Function at 0x456ee4
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
mov esi, 0x54b02c
mov edi, 0x54b040
mov dword [edi], 1
mov byte [0x54b00e], 0
mov byte [0x54b00d], 0
mov byte [0x54b00c], 1
mov dword [0x54b03c], 0xcc0020
mov eax, dword [edi]
mov eax, dword [ebx + eax*4]
test eax, eax
je 0x456f97
mov edx, dword [edi]
cmp byte [eax], 0x2d
jne 0x456f97
push 0x68
mov ecx, dword [edi]
push eax
call fcn.0051833c
add esp, 8
test eax, eax
je 0x456f44
mov byte [0x54b00e], 1
push 0x69
mov eax, dword [edi]
push dword [ebx + eax*4]
call fcn.0051833c
add esp, 8
test eax, eax
je 0x456f61
mov dword [0x54b03c], 0xbb0226
push 0x6e
mov edx, dword [edi]
push dword [ebx + edx*4]
call fcn.0051833c
add esp, 8
test eax, eax
je 0x456f7b
mov byte [0x54b00c], 0
push 0x74
mov ecx, dword [edi]
push dword [ebx + ecx*4]
call fcn.0051833c
add esp, 8
test eax, eax
je 0x456f95
mov byte [0x54b00d], 1
inc dword [edi]
mov eax, dword [edi]
cmp dword [ebx + eax*4], 0
jne 0x456fb1
push 0
push 0
push dword [ebx]
push 0
call fcn.0045abd0
jmp 0x4578af
push 0x5291d8
mov edx, dword [edi]
push dword [ebx + edx*4]
call fcn.005185a0
add esp, 8
test eax, eax
jne 0x456fd1
xor ecx, ecx
mov dword [0x54aff4], ecx
jmp 0x456fe0
mov eax, dword [edi]
push dword [ebx + eax*4]
call fcn.004f9bfc
mov dword [0x54aff4], eax
mov eax, dword [0x54aff4]
test eax, eax
je 0x456ffb
cmp byte [eax + 0x655], 0
je 0x456ffb
cmp dword [eax + 0x750], 0
jne 0x45700d
push 7
push 0
push dword [ebx]
push 0
call fcn.0045abd0
jmp 0x4578af
cmp byte [0x54b00e], 0
je 0x457023
mov edx, dword [0x54aff4]
push dword [edx]
call fcn.0046eb84
mov ecx, dword [edi]
cmp dword [ebx + ecx*4 + 4], 0
je 0x457048
cmp byte [0x54b00d], 0
je 0x457048
mov eax, dword [edi]
push dword [ebx + eax*4 + 4]
call fcn.0052175c
pop ecx
mov dword [0x54b010], eax
inc dword [edi]
mov eax, dword [edi]
cmp dword [ebx + eax*4 + 4], 0
je 0x45707b
cmp dword [ebx + eax*4 + 8], 0
je 0x45707b
cmp dword [ebx + eax*4 + 0xc], 0
je 0x45707b
cmp dword [ebx + eax*4 + 0x10], 0
je 0x45707b
cmp dword [ebx + eax*4 + 0x14], 0
je 0x45707b
cmp dword [ebx + eax*4 + 0x18], 0
je 0x45707b
cmp dword [ebx + eax*4 + 0x1c], 0
jne 0x45708d
push 0
push 0
push dword [ebx]
push 0
call fcn.0045abd0
jmp 0x4578af
mov edx, dword [edi]
push dword [ebx + edx*4 + 4]
call fcn.0052175c
pop ecx
mov dword [0x54b01c], eax
mov ecx, dword [edi]
push dword [ebx + ecx*4 + 8]
call fcn.0052175c
pop ecx
mov dword [0x54b020], eax
mov eax, dword [edi]
push dword [ebx + eax*4 + 0xc]
call fcn.0052175c
pop ecx
inc eax
mov dword [0x54b024], eax
mov edx, dword [edi]
push dword [ebx + edx*4 + 0x10]
call fcn.0052175c
pop ecx
inc eax
mov dword [0x54b028], eax
mov ecx, dword [edi]
push dword [ebx + ecx*4 + 0x14]
call fcn.004f9bfc
mov dword [0x54aff8], eax
mov eax, dword [0x54aff8]
test eax, eax
je 0x4570fe
cmp byte [eax + 0x655], 0
je 0x4570fe
cmp dword [eax + 0x750], 0
jne 0x457110
push 7
push 0
push dword [ebx]
push 0
call fcn.0045abd0
jmp 0x4578af
mov edx, dword [edi]
push dword [ebx + edx*4 + 0x18]
call fcn.0052175c
pop ecx
mov dword [esi], eax
mov ecx, dword [edi]
push dword [ebx + ecx*4 + 0x1c]
call fcn.0052175c
pop ecx
mov dword [esi + 4], eax
mov eax, dword [0x54b024]
mov dword [esi + 8], eax
mov edx, dword [0x54b028]
mov dword [esi + 0xc], edx
mov eax, dword [edi]
cmp dword [ebx + eax*4 + 0x20], 0
je 0x45716e
cmp dword [ebx + eax*4 + 0x24], 0
je 0x45716e
mov edx, dword [edi]
push dword [ebx + edx*4 + 0x20]
call fcn.0052175c
pop ecx
inc eax
mov dword [esi + 8], eax
mov ecx, dword [edi]
push dword [ebx + ecx*4 + 0x24]
call fcn.0052175c
pop ecx
inc eax
mov dword [esi + 0xc], eax
xor eax, eax
mov dword [0x54afe8], eax
xor edx, edx
mov dword [0x54afe0], edx
xor ecx, ecx
mov dword [0x54afe4], ecx
xor eax, eax
mov dword [0x54aff0], eax
xor edx, edx
mov dword [0x54b000], edx
xor ecx, ecx
mov dword [0x54b004], ecx
xor eax, eax
mov dword [0x54b008], eax
mov edi, dword [0x54aff4]
cmp edi, dword [0x54aff8]
jne 0x4574f4
push dword [edi]
call sub.USER32.dll_GetDC
mov ebx, eax
mov dword [0x54affc], ebx
test ebx, ebx
jne 0x4571cf
xor eax, eax
jmp 0x4578af
push dword [0x54b028]
push dword [0x54b024]
push ebx
call sub.GDI32.dll_CreateCompatibleBitmap
mov edi, eax
mov dword [0x54afe8], edi
test edi, edi
je 0x45742f
push dword [0x54affc]
call sub.GDI32.dll_CreateCompatibleDC
mov ebx, eax
mov dword [0x54b000], ebx
test ebx, ebx
je 0x45742f
push dword [0x54afe8]
push ebx
call sub.GDI32.dll_SelectObject
mov dword [0x54afe0], eax
push dword [0x54affc]
call sub.GDI32.dll_CreateCompatibleDC
mov ebx, eax
mov dword [0x54b004], ebx
test ebx, ebx
je 0x45742f
mov eax, dword [0x54aff4]
push dword [eax + 0x750]
push ebx
call sub.GDI32.dll_SelectObject
mov dword [0x54afe4], eax
push 0xcc0020
push dword [0x54b020]
push dword [0x54b01c]
push dword [0x54b004]
push dword [0x54b028]
push dword [0x54b024]
push 0
push 0
push dword [0x54b000]
call sub.GDI32.dll_BitBlt
push 3
push dword [0x54b004]
call sub.GDI32.dll_SetStretchBltMode
push 0
push 0
push 0
push dword [0x54b004]
call sub.GDI32.dll_SetBrushOrgEx
cmp byte [0x54b00d], 0
je 0x457396
push dword [0x54affc]
call sub.GDI32.dll_CreateCompatibleDC
mov ebx, eax
mov dword [0x54b008], ebx
test ebx, ebx
je 0x45742f
push dword [0x54b010]
push dword [0x54b028]
push dword [0x54b024]
push ebx
push dword [0x54b000]
call fcn.00456e3b
mov dword [0x54aff0], eax
push 0
push dword [0x54b004]
call sub.GDI32.dll_SetTextColor
mov dword [0x54b014], eax
push 0xffffff
push dword [0x54b004]
call sub.GDI32.dll_SetBkColor
mov dword [0x54b018], eax
push 0x8800c6
push dword [0x54b028]
push dword [0x54b024]
push 0
push 0
push dword [0x54b008]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [esi + 4]
push dword [esi]
push dword [0x54b004]
call sub.GDI32.dll_StretchBlt
push 0xee0086
push dword [0x54b028]
push dword [0x54b024]
push 0
push 0
push dword [0x54b000]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [esi + 4]
push dword [esi]
push dword [0x54b004]
call sub.GDI32.dll_StretchBlt
push dword [0x54b014]
push dword [0x54b004]
call sub.GDI32.dll_SetTextColor
push dword [0x54b018]
push dword [0x54b004]
call sub.GDI32.dll_SetBkColor
jmp 0x4573c8
push dword [0x54b03c]
push dword [0x54b028]
push dword [0x54b024]
push 0
push 0
push dword [0x54b000]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [esi + 4]
push dword [esi]
push dword [0x54b004]
call sub.GDI32.dll_StretchBlt
cmp byte [0x54b00c], 0
je 0x4573f6
push 0xcc0020
mov edx, dword [esi + 4]
push edx
mov eax, dword [esi]
push eax
push dword [0x54b004]
push dword [esi + 0xc]
push dword [esi + 8]
push edx
push eax
push dword [0x54affc]
call sub.GDI32.dll_BitBlt
mov eax, dword [esi]
add eax, dword [esi + 8]
mov edx, dword [0x54aff4]
cmp eax, dword [edx + 0x760]
jle 0x45740f
mov dword [edx + 0x760], eax
mov eax, dword [esi + 4]
add eax, dword [esi + 0xc]
mov edx, dword [0x54aff4]
cmp eax, dword [edx + 0x764]
jle 0x45742f
mov ecx, dword [0x54aff4]
mov dword [ecx + 0x764], eax
cmp dword [0x54b008], 0
je 0x45746d
cmp dword [0x54aff0], 0
je 0x457462
push dword [0x54aff0]
push dword [0x54b008]
call sub.GDI32.dll_SelectObject
mov dword [0x54aff0], eax
push dword [0x54aff0]
call sub.GDI32.dll_DeleteObject
push dword [0x54b008]
call sub.GDI32.dll_DeleteDC
cmp dword [0x54b004], 0
je 0x45749b
cmp dword [0x54afe4], 0
je 0x457490
push dword [0x54afe4]
push dword [0x54b004]
call sub.GDI32.dll_SelectObject
push dword [0x54b004]
call sub.GDI32.dll_DeleteDC
cmp dword [0x54b000], 0
je 0x4574c9
cmp dword [0x54afe0], 0
je 0x4574be
push dword [0x54afe0]
push dword [0x54b000]
call sub.GDI32.dll_SelectObject
push dword [0x54b000]
call sub.GDI32.dll_DeleteDC
cmp dword [0x54afe8], 0
je 0x4574dd
push dword [0x54afe8]
call sub.GDI32.dll_DeleteObject
push dword [0x54affc]
mov eax, dword [0x54aff4]
push dword [eax]
call sub.USER32.dll_ReleaseDC
jmp 0x4578aa
mov edx, dword [0x54aff8]
push dword [edx]
call sub.USER32.dll_GetDC
mov ebx, eax
mov dword [0x54affc], ebx
test ebx, ebx
jne 0x457514
xor eax, eax
jmp 0x4578af
push ebx
call sub.GDI32.dll_CreateCompatibleDC
mov edi, eax
mov dword [0x54b000], edi
test edi, edi
je 0x4577e9
mov eax, dword [0x54aff4]
push dword [eax + 0x750]
push edi
call sub.GDI32.dll_SelectObject
mov dword [0x54afe0], eax
push dword [0x54affc]
call sub.GDI32.dll_CreateCompatibleDC
mov ebx, eax
mov dword [0x54b004], ebx
test ebx, ebx
je 0x4577e9
mov eax, dword [0x54aff8]
push dword [eax + 0x750]
push ebx
call sub.GDI32.dll_SelectObject
mov dword [0x54afe4], eax
push 3
push dword [0x54b004]
call sub.GDI32.dll_SetStretchBltMode
push 0
push 0
push 0
push dword [0x54b004]
call sub.GDI32.dll_SetBrushOrgEx
cmp byte [0x54b00d], 0
je 0x457737
push dword [0x54affc]
call sub.GDI32.dll_CreateCompatibleDC
mov dword [0x54b008], eax
cmp dword [0x54b008], 0
je 0x4577e9
push dword [0x54b028]
push dword [0x54b024]
push dword [0x54affc]
call sub.GDI32.dll_CreateCompatibleBitmap
mov ebx, eax
mov dword [0x54afe8], ebx
test ebx, ebx
je 0x4577e9
push ebx
push dword [0x54b008]
call sub.GDI32.dll_SelectObject
mov dword [0x54afec], eax
push 0xcc0020
push dword [0x54b020]
push dword [0x54b01c]
push dword [0x54b000]
push dword [0x54b028]
push dword [0x54b024]
push 0
push 0
push dword [0x54b008]
call sub.GDI32.dll_BitBlt
push dword [0x54afec]
push dword [0x54b008]
call sub.GDI32.dll_SelectObject
push dword [0x54afe0]
push dword [0x54b000]
call sub.GDI32.dll_SelectObject
push dword [0x54afe8]
push dword [0x54b000]
call sub.GDI32.dll_SelectObject
mov dword [0x54afe0], eax
push dword [0x54b010]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [0x54b008]
push dword [0x54b000]
call fcn.00456e3b
mov dword [0x54aff0], eax
cmp dword [0x54aff0], 0
je 0x4577e9
push 0
push dword [0x54b004]
call sub.GDI32.dll_SetTextColor
mov dword [0x54b014], eax
push 0xffffff
push dword [0x54b004]
call sub.GDI32.dll_SetBkColor
mov dword [0x54b018], eax
push 0x8800c6
push dword [0x54b028]
push dword [0x54b024]
push 0
push 0
push dword [0x54b008]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [esi + 4]
push dword [esi]
push dword [0x54b004]
call sub.GDI32.dll_StretchBlt
push 0xee0086
push dword [0x54b028]
push dword [0x54b024]
push 0
push 0
push dword [0x54b000]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [esi + 4]
push dword [esi]
push dword [0x54b004]
call sub.GDI32.dll_StretchBlt
push dword [0x54b014]
push dword [0x54b004]
call sub.GDI32.dll_SetTextColor
push dword [0x54b018]
push dword [0x54b004]
call sub.GDI32.dll_SetBkColor
jmp 0x457771
push dword [0x54b03c]
push dword [0x54b028]
push dword [0x54b024]
push dword [0x54b020]
push dword [0x54b01c]
push dword [0x54b000]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [esi + 4]
push dword [esi]
push dword [0x54b004]
call sub.GDI32.dll_StretchBlt
cmp byte [0x54b00c], 0
je 0x4577a0
push 0xcc0020
push dword [esi + 4]
push dword [esi]
push dword [0x54b004]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [esi + 4]
push dword [esi]
push dword [0x54affc]
call sub.GDI32.dll_BitBlt
mov eax, dword [esi]
add eax, dword [esi + 8]
mov edx, dword [0x54aff4]
cmp eax, dword [edx + 0x760]
jle 0x4577c3
mov ecx, dword [esi]
add ecx, dword [esi + 8]
mov eax, dword [0x54aff4]
mov dword [eax + 0x760], ecx
mov edx, dword [esi + 4]
add edx, dword [esi + 0xc]
mov ecx, dword [0x54aff4]
cmp edx, dword [ecx + 0x764]
jle 0x4577e9
mov eax, dword [esi + 4]
add eax, dword [esi + 0xc]
mov edx, dword [0x54aff4]
mov dword [edx + 0x764], eax
cmp dword [0x54b008], 0
je 0x457827
cmp dword [0x54aff0], 0
je 0x45781c
push dword [0x54aff0]
push dword [0x54b008]
call sub.GDI32.dll_SelectObject
mov dword [0x54aff0], eax
push dword [0x54aff0]
call sub.GDI32.dll_DeleteObject
push dword [0x54b008]
call sub.GDI32.dll_DeleteDC
cmp dword [0x54b004], 0
je 0x457855
cmp dword [0x54afe4], 0
je 0x45784a
push dword [0x54afe4]
push dword [0x54b004]
call sub.GDI32.dll_SelectObject
push dword [0x54b004]
call sub.GDI32.dll_DeleteDC
cmp dword [0x54b000], 0
je 0x457883
cmp dword [0x54afe0], 0
je 0x457878
push dword [0x54afe0]
push dword [0x54b000]
call sub.GDI32.dll_SelectObject
push dword [0x54b000]
call sub.GDI32.dll_DeleteDC
cmp dword [0x54afe8], 0
je 0x457897
push dword [0x54afe8]
call sub.GDI32.dll_DeleteObject
push dword [0x54affc]
mov ecx, dword [0x54aff8]
push dword [ecx]
call sub.USER32.dll_ReleaseDC
mov eax, 1
pop edi
pop esi
pop ebx
pop ebp
ret 4