Function at 0x6800c340
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Get kernel32 base address
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ecx, 0xa
mov ebp, esp
push edi
mov edi, 0x1b
push esi
mov esi, edi
push ebx
sub esp, 0x4fc
mov dword [ebp - 0x4ec], edx
xor edx, edx
mov dword [ebp - 0x4f0], eax
mov edi, edx
mov word [ebp - 0x4da], cx
mov dword [ebp - 0x4d4], 0xbc
mov dword [ebp - 0x4d0], 1
mov dword [ebp - 0x4c8], 0x258
jmp 0x6800c397
lea edi, [ebx + 1]
cmp edi, esi
jg 0x6800c3c7
lea ebx, [esi + edi]
sar ebx, 1
mov eax, dword [ebx*8 + 0x68015060]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x4ec]
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_strcmp]
test eax, eax
je 0x6800c4c9
jg 0x6800c390
lea esi, [ebx - 1]
cmp edi, esi
jle 0x6800c397
mov esi, dword [ebp - 0x4ec]
mov dword [esp], esi
call dword [sym.imp.ucrtbase.dll_strlen]
mov dword [esp + 4], 0
mov edx, eax
lea edx, [edx + edx + 2]
mov dword [esp + 8], edx
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0xc
mov ebx, eax
test eax, eax
je 0x6800c63c
movsx ax, byte [esi]
mov ecx, dword [ebp - 0x4ec]
mov edx, ebx
test al, al
je 0x6800c431
lea esi, [esi]
add ecx, 1
mov word [edx], ax
add edx, 2
movsx ax, byte [ecx]
test al, al
jne 0x6800c420
xor eax, eax
mov word [edx], ax
cmp word [ebx], 0
je 0x6800c678
mov eax, ebx
lea esi, [esi]
add eax, 2
cmp word [eax], 0
jne 0x6800c448
sub eax, ebx
sar eax, 1
mov ecx, eax
mov esi, dword [ebp - 0x4f0]
mov edx, ebx
mov eax, esi
call sym._add_unformatted_text_to_control
lea eax, [ebp - 0x4d4]
mov dword [esp], esi
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0x447
call sym._SendMessageW_16
lea edx, [ebp - 0x4da]
mov eax, esi
mov ecx, 1
sub esp, 0x10
call sym._add_unformatted_text_to_control
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
sub esp, 0xc
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov esi, eax
lea eax, [ebp - 0x4d8]
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov eax, dword [ebx*8 + 0x68015064]
mov dword [esp + 4], eax
mov eax, dword [0x68022004]
mov dword [esp], eax
call sym._LoadStringW_16
mov edx, dword [ebp - 0x4d8]
mov dword [ebp - 0x4f4], eax
add eax, eax
sub esp, 0x10
mov dword [ebp - 0x4ec], eax
mov eax, dword [ebp - 0x4ec]
lea edi, [edx + eax]
cmp edx, edi
jae 0x6800c5e8
lea esi, [esi]
mov ebx, edx
jmp 0x6800c530
cmp edi, ebx
jbe 0x6800c5e8
movzx eax, word [ebx]
mov ecx, ebx
add ebx, 2
cmp ax, 0xa
jne 0x6800c528
sub ecx, edx
mov edi, ecx
lea ecx, [ebp - 0x418]
sar edi, 1
lea eax, [edi + 1]
cmp eax, 1
ja 0x6800c572
jmp 0x6800c662
sub eax, 1
add ecx, 2
add edx, 2
mov word [ecx - 2], si
cmp eax, 1
je 0x6800c57a
movzx esi, word [edx]
test si, si
jne 0x6800c560
xor edx, edx
mov word [ecx], dx
mov ecx, edi
mov edi, dword [ebp - 0x4f0]
lea edx, [ebp - 0x418]
mov esi, 1
mov eax, edi
call sym._add_unformatted_text_to_control
lea eax, [ebp - 0x4d4]
mov dword [esp], edi
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0x447
call sym._SendMessageW_16
mov eax, edi
lea edx, [ebp - 0x4da]
mov ecx, 1
sub esp, 0x10
call sym._add_unformatted_text_to_control
mov eax, dword [ebp - 0x4ec]
mov edx, ebx
lea edi, [edx + eax]
cmp edx, edi
jb 0x6800c520
nop
lea esi, [esi]
test esi, esi
jne 0x6800c648
mov ecx, dword [ebp - 0x4f4]
mov edx, dword [ebp - 0x4d8]
mov esi, dword [ebp - 0x4f0]
mov eax, esi
call sym._add_unformatted_text_to_control
lea eax, [ebp - 0x4d4]
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov dword [esp + 4], 0x447
mov dword [esp], esi
call sym._SendMessageW_16
mov ecx, 1
lea edx, [ebp - 0x4da]
mov eax, esi
sub esp, 0x10
call sym._add_unformatted_text_to_control
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
cmp word [edx], 0
je 0x6800c63c
mov ecx, dword [ebp - 0x4f4]
mov eax, edx
sub eax, dword [ebp - 0x4d8]
sar eax, 1
sub ecx, eax
jmp 0x6800c5f8
test eax, eax
je 0x6800c57f
lea ecx, [ebp - 0x418]
jmp 0x6800c57a
xor ecx, ecx
jmp 0x6800c457