Function at 0x4186f0
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
mov eax, dword [0x447150]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x447d94]
push ebx
mov ebx, ecx
mov dword [ebp - 0x58], eax
push esi
mov esi, dword [ebp + 8]
push edi
mov eax, dword [ebx]
mov dword [ebp - 0x64], esi
test eax, eax
je 0x418724
lea ecx, [ebp - 0x54]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword fs:[0x2c]
mov ecx, dword [0x4538f0]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x4534b0]
cmp eax, dword [ecx + 4]
jg 0x418a3c
push esi
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
push esi
mov dword [ebp - 0x60], esi
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push dword [ebp - 0x48]
mov edi, eax
push dword [ebp - 0x4c]
push esi
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
push eax
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
push 8
call sub.gdiplus.dll_GdipAlloc
mov esi, eax
mov dword [ebp - 0x5c], esi
test esi, esi
je 0x418799
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 0
push eax
push edi
call sub.gdiplus.dll_GdipCreateFromHDC
mov dword [esi + 4], eax
mov eax, dword [ebp - 0x5c]
mov dword [esi], eax
jmp 0x41879b
xor esi, esi
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push 0
push 0
push dword [0x4470f0]
push dword [esi]
call sub.gdiplus.dll_GdipFillRectangleI
test eax, eax
je 0x4187b9
mov dword [esi + 4], eax
push dword [ebp - 0x48]
push 0x4f
push 0xa
push 0x4f
push dword [0x4534a8]
push dword [esi]
call sub.gdiplus.dll_GdipDrawLineI
test eax, eax
je 0x4187d6
mov dword [esi + 4], eax
push dword [ebp - 0x48]
mov eax, dword [ebp - 0x4c]
add eax, 0xffffff6a
push eax
push 0xa
push eax
push dword [0x4534a8]
push dword [esi]
call sub.gdiplus.dll_GdipDrawLineI
test eax, eax
je 0x4187f9
mov dword [esi + 4], eax
push dword [ebp - 0x48]
mov eax, dword [ebp - 0x4c]
add eax, 0xfffffed4
push eax
push 0xa
push eax
push dword [0x4534a8]
push dword [esi]
call sub.gdiplus.dll_GdipDrawLineI
test eax, eax
je 0x41881c
mov dword [esi + 4], eax
push dword [ebp - 0x58]
mov eax, dword [ebx + 0xf0]
lea ecx, [ebx + 0xf0]
push esi
call dword [eax + 0x14]
push dword [ebp - 0x58]
mov eax, dword [ebx + 0xaf8]
lea ecx, [ebx + 0xaf8]
push esi
call dword [eax + 0x14]
push dword [ebp - 0x58]
mov eax, dword [ebx + 0x94c]
lea ecx, [ebx + 0x94c]
push esi
call dword [eax + 0x14]
push dword [ebp - 0x58]
mov eax, dword [ebx + 0x5f4]
lea ecx, [ebx + 0x5f4]
push esi
call dword [eax + 0x14]
push dword [ebp - 0x58]
mov eax, dword [ebx + 0x7a0]
lea ecx, [ebx + 0x7a0]
push esi
call dword [eax + 0x14]
push dword [ebp - 0x58]
mov eax, dword [ebx + 0x29c]
lea ecx, [ebx + 0x29c]
push esi
call dword [eax + 0x14]
push dword [ebp - 0x58]
mov eax, dword [ebx + 0x448]
lea ecx, [ebx + 0x448]
push esi
call dword [eax + 0x14]
push dword [ebp - 0x58]
mov eax, dword [ebx + 0xca4]
lea ecx, [ebx + 0xca4]
push esi
call dword [eax + 0x14]
push dword [ebp - 0x58]
mov eax, dword [ebx + 0x11a8]
lea ecx, [ebx + 0x11a8]
push esi
call dword [eax + 0x14]
push dword [ebp - 0x58]
mov eax, dword [ebx + 0xe50]
lea ecx, [ebx + 0xe50]
push esi
call dword [eax + 0x14]
push dword [ebp - 0x58]
mov eax, dword [ebx + 0xffc]
lea ecx, [ebx + 0xffc]
push esi
call dword [eax + 0x14]
mov eax, dword [ebx + 0xe8]
dec eax
cmp eax, 5
ja case.default.0x4188fd
jmp dword [eax*4 + 0x418ac0]
push str.0.25_X
lea eax, [ebp - 0x44]
push eax
call fcn.0040d440
add esp, 8
push 0
push 0
push str.TOOLTIP
push str.IDM_SPEED_SLOW
jmp 0x41897a
push str.0.5_X
jmp 0x418909
lea eax, [ebp - 0x44]
push str.1.0_X
push eax
call fcn.0040d440
add esp, 8
push 0
push 0
push str.TOOLTIP
push str.IDM_SPEED_NORMAL
jmp 0x41897a
push str.2.0_X
jmp 0x418960
push str.4.0_X
jmp 0x418960
push str.8.0_X
lea eax, [ebp - 0x44]
push eax
call fcn.0040d440
add esp, 8
push 0
push 0
push str.TOOLTIP
push str.IDM_SPEED_FAST
mov ecx, 0x4482b8
call fcn.00402e40
push dword [ebx + 0xd8]
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
push 0xffe615
push edi
mov dword [ebp - 0x5c], eax
call dword [sym.imp.GDI32.dll_SetTextColor]
push 1
push edi
call dword [sym.imp.GDI32.dll_SetBkMode]
push 6
push edi
call dword [sym.imp.GDI32.dll_SetTextAlign]
lea ecx, [ebp - 0x44]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4189b8
sub ecx, edx
lea eax, [ebp - 0x44]
push ecx
push eax
mov eax, dword [ebx + 0xc0]
add eax, 6
push eax
mov eax, dword [ebx + 0xbc]
add eax, 0x3e
push eax
push edi
call dword [sym.imp.GDI32.dll_TextOutA]
push dword [ebp - 0x5c]
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
push 2
push edi
call dword [sym.imp.GDI32.dll_SetBkMode]
push 0xcc0020
push 0
push 0
push edi
push dword [ebp - 0x48]
mov edi, dword [ebp - 0x60]
push dword [ebp - 0x4c]
push 0
push 0
push edi
call dword [sym.imp.GDI32.dll_BitBlt]
push edi
push dword [ebp - 0x64]
call dword [sym.imp.USER32.dll_ReleaseDC]
push dword [esi]
call sub.gdiplus.dll_GdipDeleteGraphics
push esi
call sub.gdiplus.dll_GdipFree
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004271bb
mov esp, ebp
pop ebp
ret 4
push 0x4534b0
call fcn.004277cf
add esp, 4
cmp dword [0x4534b0], 0xffffffff
jne 0x418744
push 0x4534a8
push 0
push ecx
mov dword [esp], 0x3f800000
push 0xff4d5257
call sub.gdiplus.dll_GdipCreatePen1
push 0x43bda0
mov dword [0x4534ac], eax
call fcn.00427682
add esp, 4
mov dword [ebp - 0x5c], 0
lea eax, [ebp - 0x5c]
push eax
push 0xff2e3439
call sub.gdiplus.dll_GdipCreateSolidFill
mov dword [0x4470f4], eax
mov eax, dword [ebp - 0x5c]
push 0x43bd80
mov dword [0x4470f0], eax
call fcn.00427682
push 0x4534b0
call fcn.00427790
add esp, 8
jmp 0x418744