Function at 0x9c11cf
Capabilities:
Execute anti-debugging instructions

Disassembly:
add edx, 0x43a2fe3e
jmp 0x9c19b2
add edx, 0x955dfcc8
jmp 0x9c19de
mov edx, ebp
jmp 0x9c1011
movzx ebx, byte [edx]
mov ah, dh
lea eax, [eax + 0xc6]
setbe dh
push edi
jmp 0x9c10af
add edx, reloc.RASAPI32.dll_RasHangUpA
jne 0x9c0ffb
movzx ebx, byte [edx]
jmp 0x9c1051
push edi
jmp 0x9c10af
mov ah, dh
lea eax, [eax + 0xc6]
setbe dh
jmp 0x9c103b
sub bl, cl
call fcn.009c117b
not eax
jmp 0x9c10e3
lea edx, reloc.RASAPI32.dll_RasHangUpA
lea edx, [eax + eax]
mov edx, 0x80073002
mov dh, 0x65
mov edx, 0x4e2065cc
jmp 0x9c1108
lea edx, [ecx + 0xe7]
mov eax, dword [esp]
rdtsc
mov dx, word [esp]
mov dl, ch
jmp 0x9c1088
lea edx, [eax + eax]
mov edx, 0x80073002
mov dh, 0x65
jmp 0x9c1140
mov al, bl
bsr edx, edx
jns 0x9c1093
lea edx, reloc.RASAPI32.dll_RasHangUpA
jmp 0x9c10c2
jmp 0x9c1123
mov dx, 0x9430
dec al
setnp dl
sub edx, 0xe073dc44
jne 0x9c10f2
mov edx, dword [esp]
jmp 0x9c115d
mov edx, dword [esp]
mov dx, di
cmc
shr edx, cl
clc
jmp 0x9c1165
mov edx, 0x4e2065cc
jmp 0x9c1108
clc
jmp 0x9c1165
mov dx, di
cmc
shr edx, cl
jmp 0x9c1147
dec al
cmc
jae 0x9c11b6
mov dh, byte [esp]
clc
mov dx, 0x3c60
bswap edx
dec edx
jmp 0x9c119a
clc
mov dx, 0x3c60
bswap edx
jmp 0x9c1199
dec edx
inc dl
dec al
lea edx, reloc.RASAPI32.dll_RasHangUpA
jmp 0x9c11bb
mov dh, byte [esp]
jmp 0x9c118c
mov edx, edi
mov dx, 0xaa9e
not edx
mov edx, 0x7db846ad
call 0x9c11cf
mov ch, 0xa4
mov edx, 0x8c3fc8cd
jmp 0x9c1766
sub cl, al
jo 0x9c1686
lea eax, [esi + edi]
jmp 0x9c1689
lea edx, [eax + ecx]
not dx
lea edx, reloc.RASAPI32.dll_RasHangUpA
pushal
pushfd
jmp 0x9c15e5
shl dx, cl
setge dh
jmp 0x9c173e
lea eax, [esi + edi]
call 0x9c1637
jmp 0x9c16ff
rdtsc
xchg byte [esp + 2], al
lea esp, [esp + 4]
add bl, 0x4f
bsf edx, esi
js 0x9c1775
bt ax, bx
jmp 0x9c17a2
shl dx, cl
setge dh
add al, 0xfb
xchg dh, dl
jmp 0x9c15fb
lea esp, [esp + 4]
add al, 0xe9
cmc
je 0x9c1738
jne 0x9c1616
jmp 0x9c1793
bt ax, bx
mov ax, 0xdcfd
jmp 0x9c185a
mov ax, 0xdcfd
lea eax, reloc.RASAPI32.dll_RasHangUpA
jmp 0x9c1860
mov dx, word [esp]
neg edx
rdtsc
call 0x9c17ed
mov dl, 0xf7
ror byte [ebp + 0x478d3114], 1
mov dword [reloc.RASAPI32.dll_RasHangUpA], eax
jmp 0x9c182c
rdtsc
bsf edx, esi
cmp ah, 0xe8
xchg dword [esp], edi
mov dh, cl
mov al, 0x79
jmp 0x9c1816
jmp 0x9c17df
mov dx, 0x889c
btc edx, edx
lea eax, [ebx - 0x11]
push dword [esp]
ret 4
xchg dword [esp], edi
xchg edx, eax
xchg dh, ah
mov al, 0x40
lea edi, [edi - 0x23]
sete dl
jmp 0x9c17fb
ror bl, 0
xchg dl, ah
mov eax, dword [esp]
mov ax, cx
mov dx, 0xa868
jmp 0x9c1923
lea eax, reloc.RASAPI32.dll_RasHangUpA
inc bl
btr edx, edi
jae 0x9c1814
mov dx, word [esp]
neg edx
rdtsc
bsf ax, cx
jmp 0x9c183f
call 0x9c1875
into
dec eax
fidivr word [ecx - 0x1a9f5bb8]
jne 0x9c18ea
out dx, eax
push 0xffffffffffffff94
pop es
scasb al, byte es:[edi]
mov ecx, 0x24648d98
add al, byte [edi - 0x78e3db84]
ret 0x920f
fmul qword [ebp - 0x3441]
dec dword [ebx*4 - reloc.RASAPI32.dll_RasHangUpA]
ret 0xf766
mov ax, 0x4d84
mov dx, word [esp]
inc bl
neg ax
jo 0x9c18bf
mov dl, byte [esp]
jmp 0x9c1a62
neg ax
jmp 0x9c1953
neg ax
bsf eax, edi
jp 0x9c198c
inc al
jmp 0x9c1976
shl edx, 2
push esi
mov ah, byte [esp + 1]
lea esp, [esp + 4]
sub esp, 0xc
pop eax
jmp 0x9c19a6
shl edx, 2
push esi
mov ah, byte [esp + 1]
jmp 0x9c19d8
inc al
jmp 0x9c1960
add ah, 0x85
jmp 0x9c02e9
rcl eax, cl
jl 0x9c1990
add ah, 0x85
jmp 0x9c02e9
mov eax, 0x88f548d8
lea eax, [ebp*4]
jmp 0x9c1a06
jmp 0x9c032f
lea esp, [esp + 4]
jmp 0x9c196c
call 0x9c1a1a
xchg al, ah
bswap eax
jmp 0x9c1aa7
bswap eax
jmp 0x9c1aa7
mov ah, 0xdb
mov edx, dword [edx - reloc.RASAPI32.dll_RasHangUpA]
mov eax, ebp
inc al
jo 0x9c19c0
jno 0x9c032f
neg ax
mov ax, 0x4037
mov eax, 0xf59774a1
call fcn.009c1a46
jmp 0x9c1a2f
pop ds
btc ax, cx
jb 0x9c19e3
xchg al, ah
jmp 0x9c19ed
mov edx, ebx
lea eax, [edx*4]
btr ax, bp
jo 0x9c1950
jno 0x9c193a
lea eax, [eax*4]
push dword [esp + 8]
ret 0xc
push ecx
xchg word [esp + 1], ax
xchg dword [esp + 8], ebx
mov al, byte [esp]
mov eax, 0x14903e81
dec ax
jmp 0x9c1a7b
mov esp, esi
call fcn.009c1be6
outsd dx, dword [esi]
arpl word [esi], ax
cmc
or eax, 0xd6af477
cld
push ds
arpl cx, sp
jno 0x9c1ace
jecxz 0x9c1ad5
mov al, byte [0xc3bc0fe3]
neg al
bsr ax, si
lea ebx, [ebx + 0x4d]
dec eax
bts ax, ax
jmp 0x9c1a91
sub esp, 0x12
lea esp, [esp + 2]
jmp 0x9c1b86
push edx
ret
mov ax, 0x59fa
pushfd
setae ah
lea edx, [ebp*4]
jmp 0x9d3784
lea ebx, [esi + 0x50]
jmp 0x9d3715
rdtsc
call fcn.009d376b
jo 0x9d3738
pushal
pop es
or al, 0x72
mul dword [edi + 2]
int1
sbb eax, 0xeb34856a
call 0xc99bd968
jmp 0x9d373d
mov dword [esp + 0x14], esi
popal
lea ebx, [eax + ebx]
sub esp, 0xa
jmp 0x9d37f4
cmp edi, ebx
ja 0x9c0fd9
rol bl, 2
jbe 0x9d3753
rdtsc
jmp 0x9d373f
bts bx, dx
jl 0x9d3738
jge 0x9d3738
mov eax, edx
jmp 0x9d3833
pushal
neg al
js 0x9d381c
jns 0x9d381c
aas
mov ebp, 0x31c7342d
jle 0x7f33b30a
lahf
out 0x11, al
nop
adc ecx, dword [edx - reloc.RASAPI32.dll_RasHangUpA]
mov ax, 0xd391
bswap ebx
lea esp, [esp + 2]
lea ebx, [esi + 0x40]
call 0x9d37d7
and al, 0xfc
call fcn.009d3849
and dword [ebp + reloc.RASAPI32.dll_RasHangUpA], esp
push ecx
salc
inc esp
and ebx, esi
pop ecx
invalid
lea eax, [edi - 0x80]
jmp 0x9d3806
lea esp, [esp + 1]
mov eax, 0x7b35e319
lea esp, [esp + 3]
sub ebx, edx
mov eax, 0x9675ab4c
jmp 0x9d37db
jmp 0x9d37c7