Function at 0x406869
Capabilities:
Capture screenshot

Disassembly:
push 0xffffffffffffffff
push 0x43fad8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
mov esi, ecx
mov dword [esp + 0xc], esi
call fcn.004343f3
mov eax, dword [esi + 0x60]
xor ebx, ebx
cmp eax, ebx
je 0x406a6b
mov ecx, dword [esi + 0x1c]
lea eax, [esp + 0x14]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetClientRect]
lea ecx, [esp + 0x24]
call fcn.00438d63
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x54], ebx
cmp eax, ebx
jne 0x4068aa
xor eax, eax
jmp 0x4068ad
mov eax, dword [eax + 4]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
lea ecx, [esp + 0x28]
call fcn.00438e1a
lea eax, [esi + 0x5c]
cmp eax, ebx
jne 0x4068c9
xor eax, eax
jmp 0x4068cc
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x28]
push ebp
push edi
push eax
push edx
call fcn.00438f45
mov ecx, dword [esi + 0x60]
mov dword [esp + 0x18], eax
lea eax, [esp + 0x3c]
push eax
push 0x18
push ecx
call dword [sym.imp.GDI32.dll_GetObjectA]
mov eax, dword [esi + 0x64]
mov edx, dword [esp + 0x44]
mov ebp, dword [esp + 0x40]
xor edi, edi
cmp eax, ebx
mov dword [esp + 0x10], edx
jne 0x40697d
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
mov eax, esi
sub eax, edx
mov edx, dword [esp + 0x1c]
test eax, eax
mov eax, dword [esp + 0x24]
jle 0x406989
mov ecx, eax
xor edi, edi
sub ecx, edx
test ecx, ecx
jle 0x40696b
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x30]
sub esi, eax
lea eax, [esp + 0x2c]
neg eax
sbb eax, eax
push 0xcc0020
and eax, edx
push 0
push 0
push eax
push esi
push ecx
mov ecx, dword [esp + 0x7c]
push ebx
push edi
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.GDI32.dll_BitBlt]
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x1c]
mov esi, dword [esp + 0x28]
mov ecx, eax
add edi, ebp
sub ecx, edx
cmp edi, ecx
jl 0x406925
mov ecx, dword [esp + 0x10]
add ebx, ecx
mov ecx, esi
sub ecx, dword [esp + 0x20]
cmp ebx, ecx
jl 0x40691b
jmp 0x406989
mov eax, dword [esp + 0x24]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
cmp dword [ecx + 0x64], 1
jne 0x4069fd
mov ecx, eax
sub ecx, edx
cmp ebp, ecx
jge 0x4069a8
sub eax, ebp
sub eax, edx
cdq
sub eax, edx
mov edi, eax
sar edi, 1
jmp 0x4069aa
xor edi, edi
mov edx, dword [esp + 0x20]
sub esi, edx
mov edx, dword [esp + 0x10]
cmp edx, esi
jge 0x4069c5
mov eax, esi
sub eax, edx
cdq
sub eax, edx
mov ebx, eax
sar ebx, 1
jmp 0x4069c7
xor ebx, ebx
mov edx, dword [esp + 0x30]
lea eax, [esp + 0x2c]
neg eax
sbb eax, eax
push 0xcc0020
and eax, edx
mov edx, dword [esp + 0x68]
push 0
push 0
push eax
mov eax, dword [edx + 4]
push esi
push ecx
push ebx
push edi
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
mov eax, dword [esp + 0x24]
mov esi, dword [esp + 0x28]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
cmp dword [ecx + 0x64], 2
jne 0x406a42
mov ecx, dword [esp + 0x20]
sub eax, edx
mov edx, dword [esp + 0x30]
sub esi, ecx
lea ecx, [esp + 0x2c]
push 0xcc0020
neg ecx
sbb ecx, ecx
and ecx, edx
mov edx, dword [esp + 0x14]
push edx
push ebp
push 0
push 0
push ecx
push esi
push eax
mov eax, dword [esp + 0x84]
push ebx
push edi
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.GDI32.dll_StretchBlt]
mov eax, dword [esp + 0x18]
pop edi
test eax, eax
pop ebp
je 0x406a4f
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x28]
push eax
push edx
call fcn.00438f45
lea ecx, [esp + 0x24]
mov dword [esp + 0x54], 0xffffffff
call fcn.00438e82
mov ecx, dword [esp + 0x4c]
pop esi
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x50
ret 4