Function at 0x424895
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb0
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
push 0x69
push ebx
call sub.USER32.dll_GetDlgItem
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x424cce
push dword [ebp - 0x30]
call sub.USER32.dll_GetDC
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x424cce
lea eax, [ebp - 0x40]
push eax
push 0x69
push ebx
call sub.USER32.dll_GetDlgItem
push eax
call sub.USER32.dll_GetClientRect
cmp dword [0x532a54], 0
jne 0x4248ec
dec dword [ebp - 0x38]
dec dword [ebp - 0x34]
mov dword [ebp - 0x24], 0x12
push dword [ebp - 0x28]
call sub.GDI32.dll_CreateCompatibleDC
mov ebx, eax
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push dword [ebp - 0x28]
call sub.GDI32.dll_CreateCompatibleBitmap
mov dword [ebp - 4], eax
push dword [ebp - 4]
push ebx
call sub.GDI32.dll_SelectObject
mov dword [ebp - 8], eax
push 0x52a654
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push 0x48
push 0x5a
push dword [ebp - 0x28]
call sub.GDI32.dll_GetDeviceCaps
push eax
push 8
call sub.KERNEL32.dll_MulDiv
neg eax
push eax
call sub.GDI32.dll_CreateFontA
mov dword [ebp - 0x14], eax
push dword [ebp - 0x14]
push ebx
call sub.GDI32.dll_SelectObject
mov dword [ebp - 0x18], eax
mov eax, dword [0x547ebc]
push dword [eax*4 + 0x54823c]
call sub.GDI32.dll_CreateSolidBrush
mov edi, eax
push edi
lea eax, [ebp - 0x40]
push eax
push ebx
call sub.USER32.dll_FillRect
push edi
call sub.GDI32.dll_DeleteObject
mov edx, dword [0x547ebc]
push dword [edx*4 + 0x54823c]
push ebx
call sub.GDI32.dll_SetBkColor
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x20], 3
mov esi, 1
mov edi, 0x547ec0
jmp 0x424a4d
mov eax, dword [edi + 0x18]
push dword [eax*4 + 0x54823c]
push ebx
call sub.GDI32.dll_SetTextColor
mov dword [ebp - 0xc], eax
push 0
imul edx, esi, 0x1c
add edx, 0x547ea4
push edx
call fcn.005183dc
pop ecx
push eax
imul ecx, esi, 0x1c
add ecx, 0x547ea4
push ecx
lea eax, [ebp - 0x40]
push eax
push 4
push dword [ebp - 0x20]
push dword [ebp - 0x1c]
push ebx
call sub.GDI32.dll_ExtTextOutA
push dword [ebp - 0xc]
push ebx
call sub.GDI32.dll_SetTextColor
inc esi
add edi, 0x1c
add dword [ebp - 0x20], 0xf
mov edx, dword [ebp - 0x24]
add edx, 0xf
mov ecx, dword [ebp - 0x34]
sub ecx, edx
cmp ecx, dword [ebp - 0x20]
jg 0x424a2d
mov dword [ebp - 0x1c], 0x67
mov dword [ebp - 0x20], 3
cmp esi, 0x1e
jge 0x424a56
push 0x52a663
imul eax, esi, 0x1c
add eax, 0x547ea4
push eax
call fcn.005185a0
add esp, 8
test eax, eax
je 0x424a56
cmp byte [edi], 0
jne 0x4249bc
push dword [ebp - 0x10]
push ebx
call sub.GDI32.dll_SetBkColor
xor edx, edx
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x34]
mov edx, eax
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x4c], edx
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x44], eax
push 0
push 1
push 0
call sub.GDI32.dll_CreatePen
mov edi, eax
push edi
push ebx
call sub.GDI32.dll_SelectObject
mov dword [ebp - 0x2c], eax
push 0
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push ebx
call sub.GDI32.dll_MoveToEx
push dword [ebp - 0x4c]
push dword [ebp - 0x48]
push ebx
call sub.GDI32.dll_LineTo
push dword [ebp - 0x2c]
push ebx
call sub.GDI32.dll_SelectObject
push edi
call sub.GDI32.dll_DeleteObject
inc dword [ebp - 0x4c]
mov eax, esi
shl eax, 3
sub eax, esi
mov edx, dword [eax*4 + 0x547ebc]
push dword [edx*4 + 0x54823c]
call sub.GDI32.dll_CreateSolidBrush
mov edi, eax
push edi
lea eax, [ebp - 0x50]
push eax
push ebx
call sub.USER32.dll_FillRect
push edi
call sub.GDI32.dll_DeleteObject
mov edx, esi
shl edx, 3
sub edx, esi
mov ecx, dword [edx*4 + 0x547ebc]
push dword [ecx*4 + 0x54823c]
push ebx
call sub.GDI32.dll_SetBkColor
mov dword [ebp - 0x10], eax
inc esi
mov eax, esi
shl eax, 3
sub eax, esi
mov edx, dword [eax*4 + 0x547ebc]
push dword [edx*4 + 0x54823c]
push ebx
call sub.GDI32.dll_SetTextColor
mov dword [ebp - 0xc], eax
push 0
imul ecx, esi, 0x1c
add ecx, 0x547ea4
push ecx
call fcn.005183dc
pop ecx
push eax
imul eax, esi, 0x1c
add eax, 0x547ea4
push eax
lea edx, [ebp - 0x40]
push edx
push 4
mov ecx, dword [ebp - 0x4c]
add ecx, 2
push ecx
push 5
push ebx
call sub.GDI32.dll_ExtTextOutA
push dword [ebp - 0xc]
push ebx
call sub.GDI32.dll_SetTextColor
push dword [ebp - 0x10]
push ebx
call sub.GDI32.dll_SetBkColor
mov eax, dword [ebp - 0x38]
mov edx, eax
add edx, 0xffffffa6
mov dword [ebp - 0x50], edx
xor ecx, ecx
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x44], eax
push 0
push 1
push 0
call sub.GDI32.dll_CreatePen
mov edi, eax
push edi
push ebx
call sub.GDI32.dll_SelectObject
mov dword [ebp - 0x2c], eax
push 0
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push ebx
call sub.GDI32.dll_MoveToEx
push dword [ebp - 0x44]
push dword [ebp - 0x50]
push ebx
call sub.GDI32.dll_LineTo
push dword [ebp - 0x2c]
push ebx
call sub.GDI32.dll_SelectObject
push edi
call sub.GDI32.dll_DeleteObject
inc dword [ebp - 0x50]
inc esi
mov eax, esi
shl eax, 3
sub eax, esi
mov edx, dword [eax*4 + 0x547ebc]
push dword [edx*4 + 0x54823c]
call sub.GDI32.dll_CreateSolidBrush
mov edi, eax
push edi
lea eax, [ebp - 0x50]
push eax
push ebx
call sub.USER32.dll_FillRect
push edi
call sub.GDI32.dll_DeleteObject
mov edx, esi
shl edx, 3
sub edx, esi
mov ecx, dword [edx*4 + 0x547ebc]
push dword [ecx*4 + 0x54823c]
push ebx
call sub.GDI32.dll_SetBkColor
mov dword [ebp - 0x10], eax
inc esi
mov dword [ebp - 0x20], 3
mov eax, esi
shl eax, 3
sub eax, esi
mov edx, dword [eax*4 + 0x547ebc]
push dword [edx*4 + 0x54823c]
push ebx
call sub.GDI32.dll_SetTextColor
mov dword [ebp - 0xc], eax
push 0
imul ecx, esi, 0x1c
add ecx, 0x547ea4
push ecx
call fcn.005183dc
pop ecx
push eax
imul eax, esi, 0x1c
add eax, 0x547ea4
push eax
lea edx, [ebp - 0x40]
push edx
push 4
push dword [ebp - 0x20]
mov ecx, dword [ebp - 0x50]
add ecx, 4
push ecx
push ebx
call sub.GDI32.dll_ExtTextOutA
push dword [ebp - 0x10]
push ebx
call sub.GDI32.dll_SetBkColor
push dword [ebp - 0xc]
push ebx
call sub.GDI32.dll_SetTextColor
push dword [ebp - 0x18]
push ebx
call sub.GDI32.dll_SelectObject
push dword [ebp - 0x14]
call sub.GDI32.dll_DeleteObject
push 0xcc0020
push 0
push 0
push ebx
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 0
push 0
push dword [ebp - 0x28]
call sub.GDI32.dll_BitBlt
push dword [ebp - 8]
push ebx
call sub.GDI32.dll_SelectObject
push dword [ebp - 4]
call sub.GDI32.dll_DeleteObject
push ebx
call sub.GDI32.dll_DeleteDC
push dword [ebp - 0x28]
push dword [ebp - 0x30]
call sub.USER32.dll_ReleaseDC
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4