Function at 0x42ccc0
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
mov eax, dword [0x778400]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jne 0x42ccee
jmp 0x42d05c
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0xe4]
mov ecx, dword [ebp - 0x28]
cmp dword [ecx + eax*4 + 0xec], 1
jne 0x42d04b
mov edx, dword [ebp - 0x28]
cmp dword [edx + 0x1248], 0
jne 0x42cd71
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
imul eax, dword [ecx + 0x10]
xor ecx, ecx
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00657741
add esp, 4
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x58]
mov dword [eax + 0x1248], ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov ecx, dword [edx + 0xc]
imul ecx, dword [eax + 0x10]
shl ecx, 2
push ecx
push 0xff
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x1248]
push eax
call fcn.0066eb10
add esp, 0xc
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
imul eax, dword [edx + 0x10]
shl eax, 2
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xe4]
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + edx*4 + 0x124c]
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov ecx, dword [edx + 0xc]
imul ecx, dword [eax + 0x10]
shl ecx, 2
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x1248]
push eax
call fcn.0066d8fb
add esp, 0x10
mov ecx, dword [ebp - 0x28]
cmp dword [ecx + 0x1248], 0
je 0x42d006
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp - 0x34]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x1248]
push edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
mov edx, dword [eax + 0xc]
imul edx, dword [ecx + 0x10]
shl edx, 2
push edx
mov eax, dword [ebp - 0x3c]
push eax
call dword [sym.imp.GDI32.dll_SetBitmapBits]
mov ecx, dword [ebp - 0x34]
push ecx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x3c]
push edx
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x60], eax
mov byte [ebp - 0xc], 0
xor ecx, ecx
mov dword [ebp - 0xb], ecx
mov word [ebp - 7], cx
mov byte [ebp - 5], cl
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x123c]
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x28]
mov eax, dword [edx + 0x9c]
call eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
cdq
mov ecx, 0xa
idiv ecx
push eax
push str._d__
lea edx, [ebp - 0xc]
push edx
call fcn.004485e0
add esp, 0xc
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x10]
sub ecx, 0x50
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
add edx, 0x3c
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x32
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
add ecx, 0x64
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x4c], 0
mov edx, dword [ebp - 0x28]
cmp dword [edx + 0xf4], 1
jne 0x42cf27
push 1
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.GDI32.dll_SetBkMode]
push 0xffffff
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.GDI32.dll_SetTextColor]
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x1260]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0xc]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x38]
mov dl, byte [ecx]
mov byte [ebp - 0x2d], dl
add dword [ebp - 0x38], 1
cmp byte [ebp - 0x2d], 0
jne 0x42cef4
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x64]
mov dword [ebp - 0x50], eax
push 0x25
lea ecx, [ebp - 0x24]
push ecx
mov edx, dword [ebp - 0x50]
push edx
lea eax, [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.USER32.dll_DrawTextA]
mov edx, dword [ebp - 0x28]
add edx, 0x5c
mov dword [ebp - 0x48], edx
push 4
lea ecx, [ebp - 0x10]
call fcn.00413f70
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x48]
call fcn.00416630
push 4
lea ecx, [ebp - 0x14]
call fcn.00413f70
lea ecx, [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0x48]
call fcn.00416660
jmp 0x42cf66
lea ecx, [ebp - 0x10]
call fcn.00445ac0
lea edx, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x10]
call fcn.0041fb00
movzx eax, al
test eax, eax
je 0x42cf9f
lea ecx, [ebp - 0x10]
call fcn.00416e70
mov ecx, dword [eax]
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], 0
je 0x42cf9d
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0x40]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x40]
mov eax, dword [edx + 4]
call eax
jmp 0x42cf5e
push 0xcc0020
push 0
push 0
mov ecx, dword [ebp - 0x2c]
push ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x10]
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
push edx
push 0
push 0
mov eax, dword [ebp - 0x34]
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
push 0
push 0
mov ecx, dword [ebp - 0x3c]
push ecx
call dword [sym.imp.GDI32.dll_SetBitmapBits]
mov edx, dword [ebp - 0x60]
push edx
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x3c]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.GDI32.dll_DeleteDC]
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0xe4]
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x28]
cmp dword [ecx + 0xe4], 0
je 0x42d027
mov dword [ebp - 0x44], 0
jmp 0x42d02e
mov dword [ebp - 0x44], 1
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x44]
mov dword [edx + 0xe4], eax
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x28]
mov dword [edx + ecx*4 + 0xec], 0
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_ReleaseDC]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0066c98d
mov esp, ebp
pop ebp
ret