Function at 0x63c41899
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_WriteConsoleW]
call eax
sub esp, 0x14
test eax, eax
setne al
mov byte [0x64696800], al
movzx eax, byte [0x64696800]
xor eax, 1
test al, al
je 0x63c41b03
call fcn.63c4185f
mov dword [0x64697010], eax
call fcn.63c41823
mov dword [0x6469700c], eax
mov eax, dword [0x64697010]
mov dword [esp + 4], 0x8bd8c746
mov dword [esp], eax
call fcn.63c410fa
mov dword [0x64697008], eax
mov eax, dword [0x64697010]
mov dword [esp + 4], 0x77c1577
mov dword [esp], eax
call fcn.63c410fa
mov dword [section..bss], eax
mov eax, dword [0x64697010]
mov dword [esp + 4], 0xafea9b93
mov dword [esp], eax
call fcn.63c410fa
mov dword [0x64697004], eax
mov dword [ebp - 0xc], 0
call fcn.63c417bb
add dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x35f8
jle 0x63c41955
mov eax, dword [0x64697010]
mov dword [esp + 4], 0x77c1577
mov dword [esp], eax
call fcn.63c410fa
mov dword [section..bss], eax
mov eax, dword [0x64697010]
mov dword [esp + 4], 0xafea9b93
mov dword [esp], eax
call fcn.63c410fa
mov dword [0x64697004], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
jmp 0x63c419c8
mov eax, dword [ebp - 0x14]
add eax, section..data
movzx eax, byte [eax]
mov edx, dword [ebp - 0x10]
add edx, section..data
mov byte [edx], al
add dword [ebp - 0x10], 1
add dword [ebp - 0x14], 2
mov eax, dword [ebp - 0x14]
cmp eax, 0xa547ff
jbe 0x63c419aa
mov dword [ebp - 0x18], 0x260387
mov dword [ebp - 0x2c], 0x59ee4cd3
mov dword [ebp - 0x28], 0x44d8a5dc
mov dword [ebp - 0x24], 0xdeb2cd63
mov dword [ebp - 0x20], 0x2cc1a8a0
mov eax, dword [ebp - 0x18]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x10
lea eax, [ebp - 0x2c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x2c]
mov dword [esp], eax
call fcn.63c410bb
lea eax, [ebp - 0x2c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x52a400
mov dword [esp + 4], 0x63c42000
mov dword [esp], section..data
call fcn.63c41215
mov dword [0x64697024], 0x63c42000
mov eax, dword [0x64697010]
mov dword [esp + 4], 0x30dce444
mov dword [esp], eax
call fcn.63c410fa
mov dword [0x64697014], eax
mov eax, dword [0x64697014]
mov dword [esp + 4], 0x63c414d6
mov dword [esp], eax
call fcn.63c413ae
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x40], 0x6d0063
mov dword [ebp - 0x3c], 0x2e0064
mov dword [ebp - 0x38], 0x780065
mov dword [ebp - 0x34], 0x65
lea eax, [ebp - 0x40]
mov dword [ebp - 0x44], eax
mov word [ebp - 0x48], 0xe
mov word [ebp - 0x46], 0xe
mov eax, dword [0x64697010]
mov dword [esp + 4], 0xec494b6e
mov dword [esp], eax
call fcn.63c410fa
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x30]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x48]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [ebp - 0x1c]
call eax
sub esp, 0x10
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x63c41b02
mov eax, dword [ebp - 0x30]
mov edx, eax
mov eax, dword [0x64697020]
add eax, edx
mov dword [0x64697028], eax
call fcn.63c417ab
nop
nop
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
nop
nop
nop
push ecx
push eax
cmp eax, 0x3e8
lea ecx, [esp + 0xc]
jb 0x63c41b36
sub ecx, 0x3e8
or dword [ecx], 0
sub eax, 0x3e8
cmp eax, 0x3e8
ja 0x63c41b21
sub ecx, eax
or dword [ecx], 0
pop eax
pop ecx
ret