Function at 0x448b27
Capabilities:
Capture screenshot
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
push edi
xor edi, edi
cmp dword [0x4924d8], edi
jne 0x448dcc
push ebx
push esi
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetWindowDC]
mov ebx, dword [ebp + 0xc]
neg ebx
sbb ebx, ebx
and ebx, 0xffffffeb
push eax
mov dword [ebp - 8], eax
add ebx, 0x15
call fcn.004479b5
push dword [0x491c80]
call fcn.004479db
pop ecx
pop ecx
push 0x1f
lea eax, [ebp - 0x40]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetWindowTextA]
xor esi, esi
cmp byte [ebp - 0x40], 0
mov byte [ebp - 0x21], 0
lea eax, [ebp - 0x40]
mov dword [ebp - 0x14], esi
je 0x448bc5
mov cl, byte [eax]
inc eax
cmp cl, 0x61
jl 0x448b9b
cmp cl, 0x7a
jg 0x448b9b
add cl, 0xe0
cmp cl, 0x41
jl 0x448bb7
cmp cl, 0x5a
jg 0x448bb7
movsx ecx, cl
mov ecx, dword [ecx*4 + 0x491b14]
cmp ecx, edi
je 0x448bb7
add esi, ecx
jmp 0x448bbd
add esi, dword [0x4838a8]
cmp byte [eax], 0
jne 0x448b8b
mov dword [ebp - 0x14], esi
lea ecx, [esi + 0x18]
mov eax, ecx
cdq
push 0x19
pop esi
idiv esi
mov eax, dword [ebp + 0x10]
add eax, 0xffffff9c
sub ecx, edx
cmp ecx, eax
mov dword [ebp - 0xc], ecx
jle 0x448be2
mov dword [ebp - 0xc], eax
mov esi, 0xcc0020
push esi
push ebx
push edi
push dword [0x491b7c]
push 0x14
push 0x19
push edi
push edi
push dword [ebp - 8]
mov edi, dword [sym.imp.GDI32.dll_BitBlt]
call edi
mov eax, dword [ebp + 0x10]
sub eax, dword [ebp - 0xc]
push 0x19
add eax, 0xffffff9c
cdq
pop ecx
idiv ecx
mov dword [ebp - 4], 0x19
test eax, eax
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x10], eax
je 0x448c72
test al, 1
je 0x448c42
push esi
push ebx
push 0x68
push dword [0x491b7c]
push 0x14
push 0xc
push 0
push ecx
push dword [ebp - 8]
call edi
mov dword [ebp - 4], 0x25
mov eax, dword [ebp - 0x10]
cdq
sub eax, edx
sar eax, 1
test eax, eax
jle 0x448c72
mov dword [ebp - 0x1c], eax
push esi
push ebx
push 0x68
push dword [0x491b7c]
push 0x14
push 0x19
push 0
push dword [ebp - 4]
push dword [ebp - 8]
call edi
add dword [ebp - 4], 0x19
dec dword [ebp - 0x1c]
jne 0x448c51
push esi
push ebx
push 0x1a
push dword [0x491b7c]
push 0x14
push 0x19
push 0
push dword [ebp - 4]
push dword [ebp - 8]
call edi
mov eax, dword [ebp - 0xc]
push 0x19
cdq
pop ecx
idiv ecx
add dword [ebp - 4], 0x19
mov ecx, eax
test ecx, ecx
je 0x448cfa
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x14]
cdq
sub eax, edx
mov edx, dword [ebp - 0x14]
sar eax, 1
add eax, dword [ebp - 4]
cmp dword [ebp - 0xc], edx
mov dword [ebp - 0x20], eax
je 0x448cba
inc eax
mov dword [ebp - 0x20], eax
test ecx, ecx
jle 0x448ce5
mov dword [ebp - 0x1c], ecx
push esi
push ebx
push 0x34
push dword [0x491b7c]
push 0x14
push 0x19
push 0
push dword [ebp - 4]
push dword [ebp - 8]
call edi
add dword [ebp - 4], 0x19
dec dword [ebp - 0x1c]
jne 0x448cc1
mov eax, dword [ebp - 0x20]
push ebx
push dword [ebp - 0xc]
push 4
push eax
push dword [ebp - 8]
lea eax, [ebp - 0x40]
call fcn.00448aa5
add esp, 0x14
push esi
push ebx
push 0x4e
push dword [0x491b7c]
push 0x14
push 0x19
push 0
push dword [ebp - 4]
push dword [ebp - 8]
call edi
add dword [ebp - 4], 0x19
cmp dword [ebp - 0x10], 0
je 0x448d6e
test byte [ebp - 0x10], 1
je 0x448d3e
push esi
push ebx
push 0x68
push dword [0x491b7c]
push 0x14
push 0xd
push 0
push dword [ebp - 4]
push dword [ebp - 8]
call edi
add dword [ebp - 4], 0xd
mov eax, dword [ebp - 0x10]
cdq
sub eax, edx
sar eax, 1
test eax, eax
jle 0x448d6e
mov dword [ebp - 0x20], eax
push esi
push ebx
push 0x68
push dword [0x491b7c]
push 0x14
push 0x19
push 0
push dword [ebp - 4]
push dword [ebp - 8]
call edi
add dword [ebp - 4], 0x19
dec dword [ebp - 0x20]
jne 0x448d4d
cmp dword [ebp - 0x18], 0
jle 0x448d9b
push esi
push 0x14
push 0x19
push ebx
push 0x68
push dword [0x491b7c]
push 0x14
push dword [ebp - 0x18]
push 0
push dword [ebp - 4]
push dword [ebp - 8]
call dword [sym.imp.GDI32.dll_StretchBlt]
mov eax, dword [ebp - 0x18]
add dword [ebp - 4], eax
push esi
push ebx
push 0x82
push dword [0x491b7c]
push 0x14
push 0x19
push 0
push dword [ebp - 4]
push dword [ebp - 8]
call edi
push 0
call fcn.004479db
pop ecx
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_ReleaseDC]
pop esi
pop ebx
pop edi
leave
ret