Function at 0x107d155
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov ah, dh
lea esp, [esp]
bsf dx, si
bsf edx, edx
push dword [esp + 6]
call fcn.0107cff8
ror ebx, 0xf
std
sub esp, 0xb
rdtsc
clc
popal
jmp 0x107d165
mov word [esp + 0x1a], bx
mov word [esp + 6], di
lea esp, [esp + 0xc]
jmp 0x107d13f
cpuid
std
mov bl, ch
cpuid
lea esp, [esp]
add esp, 1
jmp 0x107d455
mov ch, byte [esp]
or bp, di
mov ch, dh
not bx
xchg esi, eax
std
jmp 0x107d1ef
lea ebp, reloc.KERNEL32.dll_SetConsoleCtrlHandler
push di
cpuid
lea esp, [esp]
lea ebp, [ebx + 0xb2]
xchg edi, ebp
jmp 0x107d1a1
mov ebx, 0xbc1bd67b
mov dh, dl
rcr bh, cl
sub esp, 0x1c
pushfd
lea esp, [esp]
jmp 0x107d23c
pop dx
mov byte [esp], al
rol cx, 0xe
std
add esp, 0
mov eax, esp
jmp 0x107d1d9
lea ebp, [ebp - 0x3e]
sets bh
mov ax, 0x3181
bswap ecx
mov ebp, dword [esp]
mov cl, byte [esp]
jmp 0x107d1c2
popal
cmc
pop ebx
pop dword [esp + 8]
pop si
push di
jmp 0x107d24c
bts eax, ebx
pop word [esp + 0xa]
dec ebp
pushal
pop ebx
bsr ebx, ecx
jmp 0x107d226
mov dword [esp + 4], esp
cmc
pop bx
mov di, bp
mov bp, ax
push word [esp + 0xd]
jmp 0x107d371
sub esi, 0x6f2b243d
btr edi, esi
lea esi, [eax - 0x4a]
mov eax, edi
mov edx, ebx
neg bh
jmp 0x107d212
mov cl, 0x8c
pop ebp
cld
mov ch, 0x6d
pop word [esp + 4]
xchg dword [esp], esi
call fcn.0107d289
mov ebp, 0x115454de
not di
pop di
mov eax, dword [esp]
xchg edx, edi
jmp 0x107d2f9
neg cx
sub esp, 0xa
bsr ebp, esp
mov di, sp
xchg ebp, edi
neg eax
jmp 0x107d349
bts bx, bx
rdtsc
mov al, ah
mov dx, 0x8c07
mov byte [esp + 4], al
mov di, 0xaab7
jmp 0x107d29f
mov dx, di
xchg dh, ah
pop ecx
mov dl, 0x9b
push edx
mov ah, byte [esp]
jmp 0x107d415
mov edi, dword [esp + 4]
xchg word [esp + 2], bp
xchg byte [esp + 2], dl
pop dword [esp]
cld
setnp dh
jmp 0x107d333
bsr ecx, eax
lea edi, [ebx*4]
pop ax
pop bp
mov word [esp + 4], sp
pop bx
jmp 0x107d31a
push word [esp + 6]
btc ebx, edx
cpuid
pop cx
cmc
mov bl, byte [esp]
jmp 0x107d3b1
not edi
bsr di, bp
sbb bp, 0xbc69
mov ch, 0xa6
mov dl, 0xa2
bswap ebp
jmp 0x107d388
cpuid
call fcn.0107d3f4
inc ebx
outsd dx, dword [esi]
insd dword es:[edi], dx
jo 0x107d41e
jb 0x107d424
push ebx
je 0x107d434
imul ebp, dword [esi + 0x67], reloc.KERNEL32.dll_SetConsoleCtrlHandler
in al, dx
or eax, 0x3246c87
sub esp, 0xd
xchg dword [esp + 3], ebp
neg ch
xchg dword [esp + 0xc], ebp
not bp
xchg dword [esp + 7], ebp
jmp 0x107d39e
xchg cx, bx
mov edi, 0x23e8fd88
sbb dx, bp
sbb edx, ebp
cmc
inc di
adc ebp, ebx
jmp 0x107d3c8
fucomp st(3)
mov eax, dword [reloc.KERNEL32.dll_SetConsoleCtrlHandler]
inc esp
and al, 8
jmp 0x107d696
je 0x107d4a2
push ebp
outsb dx, byte [esi]
ja 0x107d4a3
outsb dx, byte [esi]
add byte fs:[ebp - 0xdd4e51], cl
dec dword [edi - reloc.KERNEL32.dll_SetConsoleCtrlHandler]
ror dword [edi], 1
sahf
invalid
lea edi, [edx*4]
xchg ah, cl
lea esp, [esp]
mov ecx, dword [esp]
setg dl
neg dx
jmp 0x107d275
bsf edx, eax
xchg ebx, ebp
lea ebx, [edi + ebp]
mov ah, 0x7c
call fcn.0107d46f
invalid
xchg bl, dh
rdtsc
shr ebx, 0x17
push word [esp + 0xa]
mov ebx, dword [esp + 9]
and al, 9
or edx, edx
loope 0x107d492
shl cl, cl
jmp 0x107d4dc
xor al, 0x47
je 0x107d500
imul ebp, dword [ebp + 0x65], reloc.KERNEL32.dll_SetConsoleCtrlHandler
popal
je 0x107d50d
add ch, al
sets cl
inc dx
rdtsc
xchg ebx, eax
cld
xchg bl, ch
jmp 0x107d485
mov byte [esp + 8], ch
neg di
call 0x107d4c6
mov al, byte [esp + 0x2f]
mov di, bx
lea esp, [esp + 9]
pop ebp
lea esp, [esp + 0xf]
jmp 0x107d515
and al, 0xa
btc si, bp
xchg dword [esp + 7], ecx
pop si
or di, ax
or edi, eax
mov ch, byte [esp + 0x1b]
jmp 0x107d4e8
mov bp, word [esp + 0xf]
lea ecx, reloc.KERNEL32.dll_SetConsoleCtrlHandler
pop eax
push dword [esp + 6]
setp ah
jmp 0x107d5a1
pop dword [esp]
mov eax, dword [esp + 5]
sub esp, 0x11
mov word [esp + 0x10], dx
cpuid
pop si
jmp 0x107d4b8
push dword [esp + 2]
std
add esp, 6
lea eax, [edx + edi]
inc dl
jmp 0x107d587
mov ah, 0x98
lea esp, [esp + 4]
cpuid
pop dword [esp + 2]
cpuid
mov ecx, 0x1c57ada3
jmp 0x107d546
xchg edi, esi
pop bp
xchg word [esp + 4], bx
mov edx, 0xcf737226
jmp 0x107d607
mov ebp, dword [esp + 7]
lea ebp, reloc.KERNEL32.dll_SetConsoleCtrlHandler
pop bx
pop ax
mov word [esp + 6], cx
jmp 0x107d571
mov word [esp + 8], dx
mov ebp, 0x39b0ce4f
setle ch
xchg word [esp + 2], si
setae bh
cmc
jmp 0x107d55c
mov word [esp], bx
mov al, 0xff
bsr bp, bx
bswap eax
dec bx
jmp 0x107d5de
not di
xchg dh, ch
pop ax
dec ecx
bsr bx, bp
inc ebp
jmp 0x107d5b9
bsr ax, si
lea ecx, [ecx*4]
lea edx, reloc.KERNEL32.dll_SetConsoleCtrlHandler
mov edi, ecx
mov ebp, dword [esp]
xchg ch, bh
jmp 0x107d61d
xchg byte [esp + 4], al
mov ebx, dword [esp + 3]
not eax
pop word [esp + 2]
add esp, 0
mov al, 0xdd
jmp 0x107d5cf
mov edx, dword [esp]
xchg ebp, edi
mov word [esp], dx
mov dx, word [esp + 2]
add esp, 1
or bx, 0x406e
jmp 0x107d670
mov ebx, edx
mov dword [esp + 4], eax
xchg word [esp + 3], di
xchg word [esp + 2], di
xchg edi, esi
xchg edx, ebx
jmp 0x107d52e
mov eax, dword [esp]
lea esp, [esp + 1]
lea ebx, [ebx*4]
jmp 0x107d71b
shr bp, 1
setbe al
rdtsc
lea ebx, [esi*4]
xchg byte [esp], bh
xchg edx, eax
jmp 0x107d65a
xchg byte [esp + 0xe], al
cmc
pop si
setbe bl
or si, 0x60a
pop edx
jmp 0x107d641
bsf ecx, esi
setge al
seto ch
mov byte [esp], dl
mov eax, dword [esp]
add esp, 0
jmp 0x107d6f2
btc esi, edi
pop ebp
lea esp, [esp + 1]
lea esp, [esp]
mov cl, byte [esp]
mov ecx, esi
jmp 0x107d6a8
stc
clc
pop bp
add esp, 0
xchg ecx, esi
mov byte [esp], al
jmp 0x107d84a
mov di, word [esp]
dec bx
push bx
bswap edi
neg al
lea edx, [ecx*4]
jmp 0x107d6dc
sub esp, 5
setl dl
mov ebp, eax
lea esp, [esp]
mov dx, si
xor esi, esi
jmp 0x107d6ca
lea esp, [esp + 3]
popal
cmc
cmc
std
popfd
jmp 0x107d7a4
lea esi, [edx + edx]
xchg ch, dl
push di
xchg esi, ebx
mov byte [esp], ch
mov cx, 0x6352
jmp 0x107d749
push 0x5619b834
add dword [esp], reloc.KERNEL32.dll_SetConsoleCtrlHandler
call 0x107d78e
lea esp, [esp + 2]
lea esp, [esp]
call 0x107d7c2
scasb al, byte es:[edi]
mov dword [esp], esi
pop word [esp]
mov byte [esp], bl
mov byte [esp + 1], dh
jmp 0x107d806
mov cx, 0x1551
bt edx, edi
std
mov esi, 0xd09964ae
xor edi, 0xd2547a5f
rdtsc
jmp 0x107d77c
mov byte [esp + 2], dh
push si
call fcn.0107d81e
push edi
jb 0x107d867
je 0x107d865
inc esi
imul ebp, dword [ebp], reloc.KERNEL32.dll_SetConsoleCtrlHandler
and al, 0x66
mov dword [esp], esi
mov word [esp], dx
mov word [esp], si
mov word [esp], dx
lea esp, [esp + 1]
push bp
push dword [esp + 2]
jmp 0x107d7f0
bsf edi, ebp
add esp, 0
xchg dl, ah
rcr di, cl
dec si
cmc
jmp 0x107d7d9
and al, 3
pop word [esp]
jmp 0x107d87e
push dword [esp + 3]
mov byte [esp + 4], dh
push bx
push cx
mov byte [esp + 1], bh
lea esp, [esp + 6]
jmp 0x107d922
not ebp
xchg bp, cx
push dword [esp + 0xe]
mov ch, 0x18
mov dword [esp + 8], ebx
mov esi, edi
jmp 0x107d00e
mov byte [esp + 4], bh
mov word [esp], cx
mov byte [esp + 1], ch
mov word [esp + 3], bp
mov dword [esp], ebx
mov word [esp], cx
call fcn.0107d8e5
push ebx
je 0x107d989
imul ebp, dword [ebp + 0x50], reloc.KERNEL32.dll_SetConsoleCtrlHandler
jb 0x107d993
js 0x107d950
sbb eax, 0xd502cb0f
bswap ebp
xchg al, ch
jmp 0x107d899
mov word [esp], cx
call 0x107d98c
push esi
imul esi, dword [edx + 0x74], 0x416c6175
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [eax], ax
push cx
pop word [esp]
pop word [esp + 1]
lea esp, [esp]
mov word [esp], bp
pop word [esp]
jmp 0x107d95e
and al, 0xeb
rcr byte [esi + 0x124448f], cl
lea esp, [esp + 6]
and al, 6
call fcn.0107d9cb
inc edi
je 0x107d9f2
jns 0x107da14
je 0x107da08
insd dword es:[edi], dx
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
add byte [eax + ecx*4 + 0x54], ch
mov byte [esp + 7], dl
pop dword [esp]
push bp
jmp 0x107d974
je 0x107da5c
dec esi
popal
insd dword es:[edi], dx
push edi
add byte [edi + 0x46], bh
jmp dword [esi - 0x71]
mov al, byte [0x53000002]
push 0
call fcn.0107da29
mov byte [esp], dh
call fcn.0107da6e
dec esp
inc ebx
dec ebp
popal
jo fcn.0107daa7
je 0x107dac8
imul ebp, dword [esi + 0x67], reloc.KERNEL32.dll_SetConsoleCtrlHandler
and al, 5
lea esp, [esp + 5]
mov byte [esp], cl
push dx
lea esp, [esp + 2]
mov byte [esp], ah
jmp 0x107da46
je 0x107db11
imul ebp, dword [ebp + 0x54], reloc.KERNEL32.dll_SetConsoleCtrlHandler
push word [esp + 0xb]
pop word [esp + 0x2b]
mov byte [esp + 0x20], bl
push dword [esp + 6]
lea esp, [esp + 1]
lea esp, [esp + 0x34]
jmp 0x107da3f
and al, 9