Function at 0x41dd49
Capabilities:
Capture screenshot
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff10
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
push edi
call sub.USER32.dll_GetDC
mov esi, eax
test esi, esi
je 0x41df93
push esi
call sub.GDI32.dll_CreateCompatibleDC
mov ebx, eax
test ebx, ebx
jne 0x41dd80
push esi
push edi
call sub.USER32.dll_ReleaseDC
jmp 0x41df93
push 0xf
call sub.USER32.dll_GetSysColor
mov dword [ebp - 4], eax
push 0
push 0
push 0x31
push edi
call sub.USER32.dll_SendMessageA
lea edx, [ebp - 0xc0]
push edx
push 0x3c
push eax
call sub.GDI32.dll_GetObjectA
test eax, eax
jne 0x41ddbb
push ebx
call sub.GDI32.dll_DeleteDC
push esi
push edi
call sub.USER32.dll_ReleaseDC
jmp 0x41df93
mov byte [ebp - 0xab], 1
lea eax, [ebp - 0xc0]
push eax
call sub.GDI32.dll_CreateFontIndirectA
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x41dde9
push ebx
call sub.GDI32.dll_DeleteDC
push esi
push edi
call sub.USER32.dll_ReleaseDC
jmp 0x41df93
push dword [ebp - 0x14]
push ebx
call sub.GDI32.dll_SelectObject
mov dword [ebp - 0x10], eax
push 0xa1
push edi
call sub.USER32.dll_GetDlgItem
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0xd0]
push ecx
push dword [ebp - 0x20]
call sub.USER32.dll_GetWindowRect
push 2
lea eax, [ebp - 0xd0]
push eax
push edi
push 0
call sub.USER32.dll_MapWindowPoints
mov edx, dword [ebp - 0xc8]
sub edx, dword [ebp - 0xd0]
mov dword [ebp - 0xd8], edx
mov ecx, dword [ebp - 0xc4]
sub ecx, dword [ebp - 0xcc]
mov dword [ebp - 0xd4], ecx
xor eax, eax
mov dword [ebp - 0xe0], eax
xor edx, edx
mov dword [ebp - 0xdc], edx
push dword [ebp - 0xd4]
push dword [ebp - 0xd8]
push esi
call sub.GDI32.dll_CreateCompatibleBitmap
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x41df75
push dword [ebp - 0x18]
push ebx
call sub.GDI32.dll_SelectObject
mov dword [ebp - 0x1c], eax
push 0x9b0000
push ebx
call sub.GDI32.dll_SetTextColor
mov dword [ebp - 8], eax
push dword [ebp - 4]
push ebx
call sub.GDI32.dll_SetBkColor
mov dword [ebp - 0xc], eax
lea ecx, [ebp - 0x84]
push ecx
push 0x64
push 0xd
push dword [ebp - 0x20]
call sub.USER32.dll_SendMessageA
push esi
push edi
lea esi, [ebp - 0xd0]
lea edi, [ebp - 0xf0]
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
push 0x2c10
lea eax, [ebp - 0xf0]
push eax
push 0xffffffffffffffff
lea edx, [ebp - 0x84]
push edx
push ebx
call sub.USER32.dll_DrawTextA
mov ecx, dword [ebp - 0xe4]
sub ecx, dword [ebp - 0xec]
mov dword [ebp - 0xd4], ecx
push 0
push 0
push 0x55fd2b
lea eax, [ebp - 0xe0]
push eax
push 6
push 0
push 0
push ebx
call sub.GDI32.dll_ExtTextOutA
push 0x2810
lea edx, [ebp - 0xe0]
push edx
push 0xffffffffffffffff
lea ecx, [ebp - 0x84]
push ecx
push ebx
call sub.USER32.dll_DrawTextA
push 0xcc0020
push 0
push 0
push ebx
push dword [ebp - 0xd4]
push dword [ebp - 0xd8]
push dword [ebp - 0xcc]
push dword [ebp - 0xd0]
push esi
call sub.GDI32.dll_BitBlt
push dword [ebp - 8]
push ebx
call sub.GDI32.dll_SetTextColor
push dword [ebp - 0xc]
push ebx
call sub.GDI32.dll_SetBkColor
push dword [ebp - 0x1c]
push ebx
call sub.GDI32.dll_SelectObject
push dword [ebp - 0x18]
call sub.GDI32.dll_DeleteObject
push dword [ebp - 0x10]
push ebx
call sub.GDI32.dll_SelectObject
push dword [ebp - 0x14]
call sub.GDI32.dll_DeleteObject
push ebx
call sub.GDI32.dll_DeleteDC
push esi
push edi
call sub.USER32.dll_ReleaseDC
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4