Function at 0x41fd80
Capabilities:
Capture screenshot

Disassembly:
push 0xffffffffffffffff
push 0x46ad58
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebp
push esi
push edi
mov eax, dword [0x48b998]
xor eax, esp
push eax
lea eax, [esp + 0x38]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [esi + 0x8dc]
mov edi, dword [esp + 0x48]
mov edx, dword [eax + 0x144]
lea ecx, [esi + 0x8dc]
push edi
call edx
call fcn.0042c5e3
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x41fddb
push 0x80004005
call fcn.0041af40
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x48], eax
push edi
lea ecx, [esp + 0x4c]
push 0x47c480
push ecx
mov dword [esp + 0x4c], 0
call fcn.0041b8d0
add esp, 0xc
cmp edi, 0x64
mov ebp, 0x29
jl 0x41fe17
mov ebp, 0x1b
jmp 0x41fe21
cmp edi, 0xa
jl 0x41fe21
mov ebp, 0x22
push 0x3eb
mov ecx, esi
call fcn.00430406
mov eax, dword [eax + 0x20]
lea edx, [esp + 0x18]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [esp + 0x28]
call fcn.0042f9e9
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], vtable.CBitmap.0
push 0x3eb
mov ecx, esi
mov byte [esp + 0x44], 2
call fcn.00430406
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_GetDC]
push eax
call fcn.0042ff36
mov edi, eax
test edi, edi
je 0x41fe7f
mov eax, dword [edi + 4]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
lea ecx, [esp + 0x2c]
call fcn.0042ff4a
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
sub ecx, dword [esp + 0x18]
mov edx, dword [edi + 4]
push eax
push ecx
push edx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
lea ecx, [esp + 0x14]
call fcn.0043021c
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x2c]
push eax
push ecx
call fcn.004302ab
mov edx, dword [esp + 0x24]
sub edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
sub eax, dword [esp + 0x18]
push 0xffffff
push edx
push eax
push 0
push 0
lea ecx, [esp + 0x3c]
call fcn.00439cc0
add esi, 0x2fc
push esi
lea ecx, [esp + 0x2c]
call fcn.00430307
push 0x333333
lea ecx, [esp + 0x2c]
call fcn.0042f84b
push 0x8826
lea ecx, [esp + 0x2c]
call fcn.0042f8c5
push 1
lea ecx, [esp + 0x2c]
call fcn.0042f819
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x1c]
push edx
mov edx, dword [esp + 0x34]
push eax
push ecx
push edx
call dword [sym.imp.GDI32.dll_Rectangle]
mov esi, dword [esp + 0x48]
mov eax, dword [esi - 0xc]
push eax
mov eax, dword [esp + 0x2c]
mov edx, dword [eax + 0x5c]
push esi
push 0
push ebp
lea ecx, [esp + 0x38]
call edx
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x20]
sub ecx, dword [esp + 0x18]
push 0xcc0020
push 0
push 0
push edx
push eax
mov eax, dword [edi + 4]
push ecx
push 0
push 0
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
lea ecx, [esp + 0x10]
call fcn.00430274
lea ecx, [esp + 0x28]
call fcn.0042ffb3
lea ecx, [esp + 0x10]
mov byte [esp + 0x40], 1
mov dword [esp + 0x10], vtable.CBitmap.0
call fcn.0041d750
lea ecx, [esp + 0x28]
mov byte [esp + 0x40], 0
call fcn.0042ffc9
lea eax, [esi - 0x10]
mov dword [esp + 0x40], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41ffe0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
add esp, 0x34
ret 4