Function at 0x10a6e67
Capabilities:
Execute anti-debugging instructions

Disassembly:
pop dword [esp + 2]
mov dword [esp + 5], ecx
pop dword [esp]
mov byte [esp + 6], dh
lea esp, [esp + 3]
jmp 0x10a6db1
lea esp, [esp + 2]
mov byte [esp + 1], bh
push edx
sub esp, 2
push esp
lea esp, [esp + 1]
jmp 0x10a6e02
mov cl, ch
sete bh
bsf bx, si
mov edi, dword [esp]
rdtsc
mov dl, 0x84
jmp 0x10a6e2b
cpuid
rcr edi, 0xb
xor dx, 0x5334
stc
lea esi, [esi + 0x6d]
cpuid
jmp 0x10a6e14
lea esp, [esp + 0xc]
pushal
neg edx
inc bl
mov si, word [esp]
lea ebx, [ebx + ebx]
jmp 0x10a6dd9
xchg esi, edi
lea eax, [edx*4]
xchg word [esp + 0x1b], cx
jmp 0x10a6f1e
not bx
mov di, word [esp]
not si
pushal
xchg ch, dl
bsf dx, ax
jmp 0x10a6deb
call 0x10a6e67
push ebx
popal
outsb dx, byte gs:[esi]
imul ebp, dword [bp + 0x65], 0x69685320
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
and byte [esi + 0x32], dh
xor dword cs:[esi], ebp
cmp dword [esi], ebp
xor byte [eax], al
pushfd
sub esp, 0x10
jmp 0x10a6d8e
pop bp
sub esp, 8
pop bp
setae bh
bsf si, ax
not ch
jmp 0x10a6ed2
btr eax, edx
shr ch, 5
mov bp, sp
sub si, 0xa8b8
setae ch
pop ecx
jmp 0x10a6e70
rdtsc
xchg ch, dl
rdtsc
rdtsc
pop ebp
mov ax, word [esp + 8]
jmp 0x10a6e8a
xchg dh, al
neg bp
push dword [esp + 0xd]
rcl bp, cl
xchg word [esp + 0x12], cx
bsf bp, ax
jmp 0x10a6efe
bswap ebp
add esp, 0
xchg ebx, eax
neg eax
clc
ror ecx, 0x1b
jmp 0x10a6eb4
pop bp
sub ax, 0x91b0
pop si
inc edx
lea eax, reloc.IMM32.dll_ImmGetDefaultIMEWnd
mov ch, byte [esp + 0xb]
jmp 0x10a6ea4
neg ch
lea ecx, reloc.IMM32.dll_ImmGetDefaultIMEWnd
rdtsc
push word [esp + 4]
mov eax, dword [esp + 0x15]
clc
jmp 0x10a6f32
bsr di, cx
xchg si, bp
rdtsc
add esp, 3
mov bp, 0x3af5
bswap edi
jmp 0x10a6ee9
mov dword [esp + 0xc], ecx
cld
push word [esp + 0x11]
mov si, 0xee55
clc
xchg edx, ebx
jmp 0x10a6fe8
cld
cpuid
lea esi, [esi + 0x95]
mov al, ah
mov cl, 0xc2
mov dl, dh
jmp 0x10a6fba
not ah
lea edx, [edx*4]
push esp
lea ebp, [ecx*4]
xchg ecx, edx
push word [esp + 8]
jmp 0x10a6f62
bswap esi
inc cl
xchg byte [esp + 0x16], dl
mov word [esp + 7], di
inc edx
mov byte [esp + 0xd], bh
jmp 0x10a6fca
mov si, dx
push edx
mov byte [esp + 7], bh
xchg byte [esp], dl
pop bp
pushal
jmp 0x10a6f9d
neg dh
xchg ch, dl
pop di
mov ebx, 0x70d934a0
call fcn.010a75c1
pop edx
mov ch, 0x57
rol byte [esi + 0x21], 1
sal byte [eax], 1
int 0x5c
scasd eax, dword es:[edi]
mov dh, 0xa1
loopne 0x10a7042
pop ecx
bswap ebp
add esp, 8
mov di, 0xf579
xchg bh, cl
lea esp, [esp + 8]
jmp 0x10a6f83
xchg byte [esp], bl
mov ah, byte [esp]
sub esp, 0x18
pop bp
sub esp, 0x1c
btc edi, ebx
jmp 0x10a70c8
movsd dword es:[edi], dword [esi]
aam 0x66
mov ebx, 0xd1f70651
cld
xchg dx, si
mov si, sp
add esp, 0xa
jmp 0x10a7022
add esp, 0x19
xchg byte [esp], cl
pop word [esp]
not ax
neg cx
jmp 0x10a709f
clc
cpuid
lea esp, [esp + 0x1d]
cpuid
sub esp, 8
mov bx, di
jmp 0x10a7077
pop cx
mov dl, dh
sub esp, 0x18
pushal
inc dl
push dword [esp + 7]
jmp 0x10a70d6
setbe dh
sub ebp, eax
xchg word [esp + 0x19], bx
lea esp, [esp + 0x17]
mov di, 0xb411
jmp 0x10a754b
mov cl, ch
mov bl, 0x48
xchg byte [esp], bl
xchg ch, dl
cpuid
stc
jmp 0x10a708e
lea ecx, [edx + edi]
mov dword [esp + 0xc], ecx
popal
push dword [esp + 1]
push dword [esp + 0x17]
jmp 0x10a70af
push word [esp + 0xd]
and ecx, ecx
lea ebx, [esi + 0xfd]
pop word [esp + 9]
neg ebx
setge ch
jmp 0x10a714e
mov edi, eax
xchg cx, ax
bswap ebx
ror edi, 5
cld
push word [esp + 0xb]
jmp 0x10a7107
setae ah
push edx
xchg bh, cl
not ax
cmc
lea esi, reloc.IMM32.dll_ImmGetDefaultIMEWnd
jmp 0x10a7125
mov bx, 0x8c39
btc ebp, ebx
bsf bp, ax
mov word [esp + 4], di
mov al, 0xc6
and cl, bh
jmp 0x10a731d
mov byte [esp + 5], ch
xchg dx, bx
push dword [esp]
rdtsc
pop ebp
neg eax
jmp 0x10a713c
push word [esp + 5]
not bx
btr eax, edx
lea edx, [edi*4]
mov dx, word [esp + 0xe]
xchg cx, bx
jmp 0x10a7209
add esp, 0x1b
not di
not bp
rcr bh, 3
cpuid
lea ebp, reloc.IMM32.dll_ImmGetDefaultIMEWnd
jmp 0x10a717d
sub esp, 0x1e
lea esp, [esp + 0x4b]
mov bl, 0x30
xchg cx, bp
bswap edx
mov cl, ch
jmp 0x10a72b4
mov word [esp + 5], dx
sub esp, 0x12
cpuid
rdtsc
mov bh, byte [esp + 0x16]
sub esp, 4
jmp 0x10a71b9
cpuid
mov ah, byte [esp + 1]
inc cx
mov ebx, 0xfe4b778c
jmp 0x10a71d5
mov byte [esp + 0xf], ah
mov ecx, 0xdcb46328
not bh
mov bx, word [esp + 0x16]
cpuid
rdtsc
jmp 0x10a71f2
shr eax, 0x13
mov ah, byte [esp + 9]
stc
mov bl, 0x20
xchg bp, bx
mov ax, bx
jmp 0x10a71a3
cpuid
clc
lea ebx, reloc.IMM32.dll_ImmGetDefaultIMEWnd
xchg byte [esp + 2], bl
setae ch
mov edi, dword [esp + 1]
jmp 0x10a7298
btr eax, edx
mov ax, di
cmc
shr dh, 7
and cl, bh
setnp dh
jmp 0x10a7244
mov si, word [esp + 6]
add esp, 7
xchg byte [esp], dl
not ah
mov bx, word [esp]
jmp 0x10a72e8
mov di, word [esp + 2]
rdtsc
push word [esp + 1]
push word [esp + 3]
xchg byte [esp + 2], cl
jmp 0x10a727f
mov ecx, 0x67069096
mov ebx, dword [esp]
push edx
bsf bp, si
bsf di, ax
bsf cx, si
jmp 0x10a726e
cld
btr ecx, edx
xchg ch, dl
lea ebp, [edi*4]
rdtsc
mov di, 0x9905
jmp 0x10a72fd
neg ax
rdtsc
add esp, 0
bsf si, ax
not ch
mov edx, 0xbe36ffae
jmp 0x10a72cb
inc dx
mov byte [esp], ah
mov si, dx
not ecx
mov edi, 0x3dc26366
xchg byte [esp], bl
jmp 0x10a738e
mov cx, bx
not bp
sub esp, 4
sub esp, 0x1e
btr edx, edx
mov word [esp + 0x18], sp
jmp 0x10a722f
inc dl
mov cx, word [esp]
mov cl, ch
inc bp
mov bp, word [esp]
mov al, ah
jmp 0x10a736f
inc ebp
lea edi, [ebx*4]
lea esp, [esp]
not di
rdtsc
sub ebx, eax
jmp 0x10a7336
cpuid
lea ebp, [edx + esi]
pushal
mov byte [esp + 0xf], ch
xchg bx, si
mov dword [esp + 0xf], ebp
jmp 0x10a73c6
bsf cx, si
mov di, sp
lea ebx, [ebp*4]
mov esi, dword [esp]
mov ecx, dword [esp]
lea ecx, [esi*4]
jmp 0x10a735b
xchg cx, di
bswap ecx
bswap ebp
clc
btr edi, edx
cmc
jmp 0x10a73d9
popal
xchg byte [esp], al
lea edx, [edx + ebp]
mov dx, word [esp]
mov cx, bx
mov bh, byte [esp]
jmp 0x10a73ab
mov bp, dx
not ah
and cl, bh
mov al, 0xae
setp ch
lea esp, [esp]
jmp 0x10a7492
pop dword [esp]
mov ebp, ecx
bswap eax
sub esp, 4
pop bp
inc cx
jmp 0x10a716c
sub esp, 0xa
stc
cpuid
inc si
sub esp, 0x1e
lea esp, [esp + 0x4f]
jmp 0x10a743c
lea ebx, [ecx - 0x3b]
btc ebx, edi
pop cx
rdtsc
cpuid
sub esp, 0x10
jmp 0x10a7409
xchg esi, ebx
lea edx, [edx + ebx]
shr ebx, 0xd
mov al, ah
mov bx, di
btc esi, ebx
jmp 0x10a746c
bsr dx, cx
lea ebp, [ebp*4]
bsf dx, si
mov di, 0x4991
bswap esi
lea ecx, [esp + edx]
jmp 0x10a742b
mov bp, word [esp]
bswap ebp
not di
mov si, di
cld
lea eax, [eax*4]
jmp 0x10a74e2
mov byte [esp], bh
pushal
pop ebx
mov bh, byte [esp + 0x16]
pop dword [esp + 2]
mov ecx, 0x87f1f4ce
jmp 0x10a7452
mov dl, 0x4c
mov cl, ch
xchg dx, cx
mov esi, 0xa1472360
lea ebp, [ebp - 0x57]
not ecx
jmp 0x10a7514
mov cx, 0x67b1
xchg dx, ax
rcl cx, cl
inc si
stc
sub esp, 2
jmp 0x10a74a6
lea edx, [esi - 0x3d]
mov bp, bx
btc ebp, ebx
bsr dx, bp
mov cl, ch
rdtsc
jmp 0x10a74bf
not bx
call fcn.010a75a8
push dword [esp + 0x1e]
call fcn.010a7588
sbb edx, dword [ecx + 0x45936001]
wait
adc al, byte [eax + 0x13fd12e7]
mov cl, byte [edi]
xor dword [ebp + reloc.IMM32.dll_ImmGetDefaultIMEWnd], ecx
rdtsc
lea esi, [edi + ebp]
pop si
mov al, byte [esp]
cpuid
btc eax, edi
jmp 0x10a74f5
neg dh
sub bp, 0x4640
lea edx, [eax + edx]
inc di
rol bp, cl
pop dword [esp + 4]
jmp 0x10a73f6
mov cl, 0x8a
btr ebx, edx
mov ecx, esi
shl bp, cl
btc ebx, edi
mov si, di
jmp 0x10a752e