Function at 0x14020b9b4
Capabilities:
Capture screenshot

Disassembly:
jmp 0x14036e470
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x1c8
lea rbp, [rsp + 0x50]
lea rdi, [rsp + 0x50]
mov ecx, 0x2e
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x1e8]
mov rax, qword [0x140961e80]
xor rax, rbp
mov qword [rbp + 0x168], rax
mov dword [rbp + 0x88], 0
mov dword [rbp + 0x8c], 0
mov rax, qword [rbp + 0x190]
mov rcx, qword [rbp + 0x190]
mov ecx, dword [rcx + 0x28]
mov eax, dword [rax + 0x30]
sub eax, ecx
mov dword [rbp + 0x90], eax
mov rax, qword [rbp + 0x190]
mov rcx, qword [rbp + 0x190]
mov ecx, dword [rcx + 0x2c]
mov eax, dword [rax + 0x34]
sub eax, ecx
mov dword [rbp + 0x94], eax
mov rax, qword [rbp + 0x190]
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_GetDC]
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0
jne 0x14036e51a
jmp 0x14036e798
mov rcx, qword [rbp + 8]
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov qword [rbp + 0x28], rax
mov r8d, dword [rbp + 0x94]
mov edx, dword [rbp + 0x90]
mov rcx, qword [rbp + 8]
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov qword [rbp + 0x48], rax
mov rdx, qword [rbp + 0x48]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.GDI32.dll_SelectObject]
mov qword [rbp + 0x68], rax
mov edx, 1
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.GDI32.dll_SetBkMode]
nop
movzx eax, byte [0x14096b2a8]
test eax, eax
je 0x14036e61a
mov eax, dword [0x14096ee5c]
mov dword [rbp + 0x164], eax
cmp dword [rbp + 0x164], 0
je 0x14036e597
cmp dword [rbp + 0x164], 1
je 0x14036e5d6
jmp 0x14036e618
xor edx, edx
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.GDI32.dll_SetTextColor]
nop
mov edx, 0xffffff
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.GDI32.dll_SetDCBrushColor]
nop
mov ecx, 0x12
call qword [sym.imp.GDI32.dll_GetStockObject]
mov r8, rax
lea rdx, [rbp + 0x88]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.USER32.dll_FillRect]
nop
jmp 0x14036e618
mov edx, dword [0x14095f744]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.GDI32.dll_SetTextColor]
nop
mov edx, dword [0x14095f738]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.GDI32.dll_SetDCBrushColor]
nop
mov ecx, 0x12
call qword [sym.imp.GDI32.dll_GetStockObject]
mov r8, rax
lea rdx, [rbp + 0x88]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.USER32.dll_FillRect]
nop
jmp 0x14036e652
mov ecx, 8
call qword [sym.imp.USER32.dll_GetSysColor]
mov edx, eax
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.GDI32.dll_SetTextColor]
nop
mov ecx, 5
call qword [sym.imp.USER32.dll_GetSysColorBrush]
mov r8, rax
lea rdx, [rbp + 0x88]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.USER32.dll_FillRect]
nop
movzx eax, byte [0x14096a76c]
test eax, eax
jne 0x14036e668
movzx eax, byte [0x14096a76d]
test eax, eax
je 0x14036e6ca
movzx eax, byte [0x14096a76e]
test eax, eax
je 0x14036e6aa
lea rax, [rbp + 0x88]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x88]
mov qword [rsp + 0x20], rax
mov r9d, 2
mov r8d, 1
mov rdx, qword [rbp + 0x28]
mov rcx, qword [0x14096a798]
call fcn.1402119e0
nop
jmp 0x14036e6ca
mov ecx, 5
call qword [sym.imp.USER32.dll_GetSysColorBrush]
mov r8, rax
lea rdx, [rbp + 0x88]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.USER32.dll_FillRect]
nop
mov rdx, qword [0x14096a708]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.GDI32.dll_SelectObject]
nop
mov dword [rsp + 0x20], 0x25
lea r9, [rbp + 0x88]
mov r8d, 4
lea rdx, str.Back
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.USER32.dll_DrawTextW]
nop
mov dword [rsp + 0x40], 0xcc0020
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov rax, qword [rbp + 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x190]
mov eax, dword [rax + 0x34]
mov dword [rsp + 0x20], eax
mov rax, qword [rbp + 0x190]
mov r9d, dword [rax + 0x30]
mov rax, qword [rbp + 0x190]
mov r8d, dword [rax + 0x2c]
mov rax, qword [rbp + 0x190]
mov edx, dword [rax + 0x28]
mov rcx, qword [rbp + 8]
call qword [sym.imp.GDI32.dll_BitBlt]
nop
mov rdx, qword [rbp + 0x68]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.GDI32.dll_SelectObject]
nop
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.GDI32.dll_DeleteObject]
nop
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.GDI32.dll_DeleteDC]
nop
mov rdx, qword [rbp + 8]
mov rax, qword [rbp + 0x190]
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_ReleaseDC]
nop
lea rcx, [rbp - 0x50]
lea rdx, [0x1407793d0]
call fcn.1402124fd
mov rcx, qword [rbp + 0x168]
xor rcx, rbp
call fcn.14020ee98
lea rsp, [rbp + 0x178]
pop rdi
pop rbp
ret