Function at 0x104839b8
Capabilities:
Execute anti-debugging instructions

Disassembly:
rol ebx, cl
lea esi, [ecx + 0x1a]
clc
jmp 0x104839d1
mov dword [esp], ebx
push dx
mov ah, 0xc6
push dword [esp + 4]
not ebx
mov dh, byte [esp + 0xb]
call fcn.1048394c
add esp, 1
pushfd
xchg si, dx
xchg byte [esp + 3], ch
jmp 0x104839a6
lea ebp, [eax*4]
push word [esp + 5]
call 0x104839b8
movsd dword es:[edi], dword [esi]
xchg byte [esp + 0xa], dh
lea esp, [esp + 0xe]
pushfd
lea ebx, [ecx + ebp]
jmp 0x104839e2
xchg cl, al
cld
rdtsc
pop ax
push word [esp + 1]
setp ah
jmp 0x10483967
mov ch, byte [esp + 3]
cld
mov bx, 0xb6c6
pop word [esp]
not esi
sete al
jmp 0x10483a97
not cl
mov ch, 0xa
neg esi
xchg edx, ebp
bsr di, sp
sete ch
jmp 0x10483a6a
adc eax, esp
mov bx, word [esp + 1]
lea ecx, reloc.KERNEL32.dll_GetFileSizeEx
bsr ebp, esi
dec esi
xchg ebp, ecx
jmp 0x10483a12
lea ecx, [edx + edi]
mov ah, byte [esp + 4]
xchg byte [esp + 3], bh
mov ax, sp
rcr edx, 0x1b
mov word [esp], si
jmp 0x10483ac7
mov byte [esp + 1], cl
mov byte [esp + 1], bl
push word [esp + 2]
mov dh, bl
xchg word [esp + 1], cx
rdtsc
jmp 0x10483a48
lea edi, reloc.KERNEL32.dll_GetFileSizeEx
mov ecx, 0xeacbae82
mov ax, 0x250d
bsr bx, cx
std
mov word [esp], dx
jmp 0x10483a33
push word [esp + 1]
sub esp, 4
xchg byte [esp + 3], bh
mov dword [esp + 2], ebx
jmp 0x10483c62
lea edx, [ecx*4]
lea eax, reloc.KERNEL32.dll_GetFileSizeEx
not eax
jmp 0x10483ab1
mov ebp, 0xa8f5fab
mov si, word [esp]
mov bh, byte [esp]
sub esp, 0xf
mov byte [esp + 5], ah
mov bh, byte [esp + 8]
jmp 0x10483b8e
mov di, 0x78cb
rdtsc
mov edx, 0x4d9c8ce8
mov edi, edx
rol ebp, 0x15
xchg esi, edx
jmp 0x10483b44
setl bl
xchg bl, dh
mov bp, sp
stc
bts di, bx
not dx
jmp 0x10483b9b
cmc
xchg dword [esp + 8], ecx
pop edi
bswap edi
clc
rdtsc
jmp 0x10483b78
xchg ah, al
xchg dword [esp + 2], edx
xchg edx, eax
xchg dword [esp + 3], edi
mov ecx, 0x3c343ab6
jmp 0x10483bd6
sub esp, 0x1a
bswap eax
push ebx
pushal
lea esp, [esp + 0x41]
std
jmp 0x10483b64
mov dword [esp], ecx
pop edi
mov dl, ah
mov ecx, dword [esp]
neg ax
jmp 0x10483c28
mov al, byte [esp + 1]
xchg bx, bp
pop esi
xchg dl, ch
xchg edx, eax
inc si
jmp 0x10483bc0
add esp, 8
mov byte [esp], bh
lea edx, [edx*4]
mov ah, ch
lea ebp, [esp + ebp]
mov al, byte [esp + 1]
jmp 0x10483bb2
lea eax, reloc.KERNEL32.dll_GetFileSizeEx
pop dword [esp + 0x1a]
xchg al, dl
sub ax, 0x7244
add esp, 1
xchg ebx, eax
jmp 0x10483c3f
mov bx, 0x29c7
pushal
dec dh
mov bp, 0x520f
xchg byte [esp + 0x19], ah
lea edi, reloc.KERNEL32.dll_GetFileSizeEx
jmp 0x10483c09
lea eax, [ebx*4]
add esp, 0x12
mov ecx, ebx
btc ax, sp
mov di, dx
sub bh, al
jmp 0x10483f39
pop dword [esp]
sub esp, 4
xchg cx, bp
shl ah, cl
mov word [esp + 5], bx
mov dh, byte [esp + 0xa]
jmp 0x10483bf1
mov edx, ebp
btc di, ax
lea esp, [esp]
cld
sub bx, di
rdtsc
jmp 0x10483cbc
lea esp, [esp]
setl ch
mov bp, di
not bp
pop word [esp]
rol bx, cl
jmp 0x10483c7b
bsr esi, esp
xchg ah, al
xchg bx, bp
setl ch
bt ecx, ebx
jmp 0x10483ce6
sub di, 0x7195
rdtsc
not ebp
setb al
std
mov edx, 0xb0829d15
jmp 0x10483ca6
pop eax
mov dword [esp + 0xa], ebx
stc
lea ebx, [esp - 0x6b]
lea esi, [eax + esi]
jmp 0x10483cfa
setae dl
neg edx
sub esp, 0x17
inc bp
mov byte [esp + 0x12], dl
xchg dword [esp + 3], ebx
jmp 0x10483cd0
mov cx, word [esp + 3]
not ebp
xchg byte [esp + 6], ch
xchg word [esp + 0x10], bx
cld
not eax
jmp 0x10483d46
mov word [esp], bp
rcl dx, cl
xchg byte [esp + 1], dl
pop bx
push word [esp]
pop di
jmp 0x10483c91
mov di, word [esp + 3]
bsf ebp, ecx
pop ax
setne dh
btc ebp, edi
jmp 0x10483d95
mov eax, dword [esp + 9]
mov dl, byte [esp + 0xa]
xchg dword [esp + 5], edx
add esp, 0x11
bt ebx, esi
mov byte [esp], cl
jmp 0x10483d30
mov word [esp], cx
xchg byte [esp], ah
lea ebx, [edx + edi]
call fcn.10483d5d
out 0x83, al
adc esi, dword [esi - 0x7b]
sub bl, ah
inc esp
fidivr dword [ebp - 0xe9504b4]
popal
add bl, dh
jbe 0x10483e05
lea ebx, reloc.KERNEL32.dll_GetFileSizeEx
mov edx, 0xdcef50af
adc ch, 0xc8
mov dh, byte [esp + 1]
bsf di, ax
mov al, byte [esp]
jmp 0x10483d73
iretd
pop dx
xchg edi, eax
add esp, 4
lea edx, reloc.KERNEL32.dll_GetFileSizeEx
setle cl
push si
jmp 0x10483d18
clc
mov dword [esp + 6], ecx
mov cl, 0x96
mov word [esp + 3], bp
pop bp
bts dx, si
jmp 0x10483e50