Function at 0x42ab01
Capabilities:
Capture screenshot

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
sub esp, 0x228
and dword [ebp + 0x5c], 0
cmp dword [0x50e660], 1
push ebx
mov ebx, dword [0x4a5ad4]
jle 0x42ab27
xor eax, eax
jmp 0x42b7a1
cmp ebx, 0x2a0
push esi
push edi
push 4
pop eax
push 6
pop ecx
push 0xe
pop esi
push 5
pop edx
jge 0x42acbc
mov edi, dword [ebp + 0x7c]
cmp edi, 0x70
jge 0x42acbc
cmp ebx, 0x180
jge 0x42ac8f
cmp edi, 0x40
jge 0x42ac8f
cmp ebx, 0x120
jge 0x42ac62
cmp edi, 0x30
jge 0x42ac62
cmp ebx, 0xc0
jge 0x42ac32
cmp edi, 0x20
jge 0x42ac32
cmp ebx, 0x90
jge 0x42ac02
cmp edi, 0x18
jge 0x42ac02
cmp ebx, 0x78
jge 0x42abcf
cmp edi, 0x14
jge 0x42abcf
and dword [ebp + 0x44], 0
push 0x10
mov dword [ebp + 0x64], eax
mov dword [ebp + 0x60], 7
mov dword [ebp + 0x58], ecx
mov dword [ebp + 0x50], eax
mov dword [ebp + 0x4c], 9
mov dword [ebp + 0x54], eax
mov dword [ebp + 0x5c], 0x1f4
jmp 0x42aceb
mov dword [ebp + 0x44], 1
push 0x14
mov dword [ebp + 0x64], edx
mov dword [ebp + 0x60], 9
mov dword [ebp + 0x58], 8
mov dword [ebp + 0x50], edx
mov dword [ebp + 0x4c], 0xb
mov dword [ebp + 0x54], edx
mov dword [ebp + 0x5c], 0x1f5
jmp 0x42aceb
mov dword [ebp + 0x44], 2
push 0x18
mov dword [ebp + 0x64], ecx
mov dword [ebp + 0x60], 0xb
mov dword [ebp + 0x58], 9
mov dword [ebp + 0x50], ecx
mov dword [ebp + 0x4c], 0xd
mov dword [ebp + 0x54], 7
jmp 0x42aceb
push 0x20
pop ebx
push 8
pop eax
mov dword [ebp + 0x44], 3
mov dword [ebp + 0x64], eax
mov dword [ebp + 0x60], esi
mov dword [ebp + 0x58], 0xc
mov dword [ebp + 0x50], eax
mov dword [ebp + 0x4c], 0x11
mov dword [ebp + 0x54], 9
jmp 0x42acec
mov dword [ebp + 0x44], eax
push 0x30
mov dword [ebp + 0x64], 0xc
mov dword [ebp + 0x60], 0x15
mov dword [ebp + 0x58], 0x11
mov dword [ebp + 0x50], 0xb
mov dword [ebp + 0x4c], 0x1a
mov dword [ebp + 0x54], esi
jmp 0x42aceb
mov dword [ebp + 0x44], edx
push 0x40
mov dword [ebp + 0x64], 0x10
mov dword [ebp + 0x60], 0x1c
mov dword [ebp + 0x58], 0x16
mov dword [ebp + 0x50], esi
mov dword [ebp + 0x4c], 0x20
mov dword [ebp + 0x54], 0x12
jmp 0x42aceb
mov dword [ebp + 0x44], ecx
push 0x70
mov dword [ebp + 0x64], 0x1c
mov dword [ebp + 0x60], 0x31
mov dword [ebp + 0x58], 0x26
mov dword [ebp + 0x50], 0x18
mov dword [ebp + 0x4c], 0x38
mov dword [ebp + 0x54], 0x1f
pop ebx
xor eax, eax
mov dword [ebp + 0x18], eax
cmp word [ebp + 0x5c], ax
je 0x42ad0d
movzx ecx, word [ebp + 0x5c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.USER32.dll_LoadBitmapW]
mov dword [ebp + 0x18], eax
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov esi, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edi, eax
push edi
mov dword [ebp - 8], edi
call esi
push 0
mov dword [ebp + 0x7c], eax
call esi
push edi
mov dword [ebp + 0x48], eax
call esi
mov esi, dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push ebx
push ebx
push edi
mov dword [ebp + 0x5c], eax
call esi
push ebx
push ebx
push dword [ebp + 0x48]
mov dword [ebp + 0x30], eax
call esi
xor edi, edi
mov dword [ebp + 0x2c], eax
cmp dword [ebp + 0x30], edi
je 0x42b793
cmp eax, edi
je 0x42b793
push dword [ebp + 0x30]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp + 0x7c]
call esi
push dword [ebp + 0x2c]
mov dword [ebp - 0xc], eax
push dword [ebp + 0x48]
call esi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0xc], edi
je 0x42b793
cmp eax, edi
je 0x42b793
cmp dword [0x50e660], edi
je 0x42ada2
push 0x21
push dword [ebp + 0x74]
call fcn.0042a989
mov dword [ebp + 0x68], eax
jmp 0x42adb9
cmp ebx, 0x20
jne 0x42adb6
push 0x32
push dword [ebp + 0x74]
call fcn.0042a9ff
mov dword [ebp + 0x68], eax
jmp 0x42adbe
mov dword [ebp + 0x68], edi
cmp ebx, 0x18
jl 0x42adcd
lea eax, [ebx - 1]
mov dword [ebp + 0xc], 1
mov dword [ebp + 0x10], eax
jmp 0x42add6
mov dword [ebp + 0xc], edi
mov dword [ebp + 0x10], ebx
lea eax, [ebx - 1]
cmp ebx, 0x20
mov dword [ebp + 0x14], eax
jg 0x42ae87
push dword [ebp + 0x68]
xor edi, edi
push 1
push edi
call dword [sym.imp.GDI32.dll_CreatePen]
push eax
push dword [ebp + 0x7c]
call esi
push 0xff0062
push edi
push edi
push edi
push ebx
push ebx
push edi
push edi
push dword [ebp + 0x48]
mov edi, dword [sym.imp.GDI32.dll_BitBlt]
mov dword [ebp + 0x44], eax
call edi
push 4
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [ebp + 0x48]
call esi
push 7
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [ebp + 0x48]
call esi
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push eax
push dword [ebp + 0x7c]
mov dword [ebp + 0x34], eax
call esi
push dword [ebp + 0x14]
mov dword [ebp + 0x68], eax
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push 1
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_Ellipse]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push 1
push dword [ebp + 0x48]
call dword [sym.imp.GDI32.dll_Ellipse]
push dword [ebp + 0x68]
push dword [ebp + 0x7c]
call esi
push dword [ebp + 0x44]
push dword [ebp + 0x7c]
call esi
push dword [ebp + 0x34]
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x42b27f
mov edi, dword [sym.imp.GDI32.dll_BitBlt]
push 0x42
xor eax, eax
push eax
push eax
push eax
push ebx
push ebx
push eax
push eax
push dword [ebp + 0x48]
call edi
push 2
pop eax
push 4
pop edx
push 3
pop ecx
push 6
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x134], eax
pop eax
mov dword [ebp - 0x160], 0xffffffdd
mov dword [ebp - 0x15c], 0xffffffe1
mov dword [ebp - 0x150], 0xffffffd8
mov dword [ebp - 0x14c], 0xffffffde
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x140], 0xffffffca
mov dword [ebp - 0x13c], 0xffffffcc
mov dword [ebp - 0x138], 1
mov dword [ebp - 0x130], 0xffffffbe
mov dword [ebp - 0x12c], 0xffffffc4
mov dword [ebp - 0x128], edx
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x120], 0xffffff94
mov dword [ebp - 0x11c], 0xffffff9e
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], 0xffffff74
mov dword [ebp - 0x10c], 0xffffff7e
mov dword [ebp - 0x108], 5
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x100], 0xffffff0c
mov dword [ebp - 0xfc], 0xffffff25
mov dword [ebp - 0xf8], 0xe
mov dword [ebp - 0xf4], 0xf
cmp ebx, dword [0x4a5abc]
je 0x42b0c1
mov edx, dword [ebp + 0x44]
shl edx, 4
mov eax, dword [ebp + edx - 0x160]
mov dword [ebp - 0x1bc], eax
xor eax, eax
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], eax
mov byte [ebp - 0x1a8], al
mov byte [ebp - 0x1a7], al
mov byte [ebp - 0x1a6], al
mov byte [ebp - 0x1a5], al
mov dword [ebp - 0x1ac], 0x190
mov byte [ebp - 0x1a4], 1
mov byte [ebp - 0x1a3], 2
mov byte [ebp - 0x1a2], 1
mov byte [ebp - 0x1a1], 0x31
push 0xa
pop ecx
mov esi, 0x473aac
lea edi, [ebp - 0x1a0]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea edi, [ebp - 0x176]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp + edx - 0x15c]
mov dword [ebp - 0x6c], eax
xor edx, edx
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x5c], 0x190
mov byte [ebp - 0x58], dl
mov byte [ebp - 0x57], dl
mov byte [ebp - 0x56], dl
mov byte [ebp - 0x55], dl
mov byte [ebp - 0x54], 1
mov byte [ebp - 0x53], 2
mov byte [ebp - 0x52], 1
mov byte [ebp - 0x51], 0x31
push 0xa
pop ecx
mov esi, 0x473aac
lea edi, [ebp - 0x50]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
lea edi, [ebp - 0x26]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [0x504794]
cmp eax, edx
je 0x42b096
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
push eax
call esi
push dword [0x504798]
call esi
mov esi, dword [sym.imp.GDI32.dll_CreateFontIndirectW]
lea eax, [ebp - 0x1bc]
push eax
call esi
mov dword [0x504794], eax
lea eax, [ebp - 0x6c]
push eax
call esi
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
mov edi, dword [sym.imp.GDI32.dll_BitBlt]
mov dword [0x504798], eax
push 2
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_SetBkMode]
mov eax, dword [0x50e660]
push dword [eax*4 + 0x50e1f0]
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_SetBkColor]
push dword [ebp + 0x68]
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_SetTextColor]
push dword [0x504794]
push dword [ebp + 0x7c]
call esi
mov eax, dword [0x473aa4]
mov dword [ebp], eax
mov eax, dword [0x473aa8]
mov dword [ebp + 4], eax
mov eax, dword [ebp + 0x44]
push 0
shl eax, 4
push 0
mov dword [ebp + 0x34], eax
lea eax, [ebp + eax - 0xf0]
push eax
mov dword [ebp + 0x68], eax
push 0xffffffffffffffff
lea eax, [ebp]
push eax
push dword [ebp + 0x7c]
mov dword [ebp - 0xf0], 0xfffffff5
mov dword [ebp - 0xec], 0xfffffff2
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], 0xfffffff3
mov dword [ebp - 0xdc], 0xfffffff0
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], 0xffffffee
mov dword [ebp - 0xcc], 0xffffffe8
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xc0], 0xffffffea
mov dword [ebp - 0xbc], 0xffffffe6
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xb0], 0xffffffda
mov dword [ebp - 0xac], 0xffffffd5
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa0], 0xffffffd1
mov dword [ebp - 0x9c], 0xffffffc7
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x90], 0xffffffae
mov dword [ebp - 0x8c], 0xffffff9c
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x84], ebx
call dword [sym.imp.USER32.dll_DrawTextExW]
push dword [ebp + 0x74]
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_SetTextColor]
push 1
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_SetBkMode]
push dword [0x504798]
push dword [ebp + 0x7c]
call esi
mov eax, dword [ebp + 0x34]
mov ecx, dword [ebp + eax - 0x158]
mov edx, dword [ebp + 0x68]
add ecx, dword [edx]
push 0
mov dword [ebp + 0x1c], ecx
mov ecx, dword [ebp + eax - 0xec]
add ecx, dword [ebp + eax - 0x154]
push 0
mov dword [ebp + 0x20], ecx
mov ecx, dword [ebp + eax - 0xe8]
mov eax, dword [ebp + eax - 0xe4]
mov dword [ebp + 0x24], ecx
mov dword [ebp + 0x28], eax
lea eax, [ebp + 0x1c]
push eax
push 0xffffffffffffffff
lea eax, [ebp]
push eax
push dword [ebp + 0x7c]
call dword [sym.imp.USER32.dll_DrawTextExW]
cmp ebx, 0x18
jl 0x42b530
and dword [ebp + 0x58], 0
push 0xfffffffffffffff8
pop esi
cmp ebx, 0x10
je 0x42b2d1
cmp ebx, 0x14
je 0x42b2cd
cmp ebx, 0x18
je 0x42b2c9
cmp ebx, 0x20
je 0x42b2c5
cmp ebx, 0x30
je 0x42b2ba
cmp ebx, 0x40
je 0x42b2b6
cmp ebx, 0x70
jne 0x42b2d4
push 0xffffffffffffffc0
jmp 0x42b2d3
push 0xffffffffffffffdb
jmp 0x42b2d3
push 0xffffffffffffffe4
mov dword [ebp + 0x58], 1
jmp 0x42b2d3
push 0xffffffffffffffed
jmp 0x42b2d3
push 0xfffffffffffffff3
jmp 0x42b2d3
push 0xfffffffffffffff5
jmp 0x42b2bc
push 0xfffffffffffffff7
pop esi
mov ecx, dword [ebp + 0x78]
mov eax, 0xc8
cmp ecx, eax
mov edi, 0x190
jl 0x42b344
sub ecx, eax
mov dword [ebp - 4], 0x473aa0
mov dword [ebp], 0x473a9c
mov dword [ebp + 4], 0x473a94
push dword [ebp + ecx*4 - 4]
lea eax, [ebp + 0x1c]
push 0x4580e8
push eax
mov dword [ebp + 0x78], ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp dword [ebp + 0x78], 0
mov dword [ebp + 0x68], eax
jne 0x42b32d
mov eax, esi
cdq
and edx, 3
add eax, edx
sar eax, 2
add esi, eax
jmp 0x42b333
cmp dword [ebp + 0x78], 1
jne 0x42b33a
mov edi, 0x2bc
jmp 0x42b381
cmp dword [ebp + 0x78], 2
jne 0x42b381
push 0xfffffffffffffffa
jmp 0x42b364
cmp ecx, 0x64
lea eax, [ebp + 0x1c]
jl 0x42b36e
add ecx, 0xffffff9c
push ecx
push 0x473a8c
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [ebp + 0x68], eax
push 0xfffffffffffffff6
mov eax, esi
cdq
pop ecx
idiv ecx
add esi, eax
jmp 0x42b381
push ecx
push 0x4579d4
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [ebp + 0x68], eax
cmp esi, dword [0x50b5ac]
jne 0x42b395
cmp edi, dword [0x50b5a8]
je 0x42b458
mov dword [0x50b5a8], edi
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x6c], esi
xor edx, edx
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x60], edx
mov byte [ebp - 0x58], dl
mov byte [ebp - 0x57], dl
mov byte [ebp - 0x56], dl
mov byte [ebp - 0x55], dl
mov byte [ebp - 0x54], 1
mov byte [ebp - 0x53], 2
mov byte [ebp - 0x52], 1
mov byte [ebp - 0x51], 0x31
mov dword [0x50b5ac], esi
push 0xa
pop ecx
mov esi, 0x473aac
lea edi, [ebp - 0x50]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
lea edi, [ebp - 0x26]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push edx
stosw word es:[edi], ax
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [0x504790], 0
je 0x42b412
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
mov ecx, dword [0x504790]
cmp ecx, eax
je 0x42b412
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x504790], eax
test eax, eax
jne 0x42b458
push str.CreateNumberIcon
push 0xfb4
push str..Tools.cpp
push str.INT3_in__S_line__u__function__S
push 1
call fcn.0044fe2e
add esp, 0x14
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [0x504790], eax
push dword [0x504790]
mov edi, dword [ebp + 0x7c]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push edi
call esi
push 1
push edi
call dword [sym.imp.GDI32.dll_SetBkMode]
push dword [ebp + 0x74]
push edi
call dword [sym.imp.GDI32.dll_SetBkColor]
mov eax, dword [0x50e660]
neg eax
sbb eax, eax
and eax, dword [0x4a5af4]
push eax
push edi
call dword [sym.imp.GDI32.dll_SetTextColor]
lea eax, [ebp]
push eax
push dword [ebp + 0x68]
lea eax, [ebp + 0x1c]
push eax
push edi
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
mov ecx, dword [ebp + 0x10]
mov edi, dword [ebp + 0x14]
mov eax, ecx
sub eax, dword [ebp]
mov dword [ebp + 0x40], ecx
dec eax
cdq
sub eax, edx
sar eax, 1
inc eax
mov dword [ebp + 0x38], eax
mov eax, edi
sub eax, dword [ebp + 4]
mov dword [ebp + 0x44], edi
sub eax, dword [ebp + 0xc]
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp + 0x58]
add eax, dword [ebp + 0xc]
mov dword [ebp + 0x3c], eax
mov eax, ecx
sub eax, dword [ebp + 0x38]
mov ecx, eax
and ecx, 1
cmp cl, 1
je 0x42b4eb
cmp eax, 0x14
jl 0x42b500
lea eax, [ebp + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp word [ebp + eax*2 + 0x1a], 0x31
jne 0x42b500
inc dword [ebp + 0x38]
cmp ebx, 0x18
je 0x42b50a
cmp ebx, 0x30
jne 0x42b514
cmp word [ebp + 0x1e], 0x37
jne 0x42b514
dec dword [ebp + 0x38]
push 0
push 0
lea eax, [ebp + 0x38]
push eax
push 0xffffffffffffffff
lea eax, [ebp + 0x1c]
push eax
push dword [ebp + 0x7c]
call dword [sym.imp.USER32.dll_DrawTextExW]
jmp 0x42b705
push dword [ebp + 0x18]
push dword [ebp + 0x5c]
call esi
cmp dword [0x50e660], 0
je 0x42b5de
push dword [ebp - 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push dword [ebp + 0x60]
mov dword [ebp + 0x74], eax
mov eax, dword [ebp + 0x64]
imul eax, eax, 0xb
push eax
push dword [ebp + 0x74]
mov dword [ebp + 0x68], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
push dword [ebp + 0x74]
mov dword [ebp + 0x34], eax
call esi
mov eax, dword [ebp + 0x68]
and dword [ebp + 0x1c], 0
and dword [ebp + 0x20], 0
mov dword [ebp + 0x24], eax
mov eax, dword [ebp + 0x60]
push 4
mov dword [ebp + 0x28], eax
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
lea eax, [ebp + 0x1c]
push eax
push dword [ebp + 0x74]
call dword [sym.imp.USER32.dll_FillRect]
push 0x330008
xor eax, eax
push eax
push eax
push dword [ebp + 0x5c]
push dword [ebp + 0x60]
push dword [ebp + 0x68]
push eax
push eax
push dword [ebp + 0x74]
call edi
push 0xcc0020
xor eax, eax
push eax
push eax
push dword [ebp + 0x74]
push dword [ebp + 0x60]
push dword [ebp + 0x68]
push eax
push eax
push dword [ebp + 0x5c]
call edi
push dword [ebp + 0x34]
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_DeleteDC]
and dword [ebp + 0x68], 0
cmp dword [ebp + 0x78], 0xc8
jl 0x42b613
push str.CreateNumberIcon
push 0xff3
push str..Tools.cpp
push str.INT3_in__S_line__u__function__S
push 1
call fcn.0044fe2e
add esp, 0x14
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x42b624
cmp dword [ebp + 0x78], 0x64
jl 0x42b624
sub dword [ebp + 0x78], 0x64
mov dword [ebp + 0x68], 1
push dword [ebp + 0x78]
lea eax, [ebp + 0x40]
push 0x46f0b0
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp + 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
movsx ecx, byte [ebp + 0x40]
sub ecx, 0x30
mov dword [ebp + 0x74], ecx
mov ecx, dword [0x50e660]
neg ecx
sbb ecx, ecx
and ecx, 0x65ffc0
add ecx, 0x8800c6
cmp dword [ebp + 0x68], 0
mov dword [ebp + 0x78], ecx
je 0x42b68f
mov eax, dword [ebp + 0x64]
push ecx
imul eax, eax, 0xa
push 0
push eax
push dword [ebp + 0x5c]
push dword [ebp + 0x60]
push dword [ebp + 0x64]
push dword [ebp + 0x54]
push dword [ebp + 0x50]
push dword [ebp + 0x7c]
call edi
mov eax, dword [ebp + 0x74]
jmp 0x42b6e7
cmp eax, 1
jne 0x42b6b0
mov eax, dword [ebp + 0x74]
imul eax, dword [ebp + 0x64]
push ecx
push 0
push eax
push dword [ebp + 0x5c]
push dword [ebp + 0x60]
push dword [ebp + 0x64]
push dword [ebp + 0x54]
push dword [ebp + 0x58]
jmp 0x42b700
cmp ebx, 0x14
jne 0x42b6c1
cmp byte [ebp + 0x41], 0x31
jne 0x42b6c1
inc dword [ebp + 0x50]
inc dword [ebp + 0x4c]
mov eax, dword [ebp + 0x74]
imul eax, dword [ebp + 0x64]
push ecx
push 0
push eax
push dword [ebp + 0x5c]
push dword [ebp + 0x60]
push dword [ebp + 0x64]
push dword [ebp + 0x54]
push dword [ebp + 0x50]
push dword [ebp + 0x7c]
call edi
movsx eax, byte [ebp + 0x41]
sub eax, 0x30
push dword [ebp + 0x78]
imul eax, dword [ebp + 0x64]
push 0
push eax
push dword [ebp + 0x5c]
push dword [ebp + 0x60]
push dword [ebp + 0x64]
push dword [ebp + 0x54]
push dword [ebp + 0x4c]
push dword [ebp + 0x7c]
call edi
xor edi, edi
cmp dword [0x50e660], edi
je 0x42b72e
cmp dword [0x4a5b44], edi
je 0x42b72e
push edi
lea eax, [ebx - 1]
push eax
push ebx
push dword [ebp + 0x2c]
push dword [ebp + 0x48]
push dword [ebp + 0x30]
push dword [ebp + 0x7c]
call fcn.0042aa53
push dword [ebp - 0xc]
push dword [ebp + 0x7c]
call esi
push dword [ebp - 0x10]
push dword [ebp + 0x48]
call esi
mov ebx, dword [ebp + 0x30]
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x78], edi
mov edi, dword [ebp + 0x2c]
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x80], 1
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], ebx
call dword [sym.imp.USER32.dll_CreateIconIndirect]
push edi
mov edi, dword [sym.imp.GDI32.dll_DeleteObject]
mov esi, eax
call edi
push ebx
call edi
push dword [ebp + 0x18]
call edi
push dword [ebp + 0x7c]
mov edi, dword [sym.imp.GDI32.dll_DeleteDC]
call edi
push dword [ebp + 0x5c]
call edi
push dword [ebp - 8]
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, esi
jmp 0x42b79f
push 0x7f03
push edi
call dword [sym.imp.USER32.dll_LoadIconW]
pop edi
pop esi
pop ebx
add ebp, 0x6c
leave
ret 0xc