Function at 0x1000c740
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100117b5
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
mov eax, dword [0x10017040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
push 0x30
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
call fcn.1000cc9d
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x34]
push 8
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
push str.hook.ini
movups xmmword [ebp - 0x34], xmm0
mov dword [ebp - 0x20], 0
call fcn.100049f0
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x1c]
call fcn.10005c90
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x1000c810
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000c806
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000c806
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1000cccd
add esp, 8
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push str.DEBUG
push str.GLOBAL
lea ecx, [ebp - 0x1c]
call fcn.10006ee0
cmp eax, 1
jne 0x1000c874
call dword [sym.imp.KERNEL32.dll_AllocConsole]
test eax, eax
je 0x1000c874
push 1
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
push eax
push 0x10012dd8
lea eax, [ebp - 0x38]
push str.CONOUT_
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
push str.zh_ch
push 2
call dword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
add esp, 0x1c
push 0x3a4
call dword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push str.MODE
push str.GLOBAL
lea ecx, [ebp - 0x1c]
call fcn.10006ee0
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentThread]
cmp eax, 1
jne 0x1000c8e3
call fcn.1000c590
call fcn.1000f410
call esi
push eax
call fcn.1000f8e0
push 0x1000aa60
push 0x10017900
call fcn.1000ee70
call fcn.1000f470
call fcn.1000f410
call esi
push eax
call fcn.1000f8e0
push 0x1000bfd0
push 0x1001791c
call fcn.1000ee70
call fcn.1000f470
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push str.MODE
push str.GLOBAL
lea ecx, [ebp - 0x1c]
call fcn.10006ee0
cmp eax, 2
jne 0x1000c94c
call fcn.1000c590
call fcn.1000f410
call esi
push eax
call fcn.1000f8e0
push 0x1000af40
push 0x10017904
call fcn.1000ee70
call fcn.1000f470
call fcn.1000f410
call esi
push eax
call fcn.1000f8e0
push 0x1000b360
push 0x10017918
call fcn.1000ee70
call fcn.1000f470
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push str.MODE
push str.GLOBAL
lea ecx, [ebp - 0x1c]
call fcn.10006ee0
cmp eax, 3
jne 0x1000c9d6
call fcn.1000c590
call fcn.1000f410
call esi
push eax
call fcn.1000f8e0
push 0x1000aa60
push 0x10017900
call fcn.1000ee70
call fcn.1000f470
call fcn.1000f410
call esi
push eax
call fcn.1000f8e0
push 0x1000bfd0
push 0x1001791c
call fcn.1000ee70
call fcn.1000f470
call fcn.1000f410
call esi
push eax
call fcn.1000f8e0
push 0x1000af40
push 0x10017904
call fcn.1000ee70
call fcn.1000f470
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push str.CHANGEWINDOW
push str.GLOBAL
lea ecx, [ebp - 0x1c]
call fcn.10006ee0
cmp eax, 1
jne 0x1000ca53
call fcn.1000f410
call esi
push eax
call fcn.1000f8e0
push str.Window_Text_func_HOOKED__n
call fcn.10002830
add esp, 4
push 0x10002880
push 0x100178e0
call fcn.1000ee70
push 0x10002f60
push 0x100178ec
call fcn.1000ee70
push 0x100035d0
push 0x100178e4
call fcn.1000ee70
push 0x10003c50
push 0x100178e8
call fcn.1000ee70
call fcn.1000f470
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push 0x10012e3c
push str.GLOBAL
lea ecx, [ebp - 0x1c]
call fcn.10006ee0
cmp eax, 1
jne 0x1000cac1
push 0x13
push str.Tokyo_Standard_Time
mov ecx, 0x100170e0
mov dword [0x100178c8], 0x3a4
mov dword [0x100178d0], 0x411
mov dword [0x100178cc], 0x80
call fcn.10002100
call dword [sym.imp.KERNEL32.dll_GetACP]
cmp eax, 0x3a4
je 0x1000cac1
lea ecx, [ebp - 0x30]
call fcn.100052e0
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push str.TextOutA
push str.TEXTREPLACE
lea ecx, [ebp - 0x1c]
call fcn.10006ee0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push str.ENABLE
push str.FVPSaveChanger
lea ecx, [ebp - 0x1c]
call fcn.10006ee0
cmp eax, 1
jne 0x1000cb55
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push str.offset
push str.FVPSaveChanger
lea ecx, [ebp - 0x1c]
call fcn.10006ee0
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov edi, eax
lea eax, [ebp - 0x14]
push eax
push 0x40
push 5
lea ecx, [edi + 5]
push edi
mov dword [0x100178dc], ecx
call esi
mov eax, 0x1000a320
mov byte [edi], 0xe9
sub eax, edi
sub eax, 5
mov dword [edi + 1], eax
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14]
push 5
push edi
call esi
mov eax, dword [ebp - 0x1c]
push dword [eax + 4]
lea eax, [ebp - 0x1c]
push eax
mov ecx, eax
call fcn.10005090
push 0x30
push dword [ebp - 0x1c]
call fcn.1000cccd
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000cc8a
mov esp, ebp
pop ebp
ret