Function at 0x1009829b
Capabilities:
Execute anti-debugging instructions

Disassembly:
push edx
mov ecx, dword [ebp - 0x68]
rcl ax, cl
btc ax, 0xc
mov dword [edx + 0x14], ecx
rol dh, 4
xchg dh, ah
aaa
sub esp, 0x14
rdtsc
pushal
lea edx, [esp + 0x20]
bswap ecx
call fcn.10055b1e
mov dword [ecx], edx
setl dh
lea edx, [edi + 0x10649234]
mov edx, dword [eax + 4]
pushfd
pushal
mov dword [ecx + 4], edx
bswap dx
mov edx, dword [eax + 8]
pushfd
push 0xa0a2c592
pushfd
mov byte [esp + 4], 0xc2
mov dword [ecx + 8], edx
not dl
seto dl
mov edx, 0x5c513faf
mov edx, dword [eax + 0xc]
push 0x8135d727
mov dword [ecx + 0xc], edx
lea esp, [esp + 0x44]
jl 0x1009e1e1
push 0xe6a0272c
mov edx, dword [eax + 0x10]
push 0x79a70c33
pushfd
mov byte [esp + 4], 0x89
mov dword [ecx + 0x10], edx
lea esp, [esp + 0xc]
pop eax
inc ecx
sbb eax, 0x12f9155c
push esi
adc ch, bl
popal
add al, 0x15
add ch, byte [ecx + eax*2 + 0x6dac61b8]
in al, dx
pop ecx
cld
adc dword [eax - 0x154157df], edi
in eax, dx
sal byte [ebx], 1
mov dword [0x244c89be], eax
or byte [edi], cl
mov edx, 0x8b9806f2
push ebp
cwde
not ah
rcl al, 1
imul edx, edx, 0x120
bt edx, 6
mov eax, dword [edx + 0x10045510]
jmp 0x100a6082
call fcn.100e059e
jle 0x1006c47c
sti
cli
pop es
pop ss
jb 0x1006c4e8
sub dl, byte [edi]
inc esi
mov al, byte [0x856a3335]
loop 0x1006c40e
fnstcw word [edx]
adc eax, dword [eax + 0x60]
sub edx, dword [edx - 0x58]
mov dword [0x229e70dd], esp
and eax, 0x229e70dd
xor al, 0x5f
cmc
enter 0xfffffffffffffb41, 0xffffffffffffff9e
and bl, byte [ebx + 0x3a]
push edi
dec edx
jp 0x1006c464
ljmp 0x9165:0x8353c49
fucomp st(2)
cld
cmpsb byte [esi], byte es:[edi]
xor dword [esi + 0x65d9026b], ecx
pushal
rcl byte [ecx]
push eax
cmp eax, 0x15f849bc
mov eax, 0xedea0b15
rol dword [esi - 0x1763dd34], 1
idiv byte [ebx]
add eax, 0x2e837a00
retf 0xc9c4
pushal
pushfd
mov dword [esp + 0x28], eax
mov byte [esp], 0x86
jmp 0x100c500c
imul ecx, ecx, 0x120
das
or ah, bh
add esp, 8
jbe 0x100adcfd
adc ah, ah
fstp dword [ecx + 0x100454ac]
or cl, bh
cwde
push 0
shr dx, cl
das
cwde
neg dh
push 0xa
shl dh, 1
sub esp, 0x18
bsr dx, ax
add dl, bl
mov dh, dh
mov edx, esp
test bh, dl
aaa
mov eax, dword [ebp - 0x7c]
movzx cx, al
clc
shl ecx, 3
pushfd
mov dword [edx], eax
rcr cl, cl
mov ecx, dword [ebp - 0x78]
and eax, 0x8a1d0ca0
ror ax, cl
mov dword [edx + 4], ecx
add cx, bx
daa
xchg ah, ch
lea eax, [ecx - 0x3fc12cbf]
mov eax, dword [ebp - 0x74]
mov cx, bx
pushfd
bsr cx, sp
add cx, 0xe4e5
mov dword [edx + 8], eax
movsx eax, dl
not ch
bswap ax
mov ecx, dword [ebp - 0x70]
rcl ax, 7
test dh, dh
aam 0x1d
mov dword [edx + 0xc], ecx
push 0xe631b327
pushal
sub ax, 0x793e
mov eax, dword [ebp - 0x6c]
mov byte [esp], 0x33
or ecx, ecx
and ecx, esp
mov dword [edx + 0x10], eax
dec ax
pop eax
add esp, 0x28
jae 0x1005d5f3
bsf eax, ebx
mov ecx, dword [ebp - 0x68]
sbb al, 0xec
mov dword [edx + 0x14], ecx
inc dx
bsf dx, si
xchg dx, cx
bswap ecx
sub esp, 0x18
movzx ax, bl
mov edx, esp
movzx cx, dl
pushal
cwde
mov eax, dword [0x10047be0]
pushal
movsx cx, cl
jmp 0x100ed197
push esi
mov edx, dword [eax + 0x10]
push 0xe503215a
mov dword [ecx + 0x10], edx
jmp 0x100a136c
push dword [esp]
jmp 0x1006c45b
sub eax, 0x17
jmp 0x1007f662
lea esp, [esp + 0x28]
call fcn.10024da0
movsx dx, cl
movsx cx, al
rol dh, cl
neg dx
add esp, 0x10
call fcn.100f53dd
mov dword [esp + 4], 0x7053b491
mov byte [esp], 0x3b
mov byte [esp], 0x5d
pushal
push dword [esp]
lea esp, [esp + 0x28]
jmp fcn.1000263d
pop eax
mov eax, dword [0x10047be8]
sets ch
mov ch, 0x18
mov dword [edx + 8], eax
mov ch, byte [esp + 4]
mov ecx, dword [0x10047bec]
not ah
movsx eax, cl
mov dword [edx + 0xc], ecx
call fcn.100d0a46
pushal
pushal
mov dword [esp + 0x3c], 0x97a781de
push eax
mov byte [esp + 4], 0xde
mov dword [esp + 0x3c], 0xe70219e9
pushfd
mov word [esp], sp
lea esp, [esp + 0x40]
jmp fcn.10007922
movzx cx, dl
mov dword [edx], eax
xchg cl, al
pop eax
bswap eax
pop ecx
mov ecx, dword [0x10047be4]
cwde
mov ah, cl
mov word [esp], 0xa09d
mov dword [edx + 4], ecx
jmp 0x100cc2ad