Function at 0x10097f80
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x102f9813
mov eax, dword fs:[0]
push eax
sub esp, 0xe4
mov eax, dword [case.0x100be6e1.80]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [ebp + 8]
mov dword [ebp - 0xf0], eax
test eax, eax
je 0x10097fc7
mov ebx, eax
mov dword [ebp - 0xd8], ebx
jmp 0x10097fde
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_GetDC]
push eax
call fcn.100d0f72
mov ebx, eax
mov dword [ebp - 0xd8], eax
push 0x10cd
mov ecx, edi
call fcn.100ccf47
lea ecx, [ebp - 0x48]
push ecx
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x48]
mov ecx, edi
push eax
call fcn.100d157f
mov eax, dword [ebp - 0x40]
lea ecx, [ebp - 0xbc]
sub eax, dword [ebp - 0x48]
mov dword [edi + 0x1b4], eax
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x44]
mov dword [edi + 0x1b8], eax
call fcn.100cf972
mov dword [ebp - 4], 0
mov dword [ebp - 0xd4], vtable.CGdiObject.0
mov dword [ebp - 0xd0], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0xd4], vtable.CBitmap.0
mov byte [ebp - 4], 2
push dword [edi + 0x1b8]
push dword [edi + 0x1b4]
push dword [ebx + 4]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
lea ecx, [ebp - 0xd4]
call fcn.100d0bdf
push dword [ebx + 4]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
lea ecx, [ebp - 0xbc]
call fcn.100d0b9d
push dword [ebp - 0xd0]
push dword [ebp - 0xb8]
call fcn.100d16bd
mov ecx, dword [edi + 0x1b4]
sub ecx, 0x14
mov dword [ebp - 0xec], eax
mov eax, dword [edi + 0x1b8]
sub eax, 0x14
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x78], 0
movd xmm1, ecx
mov ecx, dword [edi + 0x1a8]
sub ecx, dword [edi + 0x1a4]
cvtdq2ps xmm1, xmm1
mov dword [ebp - 0x84], 0xc
mov dword [ebp - 0x7c], 0x384
mov dword [ebp - 0x74], 0x190
mov dword [ebp - 0xc4], vtable.CGdiObject.0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
divss xmm1, xmm0
movss dword [edi + 0x1bc], xmm1
movd xmm1, eax
mov eax, dword [edi + 0x1b0]
sub eax, dword [edi + 0x1ac]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
xor eax, eax
cvtdq2ps xmm0, xmm0
mov word [ebp - 0x4a], ax
divss xmm1, xmm0
xorps xmm0, xmm0
movss dword [edi + 0x1c0], xmm1
mov eax, dword [str.ARIAL]
mov dword [ebp - 0x68], eax
mov ax, word [0x1032a3cc]
movlpd qword [ebp - 0x70], xmm0
movlpd qword [ebp - 0x62], xmm0
movlpd qword [ebp - 0x5a], xmm0
movlpd qword [ebp - 0x52], xmm0
mov word [ebp - 0x64], ax
mov dword [ebp - 0xc0], 0
mov byte [ebp - 4], 3
mov dword [ebp - 0xc4], vtable.CFont.0
mov byte [ebp - 4], 4
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
push eax
lea ecx, [ebp - 0xc4]
call fcn.100d0bdf
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0xbc]
call fcn.100d17e0
push 0
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xdc], eax
call fcn.100d18db
push 1
lea ecx, [ebp - 0xbc]
call fcn.100d1914
mov dword [ebp - 0x88], 0x808080
mov dword [ebp - 0x90], 1
mov dword [ebp - 0x94], 2
mov dword [ebp - 0xcc], vtable.CGdiObject.0
mov dword [ebp - 0xc8], 0
mov byte [ebp - 4], 5
mov dword [ebp - 0xcc], vtable.CPen.0
mov byte [ebp - 4], 6
lea eax, [ebp - 0x94]
push eax
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
push eax
lea ecx, [ebp - 0xcc]
call fcn.100d0bdf
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0xbc]
call fcn.100d178f
push 4
mov esi, eax
lea ecx, [ebp - 0xbc]
push 0x10
lea eax, [ebp - 0xe8]
push eax
call fcn.100d11e7
mov ecx, dword [edi + 0x1b4]
sub ecx, 4
push 4
push ecx
lea ecx, [ebp - 0xbc]
call fcn.100d1174
mov eax, dword [edi + 0x1b8]
lea ecx, [ebp - 0xbc]
sub eax, 0x10
push eax
mov eax, dword [edi + 0x1b4]
sub eax, 4
push eax
call fcn.100d1174
mov eax, dword [edi + 0x1b8]
lea ecx, [ebp - 0xbc]
sub eax, 0x10
push eax
push 0x10
call fcn.100d1174
push 4
push 0x10
lea ecx, [ebp - 0xbc]
call fcn.100d1174
push esi
lea ecx, [ebp - 0xbc]
call fcn.100d178f
lea ecx, [ebp - 0xcc]
call fcn.100d0dfe
push 0x808080
lea ecx, [ebp - 0xbc]
call fcn.100d1b69
push dword [edi + 0x1b0]
lea eax, [ebp - 0x38]
push 0x1031c474
push eax
call fcn.100029e0
add esp, 0xc
lea eax, [ebp - 0x38]
lea ecx, [ebp - 0xa8]
push eax
call fcn.10008de0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xe8]
mov eax, dword [ebp - 0xa8]
push ecx
push dword [eax - 0xc]
push eax
push dword [ebp - 0xb4]
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov byte [ebp - 4], 6
or esi, 0xffffffff
mov edx, dword [ebp - 0xa8]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10098338
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0xa8]
call fcn.10008de0
mov byte [ebp - 4], 9
mov ebx, 0xe
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xe8]
sub ebx, dword [ebp - 0xe4]
add ecx, 4
push dword [eax - 0xc]
push eax
mov eax, dword [ebp - 0xbc]
push ecx
push ebx
lea ecx, [ebp - 0xbc]
call dword [eax + 0x5c]
mov byte [ebp - 4], 6
mov eax, esi
mov edx, dword [ebp - 0xa8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1009839b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [edi + 0x1ac]
lea eax, [ebp - 0x38]
push 0x1031c474
push eax
call fcn.100029e0
add esp, 0xc
lea eax, [ebp - 0x38]
lea ecx, [ebp - 0xa8]
push eax
call fcn.10008de0
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0xa8]
mov ecx, dword [edi + 0x1b8]
sub ecx, 0x10
push dword [eax - 0xc]
push eax
mov eax, dword [ebp - 0xbc]
push ecx
push ebx
lea ecx, [ebp - 0xbc]
call dword [eax + 0x5c]
mov byte [ebp - 4], 6
mov eax, esi
mov edx, dword [ebp - 0xa8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1009840a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0xdc]
lea ecx, [ebp - 0xbc]
call fcn.100d17e0
lea ecx, [ebp - 0xc4]
call fcn.100d0dfe
lea eax, [ebp - 0x84]
mov dword [ebp - 0x84], 0xe
push eax
mov dword [ebp - 0x7c], 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
push eax
lea ecx, [ebp - 0xc4]
call fcn.100d0bdf
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0xbc]
call fcn.100d17e0
push dword [edi + 0x1a4]
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0x38]
push 0x1031c474
push eax
call fcn.100029e0
add esp, 0xc
lea eax, [ebp - 0x38]
lea ecx, [ebp - 0xa8]
push eax
call fcn.10008de0
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0xa8]
mov ecx, dword [edi + 0x1b8]
sub ecx, 0xe
push dword [eax - 0xc]
push eax
mov eax, dword [ebp - 0xbc]
push ecx
push 0x10
lea ecx, [ebp - 0xbc]
call dword [eax + 0x5c]
mov byte [ebp - 4], 6
mov eax, esi
mov edx, dword [ebp - 0xa8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100984d8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [edi + 0x1a8]
lea eax, [ebp - 0x38]
push 0x1031c474
push eax
call fcn.100029e0
add esp, 0xc
lea eax, [ebp - 0x38]
lea ecx, [ebp - 0xa8]
push eax
call fcn.10008de0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xe0]
mov eax, dword [ebp - 0xa8]
push ecx
push dword [eax - 0xc]
push eax
push dword [ebp - 0xb4]
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov byte [ebp - 4], 6
mov eax, esi
mov edx, dword [ebp - 0xa8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10098540
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0xa8]
call fcn.10008de0
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0xa8]
mov edx, dword [edi + 0x1b8]
mov ecx, dword [edi + 0x1b4]
sub edx, 0xe
sub ecx, dword [ebp - 0xe0]
push dword [eax - 0xc]
sub ecx, 4
push eax
mov eax, dword [ebp - 0xbc]
push edx
push ecx
lea ecx, [ebp - 0xbc]
call dword [eax + 0x5c]
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0xa8]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x100985a5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor ebx, ebx
cmp dword [edi + 0xb0], ebx
jle 0x100986c0
lea esi, [edi + 0x154]
nop dword [eax]
mov eax, dword [esi]
mov dword [ebp - 0x98], eax
mov eax, dword [esi - 0x78]
mov dword [ebp - 0xa0], eax
mov eax, dword [esi - 0x50]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], vtable.CGdiObject.0
mov dword [ebp - 0xa8], 0
mov byte [ebp - 4], 0x13
mov dword [ebp - 0xac], vtable.CPen.0
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
push eax
lea ecx, [ebp - 0xac]
call fcn.100d0bdf
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xbc]
call fcn.100d178f
cmp dword [esi + 0x28], 0
mov dword [ebp - 0xdc], eax
jne 0x10098650
push dword [esi - 0x28]
lea eax, [ebp - 0xbc]
mov ecx, edi
push dword [esi - 0xa0]
push eax
call fcn.100989f0
jmp 0x10098677
push dword [esi]
lea ecx, [ebp - 0xbc]
call fcn.100d1b69
push dword [esi + 0x28]
lea eax, [ebp - 0xbc]
mov ecx, edi
push dword [esi - 0x28]
push dword [esi - 0xa0]
push eax
call fcn.10098a90
push dword [ebp - 0xdc]
lea ecx, [ebp - 0xbc]
call fcn.100d178f
lea ecx, [ebp - 0xac]
call fcn.100d0dfe
mov byte [ebp - 4], 6
mov dword [ebp - 0xac], vtable.CPen.0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xac]
call fcn.100034a0
inc ebx
add esi, 4
cmp ebx, dword [edi + 0xb0]
jl 0x100985c0
mov esi, dword [ebp - 0xd8]
push 0xcc0020
push 0
push 0
push dword [ebp - 0xb8]
push dword [edi + 0x1b8]
push dword [edi + 0x1b4]
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push dword [esi + 4]
call dword [sym.imp.GDI32.dll_BitBlt]
mov eax, dword [ebp - 0xec]
test eax, eax
je 0x100986fd
mov eax, dword [eax + 4]
push eax
push dword [ebp - 0xb8]
call fcn.100d16bd
push dword [ebp - 0xe4]
lea ecx, [ebp - 0xbc]
call fcn.100d17e0
lea ecx, [ebp - 0xbc]
call fcn.100d0de8
lea ecx, [ebp - 0xd4]
call fcn.100d0dfe
lea ecx, [ebp - 0xc4]
call fcn.100d0dfe
cmp dword [ebp - 0xf0], 0
jne 0x10098750
push dword [esi + 4]
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_ReleaseDC]
mov byte [ebp - 4], 4
mov dword [ebp - 0xcc], vtable.CPen.0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xcc]
call fcn.100034a0
mov byte [ebp - 4], 2
mov dword [ebp - 0xc4], vtable.CFont.0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc4]
call fcn.100034a0
mov byte [ebp - 4], 0
mov dword [ebp - 0xd4], vtable.CBitmap.0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd4]
call fcn.100034a0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc]
call fcn.100cfbb4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10291e04
mov esp, ebp
pop ebp
ret 4