Function at 0x140001f90
Capabilities:
Capture screenshot

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x140025040]
xor rax, rsp
mov qword [rsp + 0x78], rax
xor r8d, r8d
xor ecx, ecx
lea edx, [r8 + 1]
call qword [sym.imp.GDI32.dll_CreatePen]
mov qword [rsp + 0x60], rax
mov r13d, 0xfa
call fcn.14000a290
mov r8d, eax
mov eax, 0x80808081
imul r8d
add edx, r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xff
sub r8d, ecx
movzx ebx, r8b
shl ebx, 8
call fcn.14000a290
mov r8d, eax
mov eax, 0x80808081
imul r8d
add edx, r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xff
sub r8d, ecx
movzx edi, r8b
shl edi, 0x10
or edi, ebx
call fcn.14000a290
mov r8d, eax
mov eax, 0x80808081
imul r8d
add edx, r8d
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0xff
sub r8d, ecx
movzx ecx, r8b
or ecx, edi
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov r14, rax
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [rsp + 0x68]
call qword [sym.imp.USER32.dll_GetWindowRect]
call fcn.14000a290
mov r12d, dword [rsp + 0x70]
cdq
idiv r12d
mov ebp, edx
call fcn.14000a290
mov r15d, dword [rsp + 0x74]
cdq
idiv r15d
mov esi, edx
call fcn.14000a290
cdq
idiv r12d
mov edi, edx
call fcn.14000a290
mov rcx, qword [0x140026db0]
cdq
idiv r15d
mov ebx, edx
mov rdx, r14
call qword [sym.imp.GDI32.dll_SelectObject]
mov rcx, qword [0x140026db0]
mov r9d, ebp
mov r8d, ebx
mov dword [rsp + 0x28], 0x5a0049
mov edx, edi
mov dword [rsp + 0x20], esi
call qword [sym.imp.GDI32.dll_PatBlt]
mov rcx, qword [0x140026db0]
mov r9d, r12d
xor r8d, r8d
mov dword [rsp + 0x28], 0x5a0049
xor edx, edx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.GDI32.dll_PatBlt]
mov rdx, qword [0x140026dc0]
mov rcx, qword [0x140026db0]
call qword [sym.imp.GDI32.dll_SelectObject]
mov rcx, r14
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [0x140026db0]
mov r9d, r12d
xor r8d, r8d
mov dword [rsp + 0x28], 0x5a0049
xor edx, edx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.GDI32.dll_PatBlt]
call fcn.14000a290
cdq
idiv r15d
mov ebx, edx
call fcn.14000a290
mov rcx, qword [0x140026db0]
cdq
mov dword [rsp + 0x50], 0xcc0020
xor edi, edi
mov dword [rsp + 0x48], r15d
xor r8d, r8d
idiv r12d
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], edi
mov r9d, edx
mov dword [rsp + 0x30], edi
xor edx, edx
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
call qword [sym.imp.GDI32.dll_StretchBlt]
call fcn.14000a290
mov ebx, eax
mov eax, 0x51eb851f
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x32
sub ebx, eax
call fcn.14000a290
mov rcx, qword [0x140026db0]
lea r8d, [rbx + 1]
mov r10d, eax
mov dword [rsp + 0x40], 0xcc0020
mov dword [rsp + 0x38], edi
mov eax, 0x66666667
imul r10d
mov dword [rsp + 0x30], edi
mov r9d, r12d
sar edx, 3
mov eax, edx
mov qword [rsp + 0x28], rcx
shr eax, 0x1f
add edx, eax
mov dword [rsp + 0x20], r15d
lea eax, [rdx + rdx*4]
shl eax, 2
sub r10d, eax
lea edx, [r10 + 1]
call qword [sym.imp.GDI32.dll_BitBlt]
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
sub r13, 1
jne 0x140001fd8
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.140003b60
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret