Function at 0x506e62
Capabilities:
Create process on windows
Create process suspended

Disassembly:
mov eax, 0x56f069
call fcn.0053c1d0
sub esp, 0x808
mov eax, dword [0x5af710]
push ebx
push esi
mov esi, dword [ebp + 8]
xor eax, ebp
xor ebx, ebx
cmp esi, ebx
mov dword [ebp - 0x10], eax
push edi
mov dword [ebp - 0x478], esi
je 0x507eaa
cmp byte [esi], bl
je 0x507eaa
push esi
lea ecx, [ebp - 0x448]
call fcn.00405500
lea eax, [ebp - 0x448]
push eax
mov dword [ebp - 4], ebx
call fcn.005044b1
pop ecx
push 0x7f
xor eax, eax
cmp dword [ebp - 0x430], 0x10
pop ecx
lea edi, [ebp - 0x810]
mov dword [ebp - 0x814], ebx
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0x444]
jae 0x506ede
lea eax, [ebp - 0x444]
lea ecx, [ebp - 0x814]
push ecx
push eax
call fcn.0050559a
mov edi, dword [ebp - 0x814]
cmp byte [edi], 0
pop ecx
pop ecx
mov dword [ebp - 0x47c], ebx
je 0x507c36
lea eax, [ebp - 0x4d0]
push eax
call fcn.00504c45
pop ecx
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 1
jb 0x506f1e
mov eax, dword [eax + 4]
jmp 0x506f21
add eax, 4
push eax
lea ecx, [ebp - 0x464]
call fcn.00405500
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0x4d0]
mov byte [ebp - 4], 3
call fcn.00402c50
push ebx
push 0x57eb04
lea ecx, [ebp - 0x464]
call fcn.0040b730
cmp eax, ebx
jl 0x506f5d
mov dword [ebp + 0x10], 2
cmp dword [ebp + 0x10], ebx
je 0x5074e3
xor eax, eax
push 0x10
pop ecx
lea edi, [ebp - 0x590]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x4a8], ebx
lea edi, [ebp - 0x4a4]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov ax, word [ebp + 0xc]
mov word [ebp - 0x564], ax
lea eax, [ebp - 0x814]
push eax
lea eax, [ebp - 0x42c]
push eax
mov dword [ebp - 0x594], 0x44
mov dword [ebp - 0x568], esi
call fcn.00505754
pop ecx
pop ecx
xor eax, eax
mov byte [ebp - 0x410], 0
mov ecx, 0xff
lea edi, [ebp - 0x40f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, 0x3ff
cmp dword [ebp - 0x418], eax
mov byte [ebp - 4], 4
jae 0x506fe2
mov eax, dword [ebp - 0x418]
cmp dword [ebp - 0x414], 0x10
mov ecx, dword [ebp - 0x428]
jae 0x506ff7
lea ecx, [ebp - 0x428]
push eax
push ecx
lea eax, [ebp - 0x410]
push eax
call fcn.0053d930
add esp, 0xc
push esi
push 2
lea ecx, [ebp - 0x614]
call fcn.00404a20
push dword [ebp - 0x478]
lea eax, [ebp - 0x614]
push str.CreateProcess:
push eax
mov byte [ebp - 4], 5
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
lea eax, [ebp - 0x4a8]
push eax
lea eax, [ebp - 0x594]
push eax
push ebx
push ebx
push dword [ebp + 0x14]
call fcn.00503df0
add esp, 4
push eax
push ebx
push ebx
push ebx
lea eax, [ebp - 0x410]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
lea eax, [ebp - 0x614]
je 0x5072ad
push 0x57eae8
push eax
call fcn.00403980
mov edi, 0x228
cmp dword [0x5b21c0], edi
pop ecx
pop ecx
mov ebx, 0x572840
jne 0x507279
lea eax, [ebp - 0x474]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push esi
push 2
lea ecx, [ebp - 0x550]
call fcn.00404a20
mov esi, 0x572a6c
push esi
lea eax, [ebp - 0x498]
push eax
lea ecx, [ebp - 0x614]
mov byte [ebp - 4], 6
call fcn.00407320
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 7
jb 0x5070df
mov eax, dword [eax + 4]
jmp 0x5070e2
add eax, 4
push eax
push 0x572a4c
push esi
push 0x572a48
push edi
push 0x572a40
push dword [ebp - 0x468]
mov eax, 0x572a3c
push eax
push dword [ebp - 0x46a]
mov edx, 0x572a38
push eax
push dword [ebp - 0x46c]
mov ecx, 0x572a34
push edx
push dword [ebp - 0x46e]
push ecx
push dword [ebp - 0x472]
push ecx
push dword [ebp - 0x474]
push edx
push 0x37d
push eax
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x478], esp
push 0x57ea88
call fcn.00405500
lea eax, [ebp - 0x4d0]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 8
jb 0x507168
mov eax, dword [eax + 4]
jmp 0x50716b
add eax, 4
push eax
lea eax, [ebp - 0x550]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x4d0]
call fcn.00402c50
push 0
push 1
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 6
call fcn.00402c50
lea eax, [ebp - 0x550]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0x504]
mov byte [ebp - 4], 5
call fcn.004028d0
lea ecx, [ebp - 0x504]
mov dword [ebp - 0x504], ebx
call fcn.0054dfcb
xor esi, esi
inc esi
cmp dword [ebp + 0x10], esi
jne 0x50728c
push 0xffffffffffffffff
push dword [ebp - 0x4a8]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x4a8]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push dword [ebp - 0x4a4]
call edi
mov dword [ebp - 0x47c], esi
jmp 0x5074b0
push 0x57eadc
push eax
call fcn.00403980
mov edi, 0x228
cmp dword [0x5b21c0], edi
pop ecx
pop ecx
mov ebx, 0x572840
jne 0x5074b0
lea eax, [ebp - 0x474]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push esi
push 2
lea ecx, [ebp - 0x550]
call fcn.00404a20
mov esi, 0x572a6c
push esi
lea eax, [ebp - 0x4d0]
push eax
lea ecx, [ebp - 0x614]
mov byte [ebp - 4], 9
call fcn.00407320
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0xa
jb 0x507316
mov eax, dword [eax + 4]
jmp 0x507319
add eax, 4
push eax
push 0x572a4c
push esi
push 0x572a48
push edi
push 0x572a40
push dword [ebp - 0x468]
mov eax, 0x572a3c
push eax
push dword [ebp - 0x46a]
mov edx, 0x572a38
push eax
push dword [ebp - 0x46c]
mov ecx, 0x572a34
push edx
push dword [ebp - 0x46e]
push ecx
push dword [ebp - 0x472]
push ecx
push dword [ebp - 0x474]
push edx
push 0x388
push eax
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x478], esp
push 0x57ea88
call fcn.00405500
lea eax, [ebp - 0x498]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0xb
jb 0x50739f
mov eax, dword [eax + 4]
jmp 0x5073a2
add eax, 4
push eax
lea eax, [ebp - 0x550]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x498]
call fcn.00402c50
push 0
push 1
lea ecx, [ebp - 0x4d0]
mov byte [ebp - 4], 9
call fcn.00402c50
lea eax, [ebp - 0x550]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0x504]
mov byte [ebp - 4], 5
call fcn.004028d0
lea ecx, [ebp - 0x504]
mov dword [ebp - 0x504], ebx
call fcn.0054dfcb
xor esi, esi
inc esi
lea ecx, [ebp - 0x5c8]
mov byte [ebp - 4], 4
call fcn.004028d0
lea ecx, [ebp - 0x5c8]
mov dword [ebp - 0x5c8], ebx
call fcn.0054dfcb
push 0
push esi
lea ecx, [ebp - 0x42c]
call fcn.00402c50
jmp 0x507c23
push esi
push 2
lea ecx, [ebp - 0x614]
call fcn.00404a20
cmp byte [edi + 1], 0x3a
mov byte [ebp - 4], 0xc
mov ebx, 0x572840
jne 0x507733
cmp byte [edi + 2], 0x5c
jne 0x507733
push 0
push edi
call fcn.0053e126
cmp eax, 0xffffffff
pop ecx
pop ecx
jne 0x507733
push 0x57ead0
lea eax, [ebp - 0x614]
push edi
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
mov edi, 0x228
cmp dword [0x5b21c0], edi
pop ecx
pop ecx
jne 0x507c03
lea eax, [ebp - 0x474]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push esi
push 2
lea ecx, [ebp - 0x550]
call fcn.00404a20
mov esi, 0x572a6c
push esi
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp - 0x614]
mov byte [ebp - 4], 0xd
call fcn.00407320
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0xe
jb 0x507594
mov eax, dword [eax + 4]
jmp 0x507597
add eax, 4
push eax
push 0x572a4c
push esi
push 0x572a48
push edi
push 0x572a40
push dword [ebp - 0x468]
mov eax, 0x572a3c
push eax
push dword [ebp - 0x46a]
mov edx, 0x572a38
push eax
push dword [ebp - 0x46c]
mov ecx, 0x572a34
push edx
push dword [ebp - 0x46e]
push ecx
push dword [ebp - 0x472]
push ecx
push dword [ebp - 0x474]
push edx
push 0x394
push eax
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x478], esp
push 0x57ea88
call fcn.00405500
lea eax, [ebp - 0x498]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0xf
jb 0x50761d
mov eax, dword [eax + 4]
jmp 0x507620
add eax, 4
push eax
lea eax, [ebp - 0x550]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x498]
call fcn.00402c50
push 0
push 1
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0xd
call fcn.00402c50
lea eax, [ebp - 0x550]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0x504]
mov byte [ebp - 4], 0xc
call fcn.004028d0
lea ecx, [ebp - 0x504]
mov dword [ebp - 0x504], ebx
call fcn.0054dfcb
xor esi, esi
inc esi
jmp 0x507c03
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x42c]
push eax
call fcn.00505754
pop ecx
pop ecx
xor eax, eax
cmp dword [ebp - 0x414], 0x10
push 0xe
pop ecx
lea edi, [ebp - 0x588]
rep stosd dword es:[edi], eax
mov ecx, dword [ebp - 0x814]
mov dword [ebp - 0x57c], ecx
mov ecx, dword [ebp - 0x428]
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x58c], 0x3c
mov dword [ebp - 0x588], eax
mov dword [ebp - 0x584], eax
mov dword [ebp - 0x580], eax
jae 0x507796
lea ecx, [ebp - 0x428]
mov dword [ebp - 0x574], eax
mov dword [ebp - 0x56c], eax
lea eax, [ebp - 0x448]
push eax
mov dword [ebp - 0x578], ecx
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x614]
push str.ShellExecuteEx:
push eax
mov dword [ebp - 0x570], ecx
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.0040b751
pop ecx
pop ecx
lea eax, [ebp - 0x58c]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
test eax, eax
lea eax, [ebp - 0x614]
je 0x5079f7
push 0x57eae8
push eax
call fcn.00403980
mov edi, 0x228
cmp dword [0x5b21c0], edi
pop ecx
pop ecx
jne 0x5079ec
lea eax, [ebp - 0x474]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push esi
push 2
lea ecx, [ebp - 0x550]
call fcn.00404a20
mov esi, 0x572a6c
push esi
lea eax, [ebp - 0x4b4]
push eax
lea ecx, [ebp - 0x614]
mov byte [ebp - 4], 0x11
call fcn.00407320
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x12
jb 0x507852
mov eax, dword [eax + 4]
jmp 0x507855
add eax, 4
push eax
push 0x572a4c
push esi
push 0x572a48
push edi
push 0x572a40
push dword [ebp - 0x468]
mov eax, 0x572a3c
push eax
push dword [ebp - 0x46a]
mov edx, 0x572a38
push eax
push dword [ebp - 0x46c]
mov ecx, 0x572a34
push edx
push dword [ebp - 0x46e]
push ecx
push dword [ebp - 0x472]
push ecx
push dword [ebp - 0x474]
push edx
push 0x3a9
push eax
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x478], esp
push 0x57ea88
call fcn.00405500
lea eax, [ebp - 0x498]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x13
jb 0x5078db
mov eax, dword [eax + 4]
jmp 0x5078de
add eax, 4
push eax
lea eax, [ebp - 0x550]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x498]
call fcn.00402c50
push 0
push 1
lea ecx, [ebp - 0x4b4]
mov byte [ebp - 4], 0x11
call fcn.00402c50
lea eax, [ebp - 0x550]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0x504]
mov byte [ebp - 4], 0x10
call fcn.004028d0
lea ecx, [ebp - 0x504]
mov dword [ebp - 0x504], ebx
call fcn.0054dfcb
xor esi, esi
inc esi
mov dword [ebp - 0x47c], esi
jmp 0x507bf5
push 0x57eadc
push eax
call fcn.00403980
mov edi, 0x228
cmp dword [0x5b21c0], edi
pop ecx
pop ecx
jne 0x507bf5
lea eax, [ebp - 0x474]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push esi
push 2
lea ecx, [ebp - 0x550]
call fcn.00404a20
mov esi, 0x572a6c
push esi
lea eax, [ebp - 0x4b4]
push eax
lea ecx, [ebp - 0x614]
mov byte [ebp - 4], 0x14
call fcn.00407320
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x15
jb 0x507a5b
mov eax, dword [eax + 4]
jmp 0x507a5e
add eax, 4
push eax
push 0x572a4c
push esi
push 0x572a48
push edi
push 0x572a40
push dword [ebp - 0x468]
mov eax, 0x572a3c
push eax
push dword [ebp - 0x46a]
mov edx, 0x572a38
push eax
push dword [ebp - 0x46c]
mov ecx, 0x572a34
push edx
push dword [ebp - 0x46e]
push ecx
push dword [ebp - 0x472]
push ecx
push dword [ebp - 0x474]
push edx
push 0x3af
push eax
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x478], esp
push 0x57ea88
call fcn.00405500
lea eax, [ebp - 0x498]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x16
jb 0x507ae4
mov eax, dword [eax + 4]
jmp 0x507ae7
add eax, 4
push eax
lea eax, [ebp - 0x550]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp - 0x498]
call fcn.00402c50
push 0
push 1
lea ecx, [ebp - 0x4b4]
mov byte [ebp - 4], 0x14
call fcn.00402c50
lea eax, [ebp - 0x550]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0x504]
mov byte [ebp - 4], 0x10
call fcn.004028d0
lea ecx, [ebp - 0x504]
mov dword [ebp - 0x504], ebx
call fcn.0054dfcb
xor esi, esi
inc esi
push 0
push esi
lea ecx, [ebp - 0x42c]
call fcn.00402c50
lea ecx, [ebp - 0x5c8]
mov byte [ebp - 4], 3
call fcn.004028d0
lea ecx, [ebp - 0x5c8]
mov dword [ebp - 0x5c8], ebx
call fcn.0054dfcb
push 0
push esi
lea ecx, [ebp - 0x464]
call fcn.00402c50
jmp 0x507e6c
xor edi, edi
inc edi
push edi
push 2
lea ecx, [ebp - 0x614]
call fcn.00404a20
push esi
lea eax, [ebp - 0x614]
push 0x57eaac
push eax
mov byte [ebp - 4], 0x17
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
lea eax, [ebp - 0x474]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push edi
push 2
lea ecx, [ebp - 0x550]
call fcn.00404a20
mov esi, 0x572a6c
push esi
lea eax, [ebp - 0x4d0]
push eax
lea ecx, [ebp - 0x614]
mov byte [ebp - 4], 0x18
call fcn.00407320
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x19
jb 0x507cad
mov eax, dword [eax + 4]
jmp 0x507cb0
add eax, 4
push eax
push 0x572a4c
push esi
push 0x572a48
push 0x10000000
push 0x572a40
push dword [ebp - 0x468]
mov eax, 0x572a3c
push eax
push dword [ebp - 0x46a]
mov edx, 0x572a38
push eax
push dword [ebp - 0x46c]
mov ecx, 0x572a34
push edx
push dword [ebp - 0x46e]
push ecx
push dword [ebp - 0x472]
push ecx
push dword [ebp - 0x474]
push edx
push 0x3d8
push eax
push 0x5c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x478], esp
push 0x57ea88
call fcn.00405500
lea eax, [ebp - 0x498]
push eax
call fcn.00407150
add esp, 0x24
cmp dword [eax + 0x18], 0x10
mov byte [ebp - 4], 0x1a
jb 0x507d3a
mov eax, dword [eax + 4]
jmp 0x507d3d
add eax, 4
push eax
lea eax, [ebp - 0x550]
push 0x572a0c
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.00403f50
push eax
call fcn.00403980
pop ecx
pop ecx
mov ecx, eax
call fcn.004040c0
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push eax
call fcn.00403980
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x498]
call fcn.00402c50
push ebx
push edi
lea ecx, [ebp - 0x4d0]
mov byte [ebp - 4], 0x18
call fcn.00402c50
lea eax, [ebp - 0x550]
push eax
call fcn.00407930
pop ecx
lea ecx, [ebp - 0x504]
mov byte [ebp - 4], 0x17
call fcn.004028d0
mov ebx, 0x572840
lea ecx, [ebp - 0x504]
mov dword [ebp - 0x504], ebx
call fcn.0054dfcb
lea ecx, [ebp - 0x5c8]
mov byte [ebp - 4], 0
call fcn.004028d0
lea ecx, [ebp - 0x5c8]
mov dword [ebp - 0x5c8], ebx
call fcn.0054dfcb
xor esi, esi
inc esi
xor edi, edi
xor ebx, ebx
cmp dword [ebp - 0x814], edi
je 0x507e95
cmp ebx, 0x7f
jg 0x507e95
mov eax, dword [ebp + ebx*4 - 0x814]
push eax
inc ebx
call fcn.0055047a
cmp dword [ebp + ebx*4 - 0x814], edi
pop ecx
jne 0x507e78
push edi
push esi
lea ecx, [ebp - 0x448]
call fcn.00402c50
mov eax, dword [ebp - 0x47c]
jmp 0x507eac
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0053aaae
leave
ret 0x10