Function at 0x1000397fc
Capabilities:
Capture screenshot

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov dword [rax + 0x18], r8d
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0xa0
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov r10d, r9d
mov r11d, r8d
mov rbx, rdx
mov r13, rcx
mov eax, dword [rsp + 0x130]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x128]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x120]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x118]
mov dword [rsp + 0x30], eax
mov rdi, qword [rsp + 0x110]
mov qword [rsp + 0x28], rdi
mov r14d, dword [rsp + 0x108]
mov dword [rsp + 0x20], r14d
mov r9d, dword [rsp + 0x100]
mov r8d, r10d
mov edx, r11d
mov rcx, rbx
call fcn.100039774
test eax, eax
jne 0x100039aef
lea rcx, [rsp + 0x80]
call fcn.1000010c8
nop
and qword [rsp + 0x78], 0
lea rax, vtable.CTempBitmap.0
mov qword [rsp + 0x70], rax
xor esi, esi
mov qword [rsp + 0x50], rsi
mov eax, 0xffff
cdq
idiv dword [rsp + 0x100]
mov ebx, eax
cmp r14d, eax
cmovl ebx, r14d
lea ebp, [rsi + 1]
cmp ebx, ebp
cmovl ebx, ebp
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
mov r12, rax
xor ecx, ecx
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov rdx, rax
lea rcx, [rsp + 0x80]
call fcn.1000010e0
test eax, eax
je 0x100039953
mov rcx, r12
call fcn.1000012a0
mov r8d, ebx
mov edx, dword [rsp + 0x100]
mov rcx, qword [rax + 8]
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.100001248
test eax, eax
je 0x100039953
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x88]
call fcn.100001ba4
mov rsi, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x100039953
xor ebp, ebp
mov rdx, r12
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
test ebp, ebp
jne 0x10003d8fb
xor r8d, r8d
mov rdx, rdi
mov rcx, r13
call fcn.100032c1c
mov r13, rax
mov qword [rsp + 0x60], rax
xor r8d, r8d
lea rdx, [rsp + 0x80]
mov rcx, qword [rsp + 0xe0]
call fcn.100032c1c
mov r12, rax
mov qword [rsp + 0x58], rax
mov edx, dword [rsp + 0x130]
lea rcx, [rsp + 0x80]
call fcn.100039b08
xor ebp, ebp
test r14d, r14d
jle 0x100039a88
mov r12d, dword [rsp + 0xf8]
mov r13d, dword [rsp + 0xf0]
mov rsi, qword [rsp + 0xe8]
mov ecx, r14d
sub ecx, ebp
cmp ebx, ecx
cmovg ebx, ecx
test rdi, rdi
je 0x10003d943
mov rcx, qword [rdi + 8]
mov eax, dword [rsp + 0x120]
add eax, ebp
mov dword [rsp + 0x40], 0xcc0020
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x118]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9d, dword [rsp + 0x100]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.GDI32.dll_BitBlt]
lea r8d, [rbp + r12]
mov eax, dword [rsp + 0x128]
mov dword [rsp + 0x40], eax
and dword [rsp + 0x38], 0
and dword [rsp + 0x30], 0
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
mov r9d, dword [rsp + 0x100]
mov edx, r13d
mov rcx, qword [rsi + 8]
call qword [sym.imp.GDI32.dll_BitBlt]
add ebp, ebx
cmp ebp, r14d
jl 0x1000399d3
mov rsi, qword [rsp + 0x50]
mov r12, qword [rsp + 0x58]
mov r13, qword [rsp + 0x60]
test r13, r13
jne 0x10003d94a
test rsi, rsi
je 0x10003d95e
mov rdx, qword [rsi + 8]
mov rcx, qword [rsp + 0x88]
call fcn.100001ba4
test r12, r12
jne 0x10003d965
lea rax, vtable.CTempBitmap.0
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x70]
call fcn.10000123c
nop
lea rax, vtable.CBitmap.0
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x70]
call fcn.1000024d0
nop
lea rcx, [rsp + 0x80]
call fcn.1000010d4
add rsp, 0xa0
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
or word [0x1000cda9c], 0xa
lea rax, vtable.CTempBitmap.0
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x70]
call fcn.10000123c
nop
lea rax, vtable.CBitmap.0
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x70]
call fcn.1000024d0
nop
lea rcx, [rsp + 0x80]
call fcn.1000010d4
jmp 0x100039aef
xor ecx, ecx
jmp 0x1000399ea
xor r8d, r8d
mov rdx, r13
mov rcx, rdi
call fcn.100088594
nop
jmp 0x100039a91
xor edx, edx
jmp 0x100039a9e
xor r8d, r8d
mov rdx, r12
lea rcx, [rsp + 0x80]
call fcn.100088594
nop
jmp 0x100039ab4