Function at 0x1000c6e0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100115f5
mov eax, dword fs:[0]
push eax
sub esp, 0x28
mov eax, dword [0x10017040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
push 0x30
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
call fcn.1000cbbe
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x18], eax
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x30]
push 8
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
push str.hook.ini
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x1c], 0
call fcn.100049f0
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x18]
call fcn.10005c90
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0xf
jbe 0x1000c7af
mov edx, dword [ebp - 0x30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000c7a5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000c7a5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1000cbee
add esp, 8
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0
push eax
push str.DEBUG
push str.GLOBAL
lea ecx, [ebp - 0x18]
call fcn.10006f80
cmp eax, 1
jne 0x1000c813
call dword [sym.imp.KERNEL32.dll_AllocConsole]
test eax, eax
je 0x1000c813
push 1
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
push eax
push 0x10012dd0
lea eax, [ebp - 0x34]
push str.CONOUT_
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
push str.zh_ch
push 2
call dword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
add esp, 0x1c
push 0x3a4
call dword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0
push eax
push str.MODE
push str.GLOBAL
lea ecx, [ebp - 0x18]
call fcn.10006f80
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentThread]
cmp eax, 1
jne 0x1000c882
call fcn.1000c530
call fcn.1000f250
call esi
push eax
call fcn.1000f720
push 0x1000a9c0
push 0x100178f8
call fcn.1000ecb0
call fcn.1000f2b0
call fcn.1000f250
call esi
push eax
call fcn.1000f720
push 0x1000bf70
push 0x10017914
call fcn.1000ecb0
call fcn.1000f2b0
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0
push eax
push str.MODE
push str.GLOBAL
lea ecx, [ebp - 0x18]
call fcn.10006f80
cmp eax, 2
jne 0x1000c8eb
call fcn.1000c530
call fcn.1000f250
call esi
push eax
call fcn.1000f720
push 0x1000aee0
push 0x100178fc
call fcn.1000ecb0
call fcn.1000f2b0
call fcn.1000f250
call esi
push eax
call fcn.1000f720
push 0x1000b300
push 0x10017910
call fcn.1000ecb0
call fcn.1000f2b0
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0
push eax
push str.MODE
push str.GLOBAL
lea ecx, [ebp - 0x18]
call fcn.10006f80
cmp eax, 3
jne 0x1000c975
call fcn.1000c530
call fcn.1000f250
call esi
push eax
call fcn.1000f720
push 0x1000a9c0
push 0x100178f8
call fcn.1000ecb0
call fcn.1000f2b0
call fcn.1000f250
call esi
push eax
call fcn.1000f720
push 0x1000bf70
push 0x10017914
call fcn.1000ecb0
call fcn.1000f2b0
call fcn.1000f250
call esi
push eax
call fcn.1000f720
push 0x1000aee0
push 0x100178fc
call fcn.1000ecb0
call fcn.1000f2b0
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0
push eax
push str.CHANGEWINDOW
push str.GLOBAL
lea ecx, [ebp - 0x18]
call fcn.10006f80
cmp eax, 1
jne 0x1000c9f2
call fcn.1000f250
call esi
push eax
call fcn.1000f720
push str.Window_Text_func_HOOKED__n
call fcn.10002830
add esp, 4
push 0x10002880
push 0x100178d8
call fcn.1000ecb0
push 0x10002f60
push 0x100178e4
call fcn.1000ecb0
push 0x100035d0
push 0x100178dc
call fcn.1000ecb0
push 0x10003c50
push 0x100178e0
call fcn.1000ecb0
call fcn.1000f2b0
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0
push eax
push 0x10012e34
push str.GLOBAL
lea ecx, [ebp - 0x18]
call fcn.10006f80
cmp eax, 1
jne 0x1000ca60
push 0x13
push str.Tokyo_Standard_Time
mov ecx, 0x100170e0
mov dword [0x100178c8], 0x3a4
mov dword [0x100178d0], 0x411
mov dword [0x100178cc], 0x80
call fcn.10002100
call dword [sym.imp.KERNEL32.dll_GetACP]
cmp eax, 0x3a4
je 0x1000ca60
lea ecx, [ebp - 0x2c]
call fcn.100052e0
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0
push eax
push str.TextOutA
push str.TEXTREPLACE
lea ecx, [ebp - 0x18]
call fcn.10006f80
mov eax, dword [ebp - 0x18]
push dword [eax + 4]
lea eax, [ebp - 0x18]
push eax
mov ecx, eax
call fcn.10005090
push 0x30
push dword [ebp - 0x18]
call fcn.1000cbee
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000cbab
mov esp, ebp
pop ebp
ret