Function at 0x4a78e4
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov ebx, 0x4ee51c
mov esi, 0x4ee54c
cmp dword [0x4d3774], 0
je 0x4a824d
cmp dword [0x4d3794], 0
je 0x4a824d
mov eax, dword [0x4d3794]
push eax
call sub.USER32.dll_GetDC
mov dword [0x4ee53c], eax
cmp dword [0x4ee53c], 0
je 0x4a824d
push esi
mov edx, dword [0x4d3794]
push edx
call sub.USER32.dll_GetClientRect
mov ecx, dword [0x4d37b4]
cmp ecx, dword [esi + 8]
je 0x4a7953
call fcn.004a75bc
mov eax, dword [esi + 8]
mov dword [0x4d37b4], eax
push 1
mov edx, dword [0x4ee53c]
push edx
call sub.GDI32.dll_SetMapMode
mov dword [0x4ee528], eax
mov ecx, dword [0x4ee53c]
push ecx
call sub.GDI32.dll_CreateCompatibleDC
mov dword [0x4ee540], eax
test edi, edi
je 0x4a79b4
cmp dword [edi + 0x5d8], 0
jne 0x4a7989
call fcn.004a75bc
mov eax, dword [edi + 0x5d0]
sub eax, dword [edi + 0x5c8]
inc eax
mov dword [esi + 8], eax
cmp dword [0x4d3788], 2
jl 0x4a79b4
mov edx, dword [edi + 0x5d4]
sub edx, dword [edi + 0x5cc]
add edx, 2
mov dword [esi + 0xc], edx
mov ecx, dword [esi + 0xc]
push ecx
mov eax, dword [esi + 8]
push eax
mov edx, dword [0x4ee53c]
push edx
call sub.GDI32.dll_CreateCompatibleBitmap
mov dword [0x4ee52c], eax
mov ecx, dword [0x4ee52c]
push ecx
mov eax, dword [0x4ee540]
push eax
call sub.GDI32.dll_SelectObject
mov dword [0x4ee530], eax
mov edx, dword [0x4cb084]
push edx
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x4ee548], eax
mov ecx, dword [0x4ee548]
push ecx
push esi
mov eax, dword [0x4ee540]
push eax
call sub.USER32.dll_FillRect
mov edx, dword [0x4ee548]
push edx
call sub.GDI32.dll_DeleteObject
mov ecx, dword [0x4d37b0]
push ecx
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xfffffffffffffff8
call sub.GDI32.dll_CreateFontA
mov dword [0x4ee534], eax
mov eax, dword [0x4ee534]
push eax
mov edx, dword [0x4ee540]
push edx
call sub.GDI32.dll_SelectObject
mov dword [0x4ee538], eax
cmp dword [0x4d42ac], 0
je 0x4a7f1d
test edi, edi
je 0x4a7b07
cmp byte [edi + 0x4e0], 0
je 0x4a81e0
push edi
call fcn.004a74a4
mov ebx, eax
mov dword [0x4ee544], ebx
test ebx, ebx
je 0x4a81e0
push esi
push edi
lea esi, [edi + 0x5c8]
mov edi, 0x4ee55c
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
mov eax, dword [edi + 0x5c8]
sub dword [edi + 0x5d0], eax
xor edx, edx
mov dword [edi + 0x5c8], edx
cmp dword [0x4d3788], 2
jl 0x4a7ad8
mov ecx, dword [edi + 0x5cc]
sub dword [edi + 0x5d4], ecx
xor eax, eax
mov dword [edi + 0x5cc], eax
mov edx, dword [0x4ee544]
push edx
mov ecx, dword [0x4ee540]
push ecx
push edi
call fcn.004a6d64
push esi
push edi
add edi, 0x5c8
mov esi, 0x4ee55c
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
jmp 0x4a7f1d
xor eax, eax
mov dword [0x4ee524], eax
mov dword [0x4ee520], 1
mov edx, dword [0x4d4294]
mov dword [ebx], edx
jmp 0x4a7b8e
mov ecx, dword [ebx]
cmp byte [ecx + 0x4e0], 0
je 0x4a7b84
mov eax, dword [ebx]
push eax
call fcn.004a74a4
mov dword [0x4ee544], eax
cmp dword [0x4ee544], 0
je 0x4a7b84
mov edx, dword [ebx]
mov ecx, dword [edx + 0x5d8]
cmp ecx, dword [0x4ee520]
je 0x4a7b69
call fcn.004a75bc
inc dword [0x4ee524]
cmp dword [0x4ee524], 2
jg 0x4a7b93
jmp 0x4a7b0e
mov eax, dword [0x4ee544]
push eax
mov edx, dword [0x4ee540]
push edx
mov ecx, dword [ebx]
push ecx
call fcn.004a6d64
inc dword [0x4ee520]
mov eax, dword [ebx]
mov edx, dword [eax + 0x744]
mov dword [ebx], edx
cmp dword [ebx], 0
jne 0x4a7b22
cmp dword [0x4d4294], 0
je 0x4a7f1d
cmp dword [0x4d3660], 0
je 0x4a7f1d
mov ecx, dword [0x4ee53c]
push ecx
call sub.GDI32.dll_CreateCompatibleDC
mov dword [0x4ee570], eax
cmp dword [0x4ee570], 0
je 0x4a7f1d
mov eax, dword [0x4d3660]
push eax
mov edx, dword [0x4ee570]
push edx
call sub.GDI32.dll_SelectObject
mov dword [0x4ee56c], eax
cmp dword [0x4d3788], 0
jne 0x4a7c51
push 0xcc0020
push 0
push 0
mov ecx, dword [0x4ee570]
push ecx
mov eax, dword [0x4d4294]
mov edx, dword [eax + 0x5cc]
push edx
mov ecx, dword [esi + 8]
push ecx
push 0
push 0
mov eax, dword [0x4ee540]
push eax
call sub.GDI32.dll_BitBlt
push 0xcc0020
mov edx, dword [0x4d4294]
mov eax, dword [edx + 0x5d4]
add eax, 2
push eax
push 0
mov edx, dword [0x4ee570]
push edx
push 4
mov ecx, dword [esi + 8]
push ecx
push eax
push 0
mov eax, dword [0x4ee540]
push eax
call sub.GDI32.dll_BitBlt
jmp 0x4a7d38
cmp dword [0x4d3788], 1
jne 0x4a7cbe
push 0xcc0020
push 0
push 0
mov edx, dword [0x4ee570]
push edx
mov ecx, dword [0x4d4294]
mov eax, dword [ecx + 0x5cc]
push eax
mov edx, dword [esi + 8]
push edx
push 0
push 0
mov ecx, dword [0x4ee540]
push ecx
call sub.GDI32.dll_BitBlt
push 0xcc0020
mov eax, dword [0x4d4294]
mov eax, dword [eax + 0x5d4]
add eax, 2
push eax
push 0
mov edx, dword [0x4ee570]
push edx
push 3
mov ecx, dword [esi + 8]
push ecx
push eax
push 0
mov eax, dword [0x4ee540]
push eax
call sub.GDI32.dll_BitBlt
jmp 0x4a7d38
cmp dword [0x4d3788], 2
jl 0x4a7d38
push 0xcc0020
push 0
push 0
mov edx, dword [0x4ee570]
push edx
mov ecx, dword [esi + 0xc]
push ecx
mov eax, dword [0x4d4294]
mov edx, dword [eax + 0x5c8]
push edx
push 0
push 0
mov ecx, dword [0x4ee540]
push ecx
call sub.GDI32.dll_BitBlt
push 0xcc0020
push 0
mov edx, dword [0x4d4294]
mov ecx, dword [edx + 0x5d0]
inc ecx
push ecx
mov edx, dword [0x4ee570]
push edx
mov ecx, dword [esi + 0xc]
push ecx
mov eax, dword [0x4d4294]
mov eax, dword [eax + 0x5d0]
mov edx, dword [esi + 8]
sub edx, eax
push edx
push 0
inc eax
push eax
mov ecx, dword [0x4ee540]
push ecx
call sub.GDI32.dll_BitBlt
mov dword [0x4ee574], 0xffffffff
mov eax, dword [0x4d4294]
mov dword [ebx], eax
jmp 0x4a7eb7
mov edx, dword [ebx]
cmp byte [edx + 0x4e0], 0
je 0x4a7ead
mov ecx, dword [ebx]
push ecx
call fcn.004a74a4
mov dword [0x4ee544], eax
cmp dword [0x4ee544], 0
je 0x4a7ead
cmp dword [0x4d3788], 2
jl 0x4a7dae
push 0xcc0020
mov eax, dword [ebx]
mov eax, dword [eax + 0x5cc]
add eax, 0xfffffffe
push eax
push 0
mov edx, dword [0x4ee570]
push edx
push 2
mov ecx, dword [esi + 8]
push ecx
push eax
push 0
mov eax, dword [0x4ee540]
push eax
call sub.GDI32.dll_BitBlt
cmp dword [0x4d3788], 2
jge 0x4a7de3
push 0xcc0020
push 0
mov edx, dword [ebx]
mov eax, dword [edx + 0x5c8]
dec eax
push eax
mov edx, dword [0x4ee570]
push edx
mov ecx, dword [esi + 0xc]
push ecx
push 1
push 0
push eax
mov eax, dword [0x4ee540]
push eax
call sub.GDI32.dll_BitBlt
cmp dword [0x4d3788], 2
jge 0x4a7e41
push 0xcc0020
push 0
mov edx, dword [ebx]
mov eax, dword [edx + 0x5d0]
inc eax
push eax
mov edx, dword [0x4ee570]
push edx
mov ecx, dword [esi + 0xc]
push ecx
push 2
push 0
push eax
mov eax, dword [0x4ee540]
push eax
call sub.GDI32.dll_BitBlt
xor edx, edx
mov dword [0x4ee578], edx
mov ecx, dword [esi + 0xc]
mov dword [0x4ee580], ecx
mov eax, dword [ebx]
mov edx, dword [eax + 0x5d0]
inc edx
mov dword [0x4ee574], edx
mov ecx, dword [esi + 8]
mov dword [0x4ee57c], ecx
cmp dword [0x4d3788], 2
jl 0x4a7ead
push 0xcc0020
mov eax, dword [ebx]
mov edx, dword [eax + 0x5d4]
add edx, 2
push edx
push 0
mov ecx, dword [0x4ee570]
push ecx
push 2
mov eax, dword [esi + 8]
push eax
mov edx, dword [ebx]
mov ecx, dword [edx + 0x5d4]
add ecx, 2
push ecx
push 0
mov eax, dword [0x4ee540]
push eax
call sub.GDI32.dll_BitBlt
mov edx, dword [ebx]
mov ecx, dword [edx + 0x5d4]
add ecx, 2
mov dword [0x4ee578], ecx
mov eax, dword [esi + 0xc]
mov dword [0x4ee580], eax
xor edx, edx
mov dword [0x4ee574], edx
mov ecx, dword [esi + 8]
mov dword [0x4ee57c], ecx
mov eax, dword [ebx]
mov edx, dword [eax + 0x744]
mov dword [ebx], edx
cmp dword [ebx], 0
jne 0x4a7d4e
mov eax, dword [0x4ee574]
cmp eax, 0xffffffff
je 0x4a7eff
push 0xcc0020
mov edx, dword [0x4ee578]
push edx
push eax
mov ecx, dword [0x4ee570]
push ecx
mov edx, dword [0x4ee580]
push edx
mov ecx, dword [0x4ee57c]
push ecx
mov edx, dword [0x4ee578]
push edx
push eax
mov eax, dword [0x4ee540]
push eax
call sub.GDI32.dll_BitBlt
mov ecx, dword [0x4ee56c]
push ecx
mov eax, dword [0x4ee570]
push eax
call sub.GDI32.dll_SelectObject
mov edx, dword [0x4ee570]
push edx
call sub.GDI32.dll_DeleteDC
push esi
mov ecx, dword [0x4d3794]
push ecx
call sub.USER32.dll_GetClientRect
cmp dword [0x4d3788], 3
jne 0x4a7fad
test edi, edi
jne 0x4a8138
mov dword [esi + 8], 2
mov eax, dword [0x4cb08c]
push eax
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x4ee548], eax
mov edx, dword [0x4ee548]
push edx
push esi
mov ecx, dword [0x4ee540]
push ecx
call sub.USER32.dll_FillRect
mov eax, dword [0x4ee548]
push eax
call sub.GDI32.dll_DeleteObject
mov dword [esi + 8], 1
mov edx, dword [0x4cb098]
push edx
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x4ee548], eax
mov ecx, dword [0x4ee548]
push ecx
push esi
mov eax, dword [0x4ee540]
push eax
call sub.USER32.dll_FillRect
mov edx, dword [0x4ee548]
push edx
call sub.GDI32.dll_DeleteObject
jmp 0x4a8138
cmp dword [0x4d3788], 2
jne 0x4a8033
test edi, edi
jne 0x4a8138
mov ecx, dword [esi + 8]
dec ecx
mov dword [esi], ecx
mov eax, dword [0x4cb088]
push eax
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x4ee548], eax
mov edx, dword [0x4ee548]
push edx
push esi
mov ecx, dword [0x4ee540]
push ecx
call sub.USER32.dll_FillRect
mov eax, dword [0x4ee548]
push eax
call sub.GDI32.dll_DeleteObject
mov edx, dword [esi + 8]
add edx, 0xfffffffe
mov dword [esi], edx
dec dword [esi + 8]
mov ecx, dword [0x4cb098]
push ecx
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x4ee548], eax
mov eax, dword [0x4ee548]
push eax
push esi
mov edx, dword [0x4ee540]
push edx
call sub.USER32.dll_FillRect
mov ecx, dword [0x4ee548]
push ecx
call sub.GDI32.dll_DeleteObject
jmp 0x4a8138
cmp dword [0x4d3788], 1
jne 0x4a80b6
mov eax, dword [esi + 0xc]
add eax, 0xfffffffe
mov dword [esi + 4], eax
mov edx, dword [esi + 4]
inc edx
mov dword [esi + 0xc], edx
mov ecx, dword [0x4cb098]
push ecx
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x4ee548], eax
mov eax, dword [0x4ee548]
push eax
push esi
mov edx, dword [0x4ee540]
push edx
call sub.USER32.dll_FillRect
mov ecx, dword [0x4ee548]
push ecx
call sub.GDI32.dll_DeleteObject
inc dword [esi + 4]
inc dword [esi + 0xc]
mov eax, dword [0x4cb088]
push eax
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x4ee548], eax
mov edx, dword [0x4ee548]
push edx
push esi
mov ecx, dword [0x4ee540]
push ecx
call sub.USER32.dll_FillRect
mov eax, dword [0x4ee548]
push eax
call sub.GDI32.dll_DeleteObject
jmp 0x4a8138
cmp dword [0x4d3788], 0
jne 0x4a8138
xor edx, edx
mov dword [esi + 4], edx
mov dword [esi + 0xc], 1
mov ecx, dword [0x4cb098]
push ecx
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x4ee548], eax
mov eax, dword [0x4ee548]
push eax
push esi
mov edx, dword [0x4ee540]
push edx
call sub.USER32.dll_FillRect
mov ecx, dword [0x4ee548]
push ecx
call sub.GDI32.dll_DeleteObject
mov dword [esi + 4], 1
mov dword [esi + 0xc], 2
mov eax, dword [0x4cb08c]
push eax
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x4ee548], eax
mov edx, dword [0x4ee548]
push edx
push esi
mov ecx, dword [0x4ee540]
push ecx
call sub.USER32.dll_FillRect
mov eax, dword [0x4ee548]
push eax
call sub.GDI32.dll_DeleteObject
push esi
mov edx, dword [0x4d3794]
push edx
call sub.USER32.dll_GetClientRect
xor ecx, ecx
mov dword [0x4ee560], ecx
test edi, edi
je 0x4a81b2
mov eax, dword [edi + 0x5c8]
mov dword [esi], eax
mov edx, dword [edi + 0x5d0]
sub edx, eax
inc edx
mov dword [esi + 8], edx
mov eax, dword [0x4d3788]
cmp eax, 2
jl 0x4a8189
mov edx, dword [edi + 0x5cc]
mov dword [esi + 4], edx
mov ecx, dword [edi + 0x5d4]
sub ecx, dword [esi + 4]
add ecx, 2
mov dword [esi + 0xc], ecx
jmp 0x4a81b2
dec eax
jne 0x4a81a0
mov dword [0x4ee560], 2
add dword [esi + 4], 2
sub dword [esi + 0xc], 5
jmp 0x4a81b2
mov dword [0x4ee560], 4
add dword [esi + 4], 4
sub dword [esi + 0xc], 5
push 0xcc0020
mov eax, dword [0x4ee560]
push eax
push 0
mov edx, dword [0x4ee540]
push edx
mov ecx, dword [esi + 0xc]
push ecx
mov eax, dword [esi + 8]
push eax
mov edx, dword [esi + 4]
push edx
mov ecx, dword [esi]
push ecx
mov eax, dword [0x4ee53c]
push eax
call sub.GDI32.dll_BitBlt
mov edx, dword [0x4ee538]
push edx
mov ecx, dword [0x4ee540]
push ecx
call sub.GDI32.dll_SelectObject
mov eax, dword [0x4ee534]
push eax
call sub.GDI32.dll_DeleteObject
mov edx, dword [0x4ee530]
push edx
mov ecx, dword [0x4ee540]
push ecx
call sub.GDI32.dll_SelectObject
mov eax, dword [0x4ee52c]
push eax
call sub.GDI32.dll_DeleteObject
mov edx, dword [0x4ee540]
push edx
call sub.GDI32.dll_DeleteDC
mov ecx, dword [0x4ee528]
push ecx
mov eax, dword [0x4ee53c]
push eax
call sub.GDI32.dll_SetMapMode
mov edx, dword [0x4ee53c]
push edx
mov ecx, dword [0x4d3794]
push ecx
call sub.USER32.dll_ReleaseDC
pop edi
pop esi
pop ebx
pop ebp
ret 4