Function at 0x826d94
Capabilities:
Execute anti-debugging instructions

Disassembly:
push dword [esp]
mov eax, dword [esp]
add esp, 4
jmp 0x826ae0
mov esp, dword [esp]
jmp 0x826c1b
add eax, 0x39ff32df
neg eax
shr eax, 3
add eax, 0x71a64896
sub eax, 0x1010cd6c
xor ecx, eax
mov eax, dword [esp]
add esp, 4
add eax, ecx
jmp 0x826b94
pop esp
push eax
mov dword [esp], edi
mov edi, 0x5be2fb03
inc edi
shr edi, 2
push ebx
mov ebx, 0x5fae8f32
add edi, ebx
pop ebx
push ebp
push ebx
jmp 0x826b15
push 0x1efa519c
mov dword [esp], ecx
sub esp, 4
jmp 0x826b1f
push 0x20c25ba0
mov dword [esp], eax
push esp
mov eax, dword [esp]
add esp, 4
add eax, 4
jmp 0x826acd
sub ecx, 0xffffffff
push eax
mov eax, 0x5aef826f
jmp 0x826a89
pop dword [esp]
jmp 0x826a81
push 0x39df3db1
jmp 0x826ba8
mov dword [esp], edi
push ebp
jmp 0x826b75
xor edi, 0xeaacaed8
add eax, edi
mov edi, dword [esp]
add esp, 4
sub eax, edi
sub eax, 0x6aaeaed2
push dword [esp]
jmp 0x826bfa
neg ebp
sub ebp, 0x12714430
mov edi, ebp
pop ebp
or edi, 0x733b8b34
not edi
inc edi
sub edi, 0x11485b86
sub esp, 4
mov dword [esp], ebx
mov ebx, edi
mov ecx, ebx
pop ebx
jmp 0x826b8e
mov ebp, 0x7ed94b83
not ebp
and ebp, 0x1f185ac0
dec ebp
xor ebp, 0x7fdf2ee6
jmp 0x826b48
pop edi
jmp 0x826afc
pop ecx
jmp 0x826b9a
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
jmp 0x826aaf
pop ebx
neg ebx
add ebx, 0xc337f2d3
jmp 0x826bb6
mov ebp, ebx
pop ebx
add edi, ebp
pop ebp
push edi
mov edi, 0x5ff5ff54
or edi, 0x77f82ca2
jmp 0x826bcd
not edi
sub edi, 0xffffffff
jmp 0x826b28
add esp, 4
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
push ebx
push dword [esp + 4]
push dword [esp]
pop ebx
add esp, 4
jmp 0x826b0d
mov edi, dword [esp]
add esp, 4
jmp 0x826c08
push ebx
mov ebx, esp
push esi
mov esi, 4
add ebx, esi
mov esi, dword [esp]
jmp 0x826bda
mov eax, ebx
jmp 0x826d5e
cmp dword [ebp + 0x122d2b23], 1
je 0x82721a
pushal
add esi, 0x558353c1
or dh, 0xdd
popal
mov byte [ebp + 0x122d37ea], 0x43
jno 0x826d8b
js 0x826d8b
pushal
popal
call 0x826d94
cmc
shl byte [ebp - 0x16af9f14], 1
or eax, dword [eax]
add byte [eax], al
popal
arpl word [eax + 0x4b], si
or al, 0xdf
push edx
push cs
mov eax, dword [0x505834aa]
push eax
pop eax
pop eax
popal
push eax
pushal
jl 0x826db6
push ecx
pop ecx
jg 0x826dbe
pushal
popal
popal
mov eax, dword [esp + 4]
pushal
jo 0x826dd0
push eax
push edx
rdtsc
pop edx
pop eax
jo 0x826ddc
push eax
push edx
rdtsc
pop edx
pop eax
popal
mov eax, dword [eax]
jno 0x826de9
push ecx
pushal
popal
pop ecx
mov dword [esp + 4], eax
jmp 0x826df7
pop eax
pushal
mov cx, ax
mov bh, 0xb7
popal
push dword [ebp + 0x122d0021]
push 0
push ebp
call 0x826e10
and byte [ebp - 0x3d], bl
pop ebp
mov dword [esp + 4], ebp
add dword [esp + 4], 0x17
inc ebp
push ebp
ret
mov edx, edx
sub esp, 4
mov dword [esp], ebx
jmp 0x827358
add dword [esp + 4], esi
jmp 0x82730f
shr ebp, 2
add ebp, 0xe5c01c7d
jmp 0x827258
mov edi, 4
add edx, 0x57ffd1d7
sub edx, edi
jmp 0x827379
xor dword [esp], ebp
jmp 0x82739d
add ecx, ebp
pop ebp
and ecx, 0x7bf67b84
jmp 0x8272c6
push esp
push dword [esp]
pop ebp
add esp, 4
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
jmp 0x827250
pop dword [esp]
push ebp
mov ebp, 0x77ff4466
dec ebp
or ebp, 0x89fa0d9
not ebp
shr ebp, 5
add ebp, 0xfbffff2c
add dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
pop edx
push 0x334404dd
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], ecx
mov ecx, 0x29ce7c52
push ebp
mov ebp, 0x68ff8e11
jmp 0x827230
and ecx, 0x3f7971a5
jmp 0x827326
mov esp, dword [esp]
push edx
sub esp, 4
push esp
jmp 0x827282
not ecx
push esi
mov esi, 0x4e8f80a2
add esi, 0x7fafb4ee
add esi, 0x6fb7f2d6
add ecx, esi
pop esi
add ecx, 0xeb49479e
add edx, ecx
pop ecx
push edi
jmp 0x82723e
mov dword [esp], eax
jmp 0x8273a5
mov esi, dword [esp]
add esp, 4
push dword [esp]
pop eax
push 0x1c43f68f
mov dword [esp], ebp
jmp 0x827266
dec ecx
jmp 0x8272e1
xor eax, 0x777b11a1
jmp 0x82734b
add esp, 4
shl dword [esp], 4
push esi
push eax
push 0x7f5f9745
pop eax
inc eax
jmp 0x82732c
add eax, 0xfa2b64a8
mov esi, eax
pop eax
jmp 0x827227
mov dword [esp], 0x469f329e
mov dword [esp], esi
jmp 0x827367
mov dword [esp], 0x4ffb8f90
push esi
mov esi, 0x3fdf480b
jmp 0x827391
sub edx, 0x57ffd1d7
pop edi
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
jmp 0x827307
and dword [esp + 4], esi
mov esi, dword [esp]
jmp 0x827336
xor ebp, dword [esp]
jmp 0x8272d1
call 0x8273aa
push dword [esp]
push dword [esp]
pop edx
sub esp, 4
mov dword [esp], esi
mov esi, esp
push ebp
mov dword [esp], 0x19601415
jmp 0x827b7f
pop eax
sub esp, 4
mov dword [esp], edi
push edi
mov dword [esp], eax
mov dword [esp], 0x74bdef7e
mov dword [esp], edx
push 0x598165b5
jmp 0x827aca
push edx
mov edx, 0x73ff5636
sub esi, edx
jmp 0x82755b
pop eax
jmp 0x8274da
push dword [esp]
mov eax, dword [esp]
add esp, 4
jmp 0x8274ed
mov dword [esp], edx
push ebx
mov dword [esp], esp
jmp 0x827718
push edi
mov edi, 0x769abf0d
xor dword [esp + 4], edi
jmp 0x827896
mov dword [esp], ecx
mov ecx, 0x375d8600
xor dword [esp + 4], ecx
jmp 0x827857
pop esp
push ebx
mov dword [esp], 0x61d20e82
jmp 0x82791f
mov esi, dword [esp]
add esp, 4
sub edx, 0x69ab27b1
jmp 0x827996
pop edi
add edi, 0x7ecf92a5
pop edx
add ecx, edi
pop edi
push dword [edx + ecx]
jmp 0x8276b3
push ebp
jmp 0x827875
mov dword [esp], edx
push ecx
push 0x33da5440
pop ecx
jmp 0x827b8d
push 0x710e55dd
jmp 0x827860
xor edx, 0x77eddac9
pop eax
sub ebx, 0x2ffddba9
push edx
mov edx, 0x5cf61173
add ebx, edx
pop edx
push edi
mov edi, 0x6f450f2b
add edi, 0x7e7ed0ed
jmp 0x827794
mov edx, dword [esp]
add esp, 4
push dword [esp]
pop ecx
push edx
mov edx, esp
add edx, 4
push eax
mov eax, 4
add edx, eax
pop eax
jmp 0x827c3b
add dword [esp + 4], esi
pop esi
mov dword [esp], ecx
mov ecx, esp
push ebp
jmp 0x827adc
push dword [esp]
pop ebp
add esp, 4
push eax
mov eax, 0xffffffff
jmp 0x827975
xor dword [esp], 0x77eddac9
pop edx
jmp 0x827534
add ebp, 4
jmp 0x827b0f
sub ebx, ecx
pop ecx
add ebx, 0x7dfd4cec
sub ebx, edx
sub ebx, 0x7dfd4cec
push edx
mov edx, 0x7ff9ebf8
shr edx, 3
sub edx, 0x90452f8e
add ebx, edx
pop edx
add ebx, 0x7177f124
jmp 0x827842
xchg dword [esp], ebp
jmp 0x82744d
add esp, 4
push esi
mov esi, 4
sub ecx, esi
pop esi
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0x827724
push edx
push eax
mov dword [esp], esp
add dword [esp], 4
pop edx
push ecx
mov ecx, 0x77f7be27
xor ecx, 0x77f7be23
add edx, ecx
pop ecx
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
jmp 0x827911
sub esp, 4
mov dword [esp], esi
mov dword [esp], ebx
mov ebx, 0x6df9d7e5
xor dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
jmp 0x8276e9
pop esi
jmp 0x827710
mov edx, dword [esp]
add esp, 4
push eax
mov eax, 0x2ff72522
neg eax
jmp 0x8277b6
push dword [esp]
pop ebx
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
jmp 0x82788d
pop ecx
xor ecx, 0x2c3f590b
jmp 0x827da8
mov ebp, dword [esp]
jmp 0x82766c
add dword [esp], 4
jmp 0x8276d6
mov dword [esp], eax
mov dword [esp], 0x65cf682a
and dword [esp], 0x7d5ff477
neg dword [esp]
and dword [esp], 0x71ff8a77
push edx
mov edx, 0x980ae56
xor dword [esp + 4], edx
pop edx
mov dword [esp], ebx
pop dword [edx + ecx]
push 0x145d16cd
mov dword [esp], edi
mov dword [esp], edx
push eax
mov eax, 0x1def54e3
not eax
shr eax, 3
not eax
add eax, 0x6f147f75
xchg esi, eax
not esi
xchg esi, eax
push ebx
mov ebx, 0x7cf65371
inc ebx
push esi
mov dword [esp], ebp
mov ebp, 0xac6a7c28
xor ebx, ebp
pop ebp
jmp 0x8279e8
sub edi, 0x7c4beef4
sub ebx, edi
pop edi
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x299b08f0
add ecx, 0x561f0501
jmp 0x827636
sub eax, 0xd008dada
jmp 0x827934
push edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov dword [esp], ebp
push 0x27883db0
mov dword [esp], ecx
mov ecx, 0x2d350fc2
mov ebp, ecx
pop ecx
add ebx, ebp
push dword [esp]
mov ebp, dword [esp]
add esp, 4
push ebp
push 0x5a26cf00
jmp 0x8278ad
xor ebp, dword [esp]
jmp 0x82786a
xor edi, ecx
pop ecx
inc edi
dec edi
shl edi, 4
sub edi, 0x3a9b581c
add edx, edi
mov edi, dword [esp]
add esp, 4
jmp 0x827686
sub ebx, 0x5cf61173
add ebx, 0x2ffddba9
pop edx
push ebp
mov ebp, esp
jmp 0x82762b
pop ecx
dec dword [esp]
jmp 0x82742d
mov dword [esp], esi
mov esi, esp
jmp 0x827c66
mov esp, dword [esp]
xor ebx, eax
pop eax
jmp 0x8277c0
mov ebp, esp
push esi
mov esi, 0x7fffac26
and esi, 0x6e761c76
neg esi
dec esi
inc esi
push esi
jmp 0x8278c9
xor edx, dword [esp]
pop esp
jmp 0x827b26
mov edi, dword [esp]
add esp, 4
mov dword [esp], eax
mov eax, 0x480fc8df
push eax
jmp 0x8275e0
mov dword [esp], ebx
mov dword [esp], esp
add dword [esp], 4
pop ebp
jmp 0x827a48
not dword [esp]
mov esi, dword [esp]
add esp, 4
xor esi, 0x6e760c21
add ebp, esi
pop esi
push ecx
mov ecx, 0x7d7b084d
sub ecx, 0x6dfdf575
neg ecx
push edx
mov edx, 0x7fadf4d3
not edx
sub edx, 0x6fff5a51
push ebx
mov ebx, 0xe0303c49
add edx, ebx
pop ebx
sub ecx, edx
pop edx
add ebp, ecx
pop ecx
xor ebp, dword [esp]
xor dword [esp], ebp
jmp 0x827802
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], ebp
jmp 0x827421
mov dword [esp], ebp
mov dword [esp], 0x6eb69dee
neg dword [esp]
xchg dword [esp], ebx
jmp 0x827a42
add edx, eax
pop eax
push esi
push 4
jmp 0x82749f
mov dword [esp], eax
push ecx
mov dword [esp], 0x11c530c3
add dword [esp], 0x5bb463f9
jmp 0x82740d
not eax
xor eax, 0x6ffd94e8
add eax, 0x2d444cc5
add esi, eax
jmp 0x8279d0
add ecx, eax
jmp 0x8273c9
sub edx, eax
jmp 0x827df2
add edx, esi
add edx, 0x69ab27b1
pop esi
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov ecx, 0x7fbb2f21
shr ecx, 3
push 0x106f9a6e
mov dword [esp], ebp
push edx
mov edx, 0x74bf1cc1
mov ebp, 0x49ef6658
push ebp
dec dword [esp]
pop ebp
jmp 0x827a77
pop eax
sub ecx, esi
jmp 0x8276d0
mov edi, 4
sub ebp, edi
pop edi
xor ebp, dword [esp]
jmp 0x827b3a
add eax, ebx
pop ebx
mov edx, eax
pop eax
push esi
jmp 0x827b72
inc ebx
jmp 0x827a94
add ebp, 4
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], esi
mov esi, 4
add ebp, esi
push dword [esp]
pop esi
add esp, 4
jmp 0x827664
shl ebp, 8
neg ebp
sub ebp, 0x6581b76d
add ebp, edx
mov edx, dword [esp]
add esp, 4
and ecx, ebp
jmp 0x8275bd
xchg dword [esp], ebx
jmp 0x827a9c
shl dword [esp], 7
jmp 0x827aae
shr dword [esp], 2
push esi
mov esi, 0xcf5d672
jmp 0x82759b
pop edx
neg edx
sub edx, 0xb6559e8e
push edx
sub esp, 4
jmp 0x827b15
mov ebp, 4
add ecx, 0x3f370205
add ecx, ebp
push esi
mov esi, 0x7fb6887b
or esi, 0x767e4fa0
and esi, 0x5fddb8a4
sub esi, 0x5feffd00
push eax
mov eax, 0x7dfbbd48
neg eax
dec eax
jmp 0x827962
push edi
jmp 0x8279d8
mov dword [esp], eax
mov eax, 0x7ecf92a5
sub dword [esp + 4], eax
jmp 0x8273f8
sub esp, 4
jmp 0x82751b
pop edx
xchg edx, eax
dec eax
xchg edx, eax
jmp 0x827c07
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0x827942
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
sti
push eax
push 0x2c4061a
mov dword [esp], esi
mov esi, 0x1ffee0c4
mov eax, esi
mov esi, dword [esp]
add esp, 4
jmp 0x827de2
mov esi, 0x72fffbf2
sub ecx, esi
pop esi
jmp 0x827bb8
mov dword [esp], ecx
push esi
mov esi, 4
jmp 0x827dc6
xor ecx, 0x77ff045d
push eax
mov dword [esp], ecx
sub dword [esp], 1
pop ecx
add ecx, 0x29d487c9
mov edx, ecx
pop ecx
xor ebx, edx
push dword [esp]
mov edx, dword [esp]
add esp, 4
jmp 0x82752a
add ecx, 0x7b7b5c54
sub ecx, edx
sub ecx, 0x7b7b5c54
push 0x7fa737a
mov dword [esp], edx
push eax
mov eax, 0x77cf9ea2
dec eax
shl eax, 5
sub eax, 0xef3893a4
mov edx, eax
pop eax
push 0
sub dword [esp], edx
jmp 0x827b31
xchg dword [esp], edx
pop esp
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x827b46
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push edx
push eax
mov dword [esp], 0x6f180000
push ebp
jmp 0x82743c
mov ebp, dword [esp]
add esp, 4
jmp 0x82780a
mov ecx, esi
pop esi
add esi, 0x73ff5636
sub esi, 0x3bf60d38
add esi, ecx
add esi, 0x3bf60d38
jmp 0x8273eb
push eax
mov eax, 0x779b4ab6
xor eax, 0x1ea41cb6
jmp 0x82797c
pop eax
jmp 0x827df8
sub edx, eax
add edx, 0x693f5600
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
sub edx, 0x4ff7b137
add edx, dword [esp]
add edx, 0x4ff7b137
push edi
mov edi, 0x3faf1211
xchg edi, eax
not eax
xchg edi, eax
inc edi
push ecx
push ebp
jmp 0x827e3b
mov ebp, 0x75f94e61
push ebp
xor dword [esp], 0x2c3f590b
jmp 0x827704