Function at 0x140001bd4
Capabilities:
Capture screenshot

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
sub rsp, 0x50
mov rsi, rcx
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
xor ebx, ebx
mov rdi, rax
mov dword [rsp + 0x88], ebx
mov eax, 0x30c30c31
xor ebp, ebp
lea r13d, [rbx + 0x10]
imul ebx
sar edx, 2
lea rbx, [0x140000000]
mov eax, edx
shr eax, 0x1f
add edx, eax
movsxd r12, edx
mov eax, 0x30c30c31
imul ebp
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cdqe
lea rcx, [rax + rax*2]
lea rax, [r12 + rcx*4]
mov rcx, rdi
movsxd rdx, dword [rbx + rax*4 + 0x1482f00]
mov rdx, qword [rbx + rdx*8 + 0x14840f8]
call qword [sym.imp.GDI32.dll_SelectObject]
mov dword [rsp + 0x40], 0xcc0020
and dword [rsp + 0x38], 0
and dword [rsp + 0x30], 0
lea edx, [rbp + 0x10]
mov r9d, 0x15
mov r8d, r13d
mov rcx, rsi
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x15
call qword [sym.imp.GDI32.dll_BitBlt]
add ebp, 0x15
cmp ebp, 0xfc
jl 0x140001c22
mov ebx, dword [rsp + 0x88]
add ebx, 0x15
cmp ebx, 0xfc
mov dword [rsp + 0x88], ebx
jl case.default.0x140001cce
mov rcx, rdi
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r13
pop r12
pop rdi
jmp qword [sym.imp.GDI32.dll_DeleteDC]
add byte [rsi + rax + 0xf], dh
mov dh, 0x46
cmp ebx, ebp
and cl, byte [rax - 0x73]
and al, 0x20
lea rcx, [rsp + 0x20]
mov rdx, rdi
call 0x140010f20
movzx eax, byte [rsp + 0x20]
test eax, eax
jne 0x140014428
movzx eax, byte [rsp + 0x21]
mov byte [rsi + 0x38], 1
mov byte [rsi + 0x39], al
movzx eax, al
cmp al, 0x2c
ja 0x14001446b
movabs rcx, 0x100002600
bt rcx, rax
jae 0x14001445a
mov byte [rsi + 0x38], 0
jmp 0x1400143e9
cmp eax, 2
jne 0x14001444a
invalid
sbb eax, 0x2444c748
and byte [rbx], al
add byte [rax], al
add byte [rax - 0x75], cl
push rsi
and byte [rbx + rcx*4 + 0x46], cl
sub byte [rax - 0x73], cl
and al, 0x20
mov qword [rsp + 0x20], 3
mov rdx, qword [rsi + 0x20]
mov r8, qword [rsi + 0x28]
lea rcx, [rsp + 0x20]
call 0x1400c54d0
jmp 0x140014476
mov rcx, qword [rsp + 0x28]
add rsp, 0x38
pop rdi
pop rsi
jmp 0x1400c5530
cmp rax, 0x2c
jne 0x14001446b
mov qword [rsp + 0x20], 0x15
jmp 0x140014436
cmp eax, 0x7d
jne 0x14001447d
mov byte [rsi + 0x38], 0
xor eax, eax
add rsp, 0x38
pop rdi
pop rsi
ret
mov qword [rsp + 0x20], 0x16
jmp 0x140014436
xchg edx, eax
rol byte [rcx - 0x40], 0xe0
add eax, 0x41c00841
cmp al, 0x64
jne 0x1400c55c6
movzx eax, byte [rcx + 1]
lea r8d, [rax - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, al
cmp r8b, 0x65
jne 0x1400c55c6
movzx eax, byte [rcx + 2]
lea r8d, [rax - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, al
cmp r8b, 0x62
jne 0x1400c55c6
movzx eax, byte [rcx + 3]
lea r8d, [rax - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, al
cmp r8b, 0x75
jne 0x1400c55c6
movzx eax, byte [rcx + 4]
lea r8d, [rax - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, al
xor eax, eax
cmp r8b, 0x67
setne al
lea rax, [rax + rax + 4]
jne 0x1400c55cb
jmp 0x1400c5665
mov eax, 6
cmp rdx, 5
jne 0x1400c5665
movzx eax, byte [rcx]
lea edx, [rax - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, al
mov eax, 6
cmp dl, 0x74
jne 0x1400c5665
movzx edx, byte [rcx + 1]
lea r8d, [rdx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, dl
cmp r8b, 0x72
jne 0x1400c5665
movzx edx, byte [rcx + 2]
lea r8d, [rdx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, dl
cmp r8b, 0x61
jne 0x1400c5665
movzx edx, byte [rcx + 3]
lea r8d, [rdx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, dl
cmp r8b, 0x63
jne 0x1400c5665
movzx eax, byte [rcx + 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
xor eax, eax
cmp cl, 0x65
setne al
add rax, 5
ret