Function at 0x406efd
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
xor esi, esi
sub esp, 0x60
push esi
mov dword [ebp - 0x64], 0
call dword [sym.imp.USER32.dll_GetDC]
test eax, eax
mov dword [ebp - 0x58], eax
jne 0x406f1f
jmp 0x406f8a
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push 1
mov edi, eax
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push dword [ebp - 0x58]
mov ebx, eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
test eax, eax
mov dword [ebp - 0x5c], eax
jne 0x406f45
jmp 0x406f8a
push ebx
push edi
push dword [ebp - 0x58]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
test eax, eax
mov dword [ebp - 0x60], eax
jne 0x406f59
jmp 0x406f8a
push dword [ebp - 0x60]
push dword [ebp - 0x5c]
call dword [sym.imp.GDI32.dll_SelectObject]
test eax, eax
jne 0x406f6b
jmp 0x406f8a
push 0xcc0020
push 0
push 0
push dword [ebp - 0x58]
push ebx
push edi
push 0
push 0
push dword [ebp - 0x5c]
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
jne 0x406f94
mov eax, 0xfffffffe
jmp 0x40712d
lea eax, [ebp - 0x48]
push 0x2c
push 0
push eax
call fcn.00409b60
mov dword [ebp - 0x48], 0x28
add esp, 0xc
push 0
lea eax, [ebp - 0x48]
mov dword [ebp - 0x38], 0
push eax
push 0
push 0
push 0
push dword [ebp - 0x60]
push dword [ebp - 0x5c]
call dword [sym.imp.GDI32.dll_GetDIBits]
test eax, eax
jne 0x406fd3
jmp 0x4070aa
mov dword [ebp - 0x38], 0
mov ecx, dword [ebp - 0x3a]
cmp cx, 0x10
jae 0x407020
movzx eax, cx
mov dword [ebp - 0x54], eax
push eax
push eax
fild dword [ebp - 0x54]
fstp qword [esp]
push dword [0x429e8c]
push dword [0x429e88]
call fcn.0040d192
fnstcw word [ebp - 0x6a]
add esp, 0x10
or word [ebp - 0x6a], 0xc00
fldcw word [ebp - 0x6a]
and word [ebp - 0x6a], 0xf3ff
fistp qword [ebp - 0x54]
fldcw word [ebp - 0x6a]
mov esi, dword [ebp - 0x54]
cmp word [ebp - 0x3a], 0x10
jae 0x407032
movzx ebx, si
shl ebx, 2
add ebx, 0x28
jmp 0x407037
mov ebx, 0x28
mov eax, ebx
add eax, dword [ebp - 0x34]
add eax, 0x20
push eax
call fcn.0040c4c0
test eax, eax
pop ecx
mov dword [ebp - 0x68], eax
jne 0x407059
mov eax, 0xfffffffd
jmp 0x40712d
mov eax, ebx
add eax, dword [ebp - 0x34]
add eax, 0x20
push eax
push 0
push dword [ebp - 0x68]
call fcn.00409b60
lea eax, [ebp - 0x48]
add esp, 0xc
mov ebx, dword [ebp - 0x68]
push 0x2c
push eax
push ebx
call fcn.00409b20
movzx edi, si
movzx eax, word [ebp - 0x40]
add esp, 0xc
shl edi, 2
lea edx, [edi + ebx]
add edx, 0x28
push 0
push ebx
push edx
push eax
push 0
push dword [ebp - 0x60]
push dword [ebp - 0x5c]
call dword [sym.imp.GDI32.dll_GetDIBits]
test eax, eax
jne 0x4070b1
mov eax, 0xffffffff
jmp 0x40712d
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x34]
add edx, 0xe
mov word [ebp - 0x1c], 0x4d42
add edx, edi
mov word [ebp - 0x16], 0
add eax, edx
mov word [ebp - 0x14], 0
mov dword [ebp - 0x1a], eax
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x12], edx
push 0xe
push ecx
push eax
call fcn.00409b20
mov eax, dword [ebp - 0x34]
add dword [ebp - 0x64], 0xe
lea esi, [edi + 0x28]
add esp, 0xc
add eax, esi
push eax
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x64]
push ebx
push eax
call fcn.00409b20
mov eax, dword [ebp - 0x34]
add esp, 0xc
add eax, esi
push dword [ebp - 0x68]
add dword [ebp - 0x64], eax
call fcn.0040c510
pop ecx
push dword [ebp - 0x5c]
call dword [sym.imp.GDI32.dll_DeleteDC]
push dword [ebp - 0x58]
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [ebp - 0x64]
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret