Function at 0x44e478
Capabilities:
Capture screenshot
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
push edi
xor edi, edi
cmp dword [0x4ac330], edi
jne 0x44e71d
push ebx
push esi
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetWindowDC]
mov ebx, dword [ebp + 0xc]
neg ebx
sbb ebx, ebx
and ebx, 0xffffffeb
push eax
mov dword [ebp - 8], eax
add ebx, 0x15
call fcn.0044d2ff
push dword [0x4abad0]
call fcn.0044d325
pop ecx
pop ecx
push 0x1f
lea eax, [ebp - 0x40]
push eax
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetWindowTextA]
xor esi, esi
cmp byte [ebp - 0x40], 0
mov byte [ebp - 0x21], 0
lea eax, [ebp - 0x40]
mov dword [ebp - 0x14], esi
je 0x44e516
mov cl, byte [eax]
inc eax
cmp cl, 0x61
jl 0x44e4ec
cmp cl, 0x7a
jg 0x44e4ec
add cl, 0xe0
cmp cl, 0x41
jl 0x44e508
cmp cl, 0x5a
jg 0x44e508
movsx ecx, cl
mov ecx, dword [ecx*4 + 0x4ab964]
cmp ecx, edi
je 0x44e508
add esi, ecx
jmp 0x44e50e
add esi, dword [0x49c900]
cmp byte [eax], 0
jne 0x44e4dc
mov dword [ebp - 0x14], esi
lea ecx, [esi + 0x18]
mov eax, ecx
cdq
push 0x19
pop esi
idiv esi
mov eax, dword [ebp + 0x10]
add eax, 0xffffff9c
sub ecx, edx
cmp ecx, eax
mov dword [ebp - 0xc], ecx
jle 0x44e533
mov dword [ebp - 0xc], eax
mov esi, 0xcc0020
push esi
push ebx
push edi
push dword [0x4ab9cc]
push 0x14
push 0x19
push edi
push edi
push dword [ebp - 8]
mov edi, dword [sym.imp.GDI32.dll_BitBlt]
call edi
mov eax, dword [ebp + 0x10]
sub eax, dword [ebp - 0xc]
push 0x19
add eax, 0xffffff9c
cdq
pop ecx
idiv ecx
mov dword [ebp - 4], 0x19
test eax, eax
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x10], eax
je 0x44e5c3
test al, 1
je 0x44e593
push esi
push ebx
push 0x68
push dword [0x4ab9cc]
push 0x14
push 0xc
push 0
push ecx
push dword [ebp - 8]
call edi
mov dword [ebp - 4], 0x25
mov eax, dword [ebp - 0x10]
cdq
sub eax, edx
sar eax, 1
test eax, eax
jle 0x44e5c3
mov dword [ebp - 0x1c], eax
push esi
push ebx
push 0x68
push dword [0x4ab9cc]
push 0x14
push 0x19
push 0
push dword [ebp - 4]
push dword [ebp - 8]
call edi
add dword [ebp - 4], 0x19
dec dword [ebp - 0x1c]
jne 0x44e5a2
push esi
push ebx
push 0x1a
push dword [0x4ab9cc]
push 0x14
push 0x19
push 0
push dword [ebp - 4]
push dword [ebp - 8]
call edi
mov eax, dword [ebp - 0xc]
push 0x19
cdq
pop ecx
idiv ecx
add dword [ebp - 4], 0x19
mov ecx, eax
test ecx, ecx
je 0x44e64b
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x14]
cdq
sub eax, edx
mov edx, dword [ebp - 0x14]
sar eax, 1
add eax, dword [ebp - 4]
cmp dword [ebp - 0xc], edx
mov dword [ebp - 0x20], eax
je 0x44e60b
inc eax
mov dword [ebp - 0x20], eax
test ecx, ecx
jle 0x44e636
mov dword [ebp - 0x1c], ecx
push esi
push ebx
push 0x34
push dword [0x4ab9cc]
push 0x14
push 0x19
push 0
push dword [ebp - 4]
push dword [ebp - 8]
call edi
add dword [ebp - 4], 0x19
dec dword [ebp - 0x1c]
jne 0x44e612
mov eax, dword [ebp - 0x20]
push ebx
push dword [ebp - 0xc]
push 4
push eax
push dword [ebp - 8]
lea eax, [ebp - 0x40]
call fcn.0044e3f6
add esp, 0x14
push esi
push ebx
push 0x4e
push dword [0x4ab9cc]
push 0x14
push 0x19
push 0
push dword [ebp - 4]
push dword [ebp - 8]
call edi
add dword [ebp - 4], 0x19
cmp dword [ebp - 0x10], 0
je 0x44e6bf
test byte [ebp - 0x10], 1
je 0x44e68f
push esi
push ebx
push 0x68
push dword [0x4ab9cc]
push 0x14
push 0xd
push 0
push dword [ebp - 4]
push dword [ebp - 8]
call edi
add dword [ebp - 4], 0xd
mov eax, dword [ebp - 0x10]
cdq
sub eax, edx
sar eax, 1
test eax, eax
jle 0x44e6bf
mov dword [ebp - 0x20], eax
push esi
push ebx
push 0x68
push dword [0x4ab9cc]
push 0x14
push 0x19
push 0
push dword [ebp - 4]
push dword [ebp - 8]
call edi
add dword [ebp - 4], 0x19
dec dword [ebp - 0x20]
jne 0x44e69e
cmp dword [ebp - 0x18], 0
jle 0x44e6ec
push esi
push 0x14
push 0x19
push ebx
push 0x68
push dword [0x4ab9cc]
push 0x14
push dword [ebp - 0x18]
push 0
push dword [ebp - 4]
push dword [ebp - 8]
call dword [sym.imp.GDI32.dll_StretchBlt]
mov eax, dword [ebp - 0x18]
add dword [ebp - 4], eax
push esi
push ebx
push 0x82
push dword [0x4ab9cc]
push 0x14
push 0x19
push 0
push dword [ebp - 4]
push dword [ebp - 8]
call edi
push 0
call fcn.0044d325
pop ecx
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_ReleaseDC]
pop esi
pop ebx
pop edi
leave
ret