Function at 0x437500
Capabilities:
Capture screenshot

Disassembly:
sub esp, 0xf8
mov eax, dword [0x4442c4]
push ebx
push ebp
push esi
cmp eax, 0xffffffff
push edi
mov dword [esp + 0x2c], 0
jne 0x437543
push 0x1003
push 0x5000
call fcn.0042d340
test eax, eax
mov dword [0x4442c4], eax
jge 0x437543
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xf8
ret 0x18
push 0x49
push eax
call fcn.0042d3b0
mov ebp, eax
test ebp, ebp
jne 0x43755e
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xf8
ret 0x18
mov eax, dword [esp + 0x10c]
mov ecx, dword [esp + 0x110]
mov esi, dword [esp + 0x120]
mov dword [ebp + 4], eax
mov dword [ebp], ecx
mov dword [ebp + 0x20], 1
mov dword [ebp + 0x44], esi
mov edx, dword [0x447518]
push edx
push 0x4455b8
call dword [sym.imp.USER32.dll_UnregisterClassA]
mov ecx, dword [0x447518]
mov edi, dword [sym.imp.USER32.dll_GetClassInfoA]
lea eax, [esp + 0xe0]
push eax
push 0x4455c4
push ecx
call edi
test eax, eax
mov ebx, 8
jne 0x43761d
mov eax, 4
push 1
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov eax, dword [0x447518]
mov dword [esp + 0x48], ebx
push eax
mov dword [esp + 0x50], sym.DEMO32.EXE_WinSupWndProc
mov dword [esp + 0x5c], eax
call dword [sym.imp.USER32.dll_LoadIconA]
push 0x7f00
push 0
mov dword [esp + 0x60], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
lea edx, [esp + 0x44]
mov dword [esp + 0x60], 0x11
push edx
mov dword [esp + 0x60], eax
mov dword [esp + 0x68], 0x446d68
mov dword [esp + 0x6c], 0x4455d0
call dword [sym.imp.USER32.dll_RegisterClassA]
lea eax, [esp + 0x10]
lea ecx, [esp + 0x7c]
mov byte [esp + 0x7c], 0
mov edx, dword [ebp + 4]
push eax
push ecx
push 0x28
push edx
call fcn.00403c00
mov al, byte [esp + 0x7c]
test al, al
jne 0x43764f
lea eax, [esp + 0x7c]
push 0x4455dc
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp + 4]
lea ecx, [esp + 0x10]
push ecx
push 0
push 0x10
push edx
call fcn.00403c00
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x43766e
mov dword [ebp + 0x2c], ebx
jmp 0x437675
mov dword [ebp + 0x2c], 0
mov ecx, dword [ebp + 4]
lea eax, [esp + 0x10]
push eax
push 0
push 0x22
push ecx
call fcn.00403c00
mov ebx, 1
cmp dword [esp + 0x10], ebx
jne 0x437bd0
mov eax, dword [ebp + 4]
lea edx, [esp + 0x10]
push edx
push 0
push 0x33
push eax
call fcn.00403c00
mov eax, dword [esp + 0x10]
cmp eax, ebx
mov ebx, dword [sym.imp.USER32.dll_GetSystemMetrics]
mov eax, dword [0x447504]
jne 0x43778d
test eax, eax
jne 0x4377c5
mov edx, dword [ebp + 4]
lea ecx, [esp + 0x10]
push ecx
push 0
push 0x1f
push edx
call fcn.00403c00
mov ecx, dword [0x447518]
lea eax, [esp + 0xe0]
push eax
push 0x4455e8
push ecx
call edi
test eax, eax
jne 0x43774f
mov ecx, 0xa
lea edi, [esp + 0x44]
rep stosd dword es:[edi], eax
mov eax, dword [0x447518]
push 1
push eax
mov dword [esp + 0x50], sym.DEMO32.EXE_WinSupBackWndProc
mov dword [esp + 0x5c], eax
call dword [sym.imp.USER32.dll_LoadIconA]
push 0x7f00
push 0
mov dword [esp + 0x60], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x5c], eax
push edx
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [esp + 0x68], 0x4455f8
mov dword [esp + 0x60], eax
lea eax, [esp + 0x44]
push eax
call dword [sym.imp.USER32.dll_RegisterClassA]
mov ecx, dword [0x447518]
push 0
push ecx
push 0
push 0
push 1
call ebx
push eax
push 0
call ebx
push eax
mov eax, dword [ebp + 0x2c]
push 0
push 0
lea edx, [esp + 0x9c]
push 0x82000000
push edx
push 0x445608
push eax
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov dword [0x447504], eax
jmp 0x4377c5
test eax, eax
je 0x4377c5
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4377c5
mov ecx, dword [0x447504]
push ecx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov edx, dword [0x447518]
mov dword [0x447504], 0
push edx
push str.WinSupBackClass
call dword [sym.imp.USER32.dll_UnregisterClassA]
mov ecx, dword [ebp + 4]
lea eax, [esp + 0x10]
push eax
push 0
push 0xc
push ecx
call fcn.00403c00
xor edi, edi
mov eax, dword [esp + 0x10]
cmp ax, di
jne 0x4377eb
mov dword [esi + 8], 0x280
jmp 0x437803
cmp ax, 0x32
jae 0x4377f8
mov ecx, 0x32
jmp 0x437800
mov ecx, eax
and ecx, 0xffff
mov dword [esi + 8], ecx
shr eax, 0x10
cmp ax, di
jne 0x437814
mov dword [esi + 0xc], 0x1e0
jmp 0x437829
cmp ax, 0x32
jae 0x437821
mov eax, 0x32
jmp 0x437826
and eax, 0xffff
mov dword [esi + 0xc], eax
push edi
mov dword [esp + 0x20], 0x800000
call ebx
cmp dword [esi + 8], eax
jne 0x437846
push 1
call ebx
cmp dword [esi + 0xc], eax
jne 0x437846
mov dword [esp + 0x1c], edi
mov eax, dword [ebp + 4]
lea edx, [esp + 0x10]
push edx
push edi
push 0x36
push eax
call fcn.00403c00
test byte [esp + 0x10], 2
je 0x437862
mov dword [esp + 0x1c], edi
mov edx, dword [ebp + 4]
lea ecx, [esp + 0x10]
push ecx
push edi
push 0x1d
push edx
call fcn.00403c00
mov ecx, dword [esi + 8]
lea edx, [esp + 0x10]
mov eax, dword [esp + 0x10]
mov dword [esi], ecx
mov edi, eax
push edx
shr eax, 0x10
mov dword [esp + 0x24], eax
mov eax, dword [esi + 0xc]
mov dword [esi + 4], eax
mov eax, dword [ebp + 4]
push 0
and edi, 0xffff
push 0x2f
push eax
mov dword [esp + 0x34], edi
call fcn.00403c00
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x43792b
push 0
call ebx
mov ecx, eax
mov eax, 0x66666667
imul ecx, edi
imul ecx
sar edx, 8
mov ecx, edx
push 1
shr ecx, 0x1f
add edx, ecx
mov dword [esp + 0x28], edx
call ebx
mov ecx, eax
mov eax, 0x88888889
imul ecx, dword [esp + 0x20]
imul ecx
add edx, ecx
push 0
sar edx, 8
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [esp + 0x24], edx
call ebx
mov ecx, eax
mov eax, 0x66666667
imul ecx, dword [esi]
imul ecx
sar edx, 8
mov ecx, edx
push 1
shr ecx, 0x1f
add edx, ecx
mov dword [esi], edx
call ebx
mov ecx, eax
mov eax, 0x88888889
imul ecx, dword [esi + 4]
imul ecx
add edx, ecx
sar edx, 8
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [esi + 4], edx
mov edx, dword [ebp + 4]
lea ecx, [esp + 0x10]
push ecx
push 0
push 0x13
push edx
call fcn.00403c00
mov edi, dword [esp + 0x10]
mov eax, dword [esi]
dec edi
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x1c]
neg edi
sbb edi, edi
and edi, 0xca0000
test eax, eax
mov dword [esp + 0x28], edi
je 0x43796d
push 5
call ebx
mov ecx, dword [esp + 0x14]
lea edx, [ecx + eax*2]
mov dword [esp + 0x14], edx
test edi, edi
je 0x437980
push 5
call ebx
mov ecx, dword [esp + 0x14]
lea edx, [ecx + eax*4]
mov dword [esp + 0x14], edx
push 0
call ebx
cmp dword [esp + 0x14], eax
jle 0x4379c1
push 0
call ebx
push 0
mov dword [esp + 0x18], eax
call ebx
mov dword [esi], eax
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4379ae
push 5
call ebx
mov ecx, dword [esi]
neg eax
shl eax, 1
add ecx, eax
mov dword [esi], ecx
test edi, edi
je 0x4379c1
push 5
call ebx
mov ecx, dword [esi]
neg eax
shl eax, 2
add ecx, eax
mov dword [esi], ecx
mov eax, dword [esi + 4]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4379df
push 6
call ebx
mov ecx, dword [esp + 0x18]
lea edx, [ecx + eax*2]
mov dword [esp + 0x18], edx
test edi, edi
je 0x4379fc
push 6
call ebx
push 4
mov edi, eax
call ebx
add eax, dword [esp + 0x18]
lea eax, [eax + edi*4]
mov edi, dword [esp + 0x28]
mov dword [esp + 0x18], eax
push 1
call ebx
cmp dword [esp + 0x18], eax
jle 0x437a4e
push 1
call ebx
push 1
mov dword [esp + 0x1c], eax
call ebx
mov dword [esi + 4], eax
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x437a2d
push 6
call ebx
mov ecx, dword [esi + 4]
neg eax
shl eax, 1
add ecx, eax
mov dword [esi + 4], ecx
test edi, edi
je 0x437a4e
push 6
call ebx
shl eax, 2
push 4
mov edi, eax
call ebx
mov ecx, dword [esi + 4]
neg eax
sub eax, edi
mov edi, dword [esp + 0x28]
add ecx, eax
mov dword [esi + 4], ecx
mov edx, dword [ebp + 4]
lea ecx, [esp + 0x10]
push ecx
push 0
push 0x16
push edx
call fcn.00403c00
cmp dword [esp + 0x10], 1
jne 0x437a87
push 0
call ebx
push 1
sub eax, dword [esp + 0x18]
cdq
sub eax, edx
mov esi, eax
sar esi, 1
call ebx
sub eax, dword [esp + 0x18]
cdq
sub eax, edx
mov ebx, eax
sar ebx, 1
jmp 0x437a8f
mov esi, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
mov ecx, dword [0x44728c]
cmp ecx, 0xfffffc18
je 0x437ab5
mov eax, dword [0x447290]
cmp eax, 0xfffffc18
je 0x437ab5
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], eax
mov esi, ecx
mov ebx, eax
push 0x18
mov dword [ebp + 0x30], 0
call fcn.0042cb50
mov dword [ebp + 0x40], eax
mov eax, dword [0x447518]
mov ecx, dword [0x447504]
mov edx, dword [esp + 0x18]
push 0
push eax
mov eax, dword [esp + 0x1c]
push 0
push ecx
push edx
mov edx, dword [esp + 0x30]
push eax
or edi, edx
mov edx, dword [ebp + 0x2c]
push ebx
or edi, 0x82000000
push esi
lea ecx, [esp + 0x9c]
push edi
push ecx
push 0x445628
push edx
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov ecx, dword [0x447504]
test ecx, ecx
mov dword [esp + 0x40], eax
je 0x437b24
push 1
push 0
push ecx
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [esp + 0x40]
test eax, eax
jne 0x437b4d
mov eax, dword [ebp + 0x40]
push eax
call fcn.0042cba0
mov ecx, dword [0x4442c4]
push ebp
push ecx
call fcn.0042d4d0
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xf8
ret 0x18
lea edx, [esp + 0x6c]
push edx
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
lea eax, [esp + 0x6c]
lea ecx, [esp + 0x30]
push eax
push ecx
call dword [sym.imp.USER32.dll_CopyRect]
mov dword [esp + 0x2c], 1
mov eax, dword [ebp + 0x40]
lea edx, [esp + 0x2c]
push edx
push eax
call fcn.0042c940
push ebp
push 0
mov ecx, dword [esp + 0x48]
push ecx
call dword [sym.imp.USER32.dll_SetWindowLongA]
push 0
mov edx, dword [esp + 0x44]
push edx
call dword [sym.imp.USER32.dll_GetSystemMenu]
mov esi, eax
test esi, esi
je 0x437bc1
mov edi, dword [sym.imp.USER32.dll_AppendMenuA]
push 0
push 0
push 0x800
push esi
call edi
push str.About...
push 0x1000
push 0
push esi
call edi
pop edi
mov eax, ebp
pop esi
pop ebp
pop ebx
add esp, 0xf8
ret 0x18
mov eax, dword [esp + 0x11c]
push ebx
mov ebx, dword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, eax
and ecx, 0xffff
shr eax, 0x10
mov dword [esi + 8], ecx
mov dword [esi + 0xc], eax
call ebx
mov dword [esi + 4], eax
imul eax, dword [esi + 8]
cdq
idiv dword [esi + 0xc]
push 0
mov dword [esi], eax
call ebx
cmp dword [esi], eax
jle 0x437c17
push 0
call ebx
mov dword [esi], eax
imul eax, dword [esi + 0xc]
cdq
idiv dword [esi + 8]
mov dword [esi + 4], eax
push 0
push 0
push 0
push 0x445640
call dword [sym.imp.GDI32.dll_CreateDCA]
mov edx, dword [esi + 4]
mov ebx, eax
mov eax, dword [esi]
push edx
push eax
push ebx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
test eax, eax
mov dword [ebp + 0x30], eax
je 0x437c76
push ebx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov ecx, dword [ebp + 0x30]
mov edi, eax
push ecx
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
mov edx, dword [esi + 4]
mov eax, dword [esi]
push 0xcc0020
push 0
push 0
push ebx
push edx
push eax
push 0
push 0
push edi
call dword [sym.imp.GDI32.dll_BitBlt]
push edi
call dword [sym.imp.GDI32.dll_DeleteDC]
push ebx
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0x18
call fcn.0042cb50
mov ebx, dword [sym.imp.USER32.dll_CreateWindowExA]
mov edi, dword [sym.imp.USER32.dll_GetClientRect]
mov dword [ebp + 0x40], eax
xor esi, esi
mov ecx, dword [0x447518]
push 0
push ecx
mov edx, dword [ebp + 0x2c]
push 0
push 0
push 0x14
push 0x14
push esi
push esi
push 0x80000000
push 0x446d6c
push 0x445648
push edx
call ebx
test eax, eax
mov dword [esp + 0x40], eax
je 0x437d10
lea ecx, [esp + 0x6c]
push ecx
push eax
call edi
lea edx, [esp + 0x6c]
lea eax, [esp + 0x30]
push edx
push eax
call dword [sym.imp.USER32.dll_CopyRect]
mov edx, dword [ebp + 0x40]
lea ecx, [esp + 0x2c]
push ecx
push edx
call fcn.0042c940
push ebp
push 0
mov eax, dword [esp + 0x48]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
add esi, 0x32
cmp esi, 0x64
jl 0x437c95
pop edi
mov eax, ebp
pop esi
pop ebp
pop ebx
add esp, 0xf8
ret 0x18
mov ecx, dword [ebp + 0x40]
push ecx
call fcn.0042cba0
mov edx, dword [0x4442c4]
push ebp
push edx
call fcn.0042d4d0
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xf8
ret 0x18