Function at 0x10901172
Capabilities:
Capture screenshot
Resolve function by parsing pe exports

Disassembly:
jmp 0x109072a0
sub esp, 0x60
push ebx
push ebp
push esi
push edi
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
mov dword [esp + 0x48], eax
call dword [sym.imp.USER32.dll_GetWindowDC]
mov edi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov esi, eax
push 8
push esi
mov dword [esp + 0x38], esi
call edi
push 0xa
mov ebp, eax
push esi
mov dword [esp + 0x30], ebp
call edi
push esi
mov ebx, eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push ebx
push ebp
mov edi, eax
push esi
mov dword [esp + 0x40], edi
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov ebp, eax
push ebp
push edi
mov dword [esp + 0x40], ebp
call dword [sym.imp.GDI32.dll_SelectObject]
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x40], eax
mov eax, ebx
mov ebx, dword [esp + 0x80]
sub eax, ebx
cdq
push 0xcc0020
sub eax, edx
sar eax, 1
push eax
mov eax, dword [esp + 0x30]
sub eax, ecx
cdq
sub eax, edx
sar eax, 1
push eax
push esi
push ebx
push ecx
push 0
push 0
push edi
call dword [sym.imp.GDI32.dll_BitBlt]
mov ecx, dword [esp + 0x7c]
xor eax, eax
push eax
lea edx, [esp + 0x4c]
push edx
push eax
push ebx
mov dword [esp + 0x64], eax
push eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x5c], 0x28
mov dword [esp + 0x60], ecx
mov dword [esp + 0x64], ebx
mov word [esp + 0x68], 1
mov word [esp + 0x6a], 0x18
mov dword [esp + 0x6c], eax
push ebp
push edi
call dword [sym.imp.GDI32.dll_GetDIBits]
mov eax, dword [sym.imp.Core.dll_class_FMalloc__GMalloc]
mov ecx, dword [eax]
mov edx, dword [ecx]
mov eax, dword [esp + 0x5c]
mov edx, dword [edx]
push 0x109583a0
push eax
call edx
push 0
lea ecx, [esp + 0x4c]
push ecx
push eax
push ebx
push 0
push ebp
push edi
mov dword [esp + 0x38], eax
call dword [sym.imp.GDI32.dll_GetDIBits]
movzx eax, word [esp + 0x56]
mov ebx, dword [esp + 0x4c]
shr eax, 3
imul eax, ebx
mov edx, eax
and edx, 0x80000003
mov dword [esp + 0x28], eax
jns 0x109073e6
dec edx
or edx, 0xfffffffc
inc edx
je 0x10907408
jmp 0x109073f0
add eax, 1
mov ecx, eax
and ecx, 0x80000003
jns 0x10907402
dec ecx
or ecx, 0xfffffffc
inc ecx
jne 0x109073f0
mov dword [esp + 0x28], eax
cmp dword [esp + 0x50], 0
mov dword [esp + 0x18], 0
jle 0x109075d9
mov edx, dword [esp + 0x1c]
fld qword [0x109590f8]
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x14], edx
lea edx, [ecx*4]
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x3c], edx
mov dword [esp + 0x10], ecx
test ebx, ebx
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x24], 0
jle 0x109075b8
mov al, byte [ecx]
movzx ebx, byte [ecx + 1]
add ecx, 1
mov byte [esp + 0x80], bl
movzx ebx, byte [ecx + 1]
add ecx, 1
mov byte [esp + 0x78], bl
movzx ebx, byte [ecx + 1]
add ecx, 1
mov esi, edx
mov byte [esp + 0x7c], bl
movzx ebx, byte [esi]
mov dword [esp + 0x20], ebx
movzx ebx, byte [esp + 0x7c]
mov dword [esp + 0x7c], ebx
movzx eax, al
fild dword [esp + 0x7c]
sub eax, dword [esp + 0x20]
add edx, 1
fdiv st(1)
mov dword [esp + 0x7c], eax
mov edi, edx
add edx, 1
mov ebp, edx
add ecx, 1
add edx, 1
fstp dword [esp + 0x2c]
fild dword [esp + 0x7c]
fld dword [esp + 0x2c]
fld st(0)
fmulp st(2)
fild dword [esp + 0x20]
fnstcw word [esp + 0x7c]
faddp st(2)
movzx eax, word [esp + 0x7c]
fxch st(1)
or eax, 0xc00
mov dword [esp + 0x2c], eax
fldcw word [esp + 0x2c]
fistp dword [esp + 0x2c]
movzx eax, byte [esp + 0x2c]
mov byte [esi], al
movzx esi, byte [esp + 0x80]
fldcw word [esp + 0x7c]
movzx eax, byte [edi]
sub esi, eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x7c], esi
movzx esi, byte [esp + 0x78]
fild dword [esp + 0x7c]
fnstcw word [esp + 0x7c]
movzx eax, word [esp + 0x7c]
fmul st(1)
or eax, 0xc00
mov dword [esp + 0x80], eax
fiadd dword [esp + 0x2c]
fldcw word [esp + 0x80]
fistp dword [esp + 0x80]
movzx eax, byte [esp + 0x80]
mov byte [edi], al
movzx eax, byte [ebp]
fldcw word [esp + 0x7c]
sub esi, eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x7c], esi
fimul dword [esp + 0x7c]
fnstcw word [esp + 0x7c]
movzx eax, word [esp + 0x7c]
or eax, 0xc00
fiadd dword [esp + 0x80]
mov dword [esp + 0x80], eax
fldcw word [esp + 0x80]
fistp dword [esp + 0x80]
movzx eax, byte [esp + 0x80]
mov byte [ebp], al
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x4c]
fldcw word [esp + 0x7c]
add eax, 1
mov dword [esp + 0x24], eax
cmp eax, ebx
jl 0x10907458
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x34]
mov ebp, dword [esp + 0x38]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x3c]
add dword [esp + 0x18], 1
mov edx, dword [esp + 0x50]
add dword [esp + 0x10], ecx
add dword [esp + 0x14], eax
cmp dword [esp + 0x18], edx
jl 0x10907440
fstp st(0)
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov ecx, dword [esp + 0x1c]
push 0
mov ebx, eax
lea eax, [esp + 0x4c]
push eax
push ecx
push 4
mov edx, eax
push edx
push ebx
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
mov ecx, dword [esp + 0x74]
push ebx
mov ebx, dword [sym.imp.USER32.dll_ReleaseDC]
push 0
mov dword [ecx], eax
call ebx
mov edx, dword [sym.imp.Core.dll_class_FMalloc__GMalloc]
mov ecx, dword [edx]
mov eax, dword [ecx]
mov edx, dword [esp + 0x1c]
mov eax, dword [eax + 8]
push edx
call eax
mov ecx, dword [esp + 0x40]
push ecx
push edi
call dword [sym.imp.GDI32.dll_SelectObject]
push ebp
call dword [sym.imp.GDI32.dll_DeleteObject]
push edi
call dword [sym.imp.GDI32.dll_DeleteDC]
mov edx, dword [esp + 0x44]
push esi
push edx
call ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret