Function at 0x4289c4
Capabilities:
Capture screenshot
Enumerate gui resources

Disassembly:
test dword [0x4b63ec], 0xffffff80
jne 0x4289ec
test dword [0x4b63ec], 0xffffffff
jne 0x4291b8
call fcn.00490ee4
jmp fcn.004289c4
push edi
push ebp
push ebx
sub esp, 0x2cc
mov edi, ecx
mov dword [edi + 0x74], 0
call fcn.0045b2e8
cmp eax, 1
je 0x428fc7
mov ecx, dword [edi + 0xdbb0]
mov eax, dword [ecx]
call dword [eax + 0x68]
test eax, eax
je 0x428a25
cmp dword [edi + 0x64], 0
je 0x428d33
mov eax, dword [edi + 0xdbcc]
test eax, eax
je 0x428df4
push 8
push eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov ebx, eax
push 0xa
push dword [edi + 0xdbcc]
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov dword [edi + 0xdbf4], ebx
xor edx, edx
mov ecx, 0x4a3b98
mov dword [edi + 0xdbec], edx
mov dword [edi + 0xdbf0], edx
mov dword [edi + 0xdbf8], eax
mov dword [esp + 0x2b8], ecx
mov dword [esp + 0x2bc], 9
mov dword [esp + 0x2c0], 0x4bd8e0
mov dword [esp + 0x2c4], ebx
mov dword [esp + 0x2c8], eax
mov eax, dword [0x4a3ba4]
cmp eax, 9
jl 0x428ab4
lea eax, [esp + 0x2c4]
push eax
push dword [esp + 0x2c4]
call fcn.0045763c
push dword [edi + 0xdbcc]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [edi + 0xdbc8], eax
test eax, eax
je 0x428d9c
push 0x26
push dword [edi + 0xdbcc]
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
test al, 1
jne 0x428b01
push 0x10
push dword [0x4a0328]
push 0x4bd9e0
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
add esp, 0x2cc
pop ebx
pop ebp
pop edi
ret
push 0x26
push dword [edi + 0xdbc8]
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
test eax, 0x80
jne 0x428b37
push 0x10
push dword [0x4a0328]
push 0x4bda60
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
add esp, 0x2cc
pop ebx
pop ebp
pop edi
ret
push dword [edi + 0xdbf8]
push dword [edi + 0xdbf4]
push dword [edi + 0xdbcc]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [edi + 0xdbd0], eax
test eax, eax
je 0x428d44
mov dword [esp + 0x2b0], 9
mov ecx, 0x4a3b98
mov dword [esp + 0x2ac], ecx
mov dword [esp + 0x2b4], 0x4bdb60
mov eax, dword [0x4a3ba4]
cmp eax, 9
jl 0x428b9d
lea eax, [esp + 0x2b8]
push eax
push dword [esp + 0x2b8]
call fcn.0045763c
push 0x430
lea eax, [edi + 0xdbfc]
push 0
push eax
call fcn.004910c4
add esp, 0xc
mov dword [edi + 0xdc00], 0x28
xor eax, eax
lea ebx, [edi + 0xdc00]
mov word [edi + 0xdc0e], ax
push eax
push ebx
push eax
push 1
push eax
push dword [edi + 0xdbd0]
push dword [edi + 0xdbc8]
call dword [sym.imp.GDI32.dll_GetDIBits]
test eax, eax
jne 0x428c33
mov dword [esp + 0x294], 0
mov ecx, 0x4a3b98
mov dword [esp + 0x290], ecx
mov dword [esp + 0x298], 0x4bdbc0
cmp dword [0x4a3ba4], 0
jl 0x428c27
lea eax, [esp + 0x29c]
push eax
push dword [esp + 0x29c]
call fcn.0045763c
xor eax, eax
add esp, 0x2cc
pop ebx
pop ebp
pop edi
ret
xor eax, eax
push eax
push ebx
push eax
push 1
push eax
push dword [edi + 0xdbd0]
push dword [edi + 0xdbc8]
call dword [sym.imp.GDI32.dll_GetDIBits]
test eax, eax
jne 0x428c9c
mov dword [esp + 0x288], 0
mov ecx, 0x4a3b98
mov dword [esp + 0x284], ecx
mov dword [esp + 0x28c], 0x4bdc40
cmp dword [0x4a3ba4], 0
jl 0x428c90
lea eax, [esp + 0x290]
push eax
push dword [esp + 0x290]
call fcn.0045763c
xor eax, eax
add esp, 0x2cc
pop ebx
pop ebp
pop edi
ret
mov dword [esp + 0x27c], 9
mov ecx, 0x4a3b98
mov dword [esp + 0x278], ecx
mov dword [esp + 0x280], 0x4bdcc0
mov eax, dword [0x4a3ba4]
cmp eax, 9
jl 0x428cdc
lea eax, [esp + 0x284]
push eax
push dword [esp + 0x284]
call fcn.0045763c
push 0x26
mov eax, dword [edi + 0xdc08]
cdq
xor eax, edx
push dword [edi + 0xdbc8]
sub eax, edx
neg eax
mov dword [edi + 0xdc08], eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
test ah, 1
jne 0x428d0e
mov dword [edi + 0xdbfc], 1
jmp 0x428d18
mov dword [edi + 0xdbfc], 0
push 1
xor eax, eax
push eax
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, 1
add esp, 0x2cc
pop ebx
pop ebp
pop edi
ret
push edi
push 0x423220
call dword [sym.imp.USER32.dll_EnumWindows]
jmp 0x428a25
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x260], 0
mov ecx, 0x4a3b98
mov dword [esp + 0x25c], ecx
mov dword [esp + 0x264], 0x4bdae0
mov dword [esp + 0x268], eax
cmp dword [0x4a3ba4], 0
jl 0x428d90
lea eax, [esp + 0x268]
push eax
push dword [esp + 0x268]
call fcn.0045763c
xor eax, eax
add esp, 0x2cc
pop ebx
pop ebp
pop edi
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x2a0], 0
mov ecx, 0x4a3b98
mov dword [esp + 0x29c], ecx
mov dword [esp + 0x2a4], 0x4bd960
mov dword [esp + 0x2a8], eax
cmp dword [0x4a3ba4], 0
jl 0x428de8
lea eax, [esp + 0x2a8]
push eax
push dword [esp + 0x2a8]
call fcn.0045763c
xor eax, eax
add esp, 0x2cc
pop ebx
pop ebp
pop edi
ret
mov dword [esp + 0x254], 0
mov ecx, 0x4a3b98
mov dword [esp + 0x250], ecx
mov dword [esp + 0x258], 0x4bd820
cmp dword [0x4a3ba4], 0
jl 0x428e33
lea eax, [esp + 0x25c]
push eax
push dword [esp + 0x25c]
call fcn.0045763c
mov ecx, edi
call fcn.00459198
lea ecx, [edi + 4]
call fcn.00413308
mov dword [edi + 0xe1d4], eax
mov ebx, 1
mov ebp, 1
cmp eax, 2
je 0x428fa9
cmp eax, 3
je 0x428f8b
cmp ebx, 3
je 0x428f77
mov dword [edi + 0xe1d0], ebp
cmp ebx, 1
je 0x428f3e
cmp ebx, 2
je 0x428f05
cmp ebx, 3
je 0x428ee3
mov eax, dword [edi + 0xdbcc]
test eax, eax
jne 0x428a33
mov dword [esp + 0x248], 0
mov ecx, 0x4a3b98
mov dword [esp + 0x244], ecx
mov dword [esp + 0x24c], 0x4bd880
cmp dword [0x4a3ba4], 0
jl 0x428ed7
lea eax, [esp + 0x250]
push eax
push dword [esp + 0x250]
call fcn.0045763c
xor eax, eax
add esp, 0x2cc
pop ebx
pop ebp
pop edi
ret
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov dword [edi + 0xdbcc], eax
mov edx, dword [edi + 0xe1c4]
mov ebx, dword [edi + 0xe1c8]
mov dword [edi + 0x6c], edx
mov dword [edi + 0x70], ebx
jmp 0x428e90
lea edx, [edi + 0xe170]
xor eax, eax
push eax
push eax
push edx
push 0x4b8010
call dword [sym.imp.GDI32.dll_CreateDCA]
mov dword [edi + 0xdbcc], eax
mov eax, dword [edi + 0xe190]
mov edx, dword [edi + 0xe194]
mov dword [edi + 0x6c], eax
mov ebx, dword [edi + 0xe1d0]
mov dword [edi + 0x70], edx
jmp 0x428e85
lea edx, [edi + 0xe13c]
xor eax, eax
push eax
push eax
push edx
push 0x4b8010
call dword [sym.imp.GDI32.dll_CreateDCA]
mov dword [edi + 0xdbcc], eax
mov eax, dword [edi + 0xe15c]
mov edx, dword [edi + 0xe160]
mov dword [edi + 0x6c], eax
mov ebx, dword [edi + 0xe1d0]
mov dword [edi + 0x70], edx
jmp 0x428e7c
mov dword [edi + 0xe1d0], 1
mov ebx, 1
jmp 0x428e73
mov eax, dword [edi + 0xe1cc]
cmp eax, 1
jle 0x428e64
mov ebx, 3
mov ebp, 3
jmp 0x428e64
mov edx, dword [edi + 0xe1cc]
cmp edx, 1
jle 0x428e5b
mov ebx, 2
mov ebp, 2
jmp 0x428e5b
mov ecx, edi
call fcn.004270d4
test eax, eax
je 0x428a0c
lea eax, [esp]
push 0x9c
push 0
push eax
call fcn.004910c4
add esp, 0xc
mov eax, 0x9c
xor ebx, ebx
lea edx, [esp]
mov word [esp + 0x24], ax
mov word [esp + 0x26], bx
push edx
push 0xffffffffffffffff
push ebx
call dword [sym.imp.USER32.dll_EnumDisplaySettingsA]
mov dword [esp + 0x28], 0x1c0000
push 0x4b8adc
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebp, eax
push 0x4b8ae4
push ebp
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, eax
test ebx, ebx
je 0x429173
lea edx, [esp + 0x9c]
push 0x1a8
push 0
push edx
call fcn.004910c4
add esp, 0xc
mov dword [esp + 0x9c], 0x1a8
xor edx, edx
lea eax, [esp + 0x9c]
mov byte [esp], dl
push edx
push eax
push edx
push edx
call ebx
test eax, eax
je 0x429173
mov dword [esp + 0x26c], ebp
xor eax, eax
mov ebp, ebx
mov dword [esp + 0x270], edi
mov ebx, eax
mov dword [esp + 0x274], esi
lea edi, [esp + 0xc0]
mov esi, 0x4b8ac0
mov dl, byte [edi]
cmp dl, byte [esi]
jne 0x4290b5
or dl, dl
je 0x4290b1
mov dl, byte [edi + 1]
cmp dl, byte [esi + 1]
jne 0x4290b5
add edi, 2
add esi, 2
or dl, dl
jne 0x429095
xor eax, eax
jmp 0x4290ba
sbb eax, eax
or eax, 1
test eax, eax
je 0x4290ec
inc ebx
xor ecx, ecx
lea edx, [esp + 0x9c]
push ecx
push edx
push ebx
push ecx
call ebp
test eax, eax
jne 0x429089
mov ebp, dword [esp + 0x26c]
mov edi, dword [esp + 0x270]
mov esi, dword [esp + 0x274]
jmp 0x429173
mov ebp, dword [esp + 0x26c]
mov edi, dword [esp + 0x270]
mov esi, dword [esp + 0x274]
lea ebx, [esp + 0xa0]
xor edx, edx
push edx
push edx
push ebx
push 0x4b8010
call dword [sym.imp.GDI32.dll_CreateDCA]
mov dword [edi + 0xdbcc], eax
lea edx, [esp]
push edx
push 0xffffffffffffffff
push ebx
call dword [sym.imp.USER32.dll_EnumDisplaySettingsA]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x30]
cmp dword [edi + 0xdbcc], 0
mov dword [edi + 0x6c], edx
mov dword [edi + 0x70], ebx
je 0x429149
mov dword [edi + 0x74], 1
mov ecx, edi
call fcn.00459198
lea ecx, [edi + 4]
call fcn.00413308
mov dword [edi + 0xe1d4], eax
mov ebx, 1
cmp eax, 2
je 0x4291a6
cmp eax, 3
je 0x429187
mov dword [edi + 0xe1d0], ebx
test ebp, ebp
je 0x428a0c
push ebp
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x428a0c
mov edx, dword [edi + 0xe1cc]
cmp edx, 1
jle 0x42919e
mov dword [edi + 0xe1d0], 3
jmp 0x429173
mov dword [edi + 0xe1d0], ebx
jmp 0x429173
mov edx, dword [edi + 0xe1cc]
cmp edx, 1
jle 0x429168
mov ebx, 2
jmp 0x429168
push edi
push ebp
push ebx
sub esp, 0x2cc
mov edi, ecx
mov dword [edi + 0x74], 0
call fcn.0045b2e8
cmp eax, 1
je 0x429793
mov ecx, dword [edi + 0xdbb0]
mov eax, dword [ecx]
call dword [eax + 0x68]
test eax, eax
je 0x4291f1
cmp dword [edi + 0x64], 0
je 0x4294ff
mov eax, dword [edi + 0xdbcc]
test eax, eax
je 0x4295c0
push 8
push eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov ebx, eax
push 0xa
push dword [edi + 0xdbcc]
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
xor edx, edx
mov dword [edi + 0xdbec], edx
mov dword [edi + 0xdbf0], edx
mov dword [edi + 0xdbf4], ebx
mov dword [edi + 0xdbf8], eax
mov ecx, 0x4a3b98
mov dword [esp + 0x2b8], ecx
mov dword [esp + 0x2bc], 9
mov dword [esp + 0x2c0], 0x4bd8e0
mov dword [esp + 0x2c4], ebx
mov dword [esp + 0x2c8], eax
mov eax, dword [0x4a3ba4]
cmp eax, 9
jl 0x429280
lea eax, [esp + 0x2c4]
push eax
push dword [esp + 0x2c4]
call fcn.0045763c
push dword [edi + 0xdbcc]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [edi + 0xdbc8], eax
test eax, eax
je 0x429568
push 0x26
push dword [edi + 0xdbcc]
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
test al, 1
jne 0x4292cd
push 0x10
push dword [0x4a0328]
push 0x4bd9e0
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
add esp, 0x2cc
pop ebx
pop ebp
pop edi
ret
push 0x26
push dword [edi + 0xdbc8]
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
test eax, 0x80
jne 0x429303
push 0x10
push dword [0x4a0328]
push 0x4bda60
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
add esp, 0x2cc
pop ebx
pop ebp
pop edi
ret
push dword [edi + 0xdbf8]
push dword [edi + 0xdbf4]
push dword [edi + 0xdbcc]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [edi + 0xdbd0], eax
test eax, eax
je 0x429510
mov ecx, 0x4a3b98
mov dword [esp + 0x2ac], ecx
mov dword [esp + 0x2b0], 9
mov dword [esp + 0x2b4], 0x4bdb60
mov eax, dword [0x4a3ba4]
cmp eax, 9
jl 0x429369
lea eax, [esp + 0x2b8]
push eax
push dword [esp + 0x2b8]
call fcn.0045763c
lea eax, [edi + 0xdbfc]
push 0x430
push 0
push eax
call fcn.004910c4
add esp, 0xc
mov dword [edi + 0xdc00], 0x28
xor eax, eax
mov word [edi + 0xdc0e], ax
lea ebx, [edi + 0xdc00]
push eax
push ebx
push eax
push 1
push eax
push dword [edi + 0xdbd0]
push dword [edi + 0xdbc8]
call dword [sym.imp.GDI32.dll_GetDIBits]
test eax, eax
jne 0x4293ff
mov ecx, 0x4a3b98
mov dword [esp + 0x290], ecx
mov dword [esp + 0x294], 0
mov dword [esp + 0x298], 0x4bdbc0
cmp dword [0x4a3ba4], 0
jl 0x4293f3
lea eax, [esp + 0x29c]
push eax
push dword [esp + 0x29c]
call fcn.0045763c
xor eax, eax
add esp, 0x2cc
pop ebx
pop ebp
pop edi
ret
xor eax, eax
push eax
push ebx
push eax
push 1
push eax
push dword [edi + 0xdbd0]
push dword [edi + 0xdbc8]
call dword [sym.imp.GDI32.dll_GetDIBits]
test eax, eax
jne 0x429468
mov ecx, 0x4a3b98
mov dword [esp + 0x284], ecx
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], 0x4bdc40
cmp dword [0x4a3ba4], 0
jl 0x42945c
lea eax, [esp + 0x290]
push eax
push dword [esp + 0x290]
call fcn.0045763c
xor eax, eax
add esp, 0x2cc
pop ebx
pop ebp
pop edi
ret
mov ecx, 0x4a3b98
mov dword [esp + 0x278], ecx
mov dword [esp + 0x27c], 9
mov dword [esp + 0x280], 0x4bdcc0
mov eax, dword [0x4a3ba4]
cmp eax, 9
jl 0x4294a8
lea eax, [esp + 0x284]
push eax
push dword [esp + 0x284]
call fcn.0045763c
mov eax, dword [edi + 0xdc08]
cdq
xor eax, edx
sub eax, edx
neg eax
mov dword [edi + 0xdc08], eax
push 0x26
push dword [edi + 0xdbc8]
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
test ah, 1
jne 0x4294da
mov dword [edi + 0xdbfc], 1
jmp 0x4294e4
mov dword [edi + 0xdbfc], 0
xor eax, eax
push 1
push eax
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, 1
add esp, 0x2cc
pop ebx
pop ebp
pop edi
ret
push edi
push 0x423220
call dword [sym.imp.USER32.dll_EnumWindows]
jmp 0x4291f1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0x4a3b98
mov dword [esp + 0x25c], ecx
mov dword [esp + 0x260], 0
mov dword [esp + 0x264], 0x4bdae0
mov dword [esp + 0x268], eax
cmp dword [0x4a3ba4], 0
jl 0x42955c
lea eax, [esp + 0x268]
push eax
push dword [esp + 0x268]
call fcn.0045763c
xor eax, eax
add esp, 0x2cc
pop ebx
pop ebp
pop edi
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 0x4a3b98
mov dword [esp + 0x29c], ecx
mov dword [esp + 0x2a0], 0
mov dword [esp + 0x2a4], 0x4bd960
mov dword [esp + 0x2a8], eax
cmp dword [0x4a3ba4], 0
jl 0x4295b4
lea eax, [esp + 0x2a8]
push eax
push dword [esp + 0x2a8]
call fcn.0045763c
xor eax, eax
add esp, 0x2cc
pop ebx
pop ebp
pop edi
ret
mov ecx, 0x4a3b98
mov dword [esp + 0x250], ecx
mov dword [esp + 0x254], 0
mov dword [esp + 0x258], 0x4bd820
cmp dword [0x4a3ba4], 0
jl 0x4295ff
lea eax, [esp + 0x25c]
push eax
push dword [esp + 0x25c]
call fcn.0045763c
mov ecx, edi
call fcn.00459198
lea ecx, [edi + 4]
call fcn.00413308
mov dword [edi + 0xe1d4], eax
mov ebx, 1
mov ebp, 1
cmp eax, 2
je 0x429775
cmp eax, 3
je 0x429757
cmp ebx, 3
je 0x429743
mov dword [edi + 0xe1d0], ebp
cmp ebx, 1
je 0x42970a
cmp ebx, 2
je 0x4296d1
cmp ebx, 3
je 0x4296af
mov eax, dword [edi + 0xdbcc]
test eax, eax
jne 0x4291ff
mov ecx, 0x4a3b98
mov dword [esp + 0x244], ecx
mov dword [esp + 0x248], 0
mov dword [esp + 0x24c], 0x4bd880
cmp dword [0x4a3ba4], 0
jl 0x4296a3
lea eax, [esp + 0x250]
push eax
push dword [esp + 0x250]
call fcn.0045763c
xor eax, eax
add esp, 0x2cc
pop ebx
pop ebp
pop edi
ret
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov dword [edi + 0xdbcc], eax
mov edx, dword [edi + 0xe1c4]
mov dword [edi + 0x6c], edx
mov ebx, dword [edi + 0xe1c8]
mov dword [edi + 0x70], ebx
jmp 0x42965c
lea edx, [edi + 0xe170]
xor eax, eax
push eax
push eax
push edx
push 0x4b8010
call dword [sym.imp.GDI32.dll_CreateDCA]
mov dword [edi + 0xdbcc], eax
mov eax, dword [edi + 0xe190]
mov dword [edi + 0x6c], eax
mov edx, dword [edi + 0xe194]
mov dword [edi + 0x70], edx
mov ebx, dword [edi + 0xe1d0]
jmp 0x429651
lea edx, [edi + 0xe13c]
xor eax, eax
push eax
push eax
push edx
push 0x4b8010
call dword [sym.imp.GDI32.dll_CreateDCA]
mov dword [edi + 0xdbcc], eax
mov eax, dword [edi + 0xe15c]
mov dword [edi + 0x6c], eax
mov edx, dword [edi + 0xe160]
mov dword [edi + 0x70], edx
mov ebx, dword [edi + 0xe1d0]
jmp 0x429648
mov ebx, 1
mov dword [edi + 0xe1d0], 1
jmp 0x42963f
mov eax, dword [edi + 0xe1cc]
cmp eax, 1
jle 0x429630
mov ebx, 3
mov ebp, 3
jmp 0x429630
mov edx, dword [edi + 0xe1cc]
cmp edx, 1
jle 0x429627
mov ebx, 2
mov ebp, 2
jmp 0x429627
mov ecx, edi
call fcn.004270d4
test eax, eax
je 0x4291d8
lea eax, [esp]
push 0x9c
push 0
push eax
call fcn.004910c4
add esp, 0xc
mov eax, 0x9c
mov word [esp + 0x24], ax
xor ebx, ebx
mov word [esp + 0x26], bx
lea edx, [esp]
push edx
push 0xffffffffffffffff
push ebx
call dword [sym.imp.USER32.dll_EnumDisplaySettingsA]
mov dword [esp + 0x28], 0x1c0000
push 0x4b8adc
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebp, eax
push 0x4b8ae4
push ebp
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, eax
test ebx, ebx
je 0x42993f
lea edx, [esp + 0x9c]
push 0x1a8
push 0
push edx
call fcn.004910c4
add esp, 0xc
mov dword [esp + 0x9c], 0x1a8
xor edx, edx
mov byte [esp], dl
lea eax, [esp + 0x9c]
push edx
push eax
push edx
push edx
call ebx
test eax, eax
je 0x42993f
xor eax, eax
mov dword [esp + 0x26c], ebp
mov dword [esp + 0x270], edi
mov dword [esp + 0x274], esi
mov ebp, ebx
mov ebx, eax
lea edi, [esp + 0xc0]
mov esi, 0x4b8ac0
mov dl, byte [edi]
cmp dl, byte [esi]
jne 0x429881
or dl, dl
je 0x42987d
mov dl, byte [edi + 1]
cmp dl, byte [esi + 1]
jne 0x429881
add edi, 2
add esi, 2
or dl, dl
jne 0x429861
xor eax, eax
jmp 0x429886
sbb eax, eax
or eax, 1
test eax, eax
je 0x4298b8
inc ebx
xor ecx, ecx
lea edx, [esp + 0x9c]
push ecx
push edx
push ebx
push ecx
call ebp
test eax, eax
jne 0x429855
mov ebp, dword [esp + 0x26c]
mov edi, dword [esp + 0x270]
mov esi, dword [esp + 0x274]
jmp 0x42993f
mov ebp, dword [esp + 0x26c]
mov edi, dword [esp + 0x270]
mov esi, dword [esp + 0x274]
lea ebx, [esp + 0xa0]
xor edx, edx
push edx
push edx
push ebx
push 0x4b8010
call dword [sym.imp.GDI32.dll_CreateDCA]
mov dword [edi + 0xdbcc], eax
lea edx, [esp]
push edx
push 0xffffffffffffffff
push ebx
call dword [sym.imp.USER32.dll_EnumDisplaySettingsA]
mov edx, dword [esp + 0x2c]
mov dword [edi + 0x6c], edx
mov ebx, dword [esp + 0x30]
mov dword [edi + 0x70], ebx
cmp dword [edi + 0xdbcc], 0
je 0x429915
mov dword [edi + 0x74], 1
mov ecx, edi
call fcn.00459198
lea ecx, [edi + 4]
call fcn.00413308
mov dword [edi + 0xe1d4], eax
mov ebx, 1
cmp eax, 2
je 0x429972
cmp eax, 3
je 0x429953
mov dword [edi + 0xe1d0], ebx
test ebp, ebp
je 0x4291d8
push ebp
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x4291d8
mov edx, dword [edi + 0xe1cc]
cmp edx, 1
jle 0x42996a
mov dword [edi + 0xe1d0], 3
jmp 0x42993f
mov dword [edi + 0xe1d0], ebx
jmp 0x42993f
mov edx, dword [edi + 0xe1cc]
cmp edx, 1
jle 0x429934
mov ebx, 2
jmp 0x429934