Function at 0x10110a00
Capabilities:
Execute anti-debugging instructions

Disassembly:
lea esi, [edi*4]
mov ah, byte [esp + 2]
cpuid
jmp 0x101139d9
cpuid
xchg byte [esp + 0x12], dl
mov di, word [esp + 0xf]
std
sub esp, 0xc
jmp 0x10113526
mov si, 0x29f1
lea ebx, reloc.KERNEL32.dll_FlushFileBuffers
bt bx, di
not ebx
jmp 0x10112ffd
xchg si, bp
adc ecx, 0x1fdc0c50
bswap ecx
pushfd
rcr esi, cl
mov ch, dl
jmp 0x10112f50
mov si, 0x151e
mov esi, dword [esp + 0x1e]
mov ax, bp
xchg word [esp + 0x10], cx
mov eax, 0x28f0fd86
pop word [esp + 2]
jmp 0x10112f66
mov eax, dword [esp]
neg ebp
lea edx, [edi + 0x2d]
mov ebx, dword [esp]
dec cx
lea ecx, [edx + edx]
jmp 0x10112fe0
sub esp, 0x11
rdtsc
add esp, 0x25
lea edi, [esp + eax]
add esp, 9
mov bp, 0x44de
jmp 0x10112fa0
adc edi, esp
cld
mov dx, word [esp]
add esp, 0
setns ah
mov ebx, dword [esp]
jmp 0x10113027
pop bp
dec dl
mov ch, 0x77
rcl di, 4
mov ebp, 0x320bfa31
lea eax, [edx*4]
jmp 0x10112fca
inc bp
pop bp
mov ax, word [esp + 4]
xchg ebx, ecx
mov cx, word [esp + 0x1e]
not bh
jmp 0x10112fb6
inc ebx
sub esp, 0x17
mov cx, word [esp + 8]
mov ebx, dword [esp + 1]
neg cx
jmp 0x1011304a
btc edx, eax
clc
stc
mov cl, bl
mov bh, bl
mov bh, 0xd0
jmp 0x10113011
bsr dx, ax
mov di, bp
call fcn.10113034
xchg dword [esp + 0x14], ebx
pop dword [esp + 0x10]
neg eax
cpuid
push word [esp + 5]
pushfd
jmp 0x101130d0
pop esi
mov bl, byte [esp + 0xa]
pop ebx
lea edx, [edx*4]
lea eax, [ecx + 0xa]
bsr ebp, esi
jmp 0x10112f84
xchg word [esp + 0x1a], dx
mov cl, 0x6b
add esp, 0x12
not eax
std
pop ebx
call fcn.1011309c
not esi
rdtsc
lea ebp, [esp + edi]
mov edx, dword [esp + 1]
pushfd
setb bl
jmp 0x10113191
pop dx
xchg bh, ah
rdtsc
pushfd
mov esi, dword [esp]
inc ebx
jmp 0x10113167
neg dh
stc
mov ax, word [esp + 1]
xchg ah, al
mov esi, ebx
mov bx, 0xf4b4
jmp 0x1011313f
xchg esi, edx
mov cx, di
add esp, 0
mov ecx, 0x13cf5f0b
bswap edi
mov al, byte [esp + 1]
jmp 0x101131b9
pop dword [esp]
mov bl, 0xd
bswap ebx
setbe al
pop word [esp]
mov ecx, eax
jmp 0x10113155
rdtsc
mov byte [esp], dl
lea esp, [esp + 2]
mov byte [esp], cl
mov edi, dword [esp]
jmp 0x101131ea
xchg byte [esp], bh
mov cx, word [esp + 3]
lea ecx, [eax + ecx]
mov bp, word [esp]
lea esi, [ebp*4]
lea ebp, [esi - 0x4c]
jmp 0x101131a3
add esp, 0
lea esi, [edx*4]
lea edx, [esi - 0xaf]
jmp 0x1011322a
sub ah, 0x32
xchg di, ax
mov di, ax
xchg ebx, eax
add ebx, ebx
rdtsc
jmp 0x101131d4
mov bl, 0x78
mov bl, byte [esp]
xchg byte [esp], ch
sub esp, 7
push dword [esp + 8]
jmp 0x10113237
not ax
xchg byte [esp], ch
bswap ebx
xchg word [esp], bp
push bx
pop word [esp]
jmp 0x101131fb
mov bl, 0xab
or ebx, ebx
neg ch
not ah
cpuid
xchg edx, eax
jmp 0x10113211
push dword [esp + 2]
xchg bh, ch
call 0x10113243
in al, 0x8d
and al, 3
bsf eax, esp
mov di, word [esp + 0xa]
add esp, 0x11
jmp 0x101132a7
inc di
call fcn.10113361
sub ebp, dword [esi + reloc.KERNEL32.dll_FlushFileBuffers]
aaa
ret
xchg dh, bl
cpuid
not bp
xchg byte [esp], ch
bsf edx, ebp
lea esp, [esp]
jmp 0x1011327a
mov cl, bh
rdtsc
lea ebx, reloc.KERNEL32.dll_FlushFileBuffers
not di
lea ecx, reloc.KERNEL32.dll_FlushFileBuffers
mov cl, 0x5d
jmp 0x10113290
rdtsc
rol esi, cl
push word [esp + 0x1f]
setns dl
cld
mov byte [esp + 0x1b], cl
jmp 0x1011306e
setnp al
xchg cx, bx
push bx
mov word [esp + 0x17], di
sub bp, bp
not edx
jmp 0x10110a12