Function at 0x40f020
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x38
push esi
push edi
mov edi, ecx
cmp byte [edi + 0x1b4], 0
je 0x40f03b
call fcn.0040cdf0
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov edx, dword [edi + 0x78]
sub edx, dword [edi + 0x70]
mov ecx, dword [edi + 0x74]
sub ecx, dword [edi + 0x6c]
push edx
push ecx
push eax
mov dword [esp + 0x20], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push dword [edi + 0x68]
mov esi, eax
push dword [edi + 0x64]
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [esp + 0x14]
mov dword [esp + 0x1c], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push esi
push eax
mov dword [esp + 0x18], eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [edi + 0x78]
sub ecx, dword [edi + 0x70]
push 0xcc0020
push 0
push 0
push dword [edi + 0x64]
mov dword [esp + 0x38], eax
mov eax, dword [edi + 0x74]
sub eax, dword [edi + 0x6c]
push ecx
push eax
push 0
push 0
push dword [esp + 0x30]
call dword [sym.imp.GDI32.dll_BitBlt]
push 8
call dword [sym.imp.gdiplus.dll_GdipAlloc]
mov esi, eax
test esi, esi
je 0x40f0e0
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
push dword [esp + 0x14]
call dword [sym.imp.gdiplus.dll_GdipCreateFromHDC]
mov dword [esi + 4], eax
mov eax, dword [esp + 0xc]
mov dword [esi], eax
jmp 0x40f0e2
xor esi, esi
push esi
mov ecx, edi
call fcn.0040ce50
test esi, esi
je 0x40f0fd
push dword [esi]
call dword [sym.imp.gdiplus.dll_GdipDeleteGraphics]
push esi
call dword [sym.imp.gdiplus.dll_GdipFree]
push dword [esp + 0x18]
push dword [edi + 0x64]
call dword [sym.imp.GDI32.dll_SelectObject]
movups xmm0, xmmword [edi + 0x44]
push dword [esp + 0x14]
movaps xmmword [esp + 0x34], xmm0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
movaps xmm1, xmmword [esp + 0x30]
mov esi, eax
movaps xmm0, xmm1
movd edi, xmm1
psrldq xmm0, 0xc
movd ecx, xmm0
movaps xmm0, xmm1
psrldq xmm0, 4
movd eax, xmm0
movaps xmm0, xmm1
psrldq xmm0, 8
mov dword [esp + 0xc], esi
sub ecx, eax
mov dword [esp + 0x18], eax
movd eax, xmm0
push ecx
mov dword [esp + 0x20], ecx
sub eax, edi
push eax
push dword [esp + 0x1c]
mov dword [esp + 0x2c], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
push esi
mov dword [esp + 0x34], eax
call dword [sym.imp.GDI32.dll_SelectObject]
push 0xcc0020
push dword [esp + 0x1c]
mov esi, eax
push edi
push dword [esp + 0x1c]
mov edi, dword [esp + 0x1c]
push dword [esp + 0x2c]
push dword [esp + 0x34]
push 0
push 0
push edi
call dword [sym.imp.GDI32.dll_BitBlt]
push esi
push edi
mov edi, dword [sym.imp.GDI32.dll_SelectObject]
call edi
push dword [esp + 0x28]
mov esi, dword [esp + 0x14]
push esi
call edi
cmp dword [ebp + 0x1c], 8
lea eax, [ebp + 8]
mov edi, dword [esp + 0x2c]
cmovae eax, dword [ebp + 8]
push 0x64
push eax
push edi
call fcn.0048c1e0
add esp, 0xc
push esi
mov esi, dword [sym.imp.GDI32.dll_DeleteDC]
call esi
push dword [esp + 0xc]
call esi
push dword [esp + 0x14]
call esi
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp + 0x1c]
cmp eax, 8
jb 0x40f200
inc eax
lea ecx, [ebp + 8]
push eax
push dword [ebp + 8]
call fcn.004021c0
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x18