Function at 0x82563d
Capabilities:
Execute anti-debugging instructions

Disassembly:
lea edx, [ebp*4]
xchg ebx, eax
clc
neg dh
mov dl, 0x66
jmp 0x825169
pop dword [esp + 0x12]
mov edi, esi
jmp 0x825135
mov byte [esp + 0x14], al
bswap edx
xchg dword [esp + 6], ecx
mov si, 0x70a
jmp 0x82519f
mov edx, dword [esp + 0xe]
pop esi
seto cl
xchg byte [esp + 0xe], bl
bsr di, dx
pop dword [esp + 9]
jmp 0x825153
mov byte [esp + 0xb], dh
pop bp
shr esi, 0x1e
xchg dword [esp + 0xc], esi
bsf edx, ebp
bsf dx, bp
jmp 0x8251c9
xchg byte [esp + 0xd], dl
add esp, 0
neg cl
mov ch, al
pop word [esp + 0x11]
rdtsc
jmp 0x82517f
not eax
lea ebx, [edx*4]
lea edi, [ebx*4]
jmp 0x8251de
mov ah, al
mov byte [esp + 0xc], ch
push word [esp]
mov si, sp
rcl esi, cl
mov si, 0xabb3
jmp 0x8251b3
mov esi, dword [esp + 0x11]
mov di, 0xfb06
not edx
mov ecx, dword [esp + 7]
pop dword [esp + 7]
xchg byte [esp + 0xd], al
jmp 0x8252d0
mov byte [esp], ah
setns cl
cld
sub esp, 5
pop esi
sub esp, 0xb
jmp 0x825294
lea esp, [esp + 0xe]
mov di, sp
mov bx, word [esp + 0xb]
setns dh
lea esp, [esp + 0xe]
mov si, cx
jmp 0x82521d
btc si, si
lea ecx, [eax - 0xc3]
push word [esp + 3]
mov esi, 0x5464aeb4
mov ecx, dword [esp + 0x14]
sub esp, 3
jmp 0x825233
mov bx, 0x2686
lea esp, [esp + 0x14]
push dword [esp + 0xc]
rcr bh, 3
mov ax, 0x8171
pop edx
jmp 0x8252a7
pop dword [esp]
mov word [esp + 3], bx
mov di, ax
sub esp, 0x19
dec ebx
bswap ebx
jmp 0x82527a
mov esi, 0xaf56fb0
shl cl, cl
neg ebp
pop word [esp + 9]
push word [esp + 1]
not ebp
jmp 0x825317
cpuid
lea esp, [esp + 2]
shr di, 9
mov al, bl
sub esp, 9
mov word [esp + 0x14], si
jmp 0x82525d
push dword [esp + 4]
mov ecx, 0xfb62a513
xchg dword [esp + 7], esi
sub esp, 0xf
jmp 0x82535f
shr cl, cl
push word [esp + 0xb]
push dword [esp + 4]
xchg word [esp + 0xf], dx
jmp 0x8252e9
mov dword [esp + 8], ecx
setno dh
mov dh, byte [esp + 7]
mov ch, 0x2d
bswap edi
cpuid
jmp 0x8252ff
mov byte [esp + 0xd], bl
std
push word [esp + 0x20]
rdtsc
setg bh
jmp 0x82538a
mov ebx, dword [esp + 4]
bsr si, si
xchg word [esp + 6], bx
stc
stc
push word [esp + 0x12]
jmp 0x82532a
mov ecx, edx
lea esp, [esp + 8]
xchg ch, cl
xchg dword [esp + 0x16], ebx
xchg si, di
bsf dx, si
jmp 0x825340
pop dword [esp + 0x16]
pop ebp
pop edx
btr di, cx
xchg dx, ax
jmp 0x8253cf
pop di
xchg word [esp], bp
xchg dx, bp
bsr eax, ebx
pop word [esp + 3]
xchg ebx, edx
jmp 0x825374
xchg word [esp + 0xb], si
mov dword [esp + 0xa], edi
lea ebx, [eax + esi]
call fcn.008253b9
lea ebp, reloc.IPHLPAPI.DLL_GetInterfaceInfo
mov ebp, esi
mov edx, dword [esp]
mov byte [esp], cl
jmp 0x825511
mov bl, 0xb1
mov bx, word [esp]
mov ebp, esi
neg si
mov byte [esp], dl
jmp 0x825474
mov dh, al
sub esp, 0
mov edx, 0x5591c9da
not ah
not eax
lea esp, [esp]
jmp 0x825412
xchg di, ax
mov bp, bx
mov bh, ah
pushfd
cld
xchg ebx, edi
jmp 0x825488
setp dl
mov ebp, dword [esp]
dec ax
mov di, word [esp]
inc cx
mov al, ah
jmp 0x82543b
mov ax, 0x489b
bsf eax, eax
lea ebx, [ecx + edi]
setl al
neg bp
neg dl
jmp 0x825451
push word [esp + 3]
bsr esi, ebp
neg ecx
add esp, 6
mov ebx, ebp
mov ecx, 0xf21f0fbc
jmp 0x8254db
mov ah, 0xe0
cpuid
btr edi, ebp
xchg byte [esp], bh
mov eax, dword [esp]
not ah
jmp 0x825428
lea ebx, [ebp + ebp]
mov edx, ecx
cld
xchg dx, di
mov ax, word [esp]
jmp 0x8254ed
xchg esi, ecx
dec dh
mov bp, word [esp]
lea edx, [esp + eax]
mov ah, dh
lea esp, [esp]
jmp 0x8254c5
lea esp, [esp]
call 0x8255f4
lea edi, [ebx*4]
xchg edi, ecx
rol dx, cl
lea edx, [ebx + ebx]
not bx
btc si, si
jmp 0x82559b
xchg di, bx
mov eax, esi
lea ecx, [ecx + 0x5b]
mov dx, di
mov ebp, esi
setge ah
jmp 0x8254b1
lea ebx, reloc.IPHLPAPI.DLL_GetInterfaceInfo
bsf si, si
not bp
xchg word [esp + 1], bp
call fcn.00825539
mov edi, ecx
xchg word [esp + 2], bp
xchg dword [esp + 0xb], esi
pop dword [esp + 0xc]
pop word [esp + 0xa]
btc eax, edx
jmp 0x8255c6
mov bp, word [esp + 9]
push word [esp + 1]
mov dh, 0x5e
rdtsc
pop eax
lea esp, [esp + 4]
jmp 0x82555b
xchg dword [esp + 8], esi
xchg word [esp + 0xd], ax
xchg dword [esp + 7], ebx
jmp 0x8255db
not ecx
neg edx
sete bh
xchg byte [esp + 0xe], ch
xchg word [esp + 7], bx
sete ch
jmp 0x8255b0
mov ebx, 0xc21ba23a
shr ax, cl
call 0x82563d
adc dword [ebp + reloc.IPHLPAPI.DLL_GetInterfaceInfo], ebx
insb byte es:[edi], dx
jg 0x825637
int1
xchg dword [esp], edi
mov eax, 0x5685171b
push dword [esp]
pop bx
push dword [esp + 5]
jmp 0x8254f5
push word [esp]
btc bp, cx
bsr ecx, ecx
rdtsc
call fcn.008256ad
ljmp 0x2414
mov dword [esp], edx
mov si, word [esp + 8]
std
add esp, 5
mov edi, ebx
rdtsc
jmp 0x82560a
mov dh, 0x59
mov eax, 0x88edf29b
and al, 0xb
btr di, bx
dec ah
mov ebx, esi
jmp 0x825620