Function at 0x140012a82
Capabilities:
Capture screenshot

Disassembly:
jmp 0x140023d90
push rbp
push rdi
sub rsp, 0x5b8
lea rbp, [rsp + 0x60]
lea rdi, [rsp + 0x60]
mov ecx, 0xf6
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140048060]
xor rax, rbp
mov qword [rbp + 0x540], rax
lea rcx, [0x140054f11]
call fcn.140012e60
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, str.DISPLAY
call qword [sym.imp.GDI32.dll_CreateDCA]
mov qword [rbp + 8], rax
mov rcx, qword [rbp + 8]
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov qword [rbp + 0x28], rax
mov edx, 8
mov rcx, qword [rbp + 8]
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov dword [rbp + 0xa4], eax
mov edx, 0xa
mov rcx, qword [rbp + 8]
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov dword [rbp + 0xc4], eax
mov r8d, dword [rbp + 0xc4]
mov edx, dword [rbp + 0xa4]
mov rcx, qword [rbp + 8]
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov qword [rbp + 0x48], rax
cmp qword [rbp + 0x48], 0
jne 0x140023e45
jmp 0x140024342
mov rdx, qword [rbp + 0x48]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.GDI32.dll_SelectObject]
test rax, rax
jne 0x140023e5d
jmp 0x140024342
mov dword [rsp + 0x50], 0xcc0020
mov eax, dword [rbp + 0xc4]
mov dword [rsp + 0x48], eax
mov eax, dword [rbp + 0xa4]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov rax, qword [rbp + 8]
mov qword [rsp + 0x28], rax
mov eax, dword [rbp + 0xc4]
mov dword [rsp + 0x20], eax
mov r9d, dword [rbp + 0xa4]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.GDI32.dll_StretchBlt]
test eax, eax
jne 0x140023ebb
jmp 0x140024342
lea r8, [rbp + 0x68]
mov edx, 0x20
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.GDI32.dll_GetObjectW]
test eax, eax
jne 0x140023ed7
jmp 0x140024342
movzx eax, word [rbp + 0x78]
movzx ecx, word [rbp + 0x7a]
imul eax, ecx
mov word [rbp + 0x104], ax
movzx eax, word [rbp + 0x104]
cmp eax, 1
jne 0x140023f03
mov eax, 1
mov word [rbp + 0x104], ax
jmp 0x140023f77
movzx eax, word [rbp + 0x104]
cmp eax, 4
jg 0x140023f1d
mov eax, 4
mov word [rbp + 0x104], ax
jmp 0x140023f77
movzx eax, word [rbp + 0x104]
cmp eax, 8
jg 0x140023f37
mov eax, 8
mov word [rbp + 0x104], ax
jmp 0x140023f77
movzx eax, word [rbp + 0x104]
cmp eax, 0x10
jg 0x140023f51
mov eax, reloc.WS2_32.dll_recv
mov word [rbp + 0x104], ax
jmp 0x140023f77
movzx eax, word [rbp + 0x104]
cmp eax, 0x18
jg 0x140023f6b
mov eax, 0x18
mov word [rbp + 0x104], ax
jmp 0x140023f77
mov eax, 0x20
mov word [rbp + 0x104], ax
movzx eax, word [rbp + 0x104]
cmp eax, 0x18
je 0x140023fc1
movzx eax, word [rbp + 0x104]
mov ecx, 1
mov dword [rbp + 0x534], ecx
movzx ecx, al
mov eax, dword [rbp + 0x534]
shl eax, cl
cdqe
lea rax, [rax*4 + 0x28]
mov rdx, rax
mov ecx, 0x40
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov qword [rbp + 0xe8], rax
jmp 0x140023fd8
mov edx, 0x28
mov ecx, 0x40
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov qword [rbp + 0xe8], rax
mov rax, qword [rbp + 0xe8]
mov dword [rax], 0x28
mov rax, qword [rbp + 0xe8]
mov ecx, dword [rbp + 0x6c]
mov dword [rax + 4], ecx
mov rax, qword [rbp + 0xe8]
mov ecx, dword [rbp + 0x70]
mov dword [rax + 8], ecx
mov rax, qword [rbp + 0xe8]
movzx ecx, word [rbp + 0x78]
mov word [rax + 0xc], cx
mov rax, qword [rbp + 0xe8]
movzx ecx, word [rbp + 0x7a]
mov word [rax + 0xe], cx
mov rax, qword [rbp + 0xe8]
mov dword [rax + 0x10], 0
mov rax, qword [rbp + 0xe8]
mov eax, dword [rax + 4]
add eax, 7
cdq
and edx, 7
add eax, edx
sar eax, 3
mov rcx, qword [rbp + 0xe8]
imul eax, dword [rcx + 8]
movzx ecx, word [rbp + 0x104]
imul eax, ecx
mov rcx, qword [rbp + 0xe8]
mov dword [rcx + 0x14], eax
mov rax, qword [rbp + 0xe8]
mov dword [rax + 0x24], 0
mov rax, qword [rbp + 0xe8]
mov qword [rbp + 0x158], rax
mov rax, qword [rbp + 0x158]
mov eax, dword [rax + 0x14]
mov edx, eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov qword [rbp + 0x1b8], rax
cmp qword [rbp + 0x1b8], 0
jne 0x1400240a6
jmp 0x140024342
mov rax, qword [rbp + 0x158]
movzx eax, word [rax + 8]
mov dword [rsp + 0x30], 0
mov rcx, qword [rbp + 0xe8]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x1b8]
mov qword [rsp + 0x20], rcx
mov r9d, eax
xor r8d, r8d
mov rdx, qword [rbp + 0x48]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.GDI32.dll_GetDIBits]
test eax, eax
jne 0x1400240fb
mov rcx, qword [rbp + 0x1b8]
call qword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x140024342
mov eax, 0x4d42
mov word [rbp + 0x128], ax
mov rax, qword [rbp + 0x158]
mov eax, dword [rax]
mov rcx, qword [rbp + 0x158]
mov ecx, dword [rcx + 0x20]
lea rax, [rax + rcx*4 + 0xe]
mov rcx, qword [rbp + 0x158]
mov ecx, dword [rcx + 0x14]
add rax, rcx
mov dword [rbp + 0x12a], eax
xor eax, eax
mov word [rbp + 0x12e], ax
xor eax, eax
mov word [rbp + 0x130], ax
mov rax, qword [rbp + 0x158]
mov eax, dword [rax]
add eax, 0xe
mov eax, eax
mov rcx, qword [rbp + 0x158]
mov ecx, dword [rcx + 0x20]
lea rax, [rax + rcx*4]
mov dword [rbp + 0x132], eax
mov rax, qword [rbp + 0x158]
mov eax, dword [rax + 0x14]
mov dword [rbp + 0x194], eax
mov rax, qword [rbp + 0x158]
mov eax, dword [rax + 0x20]
lea rax, [rax*4 + 0x36]
mov dword [rbp + 0x214], eax
mov eax, dword [rbp + 0x194]
mov ecx, dword [rbp + 0x214]
add ecx, eax
mov eax, ecx
mov dword [rbp + 0x214], eax
mov eax, dword [rbp + 0x214]
mov edx, eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov qword [rbp + 0x238], rax
mov eax, dword [rbp + 0x214]
mov r9d, send
lea r8, [rbp + 0x128]
mov edx, eax
mov rcx, qword [rbp + 0x238]
call fcn.140027000
mov eax, dword [rbp + 0x214]
sub rax, 0xe
mov rcx, qword [rbp + 0x238]
add rcx, 0xe
mov r9d, 0x28
mov r8, qword [rbp + 0x158]
mov rdx, rax
call fcn.140027000
mov eax, dword [rbp + 0x194]
mov ecx, dword [rbp + 0x214]
sub rcx, 0x36
mov rdx, qword [rbp + 0x238]
add rdx, 0x36
mov qword [rbp + 0x538], rdx
mov r9d, eax
mov r8, qword [rbp + 0x1b8]
mov rdx, rcx
mov rax, qword [rbp + 0x538]
mov rcx, rax
call fcn.140027000
mov rcx, qword [rbp + 0x1b8]
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rdx, qword [rbp + 8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rdx, qword [rbp + 0x28]
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
lea rdx, str.._save.jpg
lea rcx, [rbp + 0x258]
call fcn.14001268b
nop
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 0x20
lea rdx, [rbp + 0x258]
lea rcx, [rbp + 0x2a0]
call fcn.140012ea1
nop
mov rax, qword [rbp + 0x2a0]
movsxd rax, dword [rax + 4]
lea rax, [rbp + rax + 0x2a0]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
movzx eax, al
test eax, eax
je 0x1400242ff
lea rcx, [rbp + 0x258]
call fcn.140012145
mov rdx, rax
lea rcx, str.cant_open____s_n
call fcn.1400126e0
nop
lea rcx, [rbp + 0x2a0]
call fcn.14001236b
nop
lea rcx, [rbp + 0x258]
call fcn.1400122ad
jmp 0x140024342
mov eax, dword [rbp + 0x214]
mov r8d, eax
mov rdx, qword [rbp + 0x238]
lea rcx, [rbp + 0x2a0]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rbp + 0x2a0]
call fcn.14001278f
nop
lea rcx, [rbp + 0x2a0]
call fcn.14001236b
nop
lea rcx, [rbp + 0x258]
call fcn.1400122ad
lea rcx, [rbp - 0x60]
lea rdx, reloc.WS2_32.dll_connect
call fcn.140012c08
mov rcx, qword [rbp + 0x540]
xor rcx, rbp
call fcn.140012717
lea rsp, [rbp + 0x558]
pop rdi
pop rbp
ret