Function at 0x425090
Capabilities:
Create process on windows

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x8cc
mov eax, dword [0x4584b0]
mov ebx, dword [esp + 0x8e0]
mov dword [esp + 0xc], eax
mov eax, dword [0x4584b4]
mov dword [esp + 8], eax
mov eax, dword [0x4584b8]
mov dword [esp + 4], eax
mov eax, dword [0x4584bc]
mov dword [esp], eax
call fcn.004213e0
cmp eax, 0x69
ja case.0x4250d4.0
mov esi, eax
jmp dword [eax*4 + 0x44a284]
mov edx, dword [0x4584a8]
lea eax, [eax - 0x64]
mov dword [0x4584a4], eax
lea ecx, [edx + 1]
cmp dword [0x4509c0], ecx
je 0x425e48
lea eax, [edx + 1]
cmp dword [0x451408], eax
je 0x425d58
lea eax, [edx + 1]
cmp dword [0x451e50], eax
je 0x425d88
lea eax, [edx + 1]
cmp dword [0x452898], eax
je 0x425cd0
lea eax, [edx + 1]
cmp dword [0x4532e0], eax
je 0x425d28
add edx, 1
cmp dword [0x453d28], edx
je 0x425d00
mov dword [0x45849c], 2
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_InvalidateRect]
sub esp, 0xc
add esp, 0x8cc
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [0x458fd4]
and eax, dword [0x458fcc]
and eax, dword [0x458fc8]
jns case.0x4250d4.0
mov ebp, dword [0x458fd0]
test ebp, ebp
js 0x4251b3
mov dword [esp], 0
mov dword [0x458fd8], 0
call fcn.0041fa90
lea eax, [esi - 0x14]
xor ebp, ebp
mov dword [0x458fd0], eax
test al, 3
je 0x425227
mov dword [esp + 0x3c], ebx
jmp 0x4251e8
cmp byte [edx + 3], 0
jne 0x425217
sub eax, 1
mov ebp, 1
test al, 3
je 0x426738
mov edi, eax
test eax, eax
lea edx, [eax + 3]
mov ebx, eax
cmovns edx, eax
sar ebx, 0x1f
shr ebx, 0x1e
mov esi, edx
lea ecx, [eax + ebx]
and edx, 0xfffffffc
sar esi, 2
and ecx, 3
sub ecx, ebx
add edx, esi
lea edx, [ecx + edx*8 + 0x4565a0]
cmp byte [edx + 4], 0
je 0x4251d0
mov eax, ebp
mov ebx, dword [esp + 0x3c]
test al, al
je 0x425227
mov dword [0x458fd0], edi
mov eax, dword [0x4504e0]
mov dword [0x459290], eax
test eax, eax
jne 0x4266d2
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x1f4
mov dword [esp + 4], 2
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [0x458fd8], 1
sub esp, 0x10
mov dword [esp], 1
call fcn.0041fa90
mov dword [0x458fdc], 0
jmp case.0x4250d4.0
mov eax, dword [0x458fd4]
and eax, dword [0x458fd0]
and eax, dword [0x458fc8]
jns case.0x4250d4.0
mov ecx, dword [0x458fcc]
test ecx, ecx
js 0x4252bf
mov dword [esp], 0
mov dword [0x458fd8], 0
call fcn.0041fda0
lea eax, [esi - 0x46]
mov dword [0x458fcc], eax
mov eax, dword [0x4504e0]
mov dword [0x459290], eax
test eax, eax
jne 0x426705
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x1f4
mov dword [esp + 4], 2
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [0x458fd8], 1
sub esp, 0x10
mov dword [esp], 1
call fcn.0041fda0
mov dword [0x458fdc], 0
jmp case.0x4250d4.0
mov eax, dword [0x458fd4]
and eax, dword [0x458fd0]
and eax, dword [0x458fcc]
jns case.0x4250d4.0
mov edx, dword [0x458fc8]
test edx, edx
js 0x42535f
mov dword [esp], 0
mov dword [0x458fd8], 0
call fcn.00420010
lea eax, [esi - 0x50]
mov dword [0x458fc8], eax
mov eax, dword [0x4504e0]
mov dword [0x459290], eax
test eax, eax
jne 0x42669f
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x1f4
mov dword [esp + 4], 2
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [0x458fd8], 1
sub esp, 0x10
mov dword [esp], 1
call fcn.00420010
mov dword [0x458fdc], 0
jmp case.0x4250d4.0
mov esi, 0x11
lea esi, [esi]
nop
mov eax, dword [0x458fd0]
and eax, dword [0x458fcc]
and eax, dword [0x458fc8]
jns case.0x4250d4.0
mov eax, dword [0x458fd4]
test eax, eax
jns 0x425cad
lea eax, [esi - 0xa]
mov dword [0x458fd4], eax
mov eax, dword [0x4504e0]
mov dword [0x459290], eax
test eax, eax
jne 0x42666c
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x1f4
mov dword [esp + 4], 2
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [0x458fd8], 1
sub esp, 0x10
mov dword [esp], 1
call fcn.0041f810
mov dword [0x458fdc], 0
jmp case.0x4250d4.0
mov eax, dword [0x458fe0]
cmp eax, 0x1e
je 0x425c80
cmp eax, 0x28
jne case.0x4250d4.0
mov eax, dword [0x45849c]
cmp eax, 6
jg 0x425489
test eax, eax
jne 0x42653b
lea eax, [esi - 0x5a]
mov dword [0x4584a8], eax
shl eax, 7
movzx eax, byte [eax + 0x4548b5]
and eax, 0xfffffff0
cmp al, 0x10
je 0x4263f5
mov dword [0x4584a4], 0xffffffff
mov dword [0x45849c], 1
jmp 0x425152
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0x1b
mov dword [esp + 4], 0x100
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_PostMessageW]
sub esp, 0x10
jmp case.0x4250d4.0
mov eax, dword [0x45905c]
test eax, eax
je 0x425b40
cmp dword [0x42a2e4], 5
jg 0x425af1
mov ebp, dword [0x458480]
test ebp, ebp
jne 0x42551f
movzx eax, byte [0x4563c4]
cmp eax, dword [0x45900c]
jl 0x425af1
mov edi, dword [0x4584ac]
test edi, edi
jne 0x425af1
mov eax, dword [0x450484]
mov dword [esp + 0x10], 0x459000
mov dword [0x459000], 0x44a234
add eax, 0xb76
mov dword [esp + 0xc], 0x402210
mov dword [0x459004], eax
mov eax, dword [0x459294]
mov dword [0x459008], 0x24
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x8c
mov dword [esp], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
sub esp, 0x14
cmp eax, 6
jne 0x425af1
mov esi, dword [0x4509c0]
test esi, esi
jne 0x426a4d
mov ecx, dword [0x451408]
test ecx, ecx
jne 0x426a34
mov edx, dword [0x451e50]
test edx, edx
jne 0x426a1b
mov eax, dword [0x452898]
test eax, eax
jne 0x426a02
mov eax, dword [0x4532e0]
test eax, eax
jne 0x4269d0
mov eax, dword [0x453d28]
test eax, eax
je 0x425af1
mov dword [esp + 4], 0x13
mov dword [esp], 5
call fcn.00407230
jmp 0x425af1
mov ecx, dword [0x45905c]
mov eax, dword [0x458480]
test ecx, ecx
jne 0x425ad0
test eax, eax
jne 0x42561a
movzx eax, byte [0x4563c4]
cmp eax, dword [0x45900c]
jl case.0x4250d4.0
mov ecx, dword [0x4584ac]
test ecx, ecx
jne case.0x4250d4.0
mov eax, dword [0x450484]
mov dword [esp + 0x10], 0x459000
mov dword [0x459000], 0x44a224
add eax, 0xba0
mov dword [esp + 0xc], 0x402210
mov dword [0x459004], eax
mov eax, dword [0x459294]
mov dword [0x459008], 0x24
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x8c
mov dword [esp], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
sub esp, 0x14
cmp eax, 6
jne case.0x4250d4.0
mov dword [esp], 0x45634c
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
sub esp, 4
mov dword [esp], 2
call fcn.00412c40
cmp dword [0x456340], 0x10000
jle 0x4256cf
cmp dword [0x458d94], 0xffffffff
je 0x4256cf
movzx eax, byte [0x456348]
xor edx, edx
mov dword [esp], 2
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call fcn.0041a080
mov eax, dword [0x4509c0]
test eax, eax
jne 0x4269b9
mov eax, dword [0x451408]
test eax, eax
jne 0x4269a0
mov eax, dword [0x451e50]
test eax, eax
jne 0x426987
mov eax, dword [0x452898]
test eax, eax
jne 0x42696e
mov ebp, dword [0x4532e0]
test ebp, ebp
jne 0x4269e9
mov edi, dword [0x453d28]
test edi, edi
je 0x425152
mov dword [esp + 4], 0x12
mov dword [esp], 5
call fcn.00407230
jmp 0x425152
mov eax, dword [0x458480]
test eax, eax
jne 0x42575c
movzx eax, byte [0x4563c4]
cmp eax, dword [0x45900c]
jl case.0x4250d4.0
add esp, 0x8cc
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.00421ed0
mov eax, dword [0x45905c]
test eax, eax
je 0x425c20
cmp dword [0x42a2e4], 5
jg 0x425af1
mov ebp, dword [0x458480]
test ebp, ebp
jne 0x4257a2
movzx eax, byte [0x4563c4]
cmp eax, dword [0x45900c]
jl 0x425af1
mov edi, dword [0x4584ac]
test edi, edi
jne 0x425af1
mov eax, dword [0x450484]
mov dword [esp + 0x10], 0x459000
mov dword [0x459000], 0x44a264
add eax, 0xdee
mov dword [esp + 0xc], 0x402210
mov dword [0x459004], eax
mov eax, dword [0x459294]
mov dword [0x459008], 0x24
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x8c
mov dword [esp], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
sub esp, 0x14
cmp eax, 6
jne 0x425af1
mov dword [esp], 0x45634c
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
cmp dword [0x4509c0], 0
push esi
jne 0x426b09
cmp dword [0x451408], 0
jne 0x426ae8
cmp dword [0x451e50], 0
jne 0x426ac7
cmp dword [0x452898], 0
jne 0x426aa6
cmp dword [0x4532e0], 0
jne 0x426a85
cmp dword [0x453d28], 0
jne 0x426a64
mov dword [esp], 9
call fcn.00412c40
jmp 0x425af1
mov eax, dword [0x45905c]
test eax, eax
jne 0x425b10
xor eax, eax
lea edi, [esp + 0x48]
mov ecx, 0xe
mov dword [esp + 0x44], 0x3c
rep stosd dword es:[edi], eax
call fcn.00420f30
mov dword [esp], 0x45634c
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
sub esp, 4
mov dword [esp], 0x455b40
lea esi, [esp + 0x80]
call fcn.00409f00
movzx eax, word [0x45634c]
mov dword [esp], esi
movzx edx, word [0x45634e]
movzx ecx, word [0x456352]
mov dword [esp + 0xc], 0x459080
mov dword [esp + 0x20], eax
mov dword [esp + 0x10], eax
mov eax, dword [0x450484]
mov dword [esp + 0x1c], ecx
add eax, 0x1198
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], edx
mov dword [esp + 8], eax
mov dword [esp + 4], 0x840
call fcn.00429550
mov eax, dword [0x450484]
mov dword [esp + 0x54], esi
mov dword [esp + 0x60], 1
add eax, 0x14fa
mov dword [esp + 0x50], eax
lea eax, [esp + 0x44]
mov dword [esp], eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
sub esp, 4
test eax, eax
je 0x425f28
xor eax, eax
mov word [0x459080], ax
jmp case.0x4250d4.0
mov esi, dword [0x458480]
test esi, esi
jne 0x425975
movzx eax, byte [0x4563c4]
cmp eax, dword [0x45900c]
jl case.0x4250d4.0
mov eax, dword [0x450484]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x405f20
add eax, 0xbd8
mov dword [esp + 8], ebx
mov dword [0x459288], eax
mov eax, dword [0x459294]
mov dword [esp + 4], 0x6f
mov dword [esp], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
sub esp, 0x14
mov esi, eax
cmp eax, 8
ja case.0x4250d4.0
cmp dword [0x456348], eax
je 0x42642f
mov dword [esp], 0x45636c
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
sub esp, 4
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], 0x45636c
mov dword [esp + 4], 0x10
mov dword [esp], 0x45634c
call dword [0x42a308]
mov dword [esp], 3
call fcn.00412c40
cmp dword [0x456340], 0x10000
jle 0x425a3d
cmp dword [0x458d94], 0xffffffff
je 0x425a3d
xor eax, eax
cmp dword [0x456348], esi
mov dword [esp + 4], esi
setne al
mov dword [esp], 3
mov dword [esp + 8], eax
call fcn.0041a080
mov ecx, dword [0x4509c0]
mov dword [0x456348], esi
mov byte [0x458460], 0
mov dword [0x458fdc], 0
mov dword [0x4584ac], 0
test ecx, ecx
jne 0x4264b4
mov edx, dword [0x451408]
test edx, edx
jne 0x426498
mov eax, dword [0x451e50]
test eax, eax
jne 0x42647c
mov eax, dword [0x452898]
test eax, eax
jne 0x426460
mov eax, dword [0x4532e0]
test eax, eax
jne 0x426444
mov eax, dword [0x453d28]
test eax, eax
je 0x425152
movzx eax, byte [0x456348]
mov dword [esp], 5
mov dword [esp + 4], eax
call fcn.00407720
jmp 0x425152
test eax, eax
jne 0x425ae3
movzx eax, byte [0x4563c4]
cmp eax, dword [0x45900c]
jl 0x425af1
mov edx, dword [0x4584ac]
test edx, edx
je 0x425f7d
mov dword [0x45905c], 0
add esp, 0x8cc
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [0x459294]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x4060f0
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x72
mov dword [esp], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
sub esp, 0x14
jmp 0x425af1
mov eax, dword [0x458480]
test eax, eax
jne 0x425b5c
movzx eax, byte [0x4563c4]
cmp eax, dword [0x45900c]
jl 0x425ea0
cmp word [0x4548ac], 0
jne 0x425db2
cmp word [0x45492c], 0
jne 0x425db2
cmp word [0x4549ac], 0
jne 0x425db2
cmp word [0x454a2c], 0
jne 0x425db2
cmp word [0x454aac], 0
jne 0x425db2
cmp word [0x454b2c], 0
jne 0x425db2
mov dword [0x4584ac], 2
xor eax, eax
cmp dword [0x45900c], 1
mov dword [0x458fc8], 0xffffffff
setle al
xor edx, edx
mov dword [0x458fcc], 0xffffffff
sub eax, 1
cmp dword [0x45900c], 1
mov dword [0x4584a8], eax
setle dl
mov eax, dword [0x4504e0]
mov dword [0x4584a0], edx
mov dword [0x458fd0], 0xffffffff
mov dword [0x458fd4], 0xffffffff
mov dword [0x459290], eax
jmp 0x425152
mov ecx, dword [0x458480]
mov edx, dword [0x45900c]
test ecx, ecx
jne 0x425c3f
movzx ecx, byte [0x4563c4]
cmp ecx, edx
jl 0x425ea0
mov dword [0x4584ac], 4
cmp edx, 1
jle 0x425e70
mov dword [0x4584a4], 0xffffffff
mov dword [0x4584a8], 0xffffffff
mov dword [0x45849c], eax
mov eax, dword [0x4504e0]
mov dword [0x459290], eax
jmp 0x425152
mov eax, dword [0x4584a0]
test eax, eax
je 0x4263de
cmp eax, 1
jne case.0x4250d4.0
lea eax, [esi - 0x5a]
mov dword [0x4584a8], eax
add esp, 0x8cc
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.00420230
mov dword [esp], 0
mov dword [0x458fd8], 0
call fcn.0041f810
jmp 0x4253f4
movzx eax, byte [0x4584a4]
mov dword [esp + 4], 4
mov dword [esp], 3
mov dword [esp + 8], eax
call fcn.00407d70
mov edx, dword [0x4584a8]
jmp 0x42512a
movzx eax, byte [0x4584a4]
mov dword [esp + 4], 4
mov dword [esp], 5
mov dword [esp + 8], eax
call fcn.00407d70
jmp 0x425148
movzx eax, byte [0x4584a4]
mov dword [esp + 4], 4
mov dword [esp], 4
mov dword [esp + 8], eax
call fcn.00407d70
mov edx, dword [0x4584a8]
jmp 0x425139
movzx eax, byte [0x4584a4]
mov dword [esp + 4], 4
mov dword [esp], 1
mov dword [esp + 8], eax
call fcn.00407d70
mov edx, dword [0x4584a8]
jmp 0x42510c
movzx eax, byte [0x4584a4]
mov dword [esp + 4], 4
mov dword [esp], 2
mov dword [esp + 8], eax
call fcn.00407d70
mov edx, dword [0x4584a8]
jmp 0x42511b
mov eax, dword [0x450484]
lea esi, [esp + 0x80]
mov dword [esp + 4], 0x200
mov dword [esp], esi
lea edx, [eax + 0xc96]
mov dword [0x459000], 0x44a244
mov dword [esp + 0x14], edx
lea edx, [eax + 0x12c4]
mov dword [esp + 0x10], edx
lea edx, [eax + 0xbf2]
add eax, 0x1258
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
call fcn.00429550
mov eax, dword [0x459294]
mov dword [0x459004], esi
mov dword [0x459008], 0x30
mov dword [esp + 0x10], 0x459000
mov dword [esp + 0xc], 0x402210
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x8c
mov dword [esp], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
sub esp, 0x14
jmp 0x425bb0
mov dword [esp + 8], eax
mov dword [esp + 4], 4
mov dword [esp], 0
call fcn.00407d70
mov edx, dword [0x4584a8]
jmp 0x4250fd
movzx eax, byte [0x4548b5]
mov dword [0x4584a8], 0
and eax, 0xfffffff0
cmp al, 0x10
je 0x4264c9
mov dword [0x4584a4], 0xffffffff
mov eax, 1
jmp 0x425c66
mov eax, dword [0x450484]
lea esi, [esp + 0x80]
mov dword [esp + 4], 0x200
mov dword [esp], esi
lea edx, [eax + 0x132]
mov dword [0x459000], 0x44a254
mov dword [esp + 0x10], edx
lea edx, [eax + 0x25e]
add eax, 0x1260
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
call fcn.00429550
mov eax, dword [0x459294]
mov dword [0x459004], esi
mov dword [0x459008], 0x30
mov dword [esp + 0x10], 0x459000
mov dword [esp + 0xc], 0x402210
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x8c
mov dword [esp], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
sub esp, 0x14
jmp case.0x4250d4.0
mov eax, dword [0x450484]
mov dword [esp + 0x10], 0x459000
mov dword [0x459000], 0x44a274
add eax, 0xd24
mov dword [esp + 0xc], 0x402210
mov dword [0x459004], eax
mov eax, dword [0x459294]
mov dword [0x459008], 0x10
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x8c
mov dword [esp], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
sub esp, 0x14
jmp 0x42594b
mov eax, dword [0x450484]
mov edi, 0x459000
mov dword [0x459000], 0x44a204
mov dword [esp + 0x10], edi
mov esi, dword [sym.imp.USER32.dll_DialogBoxParamW]
add eax, 0xb3e
mov dword [esp + 0xc], 0x402210
mov dword [0x459004], eax
mov eax, dword [0x459294]
mov dword [0x459008], 0x24
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x8c
mov dword [esp], eax
call esi
sub esp, 0x14
cmp eax, 6
jne 0x425af1
mov eax, 0x20d0
mov edx, 0x1770
mov ecx, 0x1450
mov ebp, 0x1130
mov word [0x4565b0], ax
mov eax, 0x1db0
mov word [0x4565d8], ax
mov eax, 0x1a90
mov word [0x456600], ax
mov eax, 0xe10
mov word [0x4566a0], ax
mov eax, 0xaf0
mov word [0x4566f0], ax
mov eax, 0xaf0
mov word [0x4566c8], ax
xor eax, eax
mov word [0x456718], ax
mov eax, dword [0x4509c0]
mov word [0x456628], dx
mov word [0x456650], cx
mov word [0x456678], bp
test eax, eax
jne 0x426746
xor eax, eax
xor ecx, ecx
xor ebp, ebp
xor edx, edx
mov word [0x456766], ax
xor eax, eax
mov word [0x456776], ax
xor eax, eax
mov word [0x456786], ax
xor eax, eax
mov word [0x456796], ax
xor eax, eax
mov word [0x4567a6], ax
mov eax, dword [0x451408]
mov word [0x456746], cx
xor ecx, ecx
mov word [0x456756], bp
xor ebp, ebp
mov word [0x4567b6], dx
mov word [0x4567c6], cx
mov word [0x4567d6], bp
test eax, eax
jne 0x4267b4
xor eax, eax
xor edx, edx
xor ecx, ecx
xor ebp, ebp
mov word [0x4567e6], ax
xor eax, eax
mov word [0x4567f6], ax
xor eax, eax
mov word [0x456836], ax
xor eax, eax
mov word [0x456846], ax
xor eax, eax
mov word [0x456806], dx
mov edx, dword [0x451e50]
mov word [0x456856], ax
xor eax, eax
mov word [0x456866], ax
xor eax, eax
mov word [0x456816], cx
mov word [0x456826], bp
mov word [0x456876], ax
test edx, edx
jne 0x426798
xor eax, eax
xor edx, edx
xor ecx, ecx
xor ebp, ebp
mov word [0x456886], ax
xor eax, eax
mov word [0x456896], ax
xor eax, eax
mov word [0x4568a6], ax
xor eax, eax
mov word [0x4568b6], ax
xor eax, eax
mov word [0x4568c6], ax
xor eax, eax
mov word [0x456906], ax
xor eax, eax
mov word [0x456916], ax
mov eax, dword [0x452898]
mov word [0x4568d6], dx
mov word [0x4568e6], cx
mov word [0x4568f6], bp
test eax, eax
jne 0x42677c
xor eax, eax
xor ebp, ebp
xor edx, edx
xor ecx, ecx
mov word [0x456956], ax
xor eax, eax
mov word [0x456966], ax
xor eax, eax
mov word [0x456946], bp
mov ebp, dword [0x4532e0]
mov word [0x456976], ax
xor eax, eax
mov word [0x456926], dx
xor edx, edx
mov word [0x456936], cx
xor ecx, ecx
mov word [0x456986], ax
xor eax, eax
mov word [0x456996], ax
mov word [0x4569a6], dx
mov word [0x4569b6], cx
test ebp, ebp
jne 0x426760
xor eax, eax
xor edx, edx
xor ecx, ecx
xor ebp, ebp
mov word [0x4569c6], ax
xor eax, eax
mov word [0x4569d6], ax
xor eax, eax
mov word [0x4569e6], ax
xor eax, eax
mov word [0x456a26], ax
xor eax, eax
mov word [0x456a36], ax
xor eax, eax
mov word [0x456a46], ax
xor eax, eax
mov word [0x456a56], ax
mov eax, dword [0x453d28]
mov word [0x4569f6], dx
mov word [0x456a06], cx
mov word [0x456a16], bp
test eax, eax
jne 0x4267d0
xor eax, eax
xor edx, edx
xor ecx, ecx
xor ebp, ebp
mov word [0x456a66], ax
xor eax, eax
mov word [0x456a76], ax
xor eax, eax
mov word [0x456a86], ax
xor eax, eax
mov word [0x456a96], ax
xor eax, eax
mov word [0x456aa6], ax
xor eax, eax
mov word [0x456ae6], ax
xor eax, eax
mov word [0x456ab6], dx
mov word [0x456ac6], cx
mov word [0x456af6], ax
mov word [0x456ad6], bp
mov dword [0x458fc8], 0xffffffff
mov dword [0x458fcc], 0xffffffff
mov dword [0x458fd0], 0xffffffff
mov dword [0x458fd4], 0xffffffff
mov dword [esp], 0x45634c
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
sub esp, 4
mov dword [esp], 7
call fcn.00412c40
cmp dword [0x456340], 0x10000
jle 0x426303
cmp dword [0x458d94], 0xffffffff
je 0x426303
movzx eax, byte [0x456348]
xor ebp, ebp
mov dword [esp], 7
mov dword [esp + 8], ebp
mov dword [esp + 4], eax
call fcn.0041a080
cmp dword [0x4509cc], 0xffffffff
je 0x426319
mov eax, dword [0x4509c0]
test eax, eax
jne 0x4265b4
cmp dword [0x451414], 0xffffffff
je 0x42632f
mov eax, dword [0x451408]
test eax, eax
jne 0x4265b4
cmp dword [0x451e5c], 0xffffffff
je 0x426345
mov eax, dword [0x451e50]
test eax, eax
jne 0x4265b4
cmp dword [0x4528a4], 0xffffffff
je 0x42635b
mov eax, dword [0x452898]
test eax, eax
jne 0x4265b4
cmp dword [0x4532ec], 0xffffffff
je 0x426371
mov eax, dword [0x4532e0]
test eax, eax
jne 0x4265b4
cmp dword [0x453d34], 0xffffffff
je 0x426388
mov ebp, dword [0x453d28]
test ebp, ebp
jne 0x4265b4
mov eax, dword [0x450484]
mov dword [esp + 0x10], 0x459000
mov dword [0x459000], 0x44a01c
add eax, 0xaaa
mov dword [esp + 0xc], 0x402210
mov dword [0x459004], eax
mov eax, dword [0x45929c]
mov dword [0x459008], 0x10
mov dword [esp + 8], eax
mov eax, dword [0x459294]
mov dword [esp + 4], 0x8c
mov dword [esp], eax
call esi
sub esp, 0x14
jmp 0x425af1
mov dword [0x4584a0], 1
lea eax, [esi - 0x5a]
mov dword [0x4584a8], eax
jmp 0x425152
mov dword [0x4584a4], 0
lea eax, [esi - 0x59]
cmp dword [0x4509c0], eax
jne 0x425e60
mov dword [esp + 8], 0
mov dword [esp + 4], 4
mov dword [esp], 0
call fcn.00407d70
jmp 0x425e60
mov dword [esp], 0x45634c
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
sub esp, 4
jmp 0x4259fd
movzx eax, byte [0x456348]
mov dword [esp], 4
mov dword [esp + 4], eax
call fcn.00407720
jmp 0x425aa1
movzx eax, byte [0x456348]
mov dword [esp], 3
mov dword [esp + 4], eax
call fcn.00407720
jmp 0x425a94
movzx eax, byte [0x456348]
mov dword [esp], 2
mov dword [esp + 4], eax
call fcn.00407720
jmp 0x425a87
movzx eax, byte [0x456348]
mov dword [esp], 1
mov dword [esp + 4], eax
call fcn.00407720
jmp 0x425a7a
mov dword [esp + 4], esi
mov dword [esp], 0
call fcn.00407720
jmp 0x425a6c
cmp dword [0x4509c0], 1
mov dword [0x4584a4], 0
je 0x426951
mov edx, dword [0x4584a8]
lea eax, [edx + 1]
cmp dword [0x451408], eax
je 0x426927
lea eax, [edx + 1]
cmp dword [0x451e50], eax
je 0x4268fd
lea eax, [edx + 1]
cmp dword [0x452898], eax
je 0x4268d3
lea eax, [edx + 1]
cmp dword [0x4532e0], eax
je 0x4268a9
add edx, 1
cmp dword [0x453d28], edx
je 0x426885
mov eax, 2
jmp 0x425c66
mov edx, dword [0x4584a8]
lea eax, [edx + 1]
cmp dword [0x4509c0], eax
je 0x426868
lea eax, [edx + 1]
cmp dword [0x451408], eax
je 0x426849
lea eax, [edx + 1]
cmp dword [0x451e50], eax
je 0x42682a
lea eax, [edx + 1]
cmp dword [0x452898], eax
je 0x42680b
lea eax, [edx + 1]
cmp dword [0x4532e0], eax
je 0x4267ec
add edx, 1
cmp dword [0x453d28], edx
jne 0x425489
mov dword [esp + 4], 0x11
mov dword [esp], 5
call fcn.00407230
jmp 0x425489
movzx eax, word [0x4548ac]
or ax, word [0x45492c]
or ax, word [0x4549ac]
or ax, word [0x454a2c]
or ax, word [0x454aac]
or ax, word [0x454b2c]
je 0x425af1
xor edx, edx
mov dword [esp + 8], 0x3e8
mov dword [0x459298], edx
mov dword [esp + 0xc], edx
mov dword [esp + 4], 4
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_SetTimer]
mov eax, dword [0x450484]
mov dword [0x459000], 0x44a214
mov dword [0x459008], 0x30
sub esp, 0x10
add eax, 0xafc
mov dword [esp + 0x10], edi
mov dword [0x459004], eax
mov eax, dword [0x459294]
mov dword [esp + 0xc], 0x402210
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x8c
mov dword [esp], eax
call esi
sub esp, 0x14
mov dword [esp + 4], 4
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_KillTimer]
push ecx
push ecx
jmp 0x426303
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_GetDC]
sub esp, 4
mov esi, eax
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00412db0
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_ReleaseDC]
sub esp, 8
jmp 0x42540e
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_GetDC]
sub esp, 4
mov esi, eax
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00412db0
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_ReleaseDC]
sub esp, 8
jmp 0x425379
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_GetDC]
sub esp, 4
mov esi, eax
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00412db0
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_ReleaseDC]
sub esp, 8
jmp 0x425239
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_GetDC]
sub esp, 4
mov esi, eax
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00412db0
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [sym.imp.USER32.dll_ReleaseDC]
sub esp, 8
jmp 0x4252d9
mov dword [0x458fd0], eax
mov ebx, dword [esp + 0x3c]
jmp 0x425227
movzx eax, byte [0x456348]
mov dword [esp + 4], eax
xor eax, eax
mov dword [esp], eax
call fcn.00407a80
jmp 0x426054
movzx eax, byte [0x456348]
mov dword [esp], 4
mov dword [esp + 4], eax
call fcn.00407a80
jmp 0x4261da
movzx eax, byte [0x456348]
mov dword [esp], 3
mov dword [esp + 4], eax
call fcn.00407a80
jmp 0x426177
movzx eax, byte [0x456348]
mov dword [esp], 2
mov dword [esp + 4], eax
call fcn.00407a80
jmp 0x426117
movzx eax, byte [0x456348]
mov dword [esp], 1
mov dword [esp + 4], eax
call fcn.00407a80
jmp 0x4260b6
movzx eax, byte [0x456348]
mov dword [esp], 5
mov dword [esp + 4], eax
call fcn.00407a80
jmp 0x42623a
mov dword [esp + 4], 0x11
mov dword [esp], 4
call fcn.00407230
mov edx, dword [0x4584a8]
jmp 0x42658c
mov dword [esp + 4], 0x11
mov dword [esp], 3
call fcn.00407230
mov edx, dword [0x4584a8]
jmp 0x42657d
mov dword [esp + 4], 0x11
mov dword [esp], 2
call fcn.00407230
mov edx, dword [0x4584a8]
jmp 0x42656e
mov dword [esp + 4], 0x11
mov dword [esp], 1
call fcn.00407230
mov edx, dword [0x4584a8]
jmp 0x42655f
xor eax, eax
mov dword [esp + 4], 0x11
mov dword [esp], eax
call fcn.00407230
mov edx, dword [0x4584a8]
jmp 0x426550
movzx eax, byte [0x4584a4]
mov dword [esp + 4], 4
mov dword [esp], 5
mov dword [esp + 8], eax
call fcn.00407d70
jmp 0x426531
movzx eax, byte [0x4584a4]
mov dword [esp + 4], 4
mov dword [esp], 4
mov dword [esp + 8], eax
call fcn.00407d70
mov edx, dword [0x4584a8]
jmp 0x426522
movzx eax, byte [0x4584a4]
mov dword [esp + 4], 4
mov dword [esp], 3
mov dword [esp + 8], eax
call fcn.00407d70
mov edx, dword [0x4584a8]
jmp 0x426513
movzx eax, byte [0x4584a4]
mov dword [esp + 4], 4
mov dword [esp], 2
mov dword [esp + 8], eax
call fcn.00407d70
mov edx, dword [0x4584a8]
jmp 0x426504
movzx eax, byte [0x4584a4]
mov dword [esp + 4], 4
mov dword [esp], 1
mov dword [esp + 8], eax
call fcn.00407d70
mov edx, dword [0x4584a8]
jmp 0x4264f5
xor eax, eax
mov dword [esp + 4], 4
mov dword [esp + 8], eax
xor eax, eax
mov dword [esp], eax
call fcn.00407d70
jmp 0x4264e0
mov dword [esp + 4], 0x12
mov dword [esp], 3
call fcn.00407230
jmp 0x425703
mov dword [esp + 4], 0x12
mov dword [esp], 2
call fcn.00407230
jmp 0x4256f6
mov dword [esp + 4], 0x12
mov dword [esp], 1
call fcn.00407230
jmp 0x4256e9
xor eax, eax
mov dword [esp + 4], 0x12
mov dword [esp], eax
call fcn.00407230
jmp 0x4256dc
mov dword [esp + 4], 0x13
mov dword [esp], 4
call fcn.00407230
jmp 0x4255ca
mov dword [esp + 4], 0x12
mov dword [esp], 4
call fcn.00407230
jmp 0x425711
mov dword [esp + 4], 0x13
mov dword [esp], 3
call fcn.00407230
jmp 0x4255bd
mov dword [esp + 4], 0x13
mov dword [esp], 2
call fcn.00407230
jmp 0x4255b0
mov dword [esp + 4], 0x13
mov dword [esp], 1
call fcn.00407230
jmp 0x4255a2
xor ebx, ebx
mov dword [esp + 4], 0x13
mov dword [esp], ebx
call fcn.00407230
jmp 0x425594
mov dword [esp + 8], 1
mov dword [esp + 4], 0x10
mov dword [esp], 5
call fcn.00407d70
jmp 0x425865
mov dword [esp + 8], 1
mov dword [esp + 4], 0x10
mov dword [esp], 4
call fcn.00407d70
jmp 0x425858
mov dword [esp + 8], 1
mov dword [esp + 4], 0x10
mov dword [esp], 3
call fcn.00407d70
jmp 0x42584b
mov dword [esp + 8], 1
mov dword [esp + 4], 0x10
mov dword [esp], 2
call fcn.00407d70
jmp 0x42583e
mov dword [esp + 8], 1
mov dword [esp + 4], 0x10
mov dword [esp], 1
call fcn.00407d70
jmp 0x425831
xor ebx, ebx
mov dword [esp + 8], 1
mov dword [esp + 4], 0x10
mov dword [esp], ebx
call fcn.00407d70
jmp 0x425824