Function at 0x429df7
Capabilities:
Capture screenshot

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
mov eax, dword [0x4a2abc]
sub esp, 0x230
push esi
xor edx, edx
push edi
inc edx
xor edi, edi
xor esi, esi
cmp dword [0x50b20c], edx
jle 0x429e1f
xor eax, eax
jmp 0x42aa1f
cmp eax, 0x2a0
push ebx
jge 0x429fbd
mov ecx, dword [ebp + 0x7c]
cmp ecx, 0x70
jge 0x429fbd
cmp eax, 0x180
jge 0x429f88
cmp ecx, 0x40
jge 0x429f88
cmp eax, 0x120
jge 0x429f53
cmp ecx, 0x30
jge 0x429f53
cmp eax, 0xc0
jge 0x429f1f
cmp ecx, 0x20
jge 0x429f1f
cmp eax, 0x90
jge 0x429eeb
cmp ecx, 0x18
jge 0x429eeb
cmp eax, 0x78
jge 0x429eba
cmp ecx, 0x14
jge 0x429eba
push 0x10
pop ebx
push 4
pop eax
mov dword [ebp + 0x4c], edi
mov dword [ebp + 0x5c], eax
mov dword [ebp + 0x68], 7
mov dword [ebp + 0x3c], 6
mov dword [ebp + 0x54], eax
mov dword [ebp + 0x50], 9
mov dword [ebp + 0x60], eax
mov esi, 0x1f4
jmp 0x429ff1
push 0x14
pop ebx
push 5
pop eax
mov dword [ebp + 0x4c], edx
mov dword [ebp + 0x5c], eax
mov dword [ebp + 0x68], 9
mov dword [ebp + 0x3c], 8
mov dword [ebp + 0x54], eax
mov dword [ebp + 0x50], 0xb
mov dword [ebp + 0x60], eax
mov esi, 0x1f5
jmp 0x429ff1
push 0x18
pop ebx
push 6
pop eax
mov dword [ebp + 0x4c], 2
mov dword [ebp + 0x5c], eax
mov dword [ebp + 0x68], 0xb
mov dword [ebp + 0x3c], 9
mov dword [ebp + 0x54], eax
mov dword [ebp + 0x50], 0xd
mov dword [ebp + 0x60], 7
jmp 0x429ff1
push 0x20
pop ebx
push 8
pop eax
mov dword [ebp + 0x4c], 3
mov dword [ebp + 0x5c], eax
mov dword [ebp + 0x68], 0xe
mov dword [ebp + 0x3c], 0xc
mov dword [ebp + 0x54], eax
mov dword [ebp + 0x50], 0x11
mov dword [ebp + 0x60], 9
jmp 0x429ff1
mov dword [ebp + 0x4c], 4
push 0x30
mov dword [ebp + 0x5c], 0xc
mov dword [ebp + 0x68], 0x15
mov dword [ebp + 0x3c], 0x11
mov dword [ebp + 0x54], 0xb
mov dword [ebp + 0x50], 0x1a
mov dword [ebp + 0x60], 0xe
jmp 0x429ff0
mov dword [ebp + 0x4c], 5
push 0x40
mov dword [ebp + 0x5c], 0x10
mov dword [ebp + 0x68], 0x1c
mov dword [ebp + 0x3c], 0x16
mov dword [ebp + 0x54], 0xe
mov dword [ebp + 0x50], 0x20
mov dword [ebp + 0x60], 0x12
jmp 0x429ff0
mov dword [ebp + 0x4c], 6
push 0x70
mov dword [ebp + 0x5c], 0x1c
mov dword [ebp + 0x68], 0x31
mov dword [ebp + 0x3c], 0x26
mov dword [ebp + 0x54], 0x18
mov dword [ebp + 0x50], 0x38
mov dword [ebp + 0x60], 0x1f
pop ebx
mov dword [ebp + 0x24], edi
cmp si, di
je 0x42a00e
movzx eax, si
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.USER32.dll_LoadBitmapW]
mov dword [ebp + 0x24], eax
push edi
call dword [sym.imp.USER32.dll_GetDC]
mov esi, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
mov dword [ebp + 0x38], eax
call esi
push edi
mov dword [ebp + 0x7c], eax
call esi
push dword [ebp + 0x38]
mov dword [ebp + 0x40], eax
call esi
mov esi, dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push ebx
push ebx
push dword [ebp + 0x38]
mov dword [ebp + 0x44], eax
call esi
push ebx
push ebx
push dword [ebp + 0x40]
mov dword [ebp], eax
call esi
push dword [ebp]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp + 0x7c]
mov dword [ebp + 4], eax
call esi
push dword [ebp + 4]
mov dword [ebp - 0x18], eax
push dword [ebp + 0x40]
call esi
mov dword [ebp - 0x14], eax
cmp dword [0x50b20c], edi
je 0x42a07f
push 0x21
push dword [ebp + 0x74]
call fcn.00429d81
mov dword [ebp + 0x58], eax
jmp 0x42a082
mov dword [ebp + 0x58], edi
cmp ebx, 0x18
lea eax, [ebx - 1]
mov dword [ebp + 0x20], eax
jl 0x42a099
mov dword [ebp + 0x18], 1
mov dword [ebp + 0x1c], eax
jmp 0x42a09f
mov dword [ebp + 0x18], edi
mov dword [ebp + 0x1c], ebx
cmp ebx, 0x20
jg 0x42a14b
push dword [ebp + 0x58]
push 1
push edi
call dword [sym.imp.GDI32.dll_CreatePen]
push eax
push dword [ebp + 0x7c]
call esi
push 0xff0062
push edi
push edi
push edi
push ebx
push ebx
push edi
push edi
push dword [ebp + 0x40]
mov edi, dword [sym.imp.GDI32.dll_BitBlt]
mov dword [ebp + 0x58], eax
call edi
push 4
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [ebp + 0x40]
call esi
push 7
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [ebp + 0x40]
call esi
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push eax
push dword [ebp + 0x7c]
mov dword [ebp + 0x4c], eax
call esi
push dword [ebp + 0x20]
mov dword [ebp + 0x64], eax
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push 1
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_Ellipse]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push 1
push dword [ebp + 0x40]
call dword [sym.imp.GDI32.dll_Ellipse]
push dword [ebp + 0x64]
push dword [ebp + 0x7c]
call esi
push dword [ebp + 0x58]
push dword [ebp + 0x7c]
call esi
push dword [ebp + 0x4c]
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x42a53a
push 0x42
push edi
push edi
push edi
push ebx
push ebx
push edi
push edi
push dword [ebp + 0x40]
call dword [sym.imp.GDI32.dll_BitBlt]
push 2
pop eax
push 4
pop ecx
push 3
pop edx
push 6
mov dword [ebp - 0x150], ecx
mov dword [ebp - 0x130], ecx
pop ecx
mov dword [ebp - 0x168], 0xffffffdd
mov dword [ebp - 0x164], 0xffffffe1
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x158], 0xffffffd8
mov dword [ebp - 0x154], 0xffffffde
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x148], 0xffffffca
mov dword [ebp - 0x144], 0xffffffcc
mov dword [ebp - 0x140], 1
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], 0xffffffbe
mov dword [ebp - 0x134], 0xffffffc4
mov dword [ebp - 0x12c], edx
mov dword [ebp - 0x128], 0xffffff94
mov dword [ebp - 0x124], 0xffffff9e
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x118], 0xffffff74
mov dword [ebp - 0x114], 0xffffff7e
mov dword [ebp - 0x110], 5
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x108], 0xffffff0c
mov dword [ebp - 0x104], 0xffffff25
mov dword [ebp - 0x100], 0xe
mov dword [ebp - 0xfc], 0xf
cmp ebx, dword [0x4a2aa4]
je 0x42a382
mov edx, dword [ebp + 0x4c]
mov dword [ebp - 0x1c0], edi
mov dword [ebp - 0x1bc], edi
mov dword [ebp - 0x1b8], edi
shl edx, 4
mov eax, dword [ebp + edx - 0x168]
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x1b4], 0x190
mov byte [ebp - 0x1b0], 0
mov byte [ebp - 0x1af], 0
mov byte [ebp - 0x1ae], 0
mov byte [ebp - 0x1ad], 0
mov byte [ebp - 0x1ac], 1
mov byte [ebp - 0x1ab], 2
mov byte [ebp - 0x1aa], 1
mov byte [ebp - 0x1a9], 0x31
push 0xa
pop ecx
mov esi, 0x4712f4
lea edi, [ebp - 0x1a8]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
lea edi, [ebp - 0x17e]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp + edx - 0x164]
mov dword [ebp - 0x74], eax
xor edx, edx
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x64], 0x190
mov byte [ebp - 0x60], dl
mov byte [ebp - 0x5f], dl
mov byte [ebp - 0x5e], dl
mov byte [ebp - 0x5d], dl
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x5b], 2
mov byte [ebp - 0x5a], 1
mov byte [ebp - 0x59], 0x31
push 0xa
pop ecx
mov esi, 0x4712f4
lea edi, [ebp - 0x58]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
lea edi, [ebp - 0x2e]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [0x501754]
cmp eax, edx
je 0x42a35a
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
push eax
call esi
push dword [0x501758]
call esi
mov esi, dword [sym.imp.GDI32.dll_CreateFontIndirectW]
lea eax, [ebp - 0x1c4]
push eax
call esi
mov dword [0x501754], eax
lea eax, [ebp - 0x74]
push eax
call esi
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push 2
mov dword [0x501758], eax
pop eax
mov edi, dword [ebp + 0x7c]
push eax
push edi
call dword [sym.imp.GDI32.dll_SetBkMode]
mov eax, dword [0x50b20c]
push dword [eax*4 + 0x50ada0]
push edi
call dword [sym.imp.GDI32.dll_SetBkColor]
push dword [ebp + 0x58]
push edi
call dword [sym.imp.GDI32.dll_SetTextColor]
push dword [0x501754]
push edi
call esi
mov eax, dword [0x4712ec]
mov edi, dword [ebp + 0x4c]
mov dword [ebp + 0xc], eax
mov eax, dword [0x4712f0]
push 0
push 0
mov dword [ebp + 0x10], eax
shl edi, 4
lea eax, [ebp + edi - 0xf8]
push eax
mov dword [ebp + 0x64], eax
push 0xffffffffffffffff
lea eax, [ebp + 0xc]
push eax
push dword [ebp + 0x7c]
mov dword [ebp - 0xf8], 0xfffffff5
mov dword [ebp - 0xf4], 0xfffffff2
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0xe8], 0xfffffff3
mov dword [ebp - 0xe4], 0xfffffff0
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xd8], 0xffffffee
mov dword [ebp - 0xd4], 0xffffffe8
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xc8], 0xffffffea
mov dword [ebp - 0xc4], 0xffffffe6
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], 0xffffffda
mov dword [ebp - 0xb4], 0xffffffd5
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], 0xffffffd1
mov dword [ebp - 0xa4], 0xffffffc7
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0x98], 0xffffffae
mov dword [ebp - 0x94], 0xffffff9c
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x8c], ebx
call dword [sym.imp.USER32.dll_DrawTextExW]
push dword [ebp + 0x74]
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_SetTextColor]
push 1
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_SetBkMode]
push dword [0x501758]
push dword [ebp + 0x7c]
call esi
mov eax, dword [ebp + edi - 0x160]
mov ecx, dword [ebp + 0x64]
add eax, dword [ecx]
push 0
mov dword [ebp + 0x28], eax
mov eax, dword [ebp + edi - 0xf4]
add eax, dword [ebp + edi - 0x15c]
push 0
mov dword [ebp + 0x2c], eax
mov eax, dword [ebp + edi - 0xf0]
mov dword [ebp + 0x30], eax
mov eax, dword [ebp + edi - 0xec]
mov dword [ebp + 0x34], eax
lea eax, [ebp + 0x28]
push eax
push 0xffffffffffffffff
lea eax, [ebp + 0xc]
push eax
push dword [ebp + 0x7c]
call dword [sym.imp.USER32.dll_DrawTextExW]
mov edi, dword [sym.imp.GDI32.dll_BitBlt]
cmp ebx, 0x18
jl 0x42a708
and dword [ebp + 0x64], 0
push 0xfffffffffffffff8
pop edi
cmp ebx, 0x10
je 0x42a58c
cmp ebx, 0x14
je 0x42a588
cmp ebx, 0x18
je 0x42a584
cmp ebx, 0x20
je 0x42a580
cmp ebx, 0x30
je 0x42a575
cmp ebx, 0x40
je 0x42a571
cmp ebx, 0x70
jne 0x42a58f
push 0xffffffffffffffc0
jmp 0x42a58e
push 0xffffffffffffffdb
jmp 0x42a58e
push 0xffffffffffffffe4
mov dword [ebp + 0x64], 1
jmp 0x42a58e
push 0xffffffffffffffed
jmp 0x42a58e
push 0xfffffffffffffff3
jmp 0x42a58e
push 0xfffffffffffffff5
jmp 0x42a577
push 0xfffffffffffffff7
pop edi
mov eax, 0xc8
cmp dword [ebp + 0x78], eax
mov dword [ebp + 0x4c], 0x190
jl 0x42a602
sub dword [ebp + 0x78], eax
mov eax, dword [ebp + 0x78]
mov dword [ebp + 8], 0x4712e8
mov dword [ebp + 0xc], 0x4712e4
mov dword [ebp + 0x10], 0x4712dc
push dword [ebp + eax*4 + 8]
lea eax, [ebp + 0x28]
push 0x45609c
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp dword [ebp + 0x78], 0
mov dword [ebp + 0x58], eax
jne 0x42a5e9
mov eax, edi
cdq
and edx, 3
add eax, edx
sar eax, 2
add edi, eax
jmp 0x42a5ef
cmp dword [ebp + 0x78], 1
jne 0x42a5f8
mov dword [ebp + 0x4c], 0x2bc
jmp 0x42a645
cmp dword [ebp + 0x78], 2
jne 0x42a645
push 0xfffffffffffffffa
jmp 0x42a626
cmp dword [ebp + 0x78], 0x64
lea eax, [ebp + 0x28]
jl 0x42a630
sub dword [ebp + 0x78], 0x64
push dword [ebp + 0x78]
push 0x4712d4
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [ebp + 0x58], eax
push 0xfffffffffffffff6
mov eax, edi
cdq
pop ecx
idiv ecx
add edi, eax
jmp 0x42a645
push dword [ebp + 0x78]
push 0x4559c4
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [ebp + 0x58], eax
mov eax, dword [ebp + 0x4c]
cmp edi, dword [0x50856c]
jne 0x42a65c
cmp eax, dword [0x508568]
je 0x42a7f8
xor ecx, ecx
mov dword [0x50856c], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x68], ecx
mov byte [ebp - 0x60], cl
mov byte [ebp - 0x5f], cl
mov byte [ebp - 0x5e], cl
mov byte [ebp - 0x5d], cl
mov dword [ebp - 0x64], eax
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x5b], 2
mov byte [ebp - 0x5a], 1
mov byte [ebp - 0x59], 0x31
push 0xa
pop ecx
mov esi, 0x4712f4
lea edi, [ebp - 0x58]
rep movsd dword es:[edi], dword [esi]
mov dword [0x508568], eax
movsw word es:[edi], word [esi]
xor eax, eax
lea edi, [ebp - 0x2e]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [0x501750]
test eax, eax
je 0x42a6bf
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x501750], eax
test eax, eax
jne 0x42a7f2
push str.CreateNumberIcon
push 0xf33
push str..Tools.cpp
push str.INT3_in__S_line__u__function__S
push 1
call fcn.0044def7
add esp, 0x14
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [sym.imp.GDI32.dll_BitBlt]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp + 0x24]
push dword [ebp + 0x44]
call esi
cmp dword [0x50b20c], 0
je 0x42a7b6
push dword [ebp + 0x38]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push dword [ebp + 0x68]
mov dword [ebp + 0x74], eax
mov eax, dword [ebp + 0x5c]
imul eax, eax, 0xb
push eax
push dword [ebp + 0x74]
mov dword [ebp + 0x64], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
push dword [ebp + 0x74]
mov dword [ebp + 0x58], eax
call esi
mov eax, dword [ebp + 0x64]
and dword [ebp + 0x28], 0
and dword [ebp + 0x2c], 0
mov dword [ebp + 0x30], eax
mov eax, dword [ebp + 0x68]
push 4
mov dword [ebp + 0x34], eax
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
lea eax, [ebp + 0x28]
push eax
push dword [ebp + 0x74]
call dword [sym.imp.USER32.dll_FillRect]
push 0x330008
xor eax, eax
push eax
push eax
push dword [ebp + 0x44]
push dword [ebp + 0x68]
push dword [ebp + 0x64]
push eax
push eax
push dword [ebp + 0x74]
call edi
push 0xcc0020
xor eax, eax
push eax
push eax
push dword [ebp + 0x74]
push dword [ebp + 0x68]
push dword [ebp + 0x64]
push eax
push eax
push dword [ebp + 0x44]
call edi
push dword [ebp + 0x58]
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_DeleteDC]
and dword [ebp + 0x74], 0
cmp dword [ebp + 0x78], 0xc8
jl 0x42a8c7
push str.CreateNumberIcon
push 0xf73
push str..Tools.cpp
push str.INT3_in__S_line__u__function__S
push 1
call fcn.0044def7
add esp, 0x14
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x42a8d8
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [0x501750]
mov edi, dword [ebp + 0x7c]
push edi
call esi
push 1
push edi
call dword [sym.imp.GDI32.dll_SetBkMode]
push dword [ebp + 0x74]
push edi
call dword [sym.imp.GDI32.dll_SetBkColor]
mov eax, dword [0x50b20c]
neg eax
sbb eax, eax
and eax, dword [0x4a2adc]
push eax
push edi
call dword [sym.imp.GDI32.dll_SetTextColor]
lea eax, [ebp + 0xc]
push eax
push dword [ebp + 0x58]
lea eax, [ebp + 0x28]
push eax
push edi
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
mov ecx, dword [ebp + 0x1c]
mov edi, dword [ebp + 0x20]
mov eax, ecx
sub eax, dword [ebp + 0xc]
mov dword [ebp - 8], ecx
dec eax
cdq
sub eax, edx
sar eax, 1
inc eax
mov dword [ebp - 0x10], eax
sub ecx, dword [ebp - 0x10]
mov eax, edi
sub eax, dword [ebp + 0x10]
mov dword [ebp - 4], edi
sub eax, dword [ebp + 0x18]
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp + 0x64]
add eax, dword [ebp + 0x18]
mov dword [ebp - 0xc], eax
mov eax, ecx
and eax, 1
cmp al, 1
je 0x42a882
cmp ecx, 0x14
jl 0x42a897
lea eax, [ebp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp word [ebp + eax*2 + 0x26], 0x31
jne 0x42a897
inc dword [ebp - 0x10]
cmp ebx, 0x18
je 0x42a8a1
cmp ebx, 0x30
jne 0x42a8ab
cmp word [ebp + 0x2a], 0x37
jne 0x42a8ab
dec dword [ebp - 0x10]
push 0
push 0
lea eax, [ebp - 0x10]
push eax
push 0xffffffffffffffff
lea eax, [ebp + 0x28]
push eax
push dword [ebp + 0x7c]
call dword [sym.imp.USER32.dll_DrawTextExW]
jmp 0x42a9b0
cmp dword [ebp + 0x78], 0x64
jl 0x42a8d8
sub dword [ebp + 0x78], 0x64
mov dword [ebp + 0x74], 1
push dword [ebp + 0x78]
lea eax, [ebp + 0x48]
push 0x46c8f8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp + 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
movsx ecx, byte [ebp + 0x48]
mov edx, dword [0x50b20c]
sub ecx, 0x30
neg edx
sbb edx, edx
and edx, 0x65ffc0
add edx, 0x8800c6
cmp dword [ebp + 0x74], 0
mov dword [ebp + 0x64], ecx
mov dword [ebp + 0x78], edx
je 0x42a943
mov ebx, dword [ebp + 0x5c]
mov eax, ebx
push edx
imul eax, eax, 0xa
push 0
push eax
push dword [ebp + 0x44]
push dword [ebp + 0x68]
push ebx
push dword [ebp + 0x60]
push dword [ebp + 0x54]
push dword [ebp + 0x7c]
call edi
mov eax, dword [ebp + 0x64]
jmp 0x42a995
cmp eax, 1
jne 0x42a961
imul ecx, dword [ebp + 0x5c]
push edx
push 0
push ecx
push dword [ebp + 0x44]
push dword [ebp + 0x68]
push dword [ebp + 0x5c]
push dword [ebp + 0x60]
push dword [ebp + 0x3c]
jmp 0x42a9ab
cmp ebx, 0x14
jne 0x42a972
cmp byte [ebp + 0x49], 0x31
jne 0x42a972
inc dword [ebp + 0x54]
inc dword [ebp + 0x50]
mov ebx, dword [ebp + 0x5c]
push edx
imul ecx, ebx
push 0
push ecx
push dword [ebp + 0x44]
push dword [ebp + 0x68]
push ebx
push dword [ebp + 0x60]
push dword [ebp + 0x54]
push dword [ebp + 0x7c]
call edi
movsx eax, byte [ebp + 0x49]
sub eax, 0x30
push dword [ebp + 0x78]
imul eax, ebx
push 0
push eax
push dword [ebp + 0x44]
push dword [ebp + 0x68]
push ebx
push dword [ebp + 0x60]
push dword [ebp + 0x50]
push dword [ebp + 0x7c]
call edi
push dword [ebp - 0x18]
push dword [ebp + 0x7c]
call esi
push dword [ebp - 0x14]
push dword [ebp + 0x40]
call esi
mov esi, dword [ebp + 4]
mov edi, dword [ebp]
and dword [ebp - 0x84], 0
and dword [ebp - 0x80], 0
lea eax, [ebp - 0x88]
push eax
mov dword [ebp - 0x88], 1
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x78], edi
call dword [sym.imp.USER32.dll_CreateIconIndirect]
push esi
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
mov ebx, eax
call esi
push edi
call esi
push dword [ebp + 0x24]
call esi
push dword [ebp + 0x7c]
mov esi, dword [sym.imp.GDI32.dll_DeleteDC]
call esi
push dword [ebp + 0x44]
call esi
push dword [ebp + 0x38]
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, ebx
pop ebx
pop edi
pop esi
add ebp, 0x6c
leave
ret 0xc