Function at 0x401000
Capabilities:
Check for time delay via gettickcount
Get hostname

Disassembly:
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x428865], eax
push 0x840
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [0x428861], eax
push 0x5b7f
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0xe], eax
push ebp
mov ebp, esp
add esp, 0xfffffdb4
mov dword [ebp - 0x1d0], 0x65563498
lea eax, [0x49c560]
push eax
push 0x7b
push dword [ebp - 0x28]
push esi
lea eax, [0x49c560]
push eax
mov eax, 0x428237
push eax
call fcn.00409464
add esp, 0x18
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
call fcn.004078f0
push 0x77c10400
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x4280d1], eax
push dword [0x49c56c]
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x4283d4], eax
push 0xbdb94b00
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x428066], eax
push dword [0x49c56c]
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0x50], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push 0x2cc0c600
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0x1a0], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
call fcn.004082e0
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push dword [ebp + 0x68]
push dword [ebp + 0x30]
push eax
push 0x6b
push dword [ebp - 0x44]
push edx
push 0x72
call fcn.00408754
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
call fcn.00408644
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push 0xffffffffffffffff
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [0x428274], eax
push dword [0x49c56c]
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0xe8], eax
call fcn.00407390
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
call fcn.00407e40
push eax
call fcn.00406f00
add esp, 4
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push dword [0x49c56c]
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0xc8], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x42829d
push eax
push dword [ebp - 0x4c]
mov eax, 0x42833f
push eax
mov eax, 0x4282a9
push eax
mov eax, 0x428047
push eax
lea eax, [0x49c560]
push eax
call fcn.00409464
add esp, 0x18
push 0xaa42d100
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0xac], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push dword [ebp]
push edi
push dword [ebp - 0x7c]
lea eax, [0x49c560]
push eax
push ecx
push dword [ebp - 0x68]
push 0x1b
call fcn.00407900
add esp, 0x1c
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push edi
lea eax, [0x49c560]
push eax
lea eax, [0x49c560]
push eax
call fcn.00407ca4
add esp, 0xc
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
lea eax, [0x49c560]
push eax
push eax
push 0x5d
call fcn.0040805c
add esp, 0xc
call fcn.0040734c
push 0
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [0x4282d9], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
call fcn.00406dcc
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x42805f
push eax
push 0x7b
lea eax, [0x49c560]
push eax
lea eax, [0x49c560]
push eax
push dword [ebp - 8]
lea eax, [0x49c560]
push eax
call fcn.00407128
call fcn.004078ac
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push 0xb8521d00
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
test al, al
je 0x40908d
push 0x72eba900
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x42805b], eax
push 0x3627800
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 4], eax
mov esi, 0x49d357
push esi
mov edi, 0x49c70b
push edi
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov dword [ebp - 0xa8], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push 0x4812ac00
push 0x49d357
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
mov dword [ebp - 0x108], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov edi, 0x49cd31
push edi
push dword [0x49c56c]
push 0x180b8e00
push 0x26269100
push 0x49d357
mov edx, 1
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [0x42801d], eax
push 0x891ec600
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x428280], eax
push 0x5e302400
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x428449], eax
lea eax, [0x49c560]
push eax
push eax
call fcn.00407040
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
call fcn.00406dcc
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x428200
push eax
push eax
call fcn.0040739c
add esp, 8
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x22c], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push 0x25
lea eax, [0x49c560]
push eax
push 0x20
mov eax, 0x4282a4
push eax
push 0x51
call fcn.00408914
add esp, 0x14
push dword [0x49c56c]
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0xdc], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4281bb], eax
mov eax, 0x428204
push eax
lea eax, [0x49c560]
push eax
push dword [ebp + 0x54]
call fcn.00406d9c
add esp, 0xc
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push dword [0x49c56c]
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x42818b], eax
push 0xb332df00
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x42805a], eax
push dword [0x49c56c]
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0x10c], eax
push esi
push dword [ebp - 0x5c]
push eax
push 0x6b
push eax
push ecx
call fcn.00406dbc
add esp, 0x18
push dword [0x49c56c]
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x428296], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
call fcn.00408ce0
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
call fcn.00408304
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
call fcn.00408744
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
lea eax, [0x49c560]
push eax
call fcn.00406f00
add esp, 4
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push 0x81646300
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0x180], eax
push dword [0x49c56c]
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0xc0], eax
push 0x49a1f500
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0x170], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
call fcn.00408410
push 0x52
push edi
push eax
push dword [ebp + 0x48]
lea eax, [0x49c560]
push eax
lea eax, [0x49c560]
push eax
push dword [ebp - 0x74]
call fcn.00407900
add esp, 0x1c
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push 0x8e30cd00
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0x218], eax
lea eax, [0x49c560]
push eax
lea eax, [0x49c560]
push eax
push 0x67
push ebp
push esi
lea eax, [0x49c560]
push eax
call fcn.00407a38
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
call fcn.00407664
call fcn.00409478
push 0x67920900
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0x3c], eax
push 0x4bb9cf00
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x428182], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
call fcn.00408230
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push eax
push eax
push dword [ebp - 0x2c]
mov eax, 0x4283ed
push eax
lea eax, [0x49c560]
push eax
push eax
call fcn.00408034
push 0xa314c800
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0x110], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
call fcn.00407bb8
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
lea eax, [0x49c560]
push eax
push eax
push dword [ebp - 0x14]
call fcn.0040805c
add esp, 0xc
push 0x4c2d3f00
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x428407], eax
mov eax, 0x49d044
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov dword [ebp - 0x38], eax
push dword [0x49c56c]
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x428325], eax
mov ecx, 0x49ca1e
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [0x4282da], eax
mov ecx, 0x49c70b
push ecx
push 0x59c53e00
push 0xb741300
push dword [0x49c56c]
mov ecx, 0x49ca1e
push ecx
push 1
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [0x428157], eax
lea eax, [0x49c560]
push eax
push ebx
push 0x31
push 0x50
mov eax, 0x42841b
push eax
push ebx
call fcn.00408034
push 0xf3549000
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0x22c], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push dword [ebp - 0x80]
mov eax, 0x428132
push eax
call fcn.00407e4c
push 0x20
lea eax, [0x49c560]
push eax
push eax
call fcn.00407148
add esp, 0xc
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov edx, 9
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [ebp - 0x1c], eax
push 0xa369fd00
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x428439], eax
mov edi, 0x49d044
push edi
mov edi, 0x49d357
push edi
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov dword [ebp - 0xac], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push 0x7f
push edi
push dword [ebp + 0x38]
push dword [ebp + 0x5c]
push dword [ebp + 0x20]
call fcn.004073bc
add esp, 0x14
push 0xf3aaf900
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x428001], eax
push dword [0x49c56c]
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
or al, al
je 0x407c1b
push 0x44c7a500
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x428014], eax
call fcn.00408304
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push 0
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
or ax, ax
je 0x1ee36be
push dword [0x49c56c]
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x4283c0], eax
push eax
push eax
call fcn.00408244
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
call fcn.00408d00
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push eax
push dword [ebp + 0x58]
push 0x3d
call fcn.00408314
mov ebx, 0x49ca1e
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0xfc], eax
push 0x49c70b
push 0x49d357
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov dword [0x428153], eax
push dword [0x49c56c]
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x42823b], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
call fcn.00408fec
push 0x49c70b
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x40], eax
mov eax, dword [0x49c549]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x240], eax
push 0x87224b00
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0x54], eax
mov eax, 0x42820b
push eax
push eax
call fcn.004084d8
add esp, 8
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
lea eax, [0x49c560]
push eax
push edi
push 0x6f
call fcn.0040810c
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [0x428037], eax
push dword [0x49c56c]
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x428070], eax
push 0xb2482d00
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0x148], eax
mov eax, 0x42837d
push eax
push 0x7d
lea eax, [0x49c560]
push eax
push dword [ebp - 0x44]
push dword [ebp + 0x4c]
push dword [ebp + 0x4c]
call fcn.00406dbc
add esp, 0x18
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push dword [ebp - 0x38]
push 0x39
push 0x26
push 0x7a
push eax
mov eax, 0x4280c5
push eax
call fcn.00408c50
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
lea eax, [0x49c560]
push eax
call fcn.00408f5c
add esp, 4
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, dword [0x49c549]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x210], eax
call fcn.00406c04
call fcn.00407bb8
lea eax, [0x49c560]
push eax
mov eax, 0x428386
push eax
lea eax, [0x49c560]
push eax
push dword [ebp - 0x44]
push dword [ebp + 0x7c]
call fcn.00406cb4
push dword [0x49c56c]
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
cmp al, 0
je 0x401282
mov eax, 0x42838a
push eax
lea eax, [0x49c560]
push eax
push dword [ebp - 0x2c]
push eax
push dword [ebp - 0xc]
push dword [ebp - 4]
push 0x2b
call fcn.00408654
add esp, 0x1c
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push 0x9a98aa00
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0x130], eax
push 0x11cc2100
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0x12c], eax
call fcn.0040825c
call fcn.0040832c
push 0x17060700
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x42811c], eax
push edi
push eax
call fcn.00408244
call fcn.00408304
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push 0x4b115100
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x428005], eax
push 0xa10b2400
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x4281c1], eax
mov ebx, 0x49d044
push ebx
mov eax, 0x49d357
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov dword [0x4282d8], eax
push dword [0x49c56c]
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x428205], eax
mov ecx, 0x49c5b9
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x42801e], eax
call fcn.00406c04
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push dword [0x49c56c]
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0xec], eax
mov ebx, 0x49c5bb
push ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x168], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push 5
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [ebp - 0xc], eax
push 0x8f3ce300
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0x1c4], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push 0x5006c400
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0x1c4], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
call fcn.00409364
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov dword [0x49cf3c], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x8c], eax
call fcn.00407f04
push dword [ebp + 0x4c]
push 0x6a
push 0x37
lea eax, [0x49c560]
push eax
call fcn.00406d30
add esp, 0x10
push 0x63
push eax
push eax
push dword [ebp - 0x54]
lea eax, [0x49c560]
push eax
push 9
mov eax, 0x4281a8
push eax
call fcn.00408654
add esp, 0x1c
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push 0x1d8dd300
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x4282c9], eax
push ecx
push dword [ebp - 0x38]
push ebp
mov eax, 0x428092
push eax
push edx
mov eax, 0x428398
push eax
call fcn.00407bc8
push 9
push 0x1175ec00
push 0x710c8f00
mov edx, 0x49ca1e
push edx
push dword [0x49c56c]
push 0xb33da900
mov edi, 0x49c70b
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x12c], eax
push dword [0x49c56c]
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x4283f4], eax
push 0x9c88fb00
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x4282e9], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push 0
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x38], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
lea eax, [0x49c560]
push eax
lea eax, [0x49c560]
push eax
push eax
push 0x32
call fcn.00406d30
add esp, 0x10
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push 0x6695b200
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x4283f8], eax
push ecx
push ecx
call fcn.00407e4c
push 0x69
push dword [ebp - 0x2c]
lea eax, [0x49c560]
push eax
mov eax, 0x4280ef
push eax
push eax
push eax
call fcn.00407a38
push edi
push 0x56
push eax
push eax
push dword [ebp + 0x30]
call fcn.00408288
mov ebx, 0x49c5bb
push ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x42814d], eax
push dword [0x49c56c]
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x42831b], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
call fcn.00408fe0
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x4280c2
push eax
lea eax, [0x49c560]
push eax
push esi
call fcn.00406b98
call fcn.0040bb55
push eax
push ecx
call fcn.00408244
push eax
lea eax, [0x49c560]
push eax
call fcn.004088f8
push 0x1e
push dword [ebp - 0x74]
push eax
push dword [ebp + 0x24]
call fcn.00406d30
add esp, 0x10
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push dword [0x49c56c]
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [0x42816b], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push ebx
push eax
call fcn.00406df8
add esp, 8
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
call fcn.00408fe0
lea eax, [0x49c560]
push eax
push dword [ebp + 0x78]
push eax
push 0x6e
call fcn.00407760
add esp, 0x10
call fcn.00406c04
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, dword [0x49c549]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [0x428293], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
push eax
call fcn.00408f5c
add esp, 4
push 0x90f18a00
call dword [sym.imp.gdi32.dll_CreateSolidBrush]
mov dword [ebp - 0x60], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov ecx, 0x21
mov dword [0x42819c], ecx
add dword [0x42831e], 0x76
mov ecx, 0x7a80
mov dword [0x428112], ecx
sub dword [0x428410], 0x74
mov eax, dword [0x428410]
sub eax, dword [0x49c56c]
mov dword [0x428410], eax
mov dword [0x42820a], 0x37ff
sub dword [0x42820a], 0x5d
sub dword [0x42820a], 0x75
mov eax, dword [0x428132]
add eax, dword [0x49c56c]
and eax, 0xff
mov dword [ebp - 0x50], eax
lea eax, [0x42836d]
sub dword [eax], edi
mov dword [eax + 9], 0x60
mov dword [eax + 0x15], 0x40
mov dword [ebp - 0xd8], 0x4c
and byte [edi], dl
and byte [ecx], dl
add cl, byte [ecx]
aaa
sub eax, 0x113c44
add al, 0x34
cmp cl, byte [edx]
das
xor al, 0x34
inc ecx
or dl, byte [eax]
cmp bh, byte [esi]
pop ss
sub eax, 0x283c0440
add ebp, dword [edx]
adc dh, byte [ebx]
and esi, dword [esp + eax]
cmp byte [edx], al
xor byte [ebx], bh
and al, 8
sub ch, byte [edi]
xor ch, byte [ebx]
inc eax
and bl, byte [0x41174034]
adc al, byte [0x39062c3e]
xor eax, 0x3b2a150a
cmp esi, dword [esi]
xor byte [edx], bl
cmp al, 0x26
sbb byte [eax + 0x19], al
cmp al, 0x1d
add dword [ebx], ebx
aas
inc ebp
sub dword [ebx], ebp
or dword [eax], edi
add al, byte es:[ebx + 0x39]
or byte [eax], bh
cmp byte [edi], ch
inc eax
push ds
adc dword [edx], esp
inc eax
sbb ecx, dword [edx]
xor byte [edx], bl
cmp eax, 0x2f171d15
cmp eax, 0x2723231f
sub al, 0x1c
and byte [edi], dh
xor byte [ecx + 0x43], al
sbb bl, byte [ebx + eax]
adc al, 0x19
adc esi, dword [edx]
or al, 0x35
sub al, 0x31
sub al, 0x1f
cmp byte [ebx], dh
or al, 0x11
add al, 0x38
sbb al, byte [edi]
sbb byte [edi + edi], bl
cmp ebx, dword [ecx]
push ds
adc al, 0x43
xor byte [edx], dl
add dword [ebx], ecx
inc edx
and al, 0xc
adc al, byte [ebp + esi + 0xe]
pop es
or al, 0xe
xor ecx, dword [edi]
sub al, 0x27
cmp al, 0x35
aas
sbb ecx, dword [ebx]
cmp eax, dword [ebx]
cmp eax, 0x31252a3d
inc ebx
sbb dword [eax], ebp
sub eax, 0x203a2f26
push cs
add eax, 0x271f1031
xor al, 0x42
invalid
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
pop edi
pop ecx
pop eax
leave
ret 0x18
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov dword [0x428865], esp
fild dword [0x428865]
fistp dword fs:[0]
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
push 0x340cf
pop dword [0x428889]
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov dword [0x42851d], ebp
mov dword [0x42852d], esp
mov dword [0x428509], esi
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
add dword [0x2118], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0
cmp dword [0x428889], eax
jne 0x409105
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
xor eax, eax
pop edx
mov dword fs:[eax], edx
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
pop eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
mov eax, 0x29a
mov dword [0x428865], eax
mov eax, 2
add dword [0x428865], eax
sub eax, 2
sub dword [0x428865], eax
leave
ret