Function at 0x42bde0
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
movzx ecx, byte [eax + 0x9e]
test ecx, ecx
jne 0x42bdfe
xor eax, eax
jmp 0x42c032
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetParent]
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + 0x64]
push edx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax + 0x60]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x1c]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 8], eax
mov byte [ebp - 4], 0
xor edx, edx
mov word [ebp - 3], dx
mov byte [ebp - 1], dl
mov byte [ebp - 4], 0
mov byte [ebp - 3], 0
mov byte [ebp - 1], 1
mov byte [ebp - 2], 0xff
push 0xcc0020
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax + 0x5c]
push ecx
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx + 0x58]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx + 0x64]
push eax
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + 0x60]
push edx
push 0
push 0
mov eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + 0x16c]
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 1
je 0x42bed3
cmp dword [ebp - 0x40], 2
je 0x42bf05
cmp dword [ebp - 0x40], 3
je 0x42bf34
jmp 0x42bf63
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax + 0xf8]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x38]
push eax
push 0x18
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + 0xf8]
push edx
call dword [sym.imp.GDI32.dll_GetObjectA]
jmp 0x42bf9d
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax + 0xfc]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x38]
push eax
push 0x18
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + 0xfc]
push edx
call dword [sym.imp.GDI32.dll_GetObjectA]
jmp 0x42bf9d
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax + 0x100]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x38]
push eax
push 0x18
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + 0x100]
push edx
call dword [sym.imp.GDI32.dll_GetObjectA]
jmp 0x42bf9d
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax + 0xf8]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x38]
push eax
push 0x18
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + 0xf8]
push edx
call dword [sym.imp.GDI32.dll_GetObjectA]
mov eax, dword [ebp - 0x3c]
mov dword [eax + 0x16c], 1
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x34]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx + 0x64]
push eax
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + 0x60]
push edx
push 0
push 0
mov eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.MSIMG32.dll_AlphaBlend]
mov ecx, dword [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
push 0xcc0020
push 0
push 0
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx + 0x64]
push eax
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ecx + 0x60]
push edx
push 0
push 0
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [ebp - 0x1c]
push ecx
call dword [sym.imp.GDI32.dll_DeleteDC]
xor eax, eax
mov esp, ebp
pop ebp
ret 8