Function at 0x66601899
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_WriteConsoleW]
call eax
sub esp, 0x14
test eax, eax
setne al
mov byte [0x66690400], al
movzx eax, byte [0x66690400]
xor eax, 1
test al, al
je 0x66601b00
call fcn.6660185f
mov dword [0x66691010], eax
call fcn.66601823
mov dword [0x6669100c], eax
mov eax, dword [0x66691010]
mov dword [esp + 4], 0xedbce900
mov dword [esp], eax
call fcn.666010fa
mov dword [0x66691008], eax
mov eax, dword [0x66691010]
mov dword [esp + 4], 0x1642c871
mov dword [esp], eax
call fcn.666010fa
mov dword [section..bss], eax
mov eax, dword [0x66691010]
mov dword [esp + 4], 0x62c9d74d
mov dword [esp], eax
call fcn.666010fa
mov dword [0x66691004], eax
mov dword [ebp - 0xc], 0
call fcn.666017bb
add dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
js 0x66601955
mov eax, dword [0x66691010]
mov dword [esp + 4], 0x1642c871
mov dword [esp], eax
call fcn.666010fa
mov dword [section..bss], eax
mov eax, dword [0x66691010]
mov dword [esp + 4], 0x62c9d74d
mov dword [esp], eax
call fcn.666010fa
mov dword [0x66691004], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
jmp 0x666019c5
mov eax, dword [ebp - 0x14]
add eax, section..data
movzx eax, byte [eax]
mov edx, dword [ebp - 0x10]
add edx, section..data
mov byte [edx], al
add dword [ebp - 0x10], 1
add dword [ebp - 0x14], 2
mov eax, dword [ebp - 0x14]
cmp eax, 0x8e3ff
jbe 0x666019a7
mov dword [ebp - 0x18], 0x1fad5c
mov dword [ebp - 0x2c], 0x2583a1a7
mov dword [ebp - 0x28], 0xd1087bee
mov dword [ebp - 0x24], 0x4eefcfce
mov dword [ebp - 0x20], 0x245dc767
mov eax, dword [ebp - 0x18]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x10
lea eax, [ebp - 0x2c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x2c]
mov dword [esp], eax
call fcn.666010bb
lea eax, [ebp - 0x2c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x47200
mov dword [esp + 4], 0x66602000
mov dword [esp], section..data
call fcn.66601215
mov dword [0x66691024], 0x66602000
mov eax, dword [0x66691010]
mov dword [esp + 4], 0x470f52fe
mov dword [esp], eax
call fcn.666010fa
mov dword [0x66691014], eax
mov eax, dword [0x66691014]
mov dword [esp + 4], 0x666014d6
mov dword [esp], eax
call fcn.666013ae
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x40], 0x6d0063
mov dword [ebp - 0x3c], 0x2e0064
mov dword [ebp - 0x38], 0x780065
mov dword [ebp - 0x34], 0x65
lea eax, [ebp - 0x40]
mov dword [ebp - 0x44], eax
mov word [ebp - 0x48], 0xe
mov word [ebp - 0x46], 0xe
mov eax, dword [0x66691010]
mov dword [esp + 4], 0x16fda028
mov dword [esp], eax
call fcn.666010fa
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x30]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x48]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [ebp - 0x1c]
call eax
sub esp, 0x10
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x66601aff
mov eax, dword [ebp - 0x30]
mov edx, eax
mov eax, dword [0x66691020]
add eax, edx
mov dword [0x66691028], eax
call fcn.666017ab
nop
nop
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_ExitProcess]
call eax
nop
nop
push ecx
push eax
cmp eax, 0x3e8
lea ecx, [esp + 0xc]
jb 0x66601b32
sub ecx, 0x3e8
or dword [ecx], 0
sub eax, 0x3e8
cmp eax, 0x3e8
ja 0x66601b1d
sub ecx, eax
or dword [ecx], 0
pop eax
pop ecx
ret