Function at 0x100e9330
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
push ebx
push esi
push edi
mov edi, ecx
cmp dword [edi + 0x1228], 0
jne 0x100e9526
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov ebx, eax
mov dword [ebp - 0x10], ebx
test ebx, ebx
je 0x100e9526
mov ecx, dword [edi + 0x1224]
test ecx, ecx
je 0x100e9526
lea edx, [ebp - 0x20]
call fcn.100e9540
test eax, eax
je 0x100e9526
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
push ebx
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [ebp - 4], eax
test eax, eax
je 0x100e9526
mov esi, dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push ebx
call esi
push dword [ebp - 0x10]
mov ebx, eax
call esi
push dword [ebp - 0x1c]
mov esi, eax
mov ecx, edi
push dword [ebp - 0x20]
push dword [edi + 0x10d8]
push 0
push esi
push ebx
call fcn.100e8ed0
push dword [ebp - 0x1c]
mov ecx, edi
mov dword [ebp - 8], eax
push dword [ebp - 0x20]
push dword [edi + 0x10f8]
push 1
push esi
push ebx
call fcn.100e8ed0
push dword [ebp - 0x1c]
mov ecx, edi
mov dword [ebp - 0xc], eax
push dword [ebp - 0x20]
push dword [edi + 0x10ec]
push 2
push esi
push ebx
call fcn.100e8ed0
mov dword [ebp - 0x10], eax
mov eax, dword [sym.imp.GDI32.dll_DeleteDC]
test ebx, ebx
je 0x100e9516
test esi, esi
je 0x100e950e
push dword [edi + 0x1224]
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [ebp - 4]
mov dword [ebp - 0x14], eax
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
push 0xcc0020
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x1c]
lea ecx, [eax*4]
push ecx
push 0
push ebx
push eax
push dword [ebp - 0x20]
push 0
push 0
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, dword [ebp - 8]
test ecx, ecx
je 0x100e947a
push ecx
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push 0xee0086
push 0
push 0
push ebx
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
push 0
push 0
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 8]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x100e94ae
push eax
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push 0xee0086
push 0
push 0
push ebx
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
push 0
push 0
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x100e94e2
push eax
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
push 0xee0086
push 0
push 0
push ebx
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
push 0
push 0
push esi
call dword [sym.imp.GDI32.dll_BitBlt]
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 4]
mov dword [edi + 0x1228], eax
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x100e94fa
push eax
push ebx
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x100e9509
push eax
push esi
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, dword [sym.imp.GDI32.dll_DeleteDC]
push ebx
call eax
mov eax, dword [sym.imp.GDI32.dll_DeleteDC]
test esi, esi
je 0x100e951d
push esi
call eax
mov eax, dword [ebp - 4]
mov dword [edi + 0x1228], eax
mov eax, dword [edi + 0x1228]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret