Function at 0x405ea0
Capabilities:
Capture screenshot

Disassembly:
push 0xffffffffffffffff
push 0x491fb0
mov eax, dword fs:[0]
push eax
sub esp, 0x6c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4bb190]
xor eax, esp
push eax
lea eax, [esp + 0x80]
mov dword fs:[0], eax
mov eax, dword [esp + 0x94]
mov esi, dword [sym.imp.USER32.dll_CopyRect]
push eax
lea ecx, [esp + 0x44]
push ecx
call esi
mov ebp, dword [esp + 0x9c]
push ebp
lea edx, [esp + 0x54]
push edx
call esi
mov esi, dword [esp + 0x48]
sub esi, dword [esp + 0x40]
test esi, esi
jle 0x406177
mov eax, dword [esp + 0x4c]
sub eax, dword [esp + 0x44]
mov dword [esp + 0x18], eax
test eax, eax
jle 0x406177
mov ecx, dword [esp + 0x58]
sub ecx, dword [esp + 0x50]
test ecx, ecx
jle 0x406177
mov edi, dword [esp + 0x5c]
sub edi, dword [esp + 0x54]
test edi, edi
jle 0x406177
mov eax, esi
cdq
idiv ecx
mov ebx, eax
imul ecx, ebx
cmp ecx, esi
mov dword [esp + 0x1c], eax
jge 0x405f49
inc ebx
mov dword [esp + 0x1c], ebx
mov ecx, dword [esp + 0x18]
mov eax, ecx
cdq
idiv edi
imul edi, eax
cmp edi, ecx
mov dword [esp + 0x18], eax
jge 0x405f62
inc eax
mov dword [esp + 0x18], eax
xor edi, edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], vtable.CBitmap.0
mov dword [esp + 0x88], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], vtable.CBrush.0
lea ecx, [esp + 0x70]
mov byte [esp + 0x88], 1
call fcn.0044528f
lea ecx, [esp + 0x60]
mov byte [esp + 0x88], 2
call fcn.0044528f
mov eax, dword [ebp + 0xc]
sub eax, dword [ebp + 4]
mov ecx, dword [ebp + 8]
sub ecx, dword [ebp]
mov esi, dword [esp + 0x90]
push eax
push ecx
push esi
lea ecx, [esp + 0x3c]
mov byte [esp + 0x94], 3
call fcn.004011c0
push esi
lea ecx, [esp + 0x74]
call fcn.00401220
lea edx, [esp + 0x30]
push edx
lea ecx, [esp + 0x74]
call fcn.00401260
push esi
lea ecx, [esp + 0x64]
call fcn.00401220
mov dword [esp + 0x24], edi
mov dword [esp + 0x20], vtable.CBitmap.0
mov eax, dword [esp + 0x98]
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x8c], 4
call fcn.00445a2c
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x64]
call fcn.00401260
lea ecx, [esp + 0x20]
call fcn.00445a58
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], vtable.CRgn.0
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
push edx
mov edx, dword [esp + 0x44]
push eax
push ecx
push edx
lea ecx, [esp + 0x38]
mov byte [esp + 0x98], 5
call fcn.004011f0
cmp esi, edi
je 0x4060f1
lea eax, [esp + 0x28]
push eax
mov ecx, esi
call fcn.00445435
cmp dword [esp + 0x18], edi
mov dword [esp + 0x14], edi
jle 0x4060e9
lea esp, [esp]
test ebx, ebx
jle 0x4060d8
mov edx, dword [esp + 0x5c]
sub edx, dword [esp + 0x54]
mov esi, dword [esp + 0x58]
sub esi, dword [esp + 0x50]
mov ebx, dword [ebp + 4]
push 0xcc0020
push ebx
mov ebx, dword [ebp]
mov eax, edx
imul eax, dword [esp + 0x1c]
add eax, dword [esp + 0x4c]
push ebx
mov ebx, dword [esp + 0x70]
mov ecx, esi
imul ecx, edi
add ecx, dword [esp + 0x4c]
push ebx
push edx
push esi
mov esi, dword [esp + 0xa8]
push eax
push ecx
mov ecx, dword [esi + 4]
push ecx
call dword [sym.imp.GDI32.dll_BitBlt]
mov ebx, dword [esp + 0x1c]
inc edi
cmp edi, ebx
jl 0x406084
mov eax, dword [esp + 0x14]
inc eax
xor edi, edi
cmp eax, dword [esp + 0x18]
mov dword [esp + 0x14], eax
jl 0x406080
push edi
mov ecx, esi
call fcn.00445435
lea ecx, [esp + 0x28]
mov byte [esp + 0x88], 4
mov dword [esp + 0x28], vtable.CRgn.0
call fcn.00402310
mov esi, vtable.CBitmap.0
lea ecx, [esp + 0x20]
mov byte [esp + 0x88], 3
mov dword [esp + 0x20], esi
call fcn.00402310
lea ecx, [esp + 0x60]
mov byte [esp + 0x88], 2
call fcn.004457d9
lea ecx, [esp + 0x70]
mov byte [esp + 0x88], 1
call fcn.004457d9
lea ecx, [esp + 0x38]
mov byte [esp + 0x88], 0
mov dword [esp + 0x38], vtable.CBrush.0
call fcn.00402310
lea ecx, [esp + 0x30]
mov dword [esp + 0x88], 0xffffffff
mov dword [esp + 0x30], esi
call fcn.00402310
mov ecx, dword [esp + 0x80]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x78
ret