Function at 0x476e20
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb0
mov dword [ebp - 0x98], ecx
lea ecx, [ebp - 0x2c]
call fcn.0040ee90
push str.advanceset_time_calendar
mov ecx, dword [ebp - 0x98]
add ecx, 0x20
call fcn.004dd71b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x476f1f
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x24]
mov eax, dword [edx + 0x38]
call eax
push eax
lea ecx, [ebp - 0x6c]
call fcn.0041c8a0
push 4
lea ecx, [ebp - 0x70]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0041c990
mov ecx, eax
call fcn.0041cb20
push eax
call fcn.005183ba
add esp, 4
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x70]
call fcn.0040f740
push 2
push 5
lea edx, [ebp - 0x74]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0047e500
mov ecx, eax
call fcn.0041cb20
push eax
call fcn.005183ba
add esp, 4
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x74]
call fcn.0040f740
push 2
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0047e5c0
mov ecx, eax
call fcn.0041cb20
push eax
call fcn.005183ba
add esp, 4
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x78]
call fcn.0040f740
lea ecx, [ebp - 0x68]
call fcn.0043f070
movzx ecx, word [ebp - 4]
push ecx
movzx edx, word [ebp - 0x10]
push edx
movzx eax, word [ebp - 0x14]
push eax
lea ecx, [ebp - 0x68]
call fcn.00444ca0
movzx ecx, ax
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0x68]
call fcn.004474f0
lea ecx, [ebp - 0x6c]
call fcn.0040f740
push str.advanceset_time_hour
mov ecx, dword [ebp - 0x98]
add ecx, 0x20
call fcn.004dd71b
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
je 0x476f52
mov edx, dword [ebp - 0x9c]
sub edx, 8
mov dword [ebp - 0xa0], edx
jmp 0x476f5c
mov dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x476f85
mov ecx, dword [ebp - 0xc]
add ecx, 0x368
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 0x368]
mov edx, dword [eax + 4]
call edx
mov dword [ebp - 0x28], eax
push str.advanceset_time_minute
mov ecx, dword [ebp - 0x98]
add ecx, 0x20
call fcn.004dd71b
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
je 0x476fb8
mov eax, dword [ebp - 0xa4]
sub eax, 8
mov dword [ebp - 0xa8], eax
jmp 0x476fc2
mov dword [ebp - 0xa8], 0
mov ecx, dword [ebp - 0xa8]
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0
je 0x476feb
mov ecx, dword [ebp - 0xc]
add ecx, 0x368
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 0x368]
mov edx, dword [eax + 4]
call edx
mov dword [ebp - 8], eax
push str.advanceset_time_second
mov ecx, dword [ebp - 0x98]
add ecx, 0x20
call fcn.004dd71b
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
je 0x47701e
mov eax, dword [ebp - 0xac]
sub eax, 8
mov dword [ebp - 0xb0], eax
jmp 0x477028
mov dword [ebp - 0xb0], 0
mov ecx, dword [ebp - 0xb0]
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0
je 0x477051
mov ecx, dword [ebp - 0xc]
add ecx, 0x368
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 0x368]
mov edx, dword [eax + 4]
call edx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x14]
push eax
push str._t_d_d_d_d_d_d_d0
lea ecx, [ebp - 0x2c]
push ecx
call fcn.004beff0
add esp, 0x24
push 0
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
mov edx, dword [eax + 0x180]
call edx
push str.advanceset_time_settime_checktip
mov ecx, dword [ebp - 0x98]
add ecx, 0x20
call fcn.004dd71b
mov dword [ebp - 0x20], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call fcn.00421da0
add esp, 4
test eax, eax
jne 0x477203
push 0
push ecx
mov ecx, esp
lea eax, [ebp - 0x2c]
push eax
call fcn.0041c880
push ecx
mov ecx, esp
push 0x55fb0c
push 0x591300
push ecx
call fcn.0041ca60
add esp, 0xc
call fcn.00422ca0
add esp, 0xc
test eax, eax
je 0x477128
push 0x368700
mov edx, dword [ebp - 0x20]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x20]
mov edx, dword [eax + 0x54]
call edx
push 1
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x180]
call eax
push 0x55fb3c
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x3c]
call eax
jmp 0x477201
lea ecx, [ebp - 0x2c]
push ecx
push 0x55fb0c
push 0x591300
lea edx, [ebp - 0x88]
push edx
call fcn.0041ca60
add esp, 0xc
push eax
call fcn.00421e20
add esp, 8
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x81], al
lea ecx, [ebp - 0x88]
call fcn.0040f740
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x4771cb
cmp dword [ebp - 0x20], 0
je 0x4771c9
push 0xff0000
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x54]
call eax
push 1
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x180]
call eax
push 0x55d794
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x3c]
call eax
push 0
push 0x7d0
push 0x205
mov ecx, dword [ebp - 0x98]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x477201
push 0x368700
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x54]
call eax
push 1
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x180]
call eax
push 0x55fb3c
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x3c]
call eax
jmp 0x47727c
push 5
push 0
lea ecx, [ebp - 0x2c]
call fcn.0041cb20
push eax
push 0x55fb0c
push 0x591300
lea ecx, [ebp - 0x8c]
push ecx
call fcn.0041ca60
add esp, 0xc
mov ecx, eax
call fcn.0041cb20
push eax
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x8c]
call fcn.0040f740
push 0x368700
mov edx, dword [ebp - 0x20]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x20]
mov edx, dword [eax + 0x54]
call edx
push 1
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x180]
call eax
push 0x55fb3c
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x3c]
call eax
push 0
push ecx
mov ecx, esp
push 0x554518
call fcn.0041c8a0
push ecx
mov ecx, esp
push 0x561080
call fcn.0041c8a0
mov ecx, 0x591ad8
call fcn.0042ab10
lea ecx, [ebp - 0x2c]
call fcn.0040f740
mov esp, ebp
pop ebp
ret 0xc