Function at 0x430ca3
Capabilities:
Capture screenshot

Disassembly:
enter 4, 0
pushal
cmp dword [0x44474b], 0
jne 0x430ca8
mov dword [0x44474b], 1
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push 0xfa0
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov ebx, dword [ebp + 0xc]
mov dword [ebx], eax
pushal
push 0x560
push eax
push dword [ebp + 8]
pop esi
pop edi
pop ecx
cld
rep movsb byte es:[edi], byte [esi]
popal
mov edi, eax
mov dword [edi + 0x1e0], ebx
cmp dword [edi + 0x128], 0
je 0x430d13
mov esi, dword [edi + 0x128]
mov eax, dword [esi + 0x94]
mov dword [edi + 0x98], eax
cmp dword [edi + 0x198], 0
je 0x430d3c
cmp dword [edi + 0x198], 1
je 0x430d8f
cmp dword [edi + 0x198], 2
je 0x430da1
cmp dword [edi + 0x198], 3
je 0x430da1
jmp 0x4139a0
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x445673
push dword [edi + 0x98]
call sub.user32.dll_GetPropA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 0
jne 0x430d75
push 0x30
push 0x43f5a1
push 0x43f5a7
push 0
call sub.user32.dll_MessageBoxA
jmp 0x41382a
mov esi, eax
mov eax, dword [esi + 0xf0]
mov dword [edi + 0xf0], eax
mov dword [0x449c9b], 0x44000000
jmp 0x430db3
mov dword [0x449c9b], 0x44000000
mov dword [edi + 0xf0], edi
jmp 0x430db3
mov dword [0x449c9b], 0x44000000
mov dword [edi + 0xf0], edi
jmp 0x430db3
cmp dword [edi + 0x124], 0
je 0x430dc6
or dword [0x449c9b], 0x10000000
jmp 0x430dc9
pushal
push 0
push dword [0x444717]
push 0
push dword [edi + 0x98]
push dword [edi + 0xc]
push dword [edi + 8]
push dword [edi + 4]
push dword [edi]
push dword [0x449c9b]
push 0x430dc8
push 0x445646
push 0
call sub.user32.dll_CreateWindowExA
mov dword [edi + 0x94], eax
popal
cmp dword [edi + 0xd4], 6
jne 0x430e1b
mov dword [edi + 0x194], 0x42e49b
jmp 0x430eac
cmp dword [edi + 0xd4], 7
jne 0x430e30
mov dword [edi + 0x194], 0x42e49b
jmp 0x430eac
cmp dword [edi + 0xd4], 2
jne 0x430e45
mov dword [edi + 0x194], 0x414443
jmp 0x430eac
cmp dword [edi + 0xd4], 9
jne 0x430e5a
mov dword [edi + 0x194], 0x42dce4
jmp 0x430eac
cmp dword [edi + 0xd4], 8
jne 0x430e6f
mov dword [edi + 0x194], 0x42e235
jmp 0x430eac
cmp dword [edi + 0xd4], 0xa
jne 0x430e84
mov dword [edi + 0x194], 0x42e79c
jmp 0x430eac
cmp dword [edi + 0x194], 0
jne 0x430eac
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0xfffffffffffffffc
push dword [edi + 0x98]
call sub.user32.dll_GetWindowLongA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [edi + 0x194], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [edi + 0x194]
push 0xfffffffffffffffc
push dword [edi + 0x94]
call sub.user32.dll_SetWindowLongA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [edi + 0x94]
call sub.user32.dll_BringWindowToTop
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push edi
push 0x445673
push dword [edi + 0x94]
call sub.user32.dll_SetPropA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [edi + 0x94]
call sub.user32.dll_GetDC
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [edi + 0x64], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [edi + 0x64]
call sub.GDI32.dll_CreateCompatibleDC
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [edi + 0x68], eax
mov eax, dword [edi + 0x8c]
and eax, 0x100
je 0x430f55
mov eax, dword [edi + 0x18]
mov dword [0x447cd7], eax
mov eax, dword [edi + 0x1c]
mov dword [0x447cdb], eax
neg dword [0x447cdb]
jmp 0x430f77
mov eax, dword [edi + 8]
mov dword [edi + 0x18], eax
mov eax, dword [edi + 0xc]
mov dword [edi + 0x1c], eax
mov eax, dword [edi + 8]
mov dword [0x447cd7], eax
mov eax, dword [edi + 0xc]
mov dword [0x447cdb], eax
neg dword [0x447cdb]
mov ebx, edi
add ebx, 0x114
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0
push 0
push ebx
push 0
push 0x447cd3
push dword [edi + 0x68]
call sub.GDI32.dll_CreateDIBSection
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 0
jne 0x430fbc
push 0x30
push 0x43f5c0
push 0x43f5c6
push 0
call sub.user32.dll_MessageBoxA
jmp 0x41382a
push ebx
push ecx
push edx
push esi
push edi
push ebp
push eax
push dword [edi + 0x68]
call sub.GDI32.dll_SelectObject
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 0
jne 0x430fee
push 0x30
push 0x43f5e8
push 0x43f5ee
push 0
call sub.user32.dll_MessageBoxA
jmp 0x41382a
mov dword [edi + 0x74], eax
cmp dword [edi + 0x198], 1
je 0x43114e
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [edi + 0x94]
call sub.user32.dll_GetDC
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push eax
call sub.GDI32.dll_CreateCompatibleDC
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [edi + 0x1c4], eax
mov eax, dword [edi + 0x18]
mov dword [0x447cd7], eax
mov eax, dword [edi + 0x1c]
mov dword [0x447cdb], eax
neg dword [0x447cdb]
mov ebx, edi
add ebx, 0x1c8
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0
push 0
push ebx
push 0
push 0x447cd3
push dword [edi + 0x1c4]
call sub.GDI32.dll_CreateDIBSection
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 0
jne 0x43108b
push 0x30
push 0x43f61e
push 0x43f624
push 0
call sub.user32.dll_MessageBoxA
jmp 0x41382a
push ebx
push ecx
push edx
push esi
push edi
push ebp
push eax
push dword [edi + 0x1c4]
call sub.GDI32.dll_SelectObject
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp eax, 0
jne 0x4310c0
push 0x30
push 0x43f646
push 0x43f64c
push 0
call sub.user32.dll_MessageBoxA
jmp 0x41382a
mov dword [edi + 0x78], eax
pushal
mov edi, edi
mov esi, dword [edi + 0x128]
cmp esi, 0
jne 0x4310e2
mov eax, dword [edi]
mov dword [0x447bae], eax
mov eax, dword [edi + 4]
mov dword [0x447bb2], eax
jmp 0x431115
mov eax, dword [edi]
mov dword [0x447bae], eax
mov eax, dword [edi + 4]
mov dword [0x447bb2], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 1
push 0x447bae
push dword [0x44471b]
push dword [esi + 0x94]
call sub.user32.dll_MapWindowPoints
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
popal
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0xcc0020
push dword [0x447bb2]
push dword [0x447bae]
push dword [0x43a7de]
push dword [edi + 0xc]
push dword [edi + 8]
push 0
push 0
push dword [edi + 0x1c4]
call sub.GDI32.dll_BitBlt
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov eax, dword [edi + 0x8c]
and eax, 0x10
je 0x4314a5
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [edi + 0x64]
call sub.GDI32.dll_CreateCompatibleDC
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [edi + 0x1d8], eax
mov eax, dword [edi + 0x28]
mov dword [0x447cd7], eax
mov eax, dword [edi + 0x2c]
mov dword [0x447cdb], eax
neg dword [0x447cdb]
mov ebx, edi
add ebx, 0x1dc
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0
push 0
push ebx
push 0
push 0x447cd3
push dword [edi + 0x64]
call sub.GDI32.dll_CreateDIBSection
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push eax
push dword [edi + 0x1d8]
call sub.GDI32.dll_SelectObject
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp dword [edi + 0xd4], 9
jne 0x43133d
mov dword [edi + 0xb0], 0
test dword [edi + 0x2c4], 4
je 0x43133d
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [edi + 0x64]
call sub.GDI32.dll_CreateCompatibleDC
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [edi + 0x2b8], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [edi + 0x64]
call sub.GDI32.dll_CreateCompatibleDC
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [edi + 0x2bc], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [edi + 0x64]
call sub.GDI32.dll_CreateCompatibleDC
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [edi + 0x2c0], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [edi + 0x2c]
push dword [edi + 0x28]
push dword [edi + 0x64]
call sub.GDI32.dll_CreateCompatibleBitmap
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push eax
push dword [edi + 0x2b8]
call sub.GDI32.dll_SelectObject
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [edi + 0x2c]
push dword [edi + 0x28]
push dword [edi + 0x64]
call sub.GDI32.dll_CreateCompatibleBitmap
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push eax
push dword [edi + 0x2bc]
call sub.GDI32.dll_SelectObject
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [edi + 0x2c]
push dword [edi + 0x28]
push dword [edi + 0x64]
call sub.GDI32.dll_CreateCompatibleBitmap
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push eax
push dword [edi + 0x2c0]
call sub.GDI32.dll_SelectObject
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
cmp dword [edi + 0x2a8], 0
je 0x4312f8
push dword [edi + 0x2c]
push dword [edi + 0x28]
push dword [edi + 0x2a8]
push dword [edi + 0x2b8]
call fcn.004350b0
cmp dword [edi + 0x2ac], 0
je 0x431318
push dword [edi + 0x2c]
push dword [edi + 0x28]
push dword [edi + 0x2ac]
push dword [edi + 0x2bc]
call fcn.004350b0
cmp dword [edi + 0x2b4], 0
je 0x431338
push dword [edi + 0x2c]
push dword [edi + 0x28]
push dword [edi + 0x2b4]
push dword [edi + 0x2c0]
call fcn.004350b0
jmp 0x4313e9
cmp dword [edi + 0xd4], 8
jne 0x4313e9
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [edi + 0x64]
call sub.GDI32.dll_CreateCompatibleDC
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [edi + 0x6c], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [edi + 0x64]
call sub.GDI32.dll_CreateCompatibleDC
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [edi + 0x70], eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x10
push 0
push 0
push 0
push dword [edi + 0x2d4]
push 0
call sub.user32.dll_LoadImageA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push eax
push dword [edi + 0x6c]
call sub.GDI32.dll_SelectObject
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0x10
push 0
push 0
push 0
push dword [edi + 0x2d8]
push 0
call sub.user32.dll_LoadImageA
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push eax
push dword [edi + 0x70]
call sub.GDI32.dll_SelectObject
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
jmp 0x4314a5
mov eax, dword [edi + 0x8c]
and eax, 0x10
je 0x4314a5
push ebx
push ecx
push edx
push esi
push edi
push ebp
push dword [edi + 0x64]
call sub.GDI32.dll_CreateCompatibleDC
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [edi + 0x6c], eax
mov eax, dword [edi + 0x28]
mov dword [0x447cd7], eax
mov eax, dword [edi + 0x2c]
mov dword [0x447cdb], eax
neg dword [0x447cdb]
mov ebx, edi
add ebx, 0x118
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 0
push 0
push ebx
push 0
push 0x447cd3
push dword [edi + 0x64]
call sub.GDI32.dll_CreateDIBSection
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
push ebx
push ecx
push edx
push esi
push edi
push ebp
push eax
push dword [edi + 0x6c]
call sub.GDI32.dll_SelectObject
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [edi + 0x7c], eax
cmp dword [edi + 0xec], 0
jne 0x431491
mov edx, dword [edi + 0x28]
push ebx
push dword [edi + 0x2c]
push edx
pop eax
pop ebx
imul eax, ebx
pop ebx
mov edx, eax
pushal
push 0
push edx
push dword [edi + 0x118]
pop edi
pop ecx
pop eax
cld
rep stosd dword es:[edi], eax
popal
jmp 0x4314a5
push dword [edi + 0x2c]
push dword [edi + 0x28]
push dword [edi + 0xec]
push dword [edi + 0x6c]
call fcn.004350b0
mov eax, dword [edi + 0x8c]
and eax, 4
je 0x4315d4
mov eax, dword [edi + 0x5c]
mov dword [0x447b6a], eax
mov eax, dword [edi + 0xd0]
mov dword [0x447b6e], eax
mov eax, dword [edi + 0x44]
mov dword [0x447b72], eax
mov eax, dword [edi + 0x48]
mov dword [0x447b76], eax
mov eax, dword [edi + 0xcc]
mov dword [0x447b86], eax
call fcn.00435932
mov dword [edi + 0x1a4], eax
mov ebx, dword [eax]
mov dword [edi + 0x5c], ebx
mov eax, dword [edi + 0x8c]
and eax, 0x10000
je 0x431587
mov eax, dword [edi + 0x5c]
mov dword [0x447b2e], eax
mov eax, dword [edi + 0xd0]
mov dword [0x447b3e], eax
mov byte [0x447b45], 1
mov byte [0x447b46], 0
mov byte [0x447b47], 0
mov byte [0x447b48], 1
mov byte [0x447b49], 2
pushal
push 0x20
push 0x447b4a
push dword [edi + 0xcc]
pop esi
pop edi
pop ecx
cld
rep movsb byte es:[edi], byte [esi]
popal
push 0x447b2e
call sub.GDI32.dll_CreateFontIndirectA
mov dword [edi + 0xe0], eax
push eax
push dword [edi + 0x68]
call sub.GDI32.dll_SelectObject
push 0x447c9e
push dword [edi + 0x68]
call sub.GDI32.dll_GetTextMetricsA
mov eax, dword [0x447c9e]
mov dword [edi + 0x5c], eax
mov eax, dword [0x447cb6]
mov dword [edi + 0x144], eax
mov eax, dword [edi + 0x5c]
add eax, dword [edi + 0x140]
mov dword [edi + 0x19c], eax
cmp dword [edi + 0x80], 0
jne 0x4315ab
mov eax, dword [edi + 0x90]
mov dword [edi + 0x80], eax
cmp dword [edi + 0xd4], 0xa
jne 0x4315d4
mov dword [edi + 0xe4], 0
mov dword [edi + 0x88], 0
mov eax, dword [edi + 0x90]
mov dword [edi + 0xe8], eax
mov eax, dword [edi + 0x8c]
and eax, 0x80
je 0x43161c
mov eax, dword [edi + 0x90]
mov dword [edi + 0x80], eax
mov dword [edi + 0x60], 0xffffffff
mov dword [edi + 0x84], 0xffffffff
mov dword [edi + 0xb4], 1
mov dword [edi + 0xb8], 6
mov dword [edi + 0xb0], 0
cmp dword [edi + 0xd4], 2
jne 0x4316b3
mov eax, dword [edi + 0x5c]
mov dword [0x447b6a], eax
mov eax, dword [edi + 0xd0]
mov dword [0x447b6e], eax
mov eax, dword [edi + 0x208]
mov dword [0x447b72], eax
mov eax, dword [edi + 0x20c]
mov dword [0x447b76], eax
mov eax, dword [edi + 0xcc]
mov dword [0x447b86], eax
call fcn.00435932
mov dword [edi + 0x1a8], eax
mov eax, dword [edi + 0x1f0]
sub eax, dword [edi + 0x5c]
add eax, dword [edi + 0x1f4]
mov dword [edi + 0x140], eax
mov ebx, dword [edi + 0x1f8]
push ebx
push 0x158
push ebx
pop eax
pop ebx
imul eax, ebx
pop ebx
mov ebx, eax
push ebx
push ecx
push edx
push esi
push edi
push ebp
push 4
push 0x1000
push ebx
push 0
call sub.KERNEL32.dll_VirtualAlloc
pop ebp
pop edi
pop esi
pop edx
pop ecx
pop ebx
mov dword [edi + 0x200], eax
push 1
push edi
call fcn.004317bf
mov dword [0x44474b], 0
popal
leave
ret 8