Function at 0x556440
Capabilities:
Capture screenshot
Get graphical window text

Disassembly:
sub esp, 0xec
push ebp
push edi
mov edi, ecx
push edi
mov dword [esp + 0x10], edx
mov dword [esp + 0x44], edi
call dword [sym.imp.USER32.dll_GetDC]
mov ebp, eax
test ebp, ebp
je 0x55666f
push esi
push ebp
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov esi, eax
test esi, esi
je 0x5564a0
mov eax, dword [0x5c9dac]
push 0
push 0
push 0x31
push edi
mov dword [esp + 0x1c], eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [esp + 0x58]
push ecx
push 0x3c
push eax
call dword [sym.imp.GDI32.dll_GetObjectA]
test eax, eax
jne 0x5564b2
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
push ebp
push edi
call dword [sym.imp.USER32.dll_ReleaseDC]
pop esi
pop edi
pop ebp
add esp, 0xec
ret
lea edx, [esp + 0x58]
push edx
mov byte [esp + 0x71], 1
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
test eax, eax
mov dword [esp + 0x34], eax
je 0x556499
push ebx
mov ebx, dword [sym.imp.GDI32.dll_SelectObject]
push eax
push esi
call ebx
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x14]
push eax
push edi
call dword [sym.imp.USER32.dll_GetDlgItem]
lea ecx, [esp + 0x18]
push ecx
push eax
mov dword [esp + 0x1c], eax
call dword [sym.imp.USER32.dll_GetWindowRect]
push 2
lea edx, [esp + 0x1c]
push edx
push edi
xor edi, edi
push edi
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
sub eax, ecx
mov ecx, dword [esp + 0x24]
sub ecx, edx
push ecx
push eax
push ebp
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], ecx
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov edi, eax
test edi, edi
je 0x556647
push edi
push esi
call ebx
push 0x9b0000
push esi
mov dword [esp + 0x4c], eax
call dword [sym.imp.GDI32.dll_SetTextColor]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x10]
push eax
push esi
call dword [sym.imp.GDI32.dll_SetBkColor]
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x98]
push ecx
push 0x64
push 0xd
push edx
mov dword [esp + 0x20], eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
push 0x2c10
mov dword [esp + 0x54], ecx
lea ecx, [esp + 0x50]
push ecx
mov dword [esp + 0x5c], edx
push 0xffffffffffffffff
lea edx, [esp + 0xa4]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x30]
push edx
push esi
mov dword [esp + 0x6c], eax
call dword [sym.imp.USER32.dll_DrawTextA]
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x58]
push 0
push 0
push 0x5a4bec
sub eax, ecx
lea ecx, [esp + 0x34]
push ecx
push 6
push 0
push 0
push esi
mov dword [esp + 0x54], eax
call dword [sym.imp.GDI32.dll_ExtTextOutA]
push 0x2810
lea edx, [esp + 0x2c]
push edx
push 0xffffffffffffffff
lea eax, [esp + 0xa4]
push eax
push esi
call dword [sym.imp.USER32.dll_DrawTextA]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x1c]
push 0xcc0020
push 0
push 0
push esi
push ecx
mov ecx, dword [esp + 0x2c]
push edx
push eax
push ecx
push ebp
call dword [sym.imp.GDI32.dll_BitBlt]
mov edx, dword [esp + 0x40]
push edx
push esi
call dword [sym.imp.GDI32.dll_SetTextColor]
mov eax, dword [esp + 0x10]
push eax
push esi
call dword [sym.imp.GDI32.dll_SetBkColor]
mov ecx, dword [esp + 0x44]
push ecx
push esi
call ebx
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov edx, dword [esp + 0x3c]
push edx
push esi
call ebx
mov eax, dword [esp + 0x38]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
push esi
call dword [sym.imp.GDI32.dll_DeleteDC]
mov ecx, dword [esp + 0x48]
push ebp
push ecx
call dword [sym.imp.USER32.dll_ReleaseDC]
pop ebx
pop esi
pop edi
pop ebp
add esp, 0xec
ret