Function at 0x88df66
Capabilities:
Execute anti-debugging instructions

Disassembly:
push 0xf087f254
jmp 0x88de45
mov word [esp], cx
push dword [esp + 5]
jl 0x88ddd5
lea esp, [esp + 2]
jmp 0x88ddff
push di
jmp 0x88dd96
lea esp, [esp + 2]
mov dword [esp + 0x24], esi
mov dword [esp + 0x20], edi
lea esp, [esp + 0x20]
jmp 0x88de6a
mov dword [esp + 0x24], esi
mov dword [esp + 0x20], edi
lea esp, [esp + 0x20]
jmp 0x88de6a
mov edi, dword [esp]
jmp 0x88de54
bts bp, bp
jo 0x88de2f
mov edi, dword [esp]
jmp 0x88de70
mov ebp, ebx
jmp 0x88dec6
pushfd
jmp 0x88dd55
mov ebp, ebx
jmp 0x88dec6
add esp, 7
jmp 0x88deb0
add esp, 7
mov ah, byte [esp + 7]
lea esp, [esp + 1]
jmp 0x88ded4
mov ah, byte [esp + 7]
lea esp, [esp + 1]
jmp 0x88ded4
xchg ecx, eax
mov edi, dword [esp + 0x2c]
mov bh, byte [esp]
sub esp, 0x14
jl 0x88de74
jge 0x88de7d
lea esi, [esp + 0xc]
setnp cl
call 0x88df66
pop es
xchg edx, eax
add byte [edi - 0x6e], ah
daa
xchg ebx, eax
or ah, byte [ebp - 0x99b82c]
je 0x88df13
add al, 0xf
xchg byte [esi + 0xffffffe], bh
xchg dword [esi - 0x14000002], eax
dec edi
imul byte [edx - 0x7b]
je 0x88dec5
jmp 0x88df4d
loopne 0x88df7f
jmp 0xc3525a93
sub esp, 0xac
mov ebp, esp
xchg bl, al
rcl ebx, cl
jg 0x88defc
in al, dx
lodsb al, byte [esi]
add byte [eax], al
add byte [ebx - 0x2c3c7914], cl
sar dword [edi - 0x24], cl
mov cl, byte [esp]
jmp 0x88df50
jmp 0x88df12
and al, 0xe9
mov es, word [eax]
add byte [eax], al
invalid
mov cl, byte [esp]
mov ebx, edi
call fcn.0088df37
jp 0x88df3f
je 0x88df6e
out dx, al
push eax
mov byte [ebx], bl
mov ebp, esi
sbb eax, 0x68c9feaf
push dword [esp + 1]
jo 0x88df35
jno 0x88df35
mov ecx, 0xefda2252
lea edx, [edi*4]
bswap ecx
jmp 0x88dfa5
rol edi, 0
jbe 0x88dfa7
mov dword [eax], reloc.iphlpapi.dll_GetAdaptersInfo
bswap ecx
xchg ah, al
rdtsc
setnp dh
sub esp, 0x1a
jmp 0x88e031
jmp 0x88df7e
bswap ecx
xchg ah, al
call fcn.0088dff7
lodsb al, byte [esi]
rdtsc
setnp dh
sub esp, 0x1a
jmp 0x88e031
lea esp, [esp + 0x18]
sub edi, 0x2e0e2d1e
bsr eax, ebx
jmp 0x88e04e
lea esp, [esp + 2]
jmp 0x88dfbb
jno 0x88e064
mov dx, bp
mov cl, bl
jmp 0x88e074
mov dx, bp
mov cl, bl
mov dx, 0xf446
jmp 0x88e0c1
mov dx, 0xf446
mov ah, bl
jmp 0x88e0c3
jmp 0x88e0ab
inc edi
bts dx, di
jne 0x88e23a
sub esp, 0x10
cmc
jmp 0x88e0ec
cmc
setae dh
mov edx, ebx
jmp 0x88e07e
mov ah, bl
inc edi
cmc
js 0x88e07c
cmc
setae dh
mov edx, ebx
jmp 0x88e07e
xchg dword [esp + 8], ecx
jmp 0x88e117
jmp 0x88e1fa
add edi, dword [esi]
rdtsc
bsr cx, sp
jo 0x88e159
jno 0x88e12e
pop ebx
rol byte [esi + 0x21], 1
shl byte [edi - 0x39], 1
dec ebp
frstor dword [edi + edx*2 - reloc.iphlpapi.dll_GetAdaptersInfo]
cmc
xchg dword [esp + 8], ecx
lea esp, [esp + 0x10]
dec edi
add ecx, ebp
jno 0x88e0f2
lea edx, reloc.iphlpapi.dll_GetAdaptersInfo
mov cx, word [esp]
mov ch, 0xca
jmp 0x88e0f7
neg cl
jmp 0x88e17e
neg cl
jmp 0x88e17e
mov dword [esp + 0x18], edi
mov dh, byte [esp]
popal
movzx eax, byte [ecx]
push ecx
mov dword [esp], eax
jmp 0x88e187
pushal
bswap eax
bsf bp, si
jmp 0x88e1ce
dec cl
jge 0x88e1a4
mov edx, dword [esp + 3]
bts dx, dx
jmp 0x88e1d9
popal
movzx eax, byte [ecx]
push ecx
jmp 0x88e16d
mov edx, dword [esp + 3]
bts dx, dx
jmp 0x88e1b2
lea edx, reloc.iphlpapi.dll_GetAdaptersInfo
bsf dx, cx
mov edx, esi
mov cl, 0xac
jmp 0x88e221
jne 0x88e161
mov dword [esp + 0x18], edi
mov dh, byte [esp]
jmp 0x88e19d
lea edx, reloc.iphlpapi.dll_GetAdaptersInfo
bsf dx, cx
mov edx, esi
jmp 0x88e1be
lea edx, reloc.iphlpapi.dll_GetAdaptersInfo
mov cx, word [esp]
mov ch, 0xca
jmp 0x88e0f7
call fcn.0088e798
imul edi, eax, 0x6e
or eax, edi
dec edx
inc edi
aad 0x45
inc ebp
sub al, 0xdf
sbb eax, esp
ja 0x88e27d
test eax, 0x76c302c8
out 0x77, al
in al, 0x78
out dx, eax
add al, bl
jbe 0x88e20b
ja 0x88e20b
js 0x88e218
jg 0x88e245
jmp 0x96897876
sub esp, 0x10
jmp 0x88e112
not dl
bswap ecx
leave
call fcn.0088e299
mov dword [ebx], esp
mov bl, 0xd6
and eax, 0xfa64f19c
popfd
insb byte es:[edi], dx
fst dword [ecx]
nop
rcl cx, cl
not ch
rcl ch, 4
jmp 0x88e301
xor dl, 0x21
mov cx, word [esp]
lea ecx, [edx + ebp]
bsr cx, bp
jmp 0x88e29f
mov ecx, 0x648d0cd1
and al, 4
jmp 0x88e266
jno 0x88e2b8
lea ecx, reloc.iphlpapi.dll_GetAdaptersInfo
jmp 0x88e2be
lea ecx, reloc.iphlpapi.dll_GetAdaptersInfo
call fcn.0088e2da
lea esp, [esp + 4]
add dl, 0x9d
push si
lea ecx, [esp + edx]
mov ch, dl
jmp 0x88e2e1
lea ecx, [esi*4]
setp cl
mov cx, word [esp]
mov ch, dh
jmp 0x88e31c
jmp 0x88e242
call fcn.0088e335
imul byte [edx - 8]
lahf
push 0xffffffffffffffd4
adc al, 0x8f
pop ds
jp 0x88e29f
and esp, dword [edx + reloc.iphlpapi.dll_GetAdaptersInfo]
mov ecx, 0xae6b7ad2
lea esp, [esp + 2]
xor dl, 0x87
inc ecx
jno 0x88e306
bswap ecx
jmp 0x88e3a4
mov ecx, 0x6df50c7
jmp 0x88e42f
cmc
mov ch, byte [esp]
lea ecx, [eax + esi]
jmp 0x88e3e7
mov ecx, 0xa7181b41
rcl ecx, 0x1f
lea ecx, [esp + edi]
jmp 0x88e3c4
add bl, dl
jb 0x88e405
clc
jmp 0x88e406
mov cl, dh
jmp 0x88e3da
clc
jmp 0x88e445
setnp dl
jmp 0x88e411
btc edx, esp
bt cx, dx
lea ecx, [ecx + ebx]
mov ebx, 0xa30f66e2
ror dword [ebp - reloc.iphlpapi.dll_GetAdaptersInfo], 1
add byte [eax], al
add ch, bh
call fcn.0088e4e3
std
jg 0x88e412
mov bh, byte [ecx + 0x37]
aad 0x50
invalid
not dl
neg ch
jns 0x88e401
mov cl, dh
mov ecx, 0xa7181b41
rcl ecx, 0x1f
lea ecx, [esp + edi]
cmc
jmp 0x88e3c5
inc edi
xchg ecx, edx
bsf cx, si
js 0x88e408
setnp dl
btc edx, esp
bt cx, dx
lea ecx, [ecx + ebx]
jmp 0x88e41b