Function at 0x180024ca0
Capabilities:
Capture screenshot

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xd0
mov rax, qword [0x180040030]
xor rax, rsp
mov qword [rbp + 0x27], rax
xor r12d, r12d
mov dword [rbp + 7], 1
xor r8d, r8d
mov qword [rbp + 0xf], r12
lea rdx, [rbp + 7]
mov qword [rbp + 0x17], r12
lea rcx, [rbp + 0x1f]
call qword [sym.imp.gdiplus.dll_GdiplusStartup]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
lea ecx, [r12 + 1]
mov r15, rax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
xor ecx, ecx
mov esi, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov rcx, r15
mov edi, eax
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov r8d, esi
mov edx, edi
mov rcx, r15
mov r14, rax
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov rdx, rax
mov rcx, r14
mov rbx, rax
call qword [sym.imp.GDI32.dll_SelectObject]
mov dword [rsp + 0x40], 0xcc0020
mov r9d, edi
mov dword [rsp + 0x38], r12d
xor r8d, r8d
mov dword [rsp + 0x30], r12d
xor edx, edx
mov qword [rsp + 0x28], r15
mov rcx, r14
mov dword [rsp + 0x20], esi
call qword [sym.imp.GDI32.dll_BitBlt]
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.GDI32.dll_SelectObject]
lea r8, [rbp - 1]
mov qword [rbp - 1], r12
mov rcx, rax
mov qword [rbp - 9], rax
xor edx, edx
call qword [sym.imp.gdiplus.dll_GdipCreateBitmapFromHBITMAP]
movzx eax, word [0x1800361f2]
lea r14d, [r12 + 0xa]
movzx r12d, word [0x1800361f4]
mov ecx, 0x68
movzx esi, word [0x1800361f6]
xor ax, cx
movzx edi, word [str.type_must_be_string__but_is]
movzx r15d, cx
movzx ebx, word [0x1800361fa]
xor r12w, cx
movzx r11d, word [0x1800361fc]
xor si, cx
movzx r10d, word [0x1800361fe]
xor di, cx
movzx r9d, word [0x180036200]
xor bx, cx
movzx r8d, word [0x180036202]
xor r11w, cx
movzx edx, word [0x180036204]
xor r10w, cx
mov dword [rbp - 0x49], ecx
xor r9w, cx
xor r8w, cx
mov word [rbp - 0x45], ax
movzx eax, word [0x180036208]
xor dx, cx
mov word [rbp - 0x41], cx
mov r13d, 0x2b
movzx ecx, word [0x180036206]
xor ax, r15w
xor cx, r15w
xor r13w, word [rbp - 0x49]
mov word [rbp - 0x3f], r13w
mov r13d, 0x52
xor r13w, word [rbp - 0x49]
mov word [rbp - 0x3d], r13w
mov r13d, 0x34
xor r13w, word [rbp - 0x49]
mov word [rbp - 0x3b], r13w
mov r13d, r14d
xor r13w, word [rbp - 0x49]
mov word [rbp - 0x39], r13w
mov r13d, 0xd
xor r13w, word [rbp - 0x49]
mov word [rbp - 0x37], r13w
mov r13d, 0x68
xor r14w, r13w
xor ax, r13w
mov word [rbp - 0x35], r14w
xor r9w, r13w
xor r8w, r13w
mov word [rbp - 0xf], ax
xor dx, r13w
mov word [rbp - 0x17], r9w
xor cx, r13w
mov word [rbp - 0x15], r8w
mov r14d, 0x1a
mov word [rbp - 0x13], dx
xor r14w, r13w
mov word [rbp - 0x11], cx
mov rcx, qword [rbp - 1]
lea r8, [0x180037198]
mov word [rbp - 0x33], r14w
lea rdx, [rbp - 0x3f]
mov r14d, 9
xor r11w, r13w
xor r14w, r13w
mov word [rbp - 0x1b], r11w
mov word [rbp - 0x31], r14w
xor r10w, r13w
mov r14d, 0x46
mov word [rbp - 0x19], r10w
xor r14w, r13w
xor eax, eax
mov word [rbp - 0x2f], r14w
xor r15w, r13w
mov r14d, 0x18
mov word [rbp - 0x27], r15w
xor r14w, r13w
mov word [rbp - 0xd], ax
mov word [rbp - 0x2d], r14w
xor r12w, r13w
mov r14d, 6
mov word [rbp - 0x23], r12w
xor r14w, r13w
xor si, r13w
mov word [rbp - 0x2b], r14w
xor di, r13w
mov r14d, 0xf
mov word [rbp - 0x21], si
xor r14w, r13w
mov word [rbp - 0x1f], di
mov word [rbp - 0x29], r14w
xor bx, r13w
movzx r14d, word [rbp - 0x45]
xor r9d, r9d
xor r14w, r13w
mov word [rbp - 0x1d], bx
mov word [rbp - 0x25], r14w
call qword [sym.imp.gdiplus.dll_GdipSaveImageToFile]
mov rcx, qword [rbp - 9]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [rbp - 1]
call qword [sym.imp.gdiplus.dll_GdipDisposeImage]
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.180030770
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret