Function at 0x43b0fc
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
mov esi, 0x4ddfdc
mov edi, 0x4ddff0
mov dword [edi], 1
mov byte [0x4ddfbe], 0
mov byte [0x4ddfbd], 0
mov byte [0x4ddfbc], 1
mov dword [0x4ddfec], 0xcc0020
mov eax, dword [edi]
mov eax, dword [ebx + eax*4]
test eax, eax
je 0x43b1b2
mov edx, dword [edi]
cmp byte [eax], 0x2d
jne 0x43b1b2
push 0x68
mov ecx, dword [edi]
push eax
call fcn.004bce0c
add esp, 8
test eax, eax
je 0x43b15c
mov byte [0x4ddfbe], 1
push 0x69
mov eax, dword [edi]
mov edx, dword [ebx + eax*4]
push edx
call fcn.004bce0c
add esp, 8
test eax, eax
je 0x43b17a
mov dword [0x4ddfec], 0xbb0226
push 0x6e
mov ecx, dword [edi]
mov eax, dword [ebx + ecx*4]
push eax
call fcn.004bce0c
add esp, 8
test eax, eax
je 0x43b195
mov byte [0x4ddfbc], 0
push 0x74
mov edx, dword [edi]
mov ecx, dword [ebx + edx*4]
push ecx
call fcn.004bce0c
add esp, 8
test eax, eax
je 0x43b1b0
mov byte [0x4ddfbd], 1
inc dword [edi]
mov eax, dword [edi]
cmp dword [ebx + eax*4], 0
jne 0x43b1cd
push 0
push 0
mov edx, dword [ebx]
push edx
push 0
call fcn.0043e834
jmp 0x43bb32
push 0x4ca688
mov ecx, dword [edi]
mov eax, dword [ebx + ecx*4]
push eax
call fcn.004bcfe4
add esp, 8
test eax, eax
jne 0x43b1ee
xor edx, edx
mov dword [0x4ddfa4], edx
jmp 0x43b1fe
mov ecx, dword [edi]
mov eax, dword [ebx + ecx*4]
push eax
call fcn.004b78d4
mov dword [0x4ddfa4], eax
mov eax, dword [0x4ddfa4]
test eax, eax
je 0x43b219
cmp byte [eax + 0x4e5], 0
je 0x43b219
cmp dword [eax + 0x524], 0
jne 0x43b22c
push 7
push 0
mov edx, dword [ebx]
push edx
push 0
call fcn.0043e834
jmp 0x43bb32
cmp byte [0x4ddfbe], 0
je 0x43b243
mov ecx, dword [0x4ddfa4]
mov eax, dword [ecx]
push eax
call fcn.0044c8dc
mov edx, dword [edi]
cmp dword [ebx + edx*4 + 4], 0
je 0x43b269
cmp byte [0x4ddfbd], 0
je 0x43b269
mov ecx, dword [edi]
mov eax, dword [ebx + ecx*4 + 4]
push eax
call fcn.004c4ccc
pop ecx
mov dword [0x4ddfc0], eax
inc dword [edi]
mov edx, dword [edi]
cmp dword [ebx + edx*4 + 4], 0
je 0x43b2a8
mov ecx, dword [edi]
cmp dword [ebx + ecx*4 + 8], 0
je 0x43b2a8
mov eax, dword [edi]
cmp dword [ebx + eax*4 + 0xc], 0
je 0x43b2a8
mov edx, dword [edi]
cmp dword [ebx + edx*4 + 0x10], 0
je 0x43b2a8
mov ecx, dword [edi]
cmp dword [ebx + ecx*4 + 0x14], 0
je 0x43b2a8
mov eax, dword [edi]
cmp dword [ebx + eax*4 + 0x18], 0
je 0x43b2a8
mov edx, dword [edi]
cmp dword [ebx + edx*4 + 0x1c], 0
jne 0x43b2bb
push 0
push 0
mov ecx, dword [ebx]
push ecx
push 0
call fcn.0043e834
jmp 0x43bb32
mov eax, dword [edi]
mov edx, dword [ebx + eax*4 + 4]
push edx
call fcn.004c4ccc
pop ecx
mov dword [0x4ddfcc], eax
mov ecx, dword [edi]
mov eax, dword [ebx + ecx*4 + 8]
push eax
call fcn.004c4ccc
pop ecx
mov dword [0x4ddfd0], eax
mov edx, dword [edi]
mov ecx, dword [ebx + edx*4 + 0xc]
push ecx
call fcn.004c4ccc
pop ecx
inc eax
mov dword [0x4ddfd4], eax
mov eax, dword [edi]
mov edx, dword [ebx + eax*4 + 0x10]
push edx
call fcn.004c4ccc
pop ecx
inc eax
mov dword [0x4ddfd8], eax
mov ecx, dword [edi]
mov eax, dword [ebx + ecx*4 + 0x14]
push eax
call fcn.004b78d4
mov dword [0x4ddfa8], eax
mov eax, dword [0x4ddfa8]
test eax, eax
je 0x43b331
cmp byte [eax + 0x4e5], 0
je 0x43b331
cmp dword [eax + 0x524], 0
jne 0x43b344
push 7
push 0
mov edx, dword [ebx]
push edx
push 0
call fcn.0043e834
jmp 0x43bb32
mov ecx, dword [edi]
mov eax, dword [ebx + ecx*4 + 0x18]
push eax
call fcn.004c4ccc
pop ecx
mov dword [esi], eax
mov edx, dword [edi]
mov ecx, dword [ebx + edx*4 + 0x1c]
push ecx
call fcn.004c4ccc
pop ecx
mov dword [esi + 4], eax
mov eax, dword [0x4ddfd4]
mov dword [esi + 8], eax
mov edx, dword [0x4ddfd8]
mov dword [esi + 0xc], edx
mov ecx, dword [edi]
cmp dword [ebx + ecx*4 + 0x20], 0
je 0x43b3a8
mov eax, dword [edi]
cmp dword [ebx + eax*4 + 0x24], 0
je 0x43b3a8
mov edx, dword [edi]
mov ecx, dword [ebx + edx*4 + 0x20]
push ecx
call fcn.004c4ccc
pop ecx
inc eax
mov dword [esi + 8], eax
mov eax, dword [edi]
mov edx, dword [ebx + eax*4 + 0x24]
push edx
call fcn.004c4ccc
pop ecx
inc eax
mov dword [esi + 0xc], eax
xor ecx, ecx
mov dword [0x4ddf98], ecx
xor eax, eax
mov dword [0x4ddf90], eax
xor edx, edx
mov dword [0x4ddf94], edx
xor ecx, ecx
mov dword [0x4ddfa0], ecx
xor eax, eax
mov dword [0x4ddfb0], eax
xor edx, edx
mov dword [0x4ddfb4], edx
xor ecx, ecx
mov dword [0x4ddfb8], ecx
mov edi, dword [0x4ddfa4]
cmp edi, dword [0x4ddfa8]
jne 0x43b74b
mov eax, dword [edi]
push eax
call sub.USER32.dll_GetDC
mov ebx, eax
mov dword [0x4ddfac], ebx
test ebx, ebx
jne 0x43b40b
xor eax, eax
jmp 0x43bb32
mov edx, dword [0x4ddfd8]
push edx
mov ecx, dword [0x4ddfd4]
push ecx
push ebx
call sub.GDI32.dll_CreateCompatibleBitmap
mov edi, eax
mov dword [0x4ddf98], edi
test edi, edi
je 0x43b67c
mov eax, dword [0x4ddfac]
push eax
call sub.GDI32.dll_CreateCompatibleDC
mov ebx, eax
mov dword [0x4ddfb0], ebx
test ebx, ebx
je 0x43b67c
mov eax, dword [0x4ddf98]
push eax
push ebx
call sub.GDI32.dll_SelectObject
mov dword [0x4ddf90], eax
mov edx, dword [0x4ddfac]
push edx
call sub.GDI32.dll_CreateCompatibleDC
mov ebx, eax
mov dword [0x4ddfb4], ebx
test ebx, ebx
je 0x43b67c
mov eax, dword [0x4ddfa4]
mov edx, dword [eax + 0x524]
push edx
push ebx
call sub.GDI32.dll_SelectObject
mov dword [0x4ddf94], eax
push 0xcc0020
mov ecx, dword [0x4ddfd0]
push ecx
mov eax, dword [0x4ddfcc]
push eax
mov edx, dword [0x4ddfb4]
push edx
mov ecx, dword [0x4ddfd8]
push ecx
mov eax, dword [0x4ddfd4]
push eax
push 0
push 0
mov edx, dword [0x4ddfb0]
push edx
call sub.GDI32.dll_BitBlt
push 3
mov ecx, dword [0x4ddfb4]
push ecx
call sub.GDI32.dll_SetStretchBltMode
cmp byte [0x4ddfbd], 0
je 0x43b5de
mov eax, dword [0x4ddfac]
push eax
call sub.GDI32.dll_CreateCompatibleDC
mov ebx, eax
mov dword [0x4ddfb8], ebx
test ebx, ebx
je 0x43b67c
mov eax, dword [0x4ddfc0]
push eax
mov edx, dword [0x4ddfd8]
push edx
mov ecx, dword [0x4ddfd4]
push ecx
push ebx
mov eax, dword [0x4ddfb0]
push eax
call fcn.0043b04c
mov dword [0x4ddfa0], eax
push 0
mov edx, dword [0x4ddfb4]
push edx
call sub.GDI32.dll_SetTextColor
mov dword [0x4ddfc4], eax
push 0xffffff
mov ecx, dword [0x4ddfb4]
push ecx
call sub.GDI32.dll_SetBkColor
mov dword [0x4ddfc8], eax
push 0x8800c6
mov eax, dword [0x4ddfd8]
push eax
mov edx, dword [0x4ddfd4]
push edx
push 0
push 0
mov ecx, dword [0x4ddfb8]
push ecx
mov eax, dword [esi + 0xc]
push eax
mov edx, dword [esi + 8]
push edx
mov ecx, dword [esi + 4]
push ecx
mov eax, dword [esi]
push eax
mov edx, dword [0x4ddfb4]
push edx
call sub.GDI32.dll_StretchBlt
push 0xee0086
mov ecx, dword [0x4ddfd8]
push ecx
mov eax, dword [0x4ddfd4]
push eax
push 0
push 0
mov edx, dword [0x4ddfb0]
push edx
mov ecx, dword [esi + 0xc]
push ecx
mov eax, dword [esi + 8]
push eax
mov edx, dword [esi + 4]
push edx
mov ecx, dword [esi]
push ecx
mov eax, dword [0x4ddfb4]
push eax
call sub.GDI32.dll_StretchBlt
mov edx, dword [0x4ddfc4]
push edx
mov ecx, dword [0x4ddfb4]
push ecx
call sub.GDI32.dll_SetTextColor
mov eax, dword [0x4ddfc8]
push eax
mov edx, dword [0x4ddfb4]
push edx
call sub.GDI32.dll_SetBkColor
jmp 0x43b618
mov ecx, dword [0x4ddfec]
push ecx
mov eax, dword [0x4ddfd8]
push eax
mov edx, dword [0x4ddfd4]
push edx
push 0
push 0
mov ecx, dword [0x4ddfb0]
push ecx
mov eax, dword [esi + 0xc]
push eax
mov edx, dword [esi + 8]
push edx
mov ecx, dword [esi + 4]
push ecx
mov eax, dword [esi]
push eax
mov edx, dword [0x4ddfb4]
push edx
call sub.GDI32.dll_StretchBlt
cmp byte [0x4ddfbc], 0
je 0x43b649
push 0xcc0020
mov edx, dword [esi + 4]
push edx
mov eax, dword [esi]
push eax
mov ecx, dword [0x4ddfb4]
push ecx
mov ecx, dword [esi + 0xc]
push ecx
mov ecx, dword [esi + 8]
push ecx
push edx
push eax
mov eax, dword [0x4ddfac]
push eax
call sub.GDI32.dll_BitBlt
mov eax, dword [esi]
add eax, dword [esi + 8]
mov edx, dword [0x4ddfa4]
cmp eax, dword [edx + 0x534]
jle 0x43b662
mov dword [edx + 0x534], eax
mov eax, dword [esi + 4]
add eax, dword [esi + 0xc]
mov edx, dword [0x4ddfa4]
cmp eax, dword [edx + 0x538]
jle 0x43b67c
mov dword [edx + 0x538], eax
cmp dword [0x4ddfb8], 0
je 0x43b6bd
cmp dword [0x4ddfa0], 0
je 0x43b6b1
mov ecx, dword [0x4ddfa0]
push ecx
mov eax, dword [0x4ddfb8]
push eax
call sub.GDI32.dll_SelectObject
mov dword [0x4ddfa0], eax
mov edx, dword [0x4ddfa0]
push edx
call sub.GDI32.dll_DeleteObject
mov ecx, dword [0x4ddfb8]
push ecx
call sub.GDI32.dll_DeleteDC
cmp dword [0x4ddfb4], 0
je 0x43b6ed
cmp dword [0x4ddf94], 0
je 0x43b6e1
mov eax, dword [0x4ddf94]
push eax
mov edx, dword [0x4ddfb4]
push edx
call sub.GDI32.dll_SelectObject
mov ecx, dword [0x4ddfb4]
push ecx
call sub.GDI32.dll_DeleteDC
cmp dword [0x4ddfb0], 0
je 0x43b71d
cmp dword [0x4ddf90], 0
je 0x43b711
mov eax, dword [0x4ddf90]
push eax
mov edx, dword [0x4ddfb0]
push edx
call sub.GDI32.dll_SelectObject
mov ecx, dword [0x4ddfb0]
push ecx
call sub.GDI32.dll_DeleteDC
cmp dword [0x4ddf98], 0
je 0x43b731
mov eax, dword [0x4ddf98]
push eax
call sub.GDI32.dll_DeleteObject
mov edx, dword [0x4ddfac]
push edx
mov ecx, dword [0x4ddfa4]
mov eax, dword [ecx]
push eax
call sub.USER32.dll_ReleaseDC
jmp 0x43bb2d
mov edx, dword [0x4ddfa8]
mov ecx, dword [edx]
push ecx
call sub.USER32.dll_GetDC
mov ebx, eax
mov dword [0x4ddfac], ebx
test ebx, ebx
jne 0x43b76c
xor eax, eax
jmp 0x43bb32
push ebx
call sub.GDI32.dll_CreateCompatibleDC
mov edi, eax
mov dword [0x4ddfb0], edi
test edi, edi
je 0x43ba63
mov eax, dword [0x4ddfa4]
mov edx, dword [eax + 0x524]
push edx
push edi
call sub.GDI32.dll_SelectObject
mov dword [0x4ddf90], eax
mov ecx, dword [0x4ddfac]
push ecx
call sub.GDI32.dll_CreateCompatibleDC
mov ebx, eax
mov dword [0x4ddfb4], ebx
test ebx, ebx
je 0x43ba63
mov eax, dword [0x4ddfa8]
mov edx, dword [eax + 0x524]
push edx
push ebx
call sub.GDI32.dll_SelectObject
mov dword [0x4ddf94], eax
push 3
mov ecx, dword [0x4ddfb4]
push ecx
call sub.GDI32.dll_SetStretchBltMode
cmp byte [0x4ddfbd], 0
je 0x43b9a1
mov eax, dword [0x4ddfac]
push eax
call sub.GDI32.dll_CreateCompatibleDC
mov dword [0x4ddfb8], eax
cmp dword [0x4ddfb8], 0
je 0x43ba63
mov edx, dword [0x4ddfd8]
push edx
mov ecx, dword [0x4ddfd4]
push ecx
mov eax, dword [0x4ddfac]
push eax
call sub.GDI32.dll_CreateCompatibleBitmap
mov ebx, eax
mov dword [0x4ddf98], ebx
test ebx, ebx
je 0x43ba63
push ebx
mov eax, dword [0x4ddfb8]
push eax
call sub.GDI32.dll_SelectObject
mov dword [0x4ddf9c], eax
push 0xcc0020
mov edx, dword [0x4ddfd0]
push edx
mov ecx, dword [0x4ddfcc]
push ecx
mov eax, dword [0x4ddfb0]
push eax
mov edx, dword [0x4ddfd8]
push edx
mov ecx, dword [0x4ddfd4]
push ecx
push 0
push 0
mov eax, dword [0x4ddfb8]
push eax
call sub.GDI32.dll_BitBlt
mov edx, dword [0x4ddf9c]
push edx
mov ecx, dword [0x4ddfb8]
push ecx
call sub.GDI32.dll_SelectObject
mov eax, dword [0x4ddf90]
push eax
mov edx, dword [0x4ddfb0]
push edx
call sub.GDI32.dll_SelectObject
mov ecx, dword [0x4ddf98]
push ecx
mov eax, dword [0x4ddfb0]
push eax
call sub.GDI32.dll_SelectObject
mov dword [0x4ddf90], eax
mov edx, dword [0x4ddfc0]
push edx
mov ecx, dword [esi + 0xc]
push ecx
mov eax, dword [esi + 8]
push eax
mov edx, dword [0x4ddfb8]
push edx
mov ecx, dword [0x4ddfb0]
push ecx
call fcn.0043b04c
mov dword [0x4ddfa0], eax
cmp dword [0x4ddfa0], 0
je 0x43ba63
push 0
mov eax, dword [0x4ddfb4]
push eax
call sub.GDI32.dll_SetTextColor
mov dword [0x4ddfc4], eax
push 0xffffff
mov edx, dword [0x4ddfb4]
push edx
call sub.GDI32.dll_SetBkColor
mov dword [0x4ddfc8], eax
push 0x8800c6
mov ecx, dword [0x4ddfd8]
push ecx
mov eax, dword [0x4ddfd4]
push eax
push 0
push 0
mov edx, dword [0x4ddfb8]
push edx
mov ecx, dword [esi + 0xc]
push ecx
mov eax, dword [esi + 8]
push eax
mov edx, dword [esi + 4]
push edx
mov ecx, dword [esi]
push ecx
mov eax, dword [0x4ddfb4]
push eax
call sub.GDI32.dll_StretchBlt
push 0xee0086
mov edx, dword [0x4ddfd8]
push edx
mov ecx, dword [0x4ddfd4]
push ecx
push 0
push 0
mov eax, dword [0x4ddfb0]
push eax
mov edx, dword [esi + 0xc]
push edx
mov ecx, dword [esi + 8]
push ecx
mov eax, dword [esi + 4]
push eax
mov edx, dword [esi]
push edx
mov ecx, dword [0x4ddfb4]
push ecx
call sub.GDI32.dll_StretchBlt
mov eax, dword [0x4ddfc4]
push eax
mov edx, dword [0x4ddfb4]
push edx
call sub.GDI32.dll_SetTextColor
mov ecx, dword [0x4ddfc8]
push ecx
mov eax, dword [0x4ddfb4]
push eax
call sub.GDI32.dll_SetBkColor
jmp 0x43b9e4
mov edx, dword [0x4ddfec]
push edx
mov ecx, dword [0x4ddfd8]
push ecx
mov eax, dword [0x4ddfd4]
push eax
mov edx, dword [0x4ddfd0]
push edx
mov ecx, dword [0x4ddfcc]
push ecx
mov eax, dword [0x4ddfb0]
push eax
mov edx, dword [esi + 0xc]
push edx
mov ecx, dword [esi + 8]
push ecx
mov eax, dword [esi + 4]
push eax
mov edx, dword [esi]
push edx
mov ecx, dword [0x4ddfb4]
push ecx
call sub.GDI32.dll_StretchBlt
cmp byte [0x4ddfbc], 0
je 0x43ba1b
push 0xcc0020
mov eax, dword [esi + 4]
push eax
mov edx, dword [esi]
push edx
mov ecx, dword [0x4ddfb4]
push ecx
mov eax, dword [esi + 0xc]
push eax
mov edx, dword [esi + 8]
push edx
mov ecx, dword [esi + 4]
push ecx
mov eax, dword [esi]
push eax
mov edx, dword [0x4ddfac]
push edx
call sub.GDI32.dll_BitBlt
mov ecx, dword [esi]
add ecx, dword [esi + 8]
mov eax, dword [0x4ddfa4]
cmp ecx, dword [eax + 0x534]
jle 0x43ba3e
mov edx, dword [esi]
add edx, dword [esi + 8]
mov ecx, dword [0x4ddfa4]
mov dword [ecx + 0x534], edx
mov eax, dword [esi + 4]
add eax, dword [esi + 0xc]
mov edx, dword [0x4ddfa4]
cmp eax, dword [edx + 0x538]
jle 0x43ba63
mov ecx, dword [esi + 4]
add ecx, dword [esi + 0xc]
mov eax, dword [0x4ddfa4]
mov dword [eax + 0x538], ecx
cmp dword [0x4ddfb8], 0
je 0x43baa4
cmp dword [0x4ddfa0], 0
je 0x43ba98
mov edx, dword [0x4ddfa0]
push edx
mov ecx, dword [0x4ddfb8]
push ecx
call sub.GDI32.dll_SelectObject
mov dword [0x4ddfa0], eax
mov eax, dword [0x4ddfa0]
push eax
call sub.GDI32.dll_DeleteObject
mov edx, dword [0x4ddfb8]
push edx
call sub.GDI32.dll_DeleteDC
cmp dword [0x4ddfb4], 0
je 0x43bad4
cmp dword [0x4ddf94], 0
je 0x43bac8
mov ecx, dword [0x4ddf94]
push ecx
mov eax, dword [0x4ddfb4]
push eax
call sub.GDI32.dll_SelectObject
mov edx, dword [0x4ddfb4]
push edx
call sub.GDI32.dll_DeleteDC
cmp dword [0x4ddfb0], 0
je 0x43bb04
cmp dword [0x4ddf90], 0
je 0x43baf8
mov ecx, dword [0x4ddf90]
push ecx
mov eax, dword [0x4ddfb0]
push eax
call sub.GDI32.dll_SelectObject
mov edx, dword [0x4ddfb0]
push edx
call sub.GDI32.dll_DeleteDC
cmp dword [0x4ddf98], 0
je 0x43bb19
mov ecx, dword [0x4ddf98]
push ecx
call sub.GDI32.dll_DeleteObject
mov eax, dword [0x4ddfac]
push eax
mov edx, dword [0x4ddfa8]
mov ecx, dword [edx]
push ecx
call sub.USER32.dll_ReleaseDC
mov eax, 1
pop edi
pop esi
pop ebx
pop ebp
ret 4