Function at 0x68bedc
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1ac
mov eax, dword [0x43a400]
xor eax, esp
mov dword [esp + 0x1a8], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
push 4
push 0x400
mov dword [esp + 0x18], eax
mov dword [esp + 0x24], 0
mov dword [esp + 0x1c], 0
call fcn.00698240
add esp, 8
mov dword [0x443c44], eax
test eax, eax
je 0x68c5f2
mov edx, 0x43ffe0
mov dword [0x444e50], 0
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x68bf3e
sub edx, ecx
js 0x68bf55
mov ecx, 0x43ffe0
call fcn.00678f0c
jmp 0x68bf57
xor eax, eax
push 0x43ffd0
push 0
push 0x443bd4
mov edx, 4
mov ecx, eax
call fcn.0067db3c
mov edx, 0x440010
add esp, 0xc
lea ecx, [edx + 1]
mov edi, edi
mov al, byte [edx]
inc edx
test al, al
jne 0x68bf7c
sub edx, ecx
js 0x68bf95
mov ecx, 0x440010
call fcn.00678f0c
mov edi, eax
jmp 0x68bf97
xor edi, edi
mov esi, dword [0x443b40]
test esi, esi
je 0x68bfac
cmp dword [esi], edi
je 0x68bfc1
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x68bfa1
push 0x18
call fcn.00698280
mov ebx, eax
add esp, 4
test ebx, ebx
jne 0x68bfe3
jmp 0x68c608
test esi, esi
je 0x68bfac
lea eax, [edi + 0xa]
push eax
push 0x43c434
push 1
call fcn.00678ebc
add esp, 0xc
cmp dword [esi + 4], 9
je 0x68bfac
jmp 0x68c61e
test edi, edi
je 0x68bffe
push dword [edi]
push edi
push 0x43b344
push 0x1000
call fcn.00678ebc
add esp, 0x10
inc dword [edi]
mov eax, dword [0x443b40]
mov esi, eax
mov dword [ebx], edi
mov dword [ebx + 4], 9
mov dword [ebx + 8], 0x443bd8
mov dword [ebx + 0xc], 0
mov dword [ebx + 0x10], 0x43ffec
mov dword [esp + 0x18], 0
test esi, esi
je 0x68c0c4
add edi, 0xa
lea ebx, [ebx]
mov eax, dword [esi]
mov ecx, edi
add eax, 0xa
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x68c063
test dl, dl
je 0x68c05f
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x68c063
add eax, 2
add ecx, 2
test dl, dl
jne 0x68c043
xor eax, eax
jmp 0x68c068
sbb eax, eax
or eax, 1
test eax, eax
jns 0x68c07b
mov edx, esi
mov esi, dword [esi + 0x14]
mov dword [esp + 0x18], edx
test esi, esi
jne 0x68c03c
jmp 0x68c0b3
mov edx, dword [esi]
add edx, 0xa
mov eax, edx
mov cl, byte [eax]
cmp cl, byte [edi]
jne 0x68c0a2
test cl, cl
je 0x68c09e
mov cl, byte [eax + 1]
cmp cl, byte [edi + 1]
jne 0x68c0a2
add eax, 2
add edi, 2
test cl, cl
jne 0x68c082
xor eax, eax
jmp 0x68c0a7
sbb eax, eax
or eax, 1
test eax, eax
je 0x68c625
mov edx, dword [esp + 0x18]
test edx, edx
je 0x68c0bf
mov dword [ebx + 0x14], esi
mov dword [edx + 0x14], ebx
jmp 0x68c0cd
mov eax, dword [0x443b40]
mov dword [ebx + 0x14], eax
mov dword [0x443b40], ebx
call fcn.0067991c
call fcn.0068ba7c
call fcn.0068ce9c
lea eax, [esp + 0x20]
push eax
push 0x202
call dword [0x434160]
test eax, eax
jne 0x68c63a
call fcn.0067f33c
call fcn.0068f24c
call fcn.006836fc
call fcn.0068aa7c
call fcn.00694e0c
call fcn.00695d5c
mov esi, dword [ebp + 8]
mov edi, 1
mov ebx, dword [0x443bd0]
cmp esi, edi
jle 0x68c2aa
lea esp, [esp]
mov eax, dword [esp + 0x10]
mov esi, dword [eax + edi*4]
cmp byte [esi], 0x2d
jne 0x68c2a7
mov ecx, 0x440018
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x68c163
test dl, dl
je 0x68c15f
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x68c163
add eax, 2
add ecx, 2
test dl, dl
jne 0x68c143
xor eax, eax
jmp 0x68c168
sbb eax, eax
or eax, 1
test eax, eax
je 0x68c2a6
mov ecx, 0x44001c
mov eax, esi
jmp 0x68c17c
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x68c19c
test dl, dl
je 0x68c198
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x68c19c
add eax, 2
add ecx, 2
test dl, dl
jne 0x68c17c
xor eax, eax
jmp 0x68c1a1
sbb eax, eax
or eax, 1
test eax, eax
je 0x68c675
mov ecx, 0x440020
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x68c1d0
test dl, dl
je 0x68c1cc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x68c1d0
add eax, 2
add ecx, 2
test dl, dl
jne 0x68c1b0
xor eax, eax
jmp 0x68c1d5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x68c1e6
mov dword [esp + 0x14], 1
jmp 0x68c298
mov ecx, 0x440024
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x68c20d
test dl, dl
je 0x68c209
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x68c20d
add eax, 2
add ecx, 2
test dl, dl
jne 0x68c1ed
xor eax, eax
jmp 0x68c212
sbb eax, eax
or eax, 1
test eax, eax
jne 0x68c220
mov dword [esp + 0x1c], 1
jmp 0x68c298
mov eax, 0x440028
lea esp, [esp]
mov cl, byte [esi]
cmp cl, byte [eax]
jne 0x68c24c
test cl, cl
je 0x68c248
mov cl, byte [esi + 1]
cmp cl, byte [eax + 1]
jne 0x68c24c
add esi, 2
add eax, 2
test cl, cl
jne 0x68c22c
xor eax, eax
jmp 0x68c251
sbb eax, eax
or eax, 1
test eax, eax
jne 0x68c663
inc edi
cmp edi, dword [ebp + 8]
jge 0x68c651
test ebx, ebx
je 0x68c26e
mov ecx, ebx
call fcn.006791cc
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + edi*4]
mov edx, ecx
lea esi, [edx + 1]
mov edi, edi
mov al, byte [edx]
inc edx
test al, al
jne 0x68c27c
sub edx, esi
js 0x68c290
call fcn.00678f0c
mov ebx, eax
jmp 0x68c292
xor ebx, ebx
mov dword [0x443bd0], ebx
mov esi, dword [ebp + 8]
inc edi
cmp edi, esi
jl 0x68c12c
jmp 0x68c2aa
inc edi
mov esi, dword [ebp + 8]
test ebx, ebx
je 0x68c2c2
mov ecx, ebx
call fcn.00697bec
mov dword [0x443bd0], eax
test eax, eax
jne 0x68c397
mov edx, 0x44002c
lea ecx, [edx + 1]
mov edi, edi
mov al, byte [edx]
inc edx
test al, al
jne 0x68c2cc
sub edx, ecx
js 0x68c2e3
mov ecx, 0x44002c
call fcn.00678f0c
jmp 0x68c2e5
xor eax, eax
mov ecx, eax
call fcn.00697bec
mov dword [0x443bd0], eax
test eax, eax
je 0x68c327
add eax, 0xa
push 0
push eax
call fcn.006a2cb4
add esp, 8
test eax, eax
jns 0x68c31e
mov ecx, dword [0x443bd0]
call fcn.006791cc
mov dword [0x443bd0], 0
jmp 0x68c327
cmp dword [0x443bd0], 0
jne 0x68c397
push 0
push 0x440038
call fcn.006a2cb4
add esp, 8
test eax, eax
js 0x68c367
mov edx, 0x44004c
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x68c342
sub edx, ecx
js 0x68c35e
mov ecx, 0x44004c
call fcn.00678f0c
mov dword [0x443bd0], eax
jmp 0x68c36c
xor eax, eax
mov dword [0x443bd0], eax
jmp 0x68c36c
mov eax, dword [0x443bd0]
test eax, eax
je 0x68c397
add eax, 0xa
push 0
push eax
call fcn.006a2cb4
add esp, 8
test eax, eax
jns 0x68c397
mov ecx, dword [0x443bd0]
call fcn.006791cc
mov dword [0x443bd0], 0
call fcn.0067f1dc
test eax, eax
js 0x68c687
cmp edi, esi
jge 0x68c3d1
lea esp, [esp]
mov eax, dword [esp + 0x10]
mov edx, 0x440060
push 0
push 0
mov ecx, dword [eax + edi*4]
call fcn.0067ec2c
add esp, 8
test eax, eax
js 0x68c601
inc edi
cmp edi, esi
jl 0x68c3ac
call fcn.00679b8c
call fcn.0068bd5c
call fcn.0068d33c
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
test esi, esi
jne 0x68c3f5
test edi, edi
jne 0x68c3f5
call fcn.0068296c
call fcn.0067f60c
call fcn.0068467c
call fcn.0068fb9c
call fcn.0069538c
call fcn.006961bc
test edi, edi
je 0x68c55b
call fcn.00698911
lea esi, [eax + 0x20]
mov eax, dword [0x443bd0]
test eax, eax
je 0x68c433
cmp word [eax + 8], 0
jbe 0x68c433
add eax, 0xa
jmp 0x68c438
mov eax, 0x43c960
push eax
push 0x43c9c4
push esi
call fcn.00698a75
push 0x1000
push 0x43ca50
push esi
call fcn.00698a75
mov edi, dword [0x443b40]
add esp, 0x18
test edi, edi
je 0x68c680
lea esp, [esp]
mov eax, dword [edi]
add eax, 0xa
push eax
push 0x43caa8
push esi
call fcn.00698a75
push 0x43cab4
push esi
call fcn.00698a75
push 0x443b3a
push esi
call fcn.00698a75
mov eax, dword [edi + 4]
add esp, 0x1c
cmp eax, 0xe
ja 0x68c635
jmp dword [eax*4 + 0x4147fc]
test esi, esi
jne 0x68c68e
cmp dword [0x443bd4], esi
je 0x68c585
call fcn.00698911
push 0x442a00
push 4
call fcn.00678ebc
add esp, 8
call dword [0x434044]
mov ecx, dword [0x443bd8]
test ecx, ecx
je 0x68c597
add ecx, 0xa
call fcn.00697cec
mov ecx, dword [sym.imp.KERNEL32.DLL_CloseHandle]
sub esp, 8
lea ecx, [ecx + 0xa]
call fcn.0068a14c
add esp, 8
test eax, eax
jne 0x68c5c1
mov eax, dword [0x443bd8]
test eax, eax
je 0x68c6b0
jmp 0x68c6a4
call fcn.006830bc
mov eax, dword [0x443bd8]
test eax, eax
je 0x68c5db
add eax, 0xa
push eax
call fcn.006aaedb
add esp, 4
mov ecx, dword [esp + 0x1b4]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.006981f9
mov esp, ebp
pop ebp
ret
push 0x43b310
push 1
call fcn.00678ebc
add esp, 8
push 1
call fcn.00698820
push 0x43c468
push 1
call fcn.00678ebc
add esp, 8
push 1
call fcn.00698820
push 1
call fcn.00698820
push edx
push 0x43c48c
push 1
call fcn.00678ebc
add esp, 0xc
call fcn.00698834
push 0x43f040
push eax
push 1
call fcn.006798ac
add esp, 0xc
push 0xffffffffffffffff
call fcn.00698820
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
call fcn.0068be6c
push 1
call fcn.00698820
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
call fcn.0068be6c
push 1
call fcn.00698820
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
call fcn.0068be6c
push 0
call fcn.00698820
push 1
call fcn.00698820
push 0x43ccc8
push 1
call fcn.00678ebc
add esp, 8
push 0
call fcn.00698820
add eax, 0xa
push eax
call fcn.006aaedb
add esp, 4
push 1
call fcn.00698820
nop
in eax, dx
inc ebp
inc ecx
add ch, ch
inc ebp
inc ecx
add ch, ch
inc ebp
inc ecx
add ah, dh
inc ebp
inc ecx
add bl, bh
inc ebp
inc ecx
add byte [edx], al
inc esi
inc ecx
add byte [ecx], cl
inc esi
inc ecx
add byte [eax], dl
inc esi
inc ecx
add byte [edi], dl
inc esi
inc ecx
add byte [esi], bl
inc esi
inc ecx
add byte [esi], bl
inc esi
inc ecx
add byte [esi], bl
inc esi
inc ecx
add byte [0x2c004146], ah
inc esi
inc ecx
add byte [esi + eax*2], ch
inc ecx
add ah, cl
int3