Function at 0x43ba22
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa8
push edi
push 0x429148
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
test eax, eax
je 0x43ba4c
push 0
call dword [sym.imp.MSVCR100.dll_exit]
jmp 0x43ba5b
push 0x429148
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [ebp - 0x40], 0x30
mov dword [ebp - 0x3c], 0x6a4b
mov dword [ebp - 0x38], 0x43b5de
and dword [ebp - 0x34], 0
and dword [ebp - 0x30], 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x2c], eax
and dword [ebp - 0x28], 0
and dword [ebp - 0x24], 0
and dword [ebp - 0x20], 0
and dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0x429148
and dword [ebp - 0x14], 0
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.USER32.dll_RegisterClassExA]
push 0
call dword [sym.imp.MSVCR100.dll__time64]
pop ecx
mov dword [0x45c5e0], eax
mov dword [0x45c5e4], edx
push 0
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.0042adf1
push 0
lea eax, [ebp - 0x10]
push eax
push 0x45c560
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
call fcn.0043a2fd
xor eax, eax
inc eax
je 0x43bf8c
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x43bb15
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x43bae9
mov eax, dword [0x45c630]
or eax, dword [0x45c634]
jne 0x43bb2f
mov eax, dword [0x45c628]
or eax, dword [0x45c62c]
je 0x43bb4d
call dword [0x404208]
xorpd xmm0, xmm0
movlpd qword [0x45c628], xmm0
xorpd xmm0, xmm0
movlpd qword [0x45c630], xmm0
push 0
call dword [sym.imp.MSVCR100.dll__time64]
pop ecx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], edx
mov eax, dword [0x45c5e0]
cmp eax, dword [ebp - 0xa8]
jne 0x43bb80
mov eax, dword [0x45c5e4]
cmp eax, dword [ebp - 0xa4]
je 0x43bd7b
call dword [sym.imp.USER32.dll_GetForegroundWindow]
cmp eax, dword [0x45c598]
je 0x43bc4a
push 0x60
push 1
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push 0
push 0
push 0xffffffffffffffff
push dword [0x45c598]
call dword [sym.imp.USER32.dll_SetWindowPos]
movsd xmm0, qword [0x45c5a8]
divsd xmm0, qword [0x42aab0]
cvttsd2si eax, xmm0
push eax
movsd xmm0, qword [0x45c5a0]
divsd xmm0, qword [0x42aab0]
cvttsd2si eax, xmm0
push eax
call dword [sym.imp.USER32.dll_SetCursorPos]
and dword [ebp - 0x94], 0
and dword [ebp - 0x90], 0
and dword [ebp - 0x8c], 0
mov dword [ebp - 0x88], 2
and dword [ebp - 0x84], 0
and dword [ebp - 0x80], 0
xor eax, eax
lea edi, [ebp - 0x7c]
stosd dword es:[edi], eax
and dword [ebp - 0x78], 0
and dword [ebp - 0x74], 0
and dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 4
and dword [ebp - 0x68], 0
and dword [ebp - 0x64], 0
xor eax, eax
lea edi, [ebp - 0x60]
stosd dword es:[edi], eax
push 0x1c
lea eax, [ebp - 0x94]
push eax
push 2
call dword [sym.imp.USER32.dll_SendInput]
push 0
call dword [sym.imp.MSVCR100.dll__time64]
pop ecx
mov dword [0x45c5e0], eax
mov dword [0x45c5e4], edx
call dword [0x404210]
mov eax, dword [0x45c658]
or eax, dword [0x45c65c]
jne 0x43bd7b
mov eax, dword [0x45c638]
or eax, dword [0x45c63c]
jne 0x43bcfb
push 0
push ecx
push ecx
movsd xmm0, qword [0x42aac0]
movsd qword [esp], xmm0
push ecx
push ecx
movsd xmm0, qword [0x42ac50]
movsd qword [esp], xmm0
push ecx
push ecx
movsd xmm0, qword [0x42ad30]
movsd qword [esp], xmm0
push ecx
push ecx
movsd xmm0, qword [0x42ab08]
movsd qword [esp], xmm0
push ecx
push ecx
movsd xmm0, qword [0x42ab20]
movsd qword [esp], xmm0
push 0
push 0
push 0
push 0xff00
push 0
push 1
push 0
push 0
push 0
push 0x11
push 0x45c5e0
push 0
push 2
push 0
call fcn.0042df92
jmp 0x43bd7b
cmp dword [0x45c63c], 0
jl 0x43bd7b
jg 0x43bd0f
cmp dword [0x45c638], 0
jbe 0x43bd7b
push 0
push ecx
push ecx
movsd xmm0, qword [0x42aae8]
movsd qword [esp], xmm0
fild qword [0x45c608]
push ecx
push ecx
fstp qword [esp]
push ecx
push ecx
movsd xmm0, qword [0x42aae8]
movsd qword [esp], xmm0
fild qword [0x45c600]
push ecx
push ecx
fstp qword [esp]
push ecx
push ecx
movsd xmm0, qword [0x42aa68]
movsd qword [esp], xmm0
push 0
push 0
push 0
push 0xff00
push 0
push 1
push 0
push 0
push 0
push 0x11
push 0x45c5e0
push 0
push 2
push 0
call fcn.0042df92
call dword [0x404214]
mov eax, dword [0x45c650]
or eax, dword [0x45c654]
je 0x43bdc5
cmp dword [0x45c650], 2
jne 0x43bdb4
cmp dword [0x45c654], 0
jne 0x43bdb4
push dword [0x45c560]
call dword [sym.imp.gdiplus.dll_GdiplusShutdown]
call dword [0x404218]
jmp 0x43bdb9
call fcn.0043a2fd
xorpd xmm0, xmm0
movlpd qword [0x45c650], xmm0
mov eax, dword [0x45c648]
or eax, dword [0x45c64c]
je 0x43bf7f
xorpd xmm0, xmm0
movlpd qword [0x45c648], xmm0
cvttsd2si eax, qword [0x45c5c0]
push eax
cvttsd2si eax, qword [0x45c5b8]
push eax
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateRectRgn]
mov dword [ebp - 0x9c], eax
push 0
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [ebp - 0x98], eax
push 0
push 0
push 5
call dword [sym.imp.GDI32.dll_CreatePen]
mov dword [ebp - 0xa0], eax
movsd xmm0, qword [0x45c5a8]
comisd xmm0, xmmword [0x45c5c0]
jbe 0x43bea9
push dword [ebp - 0x98]
push dword [0x45c590]
call dword [sym.imp.GDI32.dll_SelectObject]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [ebp - 0xa0]
push dword [0x45c590]
call dword [sym.imp.GDI32.dll_SelectObject]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
movsd xmm0, qword [0x45c5a8]
addsd xmm0, qword [0x42aae0]
cvttsd2si eax, xmm0
push eax
movsd xmm0, qword [0x45c5a0]
addsd xmm0, qword [0x42aae0]
cvttsd2si eax, xmm0
push eax
cvttsd2si eax, qword [0x45c5c0]
push eax
push 0
push dword [0x45c590]
call dword [sym.imp.GDI32.dll_Rectangle]
push dword [ebp - 0x9c]
push dword [0x45c594]
call dword [sym.imp.GDI32.dll_SelectClipRgn]
push dword [ebp - 0x98]
push dword [0x45c594]
call dword [sym.imp.GDI32.dll_SelectObject]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [ebp - 0xa0]
push dword [0x45c594]
call dword [sym.imp.GDI32.dll_SelectObject]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cvttsd2si eax, qword [0x45c5c0]
push eax
cvttsd2si eax, qword [0x45c5b8]
push eax
push 0
push 0
push dword [0x45c594]
call dword [sym.imp.GDI32.dll_Rectangle]
push dword [ebp - 0x9c]
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [ebp - 0x98]
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [ebp - 0xa0]
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [0x45c6b8], 0
jne 0x43bf48
xorpd xmm0, xmm0
movlpd qword [0x45c698], xmm0
call dword [0x40420c]
push 0xcc0020
push 0
push 0
push dword [0x45c594]
cvttsd2si eax, qword [0x45c5c0]
push eax
cvttsd2si eax, qword [0x45c5b8]
push eax
push 0
push 0
push dword [0x45c590]
call dword [sym.imp.GDI32.dll_BitBlt]
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x43bae0
pop edi
leave
ret