Function at 0x4286e0
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x1a0
mov eax, dword [ebp + 8]
mov dword [esp + 0x17c], 0x43cc20
mov eax, dword [0x43d8e0]
mov dword [esp + 0xa4], eax
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_GetDC]
call eax
sub esp, 4
mov dword [esp + 0x40], eax
mov dword [esp], 0x4c
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
call edi
sub esp, 4
mov dword [esp + 0x178], eax
mov dword [esp], 0x4d
call edi
sub esp, 4
mov dword [esp + 0x174], eax
mov eax, dword [esp + 0x40]
mov dword [esp], eax
mov dword [esp + 4], 7
mov eax, dword [sym.imp.GDI32.dll_GetCurrentObject]
call eax
sub esp, 8
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x6c]
lea ecx, [esp + 0x180]
mov dword [esp + 8], ecx
mov dword [esp], eax
mov dword [esp + 4], 0x18
mov eax, dword [sym.imp.GDI32.dll_GetObjectW]
call eax
sub esp, 0xc
mov eax, dword [esp + 0x184]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x188]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_DeleteObject]
sub esp, 4
mov eax, dword [esp + 0x40]
mov dword [esp], eax
mov eax, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
call eax
sub esp, 4
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x40]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov eax, dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
call eax
sub esp, 0xc
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [sym.imp.GDI32.dll_SelectObject]
sub esp, 8
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 0x178]
mov edx, dword [esp + 0x40]
mov esi, dword [esp + 0x64]
mov edi, dword [esp + 0x68]
mov ebx, dword [esp + 0x48]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], edi
mov dword [esp], ebx
mov dword [esp + 0x20], 0xcc0020
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [sym.imp.GDI32.dll_BitBlt]
call eax
sub esp, 0x24
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x48]
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [sym.imp.GDI32.dll_SelectObject]
sub esp, 8
mov eax, dword [esp + 0x48]
mov dword [esp], eax
mov eax, dword [sym.imp.GDI32.dll_DeleteDC]
call eax
sub esp, 4
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_ReleaseDC]
call eax
sub esp, 8
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call dword [sym.imp.GDI32.dll_DeleteObject]
sub esp, 4
mov byte [esp + 0x33], 0
mov eax, dword [esp + 0x44]
mov dword [esp + 0x168], eax
mov dword [esp + 0x54], 0xa402c599
lea eax, [esp + 0x54]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0xa4]
xor ecx, 0x31559d6c
mov eax, dword [esp + 0x17c]
mov eax, dword [eax + ecx*4]
mov ecx, dword [0x43d8e4]
xor ecx, 0x852f3e66
sub eax, ecx
mov dword [esp + 0x164], 0x43cc20
mov esi, dword [0x43d8e8]
mov dword [esp + 0x160], 0x43d8f0
mov dword [esp + 0x158], 0x43d8fc
mov dword [esp + 0x150], 0x43d908
mov dword [esp + 0x148], 0x43d914
mov dword [esp + 0x140], 0x43d920
mov dword [esp + 0x138], 0x43d92c
mov dword [esp + 0x130], 0x43d938
mov dword [esp + 0x128], 0x43d944
mov dword [esp + 0x120], 0x43d950
mov dword [esp + 0x118], 0x43d95c
mov dword [esp + 0x110], 0x43d968
mov dword [esp + 0x108], 0x43d974
mov dword [esp + 0x100], 0x43d980
mov dword [esp + 0xf8], 0x43d98c
mov dword [esp + 0xf0], 0x43d998
mov dword [esp + 0xe8], 0x43cc20
mov edi, dword [0x43d9a4]
mov dword [esp + 0xe4], 0x43cc20
mov ecx, dword [0x43d9ac]
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xe0], 0x43cc20
mov ecx, dword [0x43d9b4]
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xdc], 0x43cc20
mov ecx, dword [0x43d9bc]
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xd8], 0x43cc20
mov ecx, dword [0x43d9c4]
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xd4], 0x43cc20
mov ecx, dword [0x43d9cc]
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xd0], 0x43cc20
mov ecx, dword [0x43d9d4]
mov dword [esp + 0xac], ecx
mov dword [esp + 0xcc], 0x43cc20
mov ecx, dword [0x43d9dc]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xc8], 0x43cc20
mov ebx, dword [0x43d9e4]
jmp eax