Function at 0x111d0750
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov esi, ecx
push 0
mov dword [esi + 0xc], eax
call fcn.111ba880
add esp, 4
test al, al
je 0x111d077a
mov ecx, dword [esi + 0xc]
push 1
push ecx
call fcn.111ba990
add esp, 8
cmp dword [esi + 0xc], 0
jne 0x111d0797
push 0x1c0
push str.e:_nsmsrc_nsm14101410fctl32wndclass.h
push 0x111f761c
call fcn.11067750
add esp, 0xc
mov edx, dword [esi + 0xc]
push edx
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
push edi
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [esi + 0x3c], eax
call fcn.111bbe50
test eax, eax
je 0x111d07c4
mov eax, dword [esi + 0x3c]
push 1
push eax
call fcn.111bbf80
add esp, 8
mov ecx, dword [esi + 0x1cc]
mov edx, dword [esi + 0x1c8]
push ecx
push edx
push edi
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
mov dword [esi + 0x44], eax
mov eax, dword [esi + 0x3c]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [esi + 0x1cc]
mov edx, dword [esi + 0x1c8]
push 0xff0062
push 0
push 0
push edi
push ecx
push edx
push 0
mov dword [esi + 0x48], eax
mov eax, dword [esi + 0x3c]
push 0
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
push 0
push 0
push 0
push str.DISPLAY
call dword [sym.imp.GDI32.dll_CreateDCW]
mov ebx, eax
push ebx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov ecx, dword [esi + 0x1cc]
mov edx, dword [esi + 0x1c8]
push ecx
push edx
push ebx
mov dword [esi + 0x40], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
mov dword [esi + 0x11c], eax
mov eax, dword [esi + 0x40]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [esi + 0x1cc]
mov edx, dword [esi + 0x1c8]
push 0xff0062
push 0
push 0
push edi
push ecx
push edx
push 0
mov dword [esi + 0x120], eax
mov eax, dword [esi + 0x40]
push 0
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
cmp dword [esi + 0xc], 0
jne 0x111d089c
push 0x1c3
push str.e:_nsmsrc_nsm14101410fctl32wndclass.h
push 0x111f761c
call fcn.11067750
add esp, 0xc
mov ecx, dword [esi + 0xc]
push edi
push ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
push ebx
call dword [sym.imp.GDI32.dll_DeleteDC]
mov edx, dword [esi]
mov eax, dword [edx + 0x15c]
push 0x18
mov ecx, esi
call eax
mov edx, dword [esi]
mov dword [esi + 0x180], eax
mov eax, dword [edx + 0x15c]
push 0x18
mov ecx, esi
call eax
xor edi, edi
push edi
push 1
push 2
mov dword [esi + 0x184], eax
call dword [sym.imp.GDI32.dll_CreatePen]
mov ecx, dword [esi + 0x134]
mov edx, dword [esi + 0x130]
push ecx
mov dword [esi + 0x144], eax
mov eax, dword [esi + 0x12c]
push edx
push eax
mov ecx, esi
call fcn.11027ae0
mov ecx, dword [esi + 0x140]
mov edx, dword [esi + 0x13c]
push ecx
push edx
mov ecx, esi
call fcn.1102b040
mov eax, dword [esi + 0x134]
push eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov edx, dword [esi]
push edi
mov dword [esi + 0x138], eax
mov eax, dword [edx + 0x16c]
push 0xffffffffffffffff
mov ecx, esi
call eax
push eax
push 0xa
push 0x662
lea ecx, [esi + 0x1d0]
call fcn.1103dc40
mov ecx, dword [esi + 0x148]
push ecx
mov ecx, esi
call fcn.111cfec0
mov dword [esi + 0x1ac], edi
mov dword [esi + 0x1f8], edi
mov dword [esi + 0x1c0], edi
mov dword [esi + 0x1fc], edi
mov dword [esi + 0x200], edi
mov dword [esi + 0x1c4], edi
mov dword [esi + 0x204], edi
mov dword [esi + 0x230], edi
lea eax, [edi + 1]
pop edi
pop esi
pop ebx
pop ebp
ret 8