Function at 0x4207fa
Capabilities:
Hide graphical window
Shutdown system

Disassembly:
mov al, 0
add byte [ebx], al
clc
mov edx, edi
mov eax, dword [esi + 0xa4]
call 0x42b7f0
cmp bl, 0xa
jae 0x42083f
xor edi, edi
xor eax, eax
mov al, bl
cmp edi, eax
je 0x420829
mov eax, esi
mov edx, edi
call 0x440288
call 0x42788d
inc edi
cmp edi, 0xa
jne 0x420813
xor edx, edx
mov dl, bl
mov eax, esi
call 0x44029e
call 0x42b61b
xor eax, eax
mov al, bl
cmp eax, 0xa
ja case.default.0x42084c
jmp dword [eax*4 + 0x420853]
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x5c]
mov eax, dword [esi + 0x34]
call 0x42b4f9
jmp case.default.0x42084c
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x24]
mov eax, dword [esi + 0x24]
call sym.imp.gdi32.dll_GetTextExtentPoint32A
add byte [eax], al
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x28]
mov eax, dword [esi + 0x28]
call 0x42b522
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x58]
mov eax, dword [esi + 0x34]
call sym.imp.user32.dll_RemovePropA
jmp case.default.0x42084c
mov eax, dword [0x42a050]
mov edx, 0xffffff
call 0x42b96c
mov eax, dword [0x42a050]
mov dl, 1
call 0x42d080
mov eax, dword [esi + 0x34]
xor edx, edx
call 0x42b132
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x5c]
mov eax, dword [esi + 0x34]
call sym.imp.user32.dll_DispatchMessageA
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0xd4]
mov eax, dword [esi + 0x24]
call 0x42b585
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0xd8]
mov eax, dword [esi + 0x28]
call 0x42b59a
jmp case.default.0x42084c
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x88]
mov eax, dword [esi + 0x24]
call sym.imp.winmm.dll_timeSetEvent
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x148]
mov eax, dword [esi + 0x28]
inc esi
sub al, ch
push 0xa10000ac
clc
xchg dword [edx], eax
mov eax, dword [eax]
mov edx, dword [eax + 0x5c]
mov eax, dword [esi + 0x34]
call 0x42b5db
jmp case.default.0x42084c
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x2c]
mov eax, dword [esi + 0x24]
call 0x42b5f2
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x30]
mov eax, dword [esi + 0x28]
call 0x42b604
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x5c]
mov eax, dword [esi + 0x34]
call 0x42b616
lea ecx, [ebp - 0x3c]
mov eax, dword [esi + 0x48]
mov edx, 0x12
call 0x42de06
lea ebx, [ebp - 0x3c]
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x38]
mov eax, dword [esi + 0x24]
call 0x42b647
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x34]
mov eax, dword [esi + 0x28]
call 0x42b659
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x5c]
mov eax, dword [esi + 0x34]
call 0x42b66b
jmp case.default.0x42084c
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x38]
mov eax, dword [esi + 0x24]
call 0x42b682
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x3c]
mov eax, dword [esi + 0x28]
call 0x42b694
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x5c]
mov eax, dword [esi + 0x34]
call 0x42b6a6
jmp case.default.0x42084c
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x40]
mov eax, dword [esi + 0x24]
call 0x42b6bd
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0xf8]
mov eax, dword [esi + 0x28]
call 0x42b6d2
mov eax, dword [0x4287f8]
xchg dword [edx], eax
mov eax, dword [eax]
mov edx, dword [eax + 0x68]
mov eax, dword [esi + 0x34]
call 0x42b6e4
mov eax, dword [0x4287f8]
mov eax, dword [eax]
push dword [eax + 0xac]
push 0x421120
lea edx, [ebp - 0x40]
mov eax, dword [esi + 0x48]
call 0x42dd55
push dword [ebp - 0x40]
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.00423859
mov eax, 0x56
call 0x4429bf
test al, al
je 0x420b0b
mov eax, dword [esi + 0x9c]
call 0x42c03a
test al, al
jne 0x420b0b
push dword [ebp - 0x10]
push 0x421130
mov eax, dword [0x4287f8]
mov eax, dword [eax]
push dword [eax + 0xb0]
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.00423898
push dword [ebp - 0x10]
push 0x421120
lea edx, [ebp - 0x44]
mov eax, dword [esi + 0x50]
call 0x42ddb7
push dword [ebp - 0x44]
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.004238bb
lea eax, [ebp - 0x14]
call 0x4235a3
mov eax, 0x16
call 0x442a29
test al, al
je 0x420be9
mov eax, dword [esi + 0x84]
call 0x42c0a8
test al, al
je 0x420b64
mov eax, dword [esi + 0x84]
call 0x42b7e7
test al, al
je 0x420b64
push 0x421120
mov eax, dword [0x4287f8]
xchg dword [edx], eax
mov eax, dword [eax]
push dword [eax + 0x7c]
push 0x421140
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.00423914
mov eax, dword [esi + 0x88]
call 0x42c0e7
test al, al
je 0x420ba9
mov eax, dword [esi + 0x88]
call 0x42b826
test al, al
je 0x420ba9
push dword [ebp - 0x14]
push 0x421120
adc dword [edx], eax
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0xf4]
mov eax, dword [esi + 0x24]
call fcn.0040b86c
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x44]
mov eax, dword [esi + 0x28]
call fcn.0040b86c
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x14]
mov eax, dword [esi + 0x68]
call fcn.0040b86c
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x5c]
mov eax, dword [esi + 0x34]
call fcn.0040b86c
cli
stosd dword es:[edi], eax
invalid
dec dword [ebx - 0x2dcccbba]
call fcn.0040b440
mov eax, dword [esi + 0x30]
xor edx, edx
call fcn.0040b440
mov eax, esi
call fcn.0041fa58
mov eax, dword [0x428840]
mov eax, dword [eax]
call fcn.0040bd64
jmp case.default.0x42084c
mov eax, 0x27
call fcn.00422b10
mov edx, eax
mov eax, dword [esi + 0xcc]
call fcn.0040b8f0
mov eax, 0x4f
call fcn.00422b10
mov edx, eax
mov eax, dword [esi + 0xd0]
call fcn.0040b8f0
mov eax, 0x24
call fcn.00422b10
mov edx, eax
mov eax, dword [esi + 0x100]
call fcn.0040b8f0
mov eax, 0x34
call fcn.00422b10
test al, al
je fcn.00420d8d
mov eax, dword [0x4287f8]
mov eax, dword [eax]
mov edx, dword [eax + 0x108]
mov eax, dword [esi + 0xf0]
call fcn.0040b86c
invalid
clc
invalid
inc edx