Function at 0x14001d180
Capabilities:
Capture screenshot

Disassembly:
push rbp
push rsi
push r12
lea rbp, [rsp - 0x47]
sub rsp, 0xd0
mov r12, rcx
mov dword [0x140061050], 0x213
lea rax, [rbp - 0x19]
xor ecx, ecx
mov qword [str.SCOOF_MOMENTO], rax
call qword [sym.imp.USER32.dll_GetDC]
cmp dword [0x140061050], 0x213
mov rsi, rax
lea rax, [rbp - 0x19]
mov qword [str.SCOOF_MOMENTO], rax
je 0x14001d232
mov edx, 0x1dcc497
mov dword [0x140061050], 0x1dcc497
lea rcx, [rbp - 0x39]
call fcn.1400011f0
cmp qword [rax + 0x18], 0x10
jb 0x14001d1ed
mov rax, qword [rax]
mov rdx, qword [rbp - 0x21]
mov qword [str.SCOOF_MOMENTO], rax
cmp rdx, 0x10
jb 0x14001d232
mov rcx, qword [rbp - 0x39]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d22d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d22d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400310b4
mov rcx, rsi
mov qword [rsp + 0xc8], r14
mov dword [0x140061050], 0x213
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
cmp dword [0x140061050], 0x213
mov r14, rax
lea rax, [rbp - 0x19]
mov qword [str.SCOOF_MOMENTO], rax
je 0x14001d2ce
mov edx, 0x1dcc497
mov dword [0x140061050], 0x1dcc497
lea rcx, [rbp - 0x39]
call fcn.1400011f0
cmp qword [rax + 0x18], 0x10
jb 0x14001d289
mov rax, qword [rax]
mov rdx, qword [rbp - 0x21]
mov qword [str.SCOOF_MOMENTO], rax
cmp rdx, 0x10
jb 0x14001d2ce
mov rcx, qword [rbp - 0x39]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d2c9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d2c9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400310b4
mov edx, 8
mov qword [rsp + 0xc0], r15
mov rcx, rsi
mov dword [0x140061050], 0x213
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
cmp dword [0x140061050], 0x213
mov r15d, eax
lea rax, [rbp - 0x19]
mov qword [str.SCOOF_MOMENTO], rax
je 0x14001d36f
mov edx, 0x1dcc497
mov dword [0x140061050], 0x1dcc497
lea rcx, [rbp - 0x39]
call fcn.1400011f0
cmp qword [rax + 0x18], 0x10
jb 0x14001d32a
mov rax, qword [rax]
mov rdx, qword [rbp - 0x21]
mov qword [str.SCOOF_MOMENTO], rax
cmp rdx, 0x10
jb 0x14001d36f
mov rcx, qword [rbp - 0x39]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d36a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d36a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400310b4
mov edx, 0xa
mov qword [rsp + 0x100], rdi
mov rcx, rsi
mov dword [0x140061050], 0x213
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
cmp dword [0x140061050], 0x213
mov edi, eax
lea rax, [rbp - 0x19]
mov qword [str.SCOOF_MOMENTO], rax
je 0x14001d40f
mov edx, 0x1dcc497
mov dword [0x140061050], 0x1dcc497
lea rcx, [rbp - 0x39]
call fcn.1400011f0
cmp qword [rax + 0x18], 0x10
jb 0x14001d3ca
mov rax, qword [rax]
mov rdx, qword [rbp - 0x21]
mov qword [str.SCOOF_MOMENTO], rax
cmp rdx, 0x10
jb 0x14001d40f
mov rcx, qword [rbp - 0x39]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d40a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d40a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400310b4
mov r8d, edi
mov qword [rsp + 0xf8], rbx
mov edx, r15d
mov dword [0x140061050], 0x213
mov rcx, rsi
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
cmp dword [0x140061050], 0x213
mov rbx, rax
lea rax, [rbp - 0x19]
mov qword [str.SCOOF_MOMENTO], rax
je 0x14001d4b1
mov edx, 0x1dcc497
mov dword [0x140061050], 0x1dcc497
lea rcx, [rbp - 0x39]
call fcn.1400011f0
cmp qword [rax + 0x18], 0x10
jb 0x14001d46c
mov rax, qword [rax]
mov rdx, qword [rbp - 0x21]
mov qword [str.SCOOF_MOMENTO], rax
cmp rdx, 0x10
jb 0x14001d4b1
mov rcx, qword [rbp - 0x39]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d4ac
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d4ac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400310b4
mov rdx, rbx
mov dword [0x140061050], 0x213
mov rcx, r14
call qword [sym.imp.GDI32.dll_SelectObject]
cmp dword [0x140061050], 0x213
mov rbx, rax
lea rax, [rbp - 0x19]
mov qword [str.SCOOF_MOMENTO], rax
je 0x14001d548
mov edx, 0x1dcc497
mov dword [0x140061050], 0x1dcc497
lea rcx, [rbp - 0x39]
call fcn.1400011f0
cmp qword [rax + 0x18], 0x10
jb 0x14001d503
mov rax, qword [rax]
mov rdx, qword [rbp - 0x21]
mov qword [str.SCOOF_MOMENTO], rax
cmp rdx, 0x10
jb 0x14001d548
mov rcx, qword [rbp - 0x39]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d543
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d543
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400310b4
mov dword [rsp + 0x40], 0xcc0020
xor eax, eax
mov dword [rsp + 0x38], eax
mov r9d, r15d
mov dword [rsp + 0x30], eax
xor r8d, r8d
mov qword [rsp + 0x28], rsi
xor edx, edx
mov rcx, r14
mov dword [rsp + 0x20], edi
mov dword [0x140061050], 0x213
call qword [sym.imp.GDI32.dll_BitBlt]
cmp dword [0x140061050], 0x213
lea rax, [rbp - 0x19]
mov qword [str.SCOOF_MOMENTO], rax
je 0x14001d5fc
mov edx, 0x1dcc497
mov dword [0x140061050], 0x1dcc497
lea rcx, [rbp - 0x39]
call fcn.1400011f0
cmp qword [rax + 0x18], 0x10
jb 0x14001d5b7
mov rax, qword [rax]
mov rdx, qword [rbp - 0x21]
mov qword [str.SCOOF_MOMENTO], rax
cmp rdx, 0x10
jb 0x14001d5fc
mov rcx, qword [rbp - 0x39]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d5f7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d5f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400310b4
mov rdx, rbx
mov dword [0x140061050], 0x213
mov rcx, r14
call qword [sym.imp.GDI32.dll_SelectObject]
cmp dword [0x140061050], 0x213
mov rbx, rax
lea rax, [rbp - 0x19]
mov qword [str.SCOOF_MOMENTO], rax
je 0x14001d693
mov edx, 0x1dcc497
mov dword [0x140061050], 0x1dcc497
lea rcx, [rbp - 0x39]
call fcn.1400011f0
cmp qword [rax + 0x18], 0x10
jb 0x14001d64e
mov rax, qword [rax]
mov rdx, qword [rbp - 0x21]
mov qword [str.SCOOF_MOMENTO], rax
cmp rdx, 0x10
jb 0x14001d693
mov rcx, qword [rbp - 0x39]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d68e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d68e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400310b4
mov r9d, r15d
mov dword [0x140061050], 0x213
mov r8, r14
mov dword [rsp + 0x20], edi
mov rdx, rbx
mov rcx, r12
call fcn.14001c890
cmp dword [0x140061050], 0x213
lea rax, [rbp - 0x19]
mov qword [str.SCOOF_MOMENTO], rax
je 0x14001d730
mov edx, 0x1dcc497
mov dword [0x140061050], 0x1dcc497
lea rcx, [rbp - 0x39]
call fcn.1400011f0
cmp qword [rax + 0x18], 0x10
jb 0x14001d6eb
mov rax, qword [rax]
mov rdx, qword [rbp - 0x21]
mov qword [str.SCOOF_MOMENTO], rax
cmp rdx, 0x10
jb 0x14001d730
mov rcx, qword [rbp - 0x39]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d72b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d72b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400310b4
mov rcx, r14
mov dword [0x140061050], 0x213
call qword [sym.imp.GDI32.dll_DeleteDC]
cmp dword [0x140061050], 0x213
lea rax, [rbp - 0x19]
mov qword [str.SCOOF_MOMENTO], rax
je 0x14001d7c1
mov edx, 0x1dcc497
mov dword [0x140061050], 0x1dcc497
lea rcx, [rbp - 0x39]
call fcn.1400011f0
cmp qword [rax + 0x18], 0x10
jb 0x14001d77c
mov rax, qword [rax]
mov rdx, qword [rbp - 0x21]
mov qword [str.SCOOF_MOMENTO], rax
cmp rdx, 0x10
jb 0x14001d7c1
mov rcx, qword [rbp - 0x39]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d7bc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d7bc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400310b4
mov rcx, rsi
mov dword [0x140061050], 0x213
mov rbx, qword [rsp + 0xf8]
mov rdi, qword [rsp + 0x100]
mov r15, qword [rsp + 0xc0]
mov r14, qword [rsp + 0xc8]
add rsp, 0xd0
pop r12
pop rsi
pop rbp
jmp qword [sym.imp.GDI32.dll_DeleteDC]