Function at 0x411240
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fff21
mov eax, dword fs:[0]
push eax
sub esp, 0xac
mov eax, dword [0x69ee98]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x8c], ebx
mov eax, dword [ebx + 0x1b0]
test eax, eax
je 0x411294
mov ecx, dword [ebx + 0xac]
mov dword [ebp - 0x90], ecx
mov ecx, dword [ebx + 0xb0]
jmp 0x4112a6
mov ecx, dword [ebx + 0x744]
mov dword [ebp - 0x90], ecx
mov ecx, dword [ebx + 0x748]
cmp dword [ebx + 0x680], 0
mov dword [ebp - 0x88], ecx
je 0x4112c4
mov dword [ebx + 0x938], 0
jmp 0x411578
cmp dword [ebx + 0x140], 0
jne 0x4112da
cmp dword [ebx + 0x138], 0
jne 0x411565
test eax, eax
je 0x41140f
mov eax, dword [ebx + 0x9c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebx + 0xa0]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebx + 0xa4]
mov dword [ebp - 0x28], eax
mov eax, dword [ebx + 0xa8]
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.USER32.dll_CopyRect]
mov eax, dword [ebx + 0xf8]
lea esi, [ebx + 0x6f0]
test eax, eax
je 0x41132b
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x20]
test esi, esi
jne 0x41133f
xor edx, edx
jmp 0x411342
mov edx, dword [esi + 4]
push eax
push ecx
push edx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
lea ecx, [ebp - 0xa8]
mov dword [ebx + 0xf8], eax
call fcn.004899b8
mov dword [ebp - 4], 0
test esi, esi
jne 0x41136b
xor eax, eax
jmp 0x41136e
mov eax, dword [esi + 4]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
lea ecx, [ebp - 0xa8]
call fcn.0048a3be
push dword [ebx + 0xf8]
push dword [ebp - 0xa4]
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
sub ecx, edi
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x88], eax
test esi, esi
jne 0x4113af
xor eax, eax
jmp 0x4113b2
mov eax, dword [esi + 4]
push 0xcc0020
push edi
push dword [ebp - 0x20]
push eax
push ecx
push edx
push 0
push 0
push dword [ebp - 0xa4]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x88]
push dword [ebp - 0xa4]
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp - 0xa4]
call dword [sym.imp.GDI32.dll_DeleteObject]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 4], 0xffffffff
call fcn.00489b1f
sub esp, 8
lea ecx, [ebx + 0x18]
push esi
call fcn.0041b4b0
jmp 0x411565
push 0
call dword [sym.imp.USER32.dll_GetWindowDC]
mov edi, eax
push 0xc
push edi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0xe
push edi
mov ebx, eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push edi
push 0
mov esi, eax
call dword [sym.imp.USER32.dll_ReleaseDC]
imul esi, ebx
mov ebx, dword [ebp - 0x8c]
cmp esi, 8
jg 0x41151d
push dword [ebx + 0x6b0]
lea ecx, [ebp - 0x84]
call fcn.004899cc
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], 1
call fcn.004899b8
mov byte [ebp - 4], 2
push dword [ebp - 0x80]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push eax
lea ecx, [ebp - 0xb8]
call fcn.0048a3be
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x98], vtable.CBitmap.0
mov byte [ebp - 4], 3
mov eax, dword [ebx + 0xa8]
mov ecx, dword [ebx + 0xa4]
sub eax, dword [ebx + 0xa0]
sub ecx, dword [ebx + 0x9c]
push eax
push ecx
push dword [ebp - 0x80]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
lea ecx, [ebp - 0x98]
call fcn.0048a400
push dword [ebp - 0x94]
push dword [ebp - 0xb4]
call fcn.0048acec
push eax
push dword [ebp - 0xb4]
call dword [sym.imp.GDI32.dll_SelectObject]
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x98], vtable.CBitmap.0
call fcn.0040b180
lea ecx, [ebp - 0xb8]
call fcn.00489b1f
lea ecx, [ebp - 0x84]
mov dword [ebp - 4], 0xffffffff
call fcn.00489b6b
mov eax, dword [ebx + 0x16c]
mov ecx, dword [ebx + 0x168]
mov dword [ebp - 0x30], eax
add eax, dword [ebp - 0x90]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x88]
add eax, ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x24], eax
lea eax, [ebx + 0x6f0]
test eax, eax
je 0x411550
mov eax, dword [eax + 4]
sub esp, 0x10
lea ecx, [ebp - 0x30]
push 0
push ecx
push eax
lea ecx, [ebx + 0x740]
call fcn.0043e970
push 0
push dword [ebx + 0x8b0]
lea ecx, [ebx + 0x7d0]
call fcn.00440ea0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005d4ba5
mov esp, ebp
pop ebp
ret