Function at 0x4b4c78
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 8
add esp, 0xfffff004
push eax
dec eax
jne 0x4b4c81
mov eax, dword [ebp - 4]
add esp, 0xffffffc4
push ebx
push esi
xor eax, eax
mov dword [ebp - 0x8040], eax
mov dword [ebp - 0x803c], eax
mov dword [ebp - 0x8038], eax
mov dword [ebp - 0x8034], eax
mov dword [ebp - 0x802c], eax
mov dword [ebp - 0x8030], eax
xor eax, eax
push ebp
push 0x4b511d
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp + 8]
add eax, 0xfffffe58
xor ecx, ecx
mov edx, 0x4b512c
call fcn.004cce34
mov ebx, dword [0x4d8a88]
mov ebx, dword [ebx]
mov eax, dword [ebp + 8]
add eax, 0xfffffe58
mov ecx, 1
mov edx, 0x4b5130
call fcn.004cce34
mov eax, dword [0x4d8c28]
mov eax, dword [eax]
call fcn.00405f70
mov edx, eax
lea eax, [ebp - 0x8000]
call fcn.0040a764
cmp ebx, 0xffffffff
jne 0x4b4d7f
lea edx, [ebp - 0x8030]
mov eax, dword [0x4d8c28]
mov eax, dword [eax]
call fcn.0040a42c
mov eax, dword [ebp - 0x8030]
lea edx, [ebp - 0x802c]
call fcn.00409a64
mov eax, dword [ebp - 0x802c]
mov edx, 0x4b513c
call fcn.00405ebc
jne 0x4b4d66
mov eax, dword [0x4d8c28]
mov eax, dword [eax]
call fcn.00457124
mov edx, dword [0x4d8a88]
mov dword [edx], eax
jmp 0x4b5076
mov eax, dword [0x4d8c28]
mov eax, dword [eax]
call fcn.004591ac
mov edx, dword [0x4d8a88]
mov dword [edx], eax
jmp 0x4b5076
test ebx, ebx
jne 0x4b5059
lea edx, [ebp - 0x8034]
mov eax, dword [0x4d8c28]
mov eax, dword [eax]
call fcn.00409a64
mov eax, dword [ebp - 0x8034]
mov edx, 0x4b514c
call fcn.00405ebc
jne 0x4b4dcd
push 4
push 0
push 0
push 0
mov eax, dword [0x4d8b94]
mov eax, dword [eax]
push eax
call sub.user32.dll_CopyImage
mov edx, dword [0x4d8a88]
mov dword [edx], eax
jmp 0x4b5076
lea edx, [ebp - 0x8038]
mov eax, dword [0x4d8c28]
mov eax, dword [eax]
call fcn.00409a64
mov eax, dword [ebp - 0x8038]
mov edx, 0x4b515c
call fcn.00405ebc
jne 0x4b4e8f
lea eax, [ebp - 0x8028]
push eax
mov eax, dword [0x4d88d8]
mov eax, dword [eax]
push eax
call sub.user32.dll_GetClientRect
mov eax, dword [0x4d8dd4]
mov eax, dword [eax]
push eax
call sub.gdi32.dll_CreateCompatibleDC
mov ebx, eax
mov eax, dword [ebp - 0x801c]
push eax
mov eax, dword [ebp - 0x8020]
push eax
mov eax, dword [0x4d8dd4]
mov eax, dword [eax]
push eax
call sub.gdi32.dll_CreateCompatibleBitmap
mov esi, eax
push esi
push ebx
call sub.gdi32.dll_SelectObject
xor eax, eax
call fcn.00428304
push eax
push 0
push 0
mov eax, dword [0x4d88d8]
mov eax, dword [eax]
push eax
call sub.user32.dll_GetDC
push eax
mov eax, dword [ebp - 0x801c]
push eax
mov eax, dword [ebp - 0x8020]
push eax
push 0
push 0
push ebx
call sub.gdi32.dll_BitBlt
push 8
push 0
push 0
push 0
push esi
call sub.user32.dll_CopyImage
mov edx, dword [0x4d8a88]
mov dword [edx], eax
push ebx
call sub.gdi32.dll_DeleteObject
jmp 0x4b5076
lea edx, [ebp - 0x803c]
mov eax, dword [0x4d8c28]
mov eax, dword [eax]
call fcn.00409a64
mov eax, dword [ebp - 0x803c]
mov edx, 0x4b516c
call fcn.00405ebc
jne 0x4b4f4d
lea eax, [ebp - 0x8028]
push eax
call sub.user32.dll_GetDesktopWindow
push eax
call sub.user32.dll_GetClientRect
mov eax, dword [0x4d8dd4]
mov eax, dword [eax]
push eax
call sub.gdi32.dll_CreateCompatibleDC
mov ebx, eax
mov eax, dword [ebp - 0x801c]
push eax
mov eax, dword [ebp - 0x8020]
push eax
mov eax, dword [0x4d8dd4]
mov eax, dword [eax]
push eax
call sub.gdi32.dll_CreateCompatibleBitmap
mov esi, eax
push esi
push ebx
call sub.gdi32.dll_SelectObject
xor eax, eax
call fcn.00428304
push eax
push 0
push 0
call sub.user32.dll_GetDesktopWindow
push eax
call sub.user32.dll_GetDC
push eax
mov eax, dword [ebp - 0x801c]
push eax
mov eax, dword [ebp - 0x8020]
push eax
push 0
push 0
push ebx
call sub.gdi32.dll_BitBlt
push 8
push 0
push 0
push 0
push esi
call sub.user32.dll_CopyImage
mov edx, dword [0x4d8a88]
mov dword [edx], eax
push ebx
call sub.gdi32.dll_DeleteObject
jmp 0x4b5076
lea edx, [ebp - 0x8040]
mov eax, dword [0x4d8c28]
mov eax, dword [eax]
call fcn.00409a64
mov eax, dword [ebp - 0x8040]
mov edx, 0x4b517c
call fcn.00405ebc
jne 0x4b5035
mov eax, dword [0x4d8ecc]
cmp dword [eax], 0
jne 0x4b4f8b
xor edx, edx
mov eax, 0x190
call fcn.00457e90
lea eax, [ebp - 0x8028]
push eax
mov eax, dword [0x4d8ecc]
mov eax, dword [eax]
push eax
call sub.user32.dll_GetClientRect
mov eax, dword [0x4d8dd4]
mov eax, dword [eax]
push eax
call sub.gdi32.dll_CreateCompatibleDC
mov ebx, eax
mov eax, dword [ebp - 0x801c]
push eax
mov eax, dword [ebp - 0x8020]
push eax
mov eax, dword [0x4d8dd4]
mov eax, dword [eax]
push eax
call sub.gdi32.dll_CreateCompatibleBitmap
mov esi, eax
push esi
push ebx
call sub.gdi32.dll_SelectObject
mov eax, dword [0x4d8ecc]
mov eax, dword [eax]
push eax
call sub.user32.dll_GetDC
push eax
call sub.gdi32.dll_SwapBuffers
xor eax, eax
call fcn.00428304
push eax
push 0
push 0
mov eax, dword [0x4d8ecc]
mov eax, dword [eax]
push eax
call sub.user32.dll_GetDC
push eax
mov eax, dword [ebp - 0x801c]
push eax
mov eax, dword [ebp - 0x8020]
push eax
push 0
push 0
push ebx
call sub.gdi32.dll_BitBlt
push 8
push 0
push 0
push 0
push esi
call sub.user32.dll_CopyImage
mov edx, dword [0x4d8a88]
mov dword [edx], eax
push ebx
call sub.gdi32.dll_DeleteObject
jmp 0x4b5076
push 0x40
push 0
push 0
push 0
lea eax, [ebp - 0x8000]
push eax
mov eax, dword [0x4dc7f4]
push eax
call sub.user32.dll_LoadImageA
mov edx, dword [0x4d8a88]
mov dword [edx], eax
jmp 0x4b5076
push 0x40
push 0
push 0
push 0
lea eax, [ebp - 0x8000]
push eax
push ebx
call sub.user32.dll_LoadImageA
mov edx, dword [0x4d8a88]
mov dword [edx], eax
lea eax, [ebp - 0x8018]
push eax
push 0x18
mov eax, dword [0x4d8a88]
mov eax, dword [eax]
push eax
call sub.gdi32.dll_GetObjectA
mov eax, dword [0x4d8e70]
mov edx, dword [ebp - 0x8014]
mov dword [eax], edx
mov eax, dword [0x4d8dd0]
mov edx, dword [ebp - 0x8010]
mov dword [eax], edx
movzx ecx, word [ebp - 0x8006]
mov eax, 1
shl eax, cl
mov edx, dword [0x4d8d8c]
mov dword [edx], eax
mov eax, dword [0x4d9078]
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], 0x3ff00000
mov eax, dword [0x4d8a88]
cmp dword [eax], 0
jne 0x4b50e8
mov edx, dword [0x4d8c28]
mov edx, dword [edx]
mov eax, 0xe4
call fcn.004584b4
call fcn.00402f54
mov eax, dword [0x4d8ca0]
mov byte [eax], 2
mov eax, dword [ebp + 8]
mov byte [eax - 0x1a9], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b5124
lea eax, [ebp - 0x8040]
mov edx, 6
call fcn.00405ad0
ret