Function at 0x111108f0
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x111e5256
mov eax, dword fs:[0]
push eax
sub esp, 0x24
mov eax, dword [0x11279148]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
push eax
mov esi, ecx
call fcn.1113ade0
mov eax, dword [esi + 0xc]
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x357
push eax
call edi
lea ecx, [esi + 0x300]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esi + 0x2f4]
test eax, eax
je 0x11110957
push eax
mov ecx, esi
call fcn.1110ffa0
mov edx, dword [esi + 0xc]
push 0x35b
push edx
call edi
test eax, eax
je 0x11110ac8
lea eax, [ebp - 0x20]
push eax
call fcn.110fcb70
add esp, 4
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
push edi
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x1c]
mov ebx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
push ecx
push eax
push edi
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], ecx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
push ebx
mov dword [ebp - 0x24], eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
push 0xcc0020
push ecx
mov ecx, dword [ebp - 0x2c]
push edx
push edi
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x30]
push eax
push ecx
push 0
push 0
push ebx
call dword [sym.imp.GDI32.dll_BitBlt]
mov edx, dword [ebp - 0x28]
push edx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push ebx
call dword [sym.imp.GDI32.dll_DeleteDC]
push edi
xor ebx, ebx
push ebx
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [ebp - 0x24]
push 0x1a0
mov dword [esi + 0x2fc], eax
call fcn.111709c0
add esp, 4
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], ebx
cmp eax, ebx
je 0x11110a18
mov ecx, eax
call fcn.110fd3c0
jmp 0x11110a1a
xor eax, eax
push ebx
or edi, 0xffffffff
push ebx
mov ecx, eax
mov dword [ebp - 4], edi
mov dword [esi + 0x324], eax
call fcn.110fdcd0
mov dword [esi + 0x320], eax
cmp eax, 1
jle 0x11110a76
mov ecx, dword [esi + 0x314]
mov dword [esi + 0x318], edi
cmp ecx, ebx
je 0x11110a6f
push ebx
push ebx
push 0x111f8710
push 0x11218754
call fcn.110bbc00
mov dword [esi + 0x31c], eax
cmp eax, dword [esi + 0x320]
jle 0x11110a6f
mov dword [esi + 0x31c], ebx
mov ecx, esi
call fcn.11110670
push 0x90
call fcn.111709c0
mov edi, eax
add esp, 4
mov dword [ebp - 0x24], edi
mov dword [ebp - 4], 1
cmp edi, ebx
je 0x11110ab9
mov ecx, dword [esi + 0xc]
push 0x17e2
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edx, dword [esi]
mov ebx, eax
mov eax, dword [edx + 0x20]
mov ecx, esi
call eax
push eax
push esi
push ebx
mov ecx, edi
call fcn.1110fa30
jmp 0x11110abb
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [esi + 0x310], eax
mov edx, dword [esi]
mov eax, dword [edx + 0x1d0]
mov ecx, esi
call eax
mov ecx, esi
call fcn.11110130
cmp dword [esi + 0xc], 0
jne 0x11110af8
push 0x1dd
push str.e:_nsmsrc_nsm14101410fctl32wndclass.h
push 0x111f761c
call fcn.11067750
add esp, 0xc
mov ecx, dword [esi + 0xc]
push 0
push 0x1f4
push 0x20
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
cmp dword [esi + 0xc], 0
jne 0x11110b28
push 0x165
push str.e:_nsmsrc_nsm14101410fctl32wndclass.h
push 0x111f761c
call fcn.11067750
add esp, 0xc
mov edx, dword [esi + 0xc]
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push edx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.111d9022
mov esp, ebp
pop ebp
ret 4