Function at 0x10b8eea
Capabilities:
Execute anti-debugging instructions

Disassembly:
push 0x70
mov eax, 0x11b85ca
call fcn.010aa5f6
mov eax, dword [ebp + 8]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentThread]
and dword [eax], 0
and dword [eax + 4], 0
push 1
call esi
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadAffinityMask]
mov dword [ebp - 0x14], eax
test eax, eax
jne 0x10b8f35
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x10b9125
and eax, 0xffff
or eax, 0x80070000
jmp 0x10b9125
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
call edi
push eax
call dword [sym.imp.KERNEL32.dll_GetPriorityClass]
mov dword [ebp - 0x18], eax
call esi
push eax
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
push 0x80
mov dword [ebp - 0x1c], eax
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push eax
call ebx
test eax, eax
je 0x10b8f18
push 2
call esi
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
test eax, eax
jne 0x10b8f8c
push dword [ebp - 0x18]
call edi
push eax
call ebx
push dword [ebp - 0x14]
call esi
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadAffinityMask]
jmp 0x10b8f18
push 0x14
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.010b8145
xor edi, edi
push edi
push 0x3e8
push edx
push eax
call fcn.011ab1f0
push edi
push 2
push edx
push eax
call fcn.011ab190
push 0x800
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
call fcn.010b8d01
mov dword [ebp - 4], edi
cmp dword [ebp - 0x78], 0
je 0x10b8fe2
mov eax, dword [ebp - 0x74]
sub eax, dword [ebp - 0x78]
sar eax, 3
cmp eax, 0x800
jae 0x10b906b
mov dword [ebp - 0x10], 0x100
call fcn.010b8127
mov ebx, eax
mov dword [ebp - 0x30], edx
call fcn.010b8127
mov edi, eax
mov ecx, edx
cmp ebx, edi
jne 0x10b9005
cmp dword [ebp - 0x30], ecx
je 0x10b8ff3
rdtsc
add edi, dword [ebp - 0x24]
mov dword [ebp - 0x38], edx
adc ecx, dword [ebp - 0x20]
mov dword [ebp - 0x2c], edi
mov ebx, eax
mov edi, ecx
call fcn.010b8127
cmp edx, edi
ja 0x10b9032
jae 0x10b902d
call fcn.010b8127
cmp edx, edi
jb 0x10b9022
ja 0x10b9032
cmp eax, dword [ebp - 0x2c]
jb 0x10b9022
rdtsc
sub eax, ebx
sbb edx, dword [ebp - 0x38]
push 0
push 0x1f4
push edx
push eax
call fcn.011ab190
push edx
push eax
lea ecx, [ebp - 0x7c]
call fcn.010b8d60
dec dword [ebp - 0x10]
jne 0x10b8fe9
push 0x9c4
lea ecx, [ebp - 0x7c]
call fcn.010b8d85
test al, al
je 0x10b8fc8
cmp byte [ebp - 0x44], 0
je 0x10b90d6
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x54]
xor edx, edx
mov ebx, ecx
mov edi, eax
cmp eax, edx
ja 0x10b90b0
cmp ecx, 0xf4240
jb 0x10b90a4
cmp eax, edx
ja 0x10b90b0
jb 0x10b9097
cmp ecx, 0x3b9aca00
jae 0x10b90a4
add ecx, 0xc350
mov edi, 0x2710
jmp 0x10b90bb
cmp eax, edx
ja 0x10b90b0
cmp ecx, 0x989680
jb 0x10b90da
add ecx, 0x7a120
mov edi, 0x186a0
push edx
push edi
adc eax, edx
push eax
push ecx
call fcn.011ab1f0
push 0
push edi
push edx
push eax
call fcn.011ab190
mov ebx, eax
mov edi, edx
jmp 0x10b90da
xor ebx, ebx
xor edi, edi
push dword [ebp - 0x14]
call esi
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadAffinityMask]
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push dword [ebp - 0x1c]
call esi
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov eax, dword [ebp + 8]
mov dword [eax], ebx
mov dword [eax + 4], edi
test edi, edi
ja 0x10b9112
test ebx, ebx
jbe 0x10b9116
xor esi, esi
jmp 0x10b911b
mov esi, 0x80004005
lea ecx, [ebp - 0x7c]
call fcn.010ee5f9
mov eax, esi
call fcn.010aa6e2
ret 4