Function at 0x46344f
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
mov esi, 0x571a7c
mov edi, 0x571a90
mov dword [edi], 1
mov byte [0x571a5e], 0
mov byte [0x571a5d], 0
mov byte [0x571a5c], 1
mov dword [0x571a8c], 0xcc0020
mov eax, dword [edi]
mov eax, dword [ebx + eax*4]
test eax, eax
je 0x463502
mov edx, dword [edi]
cmp byte [eax], 0x2d
jne 0x463502
push 0x68
mov ecx, dword [edi]
push eax
call fcn.00539518
add esp, 8
test eax, eax
je 0x4634af
mov byte [0x571a5e], 1
push 0x69
mov eax, dword [edi]
push dword [ebx + eax*4]
call fcn.00539518
add esp, 8
test eax, eax
je 0x4634cc
mov dword [0x571a8c], 0xbb0226
push 0x6e
mov edx, dword [edi]
push dword [ebx + edx*4]
call fcn.00539518
add esp, 8
test eax, eax
je 0x4634e6
mov byte [0x571a5c], 0
push 0x74
mov ecx, dword [edi]
push dword [ebx + ecx*4]
call fcn.00539518
add esp, 8
test eax, eax
je 0x463500
mov byte [0x571a5d], 1
inc dword [edi]
mov eax, dword [edi]
cmp dword [ebx + eax*4], 0
jne 0x46351c
push 0
push 0
push dword [ebx]
push 0
call fcn.00467118
jmp 0x463e1a
push 0x54bb30
mov edx, dword [edi]
push dword [ebx + edx*4]
call fcn.0053977c
add esp, 8
test eax, eax
jne 0x46353c
xor ecx, ecx
mov dword [0x571a44], ecx
jmp 0x46354b
mov eax, dword [edi]
push dword [ebx + eax*4]
call fcn.005160e8
mov dword [0x571a44], eax
mov eax, dword [0x571a44]
test eax, eax
je 0x463566
cmp byte [eax + 0x668], 0
je 0x463566
cmp dword [eax + 0x77c], 0
jne 0x463578
push 7
push 0
push dword [ebx]
push 0
call fcn.00467118
jmp 0x463e1a
cmp byte [0x571a5e], 0
je 0x46358e
mov edx, dword [0x571a44]
push dword [edx]
call fcn.0047f090
mov ecx, dword [edi]
cmp dword [ebx + ecx*4 + 4], 0
je 0x4635b3
cmp byte [0x571a5d], 0
je 0x4635b3
mov eax, dword [edi]
push dword [ebx + eax*4 + 4]
call fcn.00542dbc
pop ecx
mov dword [0x571a60], eax
inc dword [edi]
mov eax, dword [edi]
cmp dword [ebx + eax*4 + 4], 0
je 0x4635e6
cmp dword [ebx + eax*4 + 8], 0
je 0x4635e6
cmp dword [ebx + eax*4 + 0xc], 0
je 0x4635e6
cmp dword [ebx + eax*4 + 0x10], 0
je 0x4635e6
cmp dword [ebx + eax*4 + 0x14], 0
je 0x4635e6
cmp dword [ebx + eax*4 + 0x18], 0
je 0x4635e6
cmp dword [ebx + eax*4 + 0x1c], 0
jne 0x4635f8
push 0
push 0
push dword [ebx]
push 0
call fcn.00467118
jmp 0x463e1a
mov edx, dword [edi]
push dword [ebx + edx*4 + 4]
call fcn.00542dbc
pop ecx
mov dword [0x571a6c], eax
mov ecx, dword [edi]
push dword [ebx + ecx*4 + 8]
call fcn.00542dbc
pop ecx
mov dword [0x571a70], eax
mov eax, dword [edi]
push dword [ebx + eax*4 + 0xc]
call fcn.00542dbc
pop ecx
inc eax
mov dword [0x571a74], eax
mov edx, dword [edi]
push dword [ebx + edx*4 + 0x10]
call fcn.00542dbc
pop ecx
inc eax
mov dword [0x571a78], eax
mov ecx, dword [edi]
push dword [ebx + ecx*4 + 0x14]
call fcn.005160e8
mov dword [0x571a48], eax
mov eax, dword [0x571a48]
test eax, eax
je 0x463669
cmp byte [eax + 0x668], 0
je 0x463669
cmp dword [eax + 0x77c], 0
jne 0x46367b
push 7
push 0
push dword [ebx]
push 0
call fcn.00467118
jmp 0x463e1a
mov edx, dword [edi]
push dword [ebx + edx*4 + 0x18]
call fcn.00542dbc
pop ecx
mov dword [esi], eax
mov ecx, dword [edi]
push dword [ebx + ecx*4 + 0x1c]
call fcn.00542dbc
pop ecx
mov dword [esi + 4], eax
mov eax, dword [0x571a74]
mov dword [esi + 8], eax
mov edx, dword [0x571a78]
mov dword [esi + 0xc], edx
mov eax, dword [edi]
cmp dword [ebx + eax*4 + 0x20], 0
je 0x4636d9
cmp dword [ebx + eax*4 + 0x24], 0
je 0x4636d9
mov edx, dword [edi]
push dword [ebx + edx*4 + 0x20]
call fcn.00542dbc
pop ecx
inc eax
mov dword [esi + 8], eax
mov ecx, dword [edi]
push dword [ebx + ecx*4 + 0x24]
call fcn.00542dbc
pop ecx
inc eax
mov dword [esi + 0xc], eax
xor eax, eax
mov dword [0x571a38], eax
xor edx, edx
mov dword [0x571a30], edx
xor ecx, ecx
mov dword [0x571a34], ecx
xor eax, eax
mov dword [0x571a40], eax
xor edx, edx
mov dword [0x571a50], edx
xor ecx, ecx
mov dword [0x571a54], ecx
xor eax, eax
mov dword [0x571a58], eax
mov edi, dword [0x571a44]
cmp edi, dword [0x571a48]
jne 0x463a5f
push dword [edi]
call sub.USER32.dll_GetDC
mov ebx, eax
mov dword [0x571a4c], ebx
test ebx, ebx
jne 0x46373a
xor eax, eax
jmp 0x463e1a
push dword [0x571a78]
push dword [0x571a74]
push ebx
call sub.GDI32.dll_CreateCompatibleBitmap
mov edi, eax
mov dword [0x571a38], edi
test edi, edi
je 0x46399a
push dword [0x571a4c]
call sub.GDI32.dll_CreateCompatibleDC
mov ebx, eax
mov dword [0x571a50], ebx
test ebx, ebx
je 0x46399a
push dword [0x571a38]
push ebx
call sub.GDI32.dll_SelectObject
mov dword [0x571a30], eax
push dword [0x571a4c]
call sub.GDI32.dll_CreateCompatibleDC
mov ebx, eax
mov dword [0x571a54], ebx
test ebx, ebx
je 0x46399a
mov eax, dword [0x571a44]
push dword [eax + 0x77c]
push ebx
call sub.GDI32.dll_SelectObject
mov dword [0x571a34], eax
push 0xcc0020
push dword [0x571a70]
push dword [0x571a6c]
push dword [0x571a54]
push dword [0x571a78]
push dword [0x571a74]
push 0
push 0
push dword [0x571a50]
call sub.GDI32.dll_BitBlt
push 3
push dword [0x571a54]
call sub.GDI32.dll_SetStretchBltMode
push 0
push 0
push 0
push dword [0x571a54]
call sub.GDI32.dll_SetBrushOrgEx
cmp byte [0x571a5d], 0
je 0x463901
push dword [0x571a4c]
call sub.GDI32.dll_CreateCompatibleDC
mov ebx, eax
mov dword [0x571a58], ebx
test ebx, ebx
je 0x46399a
push dword [0x571a60]
push dword [0x571a78]
push dword [0x571a74]
push ebx
push dword [0x571a50]
call fcn.004633a6
mov dword [0x571a40], eax
push 0
push dword [0x571a54]
call sub.GDI32.dll_SetTextColor
mov dword [0x571a64], eax
push 0xffffff
push dword [0x571a54]
call sub.GDI32.dll_SetBkColor
mov dword [0x571a68], eax
push 0x8800c6
push dword [0x571a78]
push dword [0x571a74]
push 0
push 0
push dword [0x571a58]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [esi + 4]
push dword [esi]
push dword [0x571a54]
call sub.GDI32.dll_StretchBlt
push 0xee0086
push dword [0x571a78]
push dword [0x571a74]
push 0
push 0
push dword [0x571a50]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [esi + 4]
push dword [esi]
push dword [0x571a54]
call sub.GDI32.dll_StretchBlt
push dword [0x571a64]
push dword [0x571a54]
call sub.GDI32.dll_SetTextColor
push dword [0x571a68]
push dword [0x571a54]
call sub.GDI32.dll_SetBkColor
jmp 0x463933
push dword [0x571a8c]
push dword [0x571a78]
push dword [0x571a74]
push 0
push 0
push dword [0x571a50]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [esi + 4]
push dword [esi]
push dword [0x571a54]
call sub.GDI32.dll_StretchBlt
cmp byte [0x571a5c], 0
je 0x463961
push 0xcc0020
mov edx, dword [esi + 4]
push edx
mov eax, dword [esi]
push eax
push dword [0x571a54]
push dword [esi + 0xc]
push dword [esi + 8]
push edx
push eax
push dword [0x571a4c]
call sub.GDI32.dll_BitBlt
mov eax, dword [esi]
add eax, dword [esi + 8]
mov edx, dword [0x571a44]
cmp eax, dword [edx + 0x78c]
jle 0x46397a
mov dword [edx + 0x78c], eax
mov eax, dword [esi + 4]
add eax, dword [esi + 0xc]
mov edx, dword [0x571a44]
cmp eax, dword [edx + 0x790]
jle 0x46399a
mov ecx, dword [0x571a44]
mov dword [ecx + 0x790], eax
cmp dword [0x571a58], 0
je 0x4639d8
cmp dword [0x571a40], 0
je 0x4639cd
push dword [0x571a40]
push dword [0x571a58]
call sub.GDI32.dll_SelectObject
mov dword [0x571a40], eax
push dword [0x571a40]
call sub.GDI32.dll_DeleteObject
push dword [0x571a58]
call sub.GDI32.dll_DeleteDC
cmp dword [0x571a54], 0
je 0x463a06
cmp dword [0x571a34], 0
je 0x4639fb
push dword [0x571a34]
push dword [0x571a54]
call sub.GDI32.dll_SelectObject
push dword [0x571a54]
call sub.GDI32.dll_DeleteDC
cmp dword [0x571a50], 0
je 0x463a34
cmp dword [0x571a30], 0
je 0x463a29
push dword [0x571a30]
push dword [0x571a50]
call sub.GDI32.dll_SelectObject
push dword [0x571a50]
call sub.GDI32.dll_DeleteDC
cmp dword [0x571a38], 0
je 0x463a48
push dword [0x571a38]
call sub.GDI32.dll_DeleteObject
push dword [0x571a4c]
mov eax, dword [0x571a44]
push dword [eax]
call sub.USER32.dll_ReleaseDC
jmp 0x463e15
mov edx, dword [0x571a48]
push dword [edx]
call sub.USER32.dll_GetDC
mov ebx, eax
mov dword [0x571a4c], ebx
test ebx, ebx
jne 0x463a7f
xor eax, eax
jmp 0x463e1a
push ebx
call sub.GDI32.dll_CreateCompatibleDC
mov edi, eax
mov dword [0x571a50], edi
test edi, edi
je 0x463d54
mov eax, dword [0x571a44]
push dword [eax + 0x77c]
push edi
call sub.GDI32.dll_SelectObject
mov dword [0x571a30], eax
push dword [0x571a4c]
call sub.GDI32.dll_CreateCompatibleDC
mov ebx, eax
mov dword [0x571a54], ebx
test ebx, ebx
je 0x463d54
mov eax, dword [0x571a48]
push dword [eax + 0x77c]
push ebx
call sub.GDI32.dll_SelectObject
mov dword [0x571a34], eax
push 3
push dword [0x571a54]
call sub.GDI32.dll_SetStretchBltMode
push 0
push 0
push 0
push dword [0x571a54]
call sub.GDI32.dll_SetBrushOrgEx
cmp byte [0x571a5d], 0
je 0x463ca2
push dword [0x571a4c]
call sub.GDI32.dll_CreateCompatibleDC
mov dword [0x571a58], eax
cmp dword [0x571a58], 0
je 0x463d54
push dword [0x571a78]
push dword [0x571a74]
push dword [0x571a4c]
call sub.GDI32.dll_CreateCompatibleBitmap
mov ebx, eax
mov dword [0x571a38], ebx
test ebx, ebx
je 0x463d54
push ebx
push dword [0x571a58]
call sub.GDI32.dll_SelectObject
mov dword [0x571a3c], eax
push 0xcc0020
push dword [0x571a70]
push dword [0x571a6c]
push dword [0x571a50]
push dword [0x571a78]
push dword [0x571a74]
push 0
push 0
push dword [0x571a58]
call sub.GDI32.dll_BitBlt
push dword [0x571a3c]
push dword [0x571a58]
call sub.GDI32.dll_SelectObject
push dword [0x571a30]
push dword [0x571a50]
call sub.GDI32.dll_SelectObject
push dword [0x571a38]
push dword [0x571a50]
call sub.GDI32.dll_SelectObject
mov dword [0x571a30], eax
push dword [0x571a60]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [0x571a58]
push dword [0x571a50]
call fcn.004633a6
mov dword [0x571a40], eax
cmp dword [0x571a40], 0
je 0x463d54
push 0
push dword [0x571a54]
call sub.GDI32.dll_SetTextColor
mov dword [0x571a64], eax
push 0xffffff
push dword [0x571a54]
call sub.GDI32.dll_SetBkColor
mov dword [0x571a68], eax
push 0x8800c6
push dword [0x571a78]
push dword [0x571a74]
push 0
push 0
push dword [0x571a58]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [esi + 4]
push dword [esi]
push dword [0x571a54]
call sub.GDI32.dll_StretchBlt
push 0xee0086
push dword [0x571a78]
push dword [0x571a74]
push 0
push 0
push dword [0x571a50]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [esi + 4]
push dword [esi]
push dword [0x571a54]
call sub.GDI32.dll_StretchBlt
push dword [0x571a64]
push dword [0x571a54]
call sub.GDI32.dll_SetTextColor
push dword [0x571a68]
push dword [0x571a54]
call sub.GDI32.dll_SetBkColor
jmp 0x463cdc
push dword [0x571a8c]
push dword [0x571a78]
push dword [0x571a74]
push dword [0x571a70]
push dword [0x571a6c]
push dword [0x571a50]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [esi + 4]
push dword [esi]
push dword [0x571a54]
call sub.GDI32.dll_StretchBlt
cmp byte [0x571a5c], 0
je 0x463d0b
push 0xcc0020
push dword [esi + 4]
push dword [esi]
push dword [0x571a54]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [esi + 4]
push dword [esi]
push dword [0x571a4c]
call sub.GDI32.dll_BitBlt
mov eax, dword [esi]
add eax, dword [esi + 8]
mov edx, dword [0x571a44]
cmp eax, dword [edx + 0x78c]
jle 0x463d2e
mov ecx, dword [esi]
add ecx, dword [esi + 8]
mov eax, dword [0x571a44]
mov dword [eax + 0x78c], ecx
mov edx, dword [esi + 4]
add edx, dword [esi + 0xc]
mov ecx, dword [0x571a44]
cmp edx, dword [ecx + 0x790]
jle 0x463d54
mov eax, dword [esi + 4]
add eax, dword [esi + 0xc]
mov edx, dword [0x571a44]
mov dword [edx + 0x790], eax
cmp dword [0x571a58], 0
je 0x463d92
cmp dword [0x571a40], 0
je 0x463d87
push dword [0x571a40]
push dword [0x571a58]
call sub.GDI32.dll_SelectObject
mov dword [0x571a40], eax
push dword [0x571a40]
call sub.GDI32.dll_DeleteObject
push dword [0x571a58]
call sub.GDI32.dll_DeleteDC
cmp dword [0x571a54], 0
je 0x463dc0
cmp dword [0x571a34], 0
je 0x463db5
push dword [0x571a34]
push dword [0x571a54]
call sub.GDI32.dll_SelectObject
push dword [0x571a54]
call sub.GDI32.dll_DeleteDC
cmp dword [0x571a50], 0
je 0x463dee
cmp dword [0x571a30], 0
je 0x463de3
push dword [0x571a30]
push dword [0x571a50]
call sub.GDI32.dll_SelectObject
push dword [0x571a50]
call sub.GDI32.dll_DeleteDC
cmp dword [0x571a38], 0
je 0x463e02
push dword [0x571a38]
call sub.GDI32.dll_DeleteObject
push dword [0x571a4c]
mov ecx, dword [0x571a48]
push dword [ecx]
call sub.USER32.dll_ReleaseDC
mov eax, 1
pop edi
pop esi
pop ebx
pop ebp
ret 4