Function at 0x54d2a8
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5e9d8a
mov eax, dword fs:[0]
push eax
sub esp, 0x180
mov eax, dword [0x70b744]
xor eax, esp
mov dword [esp + 0x178], eax
push ebx
push esi
push edi
mov eax, dword [0x70b744]
xor eax, esp
push eax
lea eax, [esp + 0x190]
mov dword fs:[0], eax
movzx eax, word [ebp + 0xc]
cmp eax, 0x64
mov ebx, dword [ebp + 8]
mov dword [esp + 0x24], ebx
mov edi, ecx
je 0x54d30d
cmp eax, 0x71
jne 0x54d306
mov ecx, ebx
call fcn.0054cfb9
xor eax, eax
jmp 0x54d560
xor eax, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
lea esi, [esp + 0x18]
mov dword [esp + 0x198], eax
call fcn.0045202f
cmp dword [esp + 0x18], 0
je 0x54d548
lea eax, [esp + 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
lea eax, [esp + 0x2c]
push eax
push 0
lea edi, [ebx + 0x74]
mov ebx, dword [0x71f7ac]
push 0x434
push dword [edi]
call ebx
push edi
call fcn.00453c32
xor esi, esi
push esi
lea ecx, [esp + 0x64]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x7c], 7
call fcn.00410c09
push esi
lea ecx, [esp + 0x14]
mov byte [esp + 0x19c], 1
call fcn.00443da5
push esi
push esi
push esi
lea eax, [esp + 0x40]
push eax
push esi
push 0x400
mov byte [esp + 0x1b0], 2
call dword [0x71f688]
cmp eax, esi
mov dword [esp + 0x20], eax
jle 0x54d3ff
lea esi, [eax + 2]
xor ecx, ecx
push 2
pop edx
mov eax, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004fed14
pop ecx
push eax
lea esi, [esp + 0x14]
call fcn.00443dcb
mov eax, dword [esp + 0x20]
add eax, 2
push eax
xor esi, esi
push esi
push dword [esp + 0x18]
call fcn.00522720
add esp, 0xc
push dword [esp + 0x20]
lea eax, [esp + 0x38]
push dword [esp + 0x14]
push esi
push eax
push esi
push 0x400
call dword [0x71f688]
cmp dword [esp + 0x10], esi
lea ecx, [esp + 0x60]
je 0x54d40f
push dword [esp + 0x10]
jmp 0x54d414
push str.00:00:00
call fcn.00410d6e
push str._1_____2__n
lea ecx, [esp + 0xe0]
call fcn.00403e35
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0xe0]
push eax
mov byte [esp + 0x1a0], 3
call fcn.00405a7c
mov ecx, dword [esp + 0x20]
add ecx, 4
push ecx
push eax
call fcn.00405a7c
add esp, 0x10
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0xe0]
call fcn.0041f39e
cmp dword [eax + 0x18], 8
jb 0x54d471
mov eax, dword [eax + 4]
jmp 0x54d474
add eax, 4
push eax
mov esi, edi
call fcn.00444f1e
push 0
push 1
lea ecx, [esp + 0x4c]
call fcn.00410779
push edi
call fcn.00453c32
push eax
mov eax, dword [esp + 0x2c]
push edi
call fcn.00444f49
push 0x5c
pop esi
push esi
lea eax, [esp + 0x80]
push 0
push eax
call fcn.00522720
mov eax, dword [esp + 0x24]
mov dword [esp + 0x88], esi
mov dword [esp + 0x8c], 0x40000000
mov eax, dword [eax + 0x20]
add esp, 0xc
mov dword [esp + 0x90], eax
lea eax, [esp + 0x7c]
push eax
push 1
push 0x444
push dword [edi]
mov dword [esp + 0x8c], esi
call ebx
lea eax, [esp + 0x2c]
push eax
xor esi, esi
push esi
push 0x437
push dword [edi]
call ebx
push 1
push esi
push 0xb6
push dword [edi]
call ebx
mov eax, dword [esp + 0x24]
push 1
push dword [eax + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
lea ecx, [esp + 0xdc]
mov byte [esp + 0x198], 2
call fcn.00401441
mov byte [esp + 0x198], 1
mov ecx, dword [esp + 0x14]
cmp ecx, esi
je 0x54d53c
call fcn.004117b8
push esi
push 1
lea ecx, [esp + 0x68]
call fcn.00410779
or dword [esp + 0x198], 0xffffffff
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x54d55d
call fcn.004117b8
xor eax, eax
inc eax
mov ecx, dword [esp + 0x190]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x178]
xor ecx, esp
call fcn.0051d721
mov esp, ebp
pop ebp
ret 8