Function at 0x1101db70
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1117f4b1
mov eax, dword fs:[0]
push eax
sub esp, 0x124
mov eax, dword [0x111ec774]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
test byte [ebp + 0xc], 2
mov eax, dword [ebp + 8]
mov esi, ecx
mov ecx, dword [esi + 0x70]
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x94], ecx
jne 0x1101dbf5
push eax
lea ecx, [ebp - 0xb8]
call fcn.110d0960
lea edx, [ebp - 0xb8]
push edx
lea ecx, [esi + 0x104]
mov dword [ebp - 4], 0
call fcn.110d1210
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], 0xffffffff
call fcn.110d0a10
mov eax, dword [esi + 0xdc]
push eax
mov eax, dword [esi + 8]
push eax
call dword [sym.imp.uSEr32.dll_GetDlgItem]
mov edi, eax
push edi
call dword [sym.imp.uSEr32.dll_GetWindowTextLengthA]
mov ebx, dword [sym.imp.uSEr32.dll_SendMessageA]
inc eax
push eax
push eax
push 0xb1
push edi
call ebx
mov esi, 0x3c
push esi
lea ecx, [ebp - 0x88]
push 0
push ecx
call fcn.11162be0
add esp, 0xc
lea edx, [ebp - 0x88]
push edx
push 0
push 0x43a
push edi
mov dword [ebp - 0x88], esi
mov dword [ebp - 0x84], bind
call ebx
lea eax, [ebp - 0x4c]
push eax
push 1
push 0x43a
push edi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x48], 0xc0000001
call ebx
movsx ecx, byte [ebp + 0xc]
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp - 0x8c]
and ecx, 1
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x38], edx
mov esi, 0x11199124
jmp 0x1101dc90
mov cl, byte [eax]
cmp cl, byte [esi]
jne 0x1101dcb0
test cl, cl
je 0x1101dcac
mov cl, byte [eax + 1]
cmp cl, byte [esi + 1]
jne 0x1101dcb0
add eax, 2
add esi, 2
test cl, cl
jne 0x1101dc90
xor eax, eax
jmp 0x1101dcb5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
mov eax, dword [ebp - 0x7c]
jne 0x1101dcc1
cdq
sub eax, edx
sar eax, 1
lea ecx, [ebp - 0x4c]
push ecx
push 1
push 0x444
push edi
mov dword [ebp - 0x40], eax
call ebx
mov edx, dword [ebp - 0x94]
mov ecx, dword [edx + 0x48]
test ecx, ecx
je 0x1101e033
push 0
push 0
push 0x11199114
push 0x111a0f38
call fcn.1105e820
test eax, eax
jne 0x1101e033
mov ebx, dword [ebp - 0x8c]
push 0x13cd
call fcn.110963b0
push eax
call dword [sym.imp.uSEr32.dll_LoadBitmapA]
lea ecx, [ebp - 0xe4]
push ecx
push 0x18
push eax
mov dword [ebp - 0x9c], eax
call dword [sym.imp.Gdi32.Dll_GetObjectA]
mov esi, dword [ebp - 0xa0]
cmp dword [esi + 8], 0
jne 0x1101dd4e
push 0x1a2
push 0x11195124
push 0x1119511c
call fcn.11029a70
add esp, 0xc
mov edx, dword [esi + 8]
push edx
call dword [sym.imp.uSEr32.dll_GetDC]
mov esi, eax
push esi
mov dword [ebp - 0xa4], esi
call dword [sym.imp.Gdi32.Dll_CreateCompatibleDC]
mov dword [ebp - 0x90], eax
call fcn.11146010
test eax, eax
je 0x1101dd87
mov eax, dword [ebp - 0x90]
push 1
push eax
call fcn.11146140
add esp, 8
push esi
call dword [sym.imp.Gdi32.Dll_GetMapMode]
mov ecx, dword [ebp - 0x90]
push eax
push ecx
call dword [sym.imp.Gdi32.Dll_SetMapMode]
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x90]
push edx
push eax
call dword [sym.imp.Gdi32.Dll_SelectObject]
push esi
call dword [sym.imp.Gdi32.Dll_CreateCompatibleDC]
push esi
mov dword [ebp - 0x98], eax
call dword [sym.imp.Gdi32.Dll_GetMapMode]
mov ecx, dword [ebp - 0x98]
push eax
push ecx
call dword [sym.imp.Gdi32.Dll_SetMapMode]
push 0xf
push 0xf
push esi
call dword [sym.imp.Gdi32.Dll_CreateCompatibleBitmap]
mov edx, dword [ebp - 0x98]
push eax
push edx
mov dword [ebp - 0x94], eax
call dword [sym.imp.Gdi32.Dll_SelectObject]
mov eax, ebx
cmp byte [eax], 0
je 0x1101df44
lea esp, [esp]
lea ecx, [ebp - 0x8c]
push ecx
push ebx
mov dword [ebp - 0x8c], 0
call fcn.1101dae0
add esp, 8
mov dword [ebp - 0xa8], eax
test eax, eax
je 0x1101df35
lea ecx, [ebp - 0xb8]
call fcn.110d1930
mov edx, dword [ebp - 0xa8]
sub edx, ebx
push edx
push ebx
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], 1
call fcn.110d12e0
mov eax, dword [ebp - 0xb8]
mov edx, dword [eax]
lea ecx, [ebp - 0xb8]
call edx
test al, al
jne 0x1101de7a
push 0x250
push 0x11195b24
push 0x11195b1c
call fcn.11029a70
add esp, 0xc
mov eax, dword [ebp - 0xac]
push eax
push 0
push 0xc2
push edi
call dword [sym.imp.uSEr32.dll_SendMessageA]
mov ebx, dword [ebp - 0x8c]
mov esi, dword [ebx + 4]
call fcn.11146010
test eax, eax
je 0x1101debe
mov ecx, dword [ebp - 0xe0]
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 3
mov esi, edx
shr esi, 0x1f
add esi, edx
sub esi, dword [ebx + 4]
dec esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x98]
push 0xcc0020
push 0
mov edx, esi
shl edx, 4
sub edx, esi
push edx
push eax
push 0xf
push 0xf
push 0
push 0
push ecx
call dword [sym.imp.Gdi32.Dll_BitBlt]
mov edx, dword [ebp - 0x94]
push 0
push edx
push edi
call fcn.11125f00
mov eax, dword [ebx]
add esp, 0xc
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x1101df00
sub eax, ecx
mov ecx, dword [ebp - 0xa8]
lea ebx, [eax + ecx]
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], 0xffffffff
call fcn.110d0a10
cmp byte [ebx], 0
mov esi, dword [ebp - 0xa4]
jne 0x1101de00
jmp 0x1101df44
push ebx
push 0
push 0xc2
push edi
call dword [sym.imp.uSEr32.dll_SendMessageA]
mov ebx, dword [ebp - 0xa0]
cmp dword [ebx + 8], 0
jne 0x1101df67
push 0x1a5
push 0x11195124
push 0x1119511c
call fcn.11029a70
add esp, 0xc
mov edx, dword [ebx + 8]
push esi
push edx
call dword [sym.imp.uSEr32.dll_ReleaseDC]
mov eax, dword [ebp - 0x98]
mov esi, dword [sym.imp.Gdi32.Dll_DeleteDC]
push eax
call esi
mov ecx, dword [ebp - 0x90]
push ecx
call esi
mov edx, dword [ebp - 0x9c]
mov esi, dword [sym.imp.Gdi32.Dll_DeleteObject]
push edx
call esi
mov eax, dword [ebp - 0x94]
push eax
call esi
push 0
push 7
push 0x115
push edi
call dword [sym.imp.uSEr32.dll_PostMessageA]
call dword [sym.imp.uSEr32.dll_GetFocus]
test eax, eax
jne 0x1101e050
cmp byte [ebx + 0x12c], al
je 0x1101e050
mov ecx, dword [ebx + 8]
mov dword [ebp - 0xc8], ecx
mov esi, 2
lea ecx, [ebp - 0x130]
mov byte [ebx + 0x12c], al
mov dword [ebp - 0xcc], 0x14
mov dword [ebp - 0xc4], esi
mov dword [ebp - 0xc0], 4
mov dword [ebp - 0xbc], eax
call fcn.110161e0
lea edx, [ebp - 0xcc]
push edx
lea ecx, [ebp - 0x130]
mov dword [ebp - 4], esi
call fcn.1101d320
mov eax, dword [ebp - 0x130]
test eax, eax
je 0x1101e050
push eax
call dword [sym.imp.KeRneL32.DLl_FreeLibrary]
jmp 0x1101e050
mov eax, dword [ebp - 0x8c]
push eax
push 0
push 0xc2
push edi
call ebx
push 0
push 0
push 0xb7
push edi
call ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.11162bb7
mov esp, ebp
pop ebp
ret 0xc