Function at 0x47ea34
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff60
mov dword [ebp - 0x7c], ecx
mov byte [ebp - 0x75], dl
mov dword [ebp - 0x74], eax
mov eax, 0x53f6c8
call fcn.0050f344
mov word [ebp - 0x60], 8
lea eax, [ebp - 4]
call fcn.00401d1c
inc dword [ebp - 0x54]
mov word [ebp - 0x60], 0x14
mov word [ebp - 0x60], 0x20
lea eax, [ebp - 8]
call fcn.00401d1c
inc dword [ebp - 0x54]
mov word [ebp - 0x60], 0x14
mov word [ebp - 0x60], 0x2c
lea eax, [ebp - 0xc]
call fcn.00401d1c
inc dword [ebp - 0x54]
mov word [ebp - 0x60], 0x14
cmp byte [ebp - 0x75], 1
jne 0x47eb4d
mov edx, dword [0x5604d0]
dec edx
sub edx, 2
jb 0x47eaaf
je 0x47eaf4
jmp 0x47eb0e
mov ecx, dword [0x5604d4]
sub ecx, 1
jb 0x47eabe
je 0x47eae2
jmp 0x47eb0e
cmp dword [0x5604d0], 2
jne 0x47eb0e
mov dword [0x5604d0], 1
xor eax, eax
mov dword [0x5604d4], eax
mov eax, dword [ebp - 0x74]
call fcn.0047f360
jmp 0x47eb0e
xor edx, edx
mov eax, dword [ebp - 0x74]
mov dword [0x5604d4], edx
call fcn.0047f360
jmp 0x47eb0e
mov dword [0x5604d0], 2
xor edx, edx
mov dword [0x5604d4], edx
mov eax, dword [ebp - 0x74]
call fcn.0047f360
dec dword [ebp - 0x54]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0051ad80
mov ecx, dword [ebp - 0x70]
mov dword fs:[0], ecx
jmp 0x47f358
mov eax, dword [0x5604d4]
sub eax, 1
jb 0x47eb62
je 0x47ef71
jmp 0x47f31e
mov edx, dword [0x5604d0]
sub edx, 1
jb 0x47eb7d
sub edx, 2
jb 0x47ebbc
je 0x47ec1f
jmp 0x47ef32
dec dword [ebp - 0x54]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0051ad80
mov ecx, dword [ebp - 0x70]
mov dword fs:[0], ecx
jmp 0x47f358
cmp dword [0x5604e0], 0
jne 0x47ebce
xor eax, eax
mov dword [0x5604d4], eax
jmp 0x47ebd8
mov dword [0x5604d4], 1
mov eax, dword [ebp - 0x74]
call fcn.0047f360
dec dword [ebp - 0x54]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0051ad80
mov ecx, dword [ebp - 0x70]
mov dword fs:[0], ecx
jmp 0x47f358
cmp dword [0x5604e4], 0
jne 0x47ec67
dec dword [ebp - 0x54]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0051ad80
mov ecx, dword [ebp - 0x70]
mov dword fs:[0], ecx
jmp 0x47f358
cmp dword [0x5604e4], 2
jne 0x47ecd5
mov dword [0x5604d0], 1
xor eax, eax
mov dword [0x5604d4], eax
mov eax, dword [ebp - 0x74]
call fcn.0047f360
xor edx, edx
mov dword [0x5604dc], edx
mov dword [0x5604e0], edx
dec dword [ebp - 0x54]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0051ad80
mov eax, dword [ebp - 0x70]
mov dword fs:[0], eax
jmp 0x47f358
mov ecx, dword [0x560290]
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], 0
je 0x47ed05
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov dword [ebp - 0x10], edx
mov word [ebp - 0x60], 0x44
mov edx, 3
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x60], 0x38
mov eax, dword [0x5602b0]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x47ed34
mov edx, dword [ebp - 0x1c]
mov ecx, dword [edx]
mov dword [ebp - 0x18], ecx
mov word [ebp - 0x60], 0x5c
mov edx, 3
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x60], 0x50
mov eax, dword [0x5602ac]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x47ed63
mov edx, dword [ebp - 0x24]
mov ecx, dword [edx]
mov dword [ebp - 0x20], ecx
mov word [ebp - 0x60], 0x74
mov edx, 3
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x60], 0x68
mov eax, dword [0x5602b4]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x47ed92
mov edx, dword [ebp - 0x2c]
mov ecx, dword [edx]
mov dword [ebp - 0x28], ecx
mov word [ebp - 0x60], 0x8c
mov edx, 3
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x60], 0x80
mov eax, dword [0x5602b8]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x47edc1
mov edx, dword [ebp - 0x34]
mov ecx, dword [edx]
mov dword [ebp - 0x30], ecx
mov word [ebp - 0x60], 0xa4
mov edx, 3
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x60], 0x98
xor eax, eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0xa0], 0x5602bc
mov edx, dword [ebp - 0xa0]
mov ecx, dword [edx]
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], 0
je 0x47ee05
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax]
mov dword [ebp - 0x38], edx
mov word [ebp - 0x60], 0xbc
mov edx, 3
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x60], 0xb0
inc dword [ebp - 0x88]
add dword [ebp - 0xa0], 4
cmp dword [ebp - 0x88], 6
jle 0x47edd3
xor eax, eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0xa0], 0x5602d8
mov edx, dword [ebp - 0xa0]
mov ecx, dword [edx]
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x44], 0
je 0x47ee5f
mov eax, dword [ebp - 0x44]
mov edx, dword [eax]
mov dword [ebp - 0x40], edx
mov word [ebp - 0x60], 0xd4
mov edx, 3
mov eax, dword [ebp - 0x44]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x60], 0xc8
inc dword [ebp - 0x88]
add dword [ebp - 0xa0], 4
cmp dword [ebp - 0x88], 4
jl 0x47ee2d
xor eax, eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0xa0], 0x560294
mov edx, dword [ebp - 0xa0]
mov ecx, dword [edx]
mov dword [ebp - 0x4c], ecx
cmp dword [ebp - 0x4c], 0
je 0x47eeb9
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax]
mov dword [ebp - 0x48], edx
mov word [ebp - 0x60], 0xec
mov edx, 3
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x60], 0xe0
inc dword [ebp - 0x88]
add dword [ebp - 0xa0], 4
cmp dword [ebp - 0x88], 5
jle 0x47ee87
mov edx, dword [0x560420]
mov eax, dword [ebp - 0x74]
call fcn.0043a988
mov edx, dword [0x560424]
mov eax, dword [ebp - 0x74]
call fcn.0043a988
xor ecx, ecx
lea eax, [ebp - 0xc]
dec dword [ebp - 0x54]
mov dword [0x54aefc], ecx
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0051ad80
mov ecx, dword [ebp - 0x70]
mov dword fs:[0], ecx
jmp 0x47f358
dec dword [ebp - 0x54]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0051ad80
mov ecx, dword [ebp - 0x70]
mov dword fs:[0], ecx
jmp 0x47f358
mov eax, dword [0x5604d0]
sub eax, 1
jb 0x47ef90
je 0x47efcf
dec eax
je 0x47f17d
dec eax
je 0x47f31e
jmp 0x47f31e
dec dword [ebp - 0x54]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0051ad80
mov ecx, dword [ebp - 0x70]
mov dword fs:[0], ecx
jmp 0x47f358
cmp dword [0x5604e4], 0
je 0x47f155
xor eax, eax
mov dword [ebp - 0x88], eax
mov edx, dword [0x5604e4]
push 0xcc0020
mov ecx, dword [0x560408]
lea edx, [edx + edx*4]
lea edx, [edx + edx*8]
add edx, dword [0x560410]
add edx, 0xffffffd3
push edx
push ecx
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x404]
call fcn.004cd3cc
call fcn.004c8e28
mov ecx, dword [0x5604e4]
mov edx, dword [0x5604e4]
push eax
mov eax, dword [0x56040c]
lea ecx, [ecx + ecx*4]
lea edx, [edx + edx*4]
sub eax, dword [0x560408]
lea ecx, [ecx + ecx*8]
add ecx, dword [0x560410]
lea edx, [edx + edx*8]
add edx, dword [0x560410]
add ecx, 0xffffffd3
sub edx, ecx
mov ecx, dword [0x560408]
push edx
mov edx, dword [0x5604e4]
push eax
lea edx, [edx + edx*4]
lea edx, [edx + edx*8]
add edx, dword [0x560410]
add edx, 0xffffffd3
push edx
push ecx
mov eax, dword [ebp - 0x74]
mov edx, dword [eax + 0x2f8]
mov eax, dword [edx + 0x160]
call fcn.004c8e28
push eax
call sub.gdi32.dll_BitBlt
push 0x32
call sub.kernel32.dll_Sleep
mov edx, dword [0x5604e4]
push 0xcc0020
mov ecx, dword [0x560408]
lea edx, [edx + edx*4]
lea edx, [edx + edx*8]
add edx, dword [0x560410]
add edx, 0xffffffd3
push edx
push ecx
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x400]
call fcn.004cd3cc
call fcn.004c8e28
mov ecx, dword [0x5604e4]
mov edx, dword [0x5604e4]
push eax
mov eax, dword [0x56040c]
lea ecx, [ecx + ecx*4]
lea edx, [edx + edx*4]
sub eax, dword [0x560408]
lea ecx, [ecx + ecx*8]
add ecx, dword [0x560410]
lea edx, [edx + edx*8]
add edx, dword [0x560410]
add ecx, 0xffffffd3
sub edx, ecx
mov ecx, dword [0x560408]
push edx
mov edx, dword [0x5604e4]
push eax
lea edx, [edx + edx*4]
lea edx, [edx + edx*8]
add edx, dword [0x560410]
add edx, 0xffffffd3
push edx
push ecx
mov eax, dword [ebp - 0x74]
mov edx, dword [eax + 0x2f8]
mov eax, dword [edx + 0x160]
call fcn.004c8e28
push eax
call sub.gdi32.dll_BitBlt
push 0x32
call sub.kernel32.dll_Sleep
inc dword [ebp - 0x88]
cmp dword [ebp - 0x88], 5
jl 0x47efe4
mov dword [0x5604d0], 2
xor edx, edx
xor eax, eax
mov dword [0x5604dc], edx
mov dword [0x5604e0], edx
mov dword [0x5604e4], edx
mov dword [0x5604d4], eax
mov eax, dword [ebp - 0x74]
call fcn.0047f360
jmp 0x47f31e
cmp dword [0x5604e4], 0
je 0x47f304
xor edx, edx
mov dword [ebp - 0x88], edx
mov ecx, dword [0x5604e4]
push 0xcc0020
mov eax, dword [0x560408]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*8]
add ecx, dword [0x560410]
add ecx, 0xffffffd3
push ecx
push eax
mov edx, dword [ebp - 0x74]
mov eax, dword [edx + 0x404]
call fcn.004cd3cc
call fcn.004c8e28
mov ecx, dword [0x5604e4]
mov edx, dword [0x5604e4]
push eax
mov eax, dword [0x56040c]
lea ecx, [ecx + ecx*4]
lea edx, [edx + edx*4]
sub eax, dword [0x560408]
lea ecx, [ecx + ecx*8]
add ecx, dword [0x560410]
lea edx, [edx + edx*8]
add edx, dword [0x560410]
add ecx, 0xffffffd3
sub edx, ecx
mov ecx, dword [0x560408]
push edx
mov edx, dword [0x5604e4]
push eax
lea edx, [edx + edx*4]
lea edx, [edx + edx*8]
add edx, dword [0x560410]
add edx, 0xffffffd3
push edx
push ecx
mov eax, dword [ebp - 0x74]
mov edx, dword [eax + 0x2f8]
mov eax, dword [edx + 0x160]
call fcn.004c8e28
push eax
call sub.gdi32.dll_BitBlt
push 0x32
call sub.kernel32.dll_Sleep
mov edx, dword [0x5604e4]
push 0xcc0020
mov ecx, dword [0x560408]
lea edx, [edx + edx*4]
lea edx, [edx + edx*8]
add edx, dword [0x560410]
add edx, 0xffffffd3
push edx
push ecx
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x400]
call fcn.004cd3cc
call fcn.004c8e28
mov ecx, dword [0x5604e4]
mov edx, dword [0x5604e4]
push eax
mov eax, dword [0x56040c]
lea ecx, [ecx + ecx*4]
lea edx, [edx + edx*4]
sub eax, dword [0x560408]
lea ecx, [ecx + ecx*8]
add ecx, dword [0x560410]
lea edx, [edx + edx*8]
add edx, dword [0x560410]
add ecx, 0xffffffd3
sub edx, ecx
mov ecx, dword [0x560408]
push edx
mov edx, dword [0x5604e4]
push eax
lea edx, [edx + edx*4]
lea edx, [edx + edx*8]
add edx, dword [0x560410]
add edx, 0xffffffd3
push edx
push ecx
mov eax, dword [ebp - 0x74]
mov edx, dword [eax + 0x2f8]
mov eax, dword [edx + 0x160]
call fcn.004c8e28
push eax
call sub.gdi32.dll_BitBlt
push 0x32
call sub.kernel32.dll_Sleep
inc dword [ebp - 0x88]
cmp dword [ebp - 0x88], 5
jl 0x47f192
mov dword [0x5604d0], 3
jmp 0x47f30e
mov dword [0x5604d0], 2
xor edx, edx
mov eax, dword [ebp - 0x74]
mov dword [0x5604d4], edx
call fcn.0047f360
dec dword [ebp - 0x54]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0051ad80
mov ecx, dword [ebp - 0x70]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4