Function at 0x403e20
Capabilities:
Capture screenshot

Disassembly:
push 0xffffffffffffffff
push 0x40e332
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x378
push ebx
push ebp
push esi
push edi
mov ebp, ecx
xor edi, edi
lea ecx, [esp + 0x2c]
mov dword [esp + 0x18], edi
call sub.MFC42.DLL_CDC::CDC
lea ecx, [esp + 0x3c]
mov dword [esp + 0x390], edi
call sub.MFC42.DLL_CDC::CDC
mov dword [esp + 0x24], edi
mov dword [esp + 0x20], 0x40fd14
mov al, byte [esp + 0x398]
mov byte [esp + 0x390], 2
mov byte [esp + 0x13], al
mov eax, dword [0x413778]
cmp eax, edi
mov dword [esp + 0x4c], edi
je 0x403ea1
mov dword [esp + 0x20], 0x40fd00
mov byte [esp + 0x390], 3
jmp 0x404711
mov ecx, dword [ebp + 0x20]
push ecx
call dword [sym.imp.USER32.dll_IsIconic]
cmp eax, edi
je 0x403ec4
mov dword [esp + 0x20], 0x40fd00
mov byte [esp + 0x390], 4
jmp 0x404711
mov ebx, dword [esp + 0x39c]
cmp ebx, edi
jne 0x403ef2
mov edx, dword [ebp + 0x20]
push edx
call dword [sym.imp.USER32.dll_GetDC]
push eax
call sub.MFC42.DLL_CDC::FromHandle
mov ebx, eax
mov dword [esp + 0x50], 1
mov dword [esp + 0x39c], ebx
jmp 0x403ef6
mov dword [esp + 0x50], edi
cmp ebx, edi
jne 0x403efe
xor eax, eax
jmp 0x403f01
mov eax, dword [ebx + 4]
mov esi, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
call esi
push eax
lea ecx, [esp + 0x40]
call sub.MFC42.DLL_CDC::Attach
test ebx, ebx
jne 0x403f1c
xor eax, eax
jmp 0x403f1f
mov eax, dword [ebx + 4]
push eax
call esi
push eax
lea ecx, [esp + 0x30]
call sub.MFC42.DLL_CDC::Attach
mov al, byte [esp + 0x398]
mov esi, dword [sym.imp.GDI32.dll_CreateRectRgn]
test al, al
jne 0x4041aa
mov eax, dword [0x41379c]
test eax, eax
je 0x4041aa
mov edx, dword [0x418134]
mov eax, dword [0x413798]
cmp eax, edx
jne 0x4041aa
xor eax, eax
lea ecx, [esp + 0x68]
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], ecx
mov ecx, dword [eax*4 + 0x4131fc]
cmp ecx, dword [eax*4 + 0x41390c]
je 0x404035
mov edi, dword [ebp + 0x4c]
test edx, edx
movsx ebx, ax
mov eax, edi
je 0x403fad
sub eax, dword [ebp + 0x5c]
cdq
sub eax, edx
mov esi, eax
mov eax, 0x38e38e39
imul ebx
mov ecx, edx
sar ecx, 1
mov edx, ecx
shr edx, 0x1f
sar esi, 1
add ecx, edx
jmp 0x403fd0
mov ecx, dword [ebp + 0x5c]
sub eax, ecx
mov ecx, 9
cdq
sub eax, edx
mov esi, eax
mov eax, 0x38e38e39
imul ebx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
sar esi, 1
sub ecx, edx
imul ecx, dword [ebp + 0x50]
mov eax, dword [0x418138]
add ecx, esi
test eax, eax
mov eax, ebx
mov ebx, 9
cdq
je 0x403ff4
idiv ebx
mov eax, edx
mov edx, 8
sub edx, eax
jmp 0x403ff6
idiv ebx
imul edx, edi
mov eax, dword [ebp + 0x50]
add edx, esi
mov esi, dword [sym.imp.GDI32.dll_CreateRectRgn]
add eax, ecx
add edi, edx
push eax
push edi
push ecx
push edx
call esi
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x18]
mov edx, dword [0x418134]
mov ebx, dword [esp + 0x39c]
mov dword [ecx], eax
mov eax, dword [esp + 0x14]
inc edi
add ecx, 4
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], ecx
inc eax
cmp eax, 0x5a
mov dword [esp + 0x14], eax
jl 0x403f6f
mov eax, dword [0x4131f0]
mov ecx, dword [0x4120a8]
cmp eax, ecx
je 0x404105
test eax, eax
jl 0x404105
mov ecx, dword [ebp + 0x5c]
test edx, edx
movsx ebx, ax
mov eax, dword [ebp + 0x4c]
je 0x404088
sub eax, ecx
cdq
sub eax, edx
mov esi, eax
mov eax, 0x38e38e39
imul ebx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
sar esi, 1
add edx, ecx
mov ecx, edx
jmp 0x4040a8
sub eax, ecx
mov ecx, 9
cdq
sub eax, edx
mov esi, eax
mov eax, 0x38e38e39
imul ebx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
sar esi, 1
sub ecx, edx
imul ecx, dword [ebp + 0x50]
mov eax, dword [0x418138]
add ecx, esi
test eax, eax
mov eax, ebx
mov ebx, 9
cdq
je 0x4040cc
idiv ebx
mov eax, edx
mov edx, 8
sub edx, eax
jmp 0x4040ce
idiv ebx
mov eax, dword [ebp + 0x4c]
imul edx, eax
add edx, esi
mov esi, dword [ebp + 0x50]
add esi, ecx
add eax, edx
push esi
mov esi, dword [sym.imp.GDI32.dll_CreateRectRgn]
push eax
push ecx
push edx
call esi
mov edx, dword [0x418134]
mov ecx, dword [0x4120a8]
mov ebx, dword [esp + 0x39c]
mov dword [esp + edi*4 + 0x68], eax
inc edi
mov dword [esp + 0x18], edi
test ecx, ecx
jl 0x4041af
mov eax, dword [ebp + 0x4c]
test edx, edx
movsx ebx, cx
mov ecx, dword [ebp + 0x5c]
je 0x404137
sub eax, ecx
cdq
sub eax, edx
mov esi, eax
mov eax, 0x38e38e39
imul ebx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
sar esi, 1
add edx, ecx
mov ecx, edx
jmp 0x404157
sub eax, ecx
mov ecx, 9
cdq
sub eax, edx
mov esi, eax
mov eax, 0x38e38e39
imul ebx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
sar esi, 1
sub ecx, edx
imul ecx, dword [ebp + 0x50]
mov eax, dword [0x418138]
add ecx, esi
test eax, eax
mov eax, ebx
mov ebx, 9
cdq
je 0x40417b
idiv ebx
mov eax, edx
mov edx, 8
sub edx, eax
jmp 0x40417d
idiv ebx
mov eax, dword [ebp + 0x4c]
imul edx, eax
add edx, esi
mov esi, dword [ebp + 0x50]
add esi, ecx
add eax, edx
push esi
mov esi, dword [sym.imp.GDI32.dll_CreateRectRgn]
push eax
push ecx
push edx
call esi
mov ebx, dword [esp + 0x39c]
mov dword [esp + edi*4 + 0x68], eax
inc edi
mov dword [esp + 0x18], edi
jmp 0x4041af
mov byte [esp + 0x13], 1
mov edx, dword [ebp + 0x20]
lea ecx, [esp + 0x58]
push ecx
push edx
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x5c]
mov ecx, dword [esp + 0x60]
sub eax, edx
mov edx, dword [esp + 0x58]
inc eax
sub ecx, edx
push eax
mov eax, dword [ebx + 4]
inc ecx
push ecx
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CGdiObject::Attach
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0x20]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, dword [esp + 0x40]
push eax
push ecx
call sub.MFC42.DLL_CDC::SelectGdiObject
mov dword [esp + 0x28], eax
mov al, byte [esp + 0x13]
test al, al
jne 0x4042dd
mov eax, dword [0x41209c]
test eax, eax
jl 0x40423b
mov edx, dword [ebp + 0x50]
mov ecx, dword [0x4120a0]
add edx, ecx
push edx
mov edx, dword [ebp + 0x4c]
add edx, eax
push edx
push ecx
push eax
call esi
mov dword [esp + edi*4 + 0x68], eax
inc edi
mov dword [esp + 0x18], edi
mov ecx, dword [0x412084]
test ecx, ecx
jl 0x404263
mov edx, dword [ebp + 0x50]
mov eax, dword [0x412088]
add edx, eax
push edx
mov edx, dword [ebp + 0x4c]
add edx, ecx
push edx
push eax
push ecx
call esi
mov dword [esp + edi*4 + 0x68], eax
inc edi
mov dword [esp + 0x18], edi
mov ecx, dword [0x412094]
test ecx, ecx
jl 0x4042a0
mov ebx, dword [ebp + 0x4c]
mov eax, ebx
cdq
sub eax, edx
sar eax, 1
sub ecx, eax
mov eax, dword [ebp + 0x50]
cdq
sub eax, edx
add ebx, ecx
mov edx, eax
mov eax, dword [0x412098]
sar edx, 1
sub eax, edx
mov edx, dword [ebp + 0x50]
add edx, eax
push edx
push ebx
push eax
push ecx
call esi
mov dword [esp + edi*4 + 0x68], eax
inc edi
mov dword [esp + 0x18], edi
mov ecx, dword [0x41208c]
test ecx, ecx
jl 0x4042dd
mov ebx, dword [ebp + 0x4c]
mov eax, ebx
cdq
sub eax, edx
sar eax, 1
sub ecx, eax
mov eax, dword [ebp + 0x50]
cdq
sub eax, edx
add ebx, ecx
mov edx, eax
mov eax, dword [0x412090]
sar edx, 1
sub eax, edx
mov edx, dword [ebp + 0x50]
add edx, eax
push edx
push ebx
push eax
push ecx
call esi
mov dword [esp + edi*4 + 0x68], eax
inc edi
mov dword [esp + 0x18], edi
mov eax, dword [0x412084]
xor ecx, ecx
cmp eax, ecx
jl 0x40430b
cmp dword [0x41208c], ecx
jl 0x40430b
mov eax, dword [0x412080]
mov dword [esp + 0x54], eax
mov edx, dword [eax*4 + 0x41390c]
mov dword [eax*4 + 0x41390c], ecx
mov dword [esp + 0x4c], edx
mov al, byte [esp + 0x13]
test al, al
jne 0x40438b
cmp dword [0x412054], ecx
je 0x40438b
mov eax, dword [0x412070]
mov edx, dword [0x412064]
mov dword [eax*4 + 0x41390c], ecx
mov ecx, dword [0x41205c]
cmp ecx, edx
mov dword [esp + 0x14], ecx
jg 0x40433f
mov dword [esp + 0x14], edx
mov eax, dword [0x412060]
mov ebx, dword [0x412058]
cmp ebx, eax
jle 0x404354
mov dword [esp + 0x1c], ebx
jmp 0x40435e
mov ebx, dword [0x412058]
mov dword [esp + 0x1c], eax
cmp ecx, edx
jl 0x404364
mov ecx, edx
cmp ebx, eax
jge 0x40436a
mov eax, ebx
mov edx, dword [ebp + 0x50]
mov ebx, dword [esp + 0x14]
add edx, ebx
mov ebx, dword [esp + 0x1c]
push edx
mov edx, dword [ebp + 0x4c]
add edx, ebx
push edx
push ecx
push eax
call esi
mov dword [esp + edi*4 + 0x68], eax
inc edi
mov dword [esp + 0x18], edi
test edi, edi
jne 0x404394
mov byte [esp + 0x13], 1
mov cl, byte [esp + 0x13]
mov eax, dword [esp + 0x40]
test cl, cl
mov dword [esp + 0x14], eax
jne 0x4043d9
mov ecx, dword [esp + 0x68]
push ecx
push eax
call dword [sym.imp.GDI32.dll_SelectClipRgn]
mov ebx, 1
cmp edi, ebx
jle 0x4043d9
lea esi, [esp + 0x6c]
mov edx, dword [esi]
mov eax, dword [esp + 0x14]
push 2
push edx
push eax
call dword [sym.imp.GDI32.dll_ExtSelectClipRgn]
test eax, eax
je 0x404430
inc ebx
add esi, 4
cmp ebx, edi
jl 0x4043bd
lea ecx, [esp + 0x3c]
push ecx
mov ecx, ebp
call fcn.004049c0
xor ebx, ebx
mov dword [esp + 0x1c], 0x5a
mov dword [esp + 0x14], ebx
mov eax, dword [ebx*4 + 0x41390c]
test eax, eax
je 0x4044ac
mov eax, dword [0x418134]
mov edi, dword [ebp + 0x4c]
mov ecx, dword [ebp + 0x5c]
test eax, eax
mov eax, edi
je 0x404436
sub eax, ecx
cdq
sub eax, edx
mov esi, eax
mov eax, 0x38e38e39
imul ebx
sar edx, 1
mov eax, edx
shr eax, 0x1f
sar esi, 1
add edx, eax
mov ecx, edx
jmp 0x404456
jmp dword [sym.imp.MSVCRT.dll_abort]
sub eax, ecx
cdq
sub eax, edx
mov esi, eax
mov eax, 0x38e38e39
imul ebx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov ecx, 9
sar esi, 1
sub ecx, edx
imul ecx, dword [ebp + 0x50]
mov eax, dword [0x418138]
add ecx, esi
test eax, eax
mov eax, ebx
mov ebx, 9
cdq
je 0x40447a
idiv ebx
mov eax, edx
mov edx, 8
sub edx, eax
jmp 0x40447c
idiv ebx
imul edx, edi
mov ebx, dword [esp + 0x14]
add edx, esi
push ecx
push edx
mov eax, dword [ebx*4 + 0x41390c]
mov ecx, dword [ebx*4 + 0x4137a4]
push eax
lea edx, [esp + 0x38]
push ecx
lea eax, [esp + 0x4c]
push edx
push eax
mov ecx, ebp
call fcn.00405130
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
inc ebx
dec eax
mov dword [esp + 0x14], ebx
mov dword [esp + 0x1c], eax
jne 0x4043f3
lea ecx, [esp + 0x2c]
lea edx, [esp + 0x3c]
push ecx
push edx
mov ecx, ebp
call fcn.00405250
mov ecx, dword [esp + 0x4c]
test ecx, ecx
je 0x404521
mov esi, dword [esp + 0x54]
mov dword [esi*4 + 0x41390c], ecx
mov eax, dword [ebp + 0x50]
cdq
sub eax, edx
mov edx, eax
mov eax, dword [0x412090]
sar edx, 1
sub eax, edx
push eax
mov eax, dword [ebp + 0x4c]
cdq
sub eax, edx
mov edx, dword [0x41208c]
sar eax, 1
sub edx, eax
mov eax, dword [esi*4 + 0x4137a4]
push edx
push ecx
lea ecx, [esp + 0x38]
push eax
lea edx, [esp + 0x4c]
push ecx
push edx
mov ecx, ebp
call fcn.00405130
mov eax, dword [0x412054]
test eax, eax
je 0x404562
mov ecx, dword [0x412064]
mov edx, dword [0x412060]
push ecx
push edx
push eax
mov eax, dword [0x412050]
lea ecx, [esp + 0x38]
push eax
lea edx, [esp + 0x4c]
push ecx
push edx
mov ecx, ebp
call fcn.00405130
mov eax, dword [0x412070]
mov ecx, dword [0x412054]
mov dword [eax*4 + 0x41390c], ecx
mov eax, dword [esp + 0x28]
test eax, eax
je 0x40456d
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x40]
push eax
push edx
call sub.MFC42.DLL_CDC::SelectGdiObject
lea ecx, [esp + 0x3c]
call sub.MFC42.DLL_CDC::DeleteDC
mov eax, dword [esp + 0x39c]
mov cl, byte [esp + 0x13]
test cl, cl
mov eax, dword [eax + 4]
mov dword [esp + 0x28], eax
jne 0x4045cc
mov ecx, dword [esp + 0x68]
push ecx
push eax
call dword [sym.imp.GDI32.dll_SelectClipRgn]
mov ebx, 1
cmp edi, ebx
jle 0x4045cc
lea esi, [esp + 0x6c]
mov edx, dword [esi]
mov eax, dword [esp + 0x28]
push 2
push edx
push eax
call dword [sym.imp.GDI32.dll_ExtSelectClipRgn]
test eax, eax
je 0x40463c
inc ebx
add esi, 4
cmp ebx, edi
jl 0x4045b0
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0x20]
neg eax
sbb eax, eax
and eax, ecx
mov ecx, dword [esp + 0x30]
push eax
push ecx
call sub.MFC42.DLL_CDC::SelectGdiObject
mov edx, dword [0x4136f8]
mov esi, dword [0x4136f4]
mov ecx, dword [0x4136fc]
mov ebx, eax
mov eax, dword [0x4136f0]
sub ecx, esi
sub edx, eax
lea eax, [esp + 0x2c]
neg eax
push 0xcc0020
push esi
push dword [0x4136f0]
sbb eax, eax
and eax, dword [esp + 0x3c]
push eax
mov eax, dword [esp + 0x3ac]
push ecx
push edx
mov edx, dword [0x4136f0]
mov ecx, dword [eax + 4]
push esi
push edx
push ecx
call dword [sym.imp.GDI32.dll_BitBlt]
test ebx, ebx
jne 0x404642
jmp 0x404645
jmp dword [sym.imp.MSVCRT.dll_abort]
mov ebx, dword [ebx + 4]
mov edx, dword [esp + 0x30]
push ebx
push edx
call sub.MFC42.DLL_CDC::SelectGdiObject
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
test edi, edi
jle 0x404669
lea ebx, [esp + 0x68]
mov eax, dword [ebx]
push eax
call esi
add ebx, 4
dec edi
jne 0x40465e
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x20]
neg eax
sbb eax, eax
and eax, edx
push eax
call esi
lea ecx, [esp + 0x2c]
call sub.MFC42.DLL_CDC::DeleteDC
mov eax, dword [esp + 0x50]
test eax, eax
je 0x4046a0
mov ecx, dword [esp + 0x39c]
mov eax, dword [ebp + 0x20]
mov edx, dword [ecx + 4]
push edx
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [0x4120b0]
mov edx, dword [0x4120ac]
mov ecx, 0x5a
mov esi, 0x41390c
mov edi, 0x4131fc
mov dword [0x4131f8], eax
mov eax, dword [0x4131ec]
mov dword [0x4131f4], edx
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x4120a8]
mov dword [0x41379c], 1
mov dword [0x4131f0], ecx
mov ecx, dword [0x418134]
test eax, eax
mov dword [0x413798], ecx
je 0x404701
mov edx, dword [esp + 0x39c]
mov ecx, ebp
push edx
call fcn.00405910
mov dword [esp + 0x20], 0x40fd00
mov byte [esp + 0x390], 5
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CGdiObject::DeleteObject
lea ecx, [esp + 0x3c]
mov dword [esp + 0x20], 0x40fcec
mov byte [esp + 0x390], 0
call fcn.0040dc7a
lea ecx, [esp + 0x2c]
mov dword [esp + 0x390], 0xffffffff
call fcn.0040dc7a
mov ecx, dword [esp + 0x388]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x384
ret 8