Function at 0x4055b2
Capabilities:
Capture screenshot
Check for time delay via gettickcount

Disassembly:
push 0x54
mov eax, 0x4c945b
call fcn.004a9047
mov ebx, ecx
mov dword [ebp - 0x4c], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea eax, [ebp - 0x3c]
push eax
call fcn.0040100e
call fcn.0040120d
call fcn.004044e8
lea edi, [eax + 0x10]
lea esi, [ebp - 0x3c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor esi, esi
cmp dword [ebx + 0x3a0], esi
jne 0x405609
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x3c]
push eax
push ecx
add ebx, 0x39c
call fcn.0040a0f0
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 4], esi
call fcn.0040100e
lea ebx, [ebp - 0x60]
mov ecx, eax
call fcn.004011d4
mov ebx, dword [ebp - 0x60]
mov edi, dword [ebp - 0x4c]
cmp ebx, dword [ebp - 0x5c]
je 0x4056ad
add ebx, 8
push esi
push esi
lea eax, [ebx + 0x10]
push eax
push str.DISPLAY
call dword [sym.imp.GDI32.dll_CreateDCW]
mov esi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 8
push eax
mov dword [ebp - 0x4c], eax
call esi
push 0xa
push dword [ebp - 0x4c]
mov dword [ebp - 0x50], eax
call esi
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x3c]
push 0xcc0020
push 0
push 0
push dword [ebp - 0x4c]
lea esi, [edi + 0x39c]
push eax
push dword [ebp - 0x50]
push edx
push ecx
call fcn.00409ff5
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x4c]
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
lea esi, [edi + 0x39c]
call fcn.00409fb7
add ebx, 0x58
lea eax, [ebx - 8]
xor esi, esi
cmp eax, dword [ebp - 0x5c]
jne 0x405632
mov eax, dword [edi + 0x3a0]
mov dword [ebp - 0x50], eax
xor eax, eax
push str.uu_creenshot_monitor.jpg
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], esi
mov word [ebp - 0x2c], ax
call fcn.00402015
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x2c]
push eax
lea ecx, [edi + 0x3e0]
mov byte [ebp - 4], 1
call fcn.00401f7a
cmp dword [edi + 0x354], esi
je 0x405790
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0x405701
lea eax, [ebp - 0x2c]
push esi
push eax
lea ecx, [edi + 0x38]
call fcn.004224cf
cmp dword [ebp - 0x18], 8
mov eax, dword [edi + 0x3ac]
mov ecx, dword [edi + 0x3a8]
mov edx, dword [ebp - 0x2c]
jae 0x405723
lea edx, [ebp - 0x2c]
push esi
push esi
push eax
push ecx
push dword [ebp - 0x50]
lea ecx, [edi + 0x38]
push edx
call fcn.00423614
cmp dword [ebp - 0x18], 8
mov eax, dword [edi + 0x3ac]
mov ecx, dword [edi + 0x3a8]
mov edx, dword [ebp - 0x2c]
jae 0x40574b
lea edx, [ebp - 0x2c]
push eax
push ecx
push edx
lea eax, [ebp - 0x48]
push str.file_s_enbaledpifalse_source0_0__d__d
push eax
call fcn.0041c030
add esp, 0x14
mov byte [ebp - 4], 2
cmp dword [ebp - 0x34], 8
mov eax, dword [ebp - 0x48]
jae 0x40576f
lea eax, [ebp - 0x48]
mov edi, dword [edi + 0x354]
mov edx, dword [edi]
push eax
push str.bkimage
mov ecx, edi
call dword [edx + 0x138]
push esi
push 1
lea ecx, [ebp - 0x48]
call fcn.004020c1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push esi
push 1
lea ecx, [ebp - 0x2c]
call fcn.004020c1
cmp dword [ebp - 0x60], esi
je 0x4057af
push dword [ebp - 0x60]
call fcn.004a79c0
pop ecx
call fcn.004a9091
ret