Function at 0x1044c0ed
Capabilities:
Execute anti-debugging instructions

Disassembly:
inc ecx
pop ecx
dec ebp
arpl si, si
cwd
btc di, ax
dec ebp
bts eax, esp
dec ecx
adc ebx, esi
dec ecx
idiv eax
inc ecx
imul ah
inc bp
mov ebp, dword [edi + edi*2 - 0x5072e2a]
inc cx
imul eax, eax
dec eax
bswap ecx
inc cx
add eax, dword [edi + edi - 0x2839713]
inc eax
and dh, 0x20
inc ebx
xor cl, byte [edi - 0x5072e66]
inc bp
xor esp, esp
inc ecx
dec ah
dec ebp
lea edi, [edi + edi - 0x2839711]
inc sp
xor ebx, esi
dec ecx
sbb edx, ebx
sal edi, 0xfa
inc cx
shrd ebp, eax, cl
inc di
mov dword [edi - 0xa0c03fc], ebp
inc ebp
movsx ebp, ah
jmp ebx
shr cl, 4
not ax
rol ecx, 0x43
shl ecx, 0x18
not dx
jns 0x103f4bc7
ror dword [esp], 0xf7
imul ecx
pop ecx
sar cx, 0xef
jae 0x103ee9f1
mov dword [ecx + edi - 0x73930000], edx
mov dword [edi + ecx - 0x7392fffc], eax
mov ecx, dword [ecx + ebp - 0x73930000]
mov eax, 0xbb82143a
jns 0x103a9368
sub edi, 4
mov eax, dword [edi]
xor eax, ebx
mov edx, 0xd8192726
movzx ecx, dl
rol edx, 0x41
rol eax, 1
sal ecx, 0xdb
dec dl
not eax
bt edx, ecx
ror ecx, 0x7e
ror edx, 0xca
bswap eax
dec eax
sub ecx, edx
inc edx
neg eax
bswap edx
ror edx, cl
xor ebx, eax
sal cx, cl
or ecx, ecx
lea ecx, [ecx + ecx + 0x3a8c7016]
adc ebp, eax
inc cl
sub cl, 0xb1
dec edx
mov eax, esi
adc edx, ecx
dec ecx
sbb esi, 4
imul ecx, edx
btr dx, 0x1f
shl ecx, 0x4d
mov dword [esi], eax
lea eax, [edx + ecx*8 - 0x77d0f6e]
jne fcn.102d9ffd
add edi, eax
mov eax, ebp
shr dx, 0xec
ror cx, cl
sbb ebp, 1
bswap edx
sal cl, 0xa4
mov word [ebp + edx*8 - 0x7f780], ax
mov eax, edx
je fcn.104769e1
neg edx
movzx ax, byte [esi + edx - 0x6c4150dd]
movzx ecx, dx
shr ecx, 0xe7
mov dl, byte [esi + edx - 0x6c4150db]
shr ecx, cl
or al, dl
and ecx, 0xebbef49a
push ecx
not al
sal ecx, 1
sub word [esp + ecx*4 - 0x7f], 0x6e2d
add ecx, dword [esp + ecx - 0x20]
mov word [esi + ecx*2 - 0x123a65e], ax
jl 0x1047272f
dec ecx
movsx eax, cx
mov ecx, dword [edi + ecx*4 - 0x2474cbc]
not ax
pop eax
lea edx, [eax + eax*2 + 0x29d358a]
xor ecx, ebx
bswap ecx
call fcn.102e62db
mov ecx, 0x2b2330a1
or cx, cx
movzx edx, cl
mov ecx, dword [edi + edx - 0xa1]
jg 0x104a3a14
sysenter
push 0x1c00d09c
mov dword [esp], 0x98af05a2
call fcn.102f6efb
adc edx, 0x40a4429e
pop eax
lea eax, [ecx*8 + 0x67a61d88]
sar ax, 0xc4
ror edx, 3
ror cx, 8
inc eax
lea edx, [ecx + edx - 0x2767a9cc]
ror ax, 0xe1
rol edx, 3
shr ecx, 0xf3
sub al, ch
xor ebx, edx
xchg cl, al
add ebp, edx
mov edx, eax
call fcn.104a5f35
sysenter
pushfd
mov dword [esp], 0xeaf206a2
call fcn.102f6efb
mov cx, word [ecx + edi - 0x38ffe48c]
add edi, 2
and ax, cx
mov ecx, 0x9c0ab292
neg cx
not ax
movsx edx, cx
mov word [edx + edi - 0x4d6e], ax
lea eax, [edx + ecx - 0x4d71f865]
mov dword [esp + edx*2 - 0x9adc], esi
ret
bt ax, ax
adc ebp, 3
movzx edx, al
add ax, 0x4ab7
sub edx, eax
xor ecx, ebx
inc ecx
or edx, 0xd33e8c9a
not al
shr ax, 0xe3
rol ecx, 1
sub ecx, 0xb53a0e33
xor dl, dh
neg eax
not ecx
lea eax, [eax - 0x5d497b73]
mul eax
xor ebx, ecx
imul ax
call fcn.1046e430
call fcn.1038a5bd
inc ecx
mov esi, 0x2839735
inc ecx
mov edi, esi
dec edx
lea ebp, [ebp + esi - 0x2839739]
inc esp
mov esp, edi
inc ebp
movzx edx, dh
inc esi
mov esi, dword [ebp + esi*2 - 0x5072e6a]
inc ecx
movsx eax, dl
inc ebp
xor esi, ecx
inc ecx
or edx, 0x4abe53b6
dec eax
cdq
inc ecx
dec esi
inc esp
mov eax, eax
inc ecx
movsx ecx, sp
inc ecx
ror esi, 2
mov esi, edi
dec eax
cdq
inc ecx
bswap esi
dec eax
cdq
inc ecx
neg esi
inc ecx
push ecx
inc esp
movzx ebx, dl
inc esi
xor dword [esp - 0xa0e5cd4], esi
jmp 0x102dbb4c
shr dl, 0xa7
lea ecx, [ecx + edx - 0x6b5a4d92]
add ax, ax
bswap ecx
btc ax, ax
and ax, dx
inc edx
not ecx
bswap eax
setns al
not eax
xor ebx, ecx
call fcn.102f6301
lea eax, [eax + ecx - 0x28435ac3]
pop edx
btc cx, 0x17
neg edx
xor ebx, eax
jmp 0x1032738b
rol eax, 0x11
inc ecx
xor edx, 0x13287629
or al, dl
rol ecx, 2
not dx
jmp 0x103bf30c
sal ecx, 0xc9
setp cl
and ax, dx
mov word [ebp + ecx*4 - 4], ax
call fcn.10342416
not ecx
inc ecx
shr edx, 0x61
jp 0x10473027
xor ecx, 0xa1aad30d
mov dword [esp + edx - 0x2e44a10c], eax
sub ax, 0x9411
mul dx
not ecx
push edx
shl al, 0x27
xor ebx, ecx
mov byte [esp + edx - 0x2e44849d], dl
dec al
mov dword [esp + edx - 0x2e4484a1], edx
add edi, ecx
xchg word [esp + edx*2 - 0x5c890941], ax
mov ebp, dword [ebp + edx*2 - 0x5c890946]
call fcn.104b165e
mov dx, word ss:[ecx + eax - 0x4a]
lea esi, [esi + ecx - 0x48]
mov word [esi + ecx*4 - 0x128], dx
movsx edx, cx
call fcn.10377b98
adc byte [esi], dl
push ebp
sbb byte [edi + 0x5965f4ef], dl
sbb byte [ebx + 0xb], al
invalid
jmp edx
jbe 0x103225e5
sub cl, cl
mov byte [edx + ecx*2 - 0x7d7aa600], al
btc ecx, 0xa6
mov dword [esp + ecx*2 - 0x7d7aa680], esi
ret
lea edi, [edx + edi - 0x9d]
not edx
lea eax, [edx + edx*8 + 0x1105c6a0]
xor ecx, ebx
sub ax, 0x58ab
sbb ecx, 0xb4aea1a5
not ecx
neg eax
adc edx, 0x1e270bba
shr edx, 0xbe
rol ecx, 1
xor eax, 0x9ea20e2e
push edx
dec ecx
and edx, dword [esp + edx]
sal edx, 0x7c
xor ebx, ecx
xor word [esp + edx + 2], dx
sar word [esp + edx*2], 0x25
sal al, 0x82
adc ebp, ecx
pop edx
inc edx
movsx ecx, ax
mov ecx, dword [esi + edx*2 - 2]
push edx
xadd word [esp + edx - 1], dx
or eax, 0x23345914
lea esi, [esi + edx*2 + 2]
imul edx
imul dl
shr word [esp + edx*2 + 1], 0x24
mov dword [esp + edx*2], ecx
mov ecx, eax
bswap edx
ror edx, 0x6d
popfd
add edx, ebp
jmp edx