Function at 0x4a9a7c
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov ebx, 0x4ee6ec
push edi
call sub.USER32.dll_GetDC
mov dword [0x4ee6e4], eax
cmp dword [0x4ee6e4], 0
je 0x4a9d2c
call fcn.004a9214
push 0x4ee6f8
push 0x69
push edi
call sub.USER32.dll_GetDlgItem
push eax
call sub.USER32.dll_GetWindowRect
mov eax, dword [0x4ee6fc]
mov dword [0x4ee70c], eax
push 0x4ee708
push edi
call sub.USER32.dll_ScreenToClient
mov edx, dword [0x4ee70c]
add edx, 8
mov dword [0x4ee6f0], edx
push 0x4ee6f8
push edi
call sub.USER32.dll_GetClientRect
xor ecx, ecx
mov dword [0x4ee6fc], ecx
xor eax, eax
mov dword [0x4ee6f8], eax
mov edx, dword [0x4ee6f0]
mov dword [0x4ee704], edx
mov ecx, dword [0x4ee6e4]
push ecx
call sub.GDI32.dll_CreateCompatibleDC
mov dword [0x4ee6e8], eax
mov eax, dword [0x4ee704]
push eax
mov edx, dword [0x4ee700]
push edx
mov ecx, dword [0x4ee6e4]
push ecx
call sub.GDI32.dll_CreateCompatibleBitmap
mov dword [0x4ee6dc], eax
mov eax, dword [0x4ee6dc]
push eax
mov edx, dword [0x4ee6e8]
push edx
call sub.GDI32.dll_SelectObject
mov dword [0x4ee6e0], eax
push 1
mov ecx, dword [0x4ee6e8]
push ecx
call sub.GDI32.dll_SetMapMode
cmp dword [0x4e5360], 0
jne 0x4a9b6d
cmp dword [0x4d12a8], 0
je 0x4a9b81
push 0xf
call sub.USER32.dll_GetSysColor
push eax
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x4ee6f4], eax
jmp 0x4a9b93
push 5
call sub.USER32.dll_GetSysColor
push eax
call sub.GDI32.dll_CreateSolidBrush
mov dword [0x4ee6f4], eax
mov eax, dword [0x4ee6f4]
push eax
push 0x4ee6f8
mov edx, dword [0x4ee6e8]
push edx
call sub.USER32.dll_FillRect
mov ecx, dword [0x4ee6f4]
push ecx
call sub.GDI32.dll_DeleteObject
xor eax, eax
mov dword [ebx], eax
jmp 0x4a9c07
cmp eax, dword [ebp + 0x10]
je 0x4a9c05
shl eax, 6
cmp dword [esi + eax + 0x20], 0
je 0x4a9c0e
push 0x4ee6f8
mov edx, dword [ebx]
shl edx, 6
mov ecx, dword [esi + edx + 0x20]
push ecx
call sub.USER32.dll_GetWindowRect
mov eax, dword [0x4ee6fc]
cmp eax, dword [ebp + 0x14]
je 0x4a9c05
mov eax, dword [ebx]
mov edx, eax
shl edx, 6
mov ecx, dword [esi + edx + 0x30]
push ecx
push 0
push eax
push esi
mov eax, dword [0x4ee6e8]
push eax
push edi
call fcn.004a96dc
inc dword [ebx]
mov eax, dword [ebx]
cmp eax, 0x1e
jl 0x4a9bbc
xor edx, edx
mov dword [ebx], edx
jmp 0x4a9c58
cmp eax, dword [ebp + 0x10]
je 0x4a9c56
shl eax, 6
cmp dword [esi + eax + 0x20], 0
je 0x4a9c5f
push 0x4ee6f8
mov ecx, dword [ebx]
shl ecx, 6
mov eax, dword [esi + ecx + 0x20]
push eax
call sub.USER32.dll_GetWindowRect
mov edx, dword [0x4ee6fc]
cmp edx, dword [ebp + 0x14]
jne 0x4a9c56
push 0
push 0
mov ecx, dword [ebx]
push ecx
push esi
mov eax, dword [0x4ee6e8]
push eax
push edi
call fcn.004a96dc
inc dword [ebx]
mov eax, dword [ebx]
cmp eax, 0x1e
jl 0x4a9c14
mov edx, dword [ebp + 0x10]
shl edx, 6
mov ecx, dword [esi + edx + 0x30]
push ecx
push 1
mov eax, dword [ebp + 0x10]
push eax
push esi
mov edx, dword [0x4ee6e8]
push edx
push edi
call fcn.004a96dc
push 0x4ee6f8
push edi
call sub.USER32.dll_GetClientRect
xor ecx, ecx
mov dword [0x4ee6fc], ecx
xor eax, eax
mov dword [0x4ee6f8], eax
mov eax, dword [0x4ee6f0]
mov dword [0x4ee704], eax
push 0xcc0020
push 0
push 0
mov edx, dword [0x4ee6e8]
push edx
push eax
mov ecx, dword [0x4ee700]
push ecx
push 0
push 0
mov eax, dword [0x4ee6e4]
push eax
call sub.GDI32.dll_BitBlt
mov edx, dword [0x4ee6e0]
push edx
mov ecx, dword [0x4ee6e8]
push ecx
call sub.GDI32.dll_SelectObject
mov eax, dword [0x4ee6dc]
push eax
call sub.GDI32.dll_DeleteObject
mov edx, dword [0x4ee6e8]
push edx
call sub.GDI32.dll_DeleteDC
mov ecx, dword [0x4ee6e4]
push ecx
push edi
call sub.USER32.dll_ReleaseDC
xor eax, eax
mov dword [0x4ee6f8], eax
push dword [0x4ee704]
push dword [0x4ee700]
push dword [0x4ee6fc]
push dword [0x4ee6f8]
push 0
push edi
call fcn.004a9320
call fcn.004a92bc
pop edi
pop esi
pop ebx
pop ebp
ret 0x10