Function at 0x4d2264
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff78
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x30], 0
je 0x4d2371
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
mov al, byte [eax + 0x1f8]
mov byte [ebp - 0x19], al
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
mov byte [eax + 0x1f8], 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 4]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
call sub.gdi32.dll_SaveDC
mov dword [ebp - 0x28], eax
lea edx, [ebp - 0x21]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x40]
lea eax, [ebp - 0x21]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
call fcn.00460600
push eax
call sub.user32.dll_ScreenToClient
neg dword [ebp - 0x21]
jno 0x4d22db
call fcn.00403dd4
neg dword [ebp - 0x1d]
jno 0x4d22e5
call fcn.00403dd4
mov ecx, dword [ebp - 0x1d]
mov edx, dword [ebp - 0x21]
mov eax, dword [ebp - 0xc]
call fcn.00458754
push 0
mov eax, dword [ebp - 0xc]
push eax
push 0x14
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
call fcn.00460600
push eax
call sub.user32.dll_SendMessageA
push 0
mov eax, dword [ebp - 0xc]
push eax
push 0xf
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
call fcn.00460600
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
mov edx, dword [0x4cacfc]
call fcn.00404030
test al, al
je 0x4d2355
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
mov edx, dword [0x4cacfc]
call fcn.00404054
xor ecx, ecx
mov edx, dword [ebp - 0xc]
call fcn.004d2514
mov eax, dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.gdi32.dll_RestoreDC
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30]
mov dl, byte [ebp - 0x19]
mov byte [eax + 0x1f8], dl
mov eax, dword [ebp - 4]
cmp byte [eax + 0x1f8], 0
je 0x4d2386
mov eax, dword [ebp - 8]
cmp dword [eax + 4], 0
je 0x4d23bb
mov eax, dword [ebp - 4]
test byte [eax + 0x55], 1
jne 0x4d23ab
mov eax, dword [ebp - 4]
call fcn.0045d330
test eax, eax
jne 0x4d23ab
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00462334
jmp 0x4d24eb
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0045e2b4
jmp 0x4d24eb
push 0
call sub.user32.dll_GetDC
mov dword [ebp - 0xc], eax
lea edx, [ebp - 0x78]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov eax, dword [ebp - 0x6c]
push eax
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.gdi32.dll_CreateCompatibleBitmap
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0xc]
push eax
push 0
call sub.user32.dll_ReleaseDC
push 0
call sub.gdi32.dll_CreateCompatibleDC
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.gdi32.dll_SelectObject
mov dword [ebp - 0x18], eax
xor eax, eax
push ebp
push 0x4d24e4
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x68]
push eax
mov eax, dword [ebp - 4]
call fcn.00460600
push eax
call sub.user32.dll_BeginPaint
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, 0x14
mov eax, dword [ebp - 4]
call fcn.0045afcc
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x10]
mov dword [eax + 4], edx
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.004d2264
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 4], edx
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x10]
push eax
lea edx, [ebp - 0x78]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov eax, dword [ebp - 0x6c]
push eax
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov eax, dword [ebp - 0x80]
push eax
push 0
push 0
mov eax, dword [ebp - 0xc]
push eax
call sub.gdi32.dll_BitBlt
lea eax, [ebp - 0x68]
push eax
mov eax, dword [ebp - 4]
call fcn.00460600
push eax
call sub.user32.dll_EndPaint
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d24eb
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.gdi32.dll_SelectObject
mov eax, dword [ebp - 0x10]
push eax
call sub.gdi32.dll_DeleteDC
mov eax, dword [ebp - 0x14]
push eax
call sub.gdi32.dll_DeleteObject
ret
mov esp, ebp
pop ebp
ret