Function at 0x44ff31
Capabilities:
Capture screenshot

Disassembly:
push ebp
lea ebp, [esp - 0x74]
sub esp, 0xd8
mov eax, dword [0x58c584]
xor eax, ebp
mov dword [ebp + 0x70], eax
and dword [ebp - 0x20], 0
push ebx
mov ebx, dword [ebp + 0x7c]
push esi
push edi
xor eax, eax
lea edi, [ebp - 0x1c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x20]
mov esi, ecx
push eax
push dword [esi + 0x2c]
mov dword [ebp - 0x40], ebx
call dword [sym.imp.USER32.dll_GetClientRect]
lea eax, [ebp - 0xc]
push eax
push ebx
call dword [sym.imp.USER32.dll_BeginPaint]
push eax
mov dword [ebp - 0x28], eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov edi, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], edi
push eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
push eax
push dword [ebp - 0x28]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov ebx, dword [sym.imp.GDI32.dll_SelectObject]
push eax
push edi
mov dword [ebp - 0x44], eax
call ebx
xor ecx, ecx
mov dword [ebp - 0x3c], eax
mov eax, dword [esi + 0x5c]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x34], ecx
cmp eax, ecx
je 0x450000
cmp byte [esi + 0x69], cl
je 0x44fff7
push 0x38
push ecx
lea eax, [ebp + 0x38]
push eax
mov dword [ebp + 0x34], ecx
call fcn.0050aaf0
add esp, 0xc
lea eax, [ebp + 0x34]
push eax
push 0x3c
push dword [esi + 0x5c]
call dword [sym.imp.GDI32.dll_GetObjectA]
cmp byte [ebp + 0x49], 0
sete al
mov byte [ebp + 0x49], al
lea eax, [ebp + 0x34]
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
mov dword [ebp - 0x34], eax
push eax
push edi
call ebx
xor ecx, ecx
mov dword [ebp - 0x2c], eax
cmp byte [esi + 0x60], 0
jne 0x450066
push dword [esi + 0x58]
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push eax
push edi
mov dword [ebp - 0x38], eax
call ebx
push dword [esi + 0x58]
mov dword [ebp - 0x10], eax
push 0
push 0
call dword [sym.imp.GDI32.dll_CreatePen]
push eax
push edi
mov dword [ebp - 0x24], eax
call ebx
push dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
push edi
call dword [sym.imp.GDI32.dll_Rectangle]
push dword [ebp - 0x10]
push edi
call ebx
push dword [ebp - 0x30]
push edi
call ebx
push dword [ebp - 0x38]
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [ebp - 0x24]
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x45014b
cmp dword [esi + 0x64], ecx
jne 0x450125
push dword [ebp - 0x28]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [esi + 0x64], eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
push eax
push dword [ebp - 0x28]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
push dword [esi + 0x64]
mov dword [ebp - 0x38], eax
call ebx
and dword [ebp - 0x54], 0
xor eax, eax
lea edi, [ebp - 0x50]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x54]
push eax
push dword [esi + 0x2c]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edi, dword [sym.imp.USER32.dll_GetParent]
lea eax, [ebp - 0x64]
push eax
push dword [esi + 0x2c]
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
push dword [esi + 0x2c]
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov ecx, dword [ebp - 0x50]
sub ecx, dword [ebp - 0x60]
push 0xcc0020
push ecx
mov ecx, dword [ebp - 0x54]
sub ecx, dword [ebp - 0x64]
mov dword [ebp - 0x24], eax
push ecx
push eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
push eax
push 0
push 0
push dword [esi + 0x64]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x24]
push dword [esi + 0x2c]
call edi
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
push dword [ebp - 0x38]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edi, dword [ebp - 0x30]
xor ecx, ecx
mov eax, dword [esi + 0x64]
cmp eax, ecx
je 0x45014b
push 0xcc0020
push ecx
push ecx
push eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
push eax
push ecx
push ecx
push edi
call dword [sym.imp.GDI32.dll_BitBlt]
push 0xfffffffffffffff0
push dword [esi + 0x2c]
call dword [sym.imp.USER32.dll_GetWindowLongA]
and dword [ebp - 0x10], 0
xor edx, edx
inc edx
mov dword [ebp - 0x24], eax
test dl, al
je 0x450169
mov dword [ebp - 0x10], edx
jmp 0x450173
push 2
pop ecx
test cl, al
je 0x450173
mov dword [ebp - 0x10], ecx
test eax, 0x200
je 0x450180
or dword [ebp - 0x10], 0x24
jmp 0x450184
or dword [ebp - 0x10], 0x10
test eax, 0x4000
je 0x450192
or dword [ebp - 0x10], 0x8000
push edx
push edi
call dword [sym.imp.GDI32.dll_SetBkMode]
test dword [ebp - 0x24], 0x8000000
je 0x4501a8
push dword [esi + 0x54]
jmp 0x4501b7
cmp byte [esi + 0x69], 0
je 0x4501b3
mov eax, dword [esi + 0x50]
jmp 0x4501b6
mov eax, dword [esi + 0x4c]
push eax
push edi
call dword [sym.imp.GDI32.dll_SetTextColor]
push dword [esi + 0x58]
push edi
call dword [sym.imp.GDI32.dll_SetBkColor]
cmp dword [esi + 0x48], 0x10
mov eax, dword [esi + 0x44]
jb 0x4501d6
mov esi, dword [esi + 0x34]
jmp 0x4501d9
add esi, 0x34
push dword [ebp - 0x10]
lea ecx, [ebp - 0x20]
push ecx
push eax
push esi
push edi
call dword [sym.imp.USER32.dll_DrawTextA]
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
push 0xcc0020
xor esi, esi
push esi
push esi
push edi
push eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
push eax
push esi
push esi
push dword [ebp - 0x28]
call dword [sym.imp.GDI32.dll_BitBlt]
cmp dword [ebp - 0x2c], esi
je 0x450217
push dword [ebp - 0x2c]
push edi
call ebx
cmp dword [ebp - 0x34], esi
je 0x450225
push dword [ebp - 0x34]
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [ebp - 0x3c]
push edi
call ebx
push dword [ebp - 0x44]
call dword [sym.imp.GDI32.dll_DeleteObject]
push edi
call dword [sym.imp.GDI32.dll_DeleteDC]
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x40]
call dword [sym.imp.USER32.dll_EndPaint]
mov ecx, dword [ebp + 0x70]
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.0050a878
add ebp, 0x74
leave
ret 4