Function at 0x420b07
Capabilities:
Capture screenshot

Disassembly:
push ebp
lea ebp, [esp - 0x64]
sub esp, 0xb8
push ebx
push esi
push edi
mov edi, dword [0x46a4f8]
mov al, 1
cmp al, byte [ecx + 1]
mov ecx, dword [0x467b78]
sbb esi, esi
and esi, dword [0x46a4fc]
push 1
xor ebx, ebx
push ebx
push 0xffffffffffffffff
push 0x45bbc4
mov dword [ebp - 0xc], edi
mov dword [ebp - 4], esi
call fcn.0040184e
cmp edi, ebx
je 0x420b56
push 1
push ebx
push 0xffffffffffffffff
push ebx
mov ecx, edi
call fcn.0040184e
cmp esi, ebx
je 0x420b67
push 1
push ebx
push 0xffffffffffffffff
push ebx
mov ecx, esi
call fcn.0040184e
xor eax, eax
mov dword [ebp - 0x20], ebx
lea edi, [ebp - 0x1c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [0x465108]
test byte [eax + 0xc8], 1
jne 0x420bab
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
je 0x421224
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
add dword [ebp + 0x6c], ecx
add dword [ebp + 0x70], eax
add dword [ebp + 0x74], ecx
add dword [ebp + 0x78], eax
mov edi, dword [ebp + 0x7c]
or dword [ebp + 0x38], 0xffffffff
push 0x2e
push edi
mov dword [ebp + 0x5c], ebx
mov dword [ebp + 0x20], ebx
mov dword [ebp + 0x3c], ebx
mov dword [ebp + 0x44], ebx
call fcn.00458440
mov esi, eax
cmp esi, ebx
pop ecx
pop ecx
je 0x420c16
inc esi
push 0x45f15c
push esi
call fcn.00442502
test eax, eax
pop ecx
pop ecx
je 0x420c02
push 0x45f158
push esi
call fcn.00442502
test eax, eax
pop ecx
pop ecx
je 0x420c02
push 0x45f154
push esi
call fcn.00442502
test eax, eax
pop ecx
pop ecx
jne 0x420c16
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x31
call esi
push 0x32
mov dword [ebp + 0x3c], eax
call esi
mov dword [ebp + 0x44], eax
push edi
call fcn.00401ea8
mov esi, eax
cmp byte [esi], 0x2a
pop ecx
jne 0x420d43
mov ebx, 0x45bc18
inc esi
movsx eax, byte [esi]
push eax
call fcn.00442990
cmp eax, 0x48
pop ecx
je 0x420d0e
cmp eax, 0x57
je 0x420d00
push 4
push str.Icon
push esi
call fcn.00442545
add esp, 0xc
test eax, eax
jne 0x420c6f
add esi, 4
push esi
call fcn.0040137d
mov dword [ebp + 0x20], eax
jmp 0x420d1a
push 5
push str.Trans
push esi
call fcn.00442545
add esp, 0xc
test eax, eax
jne 0x420cdf
push 0x20
add esi, 5
lea eax, [ebp - 0x54]
push esi
push eax
call fcn.00439851
lea eax, [ebp - 0x54]
push ebx
push eax
call fcn.00439b0d
add esp, 0x14
test eax, eax
je 0x420ca6
mov byte [eax], 0
lea eax, [ebp - 0x54]
push eax
call fcn.004386dd
cmp eax, 0xffffffff
pop ecx
jne 0x420cca
push 0x10
lea eax, [ebp - 0x54]
push 0
push eax
call fcn.004010ae
add esp, 0xc
mov dword [ebp + 0x38], eax
jmp 0x420d1b
movzx ecx, ah
mov ch, al
shr eax, 0x10
movzx eax, al
shl ecx, 8
or ecx, eax
mov dword [ebp + 0x38], ecx
jmp 0x420d1b
push esi
call fcn.0040137d
test eax, eax
pop ecx
mov dword [ebp + 0x5c], eax
jge 0x420cf1
and dword [ebp + 0x5c], 0
mov eax, 0xff
cmp dword [ebp + 0x5c], eax
jle 0x420d1b
mov dword [ebp + 0x5c], eax
jmp 0x420d1b
lea eax, [esi + 1]
push eax
call fcn.0040137d
mov dword [ebp + 0x3c], eax
jmp 0x420d1a
lea eax, [esi + 1]
push eax
call fcn.0040137d
mov dword [ebp + 0x44], eax
pop ecx
push ebx
push esi
call fcn.00439b0d
test eax, eax
pop ecx
pop ecx
je 0x421224
inc eax
push eax
mov edi, eax
call fcn.00401ea8
mov esi, eax
cmp byte [esi], 0x2a
pop ecx
je 0x420c2d
xor ebx, ebx
push ebx
push dword [ebp + 0x20]
lea eax, [ebp - 8]
push eax
push dword [ebp + 0x44]
push dword [ebp + 0x3c]
push edi
call fcn.00438f83
mov edi, eax
add esp, 0x18
cmp edi, ebx
mov dword [ebp + 4], edi
je 0x421224
push ebx
call dword [sym.imp.USER32.dll_GetDC]
cmp eax, ebx
mov dword [ebp + 0x24], eax
jne 0x420d81
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x421224
cmp dword [ebp - 8], 1
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp + 0x2c], ebx
mov dword [ebp + 0x1c], ebx
mov dword [ebp + 0x48], ebx
mov dword [ebp + 0x40], ebx
mov dword [ebp + 0x20], ebx
mov byte [ebp + 0x7f], 0
jne 0x420def
lea eax, [ebp - 0x34]
push eax
push edi
call dword [sym.imp.USER32.dll_GetIconInfo]
test eax, eax
je 0x420dd8
push 1
lea eax, [ebp + 0x63]
push eax
lea eax, [ebp + 0x18]
push eax
lea eax, [ebp + 0x28]
push eax
push dword [ebp + 0x24]
push dword [ebp - 0x28]
call fcn.00421286
add esp, 0x18
push dword [ebp - 0x24]
mov dword [ebp + 0x40], eax
call esi
push dword [ebp - 0x28]
call esi
push 1
push edi
call fcn.00438e77
mov edi, eax
cmp edi, ebx
pop ecx
pop ecx
mov dword [ebp + 4], edi
je 0x421224
push 8
lea eax, [ebp + 0x63]
push eax
lea eax, [ebp + 0x18]
push eax
lea eax, [ebp + 0x28]
push eax
push dword [ebp + 0x24]
push edi
call fcn.00421286
add esp, 0x18
cmp eax, ebx
mov dword [ebp + 0x34], eax
je 0x4211b4
mov esi, dword [ebp + 0x74]
sub esi, dword [ebp + 0x6c]
mov ebx, dword [ebp + 0x78]
sub ebx, dword [ebp + 0x70]
push dword [ebp + 0x24]
inc esi
inc ebx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
xor edi, edi
cmp eax, edi
mov dword [ebp + 0x2c], eax
je 0x4211b4
push ebx
push esi
push dword [ebp + 0x24]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
cmp eax, edi
mov dword [ebp + 0x1c], eax
je 0x4211b4
push eax
push dword [ebp + 0x2c]
call dword [sym.imp.GDI32.dll_SelectObject]
cmp eax, edi
mov dword [ebp + 0x20], eax
je 0x4211b4
push 0xcc0020
push dword [ebp + 0x70]
push dword [ebp + 0x6c]
push dword [ebp + 0x24]
push ebx
push esi
push edi
push edi
push dword [ebp + 0x2c]
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x4211b4
push 8
lea eax, [ebp + 0x77]
push eax
lea eax, [ebp + 0x14]
push eax
lea eax, [ebp + 0x4c]
push eax
push dword [ebp + 0x2c]
push dword [ebp + 0x1c]
call fcn.00421286
add esp, 0x18
cmp eax, edi
mov dword [ebp + 0x48], eax
je 0x4211b4
mov ebx, dword [ebp + 0x28]
mov esi, dword [ebp + 0x4c]
imul ebx, dword [ebp + 0x18]
imul esi, dword [ebp + 0x14]
cmp byte [ebp + 0x63], 0
mov dword [ebp + 0x44], ebx
mov dword [ebp + 8], esi
jne 0x420ecd
cmp byte [ebp + 0x77], 0
je 0x420f01
cmp dword [ebp + 0x38], 0xffffffff
mov eax, 0xf8f8f8
je 0x420edb
and dword [ebp + 0x38], eax
xor ecx, ecx
cmp esi, edi
jle 0x420eee
mov edx, dword [ebp + 0x48]
lea edx, [edx + ecx*4]
and dword [edx], eax
inc ecx
cmp ecx, esi
jl 0x420ee1
xor ecx, ecx
cmp ebx, edi
jle 0x420f16
mov edx, dword [ebp + 0x34]
lea edx, [edx + ecx*4]
and dword [edx], eax
inc ecx
cmp ecx, ebx
jl 0x420ef4
cmp ebx, edi
jle 0x420f16
mov eax, dword [ebp + 0x34]
add eax, 3
mov ecx, ebx
mov byte [eax], 0
add eax, 4
dec ecx
jne 0x420f0d
cmp dword [ebp + 0x5c], 1
jge 0x421019
cmp esi, edi
jle 0x420f35
mov eax, dword [ebp + 0x48]
add eax, 3
mov ecx, esi
mov byte [eax], 0
add eax, 4
dec ecx
jne 0x420f2c
cmp esi, edi
mov dword [ebp + 0x58], edi
jle 0x42119f
mov dword [ebp + 0x74], edi
mov eax, dword [ebp + 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp + 0x48]
mov edx, dword [ebp + 0x74]
cmp dword [edx + ecx], eax
je 0x420f67
mov ecx, dword [ebp + 0x40]
cmp ecx, edi
je 0x420f5e
cmp dword [ecx], edi
jne 0x420f67
cmp eax, dword [ebp + 0x38]
jne 0x421004
mov eax, dword [ebp + 0x58]
cdq
idiv dword [ebp + 0x4c]
mov ecx, dword [ebp + 0x14]
sub ecx, eax
cmp dword [ebp + 0x18], ecx
jg 0x421004
mov eax, dword [ebp + 0x4c]
sub eax, edx
cmp dword [ebp + 0x28], eax
jg 0x421004
cmp ebx, edi
mov byte [ebp + 0x7f], 1
mov dword [ebp + 0x50], edi
mov dword [ebp + 0x30], edi
jle 0x4211b4
mov edx, dword [ebp + 0x4c]
mov eax, dword [ebp + 0x34]
mov esi, dword [ebp + 0x74]
mov ebx, dword [ebp + 0x40]
shl edx, 2
mov byte [ebp + 0x7f], 1
mov dword [ebp + 0x78], esi
sub ebx, eax
mov ecx, dword [eax]
mov edi, dword [ebp + 0x48]
cmp dword [esi + edi], ecx
je 0x420fcb
cmp dword [ebp + 0x40], 0
je 0x420fc6
cmp dword [ebx + eax], 0
jne 0x420fcb
cmp ecx, dword [ebp + 0x38]
jne 0x420ff8
inc dword [ebp + 0x50]
mov ecx, dword [ebp + 0x50]
cmp ecx, dword [ebp + 0x28]
jge 0x420fdb
add esi, 4
jmp 0x420fe5
and dword [ebp + 0x50], 0
add dword [ebp + 0x78], edx
mov esi, dword [ebp + 0x78]
inc dword [ebp + 0x30]
mov ecx, dword [ebp + 0x30]
add eax, 4
cmp ecx, dword [ebp + 0x44]
jl 0x420fb0
jmp 0x4211b4
mov ebx, dword [ebp + 0x44]
mov esi, dword [ebp + 8]
mov byte [ebp + 0x7f], 0
xor edi, edi
inc dword [ebp + 0x58]
add dword [ebp + 0x74], 4
cmp dword [ebp + 0x58], esi
jl 0x420f43
jmp 0x42119f
cmp esi, edi
mov dword [ebp + 0x58], edi
jle 0x42119f
mov dword [ebp + 0xc], edi
mov eax, dword [ebp + 0x58]
cdq
idiv dword [ebp + 0x4c]
mov ecx, dword [ebp + 0x14]
sub ecx, eax
cmp dword [ebp + 0x18], ecx
jg 0x42118f
mov eax, dword [ebp + 0x4c]
sub eax, edx
cmp dword [ebp + 0x28], eax
jg 0x42118f
cmp ebx, edi
mov byte [ebp + 0x7f], 1
mov dword [ebp + 0x50], edi
mov dword [ebp + 0x30], edi
jle 0x4211b4
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 0x34]
mov dword [ebp + 0x3c], eax
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0x40]
sub eax, esi
mov byte [ebp + 0x7f], 1
mov dword [ebp - 0x10], eax
mov eax, dword [esi]
mov dl, byte [esi + 1]
shr eax, 0x10
movzx eax, al
cmp dword [ebp + 0x5c], eax
jle 0x42108a
mov byte [ebp + 0x77], 0
jmp 0x421092
mov cl, al
sub cl, byte [ebp + 0x5c]
mov byte [ebp + 0x77], cl
movzx edx, dl
cmp dword [ebp + 0x5c], edx
mov dword [ebp], edx
jle 0x4210a3
mov byte [ebp + 0x7b], 0
jmp 0x4210ab
mov cl, dl
sub cl, byte [ebp + 0x5c]
mov byte [ebp + 0x7b], cl
movzx ecx, byte [esi]
cmp dword [ebp + 0x5c], ecx
jle 0x4210b9
mov byte [ebp + 0x56], 0
jmp 0x4210c4
mov dl, cl
sub dl, byte [ebp + 0x5c]
mov byte [ebp + 0x56], dl
mov edx, dword [ebp]
mov edi, 0xff
sub edi, eax
cmp dword [ebp + 0x5c], edi
jle 0x4210d4
or al, 0xff
jmp 0x4210d7
add al, byte [ebp + 0x5c]
mov edi, 0xff
sub edi, edx
cmp dword [ebp + 0x5c], edi
jle 0x4210e9
mov byte [ebp + 0x63], 0xff
jmp 0x4210ef
add dl, byte [ebp + 0x5c]
mov byte [ebp + 0x63], dl
mov edx, 0xff
sub edx, ecx
cmp dword [ebp + 0x5c], edx
jle 0x421101
mov byte [ebp + 0x57], 0xff
jmp 0x421107
add cl, byte [ebp + 0x5c]
mov byte [ebp + 0x57], cl
mov ecx, dword [ebp + 0x48]
mov edx, dword [ebp + 0x3c]
lea edi, [edx + ecx]
mov cl, byte [edi + 2]
cmp cl, byte [ebp + 0x77]
mov dl, byte [edi + 1]
mov bl, byte [edi]
jb 0x421135
cmp cl, al
ja 0x421135
cmp dl, byte [ebp + 0x7b]
jb 0x421135
cmp dl, byte [ebp + 0x63]
ja 0x421135
cmp bl, byte [ebp + 0x56]
jb 0x421135
cmp bl, byte [ebp + 0x57]
jbe 0x42114b
cmp dword [ebp + 0x40], 0
je 0x421144
mov eax, dword [ebp - 0x10]
cmp dword [esi + eax], 0
jne 0x42114b
mov eax, dword [esi]
cmp eax, dword [ebp + 0x38]
jne 0x421183
inc dword [ebp + 0x50]
mov eax, dword [ebp + 0x50]
cmp eax, dword [ebp + 0x28]
jge 0x42115c
add dword [ebp + 0x3c], 4
jmp 0x42116f
mov eax, dword [ebp + 0x4c]
and dword [ebp + 0x50], 0
shl eax, 2
add dword [ebp + 0x10], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp + 0x3c], eax
inc dword [ebp + 0x30]
mov eax, dword [ebp + 0x30]
add esi, 4
cmp eax, dword [ebp + 0x44]
jl 0x421074
jmp 0x4211b4
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0x44]
mov byte [ebp + 0x7f], 0
xor edi, edi
inc dword [ebp + 0x58]
add dword [ebp + 0xc], 4
cmp dword [ebp + 0x58], esi
jl 0x421027
mov ecx, dword [0x467b78]
push 1
push edi
push 0xffffffffffffffff
push 0x45bf4c
call fcn.0040184e
push dword [ebp + 0x24]
xor edi, edi
push edi
call dword [sym.imp.USER32.dll_ReleaseDC]
push dword [ebp + 4]
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
call esi
cmp dword [ebp + 0x2c], edi
je 0x4211ea
cmp dword [ebp + 0x20], edi
je 0x4211e1
push dword [ebp + 0x20]
push dword [ebp + 0x2c]
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp + 0x2c]
call dword [sym.imp.GDI32.dll_DeleteDC]
cmp dword [ebp + 0x1c], edi
je 0x4211f4
push dword [ebp + 0x1c]
call esi
cmp dword [ebp + 0x34], edi
je 0x421202
push dword [ebp + 0x34]
call fcn.0043ec47
pop ecx
cmp dword [ebp + 0x40], edi
je 0x421210
push dword [ebp + 0x40]
call fcn.0043ec47
pop ecx
cmp dword [ebp + 0x48], edi
je 0x42121e
push dword [ebp + 0x48]
call fcn.0043ec47
pop ecx
cmp byte [ebp + 0x7f], 0
jne 0x421229
xor eax, eax
inc eax
jmp 0x42127c
mov ecx, dword [ebp - 0xc]
cmp ecx, edi
je 0x421249
mov eax, dword [ebp + 0x58]
cdq
idiv dword [ebp + 0x4c]
push 0x18
mov eax, edx
sub eax, dword [ebp - 0x20]
add eax, dword [ebp + 0x6c]
cdq
push edx
push eax
call fcn.00401c1f
mov ecx, dword [ebp - 4]
cmp ecx, edi
je 0x421267
mov eax, dword [ebp + 0x58]
cdq
idiv dword [ebp + 0x4c]
push 0x18
sub eax, dword [ebp - 0x1c]
add eax, dword [ebp + 0x70]
cdq
push edx
push eax
call fcn.00401c1f
mov ecx, dword [0x467b78]
push 1
push edi
push 0xffffffffffffffff
push 0x45a734
call fcn.0040184e
pop edi
pop esi
pop ebx
add ebp, 0x64
leave
ret 0x14