Function at 0x9f53ad
Capabilities:
Execute anti-debugging instructions

Disassembly:
lea ecx, [edi*8 - 0x2bd6a160]
mov eax, dword [ebp - 0x238]
xchg ch, dh
jne 0x9865ae
cdq
movsx cx, cl
setg cl
sets cl
call int.009a2f10
bswap edx
movsx dx, al
cdq
not cl
movzx ecx, dl
mov dword [ebp - 0x4a0], eax
call fcn.009e7ceb
add eax, 0x18cff25
push cs
call 0x1de99c97
dec eax
fsubr qword ss:[ecx - 0x2630f586]
add eax, 0x517ad6
retf 0x4991
shld di, si, cl
rdtsc
shrd cx, ax, 2
mov di, 0xe7c7
push 0xffe32774
mov dword [ebp - 0x240], eax
not ah
sub esp, 0xfffffffc
popal
movzx dx, al
pushfd
movzx edx, dl
sal dx, cl
mov edx, dword [ebp - 0x234]
jmp 0xa2b1ee
not byte [edi - 0x779c8f65]
add al, 0x24
xor edx, 0xdb3b0bac
clc
cmc
xor ebp, 0x89e0afea
clc
cmp ebx, esp
xor ebx, 0x7f946e61
bt ebp, ebp
push dword [esp + 0xc]
popfd
pushal
push 0x88f45bcd
push dword [esp + 0x34]
ret 0x38
xor al, 0xc2
cmp byte [eax], al
push edi
call fcn.00a23511
rcl dword [ebp - 0x33d87906]
jp 0x9aaf54
mov edi, 0x7de34511
jns 0x9aaeba
push cs
jne 0x9aaf35
pop ss
fild word [ebp + 0x2741f70e]
sti
loop 0x9aaeca
jo 0x9aaf8a
xchg esp, eax
pop edi
inc edi
das
aad 0x32
adc eax, 0xe5a56731
scasb al, byte es:[edi]
leave
mov esp, 0xb404ea85
sbb ebx, ebp
jns 0x9aaeea
push edx
push es
push ebx
ret
adc eax, 0xbe7b0c19
lcall 0xc499, 0x1986d338
and eax, 0x5a5a622
or byte [edx - 0x36], dl
mov ebx, 0x970b5533
push ecx
retf 0x5174
invalid
or dword [edx + 0x16], ecx
invalid
lodsd eax, dword [esi]
push eax
fld qword [ebp + 0x3f275baf]
rcl dword [ecx]
mov dword [0xc3425fbb], 0x6a68334f
pop ebp
adc byte [esi], 0x3b
inc ebx
push esp
jb 0x9aaf2a
lodsd eax, dword [esi]
lea edi, [edi - 0x3d]
push si
push edi
push ds
mov ah, 0xb5
pop esi
pop edx
mov dl, 0x19
jp 0x9ab009
mov cl, 0xf8
test bl, 0x82
int1
aad 0xd0
leave
into
inc esi
sub edi, dword [ebp - 0x4d7ef8af]
push esp
pop ss
psubb mm0, qword [ecx - 0x7f]
xchg byte [edx + 0xf], bl
jne 0x9aaf64
push ecx
loop 0x9ab014
popfd
cmp cl, ch
clc
jae 0x9aaff1
cmp eax, dword [esp]
xchg ebp, eax
sub ebp, esi
push ds
stosd dword es:[edi], eax
jle 0x9aaf95
ret
mov bh, 0x58
inc esp
xlatb
pop ebx
dec edx
in al, dx
push esp
in eax, 0xe6
insb byte es:[edi], dx
dec ebp
aaa
imul eax, dword [edi + edi*4], 0x7534982c
aaa
xor eax, 0xb19ad1d7
hlt
adc dword [edx - 0x3360dfee], ecx
push 0xd93bbb82
adc ebp, dword [edx + ebx]
mov esp, ecx
test al, 0x9a
jae 0x9aafea
mov edx, 0x3b8e76f4
push es
invalid
lea esp, [esp + 0x30]
jae 0x4931ce
rol ah, cl
aaa
sub al, dh
mov eax, dword [ebp - 0x240]
pushfd
xor edx, edx
not cl
dec cx
bt cx, bp
mov ecx, 3
pushfd
div ecx
jmp 0xaae833
test al, al
pushal
bsf cx, bp
cwde
pushfd
rdtsc
stc
movzx cx, al
test dl, 0x4e
mov word [esp], bp
mov dword [ebp - 0x240], eax
btc ax, 6
bts edx, edi
cwde
sub ah, ch
lea esp, [esp + 4]
popal
call fcn.009adadd
cmc
call fcn.00ac258e
call fcn.00a7749f
jmp 0xa5cf3f
add edx, dword [ebp - 0x240]
pushal
mov dword [ebp - 0x234], edx
pushfd
pushfd
pushfd
push ebp
lea esp, [esp + 0x34]
jmp 0x9f5100
push 0x1fbc5515
mov dword [esp], 0x2b76a639
pushal
mov dword [esp + 0x1c], 0x415c5f2c
pushfd
mov byte [esp], 0xca
lea esp, [esp + 0x20]
jmp fcn.0040ab47
mov byte [esp + 4], 0x8e
clc
test edx, edx
pushal
pushfd
push 0xb1c68356
pushfd
lea esp, [esp + 0x34]
jne 0xa182a1
jp 0xa1826f
push 0x18cd3709
cmp dh, 0x41
pushal
sub esp, 0xffffffdc
pushal
pushfd
lea esp, [esp + 4]
jns 0x987863
bt ebp, ebp
rdtsc
pushal
btr dx, di
pushal
mov dword [ebp - 0x240], eax
sub bl, ch
add esp, 0x40
popal
mov dx, ax
mov edx, dword [ebp - 0x234]
stc
jmp 0x9aaef4