Function at 0x429b9a
Capabilities:
Capture screenshot

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
mov eax, dword [0x4a1abc]
sub esp, 0x230
push ebx
push esi
push edi
xor edi, edi
xor edx, edx
cmp eax, 0x2a0
jge 0x429d52
mov ecx, dword [ebp + 0x7c]
cmp ecx, 0x70
jge 0x429d52
cmp eax, 0x180
jge 0x429d1d
cmp ecx, 0x40
jge 0x429d1d
cmp eax, 0x120
jge 0x429ce8
cmp ecx, 0x30
jge 0x429ce8
cmp eax, 0xc0
jge 0x429cb4
cmp ecx, 0x20
jge 0x429cb4
cmp eax, 0x90
jge 0x429c80
cmp ecx, 0x18
jge 0x429c80
cmp eax, 0x78
jge 0x429c4b
cmp ecx, 0x14
jge 0x429c4b
push 0x10
pop ebx
push 4
pop eax
mov dword [ebp + 0x4c], edi
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x68], 7
mov dword [ebp + 0x3c], 6
mov dword [ebp + 0x50], eax
mov dword [ebp + 0x54], 9
mov dword [ebp + 0x5c], eax
mov edx, 0x1f4
jmp 0x429d86
push 0x14
pop ebx
push 5
pop eax
mov dword [ebp + 0x4c], 1
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x68], 9
mov dword [ebp + 0x3c], 8
mov dword [ebp + 0x50], eax
mov dword [ebp + 0x54], 0xb
mov dword [ebp + 0x5c], eax
mov edx, 0x1f5
jmp 0x429d86
push 0x18
pop ebx
push 6
pop eax
mov dword [ebp + 0x4c], 2
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x68], 0xb
mov dword [ebp + 0x3c], 9
mov dword [ebp + 0x50], eax
mov dword [ebp + 0x54], 0xd
mov dword [ebp + 0x5c], 7
jmp 0x429d86
push 0x20
pop ebx
push 8
pop eax
mov dword [ebp + 0x4c], 3
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x68], 0xe
mov dword [ebp + 0x3c], 0xc
mov dword [ebp + 0x50], eax
mov dword [ebp + 0x54], 0x11
mov dword [ebp + 0x5c], 9
jmp 0x429d86
mov dword [ebp + 0x4c], 4
push 0x30
mov dword [ebp + 0x60], 0xc
mov dword [ebp + 0x68], 0x15
mov dword [ebp + 0x3c], 0x11
mov dword [ebp + 0x50], 0xb
mov dword [ebp + 0x54], 0x1a
mov dword [ebp + 0x5c], 0xe
jmp 0x429d85
mov dword [ebp + 0x4c], 5
push 0x40
mov dword [ebp + 0x60], 0x10
mov dword [ebp + 0x68], 0x1c
mov dword [ebp + 0x3c], 0x16
mov dword [ebp + 0x50], 0xe
mov dword [ebp + 0x54], 0x20
mov dword [ebp + 0x5c], 0x12
jmp 0x429d85
mov dword [ebp + 0x4c], 6
push 0x70
mov dword [ebp + 0x60], 0x1c
mov dword [ebp + 0x68], 0x31
mov dword [ebp + 0x3c], 0x26
mov dword [ebp + 0x50], 0x18
mov dword [ebp + 0x54], 0x38
mov dword [ebp + 0x5c], 0x1f
pop ebx
mov dword [ebp + 0x24], edi
cmp dx, di
je 0x429da3
movzx eax, dx
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.USER32.dll_LoadBitmapW]
mov dword [ebp + 0x24], eax
push edi
call dword [sym.imp.USER32.dll_GetDC]
mov esi, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
mov dword [ebp + 0x38], eax
call esi
push edi
mov dword [ebp + 0x7c], eax
call esi
push dword [ebp + 0x38]
mov dword [ebp + 0x40], eax
call esi
mov esi, dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push ebx
push ebx
push dword [ebp + 0x38]
mov dword [ebp + 0x44], eax
call esi
push ebx
push ebx
push dword [ebp + 0x40]
mov dword [ebp], eax
call esi
push dword [ebp]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp + 0x7c]
mov dword [ebp + 4], eax
call esi
push dword [ebp + 4]
mov dword [ebp - 0x14], eax
push dword [ebp + 0x40]
call esi
mov dword [ebp - 0x18], eax
cmp dword [0x50a120], edi
je 0x429e14
push 0x21
push dword [ebp + 0x74]
call fcn.00429b24
mov dword [ebp + 0x64], eax
jmp 0x429e17
mov dword [ebp + 0x64], edi
cmp ebx, 0x18
lea eax, [ebx - 1]
mov dword [ebp + 0x20], eax
jl 0x429e2e
mov dword [ebp + 0x18], 1
mov dword [ebp + 0x1c], eax
jmp 0x429e34
mov dword [ebp + 0x18], edi
mov dword [ebp + 0x1c], ebx
cmp ebx, 0x20
jg 0x429ee0
push dword [ebp + 0x64]
push 1
push edi
call dword [sym.imp.GDI32.dll_CreatePen]
push eax
push dword [ebp + 0x7c]
call esi
push 0xff0062
push edi
push edi
push edi
push ebx
push ebx
push edi
push edi
push dword [ebp + 0x40]
mov edi, dword [sym.imp.GDI32.dll_BitBlt]
mov dword [ebp + 0x64], eax
call edi
push 4
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [ebp + 0x40]
call esi
push 7
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
push dword [ebp + 0x40]
call esi
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push eax
push dword [ebp + 0x7c]
mov dword [ebp + 0x4c], eax
call esi
push dword [ebp + 0x20]
mov dword [ebp + 0x58], eax
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push 1
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_Ellipse]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push 1
push dword [ebp + 0x40]
call dword [sym.imp.GDI32.dll_Ellipse]
push dword [ebp + 0x58]
push dword [ebp + 0x7c]
call esi
push dword [ebp + 0x64]
push dword [ebp + 0x7c]
call esi
push dword [ebp + 0x4c]
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x42a2e2
push 0x42
push edi
push edi
push edi
push ebx
push ebx
push edi
push edi
push dword [ebp + 0x40]
call dword [sym.imp.GDI32.dll_BitBlt]
push 2
pop eax
push 4
pop ecx
push 3
pop edx
push 6
mov dword [ebp - 0x150], ecx
mov dword [ebp - 0x130], ecx
pop ecx
mov dword [ebp - 0x168], 0xffffffdd
mov dword [ebp - 0x164], 0xffffffe1
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x158], 0xffffffd8
mov dword [ebp - 0x154], 0xffffffde
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x148], 0xffffffca
mov dword [ebp - 0x144], 0xffffffcc
mov dword [ebp - 0x140], 1
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], 0xffffffbe
mov dword [ebp - 0x134], 0xffffffc4
mov dword [ebp - 0x12c], edx
mov dword [ebp - 0x128], 0xffffff94
mov dword [ebp - 0x124], 0xffffff9e
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x118], 0xffffff74
mov dword [ebp - 0x114], 0xffffff7e
mov dword [ebp - 0x110], 5
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x108], 0xffffff0c
mov dword [ebp - 0x104], 0xffffff25
mov dword [ebp - 0x100], 0xe
mov dword [ebp - 0xfc], 0xf
cmp ebx, dword [0x4a1aa4]
je 0x42a119
mov edx, dword [ebp + 0x4c]
mov dword [ebp - 0x1c0], edi
mov dword [ebp - 0x1bc], edi
mov dword [ebp - 0x1b8], edi
shl edx, 4
mov eax, dword [ebp + edx - 0x168]
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x1b4], 0x190
mov byte [ebp - 0x1b0], 0
mov byte [ebp - 0x1af], 0
mov byte [ebp - 0x1ae], 0
mov byte [ebp - 0x1ad], 0
mov byte [ebp - 0x1ac], 1
mov byte [ebp - 0x1ab], 2
mov byte [ebp - 0x1aa], 1
mov byte [ebp - 0x1a9], 0x31
push 0xa
pop ecx
mov esi, 0x470184
lea edi, [ebp - 0x1a8]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
lea edi, [ebp - 0x17e]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp + edx - 0x164]
mov dword [ebp - 0x74], eax
xor edx, edx
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x64], 0x190
mov byte [ebp - 0x60], dl
mov byte [ebp - 0x5f], dl
mov byte [ebp - 0x5e], dl
mov byte [ebp - 0x5d], dl
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x5b], 2
mov byte [ebp - 0x5a], 1
mov byte [ebp - 0x59], 0x31
push 0xa
pop ecx
mov esi, 0x470184
lea edi, [ebp - 0x58]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
lea edi, [ebp - 0x2e]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [0x500714]
cmp eax, edx
je 0x42a0ef
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
push eax
call esi
push dword [0x500718]
call esi
mov esi, dword [sym.imp.GDI32.dll_CreateFontIndirectW]
lea eax, [ebp - 0x1c4]
push eax
call esi
mov dword [0x500714], eax
lea eax, [ebp - 0x74]
push eax
call esi
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push 2
mov dword [0x500718], eax
xor edi, edi
pop eax
push eax
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_SetBkMode]
cmp dword [0x50a120], edi
je 0x42a132
mov eax, dword [0x4a1ad8]
jmp 0x42a13a
push 5
call dword [sym.imp.USER32.dll_GetSysColor]
push eax
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_SetBkColor]
push dword [ebp + 0x64]
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_SetTextColor]
push dword [0x500714]
push dword [ebp + 0x7c]
call esi
mov eax, dword [0x47017c]
mov edi, dword [ebp + 0x4c]
mov dword [ebp + 0xc], eax
mov eax, dword [0x470180]
push 0
push 0
mov dword [ebp + 0x10], eax
shl edi, 4
lea eax, [ebp + edi - 0xf8]
push eax
mov dword [ebp + 0x58], eax
push 0xffffffffffffffff
lea eax, [ebp + 0xc]
push eax
push dword [ebp + 0x7c]
mov dword [ebp - 0xf8], 0xfffffff5
mov dword [ebp - 0xf4], 0xfffffff2
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0xe8], 0xfffffff3
mov dword [ebp - 0xe4], 0xfffffff0
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xd8], 0xffffffee
mov dword [ebp - 0xd4], 0xffffffe8
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xc8], 0xffffffea
mov dword [ebp - 0xc4], 0xffffffe6
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], 0xffffffda
mov dword [ebp - 0xb4], 0xffffffd5
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], 0xffffffd1
mov dword [ebp - 0xa4], 0xffffffc7
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0x98], 0xffffffae
mov dword [ebp - 0x94], 0xffffff9c
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x8c], ebx
call dword [sym.imp.USER32.dll_DrawTextExW]
push dword [ebp + 0x74]
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_SetTextColor]
push 1
push dword [ebp + 0x7c]
call dword [sym.imp.GDI32.dll_SetBkMode]
push dword [0x500718]
push dword [ebp + 0x7c]
call esi
mov eax, dword [ebp + edi - 0x160]
mov ecx, dword [ebp + 0x58]
add eax, dword [ecx]
push 0
mov dword [ebp + 0x28], eax
mov eax, dword [ebp + edi - 0xf4]
add eax, dword [ebp + edi - 0x15c]
push 0
mov dword [ebp + 0x2c], eax
mov eax, dword [ebp + edi - 0xf0]
mov dword [ebp + 0x30], eax
mov eax, dword [ebp + edi - 0xec]
mov dword [ebp + 0x34], eax
lea eax, [ebp + 0x28]
push eax
push 0xffffffffffffffff
lea eax, [ebp + 0xc]
push eax
push dword [ebp + 0x7c]
call dword [sym.imp.USER32.dll_DrawTextExW]
mov edi, dword [sym.imp.GDI32.dll_BitBlt]
cmp ebx, 0x18
jl 0x42a4b0
and dword [ebp + 0x58], 0
push 0xfffffffffffffff8
pop edi
cmp ebx, 0x10
je 0x42a334
cmp ebx, 0x14
je 0x42a329
cmp ebx, 0x18
je 0x42a325
cmp ebx, 0x20
je 0x42a321
cmp ebx, 0x30
je 0x42a31d
cmp ebx, 0x40
je 0x42a319
cmp ebx, 0x70
jne 0x42a337
push 0xffffffffffffffc0
jmp 0x42a336
push 0xffffffffffffffdb
jmp 0x42a336
push 0xffffffffffffffe4
jmp 0x42a336
push 0xffffffffffffffed
jmp 0x42a336
push 0xfffffffffffffff3
jmp 0x42a336
push 0xfffffffffffffff5
mov dword [ebp + 0x58], 1
jmp 0x42a336
push 0xfffffffffffffff7
pop edi
mov eax, 0xc8
cmp dword [ebp + 0x78], eax
mov dword [ebp + 0x4c], 0x190
jl 0x42a3aa
sub dword [ebp + 0x78], eax
mov eax, dword [ebp + 0x78]
mov dword [ebp + 8], 0x470178
mov dword [ebp + 0xc], 0x470174
mov dword [ebp + 0x10], 0x47016c
push dword [ebp + eax*4 + 8]
lea eax, [ebp + 0x28]
push 0x454f0c
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp dword [ebp + 0x78], 0
mov dword [ebp + 0x64], eax
jne 0x42a391
mov eax, edi
cdq
and edx, 3
add eax, edx
sar eax, 2
add edi, eax
jmp 0x42a397
cmp dword [ebp + 0x78], 1
jne 0x42a3a0
mov dword [ebp + 0x4c], 0x2bc
jmp 0x42a3ed
cmp dword [ebp + 0x78], 2
jne 0x42a3ed
push 0xfffffffffffffffa
jmp 0x42a3ce
cmp dword [ebp + 0x78], 0x64
lea eax, [ebp + 0x28]
jl 0x42a3d8
sub dword [ebp + 0x78], 0x64
push dword [ebp + 0x78]
push 0x470164
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [ebp + 0x64], eax
push 0xfffffffffffffff6
mov eax, edi
cdq
pop ecx
idiv ecx
add edi, eax
jmp 0x42a3ed
push dword [ebp + 0x78]
push 0x454834
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [ebp + 0x64], eax
mov eax, dword [ebp + 0x4c]
cmp edi, dword [0x50752c]
jne 0x42a404
cmp eax, dword [0x507528]
je 0x42a5a0
xor ecx, ecx
mov dword [0x50752c], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x68], ecx
mov byte [ebp - 0x60], cl
mov byte [ebp - 0x5f], cl
mov byte [ebp - 0x5e], cl
mov byte [ebp - 0x5d], cl
mov dword [ebp - 0x64], eax
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x5b], 2
mov byte [ebp - 0x5a], 1
mov byte [ebp - 0x59], 0x31
push 0xa
pop ecx
mov esi, 0x470184
lea edi, [ebp - 0x58]
rep movsd dword es:[edi], dword [esi]
mov dword [0x507528], eax
movsw word es:[edi], word [esi]
xor eax, eax
lea edi, [ebp - 0x2e]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [0x500710]
test eax, eax
je 0x42a467
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x500710], eax
test eax, eax
jne 0x42a59a
push str.CreateNumberIcon
push 0xe9a
push str..Tools.cpp
push str.INT3_in__S_line__u__function__S
push 1
call fcn.0044d31e
add esp, 0x14
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [sym.imp.GDI32.dll_BitBlt]
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp + 0x24]
push dword [ebp + 0x44]
call esi
cmp dword [0x50a120], 0
je 0x42a55e
push dword [ebp + 0x38]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push dword [ebp + 0x68]
mov dword [ebp + 0x74], eax
mov eax, dword [ebp + 0x60]
imul eax, eax, 0xb
push eax
push dword [ebp + 0x74]
mov dword [ebp + 0x64], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
push dword [ebp + 0x74]
mov dword [ebp + 0x58], eax
call esi
mov eax, dword [ebp + 0x64]
and dword [ebp + 0x28], 0
and dword [ebp + 0x2c], 0
mov dword [ebp + 0x30], eax
mov eax, dword [ebp + 0x68]
push 4
mov dword [ebp + 0x34], eax
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
lea eax, [ebp + 0x28]
push eax
push dword [ebp + 0x74]
call dword [sym.imp.USER32.dll_FillRect]
push 0x330008
xor eax, eax
push eax
push eax
push dword [ebp + 0x44]
push dword [ebp + 0x68]
push dword [ebp + 0x64]
push eax
push eax
push dword [ebp + 0x74]
call edi
push 0xcc0020
xor eax, eax
push eax
push eax
push dword [ebp + 0x74]
push dword [ebp + 0x68]
push dword [ebp + 0x64]
push eax
push eax
push dword [ebp + 0x44]
call edi
push dword [ebp + 0x58]
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [ebp + 0x74]
call dword [sym.imp.GDI32.dll_DeleteDC]
and dword [ebp + 0x74], 0
cmp dword [ebp + 0x78], 0xc8
jl 0x42a66f
push str.CreateNumberIcon
push 0xeda
push str..Tools.cpp
push str.INT3_in__S_line__u__function__S
push 1
call fcn.0044d31e
add esp, 0x14
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x42a680
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push dword [0x500710]
mov edi, dword [ebp + 0x7c]
push edi
call esi
push 1
push edi
call dword [sym.imp.GDI32.dll_SetBkMode]
push dword [ebp + 0x74]
push edi
call dword [sym.imp.GDI32.dll_SetBkColor]
mov eax, dword [0x50a120]
neg eax
sbb eax, eax
and eax, dword [0x4a1adc]
push eax
push edi
call dword [sym.imp.GDI32.dll_SetTextColor]
lea eax, [ebp + 0xc]
push eax
push dword [ebp + 0x64]
lea eax, [ebp + 0x28]
push eax
push edi
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
mov ecx, dword [ebp + 0x1c]
mov edi, dword [ebp + 0x20]
mov eax, ecx
sub eax, dword [ebp + 0xc]
mov dword [ebp - 8], ecx
dec eax
cdq
sub eax, edx
sar eax, 1
inc eax
mov dword [ebp - 0x10], eax
sub ecx, dword [ebp - 0x10]
mov eax, edi
sub eax, dword [ebp + 0x10]
mov dword [ebp - 4], edi
sub eax, dword [ebp + 0x18]
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp + 0x58]
add eax, dword [ebp + 0x18]
mov dword [ebp - 0xc], eax
mov eax, ecx
and eax, 1
cmp al, 1
je 0x42a62a
cmp ecx, 0x14
jl 0x42a63f
lea eax, [ebp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp word [ebp + eax*2 + 0x26], 0x31
jne 0x42a63f
inc dword [ebp - 0x10]
cmp ebx, 0x18
je 0x42a649
cmp ebx, 0x30
jne 0x42a653
cmp word [ebp + 0x2a], 0x37
jne 0x42a653
dec dword [ebp - 0x10]
push 0
push 0
lea eax, [ebp - 0x10]
push eax
push 0xffffffffffffffff
lea eax, [ebp + 0x28]
push eax
push dword [ebp + 0x7c]
call dword [sym.imp.USER32.dll_DrawTextExW]
jmp 0x42a758
cmp dword [ebp + 0x78], 0x64
jl 0x42a680
sub dword [ebp + 0x78], 0x64
mov dword [ebp + 0x74], 1
push dword [ebp + 0x78]
lea eax, [ebp + 0x48]
push 0x46b788
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp + 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
movsx ecx, byte [ebp + 0x48]
mov edx, dword [0x50a120]
sub ecx, 0x30
neg edx
sbb edx, edx
and edx, 0x65ffc0
add edx, 0x8800c6
cmp dword [ebp + 0x74], 0
mov dword [ebp + 0x58], ecx
mov dword [ebp + 0x78], edx
je 0x42a6eb
mov ebx, dword [ebp + 0x60]
mov eax, ebx
push edx
imul eax, eax, 0xa
push 0
push eax
push dword [ebp + 0x44]
push dword [ebp + 0x68]
push ebx
push dword [ebp + 0x5c]
push dword [ebp + 0x50]
push dword [ebp + 0x7c]
call edi
mov eax, dword [ebp + 0x58]
jmp 0x42a73d
cmp eax, 1
jne 0x42a709
imul ecx, dword [ebp + 0x60]
push edx
push 0
push ecx
push dword [ebp + 0x44]
push dword [ebp + 0x68]
push dword [ebp + 0x60]
push dword [ebp + 0x5c]
push dword [ebp + 0x3c]
jmp 0x42a753
cmp ebx, 0x14
jne 0x42a71a
cmp byte [ebp + 0x49], 0x31
jne 0x42a71a
inc dword [ebp + 0x50]
inc dword [ebp + 0x54]
mov ebx, dword [ebp + 0x60]
push edx
imul ecx, ebx
push 0
push ecx
push dword [ebp + 0x44]
push dword [ebp + 0x68]
push ebx
push dword [ebp + 0x5c]
push dword [ebp + 0x50]
push dword [ebp + 0x7c]
call edi
movsx eax, byte [ebp + 0x49]
sub eax, 0x30
push dword [ebp + 0x78]
imul eax, ebx
push 0
push eax
push dword [ebp + 0x44]
push dword [ebp + 0x68]
push ebx
push dword [ebp + 0x5c]
push dword [ebp + 0x54]
push dword [ebp + 0x7c]
call edi
push dword [ebp - 0x14]
push dword [ebp + 0x7c]
call esi
push dword [ebp - 0x18]
push dword [ebp + 0x40]
call esi
mov esi, dword [ebp + 4]
mov edi, dword [ebp]
and dword [ebp - 0x84], 0
and dword [ebp - 0x80], 0
lea eax, [ebp - 0x88]
push eax
mov dword [ebp - 0x88], 1
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x78], edi
call dword [sym.imp.USER32.dll_CreateIconIndirect]
push esi
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
mov ebx, eax
call esi
push edi
call esi
push dword [ebp + 0x24]
call esi
push dword [ebp + 0x7c]
mov esi, dword [sym.imp.GDI32.dll_DeleteDC]
call esi
push dword [ebp + 0x44]
call esi
push dword [ebp + 0x38]
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
pop edi
pop esi
mov eax, ebx
pop ebx
add ebp, 0x6c
leave
ret 0xc