Function at 0x41ffb6
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
cmp dword [ebp + 0x1c], 0
push ebx
push esi
push edi
je 0x4200fd
push dword [ebp + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push dword [ebp + 0x1c]
mov dword [ebp - 4], eax
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0x2c]
push 3
mov edi, dword [ebp + 0x10]
cdq
pop ecx
idiv ecx
mov ecx, dword [ebp + 0x14]
mov ebx, eax
mov eax, dword [ebp + 0x18]
add eax, edi
mov dword [ebp + 0x1c], ebx
push eax
mov eax, dword [ebp + 0xc]
add ecx, eax
push ecx
push edi
push eax
call dword [sym.imp.GDI32.dll_CreateRectRgn]
push eax
mov dword [ebp + 0x14], eax
push dword [ebp + 8]
call dword [sym.imp.GDI32.dll_SelectClipRgn]
mov esi, 0xcc0020
mov eax, dword [ebp + 0x2c]
push esi
sub eax, ebx
push dword [ebp + 0x24]
push dword [ebp + 0x20]
push dword [ebp - 4]
push eax
push dword [ebp + 0x28]
push edi
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [sym.imp.GDI32.dll_BitBlt]
mov edi, dword [ebp + 0x2c]
lea eax, [ebx + ebx]
mov edx, dword [ebp + 0x18]
sub edi, eax
mov eax, dword [ebp + 0x10]
add ebx, edi
mov ecx, eax
add ebx, eax
sub ecx, dword [ebp + 0x1c]
add ecx, edx
cmp ebx, ecx
mov dword [ebp + 0x10], ecx
jge 0x420087
mov ecx, dword [ebp + 0x1c]
add ecx, eax
mov dword [ebp + 0x18], ecx
push esi
push dword [ebp + 0x18]
push dword [ebp + 0xc]
push dword [ebp + 8]
push edi
push dword [ebp + 0x28]
push ebx
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [sym.imp.GDI32.dll_BitBlt]
add ebx, edi
add edi, edi
cmp ebx, dword [ebp + 0x10]
jl 0x420063
mov eax, dword [ebp + 0x24]
push esi
sub eax, dword [ebp + 0x1c]
mov esi, dword [ebp - 4]
add eax, dword [ebp + 0x2c]
push eax
push dword [ebp + 0x20]
push esi
push dword [ebp + 0x1c]
push dword [ebp + 0x28]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [sym.imp.GDI32.dll_BitBlt]
xor edi, edi
push edi
push dword [ebp + 8]
call dword [sym.imp.GDI32.dll_SelectClipRgn]
cmp dword [ebp + 0x14], edi
je 0x4200c8
push dword [ebp + 0x14]
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [ebp - 8]
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
cmp esi, edi
je 0x4201ab
push esi
mov esi, dword [sym.imp.GDI32.dll_DeleteDC]
call esi
test eax, eax
je 0x4200ea
mov dword [ebp - 4], edi
cmp dword [ebp - 4], edi
je 0x4201ab
push dword [ebp - 4]
call esi
jmp 0x4201ab
mov ebx, dword [ebp + 0x2c]
push 3
mov eax, ebx
pop ecx
cdq
idiv ecx
mov ecx, dword [ebp + 0x18]
mov esi, 0xcc0020
push esi
mov edi, eax
mov eax, dword [ebp + 0x10]
sub eax, edi
add ecx, eax
add eax, ebx
push eax
mov dword [ebp + 0x2c], ecx
push dword [ebp + 0xc]
push dword [ebp + 8]
push edi
push dword [ebp + 0x28]
push ecx
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [sym.imp.GDI32.dll_BitBlt]
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
push dword [ebp + 0x2c]
lea ecx, [edi + eax]
mov eax, dword [ebp + 0xc]
add edx, eax
mov dword [ebp + 0x1c], ecx
push edx
push ecx
push eax
call dword [sym.imp.GDI32.dll_CreateRectRgn]
push eax
mov dword [ebp + 0x18], eax
push dword [ebp + 8]
call dword [sym.imp.GDI32.dll_SelectClipRgn]
lea eax, [edi + edi]
sub ebx, eax
add edi, ebx
add edi, dword [ebp + 0x10]
cmp edi, dword [ebp + 0x2c]
jge 0x420191
push esi
push dword [ebp + 0x1c]
push dword [ebp + 0xc]
push dword [ebp + 8]
push ebx
push dword [ebp + 0x28]
push edi
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [sym.imp.GDI32.dll_BitBlt]
add edi, ebx
add ebx, ebx
jmp 0x42016b
push 0
push dword [ebp + 8]
call dword [sym.imp.GDI32.dll_SelectClipRgn]
cmp dword [ebp + 0x18], 0
je 0x4201ab
push dword [ebp + 0x18]
call dword [sym.imp.GDI32.dll_DeleteObject]
pop edi
pop esi
pop ebx
leave
ret