Function at 0x4d0430
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff78
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x30], 0
je 0x4d053d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
mov al, byte [eax + 0x1f8]
mov byte [ebp - 0x19], al
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
mov byte [eax + 0x1f8], 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 4]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
call sub.gdi32.dll_SaveDC
mov dword [ebp - 0x28], eax
lea edx, [ebp - 0x21]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
lea eax, [ebp - 0x21]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
call fcn.0045f348
push eax
call sub.user32.dll_ScreenToClient
neg dword [ebp - 0x21]
jno 0x4d04a7
call fcn.00403dd4
neg dword [ebp - 0x1d]
jno 0x4d04b1
call fcn.00403dd4
mov ecx, dword [ebp - 0x1d]
mov edx, dword [ebp - 0x21]
mov eax, dword [ebp - 0xc]
call fcn.0045749c
push 0
mov eax, dword [ebp - 0xc]
push eax
push 0x14
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
call fcn.0045f348
push eax
call sub.user32.dll_SendMessageA
push 0
mov eax, dword [ebp - 0xc]
push eax
push 0xf
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
call fcn.0045f348
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
mov edx, dword [0x4c8ec8]
call fcn.00404030
test al, al
je 0x4d0521
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
mov edx, dword [0x4c8ec8]
call fcn.00404054
xor ecx, ecx
mov edx, dword [ebp - 0xc]
call fcn.004d06e0
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.gdi32.dll_RestoreDC
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
mov dl, byte [ebp - 0x19]
mov byte [eax + 0x1f8], dl
mov eax, dword [ebp - 4]
cmp byte [eax + 0x1f8], 0
je 0x4d0552
mov eax, dword [ebp - 8]
cmp dword [eax + 4], 0
je 0x4d0587
mov eax, dword [ebp - 4]
test byte [eax + 0x55], 1
jne 0x4d0577
mov eax, dword [ebp - 4]
call fcn.0045c078
test eax, eax
jne 0x4d0577
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0046107c
jmp 0x4d06b7
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0045cffc
jmp 0x4d06b7
push 0
call sub.user32.dll_GetDC
mov dword [ebp - 0xc], eax
lea edx, [ebp - 0x78]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov eax, dword [ebp - 0x6c]
push eax
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.gdi32.dll_CreateCompatibleBitmap
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0xc]
push eax
push 0
call sub.user32.dll_ReleaseDC
push 0
call sub.gdi32.dll_CreateCompatibleDC
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.gdi32.dll_SelectObject
mov dword [ebp - 0x18], eax
xor eax, eax
push ebp
push 0x4d06b0
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x68]
push eax
mov eax, dword [ebp - 4]
call fcn.0045f348
push eax
call sub.user32.dll_BeginPaint
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, 0x14
mov eax, dword [ebp - 4]
call fcn.00459d14
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x10]
mov dword [eax + 4], edx
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004d0430
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 4], edx
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x10]
push eax
lea edx, [ebp - 0x78]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov eax, dword [ebp - 0x6c]
push eax
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov eax, dword [ebp - 0x80]
push eax
push 0
push 0
mov eax, dword [ebp - 0xc]
push eax
call sub.gdi32.dll_BitBlt
lea eax, [ebp - 0x68]
push eax
mov eax, dword [ebp - 4]
call fcn.0045f348
push eax
call sub.user32.dll_EndPaint
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d06b7
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.gdi32.dll_SelectObject
mov eax, dword [ebp - 0x10]
push eax
call sub.gdi32.dll_DeleteDC
mov eax, dword [ebp - 0x14]
push eax
call sub.gdi32.dll_DeleteObject
ret
mov esp, ebp
pop ebp
ret