Function at 0x1015fb3e
Capabilities:
Execute anti-debugging instructions

Disassembly:
or dword [ebp - 8], 1
bt edx, esp
neg ax
bt edx, 0x8d
mov ecx, 4
bts edx, edi
shl ecx, 0
bsf eax, ecx
sub ax, di
movsx eax, bp
mov edx, dword [ecx + section..rdata]
not edx
xor edx, 0x67354ed2
sets cl
or ax, 0xd103
sbb eax, 0x5eb8a096
mov eax, 4
shr ch, cl
xor cx, bp
shld ecx, eax, 0xb
imul ecx, eax, 3
mov eax, dword [ecx + section..rdata]
sal ch, cl
bswap ecx
not eax
xor edx, eax
sal cl, cl
bt cx, di
neg ecx
mov dword [ebp - 0x28], edx
mov ecx, dword [ebp - 0x20]
cmp ecx, dword [ebp - 0x28]
jmp 0x10138793
mov dword [ebp - 0x3c], 0
mov dl, byte [ebp - 0x3c]
mov byte [ebp - 3], dl
shr ax, 0x86
mov eax, dword [ebp - 0x18]
or cx, bx
shl ch, cl
xor eax, dword [ebp - 0x18]
movzx ecx, dx
mov dword [ebp - 0x18], eax
movzx ecx, byte [ebp - 3]
stc
cmp esp, esi
test ecx, ecx
jmp 0x10138e7b
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x48]
jmp 0x1003b5e8
jne 0x10119619
mov dword [ebp - 0x38], 1
jmp 0x100b04ea
xor edx, dword [ebp - 0x14]
mov dword [ebp - 0x14], edx
not ax
movzx eax, byte [ebp - 2]
cmp cl, dl
test eax, eax
jmp 0x10155381
jmp 0x10119622
jne 0x10092248
mov dword [ebp - 0x3c], 1
jmp 0x1013303b
xor eax, eax
jmp 0x101450d7
mov dword [ebp - 0x38], 0
cbw
mov cl, byte [ebp - 0x38]
bsf dx, bx
rdtsc
mov byte [ebp - 2], cl
test ebp, 0xc11e0909
mov edx, dword [ebp - 0x14]
jmp 0x100ae9b6
jmp 0x1009224f
je 0x10063461
mov edx, 4
bts ax, si
shl edx, 0
xchg al, ah
rcr eax, 0xa1
mov eax, dword [edx + section..rdata]
bt ecx, 0x9b
mov dh, cl
not eax
xor eax, 0x67354ed7
test ecx, ebp
mov ecx, 4
cmovae dx, dx
shl dh, 0x92
imul edx, ecx, 3
mov ecx, dword [edx + section..rdata]
not ecx
xor eax, ecx
adc edx, esp
mov dword [ebp - 0x1c], eax
sar edx, 0x12
sbb eax, 0xb41f2b16
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x48], edx
bt eax, ebx
mov eax, dword [ebp - 0x1c]
cmp edx, 0x5f115e03
xor eax, dword [ebp - 0x1c]
jmp 0x100ac074
mov dword [ebp - 0x34], 0
mov cl, byte [ebp - 0x34]
mov ax, bp
mov byte [ebp - 1], cl
btr eax, eax
mov edx, dword [ebp - 0xc]
shr ah, cl
xor edx, dword [ebp - 0xc]
bswap eax
mov dword [ebp - 0xc], edx
movzx eax, byte [ebp - 1]
test edi, 0x8c3d1838
cmp al, al
test eax, eax
je 0x101773f0
mov ecx, 4
bts dx, ax
movzx edx, si
cwd
shl ecx, 0
xor al, 0xb5
rcl dl, cl
mov edx, dword [ecx + section..rdata]
sar al, 0x30
mov eax, esp
not edx
cmovno eax, edx
cwde
xor edx, 0x67354eda
bsf eax, edx
xor cx, di
xchg cl, ch
mov eax, 4
btc cx, si
imul ecx, eax, 3
movzx eax, di
mov eax, dword [ecx + section..rdata]
add ch, dl
not eax
xor edx, eax
mov dword [ebp - 0x10], edx
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x44], ecx
xor dx, 0xf9a9
ror edx, cl
mov dx, sp
mov edx, dword [ebp - 0x10]
xor edx, dword [ebp - 0x10]
mov dword [ebp - 0x10], edx
cmovnp eax, edi
jmp 0x10001107
je 0x100f76f0
mov ecx, 4
rdtsc
xor ax, bp
shl ecx, 0
mov edx, dword [ecx + section..rdata]
not edx
and cx, 0x5216
movzx ecx, bx
setge ch
xor edx, 0x67354ed1
xadd eax, eax
cmc
mov eax, 4
imul ecx, eax, 3
sar ax, 0x19
shr eax, 0x2a
and eax, ebx
mov eax, dword [ecx + section..rdata]
mov ecx, eax
rcr ecx, 0xa2
not eax
xor edx, eax
or cx, sp
movzx ecx, bx
mov dword [ebp - 0x18], edx
mov ecx, dword [ebp - 0x20]
test ebp, edi
cmp ecx, dword [ebp - 0x18]
jmp 0x100f3474
mov ax, word [ebp + eax*2 - 0x486122]
push 0x5a26709c
mov ecx, 0x5d32d037
mov cl, byte [ecx + ebp - 0x5d32d033]
jne 0x101b1eea
jne 0x101450d0
mov dword [ebp - 0x34], 1
jmp 0x10116887
mov eax, 4
shl eax, 0
sal ch, 0x11
bswap cx
mov ecx, dword [eax + section..rdata]
setbe al
test esp, 0xd1af6786
not ecx
xor ecx, 0x67354ed6
btc eax, esi
rcr dl, 0x86
movsx edx, cx
mov edx, 4
sar ah, cl
imul eax, edx, 3
mov edx, dword [eax + section..rdata]
not edx
xor ecx, edx
cbw
rcr ah, cl
shl ah, 0x2d
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x14]
jmp 0x100acbf6
mov dword [esp + 4], 0x3afe6b4
push 0x39b44812
adc ebp, 4
call fcn.1013a41d