Function at 0x180007740
Capabilities:
Capture screenshot

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov dword [rax + 0x20], r9d
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x658]
sub rsp, 0x720
mov r15, rcx
movaps xmmword [rax - 0x48], xmm6
imul ecx, r9d, 0x84
mov esi, r9d
movaps xmmword [rax - 0x58], xmm7
mov r14, r8
mov edi, r9d
mov dword [rsp + 0x50], ecx
cmp r9d, ecx
ja 0x180007fb3
movsd xmm7, qword [0x1800a3c88]
lea r8, [0x180000000]
mov r13, qword [rbp + 0x660]
mov eax, ecx
mov r12d, dword [rbp - 0x60]
movups xmm6, xmmword [rbp - 0x70]
xor r9d, r9d
cmp edi, 0x222
ja 0x180007f76
je 0x1800080fc
mov eax, edi
sub eax, 0x17
je 0x180007f11
sub eax, 0x13
je 0x180007830
sub eax, 0x77
je 0x180007804
sub eax, 0x2c
je 0x1800077f5
cmp eax, 0x5e
jne 0x1800080d5
mov byte [r15], 1
jmp 0x180007fb3
mov dword [rbp + 0x56c], 4
jmp 0x1800080d5
mov r13, r9
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [r14 + r8], 0
jne 0x180007810
mov rdx, r14
xor ecx, ecx
call fcn.180075588
inc rax
mov qword [rbp - 0x80], rax
jmp 0x1800080ce
mov rcx, qword [rbp + 0x688]
mov ecx, dword [rcx]
sub ecx, 5
je 0x180007b78
sub ecx, 0xa
je 0x180007cca
sub ecx, 0x421
je 0x180007866
cmp ecx, 1
je 0x180007e52
mov edi, 0x2a
jmp 0x1800080ce
mov edi, 0xa4
nop dword [rax + rax]
cmp edi, 0xa4
je 0x180007b22
cmp edi, 0x567c
je 0x180007891
cmp edi, 0xac54
je case.0x180007e6b.5
jmp 0x180007b66
mov rcx, qword [0x1800d60a0]
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov qword [0x1800d6098], rax
mov rax, qword [0x1800d60b8]
sub rax, 1
je 0x180007a5c
sub rax, 1
je 0x1800078cb
cmp rax, 1
je 0x180007997
jmp 0x180007b5f
mov ebx, 0xb4
cmp ebx, 0xb4
je 0x180007967
cmp ebx, 0x837c
jne 0x180007985
movsxd rax, dword [0x1800d60b4]
lea r9, [rsp + 0x68]
mov qword [0x1800d60c8], rax
lea r8, [rsp + 0x60]
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x58]
mov rax, qword [0x1800d60c0]
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x60], rax
mov rax, qword [0x1800d6070]
mov qword [rsp + 0x70], rax
mov rax, qword [0x1800d6098]
mov qword [rsp + 0x68], rax
mov rax, qword [0x1800d60a0]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x70]
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], rax
call fcn.18005c6d0
mov qword [0x1800d60d0], rax
mov edi, 0x2a
jmp 0x1800080ce
mov rcx, qword [r14]
lea rdx, [0x1800d60a8]
call qword [sym.imp.USER32.dll_GetClientRect]
movsxd rax, dword [0x1800d60b0]
mov qword [0x1800d60c0], rax
add ebx, 0x82c8
cmp ebx, 0x10590
jbe 0x1800078d0
mov ebx, 0x8c
nop dword [rax]
cmp ebx, 0x8c
je 0x1800079b9
cmp ebx, 0x137
je case.0x180007e6b.5
jmp 0x180007a4a
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movsxd rcx, eax
mov qword [0x1800d60c0], rcx
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [rsp + 0x28], 5
lea r9, [rsp + 0x58]
movsxd rcx, eax
lea r8, [rsp + 0x60]
mov rax, qword [0x1800d60c0]
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x60], rax
mov rax, qword [0x1800d6070]
mov qword [rsp + 0x78], rax
mov rax, qword [0x1800d6098]
mov qword [rsp + 0x58], rax
mov rax, qword [0x1800d60a0]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x78]
mov qword [0x1800d60c8], rcx
mov qword [rsp + 0x70], rcx
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x20], rax
call fcn.18005c6d0
mov qword [0x1800d60d0], rax
add ebx, 0xab
cmp ebx, 0x1e2
jb 0x1800079a0
mov ebx, 0xc2
mov eax, ebx
sub eax, 0xc2
je 0x180007afd
sub eax, 1
je 0x180007a81
cmp eax, 1
je case.0x180007e6b.5
jmp 0x180007b12
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [rsp + 0x28], 0x6c
lea r9, [rsp + 0x70]
movsxd rcx, eax
lea r8, [rsp + 0x68]
mov rax, qword [0x1800d60c0]
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x58], rax
mov rax, qword [0x1800d6070]
mov qword [rsp + 0x70], rax
mov rax, qword [0x1800d6098]
mov qword [rsp + 0x68], rax
mov rax, qword [0x1800d60a0]
mov qword [rbp - 0x78], rax
lea rax, [rbp - 0x78]
mov qword [0x1800d60c8], rcx
mov qword [rsp + 0x60], rcx
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x20], rax
call fcn.1800319b0
mov qword [0x1800d60d0], rax
jmp 0x180007b12
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movsxd rcx, eax
mov qword [0x1800d60c0], rcx
inc ebx
cmp ebx, 0xc5
jb 0x180007a61
jmp 0x180007b5f
mov rax, qword [rdx]
lea r8, [0x1800d6078]
mov qword [0x1800d60b8], rax
mov edx, 0x20
mov rax, qword [rbp + 0x680]
mov rcx, qword [rax]
mov qword [0x1800d6070], rcx
call qword [sym.imp.GDI32.dll_GetObjectW]
mov rcx, qword [r14]
call qword [sym.imp.USER32.dll_GetDC]
mov qword [0x1800d60a0], rax
mov rdx, qword [rbp + 0x668]
add edi, 0x55d8
cmp edi, 0x10188
jbe 0x180007870
cmp qword [0x1800d60b8], 2
jne 0x180007cca
mov rax, qword [rbp + 0x680]
movzx ecx, word [rax]
cmp qword [0x1800d60c0], rcx
movzx eax, word [rax + 2]
mov qword [0x1800d6068], rax
mov qword [0x1800d6060], rcx
jne 0x180007bb8
cmp qword [0x1800d60c8], rax
je 0x180007cca
test rcx, rcx
je 0x180007cca
test rax, rax
je 0x180007cca
mov ebx, 0x9a
nop
cmp ebx, 0x9a
je 0x180007caa
cmp ebx, 0x2680
je 0x180007bf5
cmp ebx, 0x4c66
je 0x180007fb3
jmp 0x180007cb8
mov rdx, qword [0x1800d60d0]
mov rcx, qword [0x1800d6098]
call qword [sym.imp.GDI32.dll_SelectObject]
mov rcx, rax
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rax, qword [0x1800d6068]
lea r9, [rsp + 0x68]
mov qword [rsp + 0x78], rax
lea r8, [rsp + 0x60]
mov rax, qword [0x1800d6060]
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x78]
mov rax, qword [0x1800d6070]
mov qword [rsp + 0x70], rax
mov rax, qword [0x1800d6098]
mov qword [rsp + 0x68], rax
mov rax, qword [0x1800d60a0]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x70]
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], rax
call fcn.18005c6d0
mov rcx, qword [r14]
lea rdx, [0x1800d60a8]
xor r8d, r8d
mov qword [0x1800d60d0], rax
call qword [sym.imp.USER32.dll_InvalidateRect]
mov rcx, qword [0x1800d6060]
mov rax, qword [0x1800d6068]
mov qword [r15], 1
jmp 0x180007cb8
mov qword [0x1800d60c0], rcx
mov qword [0x1800d60c8], rax
add ebx, 0x25e6
cmp ebx, 0x71b2
jbe 0x180007bd0
mov esi, 0x39
nop
mov eax, esi
sub eax, 0x39
je 0x180007e20
sub eax, 0x50
je 0x180007d16
sub eax, 0x50
je 0x180007d04
sub eax, 0x50
je 0x180007cf8
cmp eax, 0x50
je 0x180007fb3
jmp 0x180007e33
mov qword [r15], 1
jmp 0x180007e33
mov rcx, qword [r14]
lea rdx, [rbp - 0x40]
call qword [sym.imp.USER32.dll_EndPaint]
jmp 0x180007e33
movsxd rax, dword [rbp - 0x50]
lea rdx, [rbp - 0x40]
mov rcx, qword [r14]
mov qword [0x1800d6060], rax
movsxd rax, dword [rbp - 0x4c]
mov qword [0x1800d6068], rax
call qword [sym.imp.USER32.dll_BeginPaint]
mov rdx, qword [0x1800d6068]
cmp rdx, qword [0x1800d60c8]
mov rcx, qword [0x1800d6060]
jge 0x180007d95
cmp rcx, qword [0x1800d60c0]
jge 0x180007d95
xor eax, eax
mov dword [rsp + 0x40], 0xcc0020
mov dword [rsp + 0x38], eax
mov r9d, ecx
mov rcx, qword [0x1800d60a0]
xor r8d, r8d
mov dword [rsp + 0x30], eax
mov rax, qword [0x1800d6098]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], edx
xor edx, edx
call qword [sym.imp.GDI32.dll_BitBlt]
jmp 0x180007e33
xor r9d, r9d
mov edi, r9d
test rdx, rdx
jle 0x180007e36
xor r15d, r15d
mov rbx, r15
test rcx, rcx
jle 0x180007e0b
nop
mov rax, qword [0x1800d6098]
mov r8d, edi
mov r9d, dword [0x1800d60c0]
mov edx, ebx
mov rcx, qword [0x1800d60a0]
mov dword [rsp + 0x40], 0xcc0020
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x28], rax
mov eax, dword [0x1800d60c8]
mov dword [rsp + 0x20], eax
call qword [sym.imp.GDI32.dll_BitBlt]
mov rcx, qword [0x1800d6060]
add rbx, qword [0x1800d60c0]
cmp rbx, rcx
jl 0x180007db0
mov rdx, qword [0x1800d6068]
add rdi, qword [0x1800d60c8]
cmp rdi, rdx
jl 0x180007da7
mov r15, qword [rbp + 0x660]
jmp 0x180007e33
mov rcx, qword [r14]
lea rdx, [rbp - 0x58]
mov r8d, 1
call qword [sym.imp.USER32.dll_GetUpdateRect]
xor r9d, r9d
add esi, 0x50
cmp esi, 0x1c9
jb 0x180007cd0
mov esi, dword [rbp + 0x678]
lea r8, [0x180000000]
mov ebx, r9d
cmp ebx, 5
ja case.default.0x180007e6b
mov eax, ebx
mov ecx, dword [r8 + rax*4 + 0x8130]
add rcx, r8
jmp rcx
mov r8d, dword [0x1800d57d8]
mov edx, 0xfffffffc
mov rcx, qword [r14]
call qword [sym.imp.USER32.dll_SetWindowLongW]
jmp 0x180007ef4
mov qword [0x1800d60c0], r9
mov qword [0x1800d60c8], r9
jmp case.default.0x180007e6b
mov qword [0x1800d6060], r9
mov qword [0x1800d6068], r9
jmp case.default.0x180007e6b
mov qword [0x1800d60b8], r9
jmp case.default.0x180007e6b
mov rdx, qword [0x1800d60a0]
mov rcx, qword [r14]
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rdx, qword [0x1800d60d0]
mov rcx, qword [0x1800d6098]
call qword [sym.imp.GDI32.dll_SelectObject]
mov rcx, rax
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [0x1800d6098]
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rcx, qword [0x1800d6070]
call qword [sym.imp.GDI32.dll_DeleteObject]
xor r9d, r9d
inc ebx
lea eax, [rbx + 0x2d]
cmp eax, 0x33
jae case.0x180007e6b.5
lea r8, [0x180000000]
jmp 0x180007e55
xor edx, edx
mov qword [rsp + 0x20], r9
lea r8, [r14 + 0x50]
xor ecx, ecx
lea r9d, [rdx + 0x31]
call fcn.180015580
lea r8, [r14 + 8]
mov qword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
mov r9d, 0xa1
call fcn.180058fe0
test al, al
je 0x1800080f3
mov edx, 0x48
xor ecx, ecx
call fcn.180006e60
mov ecx, eax
xorps xmm0, xmm0
movaps xmm1, xmm7
cvtsi2sd xmm0, rcx
divsd xmm1, xmm0
movsd qword [r14 + 0x118], xmm1
jmp 0x1800080ce
cmp edi, 0x82d
je 0x1800080be
cmp edi, 0xa69
je 0x1800080b5
cmp edi, 0xfb9
je 0x18000800f
cmp edi, 0x1405
je 0x180007fdb
cmp edi, 0x1da1
jne 0x1800080d9
mov eax, dword [rbp + 0x570]
mov dword [r15], eax
lea r11, [rsp + 0x720]
mov rax, r15
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rax, qword [r14]
lea rdx, [rbp + 0x10]
mov ecx, 0xfffffe4e
mov qword [rbp + 0x562], rax
mov word [rbp + 0x56a], r9w
call qword [0x1800d5910]
movzx eax, word [rbp + 0x56a]
mov word [0x1800d5918], ax
jmp 0x1800080ce
test r13, r13
je 0x1800080d9
mov ebx, 0xd7
nop dword [rax]
cmp ebx, 0xd7
je 0x180008048
cmp ebx, 0x285
je 0x18000803e
cmp ebx, 0x433
je 0x180007fb3
jmp 0x1800080a1
movups xmmword [r15], xmm6
mov dword [r15 + 0x10], r12d
jmp 0x1800080a1
mov rax, qword [rbp - 0x80]
xor edx, edx
mov rcx, r13
lea r8, [rax + rax]
call fcn.180070440
mov r8, 0xffffffffffffffff
inc r8
cmp byte [r14 + r8], 0
jne 0x180008061
mov rdx, r14
mov rcx, r13
call fcn.180075588
xor eax, eax
lea rcx, [rbp - 0x70]
mov r9, r13
mov qword [rsp + 0x20], rax
xor edx, edx
mov r8d, 0x11f
call fcn.180039fb0
movups xmm6, xmmword [rbp - 0x70]
mov r12d, dword [rbp - 0x60]
mov rcx, r13
call fcn.180073cf4
add ebx, 0x1ae
cmp ebx, 0x50a
jbe 0x180008020
jmp 0x1800080ce
mov dword [rbp + 0x570], r9d
jmp 0x1800080d9
mov rax, qword [rbp - 0x80]
lea rcx, [rax + rax]
call fcn.180073cfc
mov r13, rax
lea r8, [0x180000000]
mov eax, dword [rsp + 0x50]
lea ecx, [rsi + rsi*2]
lea edi, [rdi + rcx*4]
cmp edi, eax
ja 0x180007fb3
mov rdx, qword [rbp + 0x668]
jmp 0x1800077b4
mov byte [r15], 0
jmp 0x180007fb3
mov r9, qword [rdx]
mov rax, qword [rbp + 0x680]
mov rdx, qword [r14]
mov rcx, qword [0x1800d57d8]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x688]
mov r8d, dword [rax]
call qword [sym.imp.USER32.dll_CallWindowProcW]
mov qword [r15], rax
jmp 0x180007fb3