Function at 0x4d9d04
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov ebx, 0x5212d0
mov esi, 0x521300
cmp dword [0x4fcd08], 0
jne 0x4da74e
mov dword [0x4fcd08], 1
xor eax, eax
mov dword [0x5212f0], eax
xor edx, edx
mov dword [0x5212f4], edx
xor ecx, ecx
mov dword [0x5212e8], ecx
xor eax, eax
mov dword [0x5212e0], eax
cmp dword [0x4fccb4], 0
je 0x4da6b6
cmp dword [0x4fccd8], 0
je 0x4da6b6
mov edx, dword [0x4fccd8]
push edx
call sub.USER32.dll_GetDC
mov dword [0x5212f0], eax
cmp dword [0x5212f0], 0
je 0x4da6b6
cmp dword [0x4fccec], 0
je 0x4d9da2
xor ecx, ecx
mov dword [0x4fccec], ecx
push 0x7e
mov eax, dword [0x4fccd8]
push eax
call sub.USER32.dll_KillTimer
push esi
mov edx, dword [0x4fccd8]
push edx
call sub.USER32.dll_GetClientRect
mov ecx, dword [0x4fcd04]
cmp ecx, dword [esi + 8]
je 0x4d9dc7
call fcn.004d99e0
mov eax, dword [esi + 8]
mov dword [0x4fcd04], eax
push 1
mov edx, dword [0x5212f0]
push edx
call sub.GDI32.dll_SetMapMode
mov dword [0x5212dc], eax
push 0
call sub.GDI32.dll_CreateCompatibleDC
mov dword [0x5212f4], eax
cmp dword [0x5212f4], 0
je 0x4da6b6
test edi, edi
je 0x4d9e30
cmp dword [edi + 0x6b4], 0
jne 0x4d9e05
call fcn.004d99e0
mov ecx, dword [edi + 0x6ac]
sub ecx, dword [edi + 0x6a4]
inc ecx
mov dword [esi + 8], ecx
cmp dword [0x4fcccc], 2
jl 0x4d9e30
mov eax, dword [edi + 0x6b0]
sub eax, dword [edi + 0x6a8]
add eax, 2
mov dword [esi + 0xc], eax
mov edx, dword [esi + 0xc]
push edx
mov ecx, dword [esi + 8]
push ecx
mov eax, dword [0x5212f0]
push eax
call sub.GDI32.dll_CreateCompatibleBitmap
mov dword [0x5212e0], eax
cmp dword [0x5212e0], 0
je 0x4da6b6
mov edx, dword [0x5212e0]
push edx
mov ecx, dword [0x5212f4]
push ecx
call sub.GDI32.dll_SelectObject
mov dword [0x5212e4], eax
mov eax, dword [0x4f29f8]
push eax
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x5212fc], eax
cmp dword [0x5212fc], 0
je 0x4da6b6
mov edx, dword [0x5212fc]
push edx
push esi
mov ecx, dword [0x5212f4]
push ecx
call sub.USER32.dll_FillRect
mov eax, dword [0x5212fc]
push eax
call sub.GDI32.dll_DeleteObject
push 0x4fcda0
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0x48
push 0x5a
mov edx, dword [0x5212f0]
push edx
call sub.GDI32.dll_GetDeviceCaps
push eax
push 8
call sub.KERNEL32.dll_MulDiv
neg eax
push eax
call sub.GDI32.dll_CreateFontA
mov dword [0x5212e8], eax
cmp dword [0x5212e8], 0
je 0x4da6b6
mov ecx, dword [0x5212e8]
push ecx
mov eax, dword [0x5212f4]
push eax
call sub.GDI32.dll_SelectObject
mov dword [0x5212ec], eax
cmp dword [0x4fd9fc], 0
je 0x4da3f3
push 0x521320
call sub.USER32.dll_GetCursorPos
push 0x521320
mov edx, dword [0x4fccd8]
push edx
call sub.USER32.dll_ScreenToClient
test edi, edi
je 0x4d9fdb
cmp byte [edi + 0x4e4], 0
je 0x4da6b6
push edi
call fcn.004d98c8
mov ebx, eax
mov dword [0x5212f8], ebx
test ebx, ebx
je 0x4da6b6
push esi
push edi
lea esi, [edi + 0x6a4]
mov edi, 0x521310
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
mov eax, dword [edi + 0x6a4]
sub dword [edi + 0x6ac], eax
xor edx, edx
mov dword [edi + 0x6a4], edx
cmp dword [0x4fcccc], 2
jl 0x4d9fac
mov ecx, dword [edi + 0x6a8]
sub dword [edi + 0x6b0], ecx
xor eax, eax
mov dword [edi + 0x6a8], eax
mov edx, dword [0x5212f8]
push edx
mov ecx, dword [0x5212f4]
push ecx
push edi
call fcn.004d9064
push esi
push edi
add edi, 0x6a4
mov esi, 0x521310
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
jmp 0x4da3f3
xor eax, eax
mov dword [0x5212d8], eax
mov dword [0x5212d4], 1
mov edx, dword [0x4fd9e4]
mov dword [ebx], edx
jmp 0x4da062
mov ecx, dword [ebx]
cmp byte [ecx + 0x4e4], 0
je 0x4da058
mov eax, dword [ebx]
push eax
call fcn.004d98c8
mov dword [0x5212f8], eax
cmp dword [0x5212f8], 0
je 0x4da058
mov edx, dword [ebx]
mov ecx, dword [edx + 0x6b4]
cmp ecx, dword [0x5212d4]
je 0x4da03d
call fcn.004d99e0
inc dword [0x5212d8]
cmp dword [0x5212d8], 2
jg 0x4da067
jmp 0x4d9fe2
mov eax, dword [0x5212f8]
push eax
mov edx, dword [0x5212f4]
push edx
mov ecx, dword [ebx]
push ecx
call fcn.004d9064
inc dword [0x5212d4]
mov eax, dword [ebx]
mov edx, dword [eax + 0x828]
mov dword [ebx], edx
cmp dword [ebx], 0
jne 0x4d9ff6
cmp dword [0x4fd9e4], 0
je 0x4da3f3
cmp dword [0x4fcba0], 0
je 0x4da3f3
push 0
call sub.GDI32.dll_CreateCompatibleDC
mov dword [0x52132c], eax
cmp dword [0x52132c], 0
je 0x4da3f3
mov ecx, dword [0x4fcba0]
push ecx
mov eax, dword [0x52132c]
push eax
call sub.GDI32.dll_SelectObject
mov dword [0x521328], eax
cmp dword [0x4fcccc], 0
jne 0x4da121
push 0xcc0020
push 0
push 0
mov edx, dword [0x52132c]
push edx
mov ecx, dword [0x4fd9e4]
mov eax, dword [ecx + 0x6a8]
push eax
mov edx, dword [esi + 8]
push edx
push 0
push 0
mov ecx, dword [0x5212f4]
push ecx
call sub.GDI32.dll_BitBlt
push 0xcc0020
mov eax, dword [0x4fd9e4]
mov eax, dword [eax + 0x6b0]
add eax, 2
push eax
push 0
mov edx, dword [0x52132c]
push edx
push 4
mov ecx, dword [esi + 8]
push ecx
push eax
push 0
mov eax, dword [0x5212f4]
push eax
call sub.GDI32.dll_BitBlt
jmp 0x4da208
cmp dword [0x4fcccc], 1
jne 0x4da18e
push 0xcc0020
push 0
push 0
mov edx, dword [0x52132c]
push edx
mov ecx, dword [0x4fd9e4]
mov eax, dword [ecx + 0x6a8]
push eax
mov edx, dword [esi + 8]
push edx
push 0
push 0
mov ecx, dword [0x5212f4]
push ecx
call sub.GDI32.dll_BitBlt
push 0xcc0020
mov eax, dword [0x4fd9e4]
mov eax, dword [eax + 0x6b0]
add eax, 2
push eax
push 0
mov edx, dword [0x52132c]
push edx
push 3
mov ecx, dword [esi + 8]
push ecx
push eax
push 0
mov eax, dword [0x5212f4]
push eax
call sub.GDI32.dll_BitBlt
jmp 0x4da208
cmp dword [0x4fcccc], 2
jl 0x4da208
push 0xcc0020
push 0
push 0
mov edx, dword [0x52132c]
push edx
mov ecx, dword [esi + 0xc]
push ecx
mov eax, dword [0x4fd9e4]
mov edx, dword [eax + 0x6a4]
push edx
push 0
push 0
mov ecx, dword [0x5212f4]
push ecx
call sub.GDI32.dll_BitBlt
push 0xcc0020
push 0
mov edx, dword [0x4fd9e4]
mov ecx, dword [edx + 0x6ac]
inc ecx
push ecx
mov edx, dword [0x52132c]
push edx
mov ecx, dword [esi + 0xc]
push ecx
mov eax, dword [0x4fd9e4]
mov eax, dword [eax + 0x6ac]
mov edx, dword [esi + 8]
sub edx, eax
push edx
push 0
inc eax
push eax
mov ecx, dword [0x5212f4]
push ecx
call sub.GDI32.dll_BitBlt
mov dword [0x521330], 0xffffffff
mov eax, dword [0x4fd9e4]
mov dword [ebx], eax
jmp 0x4da38d
mov edx, dword [ebx]
cmp byte [edx + 0x4e4], 0
je 0x4da383
mov ecx, dword [ebx]
push ecx
call fcn.004d98c8
mov dword [0x5212f8], eax
cmp dword [0x5212f8], 0
je 0x4da383
cmp dword [0x4fcccc], 2
jl 0x4da27e
push 0xcc0020
mov eax, dword [ebx]
mov eax, dword [eax + 0x6a8]
add eax, 0xfffffffe
push eax
push 0
mov edx, dword [0x52132c]
push edx
push 2
mov ecx, dword [esi + 8]
push ecx
push eax
push 0
mov eax, dword [0x5212f4]
push eax
call sub.GDI32.dll_BitBlt
cmp dword [0x4fcccc], 2
jge 0x4da2b3
push 0xcc0020
push 0
mov edx, dword [ebx]
mov eax, dword [edx + 0x6a4]
dec eax
push eax
mov edx, dword [0x52132c]
push edx
mov ecx, dword [esi + 0xc]
push ecx
push 1
push 0
push eax
mov eax, dword [0x5212f4]
push eax
call sub.GDI32.dll_BitBlt
cmp dword [0x4fcccc], 2
jge 0x4da318
push 0xcc0020
push 0
mov edx, dword [ebx]
mov ecx, dword [edx + 0x6ac]
inc ecx
push ecx
mov eax, dword [0x52132c]
push eax
mov edx, dword [esi + 0xc]
push edx
push 2
push 0
mov ecx, dword [ebx]
mov eax, dword [ecx + 0x6ac]
inc eax
push eax
mov edx, dword [0x5212f4]
push edx
call sub.GDI32.dll_BitBlt
xor ecx, ecx
mov dword [0x521334], ecx
mov eax, dword [esi + 0xc]
mov dword [0x52133c], eax
mov edx, dword [ebx]
mov ecx, dword [edx + 0x6ac]
inc ecx
mov dword [0x521330], ecx
mov eax, dword [esi + 8]
mov dword [0x521338], eax
cmp dword [0x4fcccc], 2
jl 0x4da383
push 0xcc0020
mov edx, dword [ebx]
mov ecx, dword [edx + 0x6b0]
add ecx, 2
push ecx
push 0
mov eax, dword [0x52132c]
push eax
push 2
mov edx, dword [esi + 8]
push edx
mov ecx, dword [ebx]
mov eax, dword [ecx + 0x6b0]
add eax, 2
push eax
push 0
mov edx, dword [0x5212f4]
push edx
call sub.GDI32.dll_BitBlt
mov ecx, dword [ebx]
mov eax, dword [ecx + 0x6b0]
add eax, 2
mov dword [0x521334], eax
mov edx, dword [esi + 0xc]
mov dword [0x52133c], edx
xor ecx, ecx
mov dword [0x521330], ecx
mov eax, dword [esi + 8]
mov dword [0x521338], eax
mov edx, dword [ebx]
mov ecx, dword [edx + 0x828]
mov dword [ebx], ecx
cmp dword [ebx], 0
jne 0x4da21e
mov eax, dword [0x521330]
cmp eax, 0xffffffff
je 0x4da3d5
push 0xcc0020
mov edx, dword [0x521334]
push edx
push eax
mov ecx, dword [0x52132c]
push ecx
mov edx, dword [0x52133c]
push edx
mov ecx, dword [0x521338]
push ecx
mov edx, dword [0x521334]
push edx
push eax
mov eax, dword [0x5212f4]
push eax
call sub.GDI32.dll_BitBlt
mov ecx, dword [0x521328]
push ecx
mov eax, dword [0x52132c]
push eax
call sub.GDI32.dll_SelectObject
mov edx, dword [0x52132c]
push edx
call sub.GDI32.dll_DeleteDC
push esi
mov ecx, dword [0x4fccd8]
push ecx
call sub.USER32.dll_GetClientRect
cmp dword [0x4fcccc], 3
jne 0x4da483
test edi, edi
jne 0x4da60e
mov dword [esi + 8], 2
mov eax, dword [0x4f2a00]
push eax
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x5212fc], eax
mov edx, dword [0x5212fc]
push edx
push esi
mov ecx, dword [0x5212f4]
push ecx
call sub.USER32.dll_FillRect
mov eax, dword [0x5212fc]
push eax
call sub.GDI32.dll_DeleteObject
mov dword [esi + 8], 1
mov edx, dword [0x4f2a0c]
push edx
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x5212fc], eax
mov ecx, dword [0x5212fc]
push ecx
push esi
mov eax, dword [0x5212f4]
push eax
call sub.USER32.dll_FillRect
mov edx, dword [0x5212fc]
push edx
call sub.GDI32.dll_DeleteObject
jmp 0x4da60e
cmp dword [0x4fcccc], 2
jne 0x4da509
test edi, edi
jne 0x4da60e
mov ecx, dword [esi + 8]
dec ecx
mov dword [esi], ecx
mov eax, dword [0x4f29fc]
push eax
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x5212fc], eax
mov edx, dword [0x5212fc]
push edx
push esi
mov ecx, dword [0x5212f4]
push ecx
call sub.USER32.dll_FillRect
mov eax, dword [0x5212fc]
push eax
call sub.GDI32.dll_DeleteObject
mov edx, dword [esi + 8]
add edx, 0xfffffffe
mov dword [esi], edx
dec dword [esi + 8]
mov ecx, dword [0x4f2a0c]
push ecx
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x5212fc], eax
mov eax, dword [0x5212fc]
push eax
push esi
mov edx, dword [0x5212f4]
push edx
call sub.USER32.dll_FillRect
mov ecx, dword [0x5212fc]
push ecx
call sub.GDI32.dll_DeleteObject
jmp 0x4da60e
cmp dword [0x4fcccc], 1
jne 0x4da58c
mov eax, dword [esi + 0xc]
add eax, 0xfffffffe
mov dword [esi + 4], eax
mov edx, dword [esi + 4]
inc edx
mov dword [esi + 0xc], edx
mov ecx, dword [0x4f2a0c]
push ecx
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x5212fc], eax
mov eax, dword [0x5212fc]
push eax
push esi
mov edx, dword [0x5212f4]
push edx
call sub.USER32.dll_FillRect
mov ecx, dword [0x5212fc]
push ecx
call sub.GDI32.dll_DeleteObject
inc dword [esi + 4]
inc dword [esi + 0xc]
mov eax, dword [0x4f29fc]
push eax
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x5212fc], eax
mov edx, dword [0x5212fc]
push edx
push esi
mov ecx, dword [0x5212f4]
push ecx
call sub.USER32.dll_FillRect
mov eax, dword [0x5212fc]
push eax
call sub.GDI32.dll_DeleteObject
jmp 0x4da60e
cmp dword [0x4fcccc], 0
jne 0x4da60e
xor edx, edx
mov dword [esi + 4], edx
mov dword [esi + 0xc], 1
mov ecx, dword [0x4f2a0c]
push ecx
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x5212fc], eax
mov eax, dword [0x5212fc]
push eax
push esi
mov edx, dword [0x5212f4]
push edx
call sub.USER32.dll_FillRect
mov ecx, dword [0x5212fc]
push ecx
call sub.GDI32.dll_DeleteObject
mov dword [esi + 4], 1
mov dword [esi + 0xc], 2
mov eax, dword [0x4f2a00]
push eax
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x5212fc], eax
mov edx, dword [0x5212fc]
push edx
push esi
mov ecx, dword [0x5212f4]
push ecx
call sub.USER32.dll_FillRect
mov eax, dword [0x5212fc]
push eax
call sub.GDI32.dll_DeleteObject
push esi
mov edx, dword [0x4fccd8]
push edx
call sub.USER32.dll_GetClientRect
xor ecx, ecx
mov dword [0x521314], ecx
test edi, edi
je 0x4da688
mov eax, dword [edi + 0x6a4]
mov dword [esi], eax
mov edx, dword [edi + 0x6ac]
sub edx, eax
inc edx
mov dword [esi + 8], edx
mov eax, dword [0x4fcccc]
cmp eax, 2
jl 0x4da65f
mov edx, dword [edi + 0x6a8]
mov dword [esi + 4], edx
mov ecx, dword [edi + 0x6b0]
sub ecx, dword [esi + 4]
add ecx, 2
mov dword [esi + 0xc], ecx
jmp 0x4da688
dec eax
jne 0x4da676
mov dword [0x521314], 2
add dword [esi + 4], 2
sub dword [esi + 0xc], 5
jmp 0x4da688
mov dword [0x521314], 4
add dword [esi + 4], 4
sub dword [esi + 0xc], 5
push 0xcc0020
mov eax, dword [0x521314]
push eax
push 0
mov edx, dword [0x5212f4]
push edx
mov ecx, dword [esi + 0xc]
push ecx
mov eax, dword [esi + 8]
push eax
mov edx, dword [esi + 4]
push edx
mov ecx, dword [esi]
push ecx
mov eax, dword [0x5212f0]
push eax
call sub.GDI32.dll_BitBlt
cmp dword [0x5212e8], 0
je 0x4da6dd
mov edx, dword [0x5212ec]
push edx
mov ecx, dword [0x5212f4]
push ecx
call sub.GDI32.dll_SelectObject
mov eax, dword [0x5212e8]
push eax
call sub.GDI32.dll_DeleteObject
cmp dword [0x5212f4], 0
je 0x4da719
cmp dword [0x5212e0], 0
je 0x4da70d
mov edx, dword [0x5212e4]
push edx
mov ecx, dword [0x5212f4]
push ecx
call sub.GDI32.dll_SelectObject
mov eax, dword [0x5212e0]
push eax
call sub.GDI32.dll_DeleteObject
mov edx, dword [0x5212f4]
push edx
call sub.GDI32.dll_DeleteDC
cmp dword [0x5212f0], 0
je 0x4da747
mov ecx, dword [0x5212dc]
push ecx
mov eax, dword [0x5212f0]
push eax
call sub.GDI32.dll_SetMapMode
mov edx, dword [0x5212f0]
push edx
mov ecx, dword [0x4fccd8]
push ecx
call sub.USER32.dll_ReleaseDC
xor eax, eax
mov dword [0x4fcd08], eax
pop edi
pop esi
pop ebx
pop ebp
ret 4