Function at 0x6e381899
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_WriteConsoleW]
call eax
sub esp, 0x14
test eax, eax
setne al
mov byte [0x6e41c000], al
movzx eax, byte [0x6e41c000]
xor eax, 1
test al, al
je 0x6e381b03
call fcn.6e38185f
mov dword [0x6e41d010], eax
call fcn.6e381823
mov dword [0x6e41d00c], eax
mov eax, dword [0x6e41d010]
mov dword [esp + 4], 0xa292cb5f
mov dword [esp], eax
call fcn.6e3810fa
mov dword [0x6e41d008], eax
mov eax, dword [0x6e41d010]
mov dword [esp + 4], 0xdec2c5b0
mov dword [esp], eax
call fcn.6e3810fa
mov dword [section..bss], eax
mov eax, dword [0x6e41d010]
mov dword [esp + 4], 0x328fa8ac
mov dword [esp], eax
call fcn.6e3810fa
mov dword [0x6e41d004], eax
mov dword [ebp - 0xc], 0
call fcn.6e3817bb
add dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x3660
jle 0x6e381955
mov eax, dword [0x6e41d010]
mov dword [esp + 4], 0xdec2c5b0
mov dword [esp], eax
call fcn.6e3810fa
mov dword [section..bss], eax
mov eax, dword [0x6e41d010]
mov dword [esp + 4], 0x328fa8ac
mov dword [esp], eax
call fcn.6e3810fa
mov dword [0x6e41d004], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
jmp 0x6e3819c8
mov eax, dword [ebp - 0x14]
add eax, str.OnLI5_f2z
movzx eax, byte [eax]
mov edx, dword [ebp - 0x10]
add edx, str.OnLI5_f2z
mov byte [edx], al
add dword [ebp - 0x10], 1
add dword [ebp - 0x14], 2
mov eax, dword [ebp - 0x14]
cmp eax, 0x99fff
jbe 0x6e3819aa
mov dword [ebp - 0x18], 0x1ff87a
mov dword [ebp - 0x2c], 0x7044b4a
mov dword [ebp - 0x28], 0xf2acc51
mov dword [ebp - 0x24], 0x521f0b1
mov dword [ebp - 0x20], 0xcbeae5ea
mov eax, dword [ebp - 0x18]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x10
lea eax, [ebp - 0x2c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x2c]
mov dword [esp], eax
call fcn.6e3810bb
lea eax, [ebp - 0x2c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x4d000
mov dword [esp + 4], str.OnLI5_f2z
mov dword [esp], str.OnLI5_f2z
call fcn.6e381215
mov dword [0x6e41d024], 0x6e382000
mov eax, dword [0x6e41d010]
mov dword [esp + 4], 0x5ebd4cdd
mov dword [esp], eax
call fcn.6e3810fa
mov dword [0x6e41d014], eax
mov eax, dword [0x6e41d014]
mov dword [esp + 4], 0x6e3814d6
mov dword [esp], eax
call fcn.6e3813ae
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x40], 0x6d0063
mov dword [ebp - 0x3c], 0x2e0064
mov dword [ebp - 0x38], 0x780065
mov dword [ebp - 0x34], 0x65
lea eax, [ebp - 0x40]
mov dword [ebp - 0x44], eax
mov word [ebp - 0x48], 0xe
mov word [ebp - 0x46], 0xe
mov eax, dword [0x6e41d010]
mov dword [esp + 4], 0x945b2b07
mov dword [esp], eax
call fcn.6e3810fa
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x30]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x48]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [ebp - 0x1c]
call eax
sub esp, 0x10
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x6e381b02
mov eax, dword [ebp - 0x30]
mov edx, eax
mov eax, dword [0x6e41d020]
add eax, edx
mov dword [0x6e41d028], eax
call fcn.6e3817ab
nop
nop
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
nop
nop
nop
push ecx
push eax
cmp eax, 0x3e8
lea ecx, [esp + 0xc]
jb 0x6e381b36
sub ecx, 0x3e8
or dword [ecx], 0
sub eax, 0x3e8
cmp eax, 0x3e8
ja 0x6e381b21
sub ecx, eax
or dword [ecx], 0
pop eax
pop ecx
ret