Function at 0x140001090
Capabilities:
Capture screenshot

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc8
movaps xmmword [rsp + 0xb0], xmm6
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x140]
movups xmm6, xmmword [r9]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x70], r8
mov qword [rsp + 0x68], rdx
call qword [sym.imp.USER32.dll_GetWindowDC]
mov rcx, rax
mov rsi, rax
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
movq r14, xmm6
movdqa xmm0, xmm6
psrldq xmm0, 8
mov rcx, rsi
movd r15d, xmm0
mov rdi, rax
movdqa xmm0, xmm6
mov qword [rsp + 0x60], r14
psrldq xmm0, 0xc
psrldq xmm6, 4
sub r15d, r14d
movd r12d, xmm6
mov edx, r15d
movd ebp, xmm0
mov dword [rsp + 0x58], r12d
sub ebp, r12d
mov r8d, ebp
mov dword [rsp + 0x54], ebp
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov ecx, ebp
mov dword [rsp + 0x80], 0x28
neg ecx
mov qword [rsp + 0x8c], 0x180001
mov dword [rsp + 0x88], ecx
xorps xmm0, xmm0
xor r13d, r13d
mov dword [rsp + 0x84], r15d
mov rcx, rdi
mov dword [rsp + 0xa4], r13d
mov rdx, rax
mov rbx, rax
movdqu xmmword [rsp + 0x94], xmm0
call qword [sym.imp.GDI32.dll_SelectObject]
mov dword [rsp + 0x40], 0xcc0020
mov r9d, r15d
mov dword [rsp + 0x38], r12d
xor r8d, r8d
mov dword [rsp + 0x30], r14d
xor edx, edx
mov qword [rsp + 0x28], rsi
mov rcx, rdi
mov dword [rsp + 0x20], ebp
call qword [sym.imp.GDI32.dll_BitBlt]
lea rax, [rsp + 0x80]
mov dword [rsp + 0x30], r13d
mov qword [rsp + 0x28], rax
mov r9d, ebp
mov rax, qword [0x140005718]
xor r8d, r8d
mov rdx, rbx
mov qword [rsp + 0x20], rax
mov rcx, rsi
call qword [sym.imp.GDI32.dll_GetDIBits]
mov rcx, rbx
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, rdi
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rdx, rsi
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
xor r12d, r12d
test ebp, ebp
jle 0x1400012de
mov r14, qword [0x140005718]
lea eax, [r15 + r15*2]
add eax, eax
lea rdx, [0x140005078]
mov dword [rsp + 0x50], eax
nop word [rax + rax]
xor esi, esi
test r15d, r15d
jle 0x1400012ce
mov ebp, r13d
nop
movsxd rax, ebp
xor r10d, r10d
movzx edi, byte [rax + r14 + 1]
movzx ebx, byte [rax + r14]
movzx r11d, byte [rax + r14 + 2]
mov rax, rdx
nop word [rax + rax]
movzx edx, byte [rax]
movzx r8d, byte [rax + 1]
movzx r9d, byte [rax + 2]
lea ecx, [rdx + 0x32]
cmp r11d, ecx
ja 0x14000129d
lea ecx, [rdx - 0x32]
cmp r11d, ecx
jb 0x14000129d
lea ecx, [r8 + 0x32]
cmp edi, ecx
ja 0x14000129d
lea ecx, [r8 - 0x32]
cmp edi, ecx
jb 0x14000129d
lea ecx, [r9 + 0x32]
cmp ebx, ecx
ja 0x14000129d
lea ecx, [r9 - 0x32]
cmp ebx, ecx
jae 0x14000130c
inc r10d
lea rcx, [0x140005084]
add rax, 4
cmp rax, rcx
jl 0x140001260
add esi, 2
lea rdx, [0x140005078]
add ebp, 6
cmp esi, r15d
jl 0x140001240
mov eax, dword [rsp + 0x50]
mov ebp, dword [rsp + 0x54]
add r12d, 2
add r13d, eax
cmp r12d, ebp
jl 0x140001230
xor eax, eax
mov rcx, qword [rsp + 0xa8]
xor rcx, rsp
call fcn.140001750
movaps xmm6, xmmword [rsp + 0xb0]
add rsp, 0xc8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rdx, qword [rsp + 0x68]
mov eax, 1
mov rcx, qword [rsp + 0x60]
add ecx, esi
mov dword [rdx], ecx
mov ecx, dword [rsp + 0x58]
mov rdx, qword [rsp + 0x70]
add ecx, 0xffffffce
add ecx, r12d
mov dword [rdx], ecx
lea rdx, [0x140005078]
movsxd rcx, r10d
mov ecx, dword [rdx + rcx*4]
mov rdx, qword [rsp + 0x78]
mov dword [rdx], ecx
jmp 0x1400012e0