Function at 0x1400aa2b0
Capabilities:
Capture screenshot

Disassembly:
mov rax, rsp
push rbp
push rsi
push r12
push r14
push r15
sub rsp, 0xd0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x14018db80]
xor rax, rsp
mov qword [rsp + 0xa0], rax
cvttss2si esi, dword [0x14018d9c8]
lea rcx, [rsp + 0x60]
cvttss2si ebp, dword [0x14018d9cc]
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x54], ebp
call fcn.1400abcf0
lea rcx, [rsp + 0x60]
call fcn.1400abcf0
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
mov r8d, ebp
mov edx, esi
mov rcx, rax
mov qword [rsp + 0x70], rax
mov r15, rax
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov ecx, dword [0x140194f8c]
mov r12, rax
imul ecx, dword [0x140194f88]
mov qword [rsp + 0x60], rax
lea ecx, [rcx + rcx*4]
movsxd rcx, ecx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, r15
mov qword [0x140194d88], rax
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
xorps xmm0, xmm0
mov dword [rsp + 0x78], Ordinal_41
mov r14, rax
mov qword [rsp + 0x68], rax
mov eax, dword [0x140194f88]
cdq
mov qword [rsp + 0x84], 0x200001
sub eax, edx
mov dword [rsp + 0x7c], esi
sar eax, 1
movdqu xmmword [rsp + 0x90], xmm0
movd xmm6, eax
mov eax, dword [0x140194f8c]
cdq
sub eax, edx
sar eax, 1
cvtdq2pd xmm6, xmm6
movd xmm7, eax
mov eax, ebp
neg eax
mov dword [rsp + 0x80], eax
xor eax, eax
cmp byte [reloc.WS2_32.dll_accept], al
cvtdq2pd xmm7, xmm7
mov dword [rsp + 0x8c], eax
je 0x1400aa6a8
mov qword [rsp + 0x100], rbx
mov qword [rsp + 0x108], rdi
movzx edi, byte [rsp + 0x50]
mov qword [rsp + 0x110], r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x140194d9b], 0
je 0x1400aa678
mov rdx, r12
mov rcx, r14
call qword [sym.imp.GDI32.dll_SelectObject]
mov dword [rsp + 0x40], 0xcc0020
movaps xmm1, xmm7
mov rbx, rax
mov r9d, esi
mov eax, ebp
xor r8d, r8d
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
mov eax, esi
cdq
cvtdq2pd xmm0, xmm0
sub eax, edx
xor edx, edx
sar eax, 1
subsd xmm1, xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
cvttsd2si ecx, xmm1
movaps xmm1, xmm6
mov dword [rsp + 0x38], ecx
subsd xmm1, xmm0
mov rcx, r14
cvttsd2si eax, xmm1
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], ebp
call qword [sym.imp.GDI32.dll_BitBlt]
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.GDI32.dll_SelectObject]
lea rax, [rsp + 0x78]
mov dword [rsp + 0x30], 0
mov qword [rsp + 0x28], rax
mov r9d, ebp
mov rax, qword [0x140194d88]
xor r8d, r8d
mov rdx, r12
mov qword [rsp + 0x20], rax
mov rcx, r14
call qword [sym.imp.GDI32.dll_GetDIBits]
xor r14d, r14d
test ebp, ebp
jle 0x1400aa655
mov r13, qword [0x140194d88]
lea r12d, [rsi*4]
mov r11d, dword [0x140194dfc]
xor r15d, r15d
nop dword [rax + rax]
xor ebx, ebx
test r12d, r12d
jle 0x1400aa646
movsxd rax, r15d
lea r10, [r13 + 2]
mov rsi, 0xfffffffffffffffe
movsxd rbp, r12d
lea rax, [rax*4]
add r10, rax
sub rsi, rax
sub rsi, r13
nop dword [rax]
movzx r8d, byte [r10 - 2]
movzx ecx, byte [r10 - 1]
movzx edx, byte [r10]
cmp r11d, 1
jbe 0x1400aa5bc
cmp r11d, 2
jne 0x1400aa58a
lea eax, [rdx - 0xdd]
cmp eax, 0x21
ja 0x1400aa627
lea eax, [rcx - 0x3d]
cmp eax, 0x1c
ja 0x1400aa627
lea eax, [r8 - 0x3d]
cmp eax, 0x1c
ja 0x1400aa627
mov dil, 1
mov ebp, dword [rsp + 0x54]
mov eax, ebp
mov esi, dword [rsp + 0x58]
cdq
sub eax, edx
sar eax, 1
sub r14d, eax
mov eax, ebx
cdq
and edx, 3
movd xmm0, r14d
cvtdq2ps xmm0, xmm0
lea ecx, [rdx + rax]
mov eax, esi
cdq
sar ecx, 2
sub eax, edx
sar eax, 1
sub ecx, eax
addss xmm0, dword [0x140194e20]
cvttss2si r8d, xmm0
jmp 0x1400aa65a
cmp r11d, 3
jne 0x1400aa5b5
lea eax, [rdx - 0xf1]
cmp eax, 0xd
ja 0x1400aa627
lea eax, [rcx - 0xf1]
cmp eax, 0xd
ja 0x1400aa627
lea eax, [r8 - 0x3d]
cmp eax, 0x11
jbe 0x1400aa546
jmp 0x1400aa627
test dil, dil
jne 0x1400aa549
jmp 0x1400aa62a
cmp ecx, 0xbe
jae 0x1400aa627
mov eax, edx
sub eax, r8d
mov r9d, eax
neg r9d
cmovs r9d, eax
cmp ecx, 0x8c
jb 0x1400aa5ff
cmp r9d, 8
jg 0x1400aa627
mov eax, edx
sub eax, ecx
cmp eax, 0x32
jl 0x1400aa627
mov eax, r8d
sub eax, ecx
cmp eax, 0x32
jl 0x1400aa627
cmp edx, 0x69
jb 0x1400aa627
cmp r8d, 0x69
jmp 0x1400aa621
cmp r9d, 0xd
jg 0x1400aa627
mov eax, edx
sub eax, ecx
cmp eax, 0x3c
jl 0x1400aa627
mov eax, r8d
sub eax, ecx
cmp eax, 0x3c
jl 0x1400aa627
cmp edx, 0x6e
jb 0x1400aa627
cmp r8d, 0x64
jae 0x1400aa546
xor dil, dil
add r10, 4
add ebx, 4
lea rax, [rsi + r10]
cmp rax, rbp
jl 0x1400aa500
mov esi, dword [rsp + 0x58]
mov ebp, dword [rsp + 0x54]
inc r14d
add r15d, esi
cmp r14d, ebp
jl 0x1400aa4d0
xor r8d, r8d
xor ecx, ecx
mov r14, qword [rsp + 0x68]
mov r15, qword [rsp + 0x70]
mov r12, qword [rsp + 0x60]
mov dword [0x140194d90], ecx
mov dword [0x140194d94], r8d
jmp 0x1400aa683
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x1400aa3e6
mov r13, qword [rsp + 0x110]
mov rdi, qword [rsp + 0x108]
mov rbx, qword [rsp + 0x100]
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.14012def0
movaps xmm6, xmmword [rsp + 0xc0]
movaps xmm7, xmmword [rsp + 0xb0]
add rsp, 0xd0
pop r15
pop r14
pop r12
pop rsi
pop rbp
ret