Function at 0x495f58
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff88
push ebx
push esi
push edi
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov byte [eax + 0x28c], 1
mov eax, dword [ebp - 4]
cmp byte [eax + 0x281], 0
je 0x495fa7
push 0
lea eax, [ebp - 0x1c]
push eax
push 0
push 0x4a
call sub.user32.dll_SystemParametersInfoA
neg eax
sbb eax, eax
neg eax
mov byte [ebp - 0x1d], al
cmp byte [ebp - 0x1d], 0
je 0x495fab
push 0
push 0
push 0
push 0x4b
call sub.user32.dll_SystemParametersInfoA
jmp 0x495fab
mov byte [ebp - 0x1d], 0
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x4c]
mov byte [ebp - 0x1e], al
mov dl, 1
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x5c]
xor eax, eax
push ebp
push 0x4963e5
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
call sub.user32.dll_GetDC
mov ebx, eax
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov esi, dword [ebp - 0x34]
lea edx, [ebp - 0x50]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
sub esi, dword [ebp - 0x4c]
push esi
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov esi, dword [ebp - 0x58]
lea edx, [ebp - 0x70]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
sub esi, dword [ebp - 0x70]
push esi
push ebx
call sub.gdi32.dll_CreateCompatibleBitmap
mov dword [ebp - 0xc], eax
push ebx
call sub.gdi32.dll_CreateCompatibleDC
mov dword [ebp - 0x14], eax
push ebx
push 0
call sub.user32.dll_ReleaseDC
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x14]
push eax
call sub.gdi32.dll_SelectObject
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x281], 0
je 0x496092
push 0x42
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov ebx, dword [ebp - 0x34]
lea edx, [ebp - 0x50]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
sub ebx, dword [ebp - 0x4c]
push ebx
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov ebx, dword [ebp - 0x58]
lea edx, [ebp - 0x70]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
sub ebx, dword [ebp - 0x70]
push ebx
push 0
push 0
mov eax, dword [ebp - 0x14]
push eax
call sub.gdi32.dll_PatBlt
jmp 0x4960c4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
call fcn.004190fc
push eax
call sub.gdi32.dll_CreateSolidBrush
mov ebx, eax
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
push ebx
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x14]
push eax
call sub.user32.dll_FillRect
push ebx
call sub.gdi32.dll_DeleteObject
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x60]
call fcn.004190fc
push eax
mov eax, dword [ebp - 0x14]
push eax
call sub.gdi32.dll_SetBkColor
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00496534
mov eax, dword [ebp - 4]
cmp byte [eax + 0x281], 0
je 0x496261
mov eax, dword [ebp - 4]
mov byte [eax + 0x282], 1
xor eax, eax
push ebp
push 0x49625a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0xbc]
mov esi, eax
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0xb8]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 4]
call fcn.0042a348
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x21c]
xor edx, edx
call fcn.00461884
push 0
call sub.user32.dll_GetDC
mov ebx, eax
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov edi, dword [ebp - 0x34]
lea edx, [ebp - 0x50]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
sub edi, dword [ebp - 0x4c]
push edi
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov edi, dword [ebp - 0x58]
lea edx, [ebp - 0x70]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
sub edi, dword [ebp - 0x70]
push edi
push ebx
call sub.gdi32.dll_CreateCompatibleBitmap
mov dword [ebp - 0x10], eax
push ebx
push 0
call sub.user32.dll_ReleaseDC
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x14]
push eax
call sub.gdi32.dll_SelectObject
push 0xff0062
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov ebx, dword [ebp - 0x34]
lea edx, [ebp - 0x50]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
sub ebx, dword [ebp - 0x4c]
push ebx
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov ebx, dword [ebp - 0x58]
lea edx, [ebp - 0x70]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
sub ebx, dword [ebp - 0x70]
push ebx
push 0
push 0
mov eax, dword [ebp - 0x14]
push eax
call sub.gdi32.dll_PatBlt
push 0xffffff
mov eax, dword [ebp - 0x14]
push eax
call sub.gdi32.dll_SetBkColor
push 0
mov eax, dword [ebp - 0x14]
push eax
call sub.gdi32.dll_SetTextColor
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00496534
push 0
push 0
push 0x304
mov eax, dword [ebp - 4]
call fcn.0044e7a0
push eax
call sub.user32.dll_SendMessageA
mov edx, esi
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0xc8]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0xc4]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x496266
mov eax, dword [ebp - 4]
mov byte [eax + 0x282], 0
ret
xor eax, eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 0x14]
push eax
call sub.gdi32.dll_SelectObject
cmp dword [ebp - 0x10], 0
je 0x49633d
mov dl, 1
mov eax, dword [0x5308ec]
call fcn.005348ec
mov edi, eax
mov edx, dword [ebp - 0x10]
mov eax, edi
call fcn.0042006c
mov dl, 1
mov eax, edi
call fcn.00420410
mov dl, 1
mov eax, dword [0x5308ec]
call fcn.005348ec
mov esi, eax
mov edx, edi
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 8]
mov dl, 6
mov eax, esi
call fcn.00420410
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x14]
push eax
call sub.gdi32.dll_SelectObject
push 0x440328
push 0
push 0
mov eax, dword [ebp - 0x14]
push eax
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov ebx, dword [ebp - 0x34]
lea edx, [ebp - 0x50]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
sub ebx, dword [ebp - 0x4c]
push ebx
lea edx, [ebp - 0x60]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov ebx, dword [ebp - 0x58]
lea edx, [ebp - 0x70]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
sub ebx, dword [ebp - 0x70]
push ebx
push 0
push 0
mov eax, esi
call fcn.0041f40c
call fcn.0041a9e0
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 0x14]
push eax
call sub.gdi32.dll_SelectObject
push eax
call sub.gdi32.dll_DeleteObject
jmp 0x496360
xor edi, edi
mov dl, 1
mov eax, dword [0x5308ec]
call fcn.005348ec
mov esi, eax
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.0042006c
mov dl, 6
mov eax, esi
call fcn.00420410
mov eax, dword [ebp - 0x14]
push eax
call sub.gdi32.dll_DeleteDC
push edi
lea ecx, [ebp - 0x78]
xor edx, edx
xor eax, eax
call fcn.004107a8
lea eax, [ebp - 0x78]
push eax
push 0
push 1
mov ecx, esi
mov dl, 1
mov eax, dword [0x525b98]
call fcn.0052605c
mov ecx, eax
mov dl, 1
mov eax, dword [0x517824]
call fcn.0051c044
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x270]
mov ecx, dword [eax]
call dword [ecx + 0xec]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4963ec
mov dl, byte [ebp - 0x1e]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x5c]
mov eax, dword [ebp - 4]
mov byte [eax + 0x28c], 0
cmp byte [ebp - 0x1d], 0
je 0x4963e4
push 0
push 0
mov eax, dword [ebp - 0x1c]
push eax
push 0x4b
call sub.user32.dll_SystemParametersInfoA
ret