Function at 0x413950
Capabilities:
Capture screenshot

Disassembly:
sub esp, 0xf0
push ebx
push esi
mov esi, ecx
cmp dword [esi + 0x114], 0
push edi
jne 0x4139d9
mov ecx, dword [esi + 0x38]
lea eax, [esp + 0x40]
push eax
push ecx
call dword [sym.imp.USER32.dll_BeginPaint]
mov ebx, eax
test ebx, ebx
je 0x4141bf
mov eax, dword [esi + 0x38]
lea edx, [esp + 0xac]
push edx
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [esi + 0xd8]
push ecx
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov edi, eax
test edi, edi
je 0x4139b9
push edi
lea edx, [esp + 0xb0]
push edx
push ebx
call dword [sym.imp.USER32.dll_FillRect]
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [esi + 0x38]
lea eax, [esp + 0x40]
push eax
push ecx
call dword [sym.imp.USER32.dll_EndPaint]
pop edi
pop esi
mov eax, 1
pop ebx
add esp, 0xf0
ret 0x10
cmp dword [esi + 0x64], 0
je 0x4141b2
mov edx, dword [esi + 0x38]
push ebp
push 0xfffffffffffffff0
push edx
call dword [sym.imp.USER32.dll_GetWindowLongA]
test eax, 0x40000000
je 0x413bdd
mov ecx, dword [esi + 0x38]
lea eax, [esp + 0xc0]
push eax
push ecx
call dword [sym.imp.USER32.dll_BeginPaint]
mov edi, eax
mov dword [esp + 0x28], edi
test edi, edi
je 0x413c5e
mov eax, dword [esi + 0x38]
lea edx, [esp + 0x18]
push edx
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov ebp, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
sub ebp, dword [esp + 0x18]
sub ebx, dword [esp + 0x1c]
xor eax, eax
lea ecx, [esp + 0x44]
push 0x2c
push ecx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
call fcn.00411e60
add esp, 8
mov edx, 1
mov eax, 0x20
push edi
mov dword [esp + 0x48], 0x28
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x50], ebx
mov word [esp + 0x54], dx
mov word [esp + 0x56], ax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edi, eax
cmp ebp, dword [esi + 0xdc]
jne 0x413ab4
cmp ebx, dword [esi + 0xe0]
je 0x413afa
mov eax, dword [esi + 0xf4]
test eax, eax
je 0x413acf
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [esi + 0xf4], 0
push 0
push 0
lea ecx, [esi + 0xf8]
push ecx
push 0
lea edx, [esp + 0x54]
push edx
push edi
call dword [sym.imp.GDI32.dll_CreateDIBSection]
mov dword [esi + 0xf4], eax
mov dword [esi + 0xdc], ebp
mov dword [esi + 0xe0], ebx
mov eax, dword [esi + 0xf4]
mov ebp, dword [sym.imp.GDI32.dll_SelectObject]
push eax
push edi
call ebp
mov edx, dword [esi + 0x38]
lea ecx, [esp + 0x10]
push ecx
push edx
mov dword [esp + 0x1c], eax
call fcn.0042b6a0
mov ecx, dword [esp + 0x10]
mov eax, ecx
shr eax, 8
movzx eax, al
movzx edx, cl
shl edx, 8
or eax, edx
mov edx, ecx
sar edx, 0x10
movzx edx, dl
shl eax, 8
or eax, edx
and ecx, 0xff000000
or eax, ecx
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ebx, eax
push ebx
lea eax, [esp + 0x1c]
push eax
push edi
call dword [sym.imp.USER32.dll_FillRect]
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
push 0
push edi
mov ecx, esi
call fcn.004135d0
mov eax, dword [esi + 0x114]
mov edx, dword [eax]
push 0
push 0
lea ecx, [esi + 0x50]
push ecx
push ecx
push edi
push 0
push 0
push 0
push 0xffffffffffffffff
push 1
push eax
mov eax, dword [edx + 0xc]
call eax
mov ecx, dword [esi + 0xf8]
push ecx
mov ecx, esi
call fcn.00413540
push 1
push edi
mov ecx, esi
call fcn.004135d0
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
push 0xcc0020
push 0
push 0
push edi
push edx
push eax
push 0
push 0
push ecx
call dword [sym.imp.GDI32.dll_BitBlt]
mov edx, dword [esp + 0x14]
push edx
push edi
call ebp
push edi
call dword [sym.imp.GDI32.dll_DeleteDC]
jmp 0x41418e
xor eax, eax
push eax
lea edx, [esp + 0x34]
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov eax, dword [esi + 0x38]
push edx
push eax
mov dword [esp + 0x3c], 0
call dword [sym.imp.USER32.dll_GetUpdateRect]
mov edx, dword [esi + 0x38]
lea ecx, [esp + 0x18]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [esp + 0x30]
cmp eax, dword [esp + 0x38]
je 0x413c26
mov ecx, dword [esp + 0x34]
cmp ecx, dword [esp + 0x3c]
jne 0x413c46
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], edx
mov ecx, dword [esi + 0x38]
lea eax, [esp + 0xc0]
push eax
push ecx
call dword [sym.imp.USER32.dll_BeginPaint]
mov ebp, eax
test ebp, ebp
jne 0x413c6d
pop ebp
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0xf0
ret 0x10
cmp dword [esi + 0xd4], 0
jne 0x413d96
mov edx, dword [esp + 0x24]
sub edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
sub eax, dword [esp + 0x18]
push edx
push eax
push ebp
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov ebx, eax
mov dword [esp + 0x14], ebx
test ebx, ebx
je 0x413d8a
push ebp
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edi, eax
test edi, edi
je 0x413d83
push ebx
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x28], eax
test eax, eax
je 0x413d77
mov edx, dword [esi + 0x38]
lea ecx, [esp + 0x10]
push ecx
push edx
call fcn.0042b6a0
mov ecx, dword [esp + 0x10]
mov eax, ecx
shr eax, 8
movzx eax, al
movzx edx, cl
shl edx, 8
or eax, edx
mov edx, ecx
sar edx, 0x10
movzx edx, dl
shl eax, 8
or eax, edx
and ecx, 0xff000000
or eax, ecx
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ebx, eax
test ebx, ebx
je 0x413d73
push ebx
lea eax, [esp + 0x1c]
push eax
push edi
call dword [sym.imp.USER32.dll_FillRect]
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
push 0
push edi
mov ecx, esi
call fcn.004135d0
mov eax, dword [esi + 0x114]
mov edx, dword [eax]
push 0
push 0
lea ecx, [esi + 0x50]
push ecx
push ecx
push edi
push 0
push 0
push 0
push 0xffffffffffffffff
push 1
push eax
mov eax, dword [edx + 0xc]
call eax
push 1
push edi
mov ecx, esi
call fcn.004135d0
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
push 0xcc0020
push 0
push 0
push edi
push ecx
push edx
push 0
push 0
push ebp
call dword [sym.imp.GDI32.dll_BitBlt]
mov ebx, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
push eax
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
call dword [sym.imp.GDI32.dll_DeleteDC]
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x41418e
push 0
push 0
push 0
push str.DISPLAY
call dword [sym.imp.GDI32.dll_CreateDCA]
push eax
mov dword [esp + 0x94], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov ebp, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
sub ebp, dword [esp + 0x18]
sub ebx, dword [esp + 0x1c]
lea ecx, [esp + 0x30]
push ecx
mov edi, eax
mov dword [esp + 0x98], ebp
mov dword [esp + 0xa4], ebx
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
push eax
push edi
mov dword [esp + 0x94], eax
call dword [sym.imp.GDI32.dll_SelectClipRgn]
xor eax, eax
lea edx, [esp + 0x44]
push 0x2c
push edx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
call fcn.00411e60
add esp, 8
mov eax, 1
mov ecx, 0x20
mov dword [esp + 0x44], 0x28
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], ebx
mov word [esp + 0x50], ax
mov word [esp + 0x52], cx
cmp ebp, dword [esi + 0xdc]
jne 0x413e64
cmp ebx, dword [esi + 0xe0]
je 0x413f1e
mov eax, dword [esi + 0xf4]
test eax, eax
je 0x413e7f
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [esi + 0xf4], 0
push 0
push 0
lea edx, [esi + 0xf8]
push edx
push 0
lea eax, [esp + 0x54]
push eax
push edi
call dword [sym.imp.GDI32.dll_CreateDIBSection]
mov dword [esi + 0xf4], eax
mov eax, dword [esi + 0xe4]
test eax, eax
je 0x413eb9
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [esi + 0xe4], 0
push 0
push 0
lea ecx, [esi + 0xec]
push ecx
push 0
lea edx, [esp + 0x54]
push edx
push edi
call dword [sym.imp.GDI32.dll_CreateDIBSection]
mov dword [esi + 0xe4], eax
mov eax, dword [esi + 0xe8]
test eax, eax
je 0x413ef3
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [esi + 0xe8], 0
push 0
push 0
lea eax, [esi + 0xf0]
push eax
push 0
lea ecx, [esp + 0x54]
push ecx
push edi
call dword [sym.imp.GDI32.dll_CreateDIBSection]
mov dword [esi + 0xe8], eax
mov dword [esi + 0xdc], ebp
mov dword [esi + 0xe0], ebx
mov edx, dword [esi + 0xe4]
push edx
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
push 0xffffff
mov dword [esp + 0xa8], eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ebx, eax
push ebx
lea eax, [esp + 0x1c]
push eax
push edi
call dword [sym.imp.USER32.dll_FillRect]
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [esi + 0x114]
mov ecx, dword [eax]
push 0
push 0
push 0
lea edx, [esp + 0x24]
push edx
push edi
push 0
push 0
push 0
push 0xffffffffffffffff
push 1
push eax
mov eax, dword [ecx + 0xc]
call eax
mov ecx, dword [esi + 0xe8]
push ecx
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
push 0
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ebx, eax
push ebx
lea edx, [esp + 0x1c]
push edx
push edi
call dword [sym.imp.USER32.dll_FillRect]
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [esi + 0x114]
mov ecx, dword [eax]
push 0
push 0
push 0
lea edx, [esp + 0x24]
push edx
push edi
push 0
push 0
push 0
push 0xffffffffffffffff
push 1
push eax
mov eax, dword [ecx + 0xc]
call eax
mov ebx, dword [esp + 0x34]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x30]
mov edx, dword [esi + 0xf0]
sub eax, ebx
dec eax
imul eax, ebp
add eax, ecx
sub ecx, ebp
sub ecx, dword [esp + 0x38]
mov ebp, dword [esi + 0xf8]
add eax, eax
mov dword [esp + 0x10], ecx
mov ecx, dword [esi + 0xec]
add eax, eax
add ecx, eax
add edx, eax
add ebp, eax
mov dword [esp + 0x14], ebx
mov dword [esp + 0x40], ebp
cmp ebx, dword [esp + 0x3c]
jge 0x414085
mov eax, dword [esp + 0x10]
add eax, eax
add eax, eax
mov dword [esp + 0x10], eax
lea esp, [esp]
mov eax, dword [esp + 0x30]
cmp eax, dword [esp + 0x38]
mov dword [esp + 0x28], eax
jge 0x414069
mov edi, edi
mov eax, dword [edx]
movzx ebx, byte [ecx]
movzx ebp, al
sub ebx, ebp
mov ebp, dword [esp + 0x40]
not ebx
and eax, 0xffffff
shl ebx, 0x18
add ebx, eax
mov eax, dword [esp + 0x28]
mov dword [ebp], ebx
inc eax
add ebp, 4
add ecx, 4
add edx, 4
cmp eax, dword [esp + 0x38]
mov dword [esp + 0x28], eax
mov dword [esp + 0x40], ebp
jl 0x414030
mov eax, dword [esp + 0x10]
inc dword [esp + 0x14]
add ebp, eax
add ecx, eax
add edx, eax
mov eax, dword [esp + 0x14]
cmp eax, dword [esp + 0x3c]
mov dword [esp + 0x40], ebp
jl 0x414020
mov ecx, dword [esi + 0xf8]
push ecx
mov ecx, esi
call fcn.00413540
mov edx, dword [esi + 0xf4]
mov ebp, dword [sym.imp.GDI32.dll_SelectObject]
push edx
push edi
call ebp
mov edx, dword [esi + 0x38]
xor eax, eax
xor ebx, ebx
mov word [esp + 0x2d], ax
lea ecx, [esp + 0xb0]
mov byte [esp + 0x2f], al
mov al, byte [esi + 0xfc]
push ecx
push edx
mov byte [esp + 0x34], bl
mov byte [esp + 0x35], bl
mov byte [esp + 0x36], al
mov byte [esp + 0x37], 1
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], ebx
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [esp + 0xb4]
mov edx, dword [esp + 0x94]
mov eax, dword [esp + 0xb0]
push 2
mov dword [esp + 0x8c], ecx
lea ecx, [esp + 0x30]
push ecx
push ebx
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0xa4], edx
lea edx, [esp + 0xb4]
push edx
mov edx, dword [esi + 0x38]
mov dword [esp + 0xac], ebx
mov ebx, dword [esp + 0xa0]
push edi
mov dword [esp + 0xb0], eax
lea eax, [esp + 0xac]
push eax
mov eax, dword [esi + 0xd4]
lea ecx, [esp + 0x9c]
push ecx
push ebx
push edx
call eax
mov ecx, dword [esp + 0x8c]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edx, dword [esp + 0xa4]
push edx
push edi
call ebp
push edi
mov edi, dword [sym.imp.GDI32.dll_DeleteDC]
call edi
push ebx
call edi
mov ecx, dword [esi + 0x38]
lea eax, [esp + 0xc0]
push eax
push ecx
call dword [sym.imp.USER32.dll_EndPaint]
pop ebp
pop edi
pop esi
mov eax, 1
pop ebx
add esp, 0xf0
ret 0x10
mov edx, dword [esp + 0x10c]
mov dword [edx], 0
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0xf0
ret 0x10