Function at 0x43bf6c
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffa4
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], eax
mov eax, 0x538f08
call fcn.0050f344
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x38], edx
mov ecx, dword [ebp - 0x38]
mov al, byte [ecx]
mov byte [ebp - 0x39], al
movsx edx, byte [ebp - 0x39]
add edx, 0xffffffd0
cmp edx, 8
ja case.0x43bfa0.50
jmp dword [edx*4 + 0x43bfa7]
push 0xcc0020
push 0
push 0
mov ecx, dword [ebp - 0x30]
mov eax, dword [ecx + 0x2f8]
mov eax, dword [eax + 0x160]
call fcn.004c8e28
push eax
push 0x258
push 0x320
push 0
push 0
mov edx, dword [ebp - 0x30]
mov eax, dword [edx + 0x40c]
call fcn.004cd3cc
call fcn.004c8e28
push eax
call sub.gdi32.dll_BitBlt
mov edx, dword [ebp - 0x30]
mov ecx, dword [edx + 0x2f8]
mov edx, 0xffffff
mov eax, dword [ecx + 0x160]
mov eax, dword [eax + 0x14]
call fcn.004c81d0
xor ecx, ecx
mov dword [ebp - 0x44], ecx
push 0x258
lea eax, [ebp - 0x5c]
push eax
mov ecx, 0x320
xor edx, edx
xor eax, eax
call fcn.0044aaec
lea edx, [ebp - 0x5c]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ecx + 0x2f8]
mov eax, dword [eax + 0x160]
call fcn.004c88b0
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
call dword [edx + 0x88]
push 0x14
call sub.kernel32.dll_Sleep
push 0xcc0020
push 0
push 0
mov ecx, dword [ebp - 0x30]
mov eax, dword [ecx + 0x40c]
call fcn.004cd3cc
call fcn.004c8e28
push eax
mov edx, dword [ebp - 0x30]
mov eax, dword [edx + 0x40c]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ecx + 0x40c]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x30]
mov eax, dword [ecx + 0x2f8]
mov eax, dword [eax + 0x160]
call fcn.004c8e28
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
call dword [edx + 0x88]
push 0x14
call sub.kernel32.dll_Sleep
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 7
jl 0x43c031
jmp case.0x43bfa0.50
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
mov edx, dword [eax + 0x44]
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x40], 0x14
mov dword [ebp - 0x44], 0x14
test byte [ebp - 0x44], 2
je 0x43c124
mov edx, dword [ebp - 0x4c]
add edx, dword [ebp - 0x40]
mov eax, dword [sym.mbl.exe__Form1]
mov eax, dword [eax]
call fcn.004e7c70
jmp 0x43c137
mov edx, dword [ebp - 0x4c]
sub edx, dword [ebp - 0x40]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004e7c70
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
call dword [edx + 0x88]
push 0x32
call sub.kernel32.dll_Sleep
sub dword [ebp - 0x44], 2
cmp dword [ebp - 0x44], 0
jg 0x43c10a
mov ecx, dword [sym.mbl.exe__Form1]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ecx]
call fcn.004e7c70
jmp case.0x43bfa0.50
mov eax, dword [ebp - 0x30]
call fcn.0042cf14
jmp case.0x43bfa0.50
mov eax, dword [ebp - 0x30]
call fcn.0042cf14
jmp case.0x43bfa0.50
mov edx, dword [ebp - 0x30]
mov ecx, dword [edx + 0x2f8]
mov edx, 0x14
mov eax, dword [ecx + 0x160]
mov eax, dword [eax + 0xc]
call fcn.004c7bcc
xor ecx, ecx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x44], 1
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x30]
call fcn.0043aaf0
test al, al
je 0x43c1bc
inc dword [ebp - 0x40]
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0x26
jle 0x43c1aa
mov dword [ebp - 0x44], 0x65
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x30]
call fcn.0043aaf0
test al, al
je 0x43c1de
inc dword [ebp - 0x40]
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0x83
jle 0x43c1cc
mov dword [ebp - 0x44], 0xc9
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x30]
call fcn.0043aaf0
test al, al
je 0x43c203
inc dword [ebp - 0x40]
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xfa
jle 0x43c1f1
mov dword [ebp - 0x44], 0x12d
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x30]
call fcn.0043aaf0
test al, al
je 0x43c228
inc dword [ebp - 0x40]
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0x151
jle 0x43c216
mov dword [ebp - 0x44], 0x191
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x30]
call fcn.0043aaf0
test al, al
je 0x43c24d
inc dword [ebp - 0x40]
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0x1bc
jle 0x43c23b
mov dword [ebp - 0x44], 0x1f5
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x30]
call fcn.0043aaf0
test al, al
je 0x43c272
inc dword [ebp - 0x40]
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0x209
jle 0x43c260
mov dword [ebp - 0x44], 0x259
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x30]
call fcn.0043aaf0
test al, al
je 0x43c297
inc dword [ebp - 0x40]
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0x25f
jle 0x43c285
mov ecx, dword [ebp - 0x30]
mov eax, dword [ecx + 0x2f8]
mov edx, dword [eax + 0x160]
mov eax, dword [edx + 0xc]
mov edx, 0x20
call fcn.004c7bcc
mov ecx, dword [ebp - 0x30]
mov eax, dword [ecx + 0x2f8]
mov edx, dword [eax + 0x160]
mov eax, dword [edx + 0xc]
mov edx, 0xffffff
call fcn.004c79e4
mov ecx, dword [ebp - 0x30]
mov eax, dword [ecx + 0x2f8]
mov edx, dword [eax + 0x160]
mov eax, dword [edx + 0x14]
mov dl, 1
call fcn.004c82ec
mov word [ebp - 0x1c], 8
mov eax, dword [ebp - 0x40]
shl eax, 2
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
mov ecx, 0xe4
cdq
idiv ecx
mov edx, eax
lea eax, [ebp - 4]
call fcn.0051ad3c
inc dword [ebp - 0x10]
mov edx, dword [eax]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0x2f8]
mov eax, dword [ecx + 0x160]
call fcn.004c8c64
mov dword [ebp - 0x44], eax
dec dword [ebp - 0x10]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0051ad80
mov word [ebp - 0x1c], 0x14
mov eax, dword [ebp - 0x40]
shl eax, 2
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
mov ecx, 0xe4
cdq
idiv ecx
mov edx, eax
lea eax, [ebp - 8]
call fcn.0051ad3c
inc dword [ebp - 0x10]
mov ecx, dword [eax]
push ecx
mov edx, 0x23a
sub edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 0x2f8]
mov eax, dword [ecx + 0x160]
mov ecx, 0xc
call fcn.0051ab6c
dec dword [ebp - 0x10]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0051ad80
mov ecx, dword [ebp - 0x2c]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret