Function at 0x44d0fb
Capabilities:
Capture screenshot
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov ebx, 0x57045c
mov esi, 0x5704ac
mov edi, 0x57049c
push dword [ebp + 8]
call fcn.0044cc59
mov dword [0x57043c], eax
mov eax, dword [0x57043c]
test eax, eax
je 0x44d450
cmp dword [eax + 0xfe8], 0
je 0x44d450
push dword [ebp + 8]
call sub.USER32.dll_GetDC
mov dword [0x570458], eax
cmp dword [0x570458], 0
je 0x44d450
push dword [0x570458]
call sub.GDI32.dll_CreateCompatibleDC
mov dword [ebx], eax
cmp dword [ebx], 0
jne 0x44d176
push dword [0x570458]
push dword [ebp + 8]
call sub.USER32.dll_ReleaseDC
jmp 0x44d450
cmp dword [0x556164], 0
jne 0x44d188
cmp dword [0x55616c], 0
je 0x44d196
push 0xf
call sub.USER32.dll_GetSysColor
mov dword [0x570430], eax
jmp 0x44d1a2
push 5
call sub.USER32.dll_GetSysColor
mov dword [0x570430], eax
push 0
push 0
push 0x31
push dword [ebp + 8]
call sub.USER32.dll_SendMessageA
mov dword [0x570444], eax
push 0x570460
push 0x3c
push dword [0x570444]
call sub.GDI32.dll_GetObjectA
test eax, eax
jne 0x44d1e5
push dword [ebx]
call sub.GDI32.dll_DeleteDC
push dword [0x570458]
push dword [ebp + 8]
call sub.USER32.dll_ReleaseDC
jmp 0x44d450
mov byte [0x570475], 1
push 0x570460
call sub.GDI32.dll_CreateFontIndirectA
mov dword [0x57044c], eax
cmp dword [0x57044c], 0
jne 0x44d21e
push dword [ebx]
call sub.GDI32.dll_DeleteDC
push dword [0x570458]
push dword [ebp + 8]
call sub.USER32.dll_ReleaseDC
jmp 0x44d450
push dword [0x57044c]
push dword [ebx]
call sub.GDI32.dll_SelectObject
mov dword [0x570448], eax
mov edx, dword [0x57043c]
mov ecx, dword [edx + 0xfe8]
mov dword [0x570440], ecx
jmp 0x44d416
mov eax, dword [eax + 0xc]
mov dword [0x5704bc], eax
cmp dword [0x5704bc], 0
je 0x44d407
push dword [0x5704bc]
call sub.USER32.dll_IsWindowEnabled
test eax, eax
je 0x44d407
push dword [0x5704bc]
push dword [0x57043c]
call fcn.0044ccd2
test eax, eax
je 0x44d407
push edi
push dword [0x5704bc]
call sub.USER32.dll_GetWindowRect
push 2
push edi
mov edx, dword [0x57043c]
push dword [edx + 0xc8]
push 0
call sub.USER32.dll_MapWindowPoints
mov ecx, dword [edi + 8]
sub ecx, dword [edi]
mov dword [esi + 8], ecx
mov eax, dword [edi + 0xc]
sub eax, dword [edi + 4]
mov dword [esi + 0xc], eax
xor edx, edx
mov dword [esi], edx
xor ecx, ecx
mov dword [esi + 4], ecx
push dword [esi + 0xc]
push dword [esi + 8]
push dword [0x570458]
call sub.GDI32.dll_CreateCompatibleBitmap
mov dword [0x570450], eax
cmp dword [0x570450], 0
je 0x44d407
push dword [0x570450]
push dword [ebx]
call sub.GDI32.dll_SelectObject
mov dword [0x570454], eax
mov eax, dword [0x570440]
cmp dword [eax + 0x1c], 0
je 0x44d317
push 0xff
push dword [ebx]
call sub.GDI32.dll_SetTextColor
mov dword [0x570434], eax
jmp 0x44d328
push 0xff0000
push dword [ebx]
call sub.GDI32.dll_SetTextColor
mov dword [0x570434], eax
push dword [0x570430]
push dword [ebx]
call sub.GDI32.dll_SetBkColor
mov dword [0x570438], eax
push 0x5706f0
push 0x3e7
push 0xd
push dword [0x5704bc]
call sub.USER32.dll_SendMessageA
push esi
push edi
mov esi, edi
mov edi, 0x5704c0
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
push 0x2c10
push 0x5704c0
push 0xffffffffffffffff
push 0x5706f0
push dword [ebx]
call sub.USER32.dll_DrawTextA
mov eax, dword [0x5704cc]
sub eax, dword [0x5704c4]
mov dword [esi + 0xc], eax
push 0
push 0
push 0x54eb14
push esi
push 6
push 0
push 0
push dword [ebx]
call sub.GDI32.dll_ExtTextOutA
push 0x2810
push esi
push 0xffffffffffffffff
push 0x5706f0
push dword [ebx]
call sub.USER32.dll_DrawTextA
push 0xcc0020
push 0
push 0
push dword [ebx]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [edi + 4]
push dword [edi]
push dword [0x570458]
call sub.GDI32.dll_BitBlt
push dword [0x570434]
push dword [ebx]
call sub.GDI32.dll_SetTextColor
push dword [0x570438]
push dword [ebx]
call sub.GDI32.dll_SetBkColor
push dword [0x570454]
push dword [ebx]
call sub.GDI32.dll_SelectObject
push dword [0x570450]
call sub.GDI32.dll_DeleteObject
mov edx, dword [0x570440]
mov ecx, dword [edx + 0x34]
mov dword [0x570440], ecx
mov eax, dword [0x570440]
test eax, eax
jne 0x44d247
push dword [0x570448]
push dword [ebx]
call sub.GDI32.dll_SelectObject
push dword [0x57044c]
call sub.GDI32.dll_DeleteObject
push dword [ebx]
call sub.GDI32.dll_DeleteDC
push dword [0x570458]
push dword [ebp + 8]
call sub.USER32.dll_ReleaseDC
pop edi
pop esi
pop ebx
pop ebp
ret 4