Function at 0x417180
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xac
mov dword [ebp - 0x70], ecx
lea eax, [ebp - 0x28]
push eax
push 0x18
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x64]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x5c], eax
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x58]
push ecx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x60], eax
push 0xcc0020
push 0
push 0
mov edx, dword [ebp - 0x64]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x24]
push ecx
push 0
push 0
mov edx, dword [ebp - 0x58]
push edx
call dword [sym.imp.GDI32.dll_BitBlt]
push 0x2c
push 0
lea eax, [ebp - 0x54]
push eax
call fcn.00409050
add esp, 0xc
mov dword [ebp - 0x54], 0x28
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x4c], edx
mov eax, 1
mov word [ebp - 0x48], ax
mov ecx, 0x20
mov word [ebp - 0x46], cx
mov dword [ebp - 0x44], 0
mov edx, dword [ebp - 0x50]
imul edx, dword [ebp - 0x4c]
shl edx, 2
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
push eax
push 1
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
push ecx
push 0
mov edx, dword [ebp - 0xc]
push edx
call fcn.00409050
add esp, 0xc
push 0
lea eax, [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 0x4c]
push edx
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x58]
push ecx
call dword [sym.imp.GDI32.dll_GetDIBits]
mov edx, dword [ebp - 0xc]
mov dword [ebp - 4], edx
mov dword [ebp - 0x6c], 0
jmp 0x4172c2
mov eax, dword [ebp - 0x6c]
add eax, 1
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 8]
cdq
and edx, 3
add eax, edx
sar eax, 2
cmp dword [ebp - 0x6c], eax
jge 0x4173e2
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 4]
mov eax, dword [edx + ecx*4]
shl eax, 0x18
shr eax, 0x18
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], 0
fild qword [ebp - 0x78]
fmul qword [ebp + 0xc]
fnstcw word [ebp - 0x7a]
movzx eax, word [ebp - 0x7a]
or eax, 0xc00
mov dword [ebp - 0x80], eax
fldcw word [ebp - 0x80]
fistp dword [ebp - 0x84]
fldcw word [ebp - 0x7a]
movzx ecx, byte [ebp - 0x84]
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 4]
mov edx, dword [eax + edx*4]
shl edx, 0x10
shr edx, 0x18
mov dword [ebp - 0x8c], edx
mov dword [ebp - 0x88], 0
fild qword [ebp - 0x8c]
fmul qword [ebp + 0xc]
fnstcw word [ebp - 0x8e]
movzx eax, word [ebp - 0x8e]
or eax, 0xc00
mov dword [ebp - 0x94], eax
fldcw word [ebp - 0x94]
fistp dword [ebp - 0x98]
fldcw word [ebp - 0x8e]
movzx eax, byte [ebp - 0x98]
shl eax, 8
or ecx, eax
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 4]
mov edx, dword [eax + edx*4]
shl edx, 8
shr edx, 0x18
mov dword [ebp - 0xa0], edx
mov dword [ebp - 0x9c], 0
fild qword [ebp - 0xa0]
fmul qword [ebp + 0xc]
fnstcw word [ebp - 0xa2]
movzx eax, word [ebp - 0xa2]
or eax, 0xc00
mov dword [ebp - 0xa8], eax
fldcw word [ebp - 0xa8]
fistp dword [ebp - 0xac]
fldcw word [ebp - 0xa2]
movzx eax, byte [ebp - 0xac]
shl eax, 0x10
or ecx, eax
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 4]
mov dword [eax + edx*4], ecx
jmp 0x4172b9
push 0
lea ecx, [ebp - 0x54]
push ecx
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 0x4c]
push eax
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x58]
push edx
call dword [sym.imp.GDI32.dll_SetDIBits]
mov eax, dword [ebp - 0xc]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, dword [ebp - 0x5c]
push ecx
mov edx, dword [ebp - 0x64]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x64]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov ecx, dword [ebp - 0x60]
push ecx
mov edx, dword [ebp - 0x58]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x58]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [ebp - 0x68]
mov esp, ebp
pop ebp
ret 0x10