Function at 0x41f1c9
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x423af8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x9c
lea ecx, [ebp - 0x6c]
call fcn.00401068
and dword [ebp - 4], 0
and dword [ebp - 0xa4], 0
and dword [ebp - 0x90], 0
and dword [ebp - 0x88], 0
call dword [sym.imp.USER32.dll_GetProcessWindowStation]
mov dword [ebp - 0x28], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.USER32.dll_GetThreadDesktop]
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x24]
push eax
push 0xc
lea eax, [ebp - 0x7c]
push eax
push 1
push dword [ebp - 0x28]
call dword [sym.imp.USER32.dll_GetUserObjectInformationW]
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x84], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x84], eax
push dword [ebp - 0x84]
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x84]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x58], eax
push dword [ebp - 0x80]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebp - 0x5c], eax
push dword [ebp - 0x58]
push dword [ebp - 0x20]
push dword [ebp - 0x80]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [ebp - 0x70], eax
push dword [ebp - 0x70]
push dword [ebp - 0x5c]
call dword [sym.imp.GDI32.dll_SelectObject]
push 0x40cc0020
push 0
push 0
push dword [ebp - 0x80]
push dword [ebp - 0x58]
push dword [ebp - 0x20]
push 0
push 0
push dword [ebp - 0x5c]
call dword [sym.imp.GDI32.dll_BitBlt]
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0xa4], eax
push 0x2c
push 0
lea eax, [ebp - 0x54]
push eax
call fcn.004031e0
add esp, 0xc
mov dword [ebp - 0x54], 0x28
push 0
lea eax, [ebp - 0x54]
push eax
push 0
push 0
push 0
push dword [ebp - 0x70]
push dword [ebp - 0xa4]
call dword [sym.imp.GDI32.dll_GetDIBits]
cmp dword [ebp - 0x40], 0
ja 0x41f336
cmp dword [ebp - 0x4c], 0
jge 0x41f319
mov eax, dword [ebp - 0x4c]
neg eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0x4c]
movzx ecx, word [ebp - 0x46]
add ecx, 7
imul eax, ecx
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [ebp - 0x40], eax
push 1
push dword [ebp - 0x40]
lea ecx, [ebp - 0x6c]
call fcn.004105e1
and dword [ebp - 0x44], 0
push 0
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0040100f
push eax
push dword [ebp - 0x4c]
push 0
push dword [ebp - 0x70]
push dword [ebp - 0xa4]
call dword [sym.imp.GDI32.dll_GetDIBits]
and word [ebp - 0x9a], 0
and word [ebp - 0x98], 0
mov eax, dword [ebp - 0x40]
add eax, 0x36
mov dword [ebp - 0x9e], eax
mov word [ebp - 0xa0], 0x4d42
mov dword [ebp - 0x96], 0x36
push 0
push 0x28
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0041073a
push 0
push 0xe
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0041073a
lea ecx, [ebp - 0x6c]
call fcn.00401000
push eax
push 0
push 0x28
mov ecx, dword [ebp + 8]
call fcn.00413b96
push eax
push 0
push 0x79339801
lea ecx, [ebp - 0x6c]
call fcn.00401000
push eax
lea ecx, [ebp - 0x6c]
call fcn.0040100f
mov edx, eax
mov ecx, dword [ebp + 8]
call fcn.0041578c
cmp dword [ebp - 0xa4], 0
je 0x41f40b
push dword [ebp - 0xa4]
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp dword [ebp - 0x80], 0
je 0x41f420
push dword [ebp - 0x80]
push dword [ebp - 0x84]
call dword [sym.imp.USER32.dll_ReleaseDC]
cmp dword [ebp - 0x5c], 0
je 0x41f42f
push dword [ebp - 0x5c]
call dword [sym.imp.GDI32.dll_DeleteDC]
cmp dword [ebp - 0x70], 0
je 0x41f43e
push dword [ebp - 0x70]
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [ebp - 0x28]
call dword [sym.imp.USER32.dll_SetProcessWindowStation]
push dword [ebp - 0x8c]
call dword [sym.imp.USER32.dll_SetThreadDesktop]
cmp dword [ebp - 0x90], 0
je 0x41f468
push dword [ebp - 0x90]
call dword [sym.imp.USER32.dll_CloseWindowStation]
cmp dword [ebp - 0x88], 0
je 0x41f47d
push dword [ebp - 0x88]
call dword [sym.imp.USER32.dll_CloseDesktop]
lea ecx, [ebp - 0x6c]
call fcn.004106f0
mov byte [ebp - 0xa5], 1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c]
call fcn.004010a3
mov al, byte [ebp - 0xa5]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret