Function at 0x42eefc
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff9c
push ebx
push esi
push edi
mov ebx, eax
mov eax, ebx
call fcn.0042eb70
test al, al
jne 0x42f204
mov byte [ebp - 0x25], 0
mov eax, ebx
call dword [ebx + 0x2c]
xor eax, eax
mov dword [ebx + 0x20], eax
xor eax, eax
mov dword [ebx + 0x4e], eax
xor eax, eax
mov dword [ebx + 0x52], eax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x10], eax
cmp dword [ebx + 0x39], 0
je 0x42ef56
mov ecx, dword [ebx + 0x35]
mov eax, dword [ecx + 4]
mov dword [ebp - 0x14], eax
mov eax, dword [ecx + 8]
cdq
xor eax, edx
sub eax, edx
mov dword [ebp - 0x10], eax
jmp 0x42ef8b
cmp dword [ebx + 0x18], 0
je 0x42ef8b
mov eax, 0x18
call fcn.00402774
mov esi, eax
push esi
push 0x18
mov eax, dword [ebx + 0x18]
push eax
call sub.gdi32.dll_GetObjectA
test eax, eax
je 0x42ef84
mov eax, dword [esi + 4]
mov dword [ebp - 0x14], eax
mov eax, dword [esi + 8]
mov dword [ebp - 0x10], eax
mov eax, esi
call fcn.00402794
push 0
call sub.gdi32.dll_CreateCompatibleDC
mov esi, eax
cmp byte [ebx + 0x34], 1
jne 0x42f08e
push 0
call sub.user32.dll_GetDC
mov dword [ebp - 8], eax
mov eax, dword [ebx + 0x10]
push eax
mov eax, dword [ebx + 0x14]
push eax
mov eax, dword [ebp - 8]
push eax
call sub.gdi32.dll_CreateCompatibleBitmap
mov edi, eax
test edi, edi
jne 0x42efd3
mov ecx, 0xc249
mov edx, 0x42f214
mov eax, 0x42f248
call fcn.0040466c
mov eax, dword [ebp - 8]
push eax
push 0
call sub.user32.dll_ReleaseDC
push edi
push esi
call sub.gdi32.dll_SelectObject
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x42f002
mov ecx, 0xc24d
mov edx, 0x42f214
mov eax, 0x42f264
call fcn.0040466c
mov eax, dword [ebx + 0x24]
call fcn.00428b54
push eax
call sub.gdi32.dll_CreateSolidBrush
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebx + 0x10]
push eax
mov eax, dword [ebx + 0x14]
push eax
push 0
push 0
lea eax, [ebp - 0x64]
push eax
call fcn.0042886c
lea eax, [ebp - 0x64]
push eax
push esi
call sub.user32.dll_FillRect
mov eax, dword [ebp - 0x20]
push eax
call sub.gdi32.dll_DeleteObject
cmp dword [ebx + 0x39], 0
je 0x42f068
mov eax, dword [ebp - 4]
push eax
push esi
call sub.gdi32.dll_SelectObject
push 0
mov eax, dword [ebx + 0x35]
push eax
mov eax, dword [ebx + 0x39]
push eax
mov eax, dword [ebx + 0x10]
push eax
push 0
push edi
push esi
call sub.gdi32.dll_SetDIBits
jmp 0x42f07f
push 0
xor ecx, ecx
mov edx, esi
mov eax, ebx
call fcn.0042e81c
mov eax, dword [ebp - 4]
push eax
push esi
call sub.gdi32.dll_SelectObject
mov eax, ebx
call fcn.0042e750
mov dword [ebx + 0x18], edi
jmp 0x42f1ea
xor eax, eax
mov al, byte [ebx + 0x41]
movzx eax, byte [eax + 0x4a26d8]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x42f0b4
xor eax, eax
mov al, byte [0x4a258c]
movzx eax, byte [eax + 0x4a26d8]
mov dword [ebp - 0x1c], eax
xor edi, edi
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebx + 0x10]
mov eax, dword [ebx + 0x14]
call fcn.0042e404
push esi
push edi
mov esi, eax
lea edi, [ebp - 0x51]
mov ecx, 0xb
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
cmp byte [ebx + 0x41], 5
jne 0x42f0e2
lea eax, [ebp - 0x51]
call fcn.0042e5e0
lea eax, [ebp - 0x51]
call fcn.0042eed0
imul dword [ebx + 0x10]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
call fcn.00402774
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x42f115
mov ecx, 0xc272
mov edx, 0x42f214
mov eax, 0x42f288
call fcn.0040466c
push 0
lea eax, [ebp - 0x51]
push eax
mov eax, dword [ebp - 0xc]
push eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebx + 0x10]
call fcn.004288e4
push eax
push 0
mov eax, ebx
call fcn.0042ec0c
push eax
push esi
call sub.gdi32.dll_GetDIBits
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebx + 0x10]
call fcn.004288e4
cmp eax, dword [ebp - 0x24]
je 0x42f1c8
mov eax, dword [ebp - 0xc]
call fcn.00402794
xor eax, eax
mov dword [ebp - 0xc], eax
push 0
push 0
lea eax, [ebp - 0xc]
push eax
push 0
lea eax, [ebp - 0x51]
push eax
push esi
call sub.gdi32.dll_CreateDIBSection
mov edi, eax
mov byte [ebp - 0x25], 1
test edi, edi
jne 0x42f18d
mov ecx, 0xc27e
mov edx, 0x42f214
mov eax, 0x42f29c
call fcn.0040466c
push edi
push esi
call sub.gdi32.dll_SelectObject
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x42f1b1
mov ecx, 0xc280
mov edx, 0x42f214
mov eax, 0x42f2d4
call fcn.0040466c
push 0
xor ecx, ecx
mov edx, esi
mov eax, ebx
call fcn.0042e81c
mov eax, dword [ebp - 4]
push eax
push esi
call sub.gdi32.dll_SelectObject
mov eax, ebx
call fcn.0042e750
mov eax, dword [ebp - 0x18]
mov dword [ebx + 0x3d], eax
mov eax, dword [ebp - 0xc]
mov dword [ebx + 0x39], eax
lea eax, [ebp - 0x51]
mov dword [ebx + 0x35], eax
mov dword [ebx + 0x18], edi
mov al, byte [ebp - 0x25]
mov byte [ebx + 0x6a], al
cmp dword [ebx + 0x42], 0
je 0x42f1fe
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, esi
mov eax, ebx
call dword [ebx + 0x42]
push esi
call sub.gdi32.dll_DeleteDC
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret