Function at 0x42b380
Capabilities:
Capture screenshot

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
sub esp, 0x228
and dword [ebp + 0x5c], 0
cmp dword [0x510680], 1
push ebx
mov ebx, dword [0x4a7adc]
jle 0x42b3a6
xor eax, eax
jmp 0x42c020
cmp ebx, 0x2a0
push esi
push edi
push 4
pop eax
push 6
pop ecx
push 0xe
pop esi
push 5
pop edx
jge 0x42b53b
mov edi, dword [ebp + 0x7c]
cmp edi, 0x70
jge 0x42b53b
cmp ebx, 0x180
jge 0x42b50e
cmp edi, 0x40
jge 0x42b50e
cmp ebx, 0x120
jge 0x42b4e1
cmp edi, 0x30
jge 0x42b4e1
cmp ebx, 0xc0
jge 0x42b4b1
cmp edi, 0x20
jge 0x42b4b1
cmp ebx, 0x90
jge 0x42b481
cmp edi, 0x18
jge 0x42b481
cmp ebx, 0x78
jge 0x42b44e
cmp edi, 0x14
jge 0x42b44e
and dword [ebp + 0x44], 0
push 0x10
mov dword [ebp + 0x64], eax
mov dword [ebp + 0x60], 7
mov dword [ebp + 0x58], ecx
mov dword [ebp + 0x50], eax
mov dword [ebp + 0x4c], 9
mov dword [ebp + 0x54], eax
mov dword [ebp + 0x5c], 0x1f4
jmp 0x42b56a
mov dword [ebp + 0x44], 1
push 0x14
mov dword [ebp + 0x64], edx
mov dword [ebp + 0x60], 9
mov dword [ebp + 0x58], 8
mov dword [ebp + 0x50], edx
mov dword [ebp + 0x4c], 0xb
mov dword [ebp + 0x54], edx
mov dword [ebp + 0x5c], 0x1f5
jmp 0x42b56a
mov dword [ebp + 0x44], 2
push 0x18
mov dword [ebp + 0x64], ecx
mov dword [ebp + 0x60], 0xb
mov dword [ebp + 0x58], 9
mov dword [ebp + 0x50], ecx
mov dword [ebp + 0x4c], 0xd
mov dword [ebp + 0x54], 7
jmp 0x42b56a
push 0x20
pop ebx
push 8
pop eax
mov dword [ebp + 0x44], 3
mov dword [ebp + 0x64], eax
mov dword [ebp + 0x60], esi
mov dword [ebp + 0x58], 0xc
mov dword [ebp + 0x50], eax
mov dword [ebp + 0x4c], 0x11
mov dword [ebp + 0x54], 9
jmp 0x42b56b
mov dword [ebp + 0x44], eax
push 0x30
mov dword [ebp + 0x64], 0xc
mov dword [ebp + 0x60], 0x15
mov dword [ebp + 0x58], 0x11
mov dword [ebp + 0x50], 0xb
mov dword [ebp + 0x4c], 0x1a
mov dword [ebp + 0x54], esi
jmp 0x42b56a
mov dword [ebp + 0x44], edx
push 0x40
mov dword [ebp + 0x64], 0x10
mov dword [ebp + 0x60], 0x1c
mov dword [ebp + 0x58], 0x16
mov dword [ebp + 0x50], esi
mov dword [ebp + 0x4c], 0x20
mov dword [ebp + 0x54], 0x12
jmp 0x42b56a
mov dword [ebp + 0x44], ecx
push 0x70
mov dword [ebp + 0x64], 0x1c
mov dword [ebp + 0x60], 0x31
mov dword [ebp + 0x58], 0x26
mov dword [ebp + 0x50], 0x18
mov dword [ebp + 0x4c], 0x38
mov dword [ebp + 0x54], 0x1f
pop ebx
xor eax, eax
mov dword [ebp + 0x18], eax
cmp word [ebp + 0x5c], ax
je 0x42b58c
movzx ecx, word [ebp + 0x5c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.USER32.dll_LoadBitmapW]
mov dword [ebp + 0x18], eax
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov esi, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edi, eax
push edi
mov dword [ebp - 8], edi
call esi
push 0
mov dword [ebp + 0x7c], eax
call esi
push edi
mov dword [ebp + 0x48], eax
call esi
mov esi, dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push ebx
push ebx
push edi
mov dword [ebp + 0x5c], eax
call esi
push ebx
push ebx
push dword [ebp + 0x48]
mov dword [ebp + 0x30], eax
call esi
xor edi, edi
mov dword [ebp + 0x2c], eax
cmp dword [ebp + 0x30], edi
je 0x42c012
cmp eax, edi
je 0x42c012
push dword [ebp + 0x30]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp + 0x7c]
call esi
push dword [ebp + 0x2c]
mov dword [ebp - 0xc], eax
push dword [ebp + 0x48]
call esi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0xc], edi
je 0x42c012
cmp eax, edi
je 0x42c012
cmp dword [0x510680], edi
je 0x42b621
push 0x21
push dword [ebp + 0x74]
call fcn.0042b208
mov dword [ebp + 0x68], eax
jmp 0x42b638
cmp ebx, 0x20
jne 0x42b635
push 0x32
push dword [ebp + 0x74]
call fcn.0042b27e
mov dword [ebp + 0x68], eax
jmp 0x42b63d
mov dword [ebp + 0x68], edi
cmp ebx, 0x18
jl 0x42b64c
lea eax, [ebx - 1]
mov dword [ebp + 0xc], 1
mov dword [ebp + 0x10], eax
jmp 0x42b655
mov dword [ebp + 0xc], edi
mov dword [ebp + 0x10], ebx
lea eax, [ebx - 1]
cmp ebx, 0x20
mov dword [ebp + 0x14], eax
jg 0x42b706
push dword [ebp + 0x68]
xor edi, edi
push 1
push edi
call dword [sym.imp.GDI32.dll_CreatePen]
push eax
push dword [ebp + 0x7c]
call esi
push 0xff0062
push edi
push edi
push edi
push ebx
push ebx
push edi
push edi
push dword [ebp + 0x48]
mov edi, dword [sym.imp.GDI32.dll_BitBlt]
mov dword [ebp + 0x44], eax
call edi
push 4
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [ebp + 0x48]
call esi
push 7
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [ebp + 0x48]
call esi
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push eax
push dword [ebp + 0x7c]
mov dword [ebp + 0x34], eax
call esi
push dword [ebp + 0x14]
mov dword [ebp + 0x68], eax
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push 1
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_Ellipse]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push 1
push dword [ebp + 0x48]
call dword [sym.imp.GDI32.dll_Ellipse]
push dword [ebp + 0x68]
push dword [ebp + 0x7c]
call esi
push dword [ebp + 0x44]
push dword [ebp + 0x7c]
call esi
push dword [ebp + 0x34]
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x42bafe
mov edi, dword [sym.imp.GDI32.dll_BitBlt]
push 0x42
xor eax, eax
push eax
push eax
push eax
push ebx
push ebx
push eax
push eax
push dword [ebp + 0x48]
call edi
push 2
pop eax
push 4
pop edx
push 3
pop ecx
push 6
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x134], eax
pop eax
mov dword [ebp - 0x160], 0xffffffdd
mov dword [ebp - 0x15c], 0xffffffe1
mov dword [ebp - 0x150], 0xffffffd8
mov dword [ebp - 0x14c], 0xffffffde
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x140], 0xffffffca
mov dword [ebp - 0x13c], 0xffffffcc
mov dword [ebp - 0x138], 1
mov dword [ebp - 0x130], 0xffffffbe
mov dword [ebp - 0x12c], 0xffffffc4
mov dword [ebp - 0x128], edx
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x120], 0xffffff94
mov dword [ebp - 0x11c], 0xffffff9e
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], 0xffffff74
mov dword [ebp - 0x10c], 0xffffff7e
mov dword [ebp - 0x108], 5
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x100], 0xffffff0c
mov dword [ebp - 0xfc], 0xffffff25
mov dword [ebp - 0xf8], 0xe
mov dword [ebp - 0xf4], 0xf
cmp ebx, dword [0x4a7ac4]
je 0x42b940
mov edx, dword [ebp + 0x44]
shl edx, 4
mov eax, dword [ebp + edx - 0x160]
mov dword [ebp - 0x1bc], eax
xor eax, eax
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], eax
mov byte [ebp - 0x1a8], al
mov byte [ebp - 0x1a7], al
mov byte [ebp - 0x1a6], al
mov byte [ebp - 0x1a5], al
mov dword [ebp - 0x1ac], 0x190
mov byte [ebp - 0x1a4], 1
mov byte [ebp - 0x1a3], 2
mov byte [ebp - 0x1a2], 1
mov byte [ebp - 0x1a1], 0x31
push 0xa
pop ecx
mov esi, 0x4750cc
lea edi, [ebp - 0x1a0]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea edi, [ebp - 0x176]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp + edx - 0x15c]
mov dword [ebp - 0x6c], eax
xor edx, edx
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x5c], 0x190
mov byte [ebp - 0x58], dl
mov byte [ebp - 0x57], dl
mov byte [ebp - 0x56], dl
mov byte [ebp - 0x55], dl
mov byte [ebp - 0x54], 1
mov byte [ebp - 0x53], 2
mov byte [ebp - 0x52], 1
mov byte [ebp - 0x51], 0x31
push 0xa
pop ecx
mov esi, 0x4750cc
lea edi, [ebp - 0x50]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
lea edi, [ebp - 0x26]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [0x5067b4]
cmp eax, edx
je 0x42b915
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
push eax
call esi
push dword [0x5067b8]
call esi
mov esi, dword [sym.imp.GDI32.dll_CreateFontIndirectW]
lea eax, [ebp - 0x1bc]
push eax
call esi
mov dword [0x5067b4], eax
lea eax, [ebp - 0x6c]
push eax
call esi
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
mov edi, dword [sym.imp.GDI32.dll_BitBlt]
mov dword [0x5067b8], eax
push 2
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_SetBkMode]
mov eax, dword [0x510680]
push dword [eax*4 + 0x510210]
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_SetBkColor]
push dword [ebp + 0x68]
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_SetTextColor]
push dword [0x5067b4]
push dword [ebp + 0x7c]
call esi
mov eax, dword [0x4750c4]
mov dword [ebp], eax
mov eax, dword [0x4750c8]
mov dword [ebp + 4], eax
mov eax, dword [ebp + 0x44]
push 0
shl eax, 4
push 0
mov dword [ebp + 0x34], eax
lea eax, [ebp + eax - 0xf0]
push eax
mov dword [ebp + 0x68], eax
push 0xffffffffffffffff
lea eax, [ebp]
push eax
push dword [ebp + 0x7c]
mov dword [ebp - 0xf0], 0xfffffff5
mov dword [ebp - 0xec], 0xfffffff2
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], 0xfffffff3
mov dword [ebp - 0xdc], 0xfffffff0
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], 0xffffffee
mov dword [ebp - 0xcc], 0xffffffe8
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xc0], 0xffffffea
mov dword [ebp - 0xbc], 0xffffffe6
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xb0], 0xffffffda
mov dword [ebp - 0xac], 0xffffffd5
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa0], 0xffffffd1
mov dword [ebp - 0x9c], 0xffffffc7
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x90], 0xffffffae
mov dword [ebp - 0x8c], 0xffffff9c
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x84], ebx
call dword [sym.imp.USER32.dll_DrawTextExW]
push dword [ebp + 0x74]
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_SetTextColor]
push 1
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_SetBkMode]
push dword [0x5067b8]
push dword [ebp + 0x7c]
call esi
mov eax, dword [ebp + 0x34]
mov ecx, dword [ebp + eax - 0x158]
mov edx, dword [ebp + 0x68]
add ecx, dword [edx]
push 0
mov dword [ebp + 0x1c], ecx
mov ecx, dword [ebp + eax - 0xec]
add ecx, dword [ebp + eax - 0x154]
push 0
mov dword [ebp + 0x20], ecx
mov ecx, dword [ebp + eax - 0xe8]
mov eax, dword [ebp + eax - 0xe4]
mov dword [ebp + 0x24], ecx
mov dword [ebp + 0x28], eax
lea eax, [ebp + 0x1c]
push eax
push 0xffffffffffffffff
lea eax, [ebp]
push eax
push dword [ebp + 0x7c]
call dword [sym.imp.USER32.dll_DrawTextExW]
cmp ebx, 0x18
jl 0x42bdaf
and dword [ebp + 0x58], 0
push 0xfffffffffffffff8
pop esi
cmp ebx, 0x10
je 0x42bb50
cmp ebx, 0x14
je 0x42bb4c
cmp ebx, 0x18
je 0x42bb48
cmp ebx, 0x20
je 0x42bb44
cmp ebx, 0x30
je 0x42bb39
cmp ebx, 0x40
je 0x42bb35
cmp ebx, 0x70
jne 0x42bb53
push 0xffffffffffffffc0
jmp 0x42bb52
push 0xffffffffffffffdb
jmp 0x42bb52
push 0xffffffffffffffe4
mov dword [ebp + 0x58], 1
jmp 0x42bb52
push 0xffffffffffffffed
jmp 0x42bb52
push 0xfffffffffffffff3
jmp 0x42bb52
push 0xfffffffffffffff5
jmp 0x42bb3b
push 0xfffffffffffffff7
pop esi
mov ecx, dword [ebp + 0x78]
mov eax, 0xc8
cmp ecx, eax
mov edi, 0x190
jl 0x42bbc3
sub ecx, eax
mov dword [ebp - 4], 0x4750c0
mov dword [ebp], 0x4750bc
mov dword [ebp + 4], 0x4750b4
push dword [ebp + ecx*4 - 4]
lea eax, [ebp + 0x1c]
push 0x4591e8
push eax
mov dword [ebp + 0x78], ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp dword [ebp + 0x78], 0
mov dword [ebp + 0x68], eax
jne 0x42bbac
mov eax, esi
cdq
and edx, 3
add eax, edx
sar eax, 2
add esi, eax
jmp 0x42bbb2
cmp dword [ebp + 0x78], 1
jne 0x42bbb9
mov edi, 0x2bc
jmp 0x42bc00
cmp dword [ebp + 0x78], 2
jne 0x42bc00
push 0xfffffffffffffffa
jmp 0x42bbe3
cmp ecx, 0x64
lea eax, [ebp + 0x1c]
jl 0x42bbed
add ecx, 0xffffff9c
push ecx
push 0x4750ac
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [ebp + 0x68], eax
push 0xfffffffffffffff6
mov eax, esi
cdq
pop ecx
idiv ecx
add esi, eax
jmp 0x42bc00
push ecx
push 0x458ab4
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [ebp + 0x68], eax
cmp esi, dword [0x50d5cc]
jne 0x42bc14
cmp edi, dword [0x50d5c8]
je 0x42bcd7
mov dword [0x50d5c8], edi
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x6c], esi
xor edx, edx
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x60], edx
mov byte [ebp - 0x58], dl
mov byte [ebp - 0x57], dl
mov byte [ebp - 0x56], dl
mov byte [ebp - 0x55], dl
mov byte [ebp - 0x54], 1
mov byte [ebp - 0x53], 2
mov byte [ebp - 0x52], 1
mov byte [ebp - 0x51], 0x31
mov dword [0x50d5cc], esi
push 0xa
pop ecx
mov esi, 0x4750cc
lea edi, [ebp - 0x50]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
lea edi, [ebp - 0x26]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push edx
stosw word es:[edi], ax
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [0x5067b0], 0
je 0x42bc91
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
mov ecx, dword [0x5067b0]
cmp ecx, eax
je 0x42bc91
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x5067b0], eax
test eax, eax
jne 0x42bcd7
push str.CreateNumberIcon
push 0xfb6
push str..Tools.cpp
push str.INT3_in__S_line__u__function__S
push 1
call fcn.00451479
add esp, 0x14
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [0x5067b0], eax
push dword [0x5067b0]
mov edi, dword [ebp + 0x7c]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push edi
call esi
push 1
push edi
call dword [sym.imp.GDI32.dll_SetBkMode]
push dword [ebp + 0x74]
push edi
call dword [sym.imp.GDI32.dll_SetBkColor]
mov eax, dword [0x510680]
neg eax
sbb eax, eax
and eax, dword [0x4a7afc]
push eax
push edi
call dword [sym.imp.GDI32.dll_SetTextColor]
lea eax, [ebp]
push eax
push dword [ebp + 0x68]
lea eax, [ebp + 0x1c]
push eax
push edi
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
mov ecx, dword [ebp + 0x10]
mov edi, dword [ebp + 0x14]
mov eax, ecx
sub eax, dword [ebp]
mov dword [ebp + 0x40], ecx
dec eax
cdq
sub eax, edx
sar eax, 1
inc eax
mov dword [ebp + 0x38], eax
mov eax, edi
sub eax, dword [ebp + 4]
mov dword [ebp + 0x44], edi
sub eax, dword [ebp + 0xc]
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp + 0x58]
add eax, dword [ebp + 0xc]
mov dword [ebp + 0x3c], eax
mov eax, ecx
sub eax, dword [ebp + 0x38]
mov ecx, eax
and ecx, 1
cmp cl, 1
je 0x42bd6a
cmp eax, 0x14
jl 0x42bd7f
lea eax, [ebp + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp word [ebp + eax*2 + 0x1a], 0x31
jne 0x42bd7f
inc dword [ebp + 0x38]
cmp ebx, 0x18
je 0x42bd89
cmp ebx, 0x30
jne 0x42bd93
cmp word [ebp + 0x1e], 0x37
jne 0x42bd93
dec dword [ebp + 0x38]
push 0
push 0
lea eax, [ebp + 0x38]
push eax
push 0xffffffffffffffff
lea eax, [ebp + 0x1c]
push eax
push dword [ebp + 0x7c]
call dword [sym.imp.USER32.dll_DrawTextExW]
jmp 0x42bf84
push dword [ebp + 0x18]
push dword [ebp + 0x5c]
call esi
cmp dword [0x510680], 0
je 0x42be5d
push dword [ebp - 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push dword [ebp + 0x60]
mov dword [ebp + 0x74], eax
mov eax, dword [ebp + 0x64]
imul eax, eax, 0xb
push eax
push dword [ebp + 0x74]
mov dword [ebp + 0x68], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
push dword [ebp + 0x74]
mov dword [ebp + 0x34], eax
call esi
mov eax, dword [ebp + 0x68]
and dword [ebp + 0x1c], 0
and dword [ebp + 0x20], 0
mov dword [ebp + 0x24], eax
mov eax, dword [ebp + 0x60]
push 4
mov dword [ebp + 0x28], eax
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
lea eax, [ebp + 0x1c]
push eax
push dword [ebp + 0x74]
call dword [sym.imp.USER32.dll_FillRect]
push 0x330008
xor eax, eax
push eax
push eax
push dword [ebp + 0x5c]
push dword [ebp + 0x60]
push dword [ebp + 0x68]
push eax
push eax
push dword [ebp + 0x74]
call edi
push 0xcc0020
xor eax, eax
push eax
push eax
push dword [ebp + 0x74]
push dword [ebp + 0x60]
push dword [ebp + 0x68]
push eax
push eax
push dword [ebp + 0x5c]
call edi
push dword [ebp + 0x34]
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_DeleteDC]
and dword [ebp + 0x68], 0
cmp dword [ebp + 0x78], 0xc8
jl 0x42be92
push str.CreateNumberIcon
push 0xff5
push str..Tools.cpp
push str.INT3_in__S_line__u__function__S
push 1
call fcn.00451479
add esp, 0x14
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x42bea3
cmp dword [ebp + 0x78], 0x64
jl 0x42bea3
sub dword [ebp + 0x78], 0x64
mov dword [ebp + 0x68], 1
push dword [ebp + 0x78]
lea eax, [ebp + 0x40]
push 0x4706d8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp + 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
movsx ecx, byte [ebp + 0x40]
sub ecx, 0x30
mov dword [ebp + 0x74], ecx
mov ecx, dword [0x510680]
neg ecx
sbb ecx, ecx
and ecx, 0x65ffc0
add ecx, 0x8800c6
cmp dword [ebp + 0x68], 0
mov dword [ebp + 0x78], ecx
je 0x42bf0e
mov eax, dword [ebp + 0x64]
push ecx
imul eax, eax, 0xa
push 0
push eax
push dword [ebp + 0x5c]
push dword [ebp + 0x60]
push dword [ebp + 0x64]
push dword [ebp + 0x54]
push dword [ebp + 0x50]
push dword [ebp + 0x7c]
call edi
mov eax, dword [ebp + 0x74]
jmp 0x42bf66
cmp eax, 1
jne 0x42bf2f
mov eax, dword [ebp + 0x74]
imul eax, dword [ebp + 0x64]
push ecx
push 0
push eax
push dword [ebp + 0x5c]
push dword [ebp + 0x60]
push dword [ebp + 0x64]
push dword [ebp + 0x54]
push dword [ebp + 0x58]
jmp 0x42bf7f
cmp ebx, 0x14
jne 0x42bf40
cmp byte [ebp + 0x41], 0x31
jne 0x42bf40
inc dword [ebp + 0x50]
inc dword [ebp + 0x4c]
mov eax, dword [ebp + 0x74]
imul eax, dword [ebp + 0x64]
push ecx
push 0
push eax
push dword [ebp + 0x5c]
push dword [ebp + 0x60]
push dword [ebp + 0x64]
push dword [ebp + 0x54]
push dword [ebp + 0x50]
push dword [ebp + 0x7c]
call edi
movsx eax, byte [ebp + 0x41]
sub eax, 0x30
push dword [ebp + 0x78]
imul eax, dword [ebp + 0x64]
push 0
push eax
push dword [ebp + 0x5c]
push dword [ebp + 0x60]
push dword [ebp + 0x64]
push dword [ebp + 0x54]
push dword [ebp + 0x4c]
push dword [ebp + 0x7c]
call edi
xor edi, edi
cmp dword [0x510680], edi
je 0x42bfad
cmp dword [0x4a7b4c], edi
je 0x42bfad
push edi
lea eax, [ebx - 1]
push eax
push ebx
push dword [ebp + 0x2c]
push dword [ebp + 0x48]
push dword [ebp + 0x30]
push dword [ebp + 0x7c]
call fcn.0042b2d2
push dword [ebp - 0xc]
push dword [ebp + 0x7c]
call esi
push dword [ebp - 0x10]
push dword [ebp + 0x48]
call esi
mov ebx, dword [ebp + 0x30]
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x78], edi
mov edi, dword [ebp + 0x2c]
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x80], 1
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], ebx
call dword [sym.imp.USER32.dll_CreateIconIndirect]
push edi
mov edi, dword [sym.imp.GDI32.dll_DeleteObject]
mov esi, eax
call edi
push ebx
call edi
push dword [ebp + 0x18]
call edi
push dword [ebp + 0x7c]
mov edi, dword [sym.imp.GDI32.dll_DeleteDC]
call edi
push dword [ebp + 0x5c]
call edi
push dword [ebp - 8]
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, esi
jmp 0x42c01e
push 0x7f03
push edi
call dword [sym.imp.USER32.dll_LoadIconW]
pop edi
pop esi
pop ebx
add ebp, 0x6c
leave
ret 0xc