecx - 0xdc]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x10], 0xffffffff
mov ecx, dword [ebp - 0x4c]
call dword [0xa37360]
mov dword [ebp - 0x10], 8
push esi
call ecx
nop
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + eax - 0xdc]
cmp ecx, dword [ebp - 0x30]
nop
mov ebx, dword [ebp - 0x2c]
jbe 0x6f9353
nop
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
lea edx, [ecx + 1]
mov edi, dword [ebp - 0x20]
mov esi, edi
xor esi, 0x4da30018
cmp edx, esi
jbe 0x6f9348
mov edx, edi
xor edx, 0xb25cf01b
lea esi, [eax + edx]
mov eax, dword [eax + edx]
sub esi, eax
mov edx, edi
xor edx, 0x4da30fc7
cmp esi, edx
jae 0x6fa36b
mov edx, ecx
neg edx
mov edi, dword [ebp - 0x58]
mov esi, edi
neg esi
xor esi, edx
dec ecx
lea edx, [edi - 1]
and edx, ecx
or edx, esi
add edx, edx
sub edx, esi
add edx, 2
nop
push edx
push eax
call fcn.0091d82d
add esp, 8
nop
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax - 0xf8]
cmp eax, dword [ebp - 0x30]
jbe 0x6f93cf
nop
mov ecx, dword [ebp + ebx - 0xf8]
mov edx, eax
xor edx, 1
mov esi, eax
and esi, 1
lea esi, [edx + esi*2]
mov edi, dword [ebp - 0x20]
mov edx, edi
xor edx, 0x4da30018
cmp esi, edx
jbe 0x6f93c4
mov esi, edi
xor esi, 0xb25cf01b
mov edx, dword [ecx + esi]
mov dword [ebp - 0x24], edx
mov edx, edi
xor edi, 0xd8069b80
sub ecx, edi
mov ebx, ecx
xor ebx, esi
and ecx, esi
add ebx, edi
mov edi, dword [ebp - 0x24]
lea ecx, [ebx + ecx*2]
sub ecx, edi
xor edx, 0x4da30fc7
cmp ecx, edx
jae 0x6fa378
add eax, dword [ebp - 0x58]
mov esi, eax
mov ecx, edi
nop
push esi
push ecx
call fcn.0091d82d
add esp, 8
nop
mov dword [ebp - 0x10], 3
call fcn.0065ebb0
mov dword [ebp - 0x24], eax
nop
movzx edx, byte [ebp + 0x10]
xor dl, 1
mov ecx, dword [ebp - 0x20]
xor ecx, 0x4da30b3f
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xb0], ecx
mov byte [eax + ecx], dl
push eax
call fcn.006de5d0
add esp, 4
nop
mov eax, dword [ebp - 0x20]
mov ecx, eax
xor ecx, 0x4d230fe7
mov dword [ebp - 0x4c], ecx
test dword [0xa8be8b], ecx
je 0x6f9436
jmp 0x6f945b
mov dword [ebp - 0x30], 0
mov edi, 0x6f86e0
jmp 0x6fa25b
xor edi, edi
jmp 0x6fa25b
mov ecx, eax
xor ecx, 0x4da30f1f
add ecx, dword [0xa8c398]
mov dword [ebp - 0x2c], ecx
call fcn.006aada0
int3
nop
mov eax, dword [ebp - 0x4c]
test dword [0xa8be8b], eax
jne 0x6f9492
nop
mov ecx, dword [ebp - 0x20]
xor ecx, 0x4da30f1f
add ecx, dword [0xa8c398]
mov dword [ebp - 0x2c], ecx
call fcn.006aada0
nop
mov eax, dword [ebp - 0x20]
xor al, 0xe3
mov byte [4], al
mov ecx, dword [ebp - 0x2c]
call fcn.006aae70
nop
mov ecx, dword [ebp - 0x64]
call fcn.006b1620
lea eax, [ebp - 0x70]
mov ecx, dword [ebp - 0x24]
push eax
push 0xa7fd77
call fcn.0069e000
nop
mov eax, dword [ebp - 0x4c]
test dword [0xa8be8b], eax
jne 0x6f94e0
nop
mov ecx, dword [ebp - 0x20]
xor ecx, 0x4da30f1f
add ecx, dword [0xa8c398]
mov dword [ebp - 0x2c], ecx
call fcn.006aada0
invalid
nop
mov ecx, dword [ebp - 0x24]
push 0xa7fd77
call fcn.006d7150
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x6f9914
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x4da30eeb
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
test dword [ecx + eax], edx
jne 0x6f9527
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x4da30eef
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x4c]
test dword [ecx + eax], edx
je 0x6f9f18
nop
mov eax, dword [ebp - 0x4c]
test dword [0xa8be8b], eax
jne 0x6f955b
nop
mov ecx, dword [ebp - 0x20]
xor ecx, 0x4da30f1f
add ecx, dword [0xa8c398]
mov dword [ebp - 0x28], ecx
call fcn.006aada0
invalid
nop
mov ecx, dword [ebp - 0x24]
push 0xa7fd77
call fcn.006d2750
call fcn.007498b0
nop
mov eax, dword [ebp - 0x4c]
test dword [0xa8be8b], eax
jne 0x6f95a5
nop
mov ecx, dword [ebp - 0x20]
xor ecx, 0x4da30f1f
add ecx, dword [0xa8c398]
mov dword [ebp - 0x28], ecx
call fcn.006aada0
nop
mov eax, dword [ebp - 0x20]
xor al, 0xe2
mov byte [5], al
mov ecx, dword [ebp - 0x28]
call fcn.006aae70
call fcn.006fa490
mov dword [ebp - 0x28], eax
nop
mov eax, dword [0xa8c2ae]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x24]
push dword [0xa8c2b2]
call fcn.0069dc80
nop
mov ecx, dword [ebp - 0x20]
mov edi, ecx
xor edi, 0x4da30eef
xor ecx, 0x4da10fe7
xor edx, edx
mov esi, dword [ebp - 0x24]
mov dword [ebp - 0x7c], edi
test dword [esi + edi], ecx
sete dl
mov ecx, dword [ebp - 0x28]
push dword [ebp - 0x38]
push eax
push edx
push dword [0xa8c2b6]
call fcn.006ac3a0
nop
mov dword [0xa8c2b6], 0
mov dword [0xa8c2ae], 0
mov ecx, dword [ebp - 0x24]
call fcn.0068cea0
nop
mov ecx, dword [ebp - 0x24]
push 0
push 1
call fcn.00688cb0
nop
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x7c]
mov eax, dword [eax + ecx]
mov ecx, eax
not ecx
mov edx, dword [ebp - 0x20]
mov esi, edx
xor esi, 0x4da30fe3
xor edx, 0xb25cf01c
mov dword [ebp - 0x38], esi
and esi, ecx
and eax, edx
or eax, esi
and edx, ecx
xor edx, eax
cmp edx, 0xffffffff
je 0x6f9723
nop
mov eax, dword [0xa8dd54]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 0x2682c], 0
jne 0x6f9674
call fcn.006fbf70
nop
mov eax, dword [0xa8dd54]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
cmp byte [eax + 0x25804], 0
jne 0x6f9723
nop
cmp dword [0xa8c66c], 0
jne 0x6f96cb
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x4da30fb7
mov dword [ebp - 0x2c], eax
push eax
call fcn.0091d7fd
add esp, 4
nop
mov dword [ebp - 0x10], 5
mov dword [ebp - 0x28], eax
mov ecx, eax
call fcn.006fb1f0
nop
mov eax, dword [ebp - 0x28]
mov dword [0xa8c66c], eax
nop
mov eax, dword [0xa8c66c]
mov dword [ebp - 0x28], eax
mov eax, dword [0xa8c2e6]
mov dword [ebp - 0x2c], eax
mov eax, dword [0xa8c2ea]
mov dword [ebp - 0x10], 3
mov ecx, dword [ebp - 0x24]
push eax
call fcn.0069dc80
nop
mov ecx, dword [ebp - 0x28]
push dword [ebp - 0x2c]
push eax
push dword [0xa8beb3]
call fcn.0070c170
nop
mov dword [0xa8beb3], 0
mov dword [0xa8c2e6], 0
mov dword [0xa8c2ea], 0
nop
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x7c]
test dword [ecx + edx], eax
je 0x6f9796
nop
cmp dword [0xa8c62c], 0
jne 0x6f976f
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x4da30fb7
mov dword [ebp - 0x2c], eax
push eax
call fcn.0091d7fd
add esp, 4
nop
mov dword [ebp - 0x10], 4
mov dword [ebp - 0x28], eax
mov ecx, eax
call fcn.006f3520
nop
mov eax, dword [ebp - 0x28]
mov dword [0xa8c62c], eax
nop
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x7c]
mov eax, dword [eax + ecx]
mov edx, dword [ebp - 0x20]
mov ecx, edx
xor cl, 0x15
movzx ecx, cl
xor edx, 0x4da30fe2
bt eax, ecx
mov eax, dword [0xa8c62c]
setb byte [eax + edx]
nop
mov eax, dword [ebp - 0x4c]
test dword [0xa8be8b], eax
jne 0x6f97d2
nop
mov ecx, dword [ebp - 0x20]
xor ecx, 0x4da30f1f
add ecx, dword [0xa8c398]
mov dword [ebp - 0x10], 3
mov dword [ebp - 0x28], ecx
call fcn.006aada0
in ax, 0x64
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x28]
call fcn.006aae70
nop
cmp dword [0xa8c620], 0
jne 0x6f9836
nop
mov dword [ebp - 0x10], 3
push dword [ebp - 0x34]
call fcn.0091d7fd
add esp, 4
nop
mov esi, dword [ebp - 0x20]
mov ecx, esi
xor ecx, 0x4da30ff3
mov edx, esi
xor edx, 0x4da30fff
mov dword [eax + ecx], 0
mov ecx, esi
xor ecx, 0x4da30fe8
mov dword [eax + edx], ecx
mov ecx, dword [ebp - 0x38]
mov byte [eax + ecx], 0
mov dword [eax], 0x9d78e0
mov ecx, esi
xor ecx, 0x4da30ffb
xorps xmm0, xmm0
movups xmmword [eax + ecx], xmm0
mov dword [0xa8c620], eax
nop
mov esi, dword [0xa4c658]
mov eax, dword [ebp - 0x20]
xor eax, 0x4bae02c3
lea ecx, [eax + esi]
neg ecx
mov edx, eax
xor edx, ecx
and ecx, eax
lea eax, [edx + ecx*2]
mov ecx, 1
sub ecx, eax
mov dword [0xa4c658], ecx
mov dword [ebp - 0x34], 0
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa0], ecx
test ecx, esi
je 0x6f9c0b
nop
mov eax, dword [0xa8c620]
mov dword [ebp - 0x3c], eax
mov eax, dword [0xa8c2f6]
mov dword [ebp - 0x28], eax
mov eax, dword [0xa8c2f2]
mov dword [ebp - 0x60], eax
mov eax, dword [0xa8c2ee]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x20]
xor eax, 0x4da30edf
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ecx + eax]
mov dword [ebp - 0x10], 3
movzx eax, word [0xa8bf08]
push eax
call fcn.00794ae0
nop
mov ecx, dword [ebp - 0x3c]
push dword [ebp - 0x28]
push dword [ebp - 0x60]
push dword [ebp - 0x2c]
push eax
call fcn.006fa6f0
nop
mov esi, dword [ebp - 0x20]
mov eax, esi
xor eax, 0x5da30fe7
and eax, dword [0xa8c2fa]
mov ecx, dword [0xa4c670]
xor ecx, esi
cmp ecx, 0x91a108ca
mov ecx, dword [0x9d7814]
jne 0x6f99ab
nop
mov dword [0xa4c66c], 0xea8dc43a
test eax, eax
jne 0x6f99e9
jmp 0x6f99ff
nop
mov eax, dword [0xa7fd77]
mov ecx, eax
not ecx
mov esi, dword [ebp - 0x38]
and esi, ecx
mov edx, dword [ebp - 0x28]
and edx, eax
or edx, esi
xor edx, eax
or eax, 1
mov dword [0xa7fd77], eax
xor esi, ecx
or esi, edx
cmp esi, 0xffffffff
je 0x6f9b0e
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x4da30ff7
test dword [0xa7fd7b], eax
je 0x6f9960
nop
push 0xa7fd77
call fcn.006d0d00
add esp, 4
call fcn.006f0ae0
cmp dword [ebp + 0xc], 0
jne 0x6f9999
nop
mov esi, dword [0xa8d668]
test esi, esi
je 0x6f9999
mov ecx, esi
call fcn.0066b790
mov eax, dword [ebp - 0x20]
xor eax, 0x4da30d07
push eax
push esi
call fcn.0091d82d
add esp, 8
mov dword [0xa8d668], 0
nop
push dword [ebp + 0xc]
push 0
push 0
call fcn.0091de22
jmp 0x6f9bf8
nop
mov edi, dword [ebp - 0xa0]
and edi, dword [ebp - 0xa4]
mov edx, esi
xor edx, 0xc9ef2b9
xor esi, 0xf3610d46
add esi, edx
cmp edi, 1
sbb esi, 0xffffffff
sub ecx, dword [ebp - 0x34]
test ecx, esi
setne cl
or cl, byte [0xa8c615]
and cl, 1
mov byte [0xa8c615], cl
test eax, eax
je 0x6f99ff
nop
mov eax, dword [0xa8dd54]
mov ecx, dword fs:[0x2c]
mov eax, dword [ecx + eax*4]
inc dword [eax + 0x25808]
nop
mov dword [0xa8c2f2], 0
mov dword [0xa8c2f6], 0
mov eax, dword [ebp - 0x4c]
test dword [0xa8be8b], eax
jne 0x6f9a4a
nop
mov ecx, dword [ebp - 0x20]
xor ecx, 0x4da30f1f
add ecx, dword [0xa8c398]
mov dword [ebp - 0x3c], ecx
call fcn.006aada0
nop
mov eax, dword [ebp - 0x20]
xor al, 0xe1
mov byte [6], al
mov ecx, dword [ebp - 0x3c]
call fcn.006aae70
nop
mov ecx, dword [ebp - 0x20]
mov eax, ecx
xor eax, 0x4da30fd7
and eax, dword [0xa8c2fa]
xor ecx, 0x4da30fc7
mov dword [ebp - 0x3c], ecx
cmp eax, ecx
jne 0x6fa0dd
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x4dab0fe7
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x7c]
test dword [ecx + edx], eax
jne 0x6fa0dd
nop
mov eax, dword [ebp - 0x20]
xor eax, 0xa18
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0xa8]
cmp word [ecx + edx], ax
ja 0x6fa0dd
call fcn.006f7800
mov esi, eax
mov edx, dword [ebp - 0x20]
mov eax, edx
xor eax, 0x4da30e2f
mov ecx, dword [ebp - 0x5c]
mov ecx, dword [ecx + eax]
mov eax, edx
xor eax, 0x4da30feb
xor edx, 0x4da30fe8
mov edi, dword [ebp - 0x3c]
cmp dword [esi + edi], edx
jbe 0x6fa0c4
mov esi, dword [esi + eax]
jmp 0x6fa0c6
nop
cmp dword [ebp + 8], 0
je 0x6f9aed
nop
test byte [0xa8c5fc], 1
je 0x6fa24d
mov edi, ebx
mov ebx, dword [ebp - 0x20]
mov esi, ebx
xor esi, 0x4da30fc7
test edx, esi
je 0x6fa003
nop
mov edi, dword [0xa7fd9b]
jmp 0x6fa25b
nop
mov esi, dword [0xa8c5ec]
test esi, esi
je 0x6f9b3d
nop
mov eax, dword [esi]
mov edi, dword [eax]
mov dword [ebp - 0x10], 0xffffffff
mov ecx, edi
call dword [0xa37360]
mov ecx, esi
push 1
call edi
mov dword [0xa8c5ec], 0
nop
mov esi, dword [0xa8c610]
test esi, esi
je 0x6f9b6c
nop
mov eax, dword [esi]
mov edi, dword [eax]
mov dword [ebp - 0x10], 0xffffffff
mov ecx, edi
call dword [0xa37360]
mov ecx, esi
push 1
call edi
mov dword [0xa8c610], 0
nop
mov esi, dword [0xa8c624]
test esi, esi
je 0x6f9b9b
nop
mov eax, dword [esi]
mov edi, dword [eax]
mov dword [ebp - 0x10], 0xffffffff
mov ecx, edi
call dword [0xa37360]
mov ecx, esi
push 1
call edi
mov dword [0xa8c624], 0
nop
mov esi, dword [0xa8c5d4]
test esi, esi
je 0x6f9bca
nop
mov eax, dword [esi]
mov edi, dword [eax]
mov dword [ebp - 0x10], 0xffffffff
mov ecx, edi
call dword [0xa37360]
mov ecx, esi
push 1
call edi
mov dword [0xa8c5d4], 0
nop
mov esi, dword [0xa8d668]
test esi, esi
je 0x6f9bf8
mov ecx, esi
call fcn.0066b790
mov eax, dword [ebp - 0x20]
xor eax, 0x4da30d07
push eax
push esi
call fcn.0091d82d
add esp, 8
mov dword [0xa8d668], 0
nop
mov edi, dword [0xa7fd9b]
mov dword [ebp - 0x30], 0
jmp 0x6fa22b
nop
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax]
add ecx, eax
mov dword [ebp - 0x28], ecx
mov eax, dword [0xa4c670]
xor eax, dword [ebp - 0x20]
mov dword [ebp - 0x34], 0
cmp eax, 0x134510ec
mov eax, 0
mov ecx, 0
jne 0x6f9c4b
nop
mov dword [0xa4c670], 0xf46a46f2
mov ecx, 0xffffffff
mov eax, 0xfffffffc
cmp dword [ebp - 0x3c], 0
jle 0x6f987b
mov edx, 0x9d7810
mov dword [ebp - 0x34], eax
mov eax, 0x9d7810
xor eax, eax
not eax
mov esi, dword [ebp - 0x54]
and eax, esi
and esi, edx
xor eax, edx
add esi, esi
mov edx, eax
xor edx, esi
mov dword [ebp - 0x50], edx
and esi, eax
mov dword [ebp - 0x54], esi
mov ebx, dword [ebp - 0x20]
lea eax, [ebx*4]
xor eax, 0x6d9c0c2a
mov dword [ebp - 0x68], eax
mov eax, ebx
xor eax, 0x29c5c7fa
mov dword [ebp - 0x48], eax
lea eax, [ebx*8]
mov dword [ebp - 0x2c], eax
mov edx, eax
xor edx, 0x80ac56e4
mov dword [ebp - 0x40], edx
mov edx, ebx
xor edx, 0x8a1e4ffb
mov dword [ebp - 0x88], edx
lea edx, [ebx + ebx]
mov dword [ebp - 0x78], ecx
mov ecx, edx
xor ecx, 0x890dc9ed
mov dword [ebp - 0x74], ecx
mov ecx, ebx
xor ecx, 0x75e1b004
mov dword [ebp - 0x84], ecx
xor eax, 0xc9f7b371
mov dword [ebp - 0x80], eax
mov eax, ebx
xor eax, 0xd63a3805
mov dword [ebp - 0x9c], eax
mov eax, ebx
shr eax, 4
mov ecx, ebx
shl ecx, 0x1c
xor ecx, ebx
xor ecx, 0xf72a91b8
mov dword [ebp - 0x94], ecx
xor eax, 0x46e4321f
mov dword [ebp - 0x98], eax
mov esi, ebx
shr esi, 3
mov edi, ebx
shl edi, 0x1d
xor edi, ebx
xor edi, 0x98d56e47
xor esi, 0xb4759ce2
xor edx, 0x7fa1ac37
mov dword [ebp - 0x90], edx
mov ecx, ebx
xor ecx, 0x2a3aea8b
mov edx, ebx
shr edx, 2
mov eax, ebx
shl eax, 0x1e
xor eax, ebx
xor eax, 0x15c51574
xor edx, 0x8708fff
add edi, dword [ebp - 0x94]
adc esi, dword [ebp - 0x98]
add edi, eax
adc esi, edx
add edi, ecx
adc esi, dword [ebp - 0x90]
add edi, dword [ebp - 0x9c]
adc esi, dword [ebp - 0x80]
add edi, dword [ebp - 0x84]
adc esi, dword [ebp - 0x74]
add edi, dword [ebp - 0x88]
adc esi, dword [ebp - 0x40]
add edi, dword [ebp - 0x48]
adc esi, dword [ebp - 0x68]
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x54]
lea eax, [eax + edx*2]
mov dword [ebp - 0x68], eax
add edi, dword [ebp - 0x34]
adc esi, dword [ebp - 0x78]
add edi, 4
mov dword [ebp - 0x50], edi
adc esi, 0
mov dword [ebp - 0x54], esi
mov eax, ebx
xor eax, 0xa7447f35
mov ecx, ebx
xor ecx, 0x58bb80ca
add ecx, eax
mov dword [ebp - 0x74], ecx
xor dword [ebp - 0x2c], 0x6d187f38
mov eax, ebx
xor eax, 0x4da30fe4
mov dword [ebp - 0x78], eax
mov ecx, dword [0xa4c674]
xor ecx, ebx
mov eax, dword [0xa4c678]
xor eax, ebx
cmp eax, 0x1a6f77a1
jne 0x6f9f75
mov dword [ebp - 0x84], ecx
mov eax, ebx
xor eax, 0x2ef17d6f
mov edx, ebx
xor edx, 0x2ef17d6e
xor ebx, 0x510e8291
and ebx, eax
sub edx, eax
lea eax, [edx + ebx*2]
imul eax, eax
mov ecx, 1
sub ecx, eax
imul ecx, eax
mov dword [ebp - 0x80], ecx
xor esi, esi
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x40], 0
mov ecx, dword [ebp - 0x38]
jmp 0x6f9e58
mov ecx, dword [ebp - 0x38]
xor dword [ebp - 0x34], ebx
mov edx, esi
xor edx, ecx
and esi, ecx
lea esi, [edx + esi*2]
cmp esi, dword [ebp - 0x3c]
jge 0x6f987b
mov eax, ecx
mov ecx, dword [ebp - 0x68]
lea edi, [ecx + esi]
mov edx, dword [ebp - 0x50]
add edx, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x54]
adc ebx, dword [ebp - 0x48]
sub edx, edi
sbb ebx, 0
mov edi, edx
sub edi, eax
sbb ebx, dword [ebp - 0x2c]
mov ebx, dword [ecx + esi]
jge 0x6f9e40
mov dword [ebp - 0x28], ebx
mov eax, edx
mov ecx, dword [ebp - 0x78]
shl eax, cl
mov ebx, 1
mov ecx, eax
shl ebx, cl
cmp dword [ebp - 0x84], 0x672e2b8b
jne 0x6f9eb2
add ebx, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x28]
mov eax, ecx
sub eax, ebx
imul eax, ebx
mov ebx, ecx
sub ebx, eax
imul ebx, eax
jmp 0x6f9ebe
add ebx, dword [ebp - 0x74]
mov eax, ebx
mov ecx, dword [ebp - 0x28]
or eax, ecx
not eax
xor ebx, ecx
or ebx, eax
mov ecx, dword [ebp - 0x38]
imul edi, ecx
mov eax, edi
sub eax, edx
imul eax, ecx
mov edx, ecx
mov ecx, eax
xor ecx, edi
and eax, edi
not ebx
lea eax, [ecx + eax*2]
mov edi, dword [ebp - 0x40]
lea ecx, [edi + 1]
mov dword [ebp - 0x88], ecx
add esi, eax
mov ecx, edx
shl eax, cl
sub esi, eax
mov eax, dword [ebp - 0x60]
lea ecx, [eax + edi*4]
add ecx, 4
add ecx, dword [eax + edi*4 + 4]
mov dword [ebp - 0x28], ecx
mov ecx, edx
mov dword [ebp - 0x48], 0
nop
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x40], eax
jmp 0x6f9e43
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x4da30d13
mov ecx, dword [ebp - 0x5c]
cmp dword [ecx + eax], 0
je 0x6f9527
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x4da30d1f
mov ecx, dword [ebp - 0x5c]
cmp dword [ecx + eax], 0
je 0x6f9527
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x4da30d1b
mov ecx, dword [ebp - 0x5c]
mov ecx, dword [ecx + eax]
mov dword [ebp - 0x10], 0xffffffff
call dword [0xa37360]
mov dword [ebp - 0x10], 3
push 0
call ecx
call fcn.006f8ab0
jmp 0x6f9527
cmp ecx, 0x672e2b8b
jne 0x6fa03b
xor edx, edx
cmp eax, 0x189e54ed
jne 0x6fa297
mov dword [ebp - 0x34], 0
xor ecx, ecx
mov dword [ebp - 0x40], 0
mov eax, dword [ebp - 0x38]
jmp 0x6f9fda
nop
mov ecx, dword [ebp - 0x40]
lea esi, [ecx + 1]
add edx, ebx
mov ebx, dword [ebp - 0x60]
lea eax, [ebx + ecx*4]
add eax, 4
add eax, dword [ebx + ecx*4 + 4]
mov dword [ebp - 0x28], eax
xor ecx, ecx
nop
mov dword [ebp - 0x40], esi
xor dword [ebp - 0x34], edi
mov esi, edx
mov eax, dword [ebp - 0x38]
xor esi, eax
and edx, eax
lea edx, [esi + edx*2]
cmp edx, dword [ebp - 0x3c]
jge 0x6f987b
nop
mov ebx, dword [ebp - 0x50]
add ebx, dword [ebp - 0x28]
mov edi, dword [ebp - 0x54]
mov dword [ebp - 0x48], ecx
adc edi, ecx
mov ecx, dword [ebp - 0x68]
lea esi, [ecx + edx]
sub ebx, esi
sbb edi, 0
cmp ebx, eax
sbb edi, dword [ebp - 0x2c]
mov edi, dword [ecx + edx]
jl 0x6f9fa3
mov ecx, dword [ebp - 0x48]
jmp 0x6f9fc2
mov edx, ebx
xor edx, 0x4da307e3
mov esi, ebx
xor esi, 0xb25cf81c
and esi, edi
and ecx, edx
or ecx, esi
mov esi, edi
and esi, edx
xor esi, ecx
mov ecx, edi
xor ecx, edx
not ecx
and ecx, esi
cmp ecx, edx
jne 0x6fa275
nop
mov edi, dword [0xa7fd9b]
jmp 0x6fa25b
xor esi, esi
mov dword [ebp - 0x34], 0
xor ecx, ecx
mov dword [ebp - 0x40], 0
mov edi, dword [ebp - 0x38]
jmp 0x6fa09b
add esi, edx
mov ecx, dword [ebp - 0x78]
shl edx, cl
mov eax, 1
mov ecx, edx
shl eax, cl
add eax, dword [ebp - 0x74]
and ebx, eax
mov edi, dword [ebp - 0x40]
lea eax, [edi + 1]
mov edx, dword [ebp - 0x60]
lea ecx, [edx + edi*4]
add ecx, 4
add ecx, dword [edx + edi*4 + 4]
mov dword [ebp - 0x28], ecx
xor ecx, ecx
nop
mov dword [ebp - 0x40], eax
xor dword [ebp - 0x34], ebx
mov eax, esi
mov edi, dword [ebp - 0x38]
xor eax, edi
and esi, edi
lea esi, [eax + esi*2]
cmp esi, dword [ebp - 0x3c]
jge 0x6f987b
nop
mov edx, dword [ebp - 0x50]
add edx, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x54]
mov dword [ebp - 0x48], ecx
adc ebx, ecx
mov ecx, dword [ebp - 0x68]
lea eax, [ecx + esi]
sub edx, eax
sbb ebx, 0
cmp edx, edi
sbb ebx, dword [ebp - 0x2c]
mov ebx, dword [ecx + esi]
jl 0x6fa052
mov ecx, dword [ebp - 0x48]
jmp 0x6fa083
add esi, eax
mov dword [ebp - 0x10], 0xffffffff
call dword [0xa37360]
mov dword [ebp - 0x10], 3
push esi
call ecx
nop
cmp dword [0xa8c5d4], 0
jne 0x6fa15f
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x4da30f2f
push eax
call fcn.0091d7fd
add esp, 4
nop
mov dword [eax], 0x954b00
mov edx, dword [ebp - 0x20]
mov ecx, edx
xor ecx, 0x4da30ffb
mov dword [eax + ecx], 0
mov ecx, edx
xor ecx, 0x4da30fe8
mov esi, dword [ebp - 0x3c]
mov dword [eax + esi], ecx
mov ecx, edx
xor ecx, 0x4da30feb
mov byte [eax + ecx], 0
mov ecx, dword [ebp - 0x8c]
mov dword [eax + ecx], 0x954b60
mov ecx, dword [ebp - 0x58]
mov dword [eax + ecx], 0
mov ecx, dword [ebp - 0xac]
mov dword [eax + ecx], 0
mov ecx, dword [ebp - 0x38]
mov dword [eax + ecx], 0
mov dword [0xa8c5d4], eax
nop
mov edx, dword [ebp - 0x20]
mov eax, edx
xor eax, 0xb2dcf018
mov ecx, dword [0xa8c5d4]
mov esi, dword [ebp - 0x58]
mov ecx, dword [ecx + esi]
add ecx, dword [0xa8c2fe]
mov dword [0xa7fd9b], ecx
mov ecx, dword [0xa8be8b]
mov esi, dword [ebp - 0x4c]
xor esi, ecx
not ecx
and ecx, eax
or esi, ecx
cmp esi, 0xffffffff
jne 0x6fa1c2
mov ecx, edx
xor ecx, 0x4da30f1f
add ecx, dword [0xa8c398]
mov dword [ebp - 0x3c], ecx
call fcn.006aada0
in ax, 0x64
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x3c]
call fcn.006aae70
mov edx, dword [ebp - 0x20]
mov eax, edx
xor eax, 0x8da30fe7
and eax, dword [0xa7fd8b]
xor eax, edx
cmp eax, 0xcda30fe7
jne 0x6fa212
nop
mov eax, dword [ebp - 0x20]
xor eax, 0x4da30feb
mov ecx, dword [ebp - 0x38]
push dword [ebp + ecx - 0xc0]
push dword [ebp + eax - 0xc0]
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
nop
push dword [ebp - 0xc0]
mov eax, dword [ebp - 0x8c]
push dword [ebp + eax - 0xc0]
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
nop
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xb0]
mov byte [eax + ecx], 0
or byte [0xa7fd77], 1
nop
mov edi, dword [ebp - 0x6c]
nop
mov esi, dword [ebp - 0x70]
test esi, esi
je 0x6fa246
mov ecx, esi
call fcn.0065b950
push dword [ebp - 0x58]
push esi
call fcn.0091d82d
add esp, 8
nop
cmp byte [ebp - 0x41], 0
je 0x6fa25b
nop
mov edi, dword [0xa7fd9b]
mov dword [ebp - 0x30], 0
nop
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
mov eax, edi
mov edx, dword [ebp - 0x30]
add esp, 0x4ec
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, ebx
xor ecx, 0x4da30f67
test dword [0xa8be8b], ecx
je 0x6fa30c
nop
push dword [ebp + 0xc]
call fcn.006f7af0
add esp, 4
jmp 0x6fa24d
mov dword [ebp - 0x34], 0
xor ecx, ecx
mov dword [ebp - 0x40], 0
mov eax, dword [ebp - 0x38]
jmp 0x6fa2e3
nop
mov ecx, dword [ebp - 0x40]
lea esi, [ecx + 1]
add edx, ebx
mov ebx, dword [ebp - 0x60]
lea eax, [ebx + ecx*4]
add eax, 4
add eax, dword [ebx + ecx*4 + 4]
mov dword [ebp - 0x28], eax
xor ecx, ecx
nop
mov dword [ebp - 0x40], esi
xor dword [ebp - 0x34], edi
mov esi, edx
mov eax, dword [ebp - 0x38]
xor esi, eax
and edx, eax
lea edx, [esi + edx*2]
cmp edx, dword [ebp - 0x3c]
jge 0x6f987b
nop
mov ebx, dword [ebp - 0x50]
add ebx, dword [ebp - 0x28]
mov edi, dword [ebp - 0x54]
mov dword [ebp - 0x48], ecx
adc edi, ecx
mov ecx, dword [ebp - 0x68]
lea esi, [ecx + edx]
sub ebx, esi
sbb edi, 0
cmp ebx, eax
sbb edi, dword [ebp - 0x2c]
mov edi, dword [ecx + edx]
jl 0x6fa2ac
mov ecx, dword [ebp - 0x48]
jmp 0x6fa2cb
mov esi, ebx
xor esi, 0x4da30fe3
or edi, esi
mov dword [0xa7fd77], edi
mov edi, dword [0xa7fd9b]
xor ebx, 0x4da30ffb
lea eax, [ebp - 0x4f8]
push ebx
push eax
push 0xa7fd77
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
mov esi, dword [ebp + esi - 0x4f8]
mov ecx, edi
call dword [0xa37360]
mov ebx, dword [ebp + 0xc]
push ebx
push 0
push esi
call edi
push ebx
call fcn.006f7af0
add esp, 4
xor edi, edi
nop
mov dword [ebp - 0x30], 0
jmp 0x6fa25b
nop
mov dword [ebp - 0x10], 1
call fcn.00900ce1
nop
mov dword [ebp - 0x10], 2
call fcn.00900ce1
nop word cs:[eax + eax]
push ebp
sub esp, 0x10
add ebp, 0xc
call fcn.009350a0
nop dword [eax]
push ebp
sub esp, 0x10
add ebp, 0xc
call fcn.009350a0
nop dword [eax]
push ebp
sub esp, 0x10
add ebp, 0xc
lea ecx, [ebp - 0xdc]
call fcn.006575f0
add esp, 0x10
pop ebp
ret