Function at 0x541bce
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
sub esp, 0x104
mov eax, 0
mov dword [ebp - 0xc], 0
push 0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
push eax
call fcn.0053be55
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 8]
push eax
call fcn.0044e8d0
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov edx, dword [0x580a80]
cmp eax, edx
jne 0x541c5b
push dword [ebp + 8]
call fcn.0053c00a
mov dword [ebp - 0xc], eax
mov eax, 0
mov edx, dword [ebp - 0xc]
cmp eax, edx
jne 0x541c3b
mov eax, dword [0x576784]
mov dword [ebp - 0x54], eax
jmp 0x541c53
push dword [ebp + 8]
call fcn.00455f1d
add eax, 0x40
mov dword [ebp - 0x54], eax
push dword [ebp - 0x54]
call fcn.0052dbf1
mov eax, dword [ebp - 0x54]
jmp 0x541f98
mov eax, dword [0x580984]
mov edx, dword [ebp - 0x50]
cmp eax, edx
sete al
xor ah, ah
cwde
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, 0
je 0x541ce0
push 2
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
push eax
call fcn.0053be55
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 8]
push eax
fild dword [esp]
fstp dword [esp]
call fcn.0053bcf6
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0xc]
push eax
fild dword [esp]
fstp dword [esp]
call fcn.0053bcf6
mov dword [ebp - 0x2c], eax
mov eax, 0
xchg edx, eax
lea eax, [ebp - 0x24]
mov dword [eax], edx
mov eax, 0
xchg edx, eax
lea eax, [ebp - 0x24]
mov dword [eax + 4], edx
mov eax, dword [0x581508]
mov dword [ebp - 0x10], eax
jmp 0x541d48
push dword [ebp + 8]
call fcn.0053c00a
mov dword [ebp - 0xc], eax
mov eax, 0
mov edx, dword [ebp - 0xc]
cmp eax, edx
jne 0x541d01
mov eax, dword [0x576784]
jmp 0x541f98
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0xc]
call dword [sym.imp.USER32.DLL_GetWindowRect]
lea eax, [ebp - 0x24]
mov eax, dword [eax + 8]
xchg edx, eax
lea eax, [ebp - 0x24]
mov eax, dword [eax]
xchg edx, eax
sub eax, edx
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x24]
mov eax, dword [eax + 0xc]
xchg edx, eax
lea eax, [ebp - 0x24]
mov eax, dword [eax + 4]
xchg edx, eax
sub eax, edx
mov dword [ebp - 0x2c], eax
push dword [ebp - 0xc]
call dword [sym.imp.USER32.DLL_GetDC]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x50]
mov edx, dword [0x580a48]
cmp eax, edx
jne 0x541e3e
push dword [ebp - 0x10]
push dword [ebp - 0xc]
call dword [sym.imp.USER32.DLL_ReleaseDC]
push 0
push 0
push 0
push dword [ebp - 0x2c]
push dword [ebp - 0x28]
call fcn.0043a8a6
mov dword [ebp - 0x30], eax
push dword [ebp - 0x30]
call fcn.0048aca9
push eax
call fcn.00472e67
mov dword [ebp - 0x54], eax
push dword [ebp + 8]
call fcn.00455f1d
add eax, 0x160
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
and eax, 0xff
cmp eax, 5
jne 0x541dc9
xor eax, eax
inc eax
push eax
xor eax, eax
inc eax
push eax
xor eax, eax
push eax
xor eax, eax
push eax
push dword [ebp - 0x40]
push dword [ebp - 0x54]
push dword [ebp - 0xc]
call fcn.00546b37
jmp 0x541e36
mov eax, 0x7fffffff
push dword [ebp - 4]
push dword [ebp - 8]
mov dword [ebp - 4], eax
call 0x541ddc
pop eax
add eax, 0x3b
mov dword [ebp - 8], eax
xor eax, eax
inc eax
push eax
xor eax, eax
push eax
push dword [ebp - 0x54]
push dword [ebp - 0xc]
lea eax, [ebp - 0x10c]
push eax
call fcn.00533d7b
xor eax, eax
inc eax
push eax
xor eax, eax
push eax
xor eax, eax
push eax
push dword [ebp - 0xc]
lea eax, [ebp - 0x10c]
push eax
call fcn.0053446a
mov esp, ebp
sub esp, 0x114
pop dword [ebp - 8]
pop dword [ebp - 4]
mov eax, 0
xchg edx, eax
mov eax, dword [0x54802c]
mov dword [eax + 0x24], edx
mov eax, dword [ebp - 0x54]
jmp 0x541f98
push dword [ebp - 0x10]
call dword [sym.imp.GDI32.DLL_CreateCompatibleDC]
mov dword [ebp - 0x14], eax
push dword [ebp - 0x2c]
push dword [ebp - 0x28]
push dword [ebp - 0x10]
call dword [sym.imp.GDI32.DLL_CreateCompatibleBitmap]
mov dword [ebp - 0x30], eax
push dword [ebp - 0x30]
push dword [ebp - 0x14]
call dword [sym.imp.GDI32.DLL_SelectObject]
mov eax, dword [ebp - 0x44]
cmp eax, 0
je 0x541eab
mov eax, 0xcc0020
or eax, 0x40000000
push eax
lea eax, [ebp - 0x24]
mov eax, dword [eax + 4]
push eax
lea eax, [ebp - 0x24]
mov eax, dword [eax]
push eax
push dword [0x581508]
push dword [ebp - 0x2c]
push dword [ebp - 0x28]
push 0
push 0
push dword [ebp - 0x14]
call dword [sym.imp.GDI32.DLL_BitBlt]
jmp 0x541f5e
mov eax, dword [0x581654]
cmp eax, 0
je 0x541eca
push 2
push dword [ebp - 0x14]
push dword [ebp - 0xc]
call dword [sym.imp.USER32.DLL_PrintWindow]
jmp 0x541f5e
mov eax, 0
xchg edx, eax
lea eax, [ebp - 0x4c]
mov dword [eax], edx
mov eax, 0
xchg edx, eax
lea eax, [ebp - 0x4c]
mov dword [eax + 4], edx
mov eax, dword [0x580990]
mov edx, dword [ebp - 0x50]
cmp eax, edx
jne 0x541f33
lea eax, [ebp - 0x4c]
push eax
push dword [ebp - 0xc]
call dword [sym.imp.USER32.DLL_ClientToScreen]
lea eax, [ebp - 0x4c]
mov eax, dword [eax]
xchg edx, eax
lea eax, [ebp - 0x24]
mov eax, dword [eax]
xchg edx, eax
sub eax, edx
mov edx, eax
lea eax, [ebp - 0x4c]
mov dword [eax], edx
lea eax, [ebp - 0x4c]
mov eax, dword [eax + 4]
xchg edx, eax
lea eax, [ebp - 0x24]
mov eax, dword [eax + 4]
xchg edx, eax
sub eax, edx
mov edx, eax
lea eax, [ebp - 0x4c]
mov dword [eax + 4], edx
push 0
push dword [ebp - 0x14]
push dword [ebp - 0xc]
call dword [sym.imp.USER32.DLL_PrintWindow]
push 0
lea eax, [ebp - 0x4c]
mov eax, dword [eax + 4]
push eax
lea eax, [ebp - 0x4c]
mov eax, dword [eax]
push eax
push dword [ebp - 0xc]
push dword [ebp - 0x14]
call fcn.005308b0
push 0
push dword [ebp - 0x30]
call fcn.0043b360
mov dword [ebp - 0x34], eax
push dword [ebp - 0x14]
call dword [sym.imp.GDI32.DLL_DeleteDC]
push dword [ebp - 0x30]
call dword [sym.imp.GDI32.DLL_DeleteObject]
mov eax, dword [ebp - 0x44]
xor al, 1
cmp eax, 0
je 0x541f95
push dword [ebp - 0x10]
push dword [ebp - 0xc]
call dword [sym.imp.USER32.DLL_ReleaseDC]
mov eax, dword [ebp - 0x34]
leave
ret 4