Function at 0xa448b0
Capabilities:
Hide graphical window
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0xa8e426
push eax
mov dword fs:[0], esp
sub esp, 0x68c
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0
call ebx
cmp word [eax], 0x5a4d
jne 0xa44947
mov ecx, dword [eax + 0x3c]
add ecx, eax
cmp dword [ecx], 0x4550
jne 0xa44947
cmp word [ecx + 0x5c], 3
jne 0xa44947
push 0
push 1
push 0
push 0
push 0xc0000000
call dword [sym.imp.KERNEL32.dll_CreateConsoleScreenBuffer]
cmp eax, 0xffffffff
je 0xa44cb5
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.GetConsoleWindow
push str.kernel32.dll
call fcn.00a222a0
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0xa44947
call eax
test eax, eax
je 0xa44cb5
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0xa44cb5
push 1
push 0xa91934
call fcn.00a351c0
add esp, 8
test eax, eax
je 0xa44cb5
lea ecx, [esp + 0x70]
call fcn.00a155c0
mov dword [esp + 0x698], 0
call fcn.00a0f950
push eax
lea eax, [esp + 0x74]
push str._lsThinstall.ini
push eax
call fcn.00a16060
add esp, 0xc
lea ecx, [esp + 4]
lea edx, [esp + 0x490]
mov dword [esp + 4], 0x100
push ecx
push edx
call fcn.00a22350
mov eax, dword [esp + 0x78]
lea ecx, [esp + 0x490]
push eax
push 0
push str.EulaAgreed
push ecx
call fcn.00a245d0
test eax, eax
je 0xa449eb
lea ecx, [esp + 0x70]
mov dword [esp + 0x698], 0xffffffff
call fcn.00a155e0
pop ebx
mov ecx, dword [esp + 0x68c]
mov dword fs:[0], ecx
add esp, 0x698
ret
lea ecx, [esp + 0x280]
call fcn.00a155c0
lea edx, [esp + 0x280]
mov byte [esp + 0x698], 1
push edx
push 8
call fcn.00a35890
push eax
call fcn.00a01aa0
mov eax, dword [esp + 0x6ac]
push eax
call fcn.00a44860
add esp, 0x10
test al, al
jne 0xa44a7a
push 0
push 0xab4cd8
push str.Failed_to_load_EULA
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x280]
mov byte [esp + 0x698], 0
call fcn.00a155e0
lea ecx, [esp + 0x70]
mov dword [esp + 0x698], 0xffffffff
call fcn.00a155e0
pop ebx
mov ecx, dword [esp + 0x68c]
mov dword fs:[0], ecx
add esp, 0x698
ret
push ebp
mov ebp, dword [sym.imp.USER32.dll_GetDesktopWindow]
push esi
push edi
call ebp
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
push esi
call dword [sym.imp.GDI32.dll_GetTextCharset]
push esi
mov edi, eax
call ebp
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
push str.riched32.dll
call fcn.00a23cd0
push str.Arial
push 0
push 0
push 0x20
push 4
push edi
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0xe
mov dword [esp + 0x4c], eax
call dword [sym.imp.GDI32.dll_CreateFontA]
push 0
mov dword [0xaf4f04], eax
call ebx
mov ebx, eax
mov ecx, 0xa
xor eax, eax
lea edi, [esp + 0x38]
push 0x7f00
push eax
rep stosd dword es:[edi], eax
mov dword [esp + 0x40], 3
mov dword [esp + 0x44], 0xa44cd0
mov dword [esp + 0x50], ebx
call dword [sym.imp.USER32.dll_LoadCursorA]
push 0xf
mov dword [esp + 0x54], eax
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push 0x7f02
push 0
mov dword [esp + 0x5c], eax
mov dword [esp + 0x64], str.th_eula
call dword [sym.imp.USER32.dll_LoadIconA]
lea ecx, [esp + 0x38]
mov dword [esp + 0x4c], eax
push ecx
call dword [sym.imp.USER32.dll_RegisterClassA]
push 0
push ebx
push 0
push 0
push 7
call fcn.00a358e0
add esp, 4
push eax
push 9
call fcn.00a358e0
add esp, 4
lea edx, [esp + 0x2a0]
push eax
push 0x80000000
push 0x80000000
push 0
push edx
push 6
call fcn.00a35890
add esp, 8
push eax
push 0xaaa598
call fcn.00a242c0
mov esi, eax
lea eax, [esp + 0x28]
push eax
call ebp
mov edi, dword [sym.imp.USER32.dll_GetWindowRect]
push eax
call edi
lea ecx, [esp + 0x18]
push ecx
push esi
call edi
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
sub eax, edx
mov ebp, dword [esp + 0x2c]
cdq
sub eax, edx
push 5
mov ecx, eax
mov eax, dword [esp + 0x38]
sub eax, ebp
push 0
cdq
sub eax, edx
push 0
sar ecx, 1
sar eax, 1
sub eax, ecx
mov ecx, dword [esp + 0x24]
push eax
mov eax, dword [esp + 0x30]
sub eax, ecx
cdq
sub eax, edx
mov edx, dword [esp + 0x38]
mov ecx, eax
mov eax, dword [esp + 0x40]
sub eax, edx
cdq
sub eax, edx
sar ecx, 1
sar eax, 1
sub eax, ecx
push eax
push 0
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
push 1
push esi
call dword [sym.imp.USER32.dll_ShowWindow]
mov edi, dword [sym.imp.USER32.dll_GetMessageA]
push 0
push 0
lea edx, [esp + 0x68]
push 0
push edx
call edi
test eax, eax
je 0xa44c54
mov ebp, dword [sym.imp.USER32.dll_IsDialogMessageA]
lea eax, [esp + 0x60]
push eax
push esi
call ebp
test eax, eax
jne 0xa44c43
lea ecx, [esp + 0x60]
push ecx
call dword [sym.imp.USER32.dll_TranslateMessage]
lea edx, [esp + 0x60]
push edx
call dword [sym.imp.USER32.dll_DispatchMessageA]
push 0
push 0
lea eax, [esp + 0x68]
push 0
push eax
call edi
test eax, eax
jne 0xa44c21
push ebx
push str.th_eula
call dword [sym.imp.USER32.dll_UnregisterClassA]
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov edx, dword [esp + 0x84]
lea eax, [esp + 0x49c]
push edx
push 0xaa1460
push str.EulaAgreed
push eax
call fcn.00a22420
lea ecx, [esp + 0x28c]
mov byte [esp + 0x6a4], 0
call fcn.00a155e0
lea ecx, [esp + 0x7c]
mov dword [esp + 0x6a4], 0xffffffff
call fcn.00a155e0
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x690]
pop ebx
mov dword fs:[0], ecx
add esp, 0x698
ret