Function at 0x1105d5c0
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1d28
call fcn.11164040
mov eax, dword [0x111ec774]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x1ccc], ecx
mov dword [ebp - 0x1cc4], esi
mov dword [ebp - 0x1cec], ebx
mov dword [ebp - 0x1cb8], edi
call dword [sym.imp.WinMM.DlL_timeGetTime]
mov edx, dword [esi + 0xc]
sub edx, dword [esi + 4]
mov ecx, dword [edi]
mov edi, dword [esi + 8]
sub edi, dword [esi]
mov dword [ebp - 0x1d14], eax
mov eax, dword [ebx]
mov dword [ebp - 0x1d10], eax
imul eax, edx
mov dword [ebp - 0x1cdc], edx
cdq
idiv edi
mov dword [ebp - 0x1d08], ecx
mov dword [ebp - 0x1cf4], edi
cmp eax, ecx
jg 0x1105d642
mov ecx, dword [ebp - 0x1cb8]
mov dword [ecx], eax
jmp 0x1105d653
mov eax, ecx
imul eax, edi
cdq
idiv dword [ebp - 0x1cdc]
and eax, 0xfffffffe
mov dword [ebx], eax
call fcn.11145ef0
mov ecx, dword [0x111ee100]
push 0
push 0
push 0x1119da68
push 0x111a0f40
call fcn.1105e820
push 0
call dword [sym.imp.uSEr32.dll_GetDC]
push 0
mov dword [ebp - 0x1cbc], eax
call dword [sym.imp.Gdi32.Dll_CreateCompatibleDC]
push 0x428
lea edx, [ebp - 0x1cb4]
mov esi, eax
push 0
push edx
mov dword [ebp - 0x1d00], esi
call fcn.11162be0
mov edx, dword [ebp - 0x1cbc]
mov eax, dword [ebp - 0x1cdc]
add esp, 0xc
push 0xe
mov dword [ebp - 0x1cb0], edi
mov edi, dword [sym.imp.Gdi32.Dll_GetDeviceCaps]
mov ecx, 1
push edx
mov dword [ebp - 0x1cb4], 0x28
mov dword [ebp - 0x1cac], eax
mov word [ebp - 0x1ca8], cx
call edi
mov ecx, dword [ebp - 0x1cbc]
push 0xc
push ecx
mov dword [ebp - 0x1cf0], eax
call edi
mov ecx, dword [ebp - 0x1cf0]
imul ecx, eax
push 0
mov word [ebp - 0x1ca6], cx
call dword [sym.imp.Gdi32.Dll_CreateCompatibleDC]
mov edi, eax
xor eax, eax
mov dword [ebp - 0x1cc0], edi
mov dword [ebp - 0x1cf0], eax
mov dword [ebp - 0x1cc8], eax
mov dword [ebp - 0x1cd0], eax
mov dword [ebp - 0x1d04], eax
call fcn.1109ee00
test eax, eax
je 0x1105d86b
mov ecx, dword [0x111ee308]
mov edx, dword [ecx]
mov edx, dword [edx + 0x18]
lea eax, [ebp - 0x1d04]
push eax
lea eax, [ebp - 0x24]
push eax
call edx
test eax, eax
je 0x1105d86b
mov eax, dword [ebp - 0x1d04]
push eax
call dword [sym.imp.uSEr32.dll_CloseDesktop]
lea ecx, [ebp - 0x24]
push 0x111ea720
push ecx
call fcn.11081e70
add esp, 8
test eax, eax
je 0x1105d86b
mov eax, dword [ebp - 0x1cac]
cdq
mov ecx, eax
movzx eax, word [ebp - 0x1ca6]
imul eax, dword [ebp - 0x1cb0]
xor ecx, edx
sub ecx, edx
cdq
and edx, 0x1f
add eax, edx
sar eax, 5
imul ecx, eax
add ecx, ecx
lea edx, [ebp - 0x1d28]
add ecx, ecx
push edx
mov dword [ebp - 0x1ce8], ecx
call fcn.110ee230
add esp, 4
test eax, eax
je 0x1105d86b
call dword [sym.imp.KeRneL32.DLl_GetCurrentThreadId]
push eax
lea eax, [ebp - 0x64]
push 0x111a0e44
push eax
call dword [sym.imp.uSEr32.dll_wsprintfA]
mov edx, dword [ebp - 0x1ce8]
add esp, 0xc
lea ecx, [ebp - 0x64]
push ecx
add edx, 0x42c
push edx
push 0
push 4
lea eax, [ebp - 0x1d28]
push eax
push 0xffffffffffffffff
call dword [sym.imp.KeRneL32.DLl_CreateFileMappingA]
mov dword [ebp - 0x1cc8], eax
test eax, eax
je 0x1105d86b
push 0
push 0
push 0
push 2
mov ecx, eax
push ecx
call dword [sym.imp.KeRneL32.DLl_MapViewOfFile]
mov dword [ebp - 0x1cf0], eax
test eax, eax
je 0x1105d854
lea edi, [eax + 4]
mov ecx, 0x10a
lea esi, [ebp - 0x1cb4]
mov dword [eax], 0x42c
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x1d00]
mov edi, dword [ebp - 0x1cc0]
mov dword [ebp - 0x1cd0], 0x42c
jmp 0x1105d86b
mov edx, dword [ebp - 0x1cc8]
push edx
call dword [sym.imp.KeRneL32.DLl_CloseHandle]
mov dword [ebp - 0x1cc8], 0
mov eax, dword [ebp - 0x1cd0]
mov ecx, dword [ebp - 0x1cc8]
push eax
push ecx
lea edx, [ebp - 0x1d1c]
push edx
push 0
lea eax, [ebp - 0x1cb4]
push eax
push edi
call dword [sym.imp.Gdi32.Dll_CreateDIBSection]
push eax
push edi
mov dword [ebp - 0x1cd8], eax
call dword [sym.imp.Gdi32.Dll_SelectObject]
cmp dword [ebp - 0x1cc8], 0
mov dword [ebp - 0x1d0c], eax
je 0x1105d8bf
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x64]
push edx
call fcn.1105d3b0
add esp, 8
jmp 0x1105d900
mov eax, dword [ebp - 0x1cc4]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
mov eax, dword [ebp - 0x1cbc]
push 0xcc0020
push ecx
mov ecx, dword [ebp - 0x1cdc]
push edx
mov edx, dword [ebp - 0x1cf4]
push eax
push ecx
push edx
push 0
push 0
push edi
call dword [sym.imp.Gdi32.Dll_BitBlt]
push 0
push 0
push 0
push edi
call fcn.110b41c0
add esp, 0x10
mov edi, dword [ebp - 0x1cb8]
mov eax, dword [edi]
mov ecx, dword [ebx]
mov edx, dword [ebp - 0x1cbc]
push eax
push ecx
push edx
call dword [sym.imp.Gdi32.Dll_CreateCompatibleBitmap]
push eax
push esi
mov dword [ebp - 0x1cd0], eax
call dword [sym.imp.Gdi32.Dll_SelectObject]
mov ecx, dword [edi]
mov dword [ebp - 0x1d18], eax
mov eax, dword [ebx]
imul eax, dword [ebp + 0x14]
add eax, 0x1f
cdq
and edx, 0x1f
lea edi, [edx + eax]
sar edi, 5
imul edi, ecx
add edi, edi
add edi, edi
push edi
mov dword [ebp - 0x1ce8], edi
call fcn.11163a11
push 0x428
mov dword [ebp - 0x1cd4], eax
lea eax, [ebp - 0x188c]
push 0
push eax
call fcn.11162be0
mov eax, dword [ebx]
mov ecx, dword [ebp - 0x1cb8]
mov dword [ebp - 0x1888], eax
mov eax, dword [ecx]
add esp, 0x10
mov dword [ebp - 0x1884], eax
mov ax, word [ebp + 0x14]
push 4
mov edx, 1
push esi
mov dword [ebp - 0x188c], 0x28
mov word [ebp - 0x1880], dx
mov word [ebp - 0x187e], ax
mov dword [ebp - 0x186c], 0
call dword [sym.imp.Gdi32.Dll_SetStretchBltMode]
mov ecx, dword [ebp - 0x1cdc]
mov edx, dword [ebp - 0x1cf4]
mov eax, dword [ebp - 0x1cc0]
push 0xcc0020
push ecx
mov ecx, dword [ebp - 0x1cb8]
push edx
mov edx, dword [ecx]
push 0
push 0
push eax
mov eax, dword [ebx]
push edx
push eax
push 0
push 0
push esi
call dword [sym.imp.Gdi32.Dll_StretchBlt]
test eax, eax
jne 0x1105da0a
call dword [sym.imp.KeRneL32.DLl_GetLastError]
push eax
push 0
push 0x111a0e28
call fcn.11147060
add esp, 0xc
cmp dword [ebp + 0x14], 8
mov dword [ebp - 0x1ce0], 0
jne 0x1105dc3d
cmp word [ebp - 0x1ca6], 0x20
jne 0x1105dc3d
mov ecx, dword [0x111ee100]
push 0
push 0
push 0x111a0e14
push 0x111a0f40
call fcn.1105e820
test eax, eax
jne 0x1105dc3d
mov edx, dword [ebx]
mov ecx, dword [ebp - 0x1cb8]
add edx, 3
and edx, 0xfffffffc
imul edx, dword [ecx]
add edx, edx
add edx, edx
push edx
call fcn.11163a11
add esp, 4
mov dword [ebp - 0x1cfc], eax
test eax, eax
je 0x1105dc3d
push 0
lea edx, [ebp - 0x188c]
push edx
push eax
mov eax, dword [ebp - 0x1cb8]
mov eax, dword [eax]
push eax
mov ecx, 0x20
mov word [ebp - 0x187e], cx
mov ecx, dword [ebp - 0x1cd0]
push 0
push ecx
push esi
call dword [sym.imp.Gdi32.Dll_GetDIBits]
push 0x1000
lea edx, [ebp - 0x1064]
push 0
push edx
mov dword [ebp - 0x1cc4], eax
call fcn.11162be0
mov ecx, dword [0x111ee100]
add esp, 0xc
push 0
push 0
push 0x111a0e04
push 0x111a0f50
call fcn.1105e820
mov ecx, dword [ebx]
mov dword [ebp - 0x1ce4], eax
mov eax, dword [ebp - 0x1cb8]
mov edx, dword [eax]
cmp dword [ebp - 0x1cc4], edx
jne 0x1105dc19
lea eax, [ebp - 0x1064]
push eax
lea eax, [ebp - 0x1464]
push eax
mov eax, dword [ebp - 0x1ce4]
push eax
push 1
lea eax, [ecx*4]
push eax
push edx
push ecx
mov ecx, dword [ebp - 0x1cfc]
push ecx
call fcn.1108c170
add esp, 0x20
mov dword [ebp - 0x1ce0], eax
test eax, eax
je 0x1105dc19
xor ecx, ecx
test eax, eax
jle 0x1105db72
lea ecx, [ecx]
movzx edx, byte [ebp + ecx*4 - 0x1464]
mov byte [ebp + ecx*4 - 0x1862], dl
movzx edx, byte [ebp + ecx*4 - 0x1463]
mov byte [ebp + ecx*4 - 0x1863], dl
movzx edx, byte [ebp + ecx*4 - 0x1462]
mov byte [ebp + ecx*4 - 0x1864], dl
inc ecx
cmp ecx, eax
jl 0x1105db40
mov edx, dword [ebp - 0x1cb8]
cmp dword [edx], 0
mov eax, dword [ebp - 0x1cfc]
mov ecx, dword [ebp - 0x1cd4]
mov dword [ebp - 0x1ce4], 0
jle 0x1105dc25
jmp 0x1105dba0
xor edx, edx
mov dword [ebp - 0x1cf8], edx
cmp dword [ebx], edx
jle 0x1105dbeb
lea esp, [esp]
movzx edx, byte [eax + 2]
movzx esi, byte [eax + 1]
and edx, 0xfffffff0
and esi, 0xfffffff0
shl edx, 4
or edx, esi
movzx esi, byte [eax]
shr esi, 4
or edx, esi
mov esi, dword [ebp - 0x1cf8]
mov dl, byte [ebp + edx - 0x1064]
mov byte [ecx], dl
inc esi
inc ecx
add eax, 4
mov dword [ebp - 0x1cf8], esi
cmp esi, dword [ebx]
jl 0x1105dbb0
mov edx, esi
test dl, 3
je 0x1105dbfa
mov byte [ecx], 0
inc edx
inc ecx
test dl, 3
jne 0x1105dbf0
mov edx, dword [ebp - 0x1ce4]
mov esi, dword [ebp - 0x1cb8]
inc edx
mov dword [ebp - 0x1ce4], edx
cmp edx, dword [esi]
jl 0x1105dba0
mov esi, dword [ebp - 0x1d00]
jmp 0x1105dc25
mov eax, 8
mov word [ebp - 0x187e], ax
mov ecx, dword [ebp - 0x1cfc]
push ecx
call fcn.11163aa5
add esp, 4
cmp dword [ebp - 0x1ce0], 0
jne 0x1105dc68
mov eax, dword [ebp - 0x1cd4]
mov ecx, dword [ebp - 0x1cb8]
push 0
lea edx, [ebp - 0x188c]
push edx
mov edx, dword [ecx]
push eax
mov eax, dword [ebp - 0x1cd0]
push edx
push 0
push eax
push esi
call dword [sym.imp.Gdi32.Dll_GetDIBits]
jmp 0x1105dc6e
mov eax, dword [ebp - 0x1cc4]
mov ecx, dword [ebp - 0x1cb8]
cmp eax, dword [ecx]
jge 0x1105dc86
push eax
push 0x111a0dec
call fcn.11147060
add esp, 8
call dword [sym.imp.WinMM.DlL_timeGetTime]
mov edx, dword [ebp - 0x1d18]
push edx
push esi
mov dword [ebp - 0x1ce0], eax
call dword [sym.imp.Gdi32.Dll_SelectObject]
mov eax, dword [ebp - 0x1cd0]
mov ebx, dword [sym.imp.Gdi32.Dll_DeleteObject]
push eax
call ebx
push esi
mov esi, dword [sym.imp.Gdi32.Dll_DeleteDC]
call esi
mov ecx, dword [ebp - 0x1cbc]
push ecx
push 0
call dword [sym.imp.uSEr32.dll_ReleaseDC]
mov edx, dword [ebp - 0x1d0c]
mov eax, dword [ebp - 0x1cc0]
push edx
push eax
call dword [sym.imp.Gdi32.Dll_SelectObject]
mov ecx, dword [ebp - 0x1cd8]
push ecx
call ebx
mov edx, dword [ebp - 0x1cc0]
push edx
call esi
mov ecx, dword [ebp + 0x14]
mov eax, 1
shl eax, cl
xor edx, edx
mov dword [ebp - 0x1cbc], edx
mov dword [ebp - 0x1cd8], eax
cmp ecx, 8
jg 0x1105dd6e
mov esi, dword [ebp - 0x1ccc]
lea ecx, [eax + eax*2]
add eax, eax
add eax, eax
add esi, 0x60
mov dword [ebp - 0x1cbc], ecx
lea ecx, [ebp - 0x1864]
cmp eax, 4
jb 0x1105dd44
jmp 0x1105dd30
mov ebx, dword [esi]
cmp ebx, dword [ecx]
jne 0x1105dd6e
sub eax, 4
add ecx, 4
add esi, 4
cmp eax, 4
jae 0x1105dd30
cmp eax, edx
je 0x1105dd68
mov bl, byte [ecx]
cmp bl, byte [esi]
jne 0x1105dd6e
cmp eax, 1
jbe 0x1105dd68
mov bl, byte [ecx + 1]
cmp bl, byte [esi + 1]
jne 0x1105dd6e
cmp eax, 2
jbe 0x1105dd68
mov al, byte [ecx + 2]
cmp al, byte [esi + 2]
jne 0x1105dd6e
mov dword [ebp - 0x1cbc], edx
mov eax, 0x51eb851f
imul edi
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x1cbc]
lea esi, [ecx + edi + 0x120]
lea eax, [esi + edx + 0x25]
push eax
mov dword [ebp - 0x1cc4], esi
call fcn.11163a11
mov ebx, eax
xor eax, eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
mov dword [ebx + 0xc], eax
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x18], eax
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x20], eax
mov byte [ebx + 0x24], al
mov eax, dword [ebp - 0x1ccc]
mov ecx, dword [eax + 0x58]
add esp, 4
test cl, 8
je 0x1105de43
mov edx, 0xab
mov word [ebx], dx
mov eax, dword [eax + 0x58]
test al, 0x10
je 0x1105dde1
or dword [ebx + 2], 0x10
mov ecx, dword [0x111ee308]
mov edx, dword [ecx]
mov eax, dword [edx + 0xe0]
call eax
test eax, eax
je 0x1105ddf9
or dword [ebx + 2], 1
cmp dword [ebp - 0x1cbc], 0
je 0x1105de06
or dword [ebx + 2], 2
mov ecx, dword [ebp - 0x1cec]
mov dx, word [ecx]
mov eax, dword [ebp - 0x1cb8]
mov word [ebx + 6], dx
mov cx, word [eax]
mov dl, byte [ebp + 0x14]
mov al, byte [ebp + 0x18]
mov word [ebx + 8], cx
mov ecx, dword [ebp - 0x1ccc]
mov byte [ebx + 0xc], dl
mov byte [ebx + 0xd], al
mov edx, dword [ecx + 0x5c]
mov byte [ebx + 0xe], dl
lea edx, [ebx + 0x1f]
mov dword [ebp - 0x1cc0], edx
jmp 0x1105dea1
mov eax, 0x9b
mov word [ebx], ax
mov ecx, dword [0x111ee308]
mov edx, dword [ecx]
mov eax, dword [edx + 0xe0]
call eax
test eax, eax
je 0x1105de63
or dword [ebx + 2], 1
cmp dword [ebp - 0x1cbc], 0
je 0x1105de70
or dword [ebx + 2], 2
mov ecx, dword [ebp - 0x1cec]
mov dx, word [ecx]
mov eax, dword [ebp - 0x1cb8]
mov word [ebx + 6], dx
mov cx, word [eax]
mov dl, byte [ebp + 0x14]
mov al, byte [ebp + 0x18]
mov word [ebx + 8], cx
lea ecx, [ebx + 0xe]
mov byte [ebx + 0xc], dl
mov byte [ebx + 0xd], al
mov dword [ebp - 0x1cc0], ecx
mov edx, ecx
cmp dword [ebp - 0x1cbc], 0
je 0x1105df0a
mov edi, dword [ebp - 0x1ccc]
add edi, 0x60
mov ecx, 0x100
lea esi, [ebp - 0x1864]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x1cd8]
xor eax, eax
test esi, esi
jle 0x1105defe
lea esp, [esp]
movzx ecx, byte [ebp + eax*4 - 0x1864]
mov byte [edx], cl
movzx ecx, byte [ebp + eax*4 - 0x1863]
mov byte [edx + 1], cl
movzx ecx, byte [ebp + eax*4 - 0x1862]
mov byte [edx + 2], cl
inc eax
add edx, 3
cmp eax, esi
jl 0x1105ded0
mov dword [ebp - 0x1cc0], edx
mov esi, dword [ebp - 0x1cc4]
mov edi, dword [ebp - 0x1ce8]
mov eax, dword [ebp + 0x14]
push esi
push edx
push edi
cmp eax, 0x10
jle 0x1105df23
mov edx, dword [ebp - 0x1cd4]
push edx
call fcn.110ee290
jmp 0x1105df42
cmp eax, 8
jle 0x1105df36
mov eax, dword [ebp - 0x1cd4]
push eax
call fcn.110ee510
jmp 0x1105df42
mov ecx, dword [ebp - 0x1cd4]
push ecx
call fcn.110ee5f0
add esp, 0x10
mov esi, eax
call dword [sym.imp.WinMM.DlL_timeGetTime]
mov edx, dword [ebp - 0x1cc0]
push esi
push edx
push 0
mov edi, eax
call fcn.11080810
mov ecx, dword [ebp - 0x1ccc]
add esp, 0xc
mov dword [ebp - 0x1cd8], eax
cmp esi, dword [ecx + 0x460]
jne 0x1105df7d
cmp eax, dword [ecx + 0x464]
je 0x1105dff2
mov eax, dword [ecx + 0x18]
test eax, eax
jne 0x1105dff2
mov edx, dword [ecx + 0x48]
mov eax, dword [ebp - 0x1cec]
cmp dword [eax], edx
je 0x1105df9e
mov edx, dword [ecx + 0x4c]
mov eax, dword [ebp - 0x1cb8]
cmp dword [eax], edx
jne 0x1105dff2
mov edx, dword [ecx + 0x50]
cmp dword [ebp + 0x14], edx
jne 0x1105dff2
mov eax, dword [ecx + 0x58]
mov ecx, dword [ecx + 0x20]
push 1
test al, 8
je 0x1105dfc7
mov eax, dword [ebp - 0x1cbc]
mov edx, dword [ecx]
mov edx, dword [edx + 0x44]
lea eax, [esi + eax + 0x20]
push eax
push ebx
call edx
jmp 0x1105dfda
mov edx, dword [ebp - 0x1cbc]
mov eax, dword [ecx]
mov eax, dword [eax + 0x44]
lea edx, [esi + edx + 0xf]
push edx
push ebx
call eax
mov eax, dword [ebp - 0x1ccc]
mov ecx, dword [ebp - 0x1cd8]
mov dword [eax + 0x464], ecx
mov dword [eax + 0x460], esi
call dword [sym.imp.WinMM.DlL_timeGetTime]
mov edx, dword [ebp - 0x1d08]
mov ecx, dword [ebp + 0x14]
sub eax, edi
push eax
mov eax, dword [ebp - 0x1ce0]
sub edi, eax
sub eax, dword [ebp - 0x1d14]
push edi
push eax
mov eax, dword [ebp - 0x1d10]
push esi
push edx
mov edx, dword [ebp - 0x1cb8]
push eax
mov eax, dword [edx]
push ecx
mov ecx, dword [ebp - 0x1cec]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x1cf4]
push eax
mov eax, dword [ebp - 0x1cdc]
push edx
push eax
push ecx
push 0x111a0d90
call fcn.11147060
push ebx
call fcn.11163aa5
mov edx, dword [ebp - 0x1cd4]
push edx
call fcn.11163aa5
mov eax, dword [ebp - 0x1cf0]
add esp, 0x38
pop edi
pop esi
pop ebx
test eax, eax
je 0x1105e071
push eax
call dword [sym.imp.KeRneL32.DLl_UnmapViewOfFile]
mov eax, dword [ebp - 0x1cc8]
test eax, eax
je 0x1105e082
push eax
call dword [sym.imp.KeRneL32.DLl_CloseHandle]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.11162bb7
mov esp, ebp
pop ebp
ret 0x14