Function at 0x100c0990
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
mov ebx, ecx
mov ecx, dword [ebp + 0x10]
push edi
mov edi, dword [ebp + 0xc]
mov eax, ecx
and eax, 0x100
mov dword [ebp - 8], ebx
mov edx, dword [ebx]
add edx, 0x2b0
movups xmm0, xmmword [edi]
movups xmmword [ebp - 0x1c], xmm0
test ecx, 0x400
je 0x100c0b44
test eax, eax
je 0x100c09ff
push 0xb
mov ecx, ebx
call dword [edx]
mov edx, dword [edi + 4]
mov esi, dword [edi]
mov ecx, dword [ebp + 8]
push eax
push eax
mov eax, dword [edi + 0xc]
add ecx, 0x1c
sub eax, edx
mov dword [ebp + 8], ecx
push eax
mov eax, dword [edi + 8]
mov edi, ecx
sub eax, esi
push eax
push edx
push esi
push dword [edi]
call sym.HncOfficeFramework.dll_void___cdecl_HDraw3dRect_struct_HDC_____int__int__int__int__unsigned_long_int__unsigned_long_int_
add esp, 0x1c
jmp 0x100c0a93
test ecx, 0x200
je 0x100c0a4b
push 0x14
mov ecx, ebx
call dword [edx]
mov edx, dword [ebx]
mov ecx, ebx
push 0x10
mov esi, eax
call dword [edx + 0x2b0]
mov ecx, dword [ebp + 8]
mov edx, dword [edi + 4]
add ecx, 0x1c
mov edi, dword [edi]
mov dword [ebp + 8], ecx
mov ecx, dword [ebp + 0xc]
push esi
push eax
mov eax, dword [ecx + 0xc]
sub eax, edx
push eax
mov eax, dword [ecx + 8]
sub eax, edi
push eax
push edx
push edi
mov edi, dword [ebp + 8]
push dword [edi]
call sym.HncOfficeFramework.dll_void___cdecl_HDraw3dRect_struct_HDC_____int__int__int__int__unsigned_long_int__unsigned_long_int_
add esp, 0x1c
jmp 0x100c0a93
mov eax, dword [ebp + 8]
add eax, 0x1c
test ecx, 0x20000
mov dword [ebp + 8], eax
mov ecx, ebx
mov eax, dword [edx]
push 0x10
je 0x100c0a82
call eax
push eax
mov eax, dword [ebx]
mov ecx, ebx
push 0x14
call dword [eax + 0x2b0]
push eax
push edi
mov edi, dword [ebp + 8]
push dword [edi]
call sym.HncOfficeFramework.dll_void___cdecl_HDraw3dRect_struct_HDC_____struct_tagRECT_const___unsigned_long_int__unsigned_long_int_
add esp, 0x10
jmp 0x100c0a93
call eax
push eax
push edi
mov edi, dword [ebp + 8]
push dword [edi]
call sym.HncOfficeFramework.dll_void___cdecl_HFrameRect_struct_HDC_____struct_tagRECT_const___unsigned_long_int_
add esp, 0xc
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
cdq
sub eax, edx
mov dword [ebp + 0xc], 1
mov esi, eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar esi, 1
add esi, dword [ebp - 0x1c]
sar eax, 1
sub eax, esi
mov dword [ebp + 0x10], esi
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
add eax, 2
add eax, dword [ebp - 0x18]
mov dword [ebp - 4], eax
nop dword [eax]
mov eax, dword [ebx]
mov ecx, ebx
push 7
call dword [eax + 0x2b0]
mov ebx, dword [edi]
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov edi, eax
push edi
push ebx
call esi
mov ecx, dword [ebp - 4]
mov esi, eax
mov eax, dword [ebp + 0x10]
add ecx, eax
push 0xf00021
push 0
push 0
push 0
push 1
push dword [ebp + 0xc]
push ecx
push eax
push ebx
call dword [sym.imp.GDI32.dll_BitBlt]
push esi
mov esi, dword [sym.imp.GDI32.dll_SelectObject]
push ebx
call esi
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp + 0xc]
dec dword [ebp + 0x10]
add eax, 2
mov ebx, dword [ebp - 8]
mov edi, dword [ebp + 8]
mov dword [ebp + 0xc], eax
cmp eax, 0xb
jl 0x100c0ad0
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 0xc
test eax, eax
je 0x100c0b7d
push 0xb
mov ecx, ebx
call dword [edx]
mov edx, dword [edi + 4]
mov esi, dword [edi]
mov ecx, dword [ebp + 8]
push eax
push eax
mov eax, dword [edi + 0xc]
add ecx, 0x1c
sub eax, edx
mov dword [ebp + 8], ecx
push eax
mov eax, dword [edi + 8]
sub eax, esi
push eax
push edx
push esi
mov esi, ecx
push dword [esi]
call sym.HncOfficeFramework.dll_void___cdecl_HDraw3dRect_struct_HDC_____int__int__int__int__unsigned_long_int__unsigned_long_int_
add esp, 0x1c
jmp 0x100c0c0b
test ecx, 0x200
je 0x100c0bc9
push 0x14
mov ecx, ebx
call dword [edx]
mov edx, dword [ebx]
mov ecx, ebx
push 0x10
mov esi, eax
call dword [edx + 0x2b0]
mov ecx, dword [ebp + 8]
mov edx, dword [edi + 4]
add ecx, 0x1c
mov edi, dword [edi]
push esi
push eax
mov dword [ebp + 8], ecx
mov ecx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov eax, dword [ecx + 0xc]
sub eax, edx
push eax
mov eax, dword [ecx + 8]
sub eax, edi
push eax
push edx
push edi
push dword [esi]
call sym.HncOfficeFramework.dll_void___cdecl_HDraw3dRect_struct_HDC_____int__int__int__int__unsigned_long_int__unsigned_long_int_
add esp, 0x1c
jmp 0x100c0c0b
mov esi, dword [ebp + 8]
mov eax, dword [edx]
add esi, 0x1c
test ecx, 0x20000
mov dword [ebp + 8], esi
push 0x10
mov ecx, ebx
je 0x100c0bfd
call eax
push eax
mov eax, dword [ebx]
mov ecx, ebx
push 0x14
call dword [eax + 0x2b0]
push eax
push edi
push dword [esi]
call sym.HncOfficeFramework.dll_void___cdecl_HDraw3dRect_struct_HDC_____struct_tagRECT_const___unsigned_long_int__unsigned_long_int_
add esp, 0x10
jmp 0x100c0c0b
call eax
push eax
push edi
push dword [esi]
call sym.HncOfficeFramework.dll_void___cdecl_HFrameRect_struct_HDC_____struct_tagRECT_const___unsigned_long_int_
add esp, 0xc
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x18]
cdq
sub eax, edx
mov dword [ebp + 0xc], 0
sar eax, 1
add eax, 0xfffffffe
mov dword [ebp + 0x10], 1
add eax, dword [ebp - 0x18]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
add eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
nop
mov eax, dword [ebx]
mov ecx, ebx
push 7
call dword [eax + 0x2b0]
mov ebx, dword [esi]
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov edi, eax
push edi
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [ebp - 0xc]
mov esi, eax
add ecx, dword [ebp + 0xc]
push 0xf00021
push 0
push 0
push 0
push 1
push dword [ebp + 0x10]
push ecx
push dword [ebp - 4]
push ebx
call dword [sym.imp.GDI32.dll_BitBlt]
push esi
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp + 0x10]
inc dword [ebp + 0xc]
add eax, 2
dec dword [ebp - 4]
mov ebx, dword [ebp - 8]
mov esi, dword [ebp + 8]
mov dword [ebp + 0x10], eax
cmp eax, 0xb
jl 0x100c0c40
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 0xc