Function at 0x6f003b40
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006a3a0
mov eax, dword fs:[0]
push eax
sub esp, 0xf8
mov eax, dword [0x10093220]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xa0], ecx
push 0
mov eax, dword [ebp + 8]
push eax
call fcn.6f00ff90
add esp, 8
movzx ecx, ax
mov dword [ebp - 0xac], ecx
push 2
mov edx, dword [ebp + 8]
push edx
call fcn.6f00ff90
add esp, 8
movzx eax, ax
mov dword [ebp - 0xe4], eax
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0xa4], ecx
cmp dword [ebp - 0xa4], 0x2721
jg 0x6f003c30
cmp dword [ebp - 0xa4], 0x2721
je 0x6f004144
cmp dword [ebp - 0xa4], 0x41f
jg 0x6f003c0b
cmp dword [ebp - 0xa4], 0x41f
je 0x6f003e7e
cmp dword [ebp - 0xa4], 0x3ee
je 0x6f003fbf
cmp dword [ebp - 0xa4], 0x3f1
je 0x6f0042a1
jmp 0x6f0046a3
cmp dword [ebp - 0xa4], 0x423
je 0x6f003f41
cmp dword [ebp - 0xa4], 0x271a
je 0x6f004618
jmp 0x6f0046a3
mov edx, dword [ebp - 0xa4]
sub edx, 0xdeae
mov dword [ebp - 0xa4], edx
cmp dword [ebp - 0xa4], 7
ja 0x6f0046a3
mov eax, dword [ebp - 0xa4]
jmp dword [eax*4 + 0x100146c4]
mov ecx, dword [ebp - 0xac]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, 0x10094148
call fcn.6eff56d0
push 4
mov eax, dword [ebp + 8]
push eax
call fcn.6f00fe80
add esp, 8
mov ecx, dword [ebp - 0xa0]
mov dword [ecx + 0xa0], eax
push 8
mov edx, dword [ebp + 8]
push edx
call fcn.6f00fe80
add esp, 8
mov ecx, dword [ebp - 0xa0]
mov dword [ecx + 0xa4], eax
push 0xc
mov edx, dword [ebp + 8]
push edx
call fcn.6f00ff90
add esp, 8
movzx eax, ax
mov dword [0x10ee3abc], eax
cmp dword [0x10ee3abc], 0
jle 0x6f003f3c
push 0x10
push 0x14
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.6f00fec0
add esp, 0x10
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x2c]
call fcn.6eff8180
push eax
call fcn.6f00ec50
add esp, 4
movzx eax, al
test eax, eax
jne 0x6f003f20
push 0
call fcn.6f026aa0
push 0x1006f45e
lea ecx, [ebp - 0x2c]
call fcn.6effa480
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.6eff5220
jmp 0x6f0046a3
push 4
mov ecx, dword [ebp + 8]
push ecx
call fcn.6f00fe80
add esp, 8
mov edx, dword [ebp - 0xa0]
mov dword [edx + 0xb4], eax
mov ecx, ecx
mov edx, edx
mov ebp, ebp
mov ebp, ebp
mov edi, edi
mov ecx, ecx
mov esi, esi
mov edx, edx
mov ebx, ebx
push 4
mov eax, dword [ebp + 8]
push eax
call fcn.6f00fe80
add esp, 8
push eax
mov ecx, 0x10094148
call fcn.6f0055c0
cmp dword [ebp - 0xac], 8
jle 0x6f003fa8
push 8
mov ecx, dword [ebp + 8]
push ecx
call fcn.6f00fe80
add esp, 8
push eax
mov ecx, 0x10094148
call fcn.6eff7090
mov ebp, ebp
mov edx, edx
mov ebp, ebp
mov edx, edx
mov edx, edx
mov ebx, ebx
mov ecx, ecx
mov ecx, ecx
mov eax, eax
jmp 0x6f0046a3
mov edx, dword [ebp - 0xa0]
mov dword [edx + 0x88], 0
push 4
mov eax, dword [ebp + 8]
push eax
call fcn.6f00fe80
add esp, 8
mov ecx, dword [ebp - 0xa0]
mov dword [ecx + 0xa0], eax
push 0xa
mov edx, dword [ebp + 8]
push edx
call fcn.6f00fe80
add esp, 8
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
cdq
mov ecx, 0x2710
idiv ecx
mov eax, dword [ebp - 0xa0]
mov dword [eax + 0xd4], edx
mov eax, dword [ebp - 0xc4]
cdq
mov ecx, 0x989680
idiv ecx
mov eax, edx
cdq
mov ecx, 0x2710
idiv ecx
mov edx, dword [ebp - 0xa0]
mov word [edx + 0xda], ax
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0xc4]
sub ecx, dword [eax + 0xd4]
mov edx, dword [ebp - 0xa0]
movzx eax, word [edx + 0xda]
imul edx, eax, 0x2710
sub ecx, edx
mov eax, ecx
cdq
mov ecx, 0x989680
idiv ecx
mov edx, dword [ebp - 0xa0]
mov word [edx + 0xd8], ax
push 0x71
mov eax, dword [ebp + 8]
push eax
call fcn.6f00fe60
add esp, 8
movzx ecx, al
push ecx
push 0x72
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x9c]
push eax
call fcn.6f00fec0
add esp, 0x10
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebp - 0xf0]
push ecx
mov ecx, dword [ebp - 0xa0]
call fcn.6effa3f0
lea ecx, [ebp - 0x9c]
call fcn.6eff5220
mov edx, dword [0x1009571c]
mov dword [edx + 0x9c], 0
mov eax, dword [ebp - 0xa0]
mov dword [eax + 0x98], 0xa
mov ecx, dword [0x1009571c]
mov ecx, dword [ecx + 0xdc]
call fcn.6effcf20
mov edx, dword [0x1009571c]
mov ecx, dword [edx + 0xe0]
call fcn.6effcf20
mov eax, dword [0x1009571c]
mov ecx, dword [eax + 0xe4]
call fcn.6effcf20
mov ecx, dword [0x1009571c]
mov ecx, dword [ecx + 0xe8]
call fcn.6effcf20
mov edx, dword [0x10ee3b64]
mov ecx, dword [edx + 0x280]
call fcn.6effcf20
mov byte [0x10ee3a84], 0
jmp 0x6f0046a3
push 4
mov eax, dword [ebp + 8]
push eax
call fcn.6f00fe80
add esp, 8
mov ecx, dword [0x1009571c]
cmp eax, dword [ecx + 0xa0]
je 0x6f004165
jmp 0x6f0046a3
push 8
mov edx, dword [ebp + 8]
push edx
call fcn.6f00fe80
add esp, 8
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 1
jne 0x6f00429c
push 0xc
mov eax, dword [ebp + 8]
push eax
call fcn.6f00ff90
add esp, 8
movzx ecx, ax
mov dword [ebp - 0xf8], ecx
push 0x10
mov edx, dword [ebp + 8]
push edx
call fcn.6f00fea0
add esp, 8
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], edx
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0xb
je 0x6f0041f1
cmp dword [ebp - 0xd8], 0x27
je 0x6f0041da
jmp 0x6f00429c
mov ecx, dword [ebp - 0xbc]
mov edx, dword [ebp - 0xa0]
mov dword [edx + 0xd0], ecx
jmp 0x6f00429c
push 0
push 0x2710
mov eax, dword [ebp - 0xb8]
push eax
mov ecx, dword [ebp - 0xbc]
push ecx
call fcn.6f017390
mov edx, dword [ebp - 0xa0]
mov dword [edx + 0xd4], eax
push 0
push 0x989680
mov eax, dword [ebp - 0xb8]
push eax
mov ecx, dword [ebp - 0xbc]
push ecx
call fcn.6f017390
push 0
push 0x2710
push edx
push eax
call fcn.6f017320
mov edx, dword [ebp - 0xa0]
mov word [edx + 0xda], ax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0xd4]
cdq
mov ecx, dword [ebp - 0xbc]
sub ecx, eax
mov esi, dword [ebp - 0xb8]
sbb esi, edx
mov edx, dword [ebp - 0xa0]
movzx eax, word [edx + 0xda]
imul eax, eax, 0x2710
cdq
sub ecx, eax
sbb esi, edx
push 0
push 0x989680
push esi
push ecx
call fcn.6f017320
mov ecx, dword [ebp - 0xa0]
mov word [ecx + 0xd8], ax
jmp 0x6f0046a3
push 0xc
mov edx, dword [ebp + 8]
push edx
call fcn.6f00ff90
add esp, 8
mov word [ebp - 0xb0], ax
movzx eax, word [ebp - 0xb0]
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x1b
je 0x6f0043ef
cmp dword [ebp - 0xc8], 0x64
je 0x6f0042e7
cmp dword [ebp - 0xc8], 0x65
je 0x6f004351
jmp 0x6f004613
mov edi, edi
mov esi, esi
mov eax, eax
mov ebx, ebx
mov esi, esi
mov edx, edx
mov ecx, ecx
mov eax, eax
mov ebx, ebx
push 4
mov ecx, dword [ebp + 8]
push ecx
call fcn.6f00fe80
add esp, 8
push eax
mov ecx, 0x10094148
call fcn.6eff7090
push 8
mov edx, dword [ebp + 8]
push edx
call fcn.6f00fe80
add esp, 8
push eax
mov ecx, 0x10094148
call fcn.6f0055c0
call fcn.6f00a040
mov dword [0x10095744], 1
mov ecx, ecx
mov edi, edi
mov esi, esi
mov ebp, ebp
mov ebp, ebp
mov eax, eax
mov ebp, ebp
mov esi, esi
mov eax, eax
jmp 0x6f004613
mov ebp, ebp
mov ebx, ebx
mov edx, edx
mov ebx, ebx
mov eax, eax
mov ebx, ebx
mov ebx, ebx
mov ebp, ebp
mov ebx, ebx
push 4
mov eax, dword [ebp + 8]
push eax
call fcn.6f00fe80
add esp, 8
mov dword [ebp - 0xd0], eax
push 8
mov ecx, dword [ebp + 8]
push ecx
call fcn.6f00fe80
add esp, 8
mov dword [ebp - 0xd4], eax
lea edx, [ebp - 0xd4]
push edx
lea eax, [ebp - 0xd0]
push eax
mov ecx, 0x10094148
call fcn.6eff5ee0
push eax
call fcn.6f00eec0
add esp, 0xc
mov ecx, dword [ebp - 0xd4]
push ecx
mov edx, dword [ebp - 0xd0]
push edx
movzx eax, word [ebp - 0xb0]
push eax
mov ecx, dword [ebp - 0xa0]
push ecx
call fcn.6f003370
mov dword [0x10095744], 1
mov ebx, ebx
mov edx, edx
mov ecx, ecx
mov ebp, ebp
mov ebp, ebp
mov edx, edx
mov esi, esi
mov esi, esi
mov edx, edx
jmp 0x6f004613
cmp dword [ebp - 0xac], 0x5e
jle 0x6f00449e
push 0x5c
mov edx, dword [ebp + 8]
push edx
call fcn.6f00ff90
add esp, 8
movzx eax, ax
cmp eax, 0x3e7
jne 0x6f00441d
mov byte [ebp - 0xa7], 1
jmp 0x6f004424
mov byte [ebp - 0xa7], 0
mov cl, byte [ebp - 0xa7]
mov byte [ebp - 0xbd], cl
push 0x5e
mov edx, dword [ebp + 8]
push edx
call fcn.6f00ff90
add esp, 8
movzx eax, ax
cmp eax, 0x3e7
jne 0x6f004451
mov byte [ebp - 0xa5], 1
jmp 0x6f004458
mov byte [ebp - 0xa5], 0
mov cl, byte [ebp - 0xa5]
mov byte [ebp - 0xbe], cl
push 0x60
mov edx, dword [ebp + 8]
push edx
call fcn.6f00ff90
add esp, 8
movzx eax, ax
cmp eax, 0x3e7
jne 0x6f004485
mov byte [ebp - 0xa6], 1
jmp 0x6f00448c
mov byte [ebp - 0xa6], 0
mov ecx, dword [ebp - 0xa0]
mov dl, byte [ebp - 0xa6]
mov byte [ecx + 0xc9], dl
push 0x19
mov eax, dword [0x1009571c]
mov ecx, dword [eax + 0xdc]
call fcn.6effcee0
test eax, eax
je 0x6f004613
mov ecx, dword [0x1006c07c]
cmp dword [ecx], 0x8b55ff8b
jne 0x6f0044e4
mov edx, dword [0x1006c080]
cmp dword [edx], 0x8b55ff8b
jne 0x6f0044e4
mov eax, dword [0x10ee3a74]
movzx ecx, byte [eax]
cmp ecx, 0xe9
jne 0x6f00451c
push 0
push 0
push 0
push 0x1001f0a0
push 0
push 0
call fcn.6f00f890
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x100], esp
push 0x1006f45f
call fcn.6eff4990
push 9
mov ecx, dword [0x10ee39b0]
call fcn.6f007e60
jmp 0x6f004560
mov edx, dword [0x100956f0]
mov eax, dword [0x100956f0]
mov ecx, dword [edx + 0x20]
cmp ecx, dword [eax + 0x28]
jne 0x6f004559
cmp dword [0x1009572c], 0
je 0x6f004559
cmp dword [0x10095730], 0
je 0x6f004559
cmp dword [0x10095734], 0
je 0x6f004559
mov edx, dword [0x1009571c]
cmp dword [edx + 0x8c], 1
je 0x6f004560
push 0
call fcn.6f026ac0
mov eax, dword [0x10ee3a6c]
push eax
mov ecx, dword [0x10ee3a5c]
push ecx
call fcn.6f000fc0
add esp, 8
mov edx, dword [eax]
mov dword [ebp - 0xe0], edx
mov eax, dword [0x10ee3a70]
push eax
mov ecx, dword [0x10ee3a5c]
push ecx
call fcn.6f000fc0
add esp, 8
mov edx, dword [eax]
mov dword [ebp - 0xcc], edx
cmp dword [ebp - 0xe0], 0
je 0x6f0045af
cmp dword [ebp - 0xe0], 0x100
jl 0x6f0045c1
cmp dword [ebp - 0xcc], 0
je 0x6f0045e3
cmp dword [ebp - 0xcc], 0x64
jge 0x6f0045e3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x104], esp
push 0x1006f466
call fcn.6eff4990
push 0xd
mov ecx, dword [0x10ee39b0]
call fcn.6f007e60
mov eax, dword [0x1009571c]
mov ecx, dword [eax + 0xdc]
call fcn.6effcf20
mov ecx, dword [ebp - 0xa0]
mov dword [ecx + 0x88], 0
mov edx, dword [ebp - 0xa0]
mov dword [edx + 0x8c], 1
jmp 0x6f0046a3
push 0x14
mov eax, dword [ebp + 8]
push eax
call fcn.6f00fe60
add esp, 8
mov byte [ebp - 0xfc], al
cmp byte [ebp - 0xfc], 0xc9
je 0x6f004637
jmp 0x6f0046a3
push 8
mov ecx, dword [ebp + 8]
push ecx
call fcn.6f00fe80
add esp, 8
mov edx, dword [ebp - 0xa0]
mov dword [edx + 0x9c], eax
push 0xc
mov eax, dword [ebp + 8]
push eax
call fcn.6f00fe80
add esp, 8
mov ecx, dword [ebp - 0xa0]
mov dword [ecx + 0x98], eax
mov edx, dword [ebp - 0xa0]
cmp dword [edx + 0x98], 0xa
jg 0x6f004689
mov eax, dword [ebp - 0xa0]
cmp dword [eax + 0x98], 1
jge 0x6f004699
mov ecx, dword [ebp - 0xa0]
mov dword [ecx + 0x98], 0xa
mov dword [0x10095744], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.6f017080
mov esp, ebp
pop ebp
ret 8