Function at 0x140001bd0
Capabilities:
Capture screenshot

Disassembly:
push rbp
push rbx
sub rsp, 0xf8
lea rbp, [rsp + 0xf0]
mov qword [rbp + 0x20], rcx
lea rax, [rbp - 0x50]
mov r9d, 0
mov r8d, 0
mov edx, 0
mov rcx, rax
call method.Gdiplus::GdiplusStartupInput.GdiplusStartupInput_void__int__int_
lea rdx, [rbp - 0x50]
lea rax, [rbp - 0x58]
mov r8d, 0
mov rcx, rax
call sym.GdiplusStartup
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_GetDC]
call rax
mov qword [rbp - 8], rax
mov rax, qword [rbp - 8]
mov rcx, rax
mov rax, qword [sym.imp.GDI32.dll_CreateCompatibleDC]
call rax
mov qword [rbp - 0x10], rax
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_GetSystemMetrics]
call rax
mov dword [rbp - 0x14], eax
mov ecx, 1
mov rax, qword [sym.imp.USER32.dll_GetSystemMetrics]
call rax
mov dword [rbp - 0x18], eax
mov ecx, dword [rbp - 0x18]
mov edx, dword [rbp - 0x14]
mov rax, qword [rbp - 8]
mov r8d, ecx
mov rcx, rax
mov rax, qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
call rax
mov qword [rbp - 0x20], rax
mov rdx, qword [rbp - 0x20]
mov rax, qword [rbp - 0x10]
mov rcx, rax
mov rax, qword [sym.imp.GDI32.dll_SelectObject]
call rax
mov qword [rbp - 0x28], rax
mov ecx, dword [rbp - 0x14]
mov rax, qword [rbp - 0x10]
mov dword [rsp + 0x40], 0xcc0020
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov rdx, qword [rbp - 8]
mov qword [rsp + 0x28], rdx
mov edx, dword [rbp - 0x18]
mov dword [rsp + 0x20], edx
mov r9d, ecx
mov r8d, 0
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.GDI32.dll_BitBlt]
call rax
mov rdx, qword [rbp - 0x20]
lea rax, [rbp - 0x70]
mov r8d, 0
mov rcx, rax
call method.Gdiplus::Bitmap.Bitmap_HBITMAP____HPALETTE___
lea rax, [rbp - 0x80]
mov rdx, rax
lea rax, str.557CF406_1A04_11D3_9A73_0000F81EF32E
mov rcx, rax
mov rax, qword [sym.imp.ole32.dll_CLSIDFromString]
call rax
lea rax, [rbp - 0x31]
mov qword [rbp - 0x30], rax
nop
nop
mov rax, qword [rbp + 0x20]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::end___const
mov rbx, rax
mov rax, qword [rbp + 0x20]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::begin___const
mov rdx, rax
lea rcx, [rbp - 0x31]
lea rax, [rbp - 0xa0]
mov r9, rcx
mov r8, rbx
mov rcx, rax
call method.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___::basic_string___gnu_cxx::__normal_iterator_char_const__std::__cxx11::basic_string_char__std::char_traits_char___std.allocator_char_______void____gnu_cxx::__no
lea rax, [rbp - 0x31]
mov rcx, rax
call method.std::__new_allocator_wchar_t_.__new_allocator__
nop
lea rax, [rbp - 0xa0]
mov rcx, rax
call sym.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___::c_str___const
mov rdx, rax
lea rcx, [rbp - 0x80]
lea rax, [rbp - 0x70]
mov r9d, 0
mov r8, rcx
mov rcx, rax
call method.Gdiplus::Image.Save_wchar_t_const___GUID_const__Gdiplus::EncoderParameters_const_
mov rdx, qword [rbp - 0x28]
mov rax, qword [rbp - 0x10]
mov rcx, rax
mov rax, qword [sym.imp.GDI32.dll_SelectObject]
call rax
mov rax, qword [rbp - 0x20]
mov rcx, rax
mov rax, qword [sym.imp.GDI32.dll_DeleteObject]
call rax
mov rax, qword [rbp - 0x10]
mov rcx, rax
mov rax, qword [sym.imp.GDI32.dll_DeleteDC]
call rax
mov rax, qword [rbp - 8]
mov rdx, rax
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_ReleaseDC]
call rax
mov rax, qword [rbp - 0x58]
mov rcx, rax
call sym.GdiplusShutdown
lea rax, [rbp - 0xa0]
mov rcx, rax
call sym.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___::basic_string__
lea rax, [rbp - 0x70]
mov rcx, rax
call method.Gdiplus::Bitmap.Bitmap__
jmp 0x140001e3a
add rsp, 0xf8
pop rbx
pop rbp
ret