Function at 0x100bf38d
Capabilities:
Execute anti-debugging instructions

Disassembly:
rol dword [eax], 0x88
inc esp
xor byte [eax], cl
mov byte [eax + esi + 8], al
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x1f]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
inc eax
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x30]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
cmp eax, 0x100
mov ebx, ebx
jl 0x1008c468
xchg ebp, edi
mov edi, dword [esp + 0x18]
push ebp
xchg ebp, edi
pop edi
xchg ebx, ecx
mov ecx, edx
push ebx
xchg ebx, ecx
pop ecx
xchg edi, ebx
mov ebx, edx
push edi
xchg edi, ebx
pop ebx
jmp 0x100c2840
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x2b]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
add dword [esp], 0x23a27
xchg dword [esp], edx
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x43]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], edx
push ebp
mov ebp, esp
leave
xchg dword [esp], edx
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x2b]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
popfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 5]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
jmp 0x100b0998
popfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x54]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
je 0x100c06ec
jne 0x100c06ec
jmp 0x100c06ea
jl 0x100b0974
add al, 0x8d
jg 0x100b096f
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
mov ecx, edx
push eax
xchg ecx, eax
pop ecx
xchg dword [esi], eax
mov eax, edx
push dword [esi]
xchg dword [esi], eax
pop eax
xchg dword [esi + 4], eax
mov eax, edx
push dword [esi + 4]
xchg dword [esi + 4], eax
pop eax
jmp 0x100bf38c
add al, 0x8b
ret 0x76ff
call fcn.100b62e0
stc
push cs
ja 0x100b094e
jns 0x100b0974
push ecx
shr dword [eax + eax], cl
xchg ecx, ebp
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, ebp
mov ebp, dword [esp]
xchg ebp, edx
mov edx, esp
push ebp
xchg ebp, edx
pop edx
mov eax, dword [0x100d8bf8]
push 0x108
not dword [esp]
inc dword [esp]
add esp, dword [esp]
lea esp, [esp + 4]
add eax, 0x20
pushfd
add ebp, 0x21
popfd
lea ebp, [ebp - 0x21]
push 0x10
push ebp
mov ebp, esp
leave
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
lea eax, [ebp - 0x108]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x7d]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg edi, eax
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, eax
mov eax, dword [esp]
pushfd
push eax
mov eax, edi
pop eax
call 0x100b0a29
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x49]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
add dword [esp], 0xba27
xchg dword [esp], edx
lea ebx, [ebx]
xchg dword [esp + 4], edx
push ebp
mov ebp, esp
leave
xchg dword [esp], edx
push eax
mov eax, dword [esp + 6]
pop eax
popfd
pushfd
add ebp, 0x48
popfd
lea ebp, [ebp - 0x48]
jmp fcn.10090598
popfd
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x4d]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
je 0x100bc5c0
jne 0x100bc5c0
jmp 0x100bc5be
add byte [eax], al
mov byte [eax + esi + 8], al
pushfd
add ebp, 0x7d
popfd
lea ebp, [ebp - 0x7d]
inc eax
mov ebx, ebx
cmp eax, 0x100
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x71]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
jl 0x100bc5c0
xchg ebp, eax
mov eax, dword [esp + 0x18]
push ebp
xchg ebp, eax
pop eax
xchg ebx, ecx
mov ecx, edx
push ebx
xchg ebx, ecx
pop ecx
xchg edi, ebx
mov ebx, edx
push edi
xchg edi, ebx
pop ebx
jmp 0x100be65c
xchg ecx, eax
pop esi
mov al, byte [edx + ebp]
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x21]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
mov cl, byte [edi + esi + 8]
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 3]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
add al, bl
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x3d]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
add al, cl
pushfd
add ebp, 0x26
popfd
lea ebp, [ebp - 0x26]
movzx ebx, al
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x26]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
mov al, byte [ebx + esi + 8]
lea edi, [edi]
mov byte [edi + esi + 8], al
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x16]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
lea eax, [edx + 1]
push ebp
mov ebp, esp
leave
xor edx, edx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x2b]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov byte [ebx + esi + 8], cl
push esi
mov esi, dword [esp + 4]
lea esi, [esi]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
inc edi
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x38]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
cmp eax, dword [esp + 0x1c]
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0xc]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
cmovl edx, eax
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x35]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
cmp edi, 0x100
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 9]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
jl 0x100be65c
xchg edi, eax
xchg dword [esp], eax
xchg edi, eax
lea esp, [esp + 4]
xchg ecx, esi
xchg dword [esp], ecx
xchg ecx, esi
lea esp, [esp + 4]
xchg edx, ebp
xchg dword [esp], edx
xchg edx, ebp
lea esp, [esp + 4]
xchg edi, ebx
xchg dword [esp], edi
xchg edi, ebx
lea esp, [esp + 4]
jmp loc.10010eab
pushfd
push ebp
mov ebp, esp
leave
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg ecx, edx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edx
mov edx, dword [esp]
rdtsc
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x18]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
and eax, 1
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x15]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg edi, edx
xchg dword [esp], edi
xchg edi, edx
lea esp, [esp + 4]
xchg ecx, eax
xchg dword [esp], ecx
xchg ecx, eax
lea esp, [esp + 4]
je 0x100cdf98
jne 0x100bb490
jmp 0x100cdf96
push cs
popal
mov al, byte [edx + ebp]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x62]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov cl, byte [edi + esi + 8]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x1e]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
add al, bl
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x19]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
add al, cl
push eax
mov eax, dword [esp + 0xe]
pop eax
movzx ebx, al
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x40]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
mov al, byte [ebx + esi + 8]
pushfd
add ebp, 0x36
popfd
lea ebp, [ebp - 0x36]
mov byte [edi + esi + 8], al
push ebp
mov ebp, esp
leave
lea eax, [edx + 1]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 1]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xor edx, edx
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x24]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
mov byte [ebx + esi + 8], cl
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x2a]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
inc edi
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x79]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
cmp eax, dword [esp + 0x1c]
lea eax, [eax]
cmovl edx, eax
lea edi, [edi]
cmp edi, 0x100
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x62]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
jl 0x100c06ec
xchg edi, eax
xchg dword [esp], eax
xchg edi, eax
lea esp, [esp + 4]
xchg ebx, esi
xchg dword [esp], ebx
xchg ebx, esi
lea esp, [esp + 4]
xchg ebp, eax
xchg dword [esp], eax
xchg ebp, eax
lea esp, [esp + 4]
xchg ecx, ebx
xchg dword [esp], ecx
xchg ecx, ebx
lea esp, [esp + 4]
jmp loc.10010eab
pushfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x36]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, eax
mov eax, dword [esp]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
mov edx, dword [esp]
rdtsc
mov eax, eax
and eax, 1
mov edi, edi
xchg esi, edx
xchg dword [esp], esi
xchg esi, edx
lea esp, [esp + 4]
xchg edi, eax
xchg dword [esp], edi
xchg edi, eax
lea esp, [esp + 4]
je 0x100ca858
jne 0x10091b90
jmp 0x100ca856
add byte [eax], al
popfd
push ebp
mov ebp, esp
leave
je 0x100be65c
jne 0x100be65c
jmp 0x100be65a
add byte [eax], al
popfd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x4e]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
je 0x1008c468
jne 0x1008c468
jmp 0x1008c466