Function at 0x428090
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x2b0
mov eax, dword [ebp + 8]
mov dword [esp + 0x2a0], 0x43dda0
mov esi, dword [0x43e8f0]
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_GetDC]
call eax
sub esp, 4
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
mov eax, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
call eax
sub esp, 4
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
mov dword [esp + 4], 8
mov edi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
call edi
sub esp, 8
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call edi
sub esp, 8
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x48]
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], edx
mov eax, dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
call eax
sub esp, 0xc
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x4c]
mov dword [esp + 4], eax
mov dword [esp], ecx
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
call edi
sub esp, 8
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x4c]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], edx
mov dword [esp], ebx
mov dword [esp + 0x20], 0xcc0020
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [sym.imp.GDI32.dll_BitBlt]
call eax
sub esp, 0x24
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x4c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call edi
sub esp, 8
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
mov eax, dword [sym.imp.GDI32.dll_DeleteDC]
call eax
sub esp, 4
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_ReleaseDC]
call eax
sub esp, 8
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov eax, dword [sym.imp.GDI32.dll_DeleteObject]
call eax
sub esp, 4
mov byte [esp + 0x37], 0
mov eax, dword [esp + 0x74]
mov dword [esp + 0x298], eax
mov dword [esp + 0x80], 0xf4a29f10
lea eax, [esp + 0x80]
mov dword [esp + 0x30], eax
xor esi, 0x274999aa
mov eax, dword [esp + 0x2a0]
mov eax, dword [eax + esi*4]
mov ecx, dword [0x43e8f4]
xor ecx, 0x774c7a67
sub eax, ecx
mov dword [esp + 0x294], 0x43dda0
mov esi, dword [0x43e8f8]
mov dword [esp + 0x290], 0x43e900
mov dword [esp + 0x288], 0x43e90c
mov dword [esp + 0x280], 0x43e918
mov dword [esp + 0x278], 0x43e924
mov dword [esp + 0x270], 0x43e930
mov dword [esp + 0x268], 0x43e93c
mov dword [esp + 0x260], 0x43e948
mov dword [esp + 0x258], 0x43e954
mov dword [esp + 0x250], 0x43e960
mov dword [esp + 0x248], 0x43e96c
mov dword [esp + 0x240], 0x43e978
mov dword [esp + 0x238], 0x43e984
mov dword [esp + 0x230], 0x43e990
mov dword [esp + 0x228], 0x43e99c
mov dword [esp + 0x220], 0x43e9a8
mov dword [esp + 0x218], 0x43e9b4
mov dword [esp + 0x210], 0x43e9c0
mov dword [esp + 0x208], 0x43e9cc
mov dword [esp + 0x200], 0x43e9d8
mov dword [esp + 0x1f8], 0x43e9e4
mov dword [esp + 0x1f0], 0x43e9f0
mov dword [esp + 0x1e8], 0x43e9fc
mov dword [esp + 0x1e0], 0x43ea08
mov dword [esp + 0x1d8], 0x43ea14
mov dword [esp + 0x1d0], 0x43ea20
mov dword [esp + 0x1c8], 0x43ea2c
mov dword [esp + 0x1c0], 0x43ea38
mov dword [esp + 0x1b8], 0x43ea44
mov dword [esp + 0x1b0], 0x43ea50
mov dword [esp + 0x1a8], 0x43ea5c
mov dword [esp + 0x1a0], 0x43ea68
mov dword [esp + 0x198], 0x43ea74
mov dword [esp + 0x190], 0x43ea80
mov dword [esp + 0x188], 0x43ea8c
mov dword [esp + 0x180], 0x43ea98
mov dword [esp + 0x178], 0x43eaa4
mov dword [esp + 0x170], 0x43eab0
mov dword [esp + 0x168], 0x43eabc
mov dword [esp + 0x160], 0x43eac8
mov dword [esp + 0x158], 0x43ead4
mov dword [esp + 0x150], 0x43eae0
mov dword [esp + 0x148], 0x43dda0
mov edi, dword [0x43eaec]
mov dword [esp + 0x144], 0x43dda0
mov ecx, dword [0x43eaf4]
mov dword [esp + 0xf0], ecx
mov dword [esp + 0x140], 0x43dda0
mov ecx, dword [0x43eafc]
mov dword [esp + 0xec], ecx
mov dword [esp + 0x13c], 0x43dda0
mov ecx, dword [0x43eb04]
mov dword [esp + 0xe8], ecx
mov dword [esp + 0x138], 0x43dda0
mov ecx, dword [0x43eb0c]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0x134], 0x43dda0
mov ecx, dword [0x43eb14]
mov dword [esp + 0xe0], ecx
mov dword [esp + 0x130], 0x43dda0
mov ecx, dword [0x43eb1c]
mov dword [esp + 0xdc], ecx
mov dword [esp + 0x12c], 0x43dda0
mov ecx, dword [0x43eb24]
mov dword [esp + 0xd8], ecx
mov dword [esp + 0x128], 0x43dda0
mov ecx, dword [0x43eb2c]
mov dword [esp + 0xd4], ecx
mov dword [esp + 0x124], 0x43dda0
mov ecx, dword [0x43eb34]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0x120], 0x43dda0
mov ecx, dword [0x43eb3c]
mov dword [esp + 0xcc], ecx
mov dword [esp + 0x11c], 0x43dda0
mov ecx, dword [0x43eb44]
mov dword [esp + 0xc8], ecx
mov dword [esp + 0x118], 0x43dda0
mov ecx, dword [0x43eb4c]
mov dword [esp + 0xc4], ecx
mov dword [esp + 0x114], 0x43dda0
mov ecx, dword [0x43eb54]
mov dword [esp + 0xc0], ecx
mov dword [esp + 0x110], 0x43dda0
mov ecx, dword [0x43eb5c]
mov dword [esp + 0xbc], ecx
mov dword [esp + 0x10c], 0x43dda0
mov ecx, dword [0x43eb64]
mov dword [esp + 0xb8], ecx
mov dword [esp + 0x108], 0x43dda0
mov ecx, dword [0x43eb6c]
mov dword [esp + 0xb4], ecx
mov dword [esp + 0x104], 0x43dda0
mov ecx, dword [0x43eb74]
mov dword [esp + 0xb0], ecx
mov dword [esp + 0x100], 0x43dda0
mov ecx, dword [str.AK0e_]
mov dword [esp + 0xac], ecx
mov dword [esp + 0xfc], 0x43dda0
mov ecx, dword [0x43eb84]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xf8], 0x43dda0
mov ecx, dword [0x43eb8c]
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xf4], 0x43dda0
mov ebx, dword [0x43eb94]
jmp eax