Function at 0x140002260
Capabilities:
Capture screenshot

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x140025040]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x60], 0x15e
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rsp + 0x68]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov edx, 0x7f03
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadIconW]
mov edx, 0x7f01
xor ecx, ecx
mov rdi, rax
call qword [sym.imp.USER32.dll_LoadIconW]
mov edx, 0x7f04
xor ecx, ecx
mov rsi, rax
call qword [sym.imp.USER32.dll_LoadIconW]
mov rbp, rax
call fcn.14000a290
cdq
idiv dword [rsp + 0x74]
mov ebx, edx
call fcn.14000a290
mov r13d, dword [rsp + 0x70]
cdq
mov rcx, qword [0x140026db0]
mov r9, rdi
idiv r13d
mov r8d, ebx
call qword [sym.imp.USER32.dll_DrawIcon]
call fcn.14000a290
mov edi, dword [rsp + 0x74]
cdq
idiv edi
mov ebx, edx
call fcn.14000a290
mov rcx, qword [0x140026db0]
cdq
idiv r13d
mov r9, rsi
mov r8d, ebx
call qword [sym.imp.USER32.dll_DrawIcon]
call fcn.14000a290
cdq
idiv edi
mov ebx, edx
call fcn.14000a290
mov rcx, qword [0x140026db0]
cdq
idiv r13d
mov r9, rbp
mov r8d, ebx
call qword [sym.imp.USER32.dll_DrawIcon]
call fcn.14000a290
cdq
idiv edi
lea r12d, [rdx + 1]
call fcn.14000a290
cdq
idiv r13d
lea r15d, [rdx + 1]
call fcn.14000a290
cdq
idiv edi
lea r14d, [rdx + 1]
call fcn.14000a290
cdq
idiv r13d
lea ebp, [rdx + 1]
call fcn.14000a290
cdq
idiv edi
lea esi, [rdx + 1]
call fcn.14000a290
cdq
idiv r13d
mov edi, edx
call fcn.14000a290
cdq
idiv dword [rsp + 0x74]
mov ebx, edx
call fcn.14000a290
cdq
mov rcx, qword [0x140026db0]
lea r9d, [rdi + 1]
mov dword [rsp + 0x50], 0xcc0020
lea r8d, [rbx + 1]
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x40], r15d
idiv r13d
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], ebp
inc edx
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
call qword [sym.imp.GDI32.dll_StretchBlt]
call fcn.14000a290
mov r15d, dword [rsp + 0x74]
cdq
idiv r15d
lea r14d, [rdx + 1]
call fcn.14000a290
cdq
idiv r13d
lea ebp, [rdx + 1]
call fcn.14000a290
cdq
idiv r15d
lea esi, [rdx + 1]
call fcn.14000a290
cdq
idiv r13d
mov edi, edx
call fcn.14000a290
cdq
idiv r15d
mov ebx, edx
call fcn.14000a290
mov rcx, qword [0x140026db0]
lea r9d, [rdi + 1]
mov dword [rsp + 0x40], 0xee0086
lea r8d, [rbx + 1]
cdq
mov dword [rsp + 0x38], r14d
idiv r13d
mov dword [rsp + 0x30], ebp
mov qword [rsp + 0x28], rcx
inc edx
mov dword [rsp + 0x20], esi
call qword [sym.imp.GDI32.dll_BitBlt]
call fcn.14000a290
cdq
idiv r15d
lea edi, [rdx + 1]
call fcn.14000a290
cdq
idiv r13d
mov ebx, edx
call fcn.14000a290
mov rcx, qword [0x140026db0]
lea r9d, [rbx + 1]
mov dword [rsp + 0x50], 0xcc0020
cdq
mov dword [rsp + 0x48], 1
xor r14d, r14d
idiv r15d
mov dword [rsp + 0x40], r13d
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], rcx
lea r8d, [rdx + 1]
mov dword [rsp + 0x20], 1
xor edx, edx
call qword [sym.imp.GDI32.dll_StretchBlt]
call fcn.14000a290
mov r8d, eax
mov eax, 0x80808081
imul r8d
add edx, r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xff
sub r8d, ecx
movzx ebx, r8b
shl ebx, 8
call fcn.14000a290
mov r8d, eax
mov eax, 0x80808081
imul r8d
add edx, r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xff
sub r8d, ecx
movzx edi, r8b
shl edi, 0x10
or edi, ebx
call fcn.14000a290
mov r8d, eax
mov eax, 0x80808081
imul r8d
add edx, r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xff
sub r8d, ecx
movzx ecx, r8b
or ecx, edi
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov rcx, qword [0x140026db0]
mov rdx, rax
mov rbp, rax
call qword [sym.imp.GDI32.dll_SelectObject]
call fcn.14000a290
cdq
idiv r13d
mov esi, edx
call fcn.14000a290
cdq
idiv r15d
mov edi, edx
call fcn.14000a290
cdq
idiv r13d
mov ebx, edx
call fcn.14000a290
mov rcx, qword [0x140026db0]
cdq
idiv r15d
mov dword [rsp + 0x28], 0x5a0049
mov r9d, esi
mov r8d, edx
mov dword [rsp + 0x20], edi
mov edx, ebx
call qword [sym.imp.GDI32.dll_PatBlt]
mov rcx, qword [0x140026db0]
mov r9d, r13d
xor r8d, r8d
mov dword [rsp + 0x28], 0x550009
xor edx, edx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.GDI32.dll_PatBlt]
call fcn.14000a290
mov r9d, eax
mov eax, 0x1b4e81b5
imul r15d
mov eax, r9d
mov r8d, edx
cdq
sar r8d, 5
mov ecx, r8d
shr ecx, 0x1f
add r8d, ecx
idiv r8d
mov ebx, edx
call fcn.14000a290
mov r9d, eax
mov eax, 0x10624dd3
imul r13d
mov r8d, edx
mov dword [rsp + 0x40], 0xcc0020
sar r8d, 5
mov eax, r9d
mov ecx, r8d
mov dword [rsp + 0x38], r14d
shr ecx, 0x1f
cdq
add r8d, ecx
mov dword [rsp + 0x30], r14d
mov rcx, qword [0x140026db0]
mov r9d, r13d
idiv r8d
mov qword [rsp + 0x28], rcx
lea r8d, [rbx + 1]
inc edx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.GDI32.dll_BitBlt]
call fcn.14000a290
cdq
idiv r15d
mov ebx, edx
call fcn.14000a290
mov rcx, qword [0x140026db0]
lea r8d, [rbx + 1]
mov dword [rsp + 0x40], 0xcc0020
cdq
idiv r13d
mov dword [rsp + 0x38], r14d
mov r9d, r13d
mov dword [rsp + 0x30], r14d
inc edx
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.GDI32.dll_BitBlt]
mov rcx, rbp
call qword [sym.imp.GDI32.dll_DeleteObject]
sub qword [rsp + 0x60], 1
jne 0x140002297
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.140003b60
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret