Function at 0x4a0600
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb0
mov dword [ebp - 0x98], ecx
lea ecx, [ebp - 0x2c]
call fcn.0040ee90
push str.advanceset_time_calendar
mov ecx, dword [ebp - 0x98]
add ecx, 0x20
call fcn.00509af5
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x4a06ff
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x24]
mov eax, dword [edx + 0x38]
call eax
push eax
lea ecx, [ebp - 0x6c]
call fcn.0041c8a0
push 4
lea ecx, [ebp - 0x70]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0041c990
mov ecx, eax
call fcn.0041cb20
push eax
call fcn.00544f25
add esp, 4
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x70]
call fcn.0040f740
push 2
push 5
lea edx, [ebp - 0x74]
push edx
lea ecx, [ebp - 0x6c]
call fcn.004a5f00
mov ecx, eax
call fcn.0041cb20
push eax
call fcn.00544f25
add esp, 4
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x74]
call fcn.0040f740
push 2
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004a5fc0
mov ecx, eax
call fcn.0041cb20
push eax
call fcn.00544f25
add esp, 4
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x78]
call fcn.0040f740
lea ecx, [ebp - 0x68]
call fcn.00462fe0
movzx ecx, word [ebp - 4]
push ecx
movzx edx, word [ebp - 0x10]
push edx
movzx eax, word [ebp - 0x14]
push eax
lea ecx, [ebp - 0x68]
call fcn.00468c10
movzx ecx, ax
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0x68]
call fcn.0046b4d0
lea ecx, [ebp - 0x6c]
call fcn.0040f740
push str.advanceset_time_hour
mov ecx, dword [ebp - 0x98]
add ecx, 0x20
call fcn.00509af5
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
je 0x4a0732
mov edx, dword [ebp - 0x9c]
sub edx, 8
mov dword [ebp - 0xa0], edx
jmp 0x4a073c
mov dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x4a0765
mov ecx, dword [ebp - 0xc]
add ecx, 0x368
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 0x368]
mov edx, dword [eax + 4]
call edx
mov dword [ebp - 0x28], eax
push str.advanceset_time_minute
mov ecx, dword [ebp - 0x98]
add ecx, 0x20
call fcn.00509af5
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
je 0x4a0798
mov eax, dword [ebp - 0xa4]
sub eax, 8
mov dword [ebp - 0xa8], eax
jmp 0x4a07a2
mov dword [ebp - 0xa8], 0
mov ecx, dword [ebp - 0xa8]
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0
je 0x4a07cb
mov ecx, dword [ebp - 0xc]
add ecx, 0x368
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 0x368]
mov edx, dword [eax + 4]
call edx
mov dword [ebp - 8], eax
push str.advanceset_time_second
mov ecx, dword [ebp - 0x98]
add ecx, 0x20
call fcn.00509af5
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
je 0x4a07fe
mov eax, dword [ebp - 0xac]
sub eax, 8
mov dword [ebp - 0xb0], eax
jmp 0x4a0808
mov dword [ebp - 0xb0], 0
mov ecx, dword [ebp - 0xb0]
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0
je 0x4a0831
mov ecx, dword [ebp - 0xc]
add ecx, 0x368
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 0x368]
mov edx, dword [eax + 4]
call edx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x14]
push eax
push str._t_d_d_d_d_d_d_d0
lea ecx, [ebp - 0x2c]
push ecx
call fcn.004ea900
add esp, 0x24
push 0
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
mov edx, dword [eax + 0x180]
call edx
push str.advanceset_time_settime_checktip
mov ecx, dword [ebp - 0x98]
add ecx, 0x20
call fcn.00509af5
mov dword [ebp - 0x20], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call fcn.00445390
add esp, 4
test eax, eax
jne 0x4a09e3
push 0
push ecx
mov ecx, esp
lea eax, [ebp - 0x2c]
push eax
call fcn.0041c880
push ecx
mov ecx, esp
push 0x58ab5c
push 0x5c2724
push ecx
call fcn.0041ca60
add esp, 0xc
call fcn.00446290
add esp, 0xc
test eax, eax
je 0x4a0908
push 0x368700
mov edx, dword [ebp - 0x20]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x20]
mov edx, dword [eax + 0x54]
call edx
push 1
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x180]
call eax
push 0x58e374
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x3c]
call eax
jmp 0x4a09e1
lea ecx, [ebp - 0x2c]
push ecx
push 0x58ab5c
push 0x5c2724
lea edx, [ebp - 0x88]
push edx
call fcn.0041ca60
add esp, 0xc
push eax
call fcn.00445410
add esp, 8
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x81], al
lea ecx, [ebp - 0x88]
call fcn.0040f740
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x4a09ab
cmp dword [ebp - 0x20], 0
je 0x4a09a9
push 0xff0000
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x54]
call eax
push 1
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x180]
call eax
push 0x58c034
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x3c]
call eax
push 0
push 0x7d0
push 0x205
mov ecx, dword [ebp - 0x98]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x4a09e1
push 0x368700
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x54]
call eax
push 1
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x180]
call eax
push 0x58e374
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x3c]
call eax
jmp 0x4a0a5c
push 5
push 0
lea ecx, [ebp - 0x2c]
call fcn.0041cb20
push eax
push 0x58ab5c
push 0x5c2724
lea ecx, [ebp - 0x8c]
push ecx
call fcn.0041ca60
add esp, 0xc
mov ecx, eax
call fcn.0041cb20
push eax
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x8c]
call fcn.0040f740
push 0x368700
mov edx, dword [ebp - 0x20]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x20]
mov edx, dword [eax + 0x54]
call edx
push 1
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x180]
call eax
push 0x58e374
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0x3c]
call eax
push 1
push ecx
mov ecx, esp
push 0x582b94
call fcn.0041c8a0
push ecx
mov ecx, esp
push 0x590110
call fcn.0041c8a0
mov ecx, 0x5c2f20
call fcn.0044e4b0
lea ecx, [ebp - 0x2c]
call fcn.0040f740
mov esp, ebp
pop ebp
ret 0xc