Function at 0x140065280
Capabilities:
Capture screenshot

Disassembly:
push rbp
push rbx
push rdi
push r14
lea rbp, [rsp - 0x3f]
sub rsp, 0xb8
mov r14, rdx
mov rdi, rcx
mov rcx, qword [rcx + 0x110]
lea rdx, [rbp - 0x19]
call qword [sym.imp.USER32.dll_GetClientRect]
cmp dword [rdi + 0x1cc], 0
jne 0x1400652e7
mov ecx, dword [rdi + 0x488]
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
lea rdx, [rbp - 0x19]
mov rcx, r14
mov r8, rax
mov rbx, rax
call qword [sym.imp.USER32.dll_FillRect]
mov rcx, rbx
call qword [sym.imp.GDI32.dll_DeleteObject]
add rsp, 0xb8
pop r14
pop rdi
pop rbx
pop rbp
ret
mov qword [rsp + 0xe8], rsi
mov rcx, r14
mov qword [rsp + 0xf0], r12
mov qword [rsp + 0xb0], r15
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov r8d, dword [rbp - 0xd]
mov rcx, r14
mov edx, dword [rbp - 0x11]
mov rsi, rax
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov rdx, rax
mov rcx, rsi
mov r15, rax
call qword [sym.imp.GDI32.dll_SelectObject]
xor edx, edx
mov rcx, rsi
call qword [sym.imp.GDI32.dll_SelectClipRgn]
mov ecx, dword [rdi + 0x488]
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
lea rdx, [rbp - 0x19]
mov rcx, rsi
mov r8, rax
mov rbx, rax
call qword [sym.imp.USER32.dll_FillRect]
mov rcx, rbx
call qword [sym.imp.GDI32.dll_DeleteObject]
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 7]
call qword [sym.imp.USER32.dll_CopyRect]
mov rcx, qword [rdi + 0x110]
lea r8, [rbp + 0x17]
mov edx, 1
mov dword [rbp + 0x17], 0x1c
mov dword [rbp + 0x1b], 5
call qword [sym.imp.USER32.dll_GetScrollInfo]
cmp dword [rdi + 0x1f8], 0
je 0x1400653cb
mov r8d, dword [rdi + 0x1d0]
mov edx, dword [rdi + 0x1d4]
mov ecx, dword [rdi + 0x1d8]
mov eax, dword [rdi + 0x1dc]
add dword [rbp + 7], r8d
add dword [rbp + 0xb], edx
sub dword [rbp + 0xf], ecx
sub dword [rbp + 0x13], eax
add dword [rbp - 0x19], r8d
add dword [rbp - 0x15], edx
sub dword [rbp - 0x11], ecx
sub dword [rbp - 0xd], eax
lea rcx, [rbp + 7]
call qword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
mov rdx, rax
mov rcx, rsi
mov rbx, rax
call qword [sym.imp.GDI32.dll_SelectClipRgn]
mov rcx, rbx
call qword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [rbp + 0x2b]
test eax, eax
jle 0x1400653fc
cmp eax, dword [rbp + 0x23]
jge 0x1400653fc
sub dword [rbp + 0xb], eax
lea rbx, [rdi + 8]
mov rcx, rdi
mov rdx, rbx
call fcn.1400658a0
xor r12d, r12d
mov dword [rbp + 0x13], 0x7fffffe
mov qword [rsp + 0x50], r12
lea r9, [rbp + 7]
mov dword [rsp + 0x48], r12d
lea r8, [rbp - 0x19]
mov dword [rsp + 0x40], r12d
mov rdx, rsi
mov dword [rsp + 0x38], r12d
mov rcx, rdi
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], rbx
mov qword [rdi + 0x450], r12
mov qword [rdi + 0x458], r12
call fcn.14005ee40
mov eax, dword [rbp + 0x2b]
add dword [rbp + 0xb], eax
cmp dword [rdi + 0x1f8], r12d
je 0x14006548c
mov eax, dword [rdi + 0x1d0]
sub dword [rbp - 0x19], eax
mov eax, dword [rdi + 0x1d4]
sub dword [rbp - 0x15], eax
mov eax, dword [rdi + 0x1d8]
add dword [rbp - 0x11], eax
mov eax, dword [rdi + 0x1dc]
add dword [rbp - 0xd], eax
mov rdx, qword [rdi + 0x430]
test rdx, rdx
je 0x14006569c
add rdx, 0x38
lea rcx, [rbp - 9]
call qword [sym.imp.USER32.dll_CopyRect]
mov rdx, qword [rdi + 0x430]
mov ecx, dword [rbp - 9]
mov r8d, dword [rdi + 0x200]
mov eax, dword [rdx + 0xa0]
sub eax, dword [rdx + 0x98]
add ecx, eax
mov dword [rbp - 9], ecx
mov eax, dword [rdx + 0xb0]
sub eax, dword [rdx + 0xa8]
mov edx, dword [rdi + 0x1fc]
add eax, ecx
lea rcx, [rbp - 9]
mov dword [rbp - 9], eax
call qword [sym.imp.USER32.dll_OffsetRect]
mov eax, dword [rbp - 9]
mov ecx, dword [rbp - 1]
sub ecx, dword [rdi + 0x204]
cmp eax, ecx
cmovle eax, ecx
xor edx, edx
lea rcx, [rbp - 9]
mov dword [rbp - 9], eax
lea r8d, [rdx - 3]
call qword [sym.imp.USER32.dll_InflateRect]
mov r10d, dword [rbp - 1]
mov r8, qword [rdi + 0x430]
add r10d, 0xfffffffd
mov dword [rbp - 1], r10d
mov rcx, qword [r8 + 0x10]
mov edx, dword [rcx + 8]
sub edx, 1
je 0x140065648
sub edx, 1
je 0x140065550
sub edx, 1
je 0x140065648
sub edx, 1
je 0x140065579
cmp edx, 2
jne 0x14006569c
mov rcx, qword [rdi + 0x110]
call qword [sym.imp.USER32.dll_GetDC]
mov rcx, qword [rdi + 0x430]
mov rbx, rax
mov edx, dword [rcx + 8]
bt edx, 9
jae 0x1400655b0
mov rdx, qword [rdi + 0x178]
jmp 0x1400655c6
mov ecx, dword [r8 + 0x3c]
mov eax, dword [r8 + 0x44]
mov r8d, dword [rbp - 9]
sub eax, ecx
sub eax, 0x16
mov dword [rsp + 0x30], SafeArrayUnaccessData
cdq
mov dword [rsp + 0x28], 0x63
sub eax, edx
sar eax, 1
add ecx, eax
inc r8d
lea eax, [rcx + 0x64]
lea r9d, [rcx + 1]
jmp 0x14006567a
bt edx, 0xa
jae 0x1400655bf
mov rdx, qword [rdi + 0x160]
jmp 0x1400655c6
mov rdx, qword [rdi + 0x150]
mov rcx, rbx
call qword [sym.imp.GDI32.dll_SelectObject]
lea r9, [rbp + 0x67]
mov qword [rbp + 0x67], r12
mov r8d, 6
lea rdx, str.Wy__
mov rcx, rbx
call qword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
mov rcx, qword [rdi + 0x208]
mov rdx, rbx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov r10d, dword [rbp + 0x6b]
mov rax, qword [rdi + 0x430]
add r10d, 6
mov r8d, dword [rbp - 9]
mov dword [rbp + 0x6b], r10d
mov dword [rsp + 0x30], SafeArrayUnaccessData
mov ecx, dword [rax + 0x3c]
mov eax, dword [rax + 0x44]
sub eax, r10d
mov dword [rsp + 0x28], r10d
sub eax, ecx
cdq
sub eax, edx
sar eax, 1
lea r9d, [rax + rcx]
lea eax, [r9 + r10]
mov dword [rbp + 3], eax
mov eax, dword [rbp - 1]
sub eax, r8d
mov dword [rsp + 0x20], eax
jmp 0x140065689
mov ecx, dword [r8 + 0x3c]
mov eax, dword [r8 + 0x44]
mov r8d, dword [rbp - 9]
sub eax, ecx
sub eax, 0x16
mov dword [rsp + 0x30], SafeArrayUnaccessData
cdq
mov dword [rsp + 0x28], 0x64
sub eax, edx
sar eax, 1
add r8d, 2
lea r9d, [rax + rcx]
lea eax, [r9 + 0x64]
sub r10d, r8d
mov dword [rbp + 3], eax
mov dword [rsp + 0x20], r10d
mov dword [rbp - 9], r8d
mov rcx, qword [rdi + 0x208]
xor edx, edx
mov dword [rbp - 5], r9d
call qword [sym.imp.USER32.dll_SetWindowPos]
test byte [rdi + 0x1bc], 0x40
je 0x14006570e
mov ecx, 0x7f7f7f
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
lea rdx, [rbp - 0x19]
mov rcx, r14
mov r8, rax
mov rbx, rax
call qword [sym.imp.USER32.dll_FillRect]
mov rcx, rbx
call qword [sym.imp.GDI32.dll_DeleteObject]
mov r9d, dword [rbp - 0x11]
xor r8d, r8d
mov dword [rbp + 0x67], r12d
xor edx, edx
mov byte [rbp + 0x69], 0x80
mov rcx, r14
mov eax, dword [rbp + 0x67]
mov dword [rsp + 0x50], eax
mov eax, dword [rbp - 0xd]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], r9d
mov dword [rsp + 0x38], r12d
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], eax
call qword [sym.imp.MSIMG32.dll_AlphaBlend]
jmp 0x14006573e
mov eax, dword [rbp - 0xd]
xor r8d, r8d
mov r9d, dword [rbp - 0x11]
xor edx, edx
mov dword [rsp + 0x40], 0xcc0020
mov rcx, r14
mov dword [rsp + 0x38], r12d
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], eax
call qword [sym.imp.GDI32.dll_BitBlt]
mov rcx, rsi
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rcx, r15
call qword [sym.imp.GDI32.dll_DeleteObject]
mov r15, qword [rsp + 0xb0]
mov r12, qword [rsp + 0xf0]
mov rsi, qword [rsp + 0xe8]
add rsp, 0xb8
pop r14
pop rdi
pop rbx
pop rbp
ret