Function at 0x427aa0
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x6c
push ebx
mov dword [esp + 0x64], ecx
xorps xmm0, xmm0
mov ecx, dword [ebp + 0x1c]
movzx ebx, cx
movzx eax, cl
shl eax, 8
shr ebx, 8
or ebx, eax
mov dword [esp + 0x60], edx
mov eax, ecx
shl ebx, 8
shr eax, 0x10
lea edx, [esp + 0x6c]
push esi
movzx eax, al
lea ecx, [esp + 0x6c]
push edi
or ebx, eax
movlpd qword [esp + 0x70], xmm0
push 0
mov dword [esp + 0x48], ebx
call fcn.00482e80
mov edi, dword [ebp + 0xc]
add esp, 4
mov edx, dword [esp + 0x70]
add edi, edx
add edx, dword [ebp + 0x14]
mov esi, edi
mov ecx, dword [ebp + 0x10]
add ecx, dword [esp + 0x74]
mov eax, dword [ebp + 0x18]
add eax, dword [esp + 0x74]
cmp edi, edx
mov dword [esp + 0x5c], edx
cmovle esi, edx
mov dword [esp + 0x58], edi
cmovle edx, edi
mov dword [esp + 0x38], ecx
cmp ecx, eax
mov dword [esp + 0x34], edx
mov edi, ecx
mov dword [esp + 0x3c], eax
cmovle edi, eax
mov edx, eax
mov eax, dword [ebp + 0x20]
cmovle edx, ecx
xor ecx, ecx
mov dword [esp + 0x50], edx
test eax, eax
cmovns ecx, eax
mov dword [esp + 0x54], ecx
cmp ecx, 0xff
jle 0x427b6e
mov eax, ebx
mov ecx, 0xff
shr eax, 8
shr ebx, 0x10
mov dword [esp + 0x54], ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ebx
jmp 0x427ba0
mov dword [esp + 0x14], ecx
test ecx, ecx
jle 0x427b88
mov eax, ebx
shr eax, 8
shr ebx, 0x10
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ebx
jmp 0x427ba0
mov al, byte [esp + 0x13]
mov dword [esp + 0x44], eax
mov al, byte [esp + 0x13]
mov dword [esp + 0x20], eax
mov al, byte [esp + 0x13]
mov dword [esp + 0x24], eax
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov ebx, eax
mov dword [esp + 0x28], ebx
test ebx, ebx
jne 0x427bbe
mov eax, 0xa0070000
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
sub esi, dword [esp + 0x34]
xor ecx, ecx
sub edi, dword [esp + 0x50]
xor eax, eax
push ebx
mov byte [esp + 0x14], 0
inc esi
mov dword [esp + 0x34], ecx
inc edi
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [esp + 0x2c], eax
test eax, eax
je 0x427f60
push edi
push esi
push ebx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [esp + 0x30], eax
test eax, eax
je 0x427f60
push eax
push dword [esp + 0x30]
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [esp + 0x18], eax
test eax, eax
je 0x427f60
push 0xcc0020
push dword [esp + 0x54]
push dword [esp + 0x3c]
push ebx
mov ebx, dword [esp + 0x3c]
push edi
push esi
push 0
push 0
push ebx
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x427f60
mov ecx, dword [esp + 0x30]
lea eax, [esp + 0x11]
push 8
push eax
lea eax, [esp + 0x54]
mov edx, ebx
push eax
lea eax, [esp + 0x54]
push eax
call fcn.004278a0
mov edi, eax
add esp, 0x10
mov dword [esp + 0x1c], edi
test edi, edi
je 0x427f60
mov ebx, dword [esp + 0x48]
mov edx, ebx
imul edx, dword [esp + 0x4c]
cmp byte [esp + 0x11], 0
mov dword [esp + 0x40], edx
je 0x427d0e
xor esi, esi
test edx, edx
jle 0x427d12
cmp edx, 0x10
jb 0x427d00
mov eax, edx
and eax, reloc.OLEAUT32.dll_SafeArrayDestroy
jns 0x427ca7
dec eax
or eax, 0xfffffff0
inc eax
movaps xmm2, xmmword [0x4dcb70]
mov ecx, edx
sub ecx, eax
lea eax, [edi + 0x20]
movups xmm0, xmmword [eax - 0x20]
lea eax, [eax + 0x40]
add esi, 0x10
movaps xmm1, xmm2
andps xmm1, xmm0
movups xmmword [eax - 0x60], xmm1
movaps xmm1, xmm2
movups xmm0, xmmword [eax - 0x50]
andps xmm1, xmm0
movups xmmword [eax - 0x50], xmm1
movaps xmm1, xmm2
movups xmm0, xmmword [eax - 0x40]
andps xmm1, xmm0
movups xmmword [eax - 0x40], xmm1
movaps xmm1, xmm2
movups xmm0, xmmword [eax - 0x30]
andps xmm1, xmm0
movups xmmword [eax - 0x30], xmm1
cmp esi, ecx
jl 0x427cb5
cmp esi, edx
jge 0x427d12
nop dword [eax + eax]
and dword [edi + esi*4], 0xf8f8f8f8
inc esi
cmp esi, edx
jl 0x427d00
jmp 0x427d12
mov esi, dword [esp + 0x4c]
mov ecx, dword [ebp + 0x24]
test ecx, ecx
je 0x427d34
mov eax, dword [edi]
and eax, 0xffffff
push eax
push 0x4d509c
push ecx
call fcn.00406670
add esp, 0xc
jmp 0x427f46
mov ecx, dword [esp + 0x54]
cmp ecx, 1
jge 0x427dd0
cmp byte [esp + 0x11], 0
je 0x427d4f
and dword [ebp + 0x1c], 0xf8f8f8f8
xor ecx, ecx
test edx, edx
jle 0x427f46
lea edi, [edx - 1]
nop dword [eax]
mov eax, dword [esp + 0x58]
cmp eax, dword [esp + 0x5c]
mov eax, dword [esp + 0x38]
jle 0x427d91
cmp eax, dword [esp + 0x3c]
jle 0x427d78
mov esi, edi
jmp 0x427db0
mov eax, ecx
cdq
idiv ebx
lea esi, [eax + 1]
mov eax, ecx
cdq
idiv ebx
imul esi, ebx
sub esi, edx
mov edx, dword [esp + 0x40]
dec esi
jmp 0x427db0
cmp eax, dword [esp + 0x3c]
jle 0x427dae
mov eax, edi
cdq
idiv ebx
mov esi, eax
mov eax, ecx
cdq
idiv ebx
imul esi, ebx
add esi, edx
mov edx, dword [esp + 0x40]
jmp 0x427db0
mov esi, ecx
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + esi*4]
and eax, 0xffffff
cmp eax, dword [ebp + 0x1c]
je 0x427f41
inc ecx
dec edi
cmp ecx, edx
jl 0x427d60
jmp 0x427f46
cmp byte [esp + 0x11], 0
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x20]
je 0x427dee
and eax, 0xfffffff8
and dl, 0xf8
and byte [esp + 0x24], 0xf8
mov dword [esp + 0x20], eax
movzx edi, dl
mov dword [esp + 0x54], edi
cmp ecx, edi
jle 0x427e00
mov byte [esp + 0x11], 0
jmp 0x427e0c
mov byte [esp + 0x11], dl
sub byte [esp + 0x11], cl
mov byte [esp + 0x14], cl
movzx edi, al
xor ebx, ebx
sub al, byte [esp + 0x14]
cmp ecx, edi
movzx eax, al
cmovle ebx, eax
mov dword [esp + 0x4c], edi
mov eax, dword [esp + 0x24]
movzx edi, al
sub al, byte [esp + 0x14]
mov dword [esp + 0x60], ebx
xor ebx, ebx
cmp ecx, edi
movzx eax, al
mov dword [esp + 0x44], edi
mov edi, 0xff
cmovle ebx, eax
mov eax, edi
sub eax, dword [esp + 0x54]
mov dword [esp + 0x64], ebx
cmp ecx, eax
jle 0x427e58
mov byte [esp + 0x12], 0xff
jmp 0x427e62
mov al, byte [esp + 0x14]
add al, dl
mov byte [esp + 0x12], al
mov eax, edi
sub eax, dword [esp + 0x4c]
cmp ecx, eax
jle 0x427e73
mov byte [esp + 0x13], 0xff
jmp 0x427e81
mov dl, byte [esp + 0x14]
mov eax, dword [esp + 0x20]
add dl, al
mov byte [esp + 0x13], dl
sub edi, dword [esp + 0x44]
cmp ecx, edi
jle 0x427e90
mov byte [esp + 0x14], 0xff
jmp 0x427e9c
mov edx, dword [esp + 0x14]
add dl, byte [esp + 0x24]
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x40]
xor ecx, ecx
mov ebx, dword [esp + 0x48]
test eax, eax
jle 0x427f68
lea edi, [eax - 1]
mov eax, dword [esp + 0x58]
cmp eax, dword [esp + 0x5c]
mov eax, dword [esp + 0x38]
jle 0x427ede
cmp eax, dword [esp + 0x3c]
jle 0x427ec9
mov esi, edi
jmp 0x427ef9
mov eax, ecx
cdq
idiv ebx
lea esi, [eax + 1]
mov eax, ecx
cdq
idiv ebx
imul esi, ebx
sub esi, edx
dec esi
jmp 0x427ef9
cmp eax, dword [esp + 0x3c]
jle 0x427ef7
mov eax, edi
cdq
idiv ebx
mov esi, eax
mov eax, ecx
cdq
idiv ebx
imul esi, ebx
add esi, edx
jmp 0x427ef9
mov esi, ecx
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + esi*4]
mov edx, eax
shr edx, 0x10
shr eax, 8
cmp dl, byte [esp + 0x11]
jb 0x427f33
cmp dl, byte [esp + 0x12]
ja 0x427f33
cmp al, byte [esp + 0x60]
jb 0x427f33
cmp al, byte [esp + 0x13]
ja 0x427f33
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + esi*4]
cmp al, byte [esp + 0x64]
jb 0x427f33
cmp al, byte [esp + 0x14]
jbe 0x427f41
inc ecx
dec edi
cmp ecx, dword [esp + 0x40]
jl 0x427eb1
jmp 0x427f46
mov byte [esp + 0x10], 1
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push dword [esp + 0x28]
mov edi, eax
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [esp + 0x18]
jmp 0x427fab
mov ebx, dword [esp + 0x48]
mov esi, dword [esp + 0x4c]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x18], eax
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push dword [esp + 0x28]
mov edi, eax
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp dword [esp + 0x2c], 0
je 0x427fc0
mov al, byte [esp + 0x10]
mov byte [esp + 0x10], al
mov eax, dword [esp + 0x30]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x18]
test eax, eax
je 0x427fb6
push eax
push dword [esp + 0x30]
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [esp + 0x2c]
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [esp + 0x30]
test eax, eax
je 0x427fcf
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x428044
push eax
call fcn.0049f4a2
add esp, 4
cmp dword [ebp + 0x24], 0
jne 0x428038
mov al, byte [esp + 0x10]
test al, al
je 0x42802f
mov eax, esi
mov ecx, dword [esp + 0x68]
cdq
idiv ebx
mov dword [ecx + 8], 1
sub edx, dword [esp + 0x70]
add edx, dword [esp + 0x34]
mov eax, edx
cdq
mov dword [ecx], eax
mov eax, esi
mov dword [ecx + 4], edx
cdq
idiv ebx
mov ecx, dword [ebp + 8]
sub eax, dword [esp + 0x74]
add eax, dword [esp + 0x50]
cdq
mov dword [ecx], eax
mov al, byte [esp + 0x10]
mov dword [ecx + 8], 1
mov dword [ecx + 4], edx
mov ecx, dword [esp + 0x6c]
movzx eax, al
mov dword [ecx], eax
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
or edi, 0xa0070000
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret