Function at 0x101834d7
Capabilities:
Execute anti-debugging instructions

Disassembly:
push eax
push edx
pushal
pushal
popal
pushal
popal
push eax
push edx
rdtsc
pop edx
pop eax
popal
jbe 0x10171a11
push esi
pop esi
rdtsc
jmp 0x10171a1e
jmp 0x10171a2f
pop edx
pop eax
push eax
push edx
pushal
jmp 0x10171a4c
push edx
pop edx
push edi
pop edi
jmp 0x10171a67
popal
rdtsc
jmp 0x10171a74
ja 0x10171a88
jmp 0x10171a86
push ebx
pop ebx
pop edx
pop eax
push ebx
push esp
pop ebx
push edi
push 4
mov edi, dword [esp]
add esp, 4
sub ebx, 0x3044f02
add ebx, 0x7d493b00
add ebx, 0x7fd7b3fd
add ebx, edi
sub ebx, 0x7fd7b3fd
sub ebx, 0x7d493b00
add ebx, 0x3044f02
pop edi
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], eax
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edi
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop edi
push ebp
mov ebp, 0x7bd20864
xor ebp, 0x7bd20860
add edi, ebp
pop ebp
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
mov dword [esp], edi
mov dword [esp], eax
mov dword [esp], ecx
push 0x41e6ff0f
mov dword [esp], eax
mov dword [esp], 0x3e7d2ee4
push esi
mov dword [esp], ebx
mov ebx, 0x71d7c9b1
xor dword [esp + 4], ebx
pop ebx
dec dword [esp]
not dword [esp]
xor dword [esp], 0xcfaa1298
not dword [esp]
dec dword [esp]
xchg dword [esp], edx
not edx
xchg dword [esp], edx
push ebx
push 0x1dcfd144
pop ebx
xor dword [esp + 4], ebx
pop ebx
sub dword [esp], 0x54245b70
mov dword [esp], edx
push ecx
mov ecx, esp
add ecx, 4
push edi
mov edi, 4
sub ecx, edi
pop edi
xchg dword [esp], ecx
pop esp
mov dword [esp], edi
mov dword [esp], ebx
mov dword [esp], 0x5bfb52de
dec dword [esp]
xor dword [esp], 0x7ef7ba74
xor dword [esp], 0x1b6335ad
not dword [esp]
add dword [esp], 0x35ff3a00
shr dword [esp], 3
add dword [esp], 0x3d7c41b2
xor dword [esp], 0x1943b66d
mov dword [esp], ebp
mov dword [esp], 0x7f635498
push ecx
mov ecx, 0xaa277d49
add dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
push ebx
mov ebx, esp
add ebx, 4
push eax
mov eax, 4
sub ebx, eax
pop eax
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], ecx
push esp
push dword [esp]
pop ecx
add esp, 4
add ecx, 4
push esi
mov esi, 4
sub ecx, esi
pop esi
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
mov dword [esp], ebp
mov dword [esp], ebx
push ebp
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
mov ebp, dword [esp]
add esp, 4
add ebp, 4
push ecx
mov ecx, 0x2b56f880
push esi
mov esi, 0x5bf3f8dc
xor ecx, esi
pop esi
not ecx
add ecx, 0x70a50061
sub ebp, 0x764dca37
sub ebp, ecx
add ebp, 0x764dca37
pop ecx
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
mov dword [esp], 0x361aeb9c
mov dword [esp], ebp
push ecx
mov dword [esp], ebx
mov ebx, esp
push esi
push edi
mov edi, 0x7dff9f62
add edi, 0x647d3bcf
push ebp
mov ebp, 0
sub ebp, edi
xchg edi, ebp
pop ebp
add edi, 0x3f67eab8
mov esi, edi
pop edi
add esi, 0x7f4f1419
and esi, 0x7b3ff8a5
push edx
mov edx, 0x17fff66b
add esi, edx
pop edx
push eax
mov eax, 0x4fbf5641
not eax
or eax, 0x5d7b498f
push edi
mov edi, 0x72be2d50
add eax, edi
pop edi
xor esi, eax
push dword [esp]
pop eax
add esp, 4
add ebx, esi
pop esi
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edi
mov dword [esp], esi
push edx
mov dword [esp], 0x7543dbb7
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x3df7d46b
add dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
xchg dword [esp], edi
push 0
sub dword [esp], edi
mov edi, dword [esp]
add esp, 4
xchg dword [esp], edi
push esi
mov esi, 1
sub dword [esp + 4], 0x6d735cff
add dword [esp + 4], esi
add dword [esp + 4], 0x6d735cff
pop esi
xor dword [esp], 0x69577cb2
mov dword [esp], edi
call fcn.10171d40
pop esi
add esi, 9
jmp 0x10182dbc
jmp 0x10183404
push eax
push edx
pushal
pushal
popal
push edi
pop edi
pushal
popal
push eax
push edx
rdtsc
pop edx
pop eax
popal
rdtsc
push eax
push edx
pushal
popal
push eax
pop eax
rdtsc
pushal
popal
push eax
push edx
rdtsc
pop edx
pop eax
pop edx
pop eax
pop edx
pop eax
pushfd
push 0x2f89ee36
mov dword [esp], edx
mov dword [esp], 0x7ff67598
push esi
mov esi, 0x2df78ec3
or dword [esp + 4], esi
pop esi
push ecx
mov ecx, 0x7f3b9c7a
add dword [esp + 4], ecx
pop ecx
dec dword [esp]
shr dword [esp], 5
and dword [esp], 0x7ef34506
add dword [esp], 0xf90efcfe
push esi
mov dword [esp], 0x77ff5b13
shr dword [esp], 3
push ebx
mov ebx, 0x7188cf43
xor dword [esp + 4], ebx
pop ebx
xchg dword [esp], eax
not eax
xchg dword [esp], eax
sub dword [esp], 0x8070ae1d
push esi
mov esi, esp
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x6bfe6812
and ebp, 0x4dfde37e
xor ebp, 0x49fc6016
add esi, ebp
pop ebp
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
push ecx
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ebx
push dword [esp + 0x10]
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
push dword [esp + 8]
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 0x3fb75106
inc ecx
xor ecx, 0x3fb75103
add eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
pop eax
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0x101719fb