Function at 0x407a20
Capabilities:
Capture screenshot

Disassembly:
push ebx
push ebp
push esi
xor ebp, ebp
push edi
mov esi, ecx
push ebp
call dword [sym.imp.USER32.dll_GetDC]
cmp eax, ebp
mov dword [esi + 0x20], eax
je 0x407b13
mov edi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 8
push eax
mov dword [esi + 0x44], ebp
mov dword [esi + 0x40], ebp
call edi
mov dword [esi + 0x48], eax
mov eax, dword [esi + 0x20]
push 0xa
push eax
call edi
mov ecx, dword [esi + 0x48]
push eax
push ecx
push 0x41b460
push 9
push 0x41ee48
mov dword [esi + 0x4c], eax
call fcn.00401950
mov edx, dword [esi + 0x20]
add esp, 0x14
push edx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
cmp eax, ebp
mov dword [esi + 0x1c], eax
jne 0x407a91
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x41b3f4
jmp 0x407b05
mov eax, dword [esi + 0x20]
push 0x26
push eax
call edi
test al, 1
jne 0x407ab9
mov ecx, dword [0x41ea78]
push 0x10
push ecx
push str.vncDesktop_:_root_device_doesnt_support_BitBlt_nWinVNC_cannot_be_used_with_this_graphic_device_driver
push ebp
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret
mov edx, dword [esi + 0x1c]
push 0x26
push edx
call edi
test al, 0x80
jne 0x407ae0
mov eax, dword [0x41ea78]
push 0x10
push eax
push str.vncDesktop_:_memory_device_doesnt_support_GetDIBits_nWinVNC_cannot_be_used_with_this_graphics_device_driver
push ebp
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret
mov ecx, dword [esi + 0x4c]
mov edx, dword [esi + 0x48]
mov eax, dword [esi + 0x20]
push ecx
push edx
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
cmp eax, ebp
mov dword [esi + 0x24], eax
jne 0x407b1a
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x41b2b0
push ebp
push 0x41ee48
call fcn.00401950
add esp, 0x10
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret
push 0x41b250
push 9
push 0x41ee48
call fcn.00401950
mov ecx, dword [esi + 0x24]
mov edx, dword [esi + 0x1c]
add esp, 0xc
lea ebx, [esi + 0x54]
mov word [esi + 0x62], bp
push ebp
push ebx
push ebp
push 1
push ebp
mov ebp, dword [sym.imp.GDI32.dll_GetDIBits]
push ecx
push edx
mov dword [ebx], 0x28
call ebp
test eax, eax
jne 0x407b5a
pop edi
pop esi
pop ebp
pop ebx
ret
mov eax, dword [esi + 0x24]
mov ecx, dword [esi + 0x1c]
push 0
push ebx
push 0
push 1
push 0
push eax
push ecx
call ebp
test eax, eax
jne 0x407b76
pop edi
pop esi
pop ebp
pop ebx
ret
push 0x41b1f4
push 9
push 0x41ee48
call fcn.00401950
mov edx, dword [esi + 0x20]
add esp, 0xc
push 0xe
push edx
call edi
push eax
push 0x41b184
push 9
push 0x41ee48
call fcn.00401950
mov eax, dword [esi + 0x1c]
add esp, 0x10
push 0xe
push eax
call edi
push eax
push 0x41b118
push 9
push 0x41ee48
call fcn.00401950
mov ecx, dword [esi + 0x1c]
add esp, 0x10
push 0xe
push ecx
call edi
cmp eax, 1
je 0x407bee
mov edx, dword [0x41ea78]
push 0x10
push edx
push str.vncDesktop_:_current_display_is_PLANAR__not_CHUNKY__nWinVNC_cannot_be_used_with_this_graphics_device_driver
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret
mov eax, dword [esi + 0x5c]
push 0x26
cdq
xor eax, edx
sub eax, edx
neg eax
mov dword [esi + 0x5c], eax
mov eax, dword [esi + 0x1c]
push eax
call edi
not eax
shr eax, 8
and eax, 1
pop edi
mov dword [esi + 0x50], eax
pop esi
pop ebp
mov eax, 1
pop ebx
ret