Function at 0x412be0
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4224d8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x228
push esi
mov esi, dword [ebp + 8]
push esi
push str._______s_n
call fcn.00402050
add esp, 8
lea ecx, [ebp - 0x38]
call fcn.00412a50
push esi
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0
call fcn.00412b00
test eax, eax
jne 0x412c4a
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.00412a60
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
push ebx
push edi
push 0
push 0
push 0
push str.DISPLAY
call dword [sym.imp.GDI32.dll_CreateDCA]
mov edi, eax
push edi
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0x64
push 0x64
push edi
mov ebx, eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov esi, eax
push esi
push ebx
mov dword [ebp - 0x24], esi
call dword [sym.imp.GDI32.dll_SelectObject]
push 0x258
push 0x320
push 0xffffffffffffffbf
push 0xfffffe61
push ebx
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x10], eax
call fcn.00412aa0
mov eax, dword [ebp - 0x10]
push eax
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push 0x2c
lea ecx, [ebp - 0x64]
push 0
push ecx
call fcn.004144d0
add esp, 0xc
push 0
lea edx, [ebp - 0x64]
push edx
push 0
push 0
push 0
push esi
push ebx
mov dword [ebp - 0x64], 0x28
call dword [sym.imp.GDI32.dll_GetDIBits]
movzx eax, word [ebp - 0x56]
imul eax, dword [ebp - 0x60]
mov esi, dword [ebp - 0x5c]
add eax, 0x1f
cdq
and edx, 0x1f
add eax, edx
sar eax, 5
add eax, eax
add eax, eax
imul esi, eax
push esi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x28], eax
call fcn.00413d67
push esi
mov dword [ebp - 0x1c], eax
call fcn.00413d67
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x5c]
add esp, 8
push 0
mov esi, eax
lea eax, [ebp - 0x64]
push eax
mov eax, dword [ebp - 0x24]
push ecx
push edx
push 0
push eax
push ebx
mov dword [ebp - 0x2c], esi
call dword [sym.imp.GDI32.dll_GetDIBits]
xor eax, eax
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x5c], eax
jle 0x412dde
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x14], 0x12c
jmp 0x412d50
xor esi, esi
test eax, eax
jle 0x412dc2
movzx eax, word [ebp - 0x56]
imul eax, esi
cdq
and edx, 7
add eax, edx
sar eax, 3
add eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x1c]
movzx edx, byte [eax + 2]
movzx ecx, byte [eax + 1]
lea ecx, [edx + ecx*2]
movzx edx, byte [eax]
lea ecx, [ecx + ecx*2]
add ecx, edx
cmp ecx, 0x96
mov ecx, dword [ebp - 0x20]
setl al
mov byte [ecx], al
test al, al
je 0x412da3
mov edx, dword [ebp - 0x14]
push 0xffffff
push edx
lea eax, [esi + 0x3e8]
push eax
jmp 0x412db0
mov ecx, dword [ebp - 0x14]
push 0
push ecx
lea edx, [esi + 0x3e8]
push edx
push edi
call dword [sym.imp.GDI32.dll_SetPixel]
mov eax, dword [ebp - 0x60]
inc dword [ebp - 0x20]
inc esi
cmp esi, eax
jl 0x412d56
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x28]
add dword [ebp - 0x18], edx
dec dword [ebp - 0x14]
inc ecx
mov dword [ebp - 0x10], ecx
cmp ecx, dword [ebp - 0x5c]
jl 0x412d50
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
push eax
call fcn.004138dd
push 0xa4
lea ecx, [ebp - 0x108]
push 0
push ecx
call fcn.004144d0
mov edx, dword [ebp - 0x60]
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x5c]
push ecx
mov dword [ebp - 0xfc], edx
lea edx, [ebp - 0x234]
push str._s.log
push edx
mov dword [ebp - 0x108], edi
mov dword [ebp - 0x100], esi
mov dword [ebp - 0xf8], eax
call fcn.00413ce3
lea eax, [ebp - 0x234]
push 0x524cb0
push eax
call fcn.00413c85
add esp, 0x24
mov dword [ebp - 0x104], eax
test eax, eax
je 0x412e75
mov ecx, dword [ebp + 8]
push ecx
push str.___s__
push eax
call fcn.00414eaf
lea edx, [ebp - 0x108]
push edx
call fcn.0040e3d0
mov eax, dword [ebp - 0x104]
push eax
call fcn.00413984
add esp, 0x14
push esi
call fcn.004138dd
mov esi, dword [sym.imp.GDI32.dll_DeleteDC]
add esp, 4
push edi
call esi
mov ecx, dword [ebp - 0x24]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
push ebx
call esi
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 0xffffffff
call fcn.00412a60
mov ecx, dword [ebp - 0xc]
pop edi
pop ebx
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret