Function at 0x9cc33a
Capabilities:
Execute anti-debugging instructions

Disassembly:
test bl, 0x98
cmp cl, bh
stc
bt edi, 8
mov dword [ebp - 0x10], ecx
bswap cx
dec cx
mov ecx, dword [ebp + 0xc]
cmc
clc
cmp ecx, 0xffff
jmp 0xac6fb1
pushal
jmp 0xab7469
cwde
cwde
setns al
pushal
mov dword [ebp - 0x20], edx
rdtsc
pushal
mov edx, dword [esp + 0x40]
lea esp, [esp + 0x44]
sar cx, 0xa
cmp dh, 0x74
mov ebx, eax
sal cl, 1
dec di
setg ch
lea edi, [edi - 0x2faade3d]
mov edi, eax
bts cx, 0xc
mov ecx, 0x104
call fcn.009cb84a
add byte [eax], al
push ebx
jns 0x9c9328
je 0x9c931c
insd dword es:[edi], dx
push eax
popal
jb 0x9c931d
insd dword es:[edi], dx
je 0x9c9325
jb 0x9c9335
dec ecx
outsb dx, byte [esi]
outsw dx, word [esi]
inc ecx
add byte [eax + ebp*8 + 0x1030dd], bl
sti
cld
mov esp, dword [eax + 0x23]
xor al, 0xf7
pushfd
bt si, 3
bt esi, 3
add ebp, eax
fistp word [0x19c0000]
rol dh, 1
inc esp
and al, 4
call fcn.009cb10d
pushfd
add eax, edx
mov byte [esp + 4], 0xcf
mov dword [esp], esi
lea eax, [ebx + eax*4]
jmp 0x9cfb25
iretd
push dword [esp]
mov dword [esp + 0x40], edi
pushfd
push ebx
mov byte [esp], 0x56
mov dword [esp + 0x44], ebx
pushfd
lea esp, [esp + 0x48]
call fcn.009ca55f
pushal
mov byte [esp], cl
mov esp, esi
push edx
push 0x84fe7879
mov byte [esp + 4], cl
lea esp, [esp + 8]
jmp 0xac859b
call fcn.009c9f63
pushfd
jmp 0xac9a17
cmc
pushfd
mov dword [esp], ecx
push eax
mov dword [esp], 0xf636472a
cmp eax, 4
jmp 0xacd906
jmp 0x9c9288
pushfd
push 0x254fcc7d
push dword [esp + 4]
pushal
lea esp, [esp + 0x2c]
jb 0xac7b93
rcl ch, 5
test dh, ch
rcl ah, cl
dec al
mov eax, 3
push 0xb066d23
cmc
inc cl
call fcn.009c9493
stc
xor al, 0xf7
cmp cx, di
bt bp, 0xd
cmp edx, eax
mov byte [ecx], al
cmp ch, ah
add ecx, 1
stc
cmp si, sp
jmp 0xab4a41
stc
cmp eax, 4
jmp 0x9302ea
jmp 0x9cf267
push 0x1428694d
sete dl
push 0x626f3277
pop eax
mov edx, dword [esp + 4]
call fcn.009c92ce
add byte [eax], al
ja 0x9cbabb
jbe 0x9cbac1
dec edi
jne 0x9cbad3
inc edi
je 0x9cbab1
jne 0x9cbad2
inc esp
jbe 0x9cbadc
add dh, al
add al, 0x24
int1
lea esp, [esp + 4]
jb 0xab68e2
shrd ax, ax, cl
cmp dh, ah
stc
movzx eax, byte [ebp - 2]
call fcn.009cf3af
clc
add ecx, edx
cmc
mov dword [ebp - 0x10], ecx
and ecx, 0xf2c86a9a
mov ecx, dword [ebp + 0xc]
cmp ebp, 0x830df380
pushal
cmp ecx, 0xffff
pushal
push esp
call fcn.009cb378
ror byte [ebp + 0x17e99304], 1
aam 0xf
add byte [eax], al
add byte [ebp + 0x6e], al
inc esp
imul esp, dword [ecx + 0x6c], 0x8d00676f
xchg dword [edx], ebp
popal
insb byte es:[edi], dx
outsd dx, dword [esi]
add byte [di + 0x2a87], cl
cmc
push ebp
or byte [edi], 0x96
les ecx, [ebp - 0x7f72fe81]
invalid
lea eax, [eax - 0xffb8439]
add bh, 0x7b
add al, 0xf0
lea eax, [ecx - 0xb605fc1]
call fcn.009c98ac
lea esp, [esp + 8]
call fcn.00930324
jmp 0xac90b6
lahf
hlt
push 0x1fe44390
call 0x9cbae3
add byte [eax], al
push ebx
je 0x9cc380
popal
jo 0x9cc383
outsd dx, dword [esi]
add bh, bh
xor al, 0x24
lea esp, [esp + 0x18]
jae 0x9c8e9d
seta al
lea eax, [eax*2 + 0x4e47b0a4]
pushfd
xchg dword [ebp - 0x14], edx
movzx ax, cl
movzx eax, al
pop eax
movzx ax, al
mov dword [ebp - 0x20], edx
jmp 0x9cf3d1
sti
mov bl, 0xf
add byte [ecx], al
ret 0x9c52
lea esp, [esp + 0x34]
jne 0x9c8807
pushal
pushal
jmp 0x9c93dd
pushal
lea esp, [esp + 0x20]
jb 0xab68e2
ror dl, 7
call fcn.009ca874
rdtsc
jb 0x9cba3f
bswap dx
pop edx
mov ah, bl
mov al, bl
lea eax, [ebx + 0x50d0]
push esi
pushal
push dword [esp]
call fcn.009c8229
dec di
neg al
setb ch
xchg di, cx
not al
inc edi
inc al
lea ecx, [esp + 0x72422bef]
or di, 0xa97a
sal ch, 1
xor al, 0x92
movsx cx, bl
bt esi, esi
or di, 0xb068
clc
sub al, 0xe6
inc cx
cmp bh, bl
sal di, cl
btr di, bx
xor eax, eax
call fcn.00ab743f
add byte [eax], al
inc edi
je 0x9cf485
outsd dx, dword [esi]
arpl word [ecx + 0x6c], sp
push esp
imul ebp, dword [ebp + 0x65], 0x67b7700
add byte [edi + 0x7b], dh
push es
jne 0x9cf4bd
xchg esp, eax
add dh, byte [ebp - 0x41b0bb43]
sbb byte [edi + edi*2], 0x7b
push ds
mov ch, 2
mov edx, 0xbd6ca79d
jbe 0x9cf441
mov byte [0xd61686bb], al
invalid
add cl, byte [edi + 0x48f0136a]
cmpsd dword [esi], dword es:[edi]
pop esp
or cl, byte [eax - 0x54]
rcl cl, 1
pushal
invalid
cmpsb byte [esi], byte es:[edi]
jmp 0x9cf50e
xor ebx, eax
adc al, 0x4d
aad 0x1a
xchg edi, eax
mov dword [0x6e4095e1], eax
enter 0xffffffffffff99cc, 0x45
xchg cl, ch
xchg ebp, eax
push es
or eax, 0xdb6ec2ea
dec ebx
xchg esi, eax
rcl dword [0xd123bf2f], cl
pop ds
and esp, esi
scasd eax, dword es:[edi]
hlt
and byte [edi + 0x38], dl
push 0xa5bb1909
cmp byte [esi], ch
and ebx, edx
mov al, 0xb8
xor esp, esi
pushfd
inc esi
dec esp
sub dl, bl
stosd dword es:[edi], eax
punpcklbw mm2, dword [esi]
cmp eax, 0x26b0e03f
out 0x71, al
out 0x71, al
rcr dword [eax - 0x1920a4b0], 1
dec esp
jbe 0x9cf56a
or al, 0x9c
inc esi
add al, 0xdb
lcall 0x1b0b, 0x52dc36e2
push cs
pop ecx
pop ss
push ecx
sti
jnp 0x9cf4d3
cdq
xor eax, 0x5583e65d
xchg esp, eax
jge 0x9cf592
rcl edx, 1
mov dh, 0x75
sbb cl, byte [ecx]
rcr dword [esi - 0x1d38c756], 0xc7
in eax, dx
mov ebx, 0x2ef35d8b
nop
jle 0x9cf52c
jecxz 0x9cf56c
add byte [edi + 0x65], al
je 0x9cf5c7
imul esp, dword [ebp + 0x77], 0x74726f70
dec edi
jb 0x9cf5e2
inc ebp
js fcn.009cf57e
popal
insd dword es:[edi], dx
inc ecx
add byte [eax], al
add byte [eax + 0x6c], dl
popal
jns 0x9cf5f1
outsd dx, dword [esi]
jne 0x9cf60f
inc ecx
add byte [edi + 0x15], cl
stosd dword es:[edi], eax
retf 0x9474
dec esp
inc eax
daa
scasd eax, dword es:[edi]
js 0x9cf56c
mov al, 0xb2
push edi
stc
xchg edx, eax
xor edi, ebx
or byte [ecx - 0x9c2ef30], 0xd9
retf 0xe1b
cmp al, 0x28
jp 0x9cf653
cdq
mov edi, 0x85aa321a
and byte [eax + 0x61], bl
ljmp 0x9f5d
push ds
or eax, 0x6d9f5d1f
push ecx
sub dword [edx], ecx
inc ebp
movsd dword es:[edi], dword [esi]
inc ebx
rcl dword [eax - 0x76]
insd dword es:[edi], dx
pop edi
movsb byte es:[edi], byte [esi]
or eax, 0xffffffab
pop ds
loopne 0x9cf60c
add byte [ebp + 0x69], ch
imul edx, dword fs:[ebx + 0x74], 0x6d616572
push eax
jb 0x9cf689
jo 0x9cf681
jb 0x9cf692
jns 0x9cf620
lea esp, [esp + 0x28]
jne 0x9ca7f3
lea edi, [0x143fa632]
shrd di, ax, 2
mov edi, dword [edx + 0x24]
pushal
add edi, eax
mov byte [esp], bl
jmp 0xac8549
add byte [eax], al
add byte [edi + 0x65], al
je 0x9cf6ae
js 0x9cf6d1
dec ebp
je 0x9cf6d3
imul esp, dword [ebx + 0x73], 0x41
inc edi
imul esi, dword fs:[eax + 0x4c], 0x4964616f
insd dword es:[edi], dx
popal
inc esi
jb 0x9cf6e7
insd dword es:[edi], dx
push ebx
je 0x9cf6ee
popal
insd dword es:[edi], dx
add byte [esi + 0xf], ah
int 0x5d
bswap ebp
pop ebp
pushfd
pushfd
pushal
push ecx
push dword [esp + 0x2c]
ret 0x38
je 0x9cf6af
sub al, 0xc2
cmp byte [eax], al
inc eax
sets al
jmp 0x9c9424
lea esp, [esp + 0x3c]
jae 0x9c83ac
cmp ecx, 0xffffff8c
invalid
stc
invalid
jmp 0xacb77f
jo 0x9cf714
add byte [eax], al
add byte [ecx + 0x6e], cl
je 0x9cf73f
jb 0x9cf74a
je 0x9cf722
popal
outsb dx, byte [esi]
outsd dx, dword [esi]
outsb dx, byte [esi]
imul esp, dword [ebx + 0x61], 0x657a696c
push ebp
jb 0x9cf759
imul edi, dword [edx + 0x65], 0x416c7255
inc ecx
add byte [0xe], bh
jmp 0xac984c
imul esi, dword [ecx + ebp*2 + 0x63], 0x65536c61
arpl word [ecx + ebp*2 + 0x6f], si
outsb dx, byte [esi]
add byte [edi], cl
pop esp
cmpsd dword [esi], dword es:[edi]
invalid
jg 0x9c9eec
bt si, ax
push ecx
jl 0x9ca971
push ecx
cmp eax, 4
lea esp, [esp + 4]
jle 0x9ca827
in al, 0xb0
invalid
pushfd
pushal
pushal
lea esp, [esp + 0x44]
jb 0xac7b93
jmp 0xacc1fc
je 0x9cf7a1
imul ebp, dword [ebp + 0x54], 0x656c7469
inc ecx
add cl, bh
pushfd
test ah, ch
add ecx, edx
sub esp, 0xfffffffc
jb 0x9c81a8
pushfd
mov dword [ebp - 0x10], ecx
btr ecx, 0x1e
sub ecx, 0x439c69a6
push 0xc04cd520
mov ecx, dword [ebp + 0xc]
mov word [esp + 4], ax
cmp ecx, 0xffff
call fcn.009ca23d
call fcn.00ab5f7d
add byte [eax], al
inc ebx
jb 0x9cf809
popal
je 0x9cf80c
push esp
push 0x64616572
add byte [edi], cl
sahf
ror byte [edi], 0x93
shr cl, 0xe4
int 0xf
add byte [eax], al
add byte [edi + 0x64], al
imul esi, dword [eax + 0x43], 0x74616572
inc esi
jb 0x9cf837
insd dword es:[edi], dx
dec eax
inc esp
inc ebx
add byte [eax], al
add byte [edi + 0x61], dh
jbe 0x9cf838
dec edi
jne 0x9cf84a
push eax
popal
jne 0x9cf84d
add byte gs:[ebx - 0x75f00714], al
cmp bh, 0xff
invalid
mov ecx, dword [ebp + 0xc]
push 0x87267ec0
pushfd
cmc
mov byte [esp + 4], 0xe
cmp ecx, 0xffff
stc
invalid
add byte [eax], al
mov byte [esp + 4], bh
pushal
lea esp, [esp + 0x28]
jbe 0xab46a3
shld cx, dx, 4
cmc
mov edi, dword [edx + 0x24]
and ch, ch
jmp 0x9cb3b9
push ds
or ebx, dword [edi]
add edx, esi
pop edx
invalid
xchg esp, eax
add bh, al
xchg ebp, eax
in al, dx
or al, byte [ebp - 0x180a35b]
pop es
mov byte [0x39927271], al
fcmovnb st(0), st(5)
pop edx
pushal
popfd
salc
loop 0x9cf7f9
pop ss
retf
lea esp, [esp + 0x38]
ja 0x9cc323
pushal
lea esp, [esp + 0x20]
call fcn.00930324
push 0x83d8f93a
lea esp, [esp + 4]
jp 0x9caef4
jb 0xab68e2
ror dh, cl
shr dx, cl
movzx eax, byte [ebp - 2]
pushfd
shr eax, 5
bt ebp, 8
push eax
jmp 0x9cb617
pushfd
call int.00ab6e56
add byte [eax], al
push eax
jb 0xab43c3
arpl word [ebp + 0x73], sp
jae 0xab438c
xor cl, byte [esi + 0x65]
js 0xab43d2
add byte [edi], cl
mov dword [0x66302cd8], eax
bt ebp, ecx
call fcn.00ab457d
jae 0xac859b
pushal
push eax
pushal
lea esp, [esp + 0x44]
jmp 0x9ca095
inc dword [eax]
add byte [edi + 0x65], al
je 0xab43e0
jae 0xab4409
popal
push esp
imul ebp, dword [ebp + 0x65], 0x54e85500
xchg ecx, esi
int1
jmp dword [esi - 0x7b]
sar al, 5
add edi, 1
seto al
rol al, cl
cmp dx, 0x6ca5
insb byte es:[edi], dx
mov al, byte [edi]
pushal
test al, al
push dword [esp]
lea esp, [esp + 0x24]
je 0x9c87f5
test byte [eax], dl
inc esp
int1
invalid
clc
call 0xab435f
add byte [eax], al
push ebx
je 0xab4448
imul ebp, dword [esi + 0x64], 0x724f776f
inc ebp
js 0xab43fc
call fcn.00ab574c
push edi
dec ecx
dec esi
dec ecx
dec esi
inc ebp
push esp
insb byte es:[edi], dx
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [ebp + 0x26522325], bh
xchg byte [edx], al
xchg esi, eax
push esp
stosd dword es:[edi], eax
inc ebx
sar byte [ebx], 1
lodsd eax, dword [esi]
jno 0xab43a2
pop ebx
int3
push esi
sbb al, 0x7c
cdq
aam 0xad
insb byte es:[edi], dx
jnp 0xab4463
enter 0x6f42, 0xffffffffffffffe9
mov esp, 0x9a75dcb4
lds ecx, [ebx + ebp]
inc esi
cmp byte [eax], al
in eax, 0x4c
sub eax, ebp
out dx, al
sub al, 0x4b
fisttp dword [esi + ecx*4]
call 0xdbf67156
or al, 0x8e
in al, 0x7e
mov al, 0x5b
stosb byte es:[edi], al
ror byte [esi + 0x3a], 1
ljmp 0x8315
push 0x2cead7d5
test ah, ah
jmp 0xac6d96
sub ecx, 4
mov byte [esp], cl
lea esp, [esp + 0x20]
call fcn.00ab51a8
test ah, 0x70
mov cl, 0x27
mov cl, 4
push 0xfa28e620
stc
shl eax, cl
mov dword [esp], eax
mov byte [esp], cl
add dword [ebp - 0x20], eax
pushal
push dword [esp + 0x20]
cwde
lea eax, [ebx + 0xc88]
call fcn.009cb65e
adc dword [esi], esp
mov bl, 0xe2
cmc
test dword [edx], eax
stosd dword es:[edi], eax
mov ebp, 0xaed9c00
out dx, eax
ja 0xab74eb
test eax, 0x8f6b0be6
push ecx
in eax, 0x3a
mov bl, 0xa
and bh, bh
cli
add eax, 0xd360d220
mov edx, cr7
pop esp
invalid
fsubr st(6), st(0)
ficomp dword [esi]
fsubr st(3)
inc ecx
xor eax, 0x739f1926
mov ah, byte [ebp - 0x6cf9738f]
dec ebx
out dx, al
mov dword [ecx - 0x74], ebp
xchg edi, eax
xchg edx, eax
invalid
jmp 0x9cc6ac
jbe 0xab46a3
call 0xacc40d
int3
mov byte [esp + 4], bl
call fcn.009cca87
add byte [eax], al
push ebx
arpl word [ecx + 0x6c], sp
push edi
imul ebp, dword [esi + 0x64], 0x7845776f
je 0xac85a8
js 0xac8565
add byte [eax], al
inc esi
imul ebp, dword [esi + 0x64], 0x736f6c43
add byte gs:[eax], al
add byte [ebx + 0x65], dl
je 0xac85ba
popal
jo 0xac85ee
jne 0xac85ee
add byte gs:[eax], al
add byte [edx + 0x65], dl
push ecx
jne 0xac85eb
jb 0xac8601
push esi
popal
insb byte es:[edi], dx
jne 0xac85f2
inc ecx
add byte [esi + 0xf], ah
movsb byte es:[edi], byte [esi]
fiadd dword [esi]
retf
mov dl, 0xef
out dx, eax
invalid
std
movsb byte es:[edi], byte [esi]
mov ebx, dword [esi]
push ds
jl 0xac8663
leave
outsd dx, dword [esi]
inc edx
fstp dword [eax + esi + 0x60]
cdq
sub dword [edx - 0x54c1fd10], esp
sub dword [ebp + 0x35], ecx
sbb eax, 0xc4148d9b
inc esp
aaa
imul dword [esi - 0x85581b3]
push ecx
movsb byte es:[edi], byte [esi]
xor eax, 0x148d9b1d
invalid
jle 0xac85b9
not dword [ecx - 0x5c]
pop ss
sti
lodsd eax, dword [esi]
cmp byte [eax], 0x5a
sal esi, 0xc3
out 0x55, al
fidiv word [ebp - 0xc]
xchg esp, eax
test al, 9
or byte [eax + 0x3d23a7c7], bl
loopne 0xac866b
add esi, edx
or eax, 0x49cf132b
adc byte [esi - 0x3276f88b], ah
js 0xac860d
dec ebx
add byte [ebx - 0x1e], dh
fsub qword [edi - 0x48]
shr dword [edx - 0x43], 0xc8
inc ebp
call 0x16a683f0
mov gs, word [edi]
pop edx
jmp 0xac86c9
nop
push ecx
int 0xdc
aas
in al, 0x84
add dh, byte [esi]
mov word [ecx - 0x4ff550da], fs
mov word ss:[ecx - 0x4ff550da], fs
jo 0xac867a
add eax, 0x7f2a39d2
imul esi, dword [eax], 0x4ef50241
xor byte [ecx + 2], al
cmc
dec esi
xor dword [ebx - 0x38], edx
outsd dx, dword [esi]
or ah, byte [edx + ecx*4 - 0x5f06d933]
fdivr dword [edx - 0x33]
retf 0xe845
das
rol byte [edi], 1
cmp byte [edx], ch
add byte [ebp + 0x4e589467], dh
mov cl, 6
pop ecx
xchg edx, eax
ficomp dword [eax]
adc dword [edx + 0x7bbfecbe], ecx
int1
xchg ebx, eax
cmp al, 0xbd
outsb dx, byte [esi]
cmp eax, 0x4f2f6b28
das
dec edi
fbld tbyte [edx - 0x45]
jo 0xac86c3
jo 0xac86a9
rcr bl, cl
hlt
pushfd
mov byte [esp], 0x98
pushfd
push ebx
push dword [esp + 8]
jmp 0x9cf6a9
push ebx
cmp ebp, 0x41719d7
cmp edi, 0x1a18da11
sub edx, eax
call 0xac74fe
and eax, dword [ebp - 0x27]
cmp al, 0xb3
test byte [edx], al
xor dword [esi], ecx
cwde
sbb esi, esp
inc edi
neg byte [ecx - 0x36]
or al, 0x5a
retf 0x54c3
setp cl
sub ch, bh
movzx eax, cl
pushal
lea esp, [esp + 0x24]
jb 0xac7b93
bsr cx, dx
daa
movsx ax, al
rol al, cl
mov eax, 3
rcl ch, 3
rol ch, cl
bsr ecx, ecx
sal cl, cl
mov ecx, 6
clc
pushal
shl eax, cl
call fcn.009cb5df
xchg dword [ebp - 0x28], edx
pushfd
pushfd
call 0x9cc33a
rcr al, 3
rcl al, cl
movzx ax, word [esi]
jmp 0xacf867
clc
cmp ah, dh
stc
sub ax, 0xdb54
test ax, di
call fcn.00ad04ed
bt di, ax
add ax, bx
jmp 0xacdc9b