Function at 0x1133256f
Capabilities:
Execute anti-debugging instructions

Disassembly:
xchg dword [esp], edi
jmp 0x11331eda
lea edx, [esi - 0x5d]
xchg byte [esp + 4], cl
setp bh
lea esp, [esp + 1]
mov al, ah
mov dword [esp], ecx
jmp 0x11331f98
xchg cx, si
sub esp, 0
sub esp, 8
lea esi, [ecx + edi]
rcr ebp, 0x11
cpuid
jmp 0x11331f70
btr esi, edx
cpuid
mov cl, 0x82
mov word [esp + 2], sp
lea edx, [eax + edx]
ror eax, 7
jmp 0x11331f08
push esp
mov si, word [esp + 4]
xchg word [esp + 3], bp
mov ebx, dword [esp + 1]
xchg word [esp + 1], si
mov dh, byte [esp + 1]
jmp 0x11331f22
sub esp, 0x10
xchg word [esp + 0x19], dx
push dword [esp + 0xe]
jmp 0x11331fa9
mov eax, 0x7047ff74
mov bp, word [esp + 4]
push word [esp + 0xb]
push word [esp + 9]
bsr ax, cx
xchg dword [esp], eax
jmp 0x11331f5a
setg ch
xchg byte [esp + 1], bl
sete ah
xchg dword [esp], edx
pop ebp
stc
jmp 0x11331f40
mov bp, word [esp + 0xc]
mov ax, 0xd457
inc al
lea ecx, [esi + 5]
jmp 0x11331fe1
setae dh
push word [esp + 0x19]
xchg ebx, esi
bsr cx, bp
cpuid
shl di, cl
jmp 0x11332cf9
mov ah, byte [esp + 0x25]
not cx
lea eax, [edx + ebx]
inc cl
ror ecx, 0x11
mov ecx, dword [esp + 5]
jmp 0x11331fc8
inc eax
mov dword [esp + 3], eax
mov word [esp + 0xb], dx
bswap ebx
mov ebp, 0x5f255286
bsr di, cx
jmp 0x11332060
lea edx, [ebx + edi]
mov ebx, esi
ror dh, 7
pop eax
xchg byte [esp], cl
pushal
jmp 0x11331ff6
xchg ebp, ebx
mov word [esp], sp
bsr bp, bp
cpuid
bsf di, si
xchg bp, ax
jmp 0x1133201b
xchg si, cx
btr eax, edx
mov bx, di
xchg si, ax
rol di, cl
push esp
jmp 0x1133208d
add al, dh
xchg dword [esp + 5], ebx
mov dx, 0x4d69
xchg word [esp + 8], di
cpuid
xchg ebp, eax
jmp 0x11332047
mov bh, byte [esp + 0x15]
xchg word [esp + 0xb], di
cpuid
mov dword [esp + 0xb], ebp
jmp 0x113320a4
lea esp, [esp + 8]
pop bp
push word [esp + 8]
add esp, 5
mov bh, byte [esp + 0xb]
ror eax, 0x17
jmp 0x11332075
mov bh, byte [esp + 3]
sub esp, 0
mov dword [esp + 0xf], ebp
call 0x113320b5
mov cx, 0x37dd
setne ch
mov bp, 0x1419
jmp 0x11332111
neg bh
pop word [esp + 5]
mov ah, byte [esp + 0x13]
sub esp, 0x12
xchg ch, dl
popal
jmp 0x11332032
not ah
lea ecx, [eax - 0x21]
neg bx
setg ch
cld
cpuid
jmp 0x113320f9
setae bh
mov word [esp + 0x12], dx
mov ah, byte [esp + 0x19]
push dword [esp + 0xe]
jmp 0x1133254f
clc
lea eax, [esi - 0x95]
lea ecx, [ebp*4]
mov dword [esp + 1], ebp
xchg byte [esp + 6], bl
mov bp, word [esp + 0xc]
jmp 0x113320e5
rdtsc
mov di, 0xb719
mov esi, 0x1d008016
not dx
xchg esi, eax
lea esp, [esp + 4]
jmp 0x113320cf
pop dword [esp + 4]
lea ebx, [ecx + edx]
setne ah
bsf di, si
call fcn.1133247a
mov bp, 0x825d
btc edi, edi
call 0x1133256f
stosd dword es:[edi], eax
xchg cx, dx
mov dx, 0x7715
mov cx, bx
add esp, 8
jmp 0x113325ad
mov ecx, dword [esp]
mov ebp, dword [esp]
xchg ch, dl
cpuid
clc
lea esp, [esp]
jmp 0x113325f7
xor dl, ch
sub ebx, eax
neg ch
mov byte [esp], dh
setne bh
mov edx, dword [esp]
jmp 0x11332596
lea ecx, [ebx*4]
inc cl
cmc
inc si
lea esi, reloc.mscoree.dll__CorExeMain
jmp 0x11332923
add dx, 0x105e
push edx
inc bl
inc dl
mov bx, dx
jmp 0x113325de
mov ebx, dword [esp]
sub esp, 0x1a
xchg bp, cx
push esp
xchg dword [esp + 0x18], ebx
pop dword [esp + 0x11]
jmp 0x11332138
rol bp, cl
pop dx
lea edi, [esp + edx]
rdtsc
bsr cx, cx
call fcn.11332860
mov edi, 0x3bc8a939
mov esi, 0xef881a9f
sbb bl, byte [ebp + 0x247c88fb]
or eax, 0xf98bcd0f
mov byte [esp + 0xd], bh
bswap ebp
mov edi, ecx
mov dword [esp + 9], esi
bsf dx, ax
cpuid
jmp 0x11332625
mov dh, byte [esp]
sub esp, 0xe
mov ebx, dword [esp + 0xb]
inc bl
xchg word [esp + 6], si
xchg byte [esp + 4], al
jmp 0x11332645
xchg byte [esp + 2], dl
add esp, 4
add esp, 0
mov dh, byte [esp]
rdtsc
mov ax, 0xa34b
jmp 0x1133265f
xchg byte [esp], cl
setae ah
bswap edx
btc ecx, edi
not dx
setp bh
jmp 0x11332686
bsf dx, ax
add esp, 0xf
mov ch, byte [esp]
xchg ebp, edx
cpuid
mov cl, 0x92
jmp 0x1133260e
sub esp, 6
setno ch
btr edi, esp
popal
mov byte [esp + 7], bh
push word [esp + 5]
jmp 0x11332bde