Function at 0x41c078
Capabilities:
Capture screenshot
Enumerate gui resources

Disassembly:
push edi
push esi
push ebp
push ebx
sub esp, 0x260
mov esi, ecx
mov dword [esi + 0x74], 0
call fcn.00439fe8
cmp eax, 1
je 0x41c4d4
mov ecx, dword [esi + 0xdbb0]
mov eax, dword [ecx]
call dword [eax + 0x68]
test eax, eax
je 0x41c0b2
cmp dword [esi + 0x64], 0
je 0x41c302
mov eax, dword [esi + 0xdbcc]
test eax, eax
je 0x41c35d
push 8
push eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov ebx, eax
push 0xa
push dword [esi + 0xdbcc]
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
xor edx, edx
push eax
push ebx
push edx
push edx
lea ecx, [esp + 0x260]
call fcn.00404df4
mov eax, dword [esp + 0x250]
mov edx, dword [esp + 0x254]
mov ebp, dword [esp + 0x258]
mov dword [esi + 0xdbec], eax
mov ebx, dword [esp + 0x25c]
mov dword [esi + 0xdbf0], edx
mov dword [esi + 0xdbf4], ebp
mov dword [esi + 0xdbf8], ebx
push ebx
push ebp
push 0x49b780
push 9
push 0x481eac
call fcn.00407ffc
add esp, 0x14
push dword [esi + 0xdbcc]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [esi + 0xdbc8], eax
test eax, eax
je 0x41c338
push 0x26
push dword [esi + 0xdbcc]
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
test al, 1
jne 0x41c183
push 0x10
push dword [0x47e4cc]
push 0x49b840
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
add esp, 0x260
pop ebx
pop ebp
pop esi
pop edi
ret
push 0x26
push dword [esi + 0xdbc8]
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
test eax, 0x80
jne 0x41c1ba
push 0x10
push dword [0x47e4cc]
push 0x49b8c0
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
add esp, 0x260
pop ebx
pop ebp
pop esi
pop edi
ret
push dword [esi + 0xdbf8]
push dword [esi + 0xdbf4]
push dword [esi + 0xdbcc]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [esi + 0xdbd0], eax
test eax, eax
je 0x41c313
push 0x49b9a0
push 9
push 0x481eac
call fcn.00407ffc
lea eax, [esi + 0xdbfc]
push 0x430
push 0
push eax
call fcn.0046e690
add esp, 0x18
mov dword [esi + 0xdc00], 0x28
xor eax, eax
lea ebx, [esi + 0xdc00]
mov word [esi + 0xdc0e], ax
push eax
push ebx
push eax
push 1
push eax
push dword [esi + 0xdbd0]
push dword [esi + 0xdbc8]
call dword [sym.imp.GDI32.dll_GetDIBits]
test eax, eax
jne 0x41c25a
push 0x49ba00
push 0
push 0x481eac
call fcn.00407ffc
xor eax, eax
add esp, 0x26c
pop ebx
pop ebp
pop esi
pop edi
ret
xor eax, eax
push eax
push ebx
push eax
push 1
push eax
push dword [esi + 0xdbd0]
push dword [esi + 0xdbc8]
call dword [sym.imp.GDI32.dll_GetDIBits]
test eax, eax
jne 0x41c296
push 0x49ba60
push 0
push 0x481eac
call fcn.00407ffc
xor eax, eax
add esp, 0x26c
pop ebx
pop ebp
pop esi
pop edi
ret
push 0x49bac0
push 9
push 0x481eac
call fcn.00407ffc
add esp, 0xc
mov eax, dword [esi + 0xdc08]
cdq
xor eax, edx
sub eax, edx
neg eax
mov dword [esi + 0xdc08], eax
push 0x26
push dword [esi + 0xdbc8]
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
test ah, 1
jne 0x41c2dc
mov dword [esi + 0xdbfc], 1
jmp 0x41c2e6
mov dword [esi + 0xdbfc], 0
xor eax, eax
push 1
push eax
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, 1
add esp, 0x260
pop ebx
pop ebp
pop esi
pop edi
ret
push esi
push 0x41830c
call dword [sym.imp.USER32.dll_EnumWindows]
jmp 0x41c0b2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x49b940
push 0
push 0x481eac
call fcn.00407ffc
xor eax, eax
add esp, 0x270
pop ebx
pop ebp
pop esi
pop edi
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x49b7e0
push 0
push 0x481eac
call fcn.00407ffc
xor eax, eax
add esp, 0x270
pop ebx
pop ebp
pop esi
pop edi
ret
push 0x49b6c0
push 0
push 0x481eac
call fcn.00407ffc
add esp, 0xc
mov ecx, esi
call fcn.004382fc
lea ecx, [esi + 4]
call fcn.0040ccb0
mov dword [esi + 0xe1d4], eax
mov ebx, 1
mov ebp, 1
cmp eax, 2
je 0x41c4b6
cmp eax, 3
je 0x41c498
cmp ebx, 3
je 0x41c484
mov dword [esi + 0xe1d0], ebp
cmp ebx, 1
je 0x41c44b
cmp ebx, 2
je 0x41c412
cmp ebx, 3
je 0x41c3f0
mov eax, dword [esi + 0xdbcc]
test eax, eax
jne 0x41c0c0
push 0x49b720
push 0
push 0x481eac
call fcn.00407ffc
xor eax, eax
add esp, 0x26c
pop ebx
pop ebp
pop esi
pop edi
ret
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov dword [esi + 0xdbcc], eax
mov edx, dword [esi + 0xe1c4]
mov ebx, dword [esi + 0xe1c8]
mov dword [esi + 0x6c], edx
mov dword [esi + 0x70], ebx
jmp 0x41c3ca
lea edx, [esi + 0xe170]
xor eax, eax
push eax
push eax
push edx
push 0x497010
call dword [sym.imp.GDI32.dll_CreateDCA]
mov dword [esi + 0xdbcc], eax
mov eax, dword [esi + 0xe190]
mov edx, dword [esi + 0xe194]
mov dword [esi + 0x6c], eax
mov ebx, dword [esi + 0xe1d0]
mov dword [esi + 0x70], edx
jmp 0x41c3bf
lea edx, [esi + 0xe13c]
xor eax, eax
push eax
push eax
push edx
push 0x497010
call dword [sym.imp.GDI32.dll_CreateDCA]
mov dword [esi + 0xdbcc], eax
mov eax, dword [esi + 0xe15c]
mov edx, dword [esi + 0xe160]
mov dword [esi + 0x6c], eax
mov ebx, dword [esi + 0xe1d0]
mov dword [esi + 0x70], edx
jmp 0x41c3ba
mov ebx, 1
mov dword [esi + 0xe1d0], 1
jmp 0x41c3b1
mov eax, dword [esi + 0xe1cc]
cmp eax, 1
jle 0x41c3a2
mov ebx, 3
mov ebp, 3
jmp 0x41c3a2
mov edx, dword [esi + 0xe1cc]
cmp edx, 1
jle 0x41c399
mov ebx, 2
mov ebp, 2
jmp 0x41c399
mov ecx, esi
call fcn.0041a774
test eax, eax
je 0x41c099
lea eax, [esp + 0xc]
push 0x9c
push 0
push eax
call fcn.0046e690
add esp, 0xc
mov eax, 0x9c
xor ebx, ebx
lea edx, [esp + 0xc]
mov word [esp + 0x30], ax
mov word [esp + 0x32], bx
push edx
push 0xffffffffffffffff
push ebx
call dword [sym.imp.USER32.dll_EnumDisplaySettingsA]
mov dword [esp + 0x34], 0x1c0000
push 0x4977bc
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebp, eax
push 0x4977c4
push ebp
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, eax
test ebx, ebx
je 0x41c65c
lea edx, [esp + 0xa8]
push 0x1a8
push 0
push edx
call fcn.0046e690
add esp, 0xc
mov dword [esp + 0xa8], 0x1a8
xor edx, edx
xor edi, edi
mov byte [esp + 0xc], dl
mov dword [esp], edi
lea edi, [esp + 0xa8]
push edx
push edi
push edx
push edx
call ebx
test eax, eax
je 0x41c65c
mov dword [esp + 8], ebp
mov ebp, dword [esp]
mov dword [esp + 4], esi
lea edi, [esp + 0xcc]
mov esi, 0x4977a0
mov dl, byte [edi]
cmp dl, byte [esi]
jne 0x41c5ba
or dl, dl
je 0x41c5b6
mov dl, byte [edi + 1]
cmp dl, byte [esi + 1]
jne 0x41c5ba
add edi, 2
add esi, 2
or dl, dl
jne 0x41c59a
xor eax, eax
jmp 0x41c5bf
sbb eax, eax
or eax, 1
test eax, eax
je 0x41c5e1
inc ebp
xor ecx, ecx
lea edx, [esp + 0xa8]
push ecx
push edx
push ebp
push ecx
call ebx
test eax, eax
jne 0x41c58e
mov ebp, dword [esp + 8]
mov esi, dword [esp + 4]
jmp 0x41c65c
mov ebp, dword [esp + 8]
mov esi, dword [esp + 4]
lea ebx, [esp + 0xac]
xor edx, edx
push edx
push edx
push ebx
push 0x497010
call dword [sym.imp.GDI32.dll_CreateDCA]
mov dword [esi + 0xdbcc], eax
lea edx, [esp + 0xc]
push edx
push 0xffffffffffffffff
push ebx
call dword [sym.imp.USER32.dll_EnumDisplaySettingsA]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
cmp dword [esi + 0xdbcc], 0
mov dword [esi + 0x6c], edx
mov dword [esi + 0x70], ebx
je 0x41c632
mov dword [esi + 0x74], 1
mov ecx, esi
call fcn.004382fc
lea ecx, [esi + 4]
call fcn.0040ccb0
mov dword [esi + 0xe1d4], eax
mov ebx, 1
cmp eax, 2
je 0x41c68f
cmp eax, 3
je 0x41c670
mov dword [esi + 0xe1d0], ebx
test ebp, ebp
je 0x41c099
push ebp
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x41c099
mov edx, dword [esi + 0xe1cc]
cmp edx, 1
jle 0x41c687
mov dword [esi + 0xe1d0], 3
jmp 0x41c65c
mov dword [esi + 0xe1d0], ebx
jmp 0x41c65c
mov edx, dword [esi + 0xe1cc]
cmp edx, 1
jle 0x41c651
mov ebx, 2
jmp 0x41c651