Function at 0x1001dc60
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov edx, dword [eax + ebp]
not ecx
push ebx
pop word [esp]
lea esp, [esp + 2]
jmp 0x1001db57
mov dx, bx
jmp 0x1001db23
mov ah, byte [esp]
mov dword [esp + 0x18], edi
lea eax, [ecx + 0x3b]
popal
mov dword [ecx], edx
neg ax
jmp 0x1001db77
pushal
cpuid
sete bl
cpuid
jmp 0x1001db3e
lea esp, [esp + 3]
jmp 0x1001db80
jns 0x1001db98
sub esp, 0x1b
rdtsc
jmp 0x1001db61
lea edx, [edx + edi]
mov ch, 0x6d
mov cx, 0x8a94
bsf ecx, ebp
jnp 0x1001dc0b
jp 0x1001dbbd
test al, 0x3f
scasd eax, dword es:[edi]
retf 0xf239
sub esp, 0x1b
rdtsc
lea esp, [esp + 3]
jmp 0x1001db80
call fcn.1001dbe9
mov byte [esi], bl
push ds
mov ebx, gs
loop 0x1001dbad
jae 0x1001db98
xchg byte [ebp - 0x3f], dh
mul cl
and byte [ebx - 0x66], ah
lea eax, [ebp + 0x50]
mov edx, 0xf4eda327
cmp edx, ebx
jo 0x1001dba7
jno 0x1001dba7
lea esp, [esp + 1]
cmp edi, eax
ja 0x1001dbef
rdtsc
mov ch, byte [esp]
neg ah
jmp 0x1001e757
movzx eax, byte [esi - 1]
lea ecx, [ebx + 0x6a]
jmp 0x1001dc23
jmp 0x1001dbbd
bswap ecx
lea ecx, [ecx - 0xb6]
jmp 0x1001dc87
pushfd
lea edx, reloc.KERNEL32.dll_LoadLibraryExW
mov cl, byte [esp + 2]
mov ecx, dword [esp]
mov dx, di
add dx, bx
jmp 0x1001dc3d
jnp 0x1001dc0d
bswap ecx
lea ecx, [ecx - 0xb6]
call fcn.1001dc71
add bl, byte [ecx + 0x2d9b6809]
cli
push 0x464ffa0f
fisttp word [edi + 0x2a]
fldenv [edx]
mov dl, 0xad
btr edx, edx
jo 0x1001db39
mov dx, bx
jmp 0x1001db23
sub al, bl
mov ecx, esp
jmp 0x1001dcdd
bswap edx
bswap ecx
mov cl, al
bts edx, ecx
jp 0x1001dd1e
lea edx, [eax*4]
jmp 0x1001dd0f
lea edx, [eax*4]
call fcn.1001dd20
jg 0x1001dd13
add byte [edi - 3], bh
insd dword es:[edi], dx
hlt
jmp 0x1001dd08
jle 0x1001e798
bsf ax, bx
call fcn.1001e740
jmp 0x9b261bed
xchg byte [esp], dh
invalid
bsf ax, bx
mov ecx, ebp
jmp 0x1001e7a4
rdtsc
call fcn.1001e818
lea esp, [esp + 3]
jmp 0x1001e802
sub edx, ecx
lea eax, [ebx + ebp]
mov ax, word [esp]
setae ah
jmp 0x1001e869
pop esi
int3
lea edx, [ebp + 0x40]
lea eax, [eax + esi]
mov eax, dword [esp]
bswap eax
bsr eax, edi
jmp 0x1001e827
jns 0x1001e7b1
js 0x1001e7b1
xchg dword [ecx], ecx
cdq
clc
or ecx, ebp
daa
stosb byte es:[edi], al
cmp byte [edi - 0x56], bl
outsb dx, byte [esi]
dec ebx
loop 0x1001e857
insb byte es:[edi], dx
jg 0x1001e883
mov word [esp + 1], di
and al, 1
xchg ah, dl
pop word [esp]
lea esp, [esp + 2]
push dword [esp + 0xc]
ret 0x10
pop word [esp + 1]
pop word [esp + 7]
add dword [esi - 0x71], esp
inc esp
and al, 7
call 0x1001e875
loope 0x1001e8d5
loope 0x1001e7e6
jae 0x1001e82d
invalid
mov al, ah
lea eax, [edi - 0x80]
sub esp, 0xe
jge 0x1001e853
jl 0x1001e893
lea esp, [esp + 2]
and al, 0xfc
call fcn.1001e8b5
loop 0x1001e8f9
out 0x82, eax
jno 0x1001e840
xor byte [ecx - 0x46], 0xf8
clc
push 0xdb6899fe
push ss
test dword [reloc.KERNEL32.dll_LoadLibraryExW], edx
pop word [esp + 1]
pop word [esp + 7]
jmp 0x1001e85d
and al, 2
call fcn.1001e8e4
in eax, dx
cld
iretd
aad 0x8d
and al, 2
mov esp, eax
jmp 0x1001e941
pushfd
lea ebp, [eax + edx - 0x40]
push esi
jmp 0x1001e96c
call fcn.1001e994
mov edx, dword [ecx]
and eax, 0x920baf13
add byte [edi - 0x6e], ah
xchg ebx, eax
or ah, byte [ebp - 0x7211b82c]
lea esp, [esp + 3]
lea ecx, [ecx + 0x22]
call fcn.1001e938
push edi
jmp 0x1001e949
mov ch, byte [esp]
clc
jmp 0x1003dc57
lea esp, [esp + 1]
jmp 0x1003dca2
jg 0x1003dc9a
sub esp, 1
cmc
jmp 0x1003dc41
bsf dx, bp
mov edx, 0xf28fd46
call 0x1003dcad
dec esp
lds edx, [ebp + 0x3c]
iretd
bsf dx, bp
mov edx, 0xf28fd46
lea ecx, [ebx*4]
cmp edi, eax
jmp 0x1003ed27
sub esp, 1
cmc
lea esp, [esp + 1]
lea eax, [ebp + 0x50]
bts cx, bx
jne 0x1003dc75
je 0x1003dc5f
not ecx
mov ecx, dword [esp]
jmp 0x1003dcf9
mov edx, ebx
mov ecx, dword [esp]
mov ch, al
xchg edx, ecx
xchg dword [esp], ebx
call fcn.1003dd0e
rol byte [ebx + 0x3784153a], 0x87
sbb al, 0x24
xchg dword [esp], ebx
mov dl, byte [esp]
mov cx, dx
mov ecx, 0x7f4ecf5f
lea ebx, [ebx + 0x11]
mov cl, al
jmp 0x1003dce2
jnp 0x1003ed3d
bswap edx
lea edx, [ebx + edi]
jmp 0x1003ed88
bswap edx
lea edx, [ebx + edi]
jmp 0x1003ed88
pushal
jmp 0x1003ed6b
xor dx, ax
mov dh, bl
mov ecx, ebp
jmp 0x1003edb2
ja 0x1001dbef
bsf cx, dx
jp 0x1003ed64
pushal
xor dx, ax
mov dh, bl
jmp 0x1003ed70
mov dx, 0x8975
ror dx, 5
jle 0x1003edc5
or dh, al
jmp 0x1003edc7
mov ax, cx
not dh
mov ah, byte [esp]
lea eax, [ebp + 0x40]
lea edx, reloc.KERNEL32.dll_LoadLibraryExW
jmp 0x1003ed9c
or dh, al
jmp 0x100408f8
rcr dword fs:[0xa42d1bc3], 0x76
and eax, 0x124648d
jbe 0x1003fe06
lea esp, [esp + 1]
jmp 0x1003fe0a
clc
sub esp, 0x1f
jae 0x1003fe26
pop dword [esp + 0xe]
lea esp, [esp + 3]
sub edx, eax
lea esp, [esp + 0x18]
jmp 0x1003fe42
lea esp, [esp + 1]
and dl, 0xfc
cmc
jmp 0x1003fe8a
pop dword [esp + 0xe]
lea esp, [esp + 3]
sub edx, eax
call fcn.1003fe28
int1
outsb dx, byte [esi]
cld
wait
jbe 0x1003fdd8
invalid
jmp 0x1003fe10
call fcn.1003ff29
outsd dx, dword [esi]
pushal
pop es
dec ebp
push ebx
mul dword [edi + 2]
int1
js 0x1003febe
lea esp, [esp + 0x13]
lea esp, [esp + 1]
lea ebx, [ebx + 0x1f]
xchg dword [esp + 0x14], ebx
call fcn.1003fe6d
test dword [eax], esi
pushal
jmp 0x1003fe54
jo 0x1003fde7
clc
jmp 0x1003fde8
cld
jmp 0x1003fed5
lds eax, [edi - 0x29]
inc edi
xlatb
mov dl, 0x41
sti
jge 0x1003febd
outsb dx, byte [esi]
or eax, edi
dec eax
push ebp
pushal
mov di, dx
mov dword [esp + 0x18], eax
popal
jmp 0x1003feb4
rep movsb byte es:[edi], byte [esi]
pop ecx
pop edi
jmp 0x1003fedf
pop esi
popfd
jmp fcn.1003fefd
mov edx, dword [esp]
mov dl, 0xaa
jmp 0x1004089b
bt edx, esi
mov edx, dword [esp]
mov dl, 0xaa
lea edx, [edi - 0x80]
sub esp, 5
jmp 0x1003fddf
sub eax, ecx
add dx, di
jns 0x10040893
bt edx, esi
jmp 0x100400a7