Function at 0x420228
Capabilities:
Capture screenshot

Disassembly:
push ebp
lea ebp, [esp - 0x64]
sub esp, 0xb8
push ebx
push esi
push edi
mov edi, dword [0x467168]
mov al, 1
cmp al, byte [ecx + 2]
mov ecx, dword [0x464c98]
sbb esi, esi
and esi, dword [0x46716c]
push 1
xor ebx, ebx
push ebx
push 0xffffffffffffffff
push 0x458b9c
mov dword [ebp - 0xc], edi
mov dword [ebp - 4], esi
call fcn.0040152b
cmp edi, ebx
je 0x420277
push 1
push ebx
push 0xffffffffffffffff
push ebx
mov ecx, edi
call fcn.0040152b
cmp esi, ebx
je 0x420288
push 1
push ebx
push 0xffffffffffffffff
push ebx
mov ecx, esi
call fcn.0040152b
xor eax, eax
test byte [0x464370], 1
mov dword [ebp - 0x20], ebx
lea edi, [ebp - 0x1c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
jne 0x4202c7
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
je 0x420940
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
add dword [ebp + 0x6c], ecx
add dword [ebp + 0x70], eax
add dword [ebp + 0x74], ecx
add dword [ebp + 0x78], eax
mov edi, dword [ebp + 0x7c]
or dword [ebp + 0x38], 0xffffffff
push 0x2e
push edi
mov dword [ebp + 0x5c], ebx
mov dword [ebp + 0x20], ebx
mov dword [ebp + 0x3c], ebx
mov dword [ebp + 0x44], ebx
call fcn.004550c0
mov esi, eax
cmp esi, ebx
pop ecx
pop ecx
je 0x420332
inc esi
push 0x45bd4c
push esi
call fcn.00441439
test eax, eax
pop ecx
pop ecx
je 0x42031e
push 0x45bd48
push esi
call fcn.00441439
test eax, eax
pop ecx
pop ecx
je 0x42031e
push 0x45bd44
push esi
call fcn.00441439
test eax, eax
pop ecx
pop ecx
jne 0x420332
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x31
call esi
push 0x32
mov dword [ebp + 0x3c], eax
call esi
mov dword [ebp + 0x44], eax
push edi
call fcn.00401aa2
mov esi, eax
cmp byte [esi], 0x2a
pop ecx
jne 0x42045f
mov ebx, 0x458bf0
inc esi
movsx eax, byte [esi]
push eax
call fcn.004418c7
cmp eax, 0x48
pop ecx
je 0x42042a
cmp eax, 0x57
je 0x42041c
push 4
push str.Icon
push esi
call fcn.0044147c
add esp, 0xc
test eax, eax
jne 0x42038b
add esi, 4
push esi
call fcn.00401993
mov dword [ebp + 0x20], eax
jmp 0x420436
push 5
push str.Trans
push esi
call fcn.0044147c
add esp, 0xc
test eax, eax
jne 0x4203fb
push 0x20
add esi, 5
lea eax, [ebp - 0x54]
push esi
push eax
call fcn.0043880f
lea eax, [ebp - 0x54]
push ebx
push eax
call fcn.00438acb
add esp, 0x14
test eax, eax
je 0x4203c2
mov byte [eax], 0
lea eax, [ebp - 0x54]
push eax
call fcn.0043769c
cmp eax, 0xffffffff
pop ecx
jne 0x4203e6
push 0x10
lea eax, [ebp - 0x54]
push 0
push eax
call fcn.004010a9
add esp, 0xc
mov dword [ebp + 0x38], eax
jmp 0x420437
movzx ecx, ah
mov ch, al
shr eax, 0x10
movzx eax, al
shl ecx, 8
or ecx, eax
mov dword [ebp + 0x38], ecx
jmp 0x420437
push esi
call fcn.00401993
test eax, eax
pop ecx
mov dword [ebp + 0x5c], eax
jge 0x42040d
and dword [ebp + 0x5c], 0
mov eax, 0xff
cmp dword [ebp + 0x5c], eax
jle 0x420437
mov dword [ebp + 0x5c], eax
jmp 0x420437
lea eax, [esi + 1]
push eax
call fcn.00401993
mov dword [ebp + 0x3c], eax
jmp 0x420436
lea eax, [esi + 1]
push eax
call fcn.00401993
mov dword [ebp + 0x44], eax
pop ecx
push ebx
push esi
call fcn.00438acb
test eax, eax
pop ecx
pop ecx
je 0x420940
inc eax
push eax
mov edi, eax
call fcn.00401aa2
mov esi, eax
cmp byte [esi], 0x2a
pop ecx
je 0x420349
xor ebx, ebx
push ebx
push dword [ebp + 0x20]
lea eax, [ebp - 8]
push eax
push dword [ebp + 0x44]
push dword [ebp + 0x3c]
push edi
call fcn.00437f7d
mov edi, eax
add esp, 0x18
cmp edi, ebx
mov dword [ebp + 4], edi
je 0x420940
push ebx
call dword [sym.imp.USER32.dll_GetDC]
cmp eax, ebx
mov dword [ebp + 0x24], eax
jne 0x42049d
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x420940
cmp dword [ebp - 8], 1
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp + 0x2c], ebx
mov dword [ebp + 0x1c], ebx
mov dword [ebp + 0x48], ebx
mov dword [ebp + 0x40], ebx
mov dword [ebp + 0x20], ebx
mov byte [ebp + 0x7f], 0
jne 0x42050b
lea eax, [ebp - 0x34]
push eax
push edi
call dword [sym.imp.USER32.dll_GetIconInfo]
test eax, eax
je 0x4204f4
push 1
lea eax, [ebp + 0x63]
push eax
lea eax, [ebp + 0x18]
push eax
lea eax, [ebp + 0x28]
push eax
push dword [ebp + 0x24]
push dword [ebp - 0x28]
call fcn.004209a4
add esp, 0x18
push dword [ebp - 0x24]
mov dword [ebp + 0x40], eax
call esi
push dword [ebp - 0x28]
call esi
push 1
push edi
call fcn.00437e71
mov edi, eax
cmp edi, ebx
pop ecx
pop ecx
mov dword [ebp + 4], edi
je 0x420940
push 8
lea eax, [ebp + 0x63]
push eax
lea eax, [ebp + 0x18]
push eax
lea eax, [ebp + 0x28]
push eax
push dword [ebp + 0x24]
push edi
call fcn.004209a4
add esp, 0x18
cmp eax, ebx
mov dword [ebp + 0x34], eax
je 0x4208d0
mov esi, dword [ebp + 0x74]
sub esi, dword [ebp + 0x6c]
mov ebx, dword [ebp + 0x78]
sub ebx, dword [ebp + 0x70]
push dword [ebp + 0x24]
inc esi
inc ebx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
xor edi, edi
cmp eax, edi
mov dword [ebp + 0x2c], eax
je 0x4208d0
push ebx
push esi
push dword [ebp + 0x24]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
cmp eax, edi
mov dword [ebp + 0x1c], eax
je 0x4208d0
push eax
push dword [ebp + 0x2c]
call dword [sym.imp.GDI32.dll_SelectObject]
cmp eax, edi
mov dword [ebp + 0x20], eax
je 0x4208d0
push 0xcc0020
push dword [ebp + 0x70]
push dword [ebp + 0x6c]
push dword [ebp + 0x24]
push ebx
push esi
push edi
push edi
push dword [ebp + 0x2c]
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x4208d0
push 8
lea eax, [ebp + 0x77]
push eax
lea eax, [ebp + 0x14]
push eax
lea eax, [ebp + 0x4c]
push eax
push dword [ebp + 0x2c]
push dword [ebp + 0x1c]
call fcn.004209a4
add esp, 0x18
cmp eax, edi
mov dword [ebp + 0x48], eax
je 0x4208d0
mov ebx, dword [ebp + 0x28]
mov esi, dword [ebp + 0x4c]
imul ebx, dword [ebp + 0x18]
imul esi, dword [ebp + 0x14]
cmp byte [ebp + 0x63], 0
mov dword [ebp + 0x44], ebx
mov dword [ebp + 8], esi
jne 0x4205e9
cmp byte [ebp + 0x77], 0
je 0x42061d
cmp dword [ebp + 0x38], 0xffffffff
mov eax, 0xf8f8f8
je 0x4205f7
and dword [ebp + 0x38], eax
xor ecx, ecx
cmp esi, edi
jle 0x42060a
mov edx, dword [ebp + 0x48]
lea edx, [edx + ecx*4]
and dword [edx], eax
inc ecx
cmp ecx, esi
jl 0x4205fd
xor ecx, ecx
cmp ebx, edi
jle 0x420632
mov edx, dword [ebp + 0x34]
lea edx, [edx + ecx*4]
and dword [edx], eax
inc ecx
cmp ecx, ebx
jl 0x420610
cmp ebx, edi
jle 0x420632
mov eax, dword [ebp + 0x34]
add eax, 3
mov ecx, ebx
mov byte [eax], 0
add eax, 4
dec ecx
jne 0x420629
cmp dword [ebp + 0x5c], 1
jge 0x420735
cmp esi, edi
jle 0x420651
mov eax, dword [ebp + 0x48]
add eax, 3
mov ecx, esi
mov byte [eax], 0
add eax, 4
dec ecx
jne 0x420648
cmp esi, edi
mov dword [ebp + 0x58], edi
jle 0x4208bb
mov dword [ebp + 0x74], edi
mov eax, dword [ebp + 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp + 0x48]
mov edx, dword [ebp + 0x74]
cmp dword [edx + ecx], eax
je 0x420683
mov ecx, dword [ebp + 0x40]
cmp ecx, edi
je 0x42067a
cmp dword [ecx], edi
jne 0x420683
cmp eax, dword [ebp + 0x38]
jne 0x420720
mov eax, dword [ebp + 0x58]
cdq
idiv dword [ebp + 0x4c]
mov ecx, dword [ebp + 0x14]
sub ecx, eax
cmp dword [ebp + 0x18], ecx
jg 0x420720
mov eax, dword [ebp + 0x4c]
sub eax, edx
cmp dword [ebp + 0x28], eax
jg 0x420720
cmp ebx, edi
mov byte [ebp + 0x7f], 1
mov dword [ebp + 0x50], edi
mov dword [ebp + 0x30], edi
jle 0x4208d0
mov edx, dword [ebp + 0x4c]
mov eax, dword [ebp + 0x34]
mov esi, dword [ebp + 0x74]
mov ebx, dword [ebp + 0x40]
shl edx, 2
mov byte [ebp + 0x7f], 1
mov dword [ebp + 0x78], esi
sub ebx, eax
mov ecx, dword [eax]
mov edi, dword [ebp + 0x48]
cmp dword [esi + edi], ecx
je 0x4206e7
cmp dword [ebp + 0x40], 0
je 0x4206e2
cmp dword [ebx + eax], 0
jne 0x4206e7
cmp ecx, dword [ebp + 0x38]
jne 0x420714
inc dword [ebp + 0x50]
mov ecx, dword [ebp + 0x50]
cmp ecx, dword [ebp + 0x28]
jge 0x4206f7
add esi, 4
jmp 0x420701
and dword [ebp + 0x50], 0
add dword [ebp + 0x78], edx
mov esi, dword [ebp + 0x78]
inc dword [ebp + 0x30]
mov ecx, dword [ebp + 0x30]
add eax, 4
cmp ecx, dword [ebp + 0x44]
jl 0x4206cc
jmp 0x4208d0
mov ebx, dword [ebp + 0x44]
mov esi, dword [ebp + 8]
mov byte [ebp + 0x7f], 0
xor edi, edi
inc dword [ebp + 0x58]
add dword [ebp + 0x74], 4
cmp dword [ebp + 0x58], esi
jl 0x42065f
jmp 0x4208bb
cmp esi, edi
mov dword [ebp + 0x58], edi
jle 0x4208bb
mov dword [ebp + 0xc], edi
mov eax, dword [ebp + 0x58]
cdq
idiv dword [ebp + 0x4c]
mov ecx, dword [ebp + 0x14]
sub ecx, eax
cmp dword [ebp + 0x18], ecx
jg 0x4208ab
mov eax, dword [ebp + 0x4c]
sub eax, edx
cmp dword [ebp + 0x28], eax
jg 0x4208ab
cmp ebx, edi
mov byte [ebp + 0x7f], 1
mov dword [ebp + 0x50], edi
mov dword [ebp + 0x30], edi
jle 0x4208d0
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 0x34]
mov dword [ebp + 0x3c], eax
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0x40]
sub eax, esi
mov byte [ebp + 0x7f], 1
mov dword [ebp - 0x10], eax
mov eax, dword [esi]
mov dl, byte [esi + 1]
shr eax, 0x10
movzx eax, al
cmp dword [ebp + 0x5c], eax
jle 0x4207a6
mov byte [ebp + 0x77], 0
jmp 0x4207ae
mov cl, al
sub cl, byte [ebp + 0x5c]
mov byte [ebp + 0x77], cl
movzx edx, dl
cmp dword [ebp + 0x5c], edx
mov dword [ebp], edx
jle 0x4207bf
mov byte [ebp + 0x7b], 0
jmp 0x4207c7
mov cl, dl
sub cl, byte [ebp + 0x5c]
mov byte [ebp + 0x7b], cl
movzx ecx, byte [esi]
cmp dword [ebp + 0x5c], ecx
jle 0x4207d5
mov byte [ebp + 0x56], 0
jmp 0x4207e0
mov dl, cl
sub dl, byte [ebp + 0x5c]
mov byte [ebp + 0x56], dl
mov edx, dword [ebp]
mov edi, 0xff
sub edi, eax
cmp dword [ebp + 0x5c], edi
jle 0x4207f0
or al, 0xff
jmp 0x4207f3
add al, byte [ebp + 0x5c]
mov edi, 0xff
sub edi, edx
cmp dword [ebp + 0x5c], edi
jle 0x420805
mov byte [ebp + 0x63], 0xff
jmp 0x42080b
add dl, byte [ebp + 0x5c]
mov byte [ebp + 0x63], dl
mov edx, 0xff
sub edx, ecx
cmp dword [ebp + 0x5c], edx
jle 0x42081d
mov byte [ebp + 0x57], 0xff
jmp 0x420823
add cl, byte [ebp + 0x5c]
mov byte [ebp + 0x57], cl
mov ecx, dword [ebp + 0x48]
mov edx, dword [ebp + 0x3c]
lea edi, [edx + ecx]
mov cl, byte [edi + 2]
cmp cl, byte [ebp + 0x77]
mov dl, byte [edi + 1]
mov bl, byte [edi]
jb 0x420851
cmp cl, al
ja 0x420851
cmp dl, byte [ebp + 0x7b]
jb 0x420851
cmp dl, byte [ebp + 0x63]
ja 0x420851
cmp bl, byte [ebp + 0x56]
jb 0x420851
cmp bl, byte [ebp + 0x57]
jbe 0x420867
cmp dword [ebp + 0x40], 0
je 0x420860
mov eax, dword [ebp - 0x10]
cmp dword [esi + eax], 0
jne 0x420867
mov eax, dword [esi]
cmp eax, dword [ebp + 0x38]
jne 0x42089f
inc dword [ebp + 0x50]
mov eax, dword [ebp + 0x50]
cmp eax, dword [ebp + 0x28]
jge 0x420878
add dword [ebp + 0x3c], 4
jmp 0x42088b
mov eax, dword [ebp + 0x4c]
and dword [ebp + 0x50], 0
shl eax, 2
add dword [ebp + 0x10], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp + 0x3c], eax
inc dword [ebp + 0x30]
mov eax, dword [ebp + 0x30]
add esi, 4
cmp eax, dword [ebp + 0x44]
jl 0x420790
jmp 0x4208d0
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0x44]
mov byte [ebp + 0x7f], 0
xor edi, edi
inc dword [ebp + 0x58]
add dword [ebp + 0xc], 4
cmp dword [ebp + 0x58], esi
jl 0x420743
mov ecx, dword [0x464c98]
push 1
push edi
push 0xffffffffffffffff
push 0x458f24
call fcn.0040152b
push dword [ebp + 0x24]
xor edi, edi
push edi
call dword [sym.imp.USER32.dll_ReleaseDC]
push dword [ebp + 4]
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
call esi
cmp dword [ebp + 0x2c], edi
je 0x420906
cmp dword [ebp + 0x20], edi
je 0x4208fd
push dword [ebp + 0x20]
push dword [ebp + 0x2c]
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp + 0x2c]
call dword [sym.imp.GDI32.dll_DeleteDC]
cmp dword [ebp + 0x1c], edi
je 0x420910
push dword [ebp + 0x1c]
call esi
cmp dword [ebp + 0x34], edi
je 0x42091e
push dword [ebp + 0x34]
call fcn.0043db8d
pop ecx
cmp dword [ebp + 0x40], edi
je 0x42092c
push dword [ebp + 0x40]
call fcn.0043db8d
pop ecx
cmp dword [ebp + 0x48], edi
je 0x42093a
push dword [ebp + 0x48]
call fcn.0043db8d
pop ecx
cmp byte [ebp + 0x7f], 0
jne 0x420945
xor eax, eax
inc eax
jmp 0x42099a
mov ecx, dword [ebp - 0xc]
cmp ecx, edi
je 0x420963
mov eax, dword [ebp + 0x58]
cdq
idiv dword [ebp + 0x4c]
sub edx, dword [ebp - 0x20]
add edx, dword [ebp + 0x6c]
push edx
call fcn.00401861
test eax, eax
je 0x420981
mov ecx, dword [ebp - 4]
cmp ecx, edi
je 0x420985
mov eax, dword [ebp + 0x58]
cdq
idiv dword [ebp + 0x4c]
sub eax, dword [ebp - 0x1c]
add eax, dword [ebp + 0x70]
push eax
call fcn.00401861
test eax, eax
jne 0x420985
xor eax, eax
jmp 0x42099a
mov ecx, dword [0x464c98]
push 1
push edi
push 0xffffffffffffffff
push 0x45771c
call fcn.0040152b
pop edi
pop esi
pop ebx
add ebp, 0x64
leave
ret 0x14