Function at 0x1000cc20
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10011db5
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
mov eax, dword [0x10017040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
push 0x30
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
call fcn.1000d1dd
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x34]
push 8
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push str.hook.ini
movups xmmword [ebp - 0x34], xmm0
mov dword [ebp - 0x20], 0
call fcn.10004960
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x1c]
call fcn.10005d00
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x1000ccf0
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000cce6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000cce6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1000d20d
add esp, 8
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push str.DEBUG
push str.GLOBAL
lea ecx, [ebp - 0x1c]
call fcn.10006e60
cmp eax, 1
jne 0x1000cd54
call dword [sym.imp.KERNEL32.dll_AllocConsole]
test eax, eax
je 0x1000cd54
push 1
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
push eax
push 0x10012e20
lea eax, [ebp - 0x38]
push str.CONOUT_
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
push str.zh_ch
push 2
call dword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
add esp, 0x1c
push 0x3a4
call dword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push 0x10012e6c
push str.GLOBAL
lea ecx, [ebp - 0x1c]
call fcn.10006e60
cmp eax, 1
jne 0x1000cdc2
push 0x13
push str.Tokyo_Standard_Time
mov ecx, 0x100170e0
mov dword [0x100178c8], 0x3a4
mov dword [0x100178d0], 0x411
mov dword [0x100178cc], 0x80
call fcn.100021f0
call dword [sym.imp.KERNEL32.dll_GetACP]
cmp eax, 0x3a4
je 0x1000cdc2
lea ecx, [ebp - 0x30]
call fcn.10005350
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x100124f8
push str.LOADDLL
push str.GLOBAL
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x1c]
call fcn.10006aa0
cmp dword [eax + 0x14], 0xf
jbe 0x1000cde5
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x1000ce22
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000ce18
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000ce18
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1000d20d
add esp, 8
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push str.MODE
push str.GLOBAL
lea ecx, [ebp - 0x1c]
call fcn.10006e60
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentThread]
cmp eax, 1
jne 0x1000ce91
call fcn.1000ca60
call fcn.1000f950
call esi
push eax
call fcn.1000fe20
push 0x1000af30
push 0x10017900
call fcn.1000f3b0
call fcn.1000f9b0
call fcn.1000f950
call esi
push eax
call fcn.1000fe20
push 0x1000c4a0
push 0x1001791c
call fcn.1000f3b0
call fcn.1000f9b0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push str.MODE
push str.GLOBAL
lea ecx, [ebp - 0x1c]
call fcn.10006e60
cmp eax, 2
jne 0x1000cefa
call fcn.1000ca60
call fcn.1000f950
call esi
push eax
call fcn.1000fe20
push 0x1000b410
push 0x10017904
call fcn.1000f3b0
call fcn.1000f9b0
call fcn.1000f950
call esi
push eax
call fcn.1000fe20
push 0x1000b830
push 0x10017918
call fcn.1000f3b0
call fcn.1000f9b0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push str.MODE
push str.GLOBAL
lea ecx, [ebp - 0x1c]
call fcn.10006e60
cmp eax, 3
jne 0x1000cf84
call fcn.1000ca60
call fcn.1000f950
call esi
push eax
call fcn.1000fe20
push 0x1000af30
push 0x10017900
call fcn.1000f3b0
call fcn.1000f9b0
call fcn.1000f950
call esi
push eax
call fcn.1000fe20
push 0x1000c4a0
push 0x1001791c
call fcn.1000f3b0
call fcn.1000f9b0
call fcn.1000f950
call esi
push eax
call fcn.1000fe20
push 0x1000b410
push 0x10017904
call fcn.1000f3b0
call fcn.1000f9b0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push str.CHANGEWINDOW
push str.GLOBAL
lea ecx, [ebp - 0x1c]
call fcn.10006e60
cmp eax, 1
jne 0x1000d001
call fcn.1000f950
call esi
push eax
call fcn.1000fe20
push str.Window_Text_func_HOOKED__n
call fcn.10002920
add esp, 4
push 0x10002970
push 0x100178e0
call fcn.1000f3b0
push 0x10003050
push 0x100178ec
call fcn.1000f3b0
push 0x100036c0
push 0x100178e4
call fcn.1000f3b0
push 0x10003ca0
push 0x100178e8
call fcn.1000f3b0
call fcn.1000f9b0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push str.TextOutA
push str.TEXTREPLACE
lea ecx, [ebp - 0x1c]
call fcn.10006e60
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push str.ENABLE
push str.FVPSaveChanger
lea ecx, [ebp - 0x1c]
call fcn.10006e60
cmp eax, 1
jne 0x1000d095
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push str.offset
push str.FVPSaveChanger
lea ecx, [ebp - 0x1c]
call fcn.10006e60
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov edi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 5
lea ecx, [edi + 5]
push edi
mov dword [0x100178dc], ecx
call esi
mov eax, 0x1000a7f0
mov byte [edi], 0xe9
sub eax, edi
sub eax, 5
mov dword [edi + 1], eax
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 5
push edi
call esi
mov eax, dword [ebp - 0x1c]
push dword [eax + 4]
lea eax, [ebp - 0x1c]
push eax
mov ecx, eax
call fcn.10005100
push 0x30
push dword [ebp - 0x1c]
call fcn.1000d20d
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000d1ca
mov esp, ebp
pop ebp
ret