Function at 0x4113ff
Capabilities:
Capture screenshot

Disassembly:
mov eax, 0x43bd9c
call fcn.00432e40
sub esp, 0x54
push ebx
push esi
lea eax, [ebp - 0x60]
push edi
mov edi, dword [ebp + 0xc]
push eax
push 0x18
push dword [edi + 4]
call dword [sym.imp.GDI32.dll_GetObjectA]
mov esi, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x14], esi
mov dword [ebp + 0xc], eax
call sub.MFC42.DLL_CDC::CDC
mov eax, dword [ebp + 8]
xor ebx, ebx
cmp eax, ebx
mov dword [ebp - 4], ebx
jne 0x411445
xor eax, eax
jmp 0x411448
mov eax, dword [eax + 4]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
lea ecx, [ebp - 0x38]
call sub.MFC42.DLL_CDC::Attach
cmp edi, ebx
jne 0x411460
xor edi, edi
jmp 0x411463
mov edi, dword [edi + 4]
push edi
push dword [ebp - 0x34]
call sub.MFC42.DLL_CDC::SelectGdiObject
mov edi, dword [ebp + 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 0x10]
mov ecx, edi
sub ecx, eax
cmp ecx, esi
jne 0x4114af
mov edx, dword [ebp + 0x1c]
sub edx, dword [ebp + 0x14]
cmp edx, dword [ebp + 0xc]
jne 0x4114af
lea eax, [ebp - 0x38]
push 0xcc0020
neg eax
sbb eax, eax
push ebx
and eax, dword [ebp - 0x34]
push ebx
push eax
mov eax, dword [ebp + 8]
push edx
push ecx
push ebx
push ebx
push dword [eax + 4]
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x4115e5
push dword [ebp + 0x1c]
add eax, 5
mov esi, dword [sym.imp.USER32.dll_SetRect]
lea ecx, [eax + 0xa]
push ecx
push dword [ebp + 0x14]
push eax
lea eax, [ebp - 0x28]
push eax
call esi
mov eax, dword [ebp - 0x14]
push dword [ebp + 0xc]
cdq
sub eax, edx
sar eax, 1
lea ecx, [eax + 5]
add eax, 0xfffffffb
push ecx
push ebx
push eax
lea eax, [ebp - 0x48]
push eax
call esi
lea eax, [edi - 5]
mov edi, dword [sym.imp.GDI32.dll_BitBlt]
cmp dword [ebp - 0x28], eax
mov dword [ebp - 0x10], eax
mov ebx, 0xcc0020
jge 0x41153d
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x28]
lea eax, [ebp - 0x38]
push ebx
push dword [ebp - 0x44]
neg eax
push dword [ebp - 0x48]
sbb eax, eax
and eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp + 8]
push ecx
push edx
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push dword [eax + 4]
call edi
push 0
lea eax, [ebp - 0x28]
push 0xa
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x10]
jl 0x4114f9
mov eax, dword [ebp + 0x10]
push dword [ebp + 0x1c]
add eax, 5
push eax
lea eax, [ebp - 0x28]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push eax
call esi
push dword [ebp + 0xc]
lea eax, [ebp - 0x48]
push 5
push 0
push 0
push eax
call esi
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x28]
lea eax, [ebp - 0x38]
push ebx
push dword [ebp - 0x44]
neg eax
push dword [ebp - 0x48]
sbb eax, eax
and eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp + 8]
push ecx
push edx
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push dword [eax + 4]
call edi
push dword [ebp + 0x1c]
lea eax, [ebp - 0x28]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp - 0x10]
push eax
call esi
push dword [ebp + 0xc]
mov eax, dword [ebp - 0x14]
push eax
add eax, 0xfffffffb
push 0
push eax
lea eax, [ebp - 0x48]
push eax
call esi
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x28]
lea eax, [ebp - 0x38]
push ebx
push dword [ebp - 0x44]
neg eax
push dword [ebp - 0x48]
sbb eax, eax
and eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp + 8]
push ecx
push edx
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push dword [eax + 4]
call edi
xor ebx, ebx
mov eax, dword [ebp - 0x18]
cmp eax, ebx
je 0x4115ef
mov ebx, dword [eax + 4]
push ebx
push dword [ebp - 0x34]
call sub.MFC42.DLL_CDC::SelectGdiObject
lea ecx, [ebp - 0x38]
call sub.MFC42.DLL_CDC::DeleteDC
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38]
call fcn.00432a8e
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0x18