Function at 0x9cf56d
Capabilities:
Execute anti-debugging instructions

Disassembly:
lea ebp, [ebp*4]
jmp 0x9cf453
push word [esp + 7]
mov dl, byte [esp + 0xb]
pop eax
lea esp, [esp + 1]
bsf ax, dx
jmp 0x9cf4f7
mov bp, 0x4a2b
bts dx, bx
push word [esp + 5]
or al, 0x10
jmp 0x9cf4be
xchg edx, eax
push dword [esp]
bswap eax
xchg byte [esp], dh
pop eax
lea esp, [esp + 1]
jmp 0x9cf481
mov dh, byte [esp + 6]
mov edx, 0x7c6e038f
btc dx, bp
pushfd
call fcn.009cf4a8
add esp, 0xb
neg edx
mov bp, 0x8007
btr dx, bx
mov word [esp + 2], bx
not ebp
jmp 0x9cf524
mov dl, 0xf3
lea ebp, [ebx*4]
xchg edx, eax
add esp, 0x12
xchg byte [esp + 6], al
mov byte [esp + 3], ah
jmp 0x9cf497
mov dx, 0xb2fd
mov ax, di
sub esp, 3
mov ax, word [esp + 3]
xchg edx, eax
jmp 0x9cf55f
pop dx
rdtsc
sbb edx, 0x77f12b4
add esp, 0
mov ax, word [esp]
push eax
jmp 0x9cf50e
pop dword [esp]
mov word [esp + 3], si
call 0x9cf56d
push ss
mov dl, bh
pushfd
lea esp, [esp + 0xb]
mov dword [esp], eax
jmp 0x9cf674
pop bp
bswap ebp
mov ax, word [esp + 3]
lea esp, [esp + 4]
lea eax, [edx*4]
mov bp, bx
jmp 0x9cf5d6
xchg dl, ah
mov ax, 0x754a
push dword [esp + 2]
shr ax, cl
mov dx, word [esp + 3]
mov ax, si
jmp 0x9cf5a0
pop ax
lea edx, [esp - 0x60]
lea eax, [ecx + ebp]
mov bp, 0x6392
mov dh, byte [esp]
bswap edx
jmp 0x9cf646
xchg word [esp + 1], bp
mov ax, 0xaf2f
mov eax, dword [esp + 2]
mov dword [esp], ebp
mov al, ah
bswap eax
jmp 0x9cf5bf
add esp, 5
neg eax
mov ax, 0x73b
rcr edx, cl
pop ebp
setae al
jmp 0x9cf65c
xchg al, dh
rdtsc
lea eax, [esi + ebp]
mov ax, 0x3bbc
neg eax
mov ax, word [esp + 0xc]
jmp 0x9cf610
mov ah, byte [esp]
xchg dl, ah
push cx
sub esp, 0xc
mov word [esp + 4], si
mov dx, word [esp + 1]
jmp 0x9cf626
xor ebp, esi
bts ebp, ecx
rdtsc
mov dword [esp], esi
xchg word [esp], bp
setp ah
jmp 0x9cf93b
mov dx, word [esp]
mov dword [esp], esi
xchg byte [esp + 2], dh
mov al, 0x75
mov eax, 0x4f2c1783
mov ebp, ecx
jmp 0x9cf5fa
xchg bp, ax
bsf edx, ebx
std
sub esp, 9
sub esp, 0x14
mov edx, 0x575ab017
call fcn.009cf6c9
push edi
pop word [esp]
not eax
not eax
lea esp, [esp + 1]
xchg al, ah
jmp 0x9cf90e
cld
btr dx, dx
bswap edx
neg bp
bsr ax, bx
pop dx
jmp 0x9cf91f
mov ax, 0xd6d9
mov dl, cl
xchg edx, eax
rdtsc
sub esp, 0x12
rdtsc
jmp 0x9cf8f8
mov word [esp + 4], ax
cmc
mov word [esp + 0xa], bp
lea eax, [edx + 0x50]
sub esp, 0
pushal
jmp 0x9cf969
setne dl
bt dx, bx
not edx
pop word [esp]
neg ah
shr eax, 0x11
jmp 0x9cf8b8
mov eax, ebp
mov dh, 0x8a
lea eax, reloc.iphlpapi.dll_GetAdaptersInfo
cld
mov dh, 0x4a
mov dword [esp], edx
jmp 0x9cfa32
sbb dl, bl
push dword [esp + 0x2d]
lea esp, [esp + 0x31]
xchg word [esp], dx
mov dword [esp], eax
mov bp, word [esp]
jmp 0x9cf952
lea esp, [esp + 0x48]
lea edx, reloc.iphlpapi.dll_GetAdaptersInfo
mov al, 0xf1
bsr eax, edx
xchg ah, al
mov ax, word [esp]
call fcn.009cf996
rcr ah, 5
mov dl, bl
inc eax
mov eax, dword [esp + 0x20]
setbe dl
mov edx, 0x55167f09
jmp 0x9cfa0c
setge dh
mov dl, byte [esp]
mov dl, 0xc
lea edx, [edx + ebp]
mov edx, dword [esp + 0x24]
lea ebp, reloc.iphlpapi.dll_GetAdaptersInfo
jmp 0x9cfa5c
or al, 0xf7
sub esp, 0x18
mov ah, dh
sub esp, 0xc
mov dh, byte [esp + 7]
pushal
jmp 0x9cf9bd
popfd
jmp 0x9cfd57
mov ebp, dword [esp]
stc
rcr bp, cl
inc bp
mov ebp, dword [esp + 0x28]
lea esp, [esp + 0x2c]
jmp 0x9cfa46
pushfd
mov word [esp + 0xa], ax
call fcn.009cfb8a
push dword [esp + 4]
push dword [esp + 1]
push dword [esp + 8]
mov dword [esp + 5], ebx
jmp 0x9cfcb4
pushfd
lea esp, [esp + 0x18]
mov dword [esp + 2], esp
mov word [esp], di
mov word [esp + 4], si
mov dword [esp + 4], eax
jmp 0x9cfbd9
push word [esp + 0xa]
lea esp, [esp + 5]
push dword [esp + 0xa]
push word [esp + 7]
call fcn.009cfc4f
mov dword [esp + 2], ebp
mov word [esp], bx
push word [esp + 3]
call 0x9cfd20
dec esp
push eax
je 0x9cfd50
inc esp
push eax
add byte [ebp - 0x77fddb9c], cl
je 0x9cfd0f
add ah, byte [esi - 0x77]
and al, 0x24
mov word [esp], cx
mov byte [esp], dh
push dword [esp + 2]
jmp 0x9cfccb
pop word [esp + 2]
mov dword [esp + 1], edi
mov byte [esp + 6], dl
push dword [esp + 8]
push dword [esp + 4]
mov word [esp + 7], bp
je 0x9cfd35
add al, 0x66
mov dword [esp + 7], ebp
call fcn.009cfd2e
mov al, byte [0x8d751ae3]
and al, 4
mov byte [esp + 3], dh
push word [esp]
jmp 0x9cfcfd
add eax, dword [eax]
add byte [ebp - 0x72fddb9c], cl
and al, 0xc
push 0
call fcn.009d001e
push esp
jb fcn.009cfdb8
imul ebp, dword [esi + 0x61], reloc.iphlpapi.dll_GetAdaptersInfo
jb 0x9cfdb9
push esp
push 0x64616572
add byte [eax - 0x79], ch
popal
add byte fs:[eax - 0x79], ch
push 0x680d6987
add dword [esp], reloc.iphlpapi.dll_GetAdaptersInfo
imul ecx, dword [reloc.iphlpapi.dll_GetAdaptersInfo], 0x98712ad5
pushal
mov dword [esp + 0x12], esi
pop word [esp + 0x15]
jmp 0x9cfc1b
call 0x90035224
inc esp
and al, 3