Function at 0x4eeff0
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x120
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x11c], esi
mov dword [ebp - 0x118], edi
mov dword [ebp - 8], eax
mov dword [ebp - 4], edx
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0
lea ecx, [ebp - 0xc4]
lea edx, [ebp - 0xdc]
mov eax, 1
call fcn.0040b250
call fcn.0040d0d0
push eax
test eax, eax
jne 0x4ef5f3
mov eax, dword [ebp - 8]
mov eax, dword [eax - 0x4c]
test eax, eax
je 0x4ef055
jmp 0x4ef07a
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
call fcn.00514b30
mov edx, dword [ebp - 8]
mov eax, dword [eax + 0x18]
mov dword [edx - 0x4c], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax - 0x4c]
test eax, eax
je 0x4ef075
jmp 0x4ef07a
jmp 0x4ef5f3
call fcn.0044adf0
mov ebx, eax
mov eax, ebx
call fcn.0044af70
test al, al
jne 0x4ef091
jmp 0x4ef122
lea eax, [ebp - 0xe4]
call fcn.00403a80
mov dword [ebp - 0xe4], 0
lea eax, [ebp - 0xe4]
push eax
mov eax, 0x55d310
mov cl, 1
mov edx, 0xf
call fcn.00407310
mov ebx, dword [ebp - 0xe4]
lea eax, [ebp - 0xe8]
call fcn.00403a80
mov dword [ebp - 0xe8], 0
push 0x14
lea eax, [ebp - 0xfc]
push eax
mov eax, dword [ebp - 8]
push dword [eax + 8]
call sub.user32.dll_GetClassNameA
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xfc]
mov cl, 1
mov edx, 0x13
call fcn.00407310
mov eax, dword [ebp - 0xe8]
mov edx, ebx
call fcn.004073e0
test eax, eax
je 0x4ef119
jmp 0x4ef122
mov byte [ebp - 0x9c], 1
jmp 0x4ef129
mov byte [ebp - 0x9c], 0
mov eax, dword [ebp - 8]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 8]
call fcn.004ef640
mov byte [ebp - 0xa0], al
mov eax, dword [ebp - 8]
mov edx, dword [eax - 0x4c]
mov eax, dword [ebp - 8]
mov eax, dword [eax - 0x74]
call fcn.004eb350
mov byte [ebp - 0xa4], al
mov eax, dword [ebp - 8]
mov eax, dword [eax - 0x74]
cmp byte [eax + 0x29], 0
jne 0x4ef182
jmp 0x4ef162
cmp byte [ebp - 0xa4], 0
jne 0x4ef16d
jmp 0x4ef192
mov al, byte [ebp - 0xa0]
test al, al
je 0x4ef182
jmp 0x4ef179
mov eax, dword [ebp - 4]
test eax, eax
jne 0x4ef182
jmp 0x4ef192
mov eax, dword [ebp - 8]
push dword [eax + 8]
call sub.user32.dll_GetParent
mov dword [ebp - 0x80], eax
jmp 0x4ef199
mov dword [ebp - 0x80], 0
mov eax, dword [ebp - 8]
mov eax, dword [eax - 0x74]
cmp byte [eax + 0x29], 0
jne 0x4ef1a7
jmp 0x4ef1b1
mov eax, 1
call fcn.004eb2d0
mov eax, dword [ebp - 4]
test eax, eax
je 0x4ef1ba
jmp 0x4ef1e8
mov eax, dword [ebp - 8]
mov eax, dword [eax - 0x4c]
cmp byte [eax + 0x322], 0
jne 0x4ef1df
jmp 0x4ef1cb
call fcn.0044adf0
mov ebx, eax
mov eax, ebx
call fcn.0044af70
test al, al
jne 0x4ef1df
jmp 0x4ef1e8
mov byte [ebp - 0x98], 1
jmp 0x4ef1ef
mov byte [ebp - 0x98], 0
cmp byte [ebp - 0x98], 0
jne 0x4ef1fd
jmp 0x4ef2f6
mov eax, dword [0x55cef0]
test eax, eax
jne 0x4ef208
jmp 0x4ef235
lea edi, [ebp - 0xb8]
mov esi, 0x55cef0
cld
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
mov eax, 0x55cef0
mov cl, 0
mov edx, 0x10
call fcn.00403540
mov byte [ebp - 0xa8], 1
jmp 0x4ef23c
mov byte [ebp - 0xa8], 0
push 0
call sub.gdi32.dll_CreateCompatibleDC
mov dword [0x55cef0], eax
lea ecx, [ebp - 0x88]
lea edx, [ebp - 0x84]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
call fcn.00453150
mov eax, dword [0x55cef8]
mov edx, dword [ebp - 0x84]
cmp eax, edx
jl 0x4ef281
jmp 0x4ef270
mov eax, dword [0x55cefc]
mov edx, dword [ebp - 0x88]
cmp eax, edx
jl 0x4ef281
jmp 0x4ef2da
push 0
call sub.user32.dll_GetDC
mov dword [ebp - 0xc], eax
mov eax, dword [0x55cef4]
test eax, eax
jne 0x4ef296
jmp 0x4ef2a1
push dword [0x55cef4]
call sub.gdi32.dll_DeleteObject
mov eax, dword [ebp - 0x84]
mov dword [0x55cef8], eax
mov eax, dword [ebp - 0x88]
mov dword [0x55cefc], eax
push dword [ebp - 0x88]
push dword [ebp - 0x84]
push dword [ebp - 0xc]
call sub.gdi32.dll_CreateCompatibleBitmap
mov dword [0x55cef4], eax
push dword [ebp - 0xc]
push 0
call sub.user32.dll_ReleaseDC
push dword [0x55cef4]
push dword [0x55cef0]
call sub.gdi32.dll_SelectObject
mov dword [ebp - 0x10], eax
mov eax, dword [0x55cef0]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 8]
mov byte [eax - 0x5c], 0
lea ecx, [ebp - 0xfc]
lea edx, [ebp - 0x114]
mov eax, 1
call fcn.0040b250
call fcn.0040d0d0
push eax
test eax, eax
jne 0x4ef580
mov eax, dword [ebp - 4]
test eax, eax
je 0x4ef32d
jmp 0x4ef40e
call fcn.0044adf0
mov ebx, eax
mov eax, ebx
call fcn.0044af70
test al, al
jne 0x4ef341
jmp 0x4ef34b
mov eax, 3
call fcn.004eb2d0
lea eax, [ebp - 0x54]
push eax
mov eax, dword [ebp - 8]
push dword [eax + 8]
call sub.user32.dll_BeginPaint
mov dword [ebp - 0xc], eax
call fcn.0044adf0
mov ebx, eax
mov eax, ebx
call fcn.0044af70
test al, al
jne 0x4ef371
jmp 0x4ef37e
mov eax, dword [0x55cee0]
shr eax, 2
mov dword [0x55cee0], eax
cmp byte [ebp - 0x98], 0
jne 0x4ef38c
jmp 0x4ef40c
push 1
mov ecx, 1
mov edx, 0
mov eax, 0
call fcn.004526e0
mov dword [ebp - 0x14], eax
push 4
push dword [ebp - 0x14]
push dword [ebp - 0xc]
call sub.gdi32.dll_GetRandomRgn
cmp eax, 1
je 0x4ef3b9
jmp 0x4ef404
mov eax, dword [0x584160]
cmp eax, 2
je 0x4ef3c5
jmp 0x4ef3f6
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
lea eax, [ebp - 0x7c]
push eax
mov eax, dword [ebp - 8]
push dword [eax + 8]
call sub.user32.dll_ClientToScreen
mov eax, dword [ebp - 0x78]
neg eax
push eax
mov eax, dword [ebp - 0x7c]
neg eax
push eax
push dword [ebp - 0x14]
call sub.gdi32.dll_OffsetRgn
push dword [ebp - 0x14]
push dword [0x55cef0]
call sub.gdi32.dll_SelectClipRgn
push dword [ebp - 0x14]
call sub.gdi32.dll_DeleteObject
jmp 0x4ef41b
mov eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x80]
test eax, eax
jne 0x4ef424
jmp 0x4ef43f
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x90]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
call fcn.005148d0
lea edx, [ebp - 0x74]
mov eax, dword [ebp - 8]
mov eax, dword [eax - 0x4c]
call fcn.00514660
mov dword [ebp - 0x64], 0xf
lea eax, [ebp - 0x54]
mov dword [ebp - 0x5c], eax
mov al, byte [ebp - 0x98]
test al, al
je 0x4ef466
jmp 0x4ef46c
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x60], eax
mov al, byte [ebp - 0xa4]
test al, al
je 0x4ef478
jmp 0x4ef4b6
mov al, byte [ebp - 0x9c]
test al, al
je 0x4ef484
jmp 0x4ef4b6
mov eax, dword [ebp - 8]
mov eax, dword [eax - 0x4c]
or dword [eax + 0x328], 0x20
push 0
push dword [ebp - 0x60]
push 0x14
mov eax, dword [ebp - 8]
mov eax, dword [eax - 0x4c]
call fcn.004cee90
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [ebp - 8]
mov eax, dword [eax - 0x4c]
and dword [eax + 0x328], 0xffffffdf
mov eax, dword [ebp - 0x80]
test eax, eax
jne 0x4ef4bf
jmp 0x4ef4e9
push dword [ebp - 0x60]
call sub.gdi32.dll_SaveDC
mov dword [ebp - 0x8c], eax
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 8]
call fcn.004eb210
push dword [ebp - 0x8c]
push dword [ebp - 0x60]
call sub.gdi32.dll_RestoreDC
mov eax, dword [ebp - 4]
test eax, eax
je 0x4ef4fe
jmp 0x4ef4f2
mov al, byte [ebp - 0xa4]
test al, al
je 0x4ef4fe
jmp 0x4ef536
push dword [ebp - 0x60]
call sub.gdi32.dll_SaveDC
mov dword [ebp - 0x8c], eax
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x60]
call fcn.004545a0
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 8]
mov eax, dword [eax - 0x4c]
call fcn.00522590
push dword [ebp - 0x8c]
push dword [ebp - 0x60]
call sub.gdi32.dll_RestoreDC
cmp byte [ebp - 0x98], 0
jne 0x4ef541
jmp 0x4ef568
push 0xcc0020
push 0
push 0
push dword [0x55cef0]
push dword [ebp - 0x88]
push dword [ebp - 0x84]
push 0
push 0
push dword [ebp - 0xc]
call sub.gdi32.dll_BitBlt
mov eax, dword [ebp - 4]
test eax, eax
je 0x4ef571
jmp 0x4ef580
lea eax, [ebp - 0x54]
push eax
mov eax, dword [ebp - 8]
push dword [eax + 8]
call sub.user32.dll_EndPaint
call fcn.0040b520
cmp byte [ebp - 0x98], 0
jne 0x4ef590
jmp 0x4ef5e4
mov edx, dword [ebp - 0x10]
mov eax, dword [0x55cef0]
call fcn.00453a50
mov eax, dword [0x55cef0]
call fcn.00452750
mov dword [0x55cef0], 0
cmp byte [ebp - 0xa8], 0
jne 0x4ef5bc
jmp 0x4ef5e4
mov eax, dword [0x55cef4]
test eax, eax
jne 0x4ef5c7
jmp 0x4ef5d1
mov eax, dword [0x55cef4]
call fcn.00452780
mov edi, 0x55cef0
lea esi, [ebp - 0xb8]
cld
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
pop eax
test eax, eax
je 0x4ef5f3
dec eax
test eax, eax
je 0x4ef5ee
call fcn.0040b690
call fcn.0040b520
lea eax, [ebp - 0xe8]
call fcn.00403a80
mov dword [ebp - 0xe8], 0
lea eax, [ebp - 0xe4]
call fcn.00403a80
mov dword [ebp - 0xe4], 0
pop eax
test eax, eax
je 0x4ef62c
call fcn.0040b690
mov ebx, dword [ebp - 0x120]
mov esi, dword [ebp - 0x11c]
mov edi, dword [ebp - 0x118]
leave
ret