Function at 0x140442fd7
Capabilities:
Execute anti-debugging instructions

Disassembly:
push r15
stc
cmp bp, 0x3bbd
push r14
test sp, r9w
push r13
push r12
cmc
stc
cmp r9b, 0xc6
push rsi
cmp r14, 0x55774d7d
test bpl, r15b
test rdi, 0x5a1676c4
push rdi
cmp r12w, 0x68ca
cmc
jmp 0x14044300e
push rbp
clc
jmp 0x140443015
push rbx
clc
sub rsp, 0xa8
movaps xmmword [rsp + 0x90], xmm7
jmp 0x14044302b
movdqa xmmword [rsp + 0x80], xmm6
mov rbx, r9
mov ebp, r8d
xchg di, di
mov r14, rdx
not edi
mov rdi, rcx
and esi, 0x20c45632
mov rsi, qword [rsp + 0x110]
stc
jmp 0x140443059
cmp r8d, 0xff
jmp 0x140443065
jle 0x1404430dc
cmp ebp, 0x200
jmp 0x140443076
jle 0x14044317e
cmp ebp, 0x203
jle 0x140443226
cmp ebp, 0x204
je 0x14044354b
cmp ebp, 0x205
jmp 0x14044309f
je 0x140443597
cmp ebp, 0x2a2
jmp 0x1404430b0
jne 0x140443813
mov rcx, qword [rdi + 0x98]
jmp 0x1404430c3
test rcx, rcx
jmp 0x1404430cb
je 0x1404434ec
mov rax, qword [rcx]
call qword [rax + 0x20]
jmp 0x1404434ec
cmp ebp, 0x1b
jg 0x1404431dd
cmp ebp, 4
jg 0x140443288
cmp ebp, 2
jmp 0x1404430f6
je 0x1404435df
cmp ebp, 3
jmp 0x140443104
jne 0x140443813
movzx eax, si
jmp 0x140443115
cmp eax, 0x3e80
jmp 0x14044311f
ja 0x140443813
mov eax, esi
stc
jmp 0x14044312d
and eax, 0xffff0000
cmp eax, 0x3e800000
jmp 0x14044313c
ja 0x140443813
mov rcx, qword [rdi + 0x98]
cmp al, 0x3e
test rcx, rcx
jmp 0x140443153
je 0x140443813
mov r8, rsi
shr r8, 0x10
movsx edx, cx
rdtsc
jmp 0x14044316a
mov rax, qword [rcx]
movsxd rdx, edi
movsx edx, r10w
mov edx, esi
call qword [rax + 0x28]
jmp 0x140443813
cmp ebp, 0x103
jg 0x1404432e7
cmp ebp, 0x100
jmp 0x140443195
je 0x140443525
cmp ebp, 0x102
jmp 0x1404431a6
jne 0x140443813
mov rcx, qword [rdi + 0x98]
cmp sp, 0xb5
jmp 0x1404431bd
test rcx, rcx
jmp 0x1404431c5
je 0x140443813
mov rax, qword [rcx]
mov edx, ebx
jmp 0x1404431d5
call qword [rax + 0x40]
jmp 0x140443813
cmp ebp, 0x82
jg 0x140443343
cmp ebp, 0x1c
jmp 0x1404431f1
je 0x1404434ec
cmp ebp, 0x24
jne 0x140443813
mov eax, dword [rdi + 0x80]
jmp 0x14044320b
mov dword [rsi + 0x18], eax
mov eax, dword [rdi + 0x84]
jmp 0x140443219
mov dword [rsi + 0x1c], eax
jmp 0x140443221
jmp 0x140443813
cmp ebp, 0x201
jmp 0x140443231
je 0x1404435f2
cmp ebp, 0x202
jmp 0x140443242
jne 0x140443813
mov rcx, qword [rdi + 0x98]
test rcx, rcx
je 0x140443813
mov r8, rsi
rol rax, cl
rcl ax, 0x22
shr r8, 0x10
movsx rax, r9w
mov ax, r12w
mov rax, qword [rcx]
jmp 0x140443276
mov dword [rsp + 0x20], 1
jmp 0x140443283
jmp 0x140443635
cmp ebp, 5
jmp 0x140443290
je 0x140443647
cmp ebp, 6
jne 0x140443813
mov rcx, qword [rdi + 0x90]
mov dword [rsp + 0x30], 0x23
mov dword [rsp + 0x28], 0
stc
cmp r15b, spl
jmp 0x1404432bf
mov dword [rsp + 0x20], 0
cmc
jmp 0x1404432cd
xor edx, edx
test bp, 0x735f
clc
sub r8d, r8d
clc
xor r9d, r9d
call qword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x140443813
cmp ebp, 0x104
je 0x140443525
cmp ebp, 0x200
jmp 0x1404432fe
jne 0x140443813
mov rcx, qword [rdi + 0x98]
cmc
jmp 0x140443311
test rcx, rcx
jmp 0x140443319
je 0x140443813
mov r8, rsi
sbb dh, 0xe6
cmc
shr r8, 0x10
lahf
cwde
mov rax, qword [rcx]
jmp 0x140443334
mov edx, esi
jmp 0x14044333b
call qword [rax + 0x10]
jmp 0x140443813
cmp ebp, 0x83
jmp 0x14044334e
je 0x1404436a9
cmp ebp, 0x84
jmp 0x14044335f
jne 0x140443813
mov rbp, qword [sym.imp.USER32.dll_GetSystemMetrics]
movsxd rcx, r11d
not cl
mov ecx, 0x20
call rbp
mov r15d, eax
mov ecx, 0x5c
jmp 0x140443385
call rbp
mov r12d, eax
movsxd rcx, r15d
movsx cx, r12b
mov ecx, 0x21
call rbp
mov ebx, eax
movzx ecx, r15w
bswap rcx
jmp 0x1404433a7
mov ecx, 0x5c
jmp 0x1404433b1
call rbp
mov ebp, eax
lea rdx, [rsp + 0x40]
movsx ecx, dx
mov rcx, r14
jmp 0x1404433c5
call qword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
jmp 0x1404433d2
je 0x1404437d3
mov r13d, esi
test r8b, sil
sar r13d, 0x10
jmp 0x1404433e7
movsx esi, si
jmp 0x1404433ef
movdqa xmm6, xmmword [rsp + 0x40]
mov dword [rsp + 0x38], esi
cqo
movzx rcx, ax
movsx rdx, bx
mov dword [rsp + 0x3c], r13d
movzx edx, r13w
movzx rdx, r12w
cqo
mov rcx, qword [rdi + 0x90]
cqo
cmovnp rdx, r15
lea rdx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_ScreenToClient]
mov rcx, r14
jmp 0x140443432
call qword [sym.imp.USER32.dll_IsZoomed]
test eax, eax
jmp 0x14044343f
je 0x140443885
mov rcx, qword [rdi + 0x98]
clc
test dx, r8w
test rcx, rcx
jmp 0x140443459
je 0x14044397b
movzx edx, word [rsp + 0x38]
cdqe
movsxd r8, ecx
mov r8b, 0x99
movzx r8d, word [rsp + 0x3c]
movsx eax, r12w
mov rax, qword [rcx]
jmp 0x14044347e
call qword [rax + 0x10]
xorps xmm6, xmm6
cvtsi2ss xmm6, r13d
cvtsi2ss xmm7, dword [rsp + 0x44]
mov ebx, eax
bswap ax
cbw
mov rcx, qword [rdi + 0x98]
movsx eax, r12w
cbw
movzx ax, sil
mov rax, qword [rcx]
jmp 0x1404434b0
call qword [rax + 0x48]
addss xmm0, xmm7
ucomiss xmm0, xmm6
setbe al
btr rsi, 0xc9
ror sil, 0x5a
or al, bl
inc rsi
movzx eax, al
test r9, rax
bsf si, sp
xor sil, bl
mov esi, 2
cmp r8d, ecx
test r15b, cl
clc
sub rsi, rax
jmp 0x140443987
mov rcx, qword [rdi + 0x98]
test r14d, 0x4f987a1f
test rbx, rbx
jmp 0x140443502
je 0x1404437b5
test rcx, rcx
jmp 0x140443510
je 0x140443813
mov rax, qword [rcx]
jmp 0x14044351e
call qword [rax]
jmp 0x140443813
mov rcx, qword [rdi + 0x98]
clc
test rcx, rcx
jmp 0x140443535
je 0x140443813
mov rax, qword [rcx]
xchg rdx, rdx
mov edx, ebx
call qword [rax + 0x38]
jmp 0x140443813
mov rcx, qword [rdi + 0x98]
test r12, rsi
test r11w, 0x406
test rcx, rcx
jmp 0x140443563
je 0x140443813
mov r8, rsi
test r15b, 0xd8
sbb ax, 0x1451
jmp 0x140443579
shr r8, 0x10
mov rax, qword [rcx]
jmp 0x140443585
mov dword [rsp + 0x20], 0
jmp 0x140443592
jmp 0x1404435ca
mov rcx, qword [rdi + 0x98]
stc
clc
test rcx, rcx
je 0x140443813
mov r8, rsi
movsx r9d, cx
shr r8, 0x10
rdtsc
mov rax, qword [rcx]
mov r9w, 0x1e5f
cmovge edx, edx
cdq
mov dword [rsp + 0x20], 1
mov edx, esi
mov r9d, 1
jmp 0x1404435d7
call qword [rax + 0x18]
jmp 0x140443813
sub esi, esi
test r9b, 0xf0
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x140443987
mov rcx, qword [rdi + 0x98]
clc
test rcx, rcx
je 0x140443813
mov r8, rsi
rol ah, 0x88
shr r8, 0x10
and edx, 0x4e623f0a
or ah, 0x2e
mov rax, qword [rcx]
cmovae dx, r8w
add rdx, 0x438d7569
mov dword [rsp + 0x20], 0
shr dx, 0xbe
bsr dx, di
mov edx, esi
sub r9d, r9d
jmp 0x14044363f
call qword [rax + 0x18]
jmp 0x140443813
mov r9, rsi
test r8b, bl
shr r9, 0x10
cmp r14w, 0x411f
test di, cx
cmp rbx, 2
jmp 0x140443663
je 0x1404437df
test rbx, rbx
jmp 0x140443671
jne 0x140443813
mov rcx, qword [rdi + 0x98]
jmp 0x14044368b
test rcx, rcx
jmp 0x140443693
je 0x140443813
mov rax, qword [rcx]
stc
xor edx, edx
jmp 0x1404436a4
jmp 0x140443808
mov ebp, dword [rsi]
xchg r8b, r8b
movzx edx, r14w
movzx dx, r11b
mov r12d, dword [rsi + 4]
mov r8, r14
movsxd rcx, esi
not r15d
mov r15d, dword [rsi + 8]
not r9w
setb dil
mov edi, dword [rsi + 0xc]
movzx rcx, r13w
movsx ecx, dx
movsxd rdx, r10d
mov rcx, r14
movzx r8, dx
movsx dx, r10b
mov edx, 0x83
mov r8, rbx
movsx r9, ax
bswap r9w
mov r9, rsi
call qword [sym.imp.USER32.dll_DefWindowProcW]
mov rcx, r14
jmp 0x14044370a
call qword [sym.imp.USER32.dll_IsZoomed]
test eax, eax
jmp 0x140443717
je 0x140443792
xorps xmm0, xmm0
movups xmmword [rsp + 0x64], xmm0
cwd
movups xmmword [rsp + 0x54], xmm0
cdq
movups xmmword [rsp + 0x44], xmm0
cdq
cqo
movsx dx, r10b
mov qword [rsp + 0x74], 0
cwd
movsx cx, r14b
setbe dh
mov dword [rsp + 0x40], 0x3c
lea rdx, [rsp + 0x40]
mov cl, spl
movsx ecx, di
mov rcx, r14
jmp 0x140443768
call qword [sym.imp.USER32.dll_GetWindowInfo]
mov eax, dword [rsp + 0x74]
cmp dl, r8b
add ebp, eax
cmp esi, r11d
cmc
add r12d, eax
sub r15d, eax
sub edi, eax
jmp 0x140443788
inc edi
cmp r10b, 0x33
test r13, rdi
stc
mov dword [rsi], ebp
mov dword [rsi + 4], r12d
mov dword [rsi + 8], r15d
cmp r8b, 0x67
mov dword [rsi + 0xc], edi
clc
jmp 0x1404437a9
sub esi, esi
jmp 0x1404437b0
jmp 0x140443987
test rcx, rcx
jmp 0x1404437bd
je 0x140443813
mov rax, qword [rcx]
jmp 0x1404437cb
call qword [rax + ioctlsocket]
jmp 0x140443813
xor esi, esi
jmp 0x1404437da
jmp 0x140443987
mov rcx, qword [rdi + 0x98]
cmc
test rcx, rcx
jmp 0x1404437ef
je 0x140443813
mov rax, qword [rcx]
mov edx, 2
not r8b
setae r8b
bswap r8w
mov r8d, esi
jmp 0x140443810
call qword [rax + 0x30]
mov rcx, r14
cmp r9w, 0x7793
neg r9w
mov edx, ebp
mov r8, rbx
shr dil, 0x7a
mov r9, rsi
movaps xmm6, xmmword [rsp + 0x80]
movzx r14, di
rcr r15d, cl
movaps xmm7, xmmword [rsp + 0x90]
add rsp, 0xa8
pop rbx
mov r12, rsi
movsx r12, r9w
movsx esi, di
pop rbp
xchg r15b, r15b
jmp 0x140443862
pop rdi
pop rsi
movsx r13d, r15w
jmp 0x14044386d
pop r12
cmovns r13d, r13d
pop r13
pop r14
pop r15
jmp 0x14044387e
push qword [sym.imp.USER32.dll_DefWindowProcW]
ret
movd xmm0, r12d
movd xmm1, ebx
punpckldq xmm1, xmm0
movd xmm0, r15d
movd xmm2, ebp
punpckldq xmm2, xmm0
paddd xmm2, xmm1
cvtdq2ps xmm0, xmm2
divps xmm0, xmmword [0x1400bfe30]
cvttps2dq xmm0, xmm0
pshufd xmm0, xmm0, 0x11
movdqa xmm1, xmm6
paddd xmm1, xmm0
psubd xmm6, xmm0
pshufd xmm0, xmm6, 0xeb
pshufd xmm1, xmm1, 0xe1
punpckldq xmm1, xmm0
movd xmm0, esi
movd xmm2, r13d
punpckldq xmm2, xmm0
pshufd xmm0, xmm2, 0x50
pcmpgtd xmm1, xmm0
movmskps eax, xmm1
xor ecx, ecx
test al, 2
xchg cl, bpl
mov cl, cl
movzx ebp, r9w
sete cl
sub edx, edx
cmovbe bx, r13w
test al, 8
setl dl
sete dl
bswap bp
rcr ebp, 0xda
mov ebx, 0x60a55d90
mov ebx, eax
btc bp, 0xc6
bswap bp
and bl, 4
shr bl, 2
movzx ebp, bl
lea edx, [rbp + rdx*2]
and eax, 1
stc
lea eax, [rdx + rax*4]
lea eax, [rax + rcx*8]
cmp esp, ebp
cmp eax, 5
jg 0x1404439f9
cmp eax, 3
jmp 0x140443947
jg 0x140443a32
mov esi, 0xa
test bh, 0x88
cmp eax, 1
jmp 0x14044395d
je 0x140443987
cmp eax, 2
jmp 0x14044396b
jne 0x140443445
mov esi, 0xb
jmp 0x140443987
mov esi, 1
rcl r15w, cl
ror eax, 0x85
mov rax, rsi
sal bpl, cl
movaps xmm6, xmmword [rsp + 0x80]
rcl r14d, cl
shl r13b, 0xa5
movaps xmm7, xmmword [rsp + 0x90]
add rsp, 0xa8
movsx r15, r14w
not r13d
pop rbx
not r13d
mov r13b, r15b
movsxd r15, ebp
pop rbp
pop rdi
not sil
movzx r14w, dil
movsx rsi, cx
pop rsi
not r12b
seto r13b
mov r13w, 0x172
pop r12
pop r13
jmp 0x1404439e7
pop r14
cmovnp r15w, r14w
jmp 0x1404439f6
pop r15
ret
cmp eax, 8
jmp 0x140443a01
jg 0x140443a58
cmp eax, 6
jmp 0x140443a0f
je 0x140443a83
cmp eax, 8
jmp 0x140443a1d
jne 0x140443445
mov esi, 0xf
jmp 0x140443a2d
jmp 0x140443987
cmp eax, 4
jmp 0x140443a3a
je 0x140443a92
cmp eax, 5
jne 0x140443445
mov esi, 0xd
jmp 0x140443a53
jmp 0x140443987
cmp eax, 9
jmp 0x140443a60
je 0x140443aa1
cmp eax, 0xa
jmp 0x140443a6e
jne 0x140443445
mov esi, 0x11
jmp 0x140443a7e
jmp 0x140443987
mov esi, 0xe
jmp 0x140443a8d
jmp 0x140443987
mov esi, 0xc
jmp 0x140443a9c
jmp 0x140443987
mov esi, 0x10
jmp 0x140443aab
jmp 0x140443987