Function at 0x1400232d0
Capabilities:
Capture screenshot

Disassembly:
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x200
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov qword [rsp + 0x68], rax
mov edx, 8
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov dword [rsp + 0x58], eax
mov edx, 0xa
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov dword [rsp + 0x54], eax
mov r8d, dword [rsp + 0x54]
mov edx, dword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov qword [rsp + 0x70], rax
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.GDI32.dll_SelectObject]
mov qword [rsp + 0xb8], rax
mov dword [rsp + 0x40], 0xcc0020
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x58]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.GDI32.dll_BitBlt]
lea rax, [rsp + 0xc0]
mov rdi, rax
xor eax, eax
mov ecx, Ordinal_41
rep stosb byte [rdi], al
mov dword [rsp + 0xc0], Ordinal_41
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0xc4], eax
mov eax, dword [rsp + 0x54]
neg eax
mov dword [rsp + 0xc8], eax
mov eax, 1
mov word [rsp + 0xcc], ax
mov eax, reloc.WLDAP32.dll_Ordinal_32
mov word [rsp + 0xce], ax
mov dword [rsp + 0xd0], 0
mov dword [rsp + 0xd4], 0
lea rcx, [rsp + 0x5c]
call fcn.140001d20
mov ecx, dword [rsp + 0x58]
imul ecx, dword [rsp + 0x54]
shl ecx, 2
movsxd rcx, ecx
mov r8, rax
mov rdx, rcx
lea rcx, [rsp + 0x88]
call fcn.14000f080
nop
xor edx, edx
lea rcx, [rsp + 0x88]
call fcn.1400210b0
mov dword [rsp + 0x30], 0
lea rcx, [rsp + 0xc0]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x54]
xor r8d, r8d
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.GDI32.dll_GetDIBits]
mov dword [rsp + 0x82], gethostname
mov eax, dword [rsp + 0x82]
mov qword [rsp + 0xa0], rax
lea rcx, [rsp + 0x88]
call fcn.14001a0c0
mov rcx, qword [rsp + 0xa0]
add rcx, rax
mov rax, rcx
mov dword [rsp + 0x7a], eax
mov eax, 0x4d42
mov word [rsp + 0x78], ax
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, Ordinal_35
mov rdx, qword [rsp + 0x210]
lea rcx, [rsp + 0xf0]
call fcn.14001b220
nop
lea rcx, [rsp + 0xf0]
call fcn.14002dee0
movzx eax, al
test eax, eax
jne 0x140023512
mov byte [rsp + 0x50], 0
lea rcx, [rsp + 0xf0]
call fcn.140002b20
nop
lea rcx, [rsp + 0x88]
call fcn.1400100a0
movzx eax, byte [rsp + 0x50]
jmp 0x1400235fa
mov r8d, reloc.WS2_32.dll_ntohl
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0xf0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
mov r8d, Ordinal_41
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0xf0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rsp + 0x88]
call fcn.14001a0c0
mov qword [rsp + 0xa8], rax
xor edx, edx
lea rcx, [rsp + 0x88]
call fcn.1400210b0
mov qword [rsp + 0xb0], rax
mov r8, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0xb0]
lea rcx, [rsp + 0xf0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rsp + 0xf0]
call fcn.1400039a0
mov rdx, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.GDI32.dll_SelectObject]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rdx, qword [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
nop
mov byte [rsp + 0x51], 1
lea rcx, [rsp + 0xf0]
call fcn.140002b20
nop
lea rcx, [rsp + 0x88]
call fcn.1400100a0
movzx eax, byte [rsp + 0x51]
add rsp, 0x200
pop rdi
ret