Function at 0x412e34
Capabilities:
Capture screenshot
Encode data using xor

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xffffffb8
mov dword [esp], eax
xor eax, eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x38], 2
xor eax, eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x3c], 1
push 0x10
lea eax, [esp + 0x34]
push eax
mov eax, dword [0x42baa0]
push eax
call sub.user32.dll_FillRect
push 0
push 0
mov eax, dword [0x42baa0]
push eax
call sub.gdi32.dll_GetPixel
mov dword [esp + 0x1c], eax
xor eax, eax
mov al, byte [esp + 0x1c]
imul ebx, eax, 0x12b
xor eax, eax
mov al, byte [esp + 0x1d]
imul eax, eax, 0x24b
add ebx, eax
xor eax, eax
mov al, byte [esp + 0x1e]
imul eax, eax, 0x72
add ebx, eax
inc dword [esp + 0x30]
push 9
lea eax, [esp + 0x34]
push eax
mov eax, dword [0x42baa0]
push eax
call sub.user32.dll_FillRect
push 0
push 1
mov eax, dword [0x42baa0]
push eax
call sub.gdi32.dll_GetPixel
mov dword [esp + 0x1c], eax
xor eax, eax
mov al, byte [esp + 0x1c]
imul eax, eax, 0x12b
xor edx, edx
mov dl, byte [esp + 0x1d]
imul edx, edx, 0x24b
add eax, edx
xor edx, edx
mov dl, byte [esp + 0x1e]
imul edx, edx, 0x72
add eax, edx
mov dword [esp + 8], eax
cmp dword [0x43bf64], 0
je 0x412f0f
mov eax, dword [0x43bf64]
dec eax
mov ebp, eax
add ebp, ebp
lea ebp, [ebp + ebp*2]
jmp 0x412f31
cmp dword [esp + 8], 0x1f20c
jl 0x412f20
mov ebp, 0xc
jmp 0x412f31
cmp ebx, 0x2bf20
jl 0x412f2f
mov ebp, 6
jmp 0x412f31
xor ebp, ebp
xor eax, eax
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x1c], eax
lea eax, [ebp + 6]
dec eax
sub eax, ebp
jl 0x4130b6
inc eax
mov dword [esp + 0x20], eax
mov dword [esp + 4], ebp
mov eax, dword [esp + 4]
add eax, 0x41a1f8
mov dword [esp + 0x24], eax
mov eax, dword [esp + 4]
lea esi, [eax + 0x41a1bc]
mov eax, dword [esp + 4]
add eax, 0x41a20c
mov dword [esp + 0x28], eax
mov eax, dword [esp + 4]
lea edi, [eax + 0x41a1d0]
mov eax, dword [esp + 4]
add eax, 0x41a220
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 4]
lea ebp, [eax + 0x41a1e4]
mov eax, dword [esp + 0x24]
movzx eax, byte [eax]
xor edx, edx
mov dl, byte [esi]
sub eax, edx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x28]
movzx eax, byte [eax]
xor edx, edx
mov dl, byte [edi]
sub eax, edx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
movzx eax, byte [eax]
xor edx, edx
mov dl, byte [ebp]
sub eax, edx
mov dword [esp + 0x14], eax
xor ebx, ebx
xor eax, eax
mov al, byte [esi]
mov dword [esp + 0x40], eax
fild dword [esp + 0x40]
mov eax, dword [esp + 0xc]
imul ebx
mov dword [esp + 0x44], eax
fild dword [esp + 0x44]
fdiv dword [0x413308]
faddp st(1)
call fcn.0040266c
mov byte [esp + 0x1c], al
xor eax, eax
mov al, byte [edi]
mov dword [esp + 0x40], eax
fild dword [esp + 0x40]
mov eax, dword [esp + 0x10]
imul ebx
mov dword [esp + 0x44], eax
fild dword [esp + 0x44]
fdiv dword [0x413308]
faddp st(1)
call fcn.0040266c
mov byte [esp + 0x1d], al
xor eax, eax
mov al, byte [ebp]
mov dword [esp + 0x40], eax
fild dword [esp + 0x40]
mov eax, dword [esp + 0x14]
imul ebx
mov dword [esp + 0x44], eax
fild dword [esp + 0x44]
fdiv dword [0x413308]
faddp st(1)
call fcn.0040266c
mov byte [esp + 0x1e], al
mov eax, dword [esp + 0x1c]
push eax
push ebx
mov eax, dword [esp + 0x10]
push eax
mov eax, dword [0x42baa0]
push eax
call sub.gdi32.dll_SetPixel
inc ebx
cmp ebx, 0x30
jne 0x412fcf
push 0xcc0020
push 0x30
push 1
push 0
mov edx, dword [esp + 0x18]
push edx
mov eax, dword [0x42baa0]
push eax
push 0x30
push 7
push 0
mov edx, dword [esp + 0x2c]
push edx
push eax
call sub.gdi32.dll_StretchBlt
add dword [esp + 8], 7
inc ebp
inc dword [esp + 0x2c]
inc edi
inc dword [esp + 0x28]
inc esi
inc dword [esp + 0x24]
dec dword [esp + 0x20]
jne 0x412f99
push 0xff00ff
push 0
push 0
mov eax, dword [0x42baa8]
push eax
call sub.gdi32.dll_SetPixel
push 0xcc0020
push 1
push 1
push 0
push 0
mov eax, dword [0x42baa8]
push eax
push 9
push 0x13e
push 0
push 0
push eax
call sub.gdi32.dll_StretchBlt
mov eax, dword [0x42ba9c]
push eax
call sub.gdi32.dll_CreateCompatibleDC
mov esi, eax
push 0x41330c
mov eax, dword [0x42ba00]
push eax
call sub.user32.dll_LoadBitmapA
push eax
push esi
call sub.gdi32.dll_SelectObject
mov dword [esp + 0x18], eax
cmp dword [0x43beac], 0
je 0x413170
cmp dword [0x43beac], 2
jae 0x413170
push 0x8800c6
push 0
imul eax, dword [0x43beac], 0x13e
push eax
push esi
push 9
push 0x60
push 0
push 0
mov eax, dword [0x42baa8]
push eax
call sub.gdi32.dll_BitBlt
push 0x8800c6
push 0
push 0x60
push esi
push 9
push 0xde
push 0
push 0x60
mov eax, dword [0x42baa8]
push eax
call sub.gdi32.dll_BitBlt
jmp 0x413190
push 0x8800c6
push 0
push 0
push esi
push 9
push 0x13e
push 0
push 0
mov eax, dword [0x42baa8]
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [esp + 0x18]
push eax
push esi
call sub.gdi32.dll_SelectObject
push eax
call sub.gdi32.dll_DeleteObject
push 9
push 0x13e
mov eax, dword [0x42ba9c]
push eax
call sub.gdi32.dll_CreateCompatibleBitmap
push eax
push esi
call sub.gdi32.dll_SelectObject
mov dword [esp + 0x18], eax
xor eax, eax
mov dword [esp + 8], eax
mov dword [esp + 4], 0x35
mov edi, 0x41a234
mov ebx, dword [edi]
mov eax, ebx
shr eax, 0x10
test eax, eax
je 0x41321b
and ebx, 0xffff
xor ebp, ebp
push 0xcc0020
mov eax, 4
sub eax, ebp
cdq
xor eax, edx
sub eax, edx
lea eax, [eax + eax*4]
add eax, 0x14
push eax
push ebx
mov eax, dword [0x42baa0]
push eax
push 1
push 6
push ebp
mov eax, dword [esp + 0x24]
push eax
push esi
call sub.gdi32.dll_BitBlt
inc ebp
cmp ebp, 9
jne 0x4131e4
jmp 0x413248
mov eax, dword [esp + 8]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 8]
add eax, 6
mov dword [esp + 0x38], eax
xor eax, eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x3c], 9
push ebx
lea eax, [esp + 0x34]
push eax
push esi
call sub.user32.dll_FillRect
add dword [esp + 8], 6
add edi, 4
dec dword [esp + 4]
jne 0x4131d1
push 0x13e
push 9
mov eax, dword [0x42baa8]
push eax
push 0
push 0
push 0x13e
push 9
push 0
xor ecx, ecx
xor edx, edx
mov eax, esi
call fcn.00406f30
xor eax, eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x38], 0x144
xor eax, eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x3c], 9
push 0x10
lea eax, [esp + 0x34]
push eax
mov eax, dword [0x42baa8]
push eax
call sub.user32.dll_FillRect
push 0x13e
push 9
push esi
push 0
push 0
push 0x13e
push 9
push 0xff00ff
xor ecx, ecx
xor edx, edx
mov eax, dword [0x42baa8]
call fcn.00406f30
mov eax, dword [esp + 0x18]
push eax
push esi
call sub.gdi32.dll_SelectObject
push eax
call sub.gdi32.dll_DeleteObject
push esi
call sub.gdi32.dll_DeleteDC
call sub.gdi32.dll_GdiFlush
mov eax, dword [esp]
mov eax, dword [eax + 8]
mov eax, dword [eax + 4]
push eax
call sub.user32.dll_DrawMenuBar
add esp, 0x48
pop ebp
pop edi
pop esi
pop ebx
ret