Function at 0x46f7da
Capabilities:
Capture screenshot

Disassembly:
push 0x90
mov eax, 0x4a7f2d
call fcn.004a0680
mov edi, edx
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x54], ecx
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x9c]
push 0x41c3a4
push 4
push 0x4b70d0
mov dword [ebp - 0x68], eax
call fcn.0049a11d
and dword [ebp - 4], 0
push 0
call dword [sym.imp.USER32.dll_GetDC]
and dword [ebp - 0x74], 0
mov ebx, eax
mov dword [ebp - 0x78], ebx
test ebx, ebx
jne 0x46f844
mov ecx, dword [ebp + 4]
mov edi, 0x8000ffff
push edi
push 0x41bb40
mov edx, 0x63a
call fcn.004239e1
jmp 0x46fafe
push ebx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebp - 0x44], eax
test eax, eax
jne 0x46f86f
mov ecx, dword [ebp + 4]
mov edi, 0x8000ffff
push edi
push 0x41bb40
mov edx, 0x63d
call fcn.004239e1
jmp 0x46faeb
mov ecx, dword [edi + 0x14]
sub ecx, dword [edi + 0xc]
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 8]
push ecx
push eax
push ebx
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], ecx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov esi, eax
mov dword [ebp - 0x4c], esi
test esi, esi
jne 0x46f8b3
mov ecx, dword [ebp + 4]
mov edi, 0x80004005
push edi
push 0x41bb40
mov edx, 0x643
call fcn.004239e1
mov esi, dword [ebp - 0x4c]
jmp 0x46fadc
push esi
push dword [ebp - 0x44]
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x44]
mov byte [ebp - 0x7c], 1
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], ecx
push 0xcc0020
push dword [edi + 0xc]
push dword [edi + 8]
xor edi, edi
push ebx
push dword [ebp - 0x58]
push dword [ebp - 0x5c]
push edi
push edi
push dword [ebp - 0x44]
call dword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
jne 0x46f912
mov ecx, dword [ebp + 4]
mov edx, 0x64e
push 0x41bb40
call fcn.004239fe
mov esi, dword [ebp - 0x4c]
mov edi, eax
jmp 0x46fabd
mov dword [ebp - 0x48], edi
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x48]
mov eax, dword [ebp - 0x54]
push ecx
push 2
push 0
mov eax, dword [eax]
push esi
push eax
mov edi, dword [eax]
mov ecx, dword [edi + 0x54]
call dword [0x4d06a8]
call dword [edi + 0x54]
mov edi, eax
test edi, edi
jns 0x46f957
mov ecx, dword [ebp + 4]
mov edx, 0x656
push edi
push 0x41bb40
call fcn.004239e1
mov esi, dword [ebp - 0x4c]
jmp 0x46fab5
xor ecx, ecx
mov dword [ebp - 0x28], 7
xor eax, eax
mov dword [ebp - 0x2c], ecx
mov word [ebp - 0x3c], ax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x40], ecx
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x40]
mov eax, dword [ebp - 0x48]
push ecx
push 1
lea ecx, [ebp - 0x24]
mov edi, dword [eax]
push ecx
push eax
mov ecx, dword [edi + 0x20]
call dword [0x4d06a8]
call dword [edi + 0x20]
mov edi, eax
test edi, edi
jns 0x46f9ab
mov edx, 0x65c
jmp 0x46fa22
mov eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x54]
and dword [ebp - 0x54], 0
and dword [ebp - 0x64], 0
push ecx
mov edi, dword [eax]
lea ecx, [ebp - 0x64]
push ecx
push eax
mov ecx, dword [edi + 0x14]
call dword [0x4d06a8]
call dword [edi + 0x14]
mov edi, eax
test edi, edi
jns 0x46f9da
mov edx, 0x660
jmp 0x46fa22
mov eax, dword [ebp - 0x40]
lea edx, [ebp - 0x60]
and dword [ebp - 0x60], 0
push edx
push eax
mov ecx, dword [eax]
mov edi, dword [ecx + 0x10]
mov ecx, edi
call dword [0x4d06a8]
call edi
mov edi, eax
test edi, edi
jns 0x46fa02
mov edx, 0x663
jmp 0x46fa22
mov edx, dword [ebp - 0x5c]
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x54]
push eax
push dword [ebp - 0x60]
push dword [ebp - 0x58]
call fcn.0046d12d
mov edi, eax
test edi, edi
jns 0x46fa54
mov edx, 0x666
mov ecx, dword [ebp + 4]
push edi
push 0x41bb40
call fcn.004239e1
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x46fa4f
and dword [ebp - 0x40], 0
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x4d06a8]
call esi
mov esi, dword [ebp - 0x4c]
jmp 0x46faad
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x46fa73
and dword [ebp - 0x40], 0
mov eax, dword [ecx]
push ecx
mov edi, dword [eax + 8]
mov ecx, edi
call dword [0x4d06a8]
call edi
mov edi, dword [ebp - 0x68]
push dword [ebp - 0x6c]
lea ecx, [edi + 4]
mov dword [edi], 1
call fcn.0046f759
mov ecx, dword [ebp - 0x48]
mov eax, dword [edi + 0x2c]
and dword [ebp - 0x48], 0
mov dword [edi + 0x2c], ecx
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], eax
call fcn.004242d2
lea eax, [ebp - 0x3c]
push eax
lea ecx, [edi + 0x30]
call fcn.00425f83
xor edi, edi
lea ecx, [ebp - 0x3c]
call fcn.004258b7
lea ecx, [ebp - 0x48]
call fcn.004242d2
push dword [ebp - 0x50]
push dword [ebp - 0x44]
call dword [sym.imp.GDI32.dll_SelectObject]
mov byte [ebp - 4], 3
cmp dword [ebp - 0x50], 0
je 0x46fadc
push dword [ebp - 0x50]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov byte [ebp - 4], 2
test esi, esi
je 0x46faeb
push esi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov byte [ebp - 4], 1
cmp dword [ebp - 0x44], 0
je 0x46fafe
push dword [ebp - 0x44]
call dword [sym.imp.GDI32.dll_DeleteDC]
mov byte [ebp - 4], 0
test ebx, ebx
je 0x46fb0e
push 0
push ebx
call fcn.004720c7
lea ecx, [ebp - 0x9c]
call fcn.0049a17f
mov eax, edi
call fcn.004a0600
ret 4