Function at 0x4dc594
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov ebx, 0x5218c4
push edi
call sub.USER32.dll_GetDC
mov dword [0x521890], eax
cmp dword [0x521890], 0
je 0x4dc87e
mov eax, dword [0x521890]
push eax
call fcn.004dbcd8
push 0x52189c
push 0x69
push edi
call sub.USER32.dll_GetDlgItem
push eax
call sub.USER32.dll_GetWindowRect
push 2
push 0x52189c
push edi
push 0
call sub.USER32.dll_MapWindowPoints
mov edx, dword [0x5218a0]
mov dword [0x5218c0], edx
push 0x5218ac
push edi
call sub.USER32.dll_GetClientRect
mov ecx, dword [0x5218c0]
add ecx, 7
mov dword [0x5218b8], ecx
mov eax, dword [0x521890]
push eax
call sub.GDI32.dll_CreateCompatibleDC
mov dword [0x521894], eax
mov edx, dword [0x5218b8]
push edx
mov ecx, dword [0x5218b4]
push ecx
mov eax, dword [0x521890]
push eax
call sub.GDI32.dll_CreateCompatibleBitmap
mov dword [0x521888], eax
mov edx, dword [0x521888]
push edx
mov ecx, dword [0x521894]
push ecx
call sub.GDI32.dll_SelectObject
mov dword [0x52188c], eax
push 1
mov eax, dword [0x521894]
push eax
call sub.GDI32.dll_SetMapMode
cmp dword [0x515ee8], 0
jne 0x4dc675
cmp dword [0x4fa6b8], 0
je 0x4dc689
push 0xf
call sub.USER32.dll_GetSysColor
push eax
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x521898], eax
jmp 0x4dc69b
push 5
call sub.USER32.dll_GetSysColor
push eax
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x521898], eax
mov edx, dword [0x521898]
push edx
push 0x5218ac
mov ecx, dword [0x521894]
push ecx
call sub.USER32.dll_FillRect
mov eax, dword [0x521898]
push eax
call sub.GDI32.dll_DeleteObject
xor edx, edx
mov dword [ebx], edx
jmp 0x4dc71b
cmp eax, dword [ebp + 0x10]
je 0x4dc719
mov ecx, dword [ebx]
mov eax, ecx
shl ecx, 5
add ecx, eax
mov eax, dword [esi + ecx*4 + 0x64]
test eax, eax
je 0x4dc722
push 0x5218ac
mov edx, dword [ebx]
mov ecx, edx
shl edx, 5
add edx, ecx
push eax
call sub.USER32.dll_GetWindowRect
mov eax, dword [0x5218b0]
cmp eax, dword [ebp + 0x14]
je 0x4dc719
mov edx, dword [ebx]
mov ecx, edx
shl edx, 5
add edx, ecx
mov eax, dword [esi + edx*4 + 0x74]
push eax
push 0
mov edx, dword [ebx]
push edx
push esi
mov ecx, dword [0x521894]
push ecx
push edi
call fcn.004dc1f0
inc dword [ebx]
mov eax, dword [ebx]
cmp eax, 0x1e
jl 0x4dc6c4
xor edx, edx
mov dword [ebx], edx
jmp 0x4dc773
cmp eax, dword [ebp + 0x10]
je 0x4dc771
mov ecx, dword [ebx]
mov eax, ecx
shl ecx, 5
add ecx, eax
mov eax, dword [esi + ecx*4 + 0x64]
test eax, eax
je 0x4dc77a
push 0x5218ac
mov edx, dword [ebx]
mov ecx, edx
shl edx, 5
add edx, ecx
push eax
call sub.USER32.dll_GetWindowRect
mov eax, dword [0x5218b0]
cmp eax, dword [ebp + 0x14]
jne 0x4dc771
push 0
push 0
mov edx, dword [ebx]
push edx
push esi
mov ecx, dword [0x521894]
push ecx
push edi
call fcn.004dc1f0
inc dword [ebx]
mov eax, dword [ebx]
cmp eax, 0x1e
jl 0x4dc728
mov edx, dword [ebp + 0x10]
mov ecx, edx
shl edx, 5
add edx, ecx
mov eax, dword [esi + edx*4 + 0x74]
push eax
push 1
mov edx, dword [ebp + 0x10]
push edx
push esi
mov ecx, dword [0x521894]
push ecx
push edi
call fcn.004dc1f0
push 0x5218ac
mov eax, dword [esi + 0x64]
push eax
call sub.USER32.dll_GetWindowRect
mov edx, dword [0x5218b0]
add edx, 0xfffffff9
mov dword [0x5218c0], edx
push 0x5218bc
push edi
call sub.USER32.dll_ScreenToClient
push 0xcc0020
mov edx, dword [0x5218c0]
push edx
mov eax, dword [0x52189c]
push eax
mov ecx, dword [0x521894]
push ecx
mov ecx, dword [0x5218a8]
push ecx
mov ecx, dword [0x5218a4]
push ecx
push edx
push eax
mov eax, dword [0x521890]
push eax
call sub.GDI32.dll_BitBlt
mov edx, dword [0x52188c]
push edx
mov eax, dword [0x521894]
push eax
call sub.GDI32.dll_SelectObject
mov edx, dword [0x521888]
push edx
call sub.GDI32.dll_DeleteObject
mov ecx, dword [0x521894]
push ecx
call sub.GDI32.dll_DeleteDC
mov eax, dword [0x521890]
push eax
push edi
call sub.USER32.dll_ReleaseDC
mov edx, dword [0x5218b8]
mov dword [0x5218c0], edx
push 0x5218bc
push edi
call sub.USER32.dll_ScreenToClient
mov ecx, dword [0x5218c0]
mov dword [0x5218b8], ecx
xor eax, eax
mov dword [0x5218ac], eax
push dword [0x5218b8]
push dword [0x5218b4]
push dword [0x5218b0]
push dword [0x5218ac]
push 0
push edi
call fcn.004dbe00
call fcn.004dbd9c
pop edi
pop esi
pop ebx
pop ebp
ret 0x10