Function at 0x1400112c6
Capabilities:
Capture screenshot

Disassembly:
jmp 0x1400196c0
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
sub rsp, 0x4c0
lea rbp, [rsp + 0x50]
lea rdi, [rsp + 0x50]
mov ecx, 0xbc
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x4e8]
mov rax, qword [0x140034040]
xor rax, rbp
mov qword [rbp + 0x468], rax
lea rcx, [0x14003d11b]
call fcn.140011b04
nop
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [rbp + 4], eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [rbp + 0x24], eax
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
mov qword [rbp + 0x48], rax
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov qword [rbp + 0x68], rax
mov r8d, dword [rbp + 0x24]
mov edx, dword [rbp + 4]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov qword [rbp + 0x88], rax
mov rdx, qword [rbp + 0x88]
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.GDI32.dll_SelectObject]
nop
mov dword [rsp + 0x40], 0xcc0020
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov rax, qword [rbp + 0x48]
mov qword [rsp + 0x28], rax
mov eax, dword [rbp + 0x24]
mov dword [rsp + 0x20], eax
mov r9d, dword [rbp + 4]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.GDI32.dll_BitBlt]
nop
mov eax, 0x4d42
mov word [rbp + 0xa8], ax
xor eax, eax
mov word [rbp + 0xae], ax
xor eax, eax
mov word [rbp + 0xb0], ax
mov dword [rbp + 0xb2], 0x36
mov dword [rbp + 0xd8], 0x28
mov eax, dword [rbp + 4]
mov dword [rbp + 0xdc], eax
mov eax, dword [rbp + 0x24]
mov dword [rbp + 0xe0], eax
mov eax, 1
mov word [rbp + 0xe4], ax
mov eax, 0x20
mov word [rbp + 0xe6], ax
mov dword [rbp + 0xe8], 0
mov dword [rbp + 0xec], 0
mov dword [rbp + 0xf0], 0
mov dword [rbp + 0xf4], 0
mov dword [rbp + 0xf8], 0
mov dword [rbp + 0xfc], 0
lea rax, [rbp + 0x118]
lea rcx, [rbp + 0xd8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x28
rep movsb byte [rdi], byte [rsi]
movzx eax, word [rbp + 0xe6]
mov ecx, dword [rbp + 4]
imul ecx, eax
mov eax, ecx
add eax, 0x1f
cdq
and edx, 0x1f
add eax, edx
sar eax, 5
shl eax, 2
imul eax, dword [rbp + 0x24]
mov dword [rbp + 0x164], eax
mov eax, dword [rbp + 0x164]
mov edx, eax
mov ecx, 0x42
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov qword [rbp + 0x188], rax
mov rcx, qword [rbp + 0x188]
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov qword [rbp + 0x1a8], rax
mov dword [rsp + 0x30], 0
lea rax, [rbp + 0x118]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x1a8]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp + 0x24]
xor r8d, r8d
mov rdx, qword [rbp + 0x88]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.GDI32.dll_GetDIBits]
nop
mov edx, 0x108
lea rcx, [rbp + 0x1d0]
call fcn.140011465
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 0x22
mov rdx, qword [rbp + 0x490]
lea rcx, [rbp + 0x1d0]
call fcn.140011b36
nop
mov rax, qword [rbp + 0x1d0]
movsxd rax, dword [rax + 4]
lea rax, [rbp + rax + 0x1d0]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
movzx eax, al
test eax, eax
je 0x1400199a3
mov r8d, 0xe
lea rdx, [rbp + 0xa8]
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
nop
mov r8d, 0x28
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
nop
mov eax, dword [rbp + 0x164]
mov r8d, eax
mov rdx, qword [rbp + 0x1a8]
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
nop
lea rcx, [rbp + 0x1d0]
call fcn.1400115b9
nop
mov rcx, qword [rbp + 0x188]
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
nop
mov rcx, qword [rbp + 0x188]
call qword [sym.imp.KERNEL32.dll_GlobalFree]
nop
mov rdx, qword [rbp + 0x48]
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
nop
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.GDI32.dll_DeleteDC]
nop
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.GDI32.dll_DeleteObject]
nop
lea rcx, [rbp + 0x1d0]
call fcn.1400112d5
nop
lea rcx, [rbp - 0x50]
lea rdx, [0x14002cc40]
call fcn.140011924
mov rcx, qword [rbp + 0x468]
xor rcx, rbp
call fcn.14001155f
lea rsp, [rbp + 0x470]
pop rdi
pop rsi
pop rbp
ret