Function at 0x4a4b60
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffdc
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp + 8]
xor eax, eax
push ebp
push 0x4a53c2
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
call fcn.00456c80
push eax
call sub.USER32.DLL_GetDC
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
call sub.GDI32.DLL_CreateCompatibleDC
mov dword [ebp - 8], eax
mov eax, dword [0x5bd958]
push eax
mov eax, dword [0x5bd954]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.GDI32.DLL_CreateCompatibleBitmap
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 8]
push eax
call sub.GDI32.DLL_SelectObject
mov ecx, dword [ebp - 8]
mov dl, 1
mov eax, dword [0x471a30]
call fcn.00471d60
mov dword [ebp - 4], eax
push ebp
push 0x5bd948
mov eax, dword [0x5bd8a4]
push eax
call fcn.004a4aa0
pop ecx
push ebp
push 0x5bd95c
mov eax, dword [0x5bd8a8]
push eax
call fcn.004a4aa0
pop ecx
push ebp
push 0x5bd970
mov eax, dword [0x5bd8b4]
push eax
call fcn.004a4aa0
pop ecx
push ebp
push 0x5bd984
mov eax, dword [0x5bd8c0]
push eax
call fcn.004a4aa0
pop ecx
push ebp
push 0x5bd998
mov eax, dword [0x5bd8d0]
push eax
call fcn.004a4aa0
pop ecx
push ebp
push 0x5bd9ac
mov eax, dword [0x5bd8dc]
push eax
call fcn.004a4aa0
pop ecx
push ebp
push 0x5bd9c0
mov eax, dword [0x5bd8e8]
push eax
call fcn.004a4aa0
pop ecx
cmp dword [ebp + 0xc], 7
je 0x4a4c8b
cmp dword [ebp + 0xc], 8
je 0x4a4c8b
cmp byte [0x5bb57c], 0
je 0x4a4c79
push ebp
push 0x5bd9d4
mov eax, dword [0x5bd8f4]
push eax
call fcn.004a4aa0
pop ecx
jmp 0x4a4c8b
push ebp
push 0x5bd9e8
mov eax, dword [0x5bd900]
push eax
call fcn.004a4aa0
pop ecx
push ebp
push 0x5bd9fc
mov eax, dword [0x5bd90c]
push eax
call fcn.004a4aa0
pop ecx
push ebp
push 0x5bda10
mov eax, dword [0x5bd918]
push eax
call fcn.004a4aa0
pop ecx
push ebp
push 0x5bda24
mov eax, dword [0x5bd924]
push eax
call fcn.004a4aa0
pop ecx
cmp byte [0x5bb584], 0
je 0x4a4cf5
mov edi, 0xa
mov esi, 0x5bdb0d
mov ebx, 0x5bda38
cmp dword [esi], 0
je 0x4a4cec
push ebp
push ebx
mov eax, dword [0x5bd930]
push eax
call fcn.004a4aa0
pop ecx
add ebx, 0x14
add esi, 0x21
dec edi
jne 0x4a4cd9
mov eax, dword [ebp + 0xc]
cmp eax, 0x15
ja case.0x4a4d01.0
jmp dword [eax*4 + 0x4a4d08]
mov eax, dword [ebp + 0x10]
sub eax, 1
jb 0x4a4d72
je 0x4a4d92
dec eax
je 0x4a4db2
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8a8]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8ac]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8b0]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
mov eax, dword [ebp + 0x10]
sub eax, 1
jb 0x4a4de4
je 0x4a4e04
dec eax
je 0x4a4e24
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8b4]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8b8]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8bc]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
mov eax, dword [ebp + 0x10]
sub eax, 1
jb 0x4a4e59
je 0x4a4e79
dec eax
je 0x4a4e99
dec eax
je 0x4a4eb9
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8c0]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8c4]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8c8]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8cc]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
mov eax, dword [ebp + 0x10]
sub eax, 1
jb 0x4a4eeb
je 0x4a4f0b
dec eax
je 0x4a4f2b
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8d0]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8d4]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8d8]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
mov eax, dword [ebp + 0x10]
sub eax, 1
jb 0x4a4f5d
je 0x4a4f7d
dec eax
je 0x4a4f9d
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8dc]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8e0]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8e4]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
mov eax, dword [ebp + 0x10]
sub eax, 1
jb 0x4a4fcf
je 0x4a4fef
dec eax
je 0x4a500f
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8e8]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8ec]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8f0]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
mov eax, dword [ebp + 0x10]
sub eax, 1
jb 0x4a5041
je 0x4a5061
dec eax
je 0x4a5081
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8f4]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8f8]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd8fc]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
mov eax, dword [ebp + 0x10]
sub eax, 1
jb 0x4a50b3
je 0x4a50d3
dec eax
je 0x4a50f3
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd900]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd904]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd908]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
mov eax, dword [ebp + 0x10]
sub eax, 1
jb 0x4a5125
je 0x4a5145
dec eax
je 0x4a5165
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd90c]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd910]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd914]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
mov eax, dword [ebp + 0x10]
sub eax, 1
jb 0x4a5197
je 0x4a51b7
dec eax
je 0x4a51d7
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd918]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd91c]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd920]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
mov eax, dword [ebp + 0x10]
sub eax, 1
jb 0x4a5209
je 0x4a5229
dec eax
je 0x4a5249
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd924]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd928]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd92c]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
cmp byte [0x5bb584], 0
je case.0x4a4d01.0
mov eax, dword [ebp + 0xc]
mov edx, eax
shl eax, 5
add eax, edx
cmp dword [eax + 0x5bd981], 0
je case.0x4a4d01.0
mov eax, dword [ebp + 0x10]
sub eax, 1
jb 0x4a5294
je 0x4a52b1
dec eax
je 0x4a52ce
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd930]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd934]
push eax
call fcn.004a4aa0
pop ecx
jmp case.0x4a4d01.0
push ebp
mov eax, dword [ebp + 0xc]
lea eax, [eax + eax*4]
lea eax, [eax*4 + 0x5bd948]
push eax
mov eax, dword [0x5bd938]
push eax
call fcn.004a4aa0
pop ecx
cmp byte [0x5bb584], 0
je 0x4a5325
mov edi, 0xa
mov ebx, 0x5bdb08
mov esi, 0x5bda38
cmp dword [ebx], 0
je 0x4a531c
push ebp
push esi
lea eax, [ebp - 0x24]
mov edx, dword [ebx]
call fcn.00404f64
mov eax, dword [ebp - 0x24]
push eax
call fcn.004a4ac8
pop ecx
add esi, 0x14
add ebx, 0x21
dec edi
jne 0x4a5301
mov eax, dword [0x5bb580]
xor edx, edx
call fcn.00404f90
je 0x4a5345
push ebp
push 0x5bb594
mov eax, dword [0x5bb580]
push eax
call fcn.004a4ac8
pop ecx
xor eax, eax
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
mov eax, dword [0x5bd954]
mov dword [ebp - 0x18], eax
mov edx, dword [0x5bd958]
mov dword [ebp - 0x14], edx
push 0xcc0020
push 0
push 0
mov ecx, dword [ebp - 8]
push ecx
push edx
push eax
push 0
push 0
mov eax, dword [ebp - 0xc]
push eax
call sub.GDI32.DLL_BitBlt
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00471dd8
mov eax, dword [ebp - 0xc]
push eax
push 0
call sub.USER32.DLL_ReleaseDC
mov eax, dword [ebp - 0x10]
push eax
call sub.GDI32.DLL_DeleteObject
mov eax, dword [ebp - 8]
push eax
call sub.GDI32.DLL_DeleteDC
mov eax, dword [ebp - 4]
call fcn.00403924
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a53c9
lea eax, [ebp - 0x24]
call fcn.00404e18
ret