Function at 0x4427c3
Capabilities:
Capture screenshot
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov ebx, 0x5499e0
mov esi, 0x549a30
mov edi, 0x549a20
push dword [ebp + 8]
call fcn.00442321
mov dword [0x5499c0], eax
mov eax, dword [0x5499c0]
test eax, eax
je 0x442b18
cmp dword [eax + 0xfe8], 0
je 0x442b18
push dword [ebp + 8]
call sub.USER32.dll_GetDC
mov dword [0x5499dc], eax
cmp dword [0x5499dc], 0
je 0x442b18
push dword [0x5499dc]
call sub.GDI32.dll_CreateCompatibleDC
mov dword [ebx], eax
cmp dword [ebx], 0
jne 0x44283e
push dword [0x5499dc]
push dword [ebp + 8]
call sub.USER32.dll_ReleaseDC
jmp 0x442b18
cmp dword [0x532a54], 0
jne 0x442850
cmp dword [0x532a5c], 0
je 0x44285e
push 0xf
call sub.USER32.dll_GetSysColor
mov dword [0x5499b4], eax
jmp 0x44286a
push 5
call sub.USER32.dll_GetSysColor
mov dword [0x5499b4], eax
push 0
push 0
push 0x31
push dword [ebp + 8]
call sub.USER32.dll_SendMessageA
mov dword [0x5499c8], eax
push 0x5499e4
push 0x3c
push dword [0x5499c8]
call sub.GDI32.dll_GetObjectA
test eax, eax
jne 0x4428ad
push dword [ebx]
call sub.GDI32.dll_DeleteDC
push dword [0x5499dc]
push dword [ebp + 8]
call sub.USER32.dll_ReleaseDC
jmp 0x442b18
mov byte [0x5499f9], 1
push 0x5499e4
call sub.GDI32.dll_CreateFontIndirectA
mov dword [0x5499d0], eax
cmp dword [0x5499d0], 0
jne 0x4428e6
push dword [ebx]
call sub.GDI32.dll_DeleteDC
push dword [0x5499dc]
push dword [ebp + 8]
call sub.USER32.dll_ReleaseDC
jmp 0x442b18
push dword [0x5499d0]
push dword [ebx]
call sub.GDI32.dll_SelectObject
mov dword [0x5499cc], eax
mov edx, dword [0x5499c0]
mov ecx, dword [edx + 0xfe8]
mov dword [0x5499c4], ecx
jmp 0x442ade
mov eax, dword [eax + 8]
mov dword [0x549a40], eax
cmp dword [0x549a40], 0
je 0x442acf
push dword [0x549a40]
call sub.USER32.dll_IsWindowEnabled
test eax, eax
je 0x442acf
push dword [0x549a40]
push dword [0x5499c0]
call fcn.0044239a
test eax, eax
je 0x442acf
push edi
push dword [0x549a40]
call sub.USER32.dll_GetWindowRect
push 2
push edi
mov edx, dword [0x5499c0]
push dword [edx + 0xc8]
push 0
call sub.USER32.dll_MapWindowPoints
mov ecx, dword [edi + 8]
sub ecx, dword [edi]
mov dword [esi + 8], ecx
mov eax, dword [edi + 0xc]
sub eax, dword [edi + 4]
mov dword [esi + 0xc], eax
xor edx, edx
mov dword [esi], edx
xor ecx, ecx
mov dword [esi + 4], ecx
push dword [esi + 0xc]
push dword [esi + 8]
push dword [0x5499dc]
call sub.GDI32.dll_CreateCompatibleBitmap
mov dword [0x5499d4], eax
cmp dword [0x5499d4], 0
je 0x442acf
push dword [0x5499d4]
push dword [ebx]
call sub.GDI32.dll_SelectObject
mov dword [0x5499d8], eax
mov eax, dword [0x5499c4]
cmp dword [eax + 0x18], 0
je 0x4429df
push 0xff
push dword [ebx]
call sub.GDI32.dll_SetTextColor
mov dword [0x5499b8], eax
jmp 0x4429f0
push 0xff0000
push dword [ebx]
call sub.GDI32.dll_SetTextColor
mov dword [0x5499b8], eax
push dword [0x5499b4]
push dword [ebx]
call sub.GDI32.dll_SetBkColor
mov dword [0x5499bc], eax
push 0x549c6c
push 0x3e7
push 0xd
push dword [0x549a40]
call sub.USER32.dll_SendMessageA
push esi
push edi
mov esi, edi
mov edi, 0x549a44
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
push 0x2c10
push 0x549a44
push 0xffffffffffffffff
push 0x549c6c
push dword [ebx]
call sub.USER32.dll_DrawTextA
mov eax, dword [0x549a50]
sub eax, dword [0x549a48]
mov dword [esi + 0xc], eax
push 0
push 0
push 0x52bc60
push esi
push 6
push 0
push 0
push dword [ebx]
call sub.GDI32.dll_ExtTextOutA
push 0x2810
push esi
push 0xffffffffffffffff
push 0x549c6c
push dword [ebx]
call sub.USER32.dll_DrawTextA
push 0xcc0020
push 0
push 0
push dword [ebx]
push dword [esi + 0xc]
push dword [esi + 8]
push dword [edi + 4]
push dword [edi]
push dword [0x5499dc]
call sub.GDI32.dll_BitBlt
push dword [0x5499b8]
push dword [ebx]
call sub.GDI32.dll_SetTextColor
push dword [0x5499bc]
push dword [ebx]
call sub.GDI32.dll_SetBkColor
push dword [0x5499d8]
push dword [ebx]
call sub.GDI32.dll_SelectObject
push dword [0x5499d4]
call sub.GDI32.dll_DeleteObject
mov edx, dword [0x5499c4]
mov ecx, dword [edx + 0x30]
mov dword [0x5499c4], ecx
mov eax, dword [0x5499c4]
test eax, eax
jne 0x44290f
push dword [0x5499cc]
push dword [ebx]
call sub.GDI32.dll_SelectObject
push dword [0x5499d0]
call sub.GDI32.dll_DeleteObject
push dword [ebx]
call sub.GDI32.dll_DeleteDC
push dword [0x5499dc]
push dword [ebp + 8]
call sub.USER32.dll_ReleaseDC
pop edi
pop esi
pop ebx
pop ebp
ret 4