Function at 0x42075b
Capabilities:
Capture screenshot

Disassembly:
push ebp
lea ebp, [esp - 0x64]
sub esp, 0xb8
push ebx
push esi
push edi
mov edi, dword [0x466148]
mov al, 1
cmp al, byte [ecx + 2]
mov ecx, dword [0x463c78]
sbb esi, esi
and esi, dword [0x46614c]
push 1
xor ebx, ebx
push ebx
push 0xffffffffffffffff
push 0x457b9c
mov dword [ebp - 0xc], edi
mov dword [ebp - 4], esi
call fcn.00401525
cmp edi, ebx
je 0x4207aa
push 1
push ebx
push 0xffffffffffffffff
push ebx
mov ecx, edi
call fcn.00401525
cmp esi, ebx
je 0x4207bb
push 1
push ebx
push 0xffffffffffffffff
push ebx
mov ecx, esi
call fcn.00401525
xor eax, eax
test byte [0x463350], 1
mov dword [ebp - 0x20], ebx
lea edi, [ebp - 0x1c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
jne 0x4207fa
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
je 0x420e73
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
add dword [ebp + 0x6c], ecx
add dword [ebp + 0x70], eax
add dword [ebp + 0x74], ecx
add dword [ebp + 0x78], eax
mov edi, dword [ebp + 0x7c]
or dword [ebp + 0x38], 0xffffffff
push 0x2e
push edi
mov dword [ebp + 0x5c], ebx
mov dword [ebp + 0x20], ebx
mov dword [ebp + 0x3c], ebx
mov dword [ebp + 0x44], ebx
call fcn.00454340
mov esi, eax
cmp esi, ebx
pop ecx
pop ecx
je 0x420865
inc esi
push 0x45ad4c
push esi
call fcn.00441849
test eax, eax
pop ecx
pop ecx
je 0x420851
push 0x45ad48
push esi
call fcn.00441849
test eax, eax
pop ecx
pop ecx
je 0x420851
push 0x45ad44
push esi
call fcn.00441849
test eax, eax
pop ecx
pop ecx
jne 0x420865
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x31
call esi
push 0x32
mov dword [ebp + 0x3c], eax
call esi
mov dword [ebp + 0x44], eax
push edi
call fcn.00401a9c
mov esi, eax
cmp byte [esi], 0x2a
pop ecx
jne 0x420992
mov ebx, 0x457bf0
inc esi
movsx eax, byte [esi]
push eax
call fcn.00441cd7
cmp eax, 0x48
pop ecx
je 0x42095d
cmp eax, 0x57
je 0x42094f
push 4
push str.Icon
push esi
call fcn.0044188c
add esp, 0xc
test eax, eax
jne 0x4208be
add esi, 4
push esi
call fcn.0040198d
mov dword [ebp + 0x20], eax
jmp 0x420969
push 5
push str.Trans
push esi
call fcn.0044188c
add esp, 0xc
test eax, eax
jne 0x42092e
push 0x20
add esi, 5
lea eax, [ebp - 0x54]
push esi
push eax
call fcn.00438c34
lea eax, [ebp - 0x54]
push ebx
push eax
call fcn.00438ef0
add esp, 0x14
test eax, eax
je 0x4208f5
mov byte [eax], 0
lea eax, [ebp - 0x54]
push eax
call fcn.00437b0d
cmp eax, 0xffffffff
pop ecx
jne 0x420919
push 0x10
lea eax, [ebp - 0x54]
push 0
push eax
call fcn.004010a9
add esp, 0xc
mov dword [ebp + 0x38], eax
jmp 0x42096a
movzx ecx, ah
mov ch, al
shr eax, 0x10
movzx eax, al
shl ecx, 8
or ecx, eax
mov dword [ebp + 0x38], ecx
jmp 0x42096a
push esi
call fcn.0040198d
test eax, eax
pop ecx
mov dword [ebp + 0x5c], eax
jge 0x420940
and dword [ebp + 0x5c], 0
mov eax, 0xff
cmp dword [ebp + 0x5c], eax
jle 0x42096a
mov dword [ebp + 0x5c], eax
jmp 0x42096a
lea eax, [esi + 1]
push eax
call fcn.0040198d
mov dword [ebp + 0x3c], eax
jmp 0x420969
lea eax, [esi + 1]
push eax
call fcn.0040198d
mov dword [ebp + 0x44], eax
pop ecx
push ebx
push esi
call fcn.00438ef0
test eax, eax
pop ecx
pop ecx
je 0x420e73
inc eax
push eax
mov edi, eax
call fcn.00401a9c
mov esi, eax
cmp byte [esi], 0x2a
pop ecx
je 0x42087c
xor ebx, ebx
push ebx
push dword [ebp + 0x20]
lea eax, [ebp - 8]
push eax
push dword [ebp + 0x44]
push dword [ebp + 0x3c]
push edi
call fcn.004383ee
mov edi, eax
add esp, 0x18
cmp edi, ebx
mov dword [ebp + 4], edi
je 0x420e73
push ebx
call dword [sym.imp.USER32.dll_GetDC]
cmp eax, ebx
mov dword [ebp + 0x24], eax
jne 0x4209d0
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x420e73
cmp dword [ebp - 8], 1
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp + 0x2c], ebx
mov dword [ebp + 0x1c], ebx
mov dword [ebp + 0x48], ebx
mov dword [ebp + 0x40], ebx
mov dword [ebp + 0x20], ebx
mov byte [ebp + 0x7f], 0
jne 0x420a3e
lea eax, [ebp - 0x34]
push eax
push edi
call dword [sym.imp.USER32.dll_GetIconInfo]
test eax, eax
je 0x420a27
push 1
lea eax, [ebp + 0x63]
push eax
lea eax, [ebp + 0x18]
push eax
lea eax, [ebp + 0x28]
push eax
push dword [ebp + 0x24]
push dword [ebp - 0x28]
call fcn.00420ed7
add esp, 0x18
push dword [ebp - 0x24]
mov dword [ebp + 0x40], eax
call esi
push dword [ebp - 0x28]
call esi
push 1
push edi
call fcn.004382e2
mov edi, eax
cmp edi, ebx
pop ecx
pop ecx
mov dword [ebp + 4], edi
je 0x420e73
push 8
lea eax, [ebp + 0x63]
push eax
lea eax, [ebp + 0x18]
push eax
lea eax, [ebp + 0x28]
push eax
push dword [ebp + 0x24]
push edi
call fcn.00420ed7
add esp, 0x18
cmp eax, ebx
mov dword [ebp + 0x34], eax
je 0x420e03
mov esi, dword [ebp + 0x74]
sub esi, dword [ebp + 0x6c]
mov ebx, dword [ebp + 0x78]
sub ebx, dword [ebp + 0x70]
push dword [ebp + 0x24]
inc esi
inc ebx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
xor edi, edi
cmp eax, edi
mov dword [ebp + 0x2c], eax
je 0x420e03
push ebx
push esi
push dword [ebp + 0x24]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
cmp eax, edi
mov dword [ebp + 0x1c], eax
je 0x420e03
push eax
push dword [ebp + 0x2c]
call dword [sym.imp.GDI32.dll_SelectObject]
cmp eax, edi
mov dword [ebp + 0x20], eax
je 0x420e03
push 0xcc0020
push dword [ebp + 0x70]
push dword [ebp + 0x6c]
push dword [ebp + 0x24]
push ebx
push esi
push edi
push edi
push dword [ebp + 0x2c]
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x420e03
push 8
lea eax, [ebp + 0x77]
push eax
lea eax, [ebp + 0x14]
push eax
lea eax, [ebp + 0x4c]
push eax
push dword [ebp + 0x2c]
push dword [ebp + 0x1c]
call fcn.00420ed7
add esp, 0x18
cmp eax, edi
mov dword [ebp + 0x48], eax
je 0x420e03
mov ebx, dword [ebp + 0x28]
mov esi, dword [ebp + 0x4c]
imul ebx, dword [ebp + 0x18]
imul esi, dword [ebp + 0x14]
cmp byte [ebp + 0x63], 0
mov dword [ebp + 0x44], ebx
mov dword [ebp + 8], esi
jne 0x420b1c
cmp byte [ebp + 0x77], 0
je 0x420b50
cmp dword [ebp + 0x38], 0xffffffff
mov eax, 0xf8f8f8
je 0x420b2a
and dword [ebp + 0x38], eax
xor ecx, ecx
cmp esi, edi
jle 0x420b3d
mov edx, dword [ebp + 0x48]
lea edx, [edx + ecx*4]
and dword [edx], eax
inc ecx
cmp ecx, esi
jl 0x420b30
xor ecx, ecx
cmp ebx, edi
jle 0x420b65
mov edx, dword [ebp + 0x34]
lea edx, [edx + ecx*4]
and dword [edx], eax
inc ecx
cmp ecx, ebx
jl 0x420b43
cmp ebx, edi
jle 0x420b65
mov eax, dword [ebp + 0x34]
add eax, 3
mov ecx, ebx
mov byte [eax], 0
add eax, 4
dec ecx
jne 0x420b5c
cmp dword [ebp + 0x5c], 1
jge 0x420c68
cmp esi, edi
jle 0x420b84
mov eax, dword [ebp + 0x48]
add eax, 3
mov ecx, esi
mov byte [eax], 0
add eax, 4
dec ecx
jne 0x420b7b
cmp esi, edi
mov dword [ebp + 0x58], edi
jle 0x420dee
mov dword [ebp + 0x74], edi
mov eax, dword [ebp + 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp + 0x48]
mov edx, dword [ebp + 0x74]
cmp dword [edx + ecx], eax
je 0x420bb6
mov ecx, dword [ebp + 0x40]
cmp ecx, edi
je 0x420bad
cmp dword [ecx], edi
jne 0x420bb6
cmp eax, dword [ebp + 0x38]
jne 0x420c53
mov eax, dword [ebp + 0x58]
cdq
idiv dword [ebp + 0x4c]
mov ecx, dword [ebp + 0x14]
sub ecx, eax
cmp dword [ebp + 0x18], ecx
jg 0x420c53
mov eax, dword [ebp + 0x4c]
sub eax, edx
cmp dword [ebp + 0x28], eax
jg 0x420c53
cmp ebx, edi
mov byte [ebp + 0x7f], 1
mov dword [ebp + 0x50], edi
mov dword [ebp + 0x30], edi
jle 0x420e03
mov edx, dword [ebp + 0x4c]
mov eax, dword [ebp + 0x34]
mov esi, dword [ebp + 0x74]
mov ebx, dword [ebp + 0x40]
shl edx, 2
mov byte [ebp + 0x7f], 1
mov dword [ebp + 0x78], esi
sub ebx, eax
mov ecx, dword [eax]
mov edi, dword [ebp + 0x48]
cmp dword [esi + edi], ecx
je 0x420c1a
cmp dword [ebp + 0x40], 0
je 0x420c15
cmp dword [ebx + eax], 0
jne 0x420c1a
cmp ecx, dword [ebp + 0x38]
jne 0x420c47
inc dword [ebp + 0x50]
mov ecx, dword [ebp + 0x50]
cmp ecx, dword [ebp + 0x28]
jge 0x420c2a
add esi, 4
jmp 0x420c34
and dword [ebp + 0x50], 0
add dword [ebp + 0x78], edx
mov esi, dword [ebp + 0x78]
inc dword [ebp + 0x30]
mov ecx, dword [ebp + 0x30]
add eax, 4
cmp ecx, dword [ebp + 0x44]
jl 0x420bff
jmp 0x420e03
mov ebx, dword [ebp + 0x44]
mov esi, dword [ebp + 8]
mov byte [ebp + 0x7f], 0
xor edi, edi
inc dword [ebp + 0x58]
add dword [ebp + 0x74], 4
cmp dword [ebp + 0x58], esi
jl 0x420b92
jmp 0x420dee
cmp esi, edi
mov dword [ebp + 0x58], edi
jle 0x420dee
mov dword [ebp + 0xc], edi
mov eax, dword [ebp + 0x58]
cdq
idiv dword [ebp + 0x4c]
mov ecx, dword [ebp + 0x14]
sub ecx, eax
cmp dword [ebp + 0x18], ecx
jg 0x420dde
mov eax, dword [ebp + 0x4c]
sub eax, edx
cmp dword [ebp + 0x28], eax
jg 0x420dde
cmp ebx, edi
mov byte [ebp + 0x7f], 1
mov dword [ebp + 0x50], edi
mov dword [ebp + 0x30], edi
jle 0x420e03
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 0x34]
mov dword [ebp + 0x3c], eax
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0x40]
sub eax, esi
mov byte [ebp + 0x7f], 1
mov dword [ebp - 0x10], eax
mov eax, dword [esi]
mov dl, byte [esi + 1]
shr eax, 0x10
movzx eax, al
cmp dword [ebp + 0x5c], eax
jle 0x420cd9
mov byte [ebp + 0x77], 0
jmp 0x420ce1
mov cl, al
sub cl, byte [ebp + 0x5c]
mov byte [ebp + 0x77], cl
movzx edx, dl
cmp dword [ebp + 0x5c], edx
mov dword [ebp], edx
jle 0x420cf2
mov byte [ebp + 0x7b], 0
jmp 0x420cfa
mov cl, dl
sub cl, byte [ebp + 0x5c]
mov byte [ebp + 0x7b], cl
movzx ecx, byte [esi]
cmp dword [ebp + 0x5c], ecx
jle 0x420d08
mov byte [ebp + 0x56], 0
jmp 0x420d13
mov dl, cl
sub dl, byte [ebp + 0x5c]
mov byte [ebp + 0x56], dl
mov edx, dword [ebp]
mov edi, 0xff
sub edi, eax
cmp dword [ebp + 0x5c], edi
jle 0x420d23
or al, 0xff
jmp 0x420d26
add al, byte [ebp + 0x5c]
mov edi, 0xff
sub edi, edx
cmp dword [ebp + 0x5c], edi
jle 0x420d38
mov byte [ebp + 0x63], 0xff
jmp 0x420d3e
add dl, byte [ebp + 0x5c]
mov byte [ebp + 0x63], dl
mov edx, 0xff
sub edx, ecx
cmp dword [ebp + 0x5c], edx
jle 0x420d50
mov byte [ebp + 0x57], 0xff
jmp 0x420d56
add cl, byte [ebp + 0x5c]
mov byte [ebp + 0x57], cl
mov ecx, dword [ebp + 0x48]
mov edx, dword [ebp + 0x3c]
lea edi, [edx + ecx]
mov cl, byte [edi + 2]
cmp cl, byte [ebp + 0x77]
mov dl, byte [edi + 1]
mov bl, byte [edi]
jb 0x420d84
cmp cl, al
ja 0x420d84
cmp dl, byte [ebp + 0x7b]
jb 0x420d84
cmp dl, byte [ebp + 0x63]
ja 0x420d84
cmp bl, byte [ebp + 0x56]
jb 0x420d84
cmp bl, byte [ebp + 0x57]
jbe 0x420d9a
cmp dword [ebp + 0x40], 0
je 0x420d93
mov eax, dword [ebp - 0x10]
cmp dword [esi + eax], 0
jne 0x420d9a
mov eax, dword [esi]
cmp eax, dword [ebp + 0x38]
jne 0x420dd2
inc dword [ebp + 0x50]
mov eax, dword [ebp + 0x50]
cmp eax, dword [ebp + 0x28]
jge 0x420dab
add dword [ebp + 0x3c], 4
jmp 0x420dbe
mov eax, dword [ebp + 0x4c]
and dword [ebp + 0x50], 0
shl eax, 2
add dword [ebp + 0x10], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp + 0x3c], eax
inc dword [ebp + 0x30]
mov eax, dword [ebp + 0x30]
add esi, 4
cmp eax, dword [ebp + 0x44]
jl 0x420cc3
jmp 0x420e03
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0x44]
mov byte [ebp + 0x7f], 0
xor edi, edi
inc dword [ebp + 0x58]
add dword [ebp + 0xc], 4
cmp dword [ebp + 0x58], esi
jl 0x420c76
mov ecx, dword [0x463c78]
push 1
push edi
push 0xffffffffffffffff
push 0x457f24
call fcn.00401525
push dword [ebp + 0x24]
xor edi, edi
push edi
call dword [sym.imp.USER32.dll_ReleaseDC]
push dword [ebp + 4]
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
call esi
cmp dword [ebp + 0x2c], edi
je 0x420e39
cmp dword [ebp + 0x20], edi
je 0x420e30
push dword [ebp + 0x20]
push dword [ebp + 0x2c]
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp + 0x2c]
call dword [sym.imp.GDI32.dll_DeleteDC]
cmp dword [ebp + 0x1c], edi
je 0x420e43
push dword [ebp + 0x1c]
call esi
cmp dword [ebp + 0x34], edi
je 0x420e51
push dword [ebp + 0x34]
call fcn.0043dfa7
pop ecx
cmp dword [ebp + 0x40], edi
je 0x420e5f
push dword [ebp + 0x40]
call fcn.0043dfa7
pop ecx
cmp dword [ebp + 0x48], edi
je 0x420e6d
push dword [ebp + 0x48]
call fcn.0043dfa7
pop ecx
cmp byte [ebp + 0x7f], 0
jne 0x420e78
xor eax, eax
inc eax
jmp 0x420ecd
mov ecx, dword [ebp - 0xc]
cmp ecx, edi
je 0x420e96
mov eax, dword [ebp + 0x58]
cdq
idiv dword [ebp + 0x4c]
sub edx, dword [ebp - 0x20]
add edx, dword [ebp + 0x6c]
push edx
call fcn.0040185b
test eax, eax
je 0x420eb4
mov ecx, dword [ebp - 4]
cmp ecx, edi
je 0x420eb8
mov eax, dword [ebp + 0x58]
cdq
idiv dword [ebp + 0x4c]
sub eax, dword [ebp - 0x1c]
add eax, dword [ebp + 0x70]
push eax
call fcn.0040185b
test eax, eax
jne 0x420eb8
xor eax, eax
jmp 0x420ecd
mov ecx, dword [0x463c78]
push 1
push edi
push 0xffffffffffffffff
push 0x45671c
call fcn.00401525
pop edi
pop esi
pop ebx
add ebp, 0x64
leave
ret 0x14