Function at 0x401e24
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffc8
push ebx
push esi
push edi
push dword [0x418634]
call fcn.00401da3
pop ecx
mov dword [0x41861c], eax
push dword [0x418638]
call fcn.00401da3
pop ecx
mov dword [0x418620], eax
call fcn.00401269
call sub.USER32.dll_GetDesktopWindow
mov dword [ebp - 8], eax
push dword [ebp - 8]
call sub.USER32.dll_GetDC
mov edi, eax
push edi
call sub.GDI32.dll_CreateCompatibleDC
mov dword [ebp - 0xc], eax
push dword [0x418638]
push dword [0x418634]
push edi
call sub.GDI32.dll_CreateCompatibleBitmap
mov ebx, eax
push ebx
push dword [ebp - 0xc]
call sub.GDI32.dll_SelectObject
mov dword [ebp - 0x10], eax
push 0xcc0020
push 0
push 0
push edi
push dword [0x418638]
push dword [0x418634]
push 0
push 0
push dword [ebp - 0xc]
call sub.GDI32.dll_BitBlt
mov dword [ebp - 0x38], 0x28
mov eax, dword [0x418634]
mov dword [ebp - 0x34], eax
mov edx, dword [0x418638]
mov dword [ebp - 0x30], edx
mov word [ebp - 0x2c], 1
mov word [ebp - 0x2a], 0x18
xor ecx, ecx
mov dword [ebp - 0x28], ecx
xor eax, eax
mov dword [ebp - 0x24], eax
xor edx, edx
mov dword [ebp - 0x20], edx
xor ecx, ecx
mov dword [ebp - 0x1c], ecx
xor eax, eax
mov dword [ebp - 0x18], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov ecx, dword [0x418634]
imul ecx, dword [0x418638]
lea eax, [ecx + ecx*2]
push eax
call fcn.004080d8
pop ecx
mov dword [ebp - 4], eax
push 0
lea edx, [ebp - 0x38]
push edx
push dword [ebp - 4]
push dword [0x418638]
push 0
push ebx
push edi
call sub.GDI32.dll_GetDIBits
mov ecx, dword [0x41861c]
imul ecx, dword [0x418620]
lea eax, [ecx + ecx*2]
push eax
call fcn.004080d8
pop ecx
mov esi, eax
mov eax, dword [0x41861c]
imul dword [0x418620]
lea edx, [eax + eax*2]
push edx
push 0
push esi
call fcn.00402a2c
add esp, 0xc
push dword [0x418638]
push dword [0x418634]
push dword [ebp - 4]
push dword [0x418620]
push dword [0x41861c]
push esi
call fcn.00401dbe
add esp, 0x18
push dword [ebp - 0x10]
push dword [ebp - 0xc]
call sub.GDI32.dll_SelectObject
push ebx
call sub.GDI32.dll_DeleteObject
push dword [0x418620]
push dword [0x41861c]
push esi
push dword [0x40b5a0]
call fcn.004011b1
add esp, 0x10
push 0x40a17e
push dword [0x41862c]
call sub.USER32.dll_LoadBitmapA
mov ebx, eax
push ebx
push dword [ebp - 0xc]
call sub.GDI32.dll_SelectObject
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x34], pe_nt_image_headers32
mov dword [ebp - 0x30], pe_nt_image_headers32
push 0
lea eax, [ebp - 0x38]
push eax
push dword [ebp - 4]
push pe_nt_image_headers32
push 0
push ebx
push edi
call sub.GDI32.dll_GetDIBits
push dword [ebp - 0x10]
push dword [ebp - 0xc]
call sub.GDI32.dll_SelectObject
push ebx
call sub.GDI32.dll_DeleteObject
push dword [ebp - 0xc]
call sub.GDI32.dll_DeleteDC
push edi
push dword [ebp - 8]
call sub.USER32.dll_ReleaseDC
push pe_nt_image_headers32
push pe_nt_image_headers32
push dword [ebp - 4]
push pe_nt_image_headers32
push pe_nt_image_headers32
push esi
call fcn.00401dbe
add esp, 0x18
push pe_nt_image_headers32
push pe_nt_image_headers32
push esi
push dword [0x40b5a4]
call fcn.004011b1
add esp, 0x10
push esi
call fcn.00407fd0
pop ecx
push dword [ebp - 4]
call fcn.00407fd0
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret