Function at 0x427caf
Capabilities:
Capture screenshot

Disassembly:
mov eax, 0x456464
call fcn.00434704
sub esp, 0x64
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
mov eax, dword [esi + 0x50]
mov dword [ebp - 0x10], edi
mov dword [edi + 0x50], eax
call fcn.00427578
lea ecx, [edi + 0x44]
call fcn.0044a3cc
push 0x469684
lea ecx, [edi + 0x38]
mov dword [edi + 0x40], 0xfffffffe
call fcn.00448b43
mov eax, dword [esi + 0x4c]
mov dword [edi + 0x4c], eax
xor edi, edi
cmp eax, edi
jne 0x4280b6
mov eax, dword [esi + 0x64]
cmp dword [ebp + 0x10], edi
mov dword [ebp - 0x28], eax
mov eax, dword [esi + 0x68]
mov dword [ebp - 0x24], eax
mov eax, dword [esi + 0x6c]
mov dword [ebp - 0x30], eax
mov eax, dword [esi + 0x70]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0xc]
push dword [eax + 0x1c]
jle 0x427f08
call dword [sym.imp.USER32.dll_GetDC]
push eax
call fcn.00449956
mov ebx, eax
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x1c], ebx
call fcn.004498b4
cmp ebx, edi
mov dword [ebp - 4], edi
je 0x427d48
mov edi, dword [ebx + 4]
push edi
mov edi, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
call edi
push eax
lea ecx, [ebp - 0x50]
call fcn.0044996b
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push dword [ebx + 4]
mov ebx, dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
call ebx
test eax, eax
mov dword [ebp - 0x20], eax
je 0x427d81
push eax
push dword [ebp - 0x4c]
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x14], eax
jmp 0x427d85
and dword [ebp - 0x14], 0
mov eax, dword [esi + 0x7c]
xor ecx, ecx
mov dword [ebp + 8], eax
xor eax, eax
mov dword [esi + 0x6c], eax
lea eax, [ebp - 0x50]
neg eax
sbb eax, eax
push 0xcc0020
and eax, dword [ebp - 0x4c]
push ecx
push ecx
mov dword [esi + 0x7c], ecx
push eax
mov eax, dword [ebp + 0xc]
mov dword [esi + 0x70], ecx
mov ecx, esi
push dword [eax + 0x1c]
call fcn.00427808
mov eax, dword [ebp - 0x30]
mov ecx, dword [esi + 0x7c]
mov dword [esi + 0x6c], eax
mov eax, dword [ebp - 0x2c]
test ecx, ecx
mov dword [esi + 0x70], eax
je 0x427dd3
lea eax, [ebp - 0x30]
push eax
call fcn.00407680
push dword [ebp - 0x24]
mov eax, dword [ebp + 8]
mov dword [esi + 0x7c], eax
push dword [ebp - 0x28]
push dword [ebp - 0x4c]
call ebx
push eax
mov eax, dword [ebp - 0x10]
lea ebx, [eax + 0x44]
mov ecx, ebx
call fcn.0044a375
lea ecx, [ebp - 0x60]
call fcn.004498b4
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 1
neg eax
sbb eax, eax
and eax, dword [ebp - 0x4c]
push eax
call edi
push eax
lea ecx, [ebp - 0x60]
call fcn.0044996b
test ebx, ebx
je 0x427e2e
mov ebx, dword [ebx + 4]
test ebx, ebx
je 0x427e2e
push ebx
push dword [ebp - 0x5c]
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp + 8], eax
jmp 0x427e32
and dword [ebp + 8], 0
xor ebx, ebx
cmp dword [ebp - 0x28], ebx
jle 0x427e9d
xor edi, edi
cmp dword [ebp - 0x24], edi
jle 0x427e97
push edi
push ebx
push dword [ebp - 0x4c]
call dword [sym.imp.GDI32.dll_GetPixel]
xor ecx, ecx
mov cl, ah
movzx ecx, cl
movzx edx, al
sub ecx, 0x80
shr eax, 0x10
test edx, edx
movzx eax, al
jge 0x427e67
neg edx
test ecx, ecx
jge 0x427e6d
neg ecx
test eax, eax
jge 0x427e73
neg eax
add eax, ecx
add eax, edx
cmp eax, dword [ebp + 0x10]
jge 0x427e83
mov eax, 0xffffff
jmp 0x427e85
xor eax, eax
push eax
push edi
push ebx
push dword [ebp - 0x5c]
call dword [sym.imp.GDI32.dll_SetPixel]
inc edi
cmp edi, dword [ebp - 0x24]
jl 0x427e40
inc ebx
cmp ebx, dword [ebp - 0x28]
jl 0x427e39
cmp dword [ebp + 8], 0
je 0x427eaf
push dword [ebp + 8]
push dword [ebp - 0x5c]
call dword [sym.imp.GDI32.dll_SelectObject]
lea ecx, [ebp - 0x60]
call fcn.004499d3
cmp dword [ebp - 0x14], 0
je 0x427ec9
push dword [ebp - 0x14]
push dword [ebp - 0x4c]
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x1c]
push dword [eax + 4]
mov eax, dword [ebp + 0xc]
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_ReleaseDC]
push dword [ebp - 0x20]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [ebp - 0x10]
add esi, 0x54
push esi
call fcn.004276d7
and byte [ebp - 4], 0
lea ecx, [ebp - 0x60]
call fcn.004499e9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
jmp 0x4280b1
call dword [sym.imp.USER32.dll_GetDC]
push eax
call fcn.00449956
mov ebx, eax
lea ecx, [ebp - 0x40]
mov dword [ebp + 8], ebx
call fcn.004498b4
cmp ebx, edi
mov dword [ebp - 4], 2
jne 0x427f30
xor eax, eax
jmp 0x427f33
mov eax, dword [ebx + 4]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
lea ecx, [ebp - 0x40]
call fcn.0044996b
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push dword [ebx + 4]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
cmp eax, edi
mov dword [ebp - 0x20], eax
je 0x427f68
push eax
push dword [ebp - 0x3c]
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp + 0x10], eax
jmp 0x427f6b
mov dword [ebp + 0x10], edi
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x18], eax
mov dword [esi + 0x6c], eax
lea eax, [ebp - 0x40]
mov ebx, dword [esi + 0x7c]
neg eax
sbb eax, eax
push 0xcc0020
and eax, dword [ebp - 0x3c]
push edi
push edi
mov dword [esi + 0x7c], edi
push eax
mov eax, dword [ebp + 0xc]
mov dword [esi + 0x70], ecx
mov dword [ebp - 0x14], ecx
push dword [eax + 0x1c]
mov ecx, esi
call fcn.00427808
mov eax, dword [ebp - 0x30]
mov ecx, dword [esi + 0x7c]
mov dword [esi + 0x6c], eax
mov eax, dword [ebp - 0x2c]
cmp ecx, edi
mov dword [esi + 0x70], eax
je 0x427fbc
lea eax, [ebp - 0x30]
push eax
call fcn.00407680
push edi
push 1
push 1
mov dword [esi + 0x7c], ebx
push dword [ebp - 0x24]
push dword [ebp - 0x28]
call dword [sym.imp.GDI32.dll_CreateBitmap]
push eax
mov eax, dword [ebp - 0x10]
lea ebx, [eax + 0x44]
mov ecx, ebx
call fcn.0044a375
lea ecx, [ebp - 0x70]
call fcn.004498b4
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 3
neg eax
sbb eax, eax
and eax, dword [ebp - 0x3c]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
lea ecx, [ebp - 0x70]
call fcn.0044996b
cmp ebx, edi
je 0x42801d
mov ebx, dword [ebx + 4]
cmp ebx, edi
je 0x42801d
push ebx
push dword [ebp - 0x6c]
call dword [sym.imp.GDI32.dll_SelectObject]
mov ebx, eax
jmp 0x42801f
xor ebx, ebx
mov eax, dword [ebp - 0x40]
push 0x8000
lea ecx, [ebp - 0x40]
call dword [eax + 0x2c]
lea eax, [ebp - 0x40]
push 0xcc0020
neg eax
sbb eax, eax
push edi
and eax, dword [ebp - 0x3c]
push edi
push eax
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push edi
push edi
push dword [ebp - 0x6c]
call dword [sym.imp.GDI32.dll_BitBlt]
cmp ebx, edi
je 0x42805e
push ebx
push dword [ebp - 0x6c]
call dword [sym.imp.GDI32.dll_SelectObject]
lea ecx, [ebp - 0x70]
call fcn.004499d3
cmp dword [ebp + 0x10], edi
je 0x428077
push dword [ebp + 0x10]
push dword [ebp - 0x3c]
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp + 8]
push dword [eax + 4]
mov eax, dword [ebp + 0xc]
push dword [eax + 0x1c]
call dword [sym.imp.USER32.dll_ReleaseDC]
push dword [ebp - 0x20]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [ebp - 0x10]
add esi, 0x54
push esi
call fcn.004276d7
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 2
call fcn.004499e9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.004499e9
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0xc