Function at 0x67e000
Capabilities:
Get number of processors
Terminate process

Disassembly:
jmp 0x67e003
mov eax, dword [0x681048]
and eax, 0x20
test eax, eax
jne 0x67e0a3
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x6819f0], eax
mov dword [0x6819f8], eax
mov dword [0x6819fc], edx
mov eax, dword fs:[0x30]
test eax, eax
js 0x67e081
push 0x6819f4
push 4
push 0xf8
mov ecx, dword [0x6819f0]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x67e07f
mov eax, dword [0x6819f8]
add dword [eax + 0x50], 0x2000
jmp 0x67e0a2
jmp 0x67e0a2
mov edx, dword [0x6819fc]
test edx, edx
jns 0x67e0a2
mov edx, dword [edx + 4]
mov dword [0x6819ec], edx
add dword [edx + 0x50], 0x2000
xor dword [edx + 0x11], 0x424f4420
nop
call fcn.00680660
cmp dword [0x681594], 0
jne 0x67e157
mov ecx, dword [0x68107c]
mov dword [0x681a20], ecx
push 0x1e
push 0x681168
call fcn.006804a6
add esp, 8
push 0x64
push 0x681188
call fcn.006804a6
add esp, 8
push 0x64
push 0x6811f0
call fcn.006804a6
add esp, 8
push 0x64
push 0x681258
call fcn.006804a6
add esp, 8
push 0x64
push 0x6812c0
call fcn.006804a6
add esp, 8
push 0x64
push 0x681328
call fcn.006804a6
add esp, 8
push 0x64
push 0x681390
call fcn.006804a6
add esp, 8
push 0x64
push 0x6813f8
call fcn.006804a6
add esp, 8
push 0x64
push 0x681460
call fcn.006804a6
add esp, 8
push 0x64
push 0x6814c8
call fcn.006804a6
add esp, 8
call fcn.00680318
mov edx, dword [0x681048]
and edx, 0x20
test edx, edx
je 0x67e1a1
push ebp
mov ebp, esp
mov eax, dword [ebp + 0xc]
mov dword [0x68158c], eax
pop ebp
cmp dword [0x68158c], 1
je 0x67e190
cmp dword [0x68158c], 2
je 0x67e190
mov dword [ebp - 4], 0
jmp 0x67e197
mov dword [ebp - 4], 1
mov eax, dword [ebp - 4]
mov dword [0x681590], eax
jmp 0x67e1ab
mov dword [0x681590], 1
mov dword [0x681598], 0
mov ecx, entry0
sub ecx, dword [0x681018]
mov dword [0x681534], ecx
mov edx, dword [0x681034]
add edx, dword [0x681534]
mov dword [0x68153c], edx
mov eax, dword [0x681044]
add eax, dword [0x681534]
mov dword [0x681540], eax
cmp dword [0x681590], 0
je 0x67e3cc
cmp dword [0x681594], 0
jne 0x67e3cc
mov dword [0x681594], 1
mov dword [0x681598], 1
call fcn.006801d2
test eax, eax
je 0x67e3cc
call fcn.0067f8a3
test eax, eax
je 0x67e3cc
mov ecx, dword [0x681070]
xor ecx, dword [0x681068]
mov dword [0x681070], ecx
mov edx, dword [0x681074]
xor edx, dword [0x681060]
mov dword [0x681074], edx
call fcn.0067fb1b
test eax, eax
je 0x67e3ba
call fcn.0067eda5
push 0x681a28
call fcn.0067ee82
add esp, 4
call fcn.0067fb26
mov dword [0x681538], eax
cmp dword [0x681538], 0
je 0x67e38d
call fcn.0067fc1e
test eax, eax
je 0x67e38d
mov eax, dword [0x681048]
and eax, 0x20
test eax, eax
je 0x67e2b2
push 0x681a3c
call fcn.0067ee82
add esp, 4
jmp 0x67e2bf
push 0x681a4c
call fcn.0067ee82
add esp, 4
call fcn.0067f5e5
test eax, eax
je 0x67e386
mov ecx, dword [0x681070]
xor ecx, dword [0x681068]
mov dword [0x681070], ecx
mov edx, dword [0x681074]
xor edx, dword [0x681060]
mov dword [0x681074], edx
call fcn.0067f7b2
mov dword [0x6819e4], eax
cmp dword [0x6819e4], 0
je 0x67e372
mov eax, dword [0x681014]
add eax, dword [0x681534]
push eax
call fcn.0067eaf9
add esp, 4
test eax, eax
je 0x67e372
mov ecx, dword [0x681010]
add ecx, dword [0x681534]
push ecx
call fcn.0067e578
add esp, 4
test eax, eax
je 0x67e372
call fcn.0067e9ae
test eax, eax
je 0x67e372
call fcn.0067ebfc
test eax, eax
je 0x67e372
mov dword [0x681598], 0
mov edx, dword [0x681070]
xor edx, dword [0x6819e4]
mov dword [0x681070], edx
mov eax, dword [0x681074]
xor eax, dword [0x681060]
mov dword [0x681074], eax
push 0x8000
push 0
mov ecx, dword [0x681584]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualFree]
call fcn.0067f218
jmp 0x67e3b8
call fcn.0067f218
push 0x64
push 0x681368
push 0x681188
call fcn.0067fab4
add esp, 0xc
push 0x681168
push 0x681368
call fcn.0067f2a4
add esp, 8
jmp 0x67e3cc
push 0x681168
push 0x681258
call fcn.0067f2a4
add esp, 8
cmp dword [0x6819dc], 0
je 0x67e3f3
push 0x10
push 0x681168
push 0x681a60
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [0x681598], 1
cmp dword [0x681598], 0
je 0x67e419
mov edx, dword [0x681048]
and edx, 0x20
test edx, edx
je 0x67e411
mov eax, 0
ret
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [0x6819d8], 1
mov eax, dword [0x681538]
and eax, 0x8000
test eax, eax
je 0x67e445
mov ecx, dword [0x681050]
imul ecx, ecx, 0xea60
mov dword [0x6819e8], ecx
jmp 0x67e457
mov edx, dword [0x681054]
imul edx, edx, 0x3e8
mov dword [0x6819e8], edx
mov eax, dword [0x6819e8]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov dword [0x6815b0], eax
push 0x6815a0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, dword [0x681008]
add edx, dword [0x681534]
mov dword [0x681530], edx
mov eax, dword [0x681068]
cmp eax, dword [0x6819e4]
je 0x67e4a0
mov ecx, dword [0x6819e4]
mov dword [0x681068], ecx
mov edx, dword [0x681048]
and edx, 0x20
test edx, edx
jne 0x67e4c8
cld
push edi
push ecx
mov edi, 0x67e003
mov ecx, 0x67e4a0
sub ecx, edi
shr ecx, 2
mov ax, 0xeb00
rep stosw word es:[edi], ax
pop ecx
pop edi
jmp dword [0x681530]