Function at 0x4573e0
Capabilities:
Capture screenshot
Get graphical window text

Disassembly:
sub esp, 0x478
push ebx
mov ebx, dword [0x59427c]
test ebx, ebx
push edi
mov edi, ecx
mov dword [esp + 0x14], edi
mov dword [esp + 0xc], ebx
je 0x4576d4
jmp 0x457406
mov ebx, dword [esp + 0xc]
cmp dword [ebx + 0xc8], edi
je 0x457425
mov ebx, dword [ebx + 0x1018]
test ebx, ebx
mov dword [esp + 0xc], ebx
jne 0x457402
pop edi
pop ebx
add esp, 0x478
ret
mov eax, dword [ebx + 0xfe8]
test eax, eax
je 0x4576d4
push ebp
push esi
push edi
call dword [sym.imp.USER32.dll_GetDC]
mov ebp, eax
test ebp, ebp
mov dword [esp + 0x10], ebp
je 0x4576d2
push ebp
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov esi, eax
test esi, esi
je 0x457486
mov eax, dword [0x5940f4]
push 0
push 0
push 0x31
push edi
mov dword [esp + 0x54], eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [esp + 0x64]
push ecx
push 0x3c
push eax
call dword [sym.imp.GDI32.dll_GetObjectA]
test eax, eax
jne 0x457499
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
push ebp
push edi
call dword [sym.imp.USER32.dll_ReleaseDC]
pop esi
pop ebp
pop edi
pop ebx
add esp, 0x478
ret
lea edx, [esp + 0x64]
push edx
mov byte [esp + 0x7d], 1
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
mov edi, eax
test edi, edi
mov dword [esp + 0x48], edi
jne 0x4574d1
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [esp + 0x1c]
push ebp
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
pop esi
pop ebp
pop edi
pop ebx
add esp, 0x478
ret
mov ebp, dword [sym.imp.GDI32.dll_SelectObject]
push edi
push esi
call ebp
mov dword [esp + 0x50], eax
mov eax, dword [ebx + 0xfe8]
test eax, eax
mov dword [esp + 0x18], eax
je 0x4576ac
mov ecx, dword [esp + 0x18]
mov edi, dword [ecx + 0xc]
test edi, edi
mov dword [esp + 0x4c], edi
je 0x457695
push edi
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x457695
mov edx, edi
mov ecx, ebx
call fcn.00456ff0
test eax, eax
je 0x457695
lea edx, [esp + 0x20]
push edx
push edi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [ebx + 0xc8]
push 2
lea eax, [esp + 0x24]
push eax
push ecx
xor edi, edi
push edi
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x24]
sub eax, ecx
mov ecx, dword [esp + 0x2c]
sub ecx, edx
mov edx, dword [esp + 0x10]
push ecx
push eax
push edx
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ecx
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], edi
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov edi, eax
test edi, edi
je 0x457695
push edi
push esi
call ebp
push 0x9b0000
push esi
mov ebx, eax
call dword [sym.imp.GDI32.dll_SetTextColor]
mov ebp, eax
mov eax, dword [esp + 0x44]
push eax
push esi
call dword [sym.imp.GDI32.dll_SetBkColor]
mov edx, dword [esp + 0x4c]
lea ecx, [esp + 0xa0]
push ecx
push 0x3e7
push 0xd
push edx
mov dword [esp + 0x50], eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x20]
push 0x2c10
mov dword [esp + 0x5c], ecx
lea ecx, [esp + 0x58]
push ecx
mov dword [esp + 0x64], edx
push 0xffffffffffffffff
lea edx, [esp + 0xac]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x38]
push edx
push esi
mov dword [esp + 0x74], eax
call dword [sym.imp.USER32.dll_DrawTextA]
mov ecx, dword [esp + 0x58]
mov eax, dword [esp + 0x60]
push 0
push 0
push 0x574b10
sub eax, ecx
lea ecx, [esp + 0x3c]
push ecx
push 6
push 0
push 0
push esi
mov dword [esp + 0x5c], eax
call dword [sym.imp.GDI32.dll_ExtTextOutA]
push 0x2810
lea edx, [esp + 0x34]
push edx
push 0xffffffffffffffff
lea eax, [esp + 0xac]
push eax
push esi
call dword [sym.imp.USER32.dll_DrawTextA]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x24]
push 0xcc0020
push 0
push 0
push esi
push ecx
mov ecx, dword [esp + 0x34]
push edx
mov edx, dword [esp + 0x28]
push eax
push ecx
push edx
call dword [sym.imp.GDI32.dll_BitBlt]
push ebp
push esi
call dword [sym.imp.GDI32.dll_SetTextColor]
mov eax, dword [esp + 0x40]
push eax
push esi
call dword [sym.imp.GDI32.dll_SetBkColor]
push ebx
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov ebx, dword [esp + 0x14]
mov ebp, dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 0x40]
test eax, eax
mov dword [esp + 0x18], eax
jne 0x4574f1
mov edi, dword [esp + 0x48]
mov edx, dword [esp + 0x50]
push edx
push esi
call ebp
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
pop esi
pop ebp
pop edi
pop ebx
add esp, 0x478
ret