Function at 0x101ad2f5
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ss
test bl, ah
push ds
push ss
add al, 0x8b
sbb edi, dword [esi - 0x73]
jmp 0x9bb0cae1
movzx edx, byte [ebp - 1]
mov ecx, 0x6012b928
mov cx, 0xe1bb
ror al, 0
jmp 0x10181178
jne 0x1018118e
cmp ax, 0x5950
cmc
jmp 0x1018192f
cmp ax, 0x5950
cmc
inc cx
bswap eax
call fcn.10181730
mov ecx, 0x44b5d23c
jnp 0x10181124
or dword [ecx + reloc.MSVCRT.dll___dllonexit], ebx
dec ebx
loop 0x101811c9
jno 0x1018124a
add edx, dword [ebx + reloc.MSVCRT.dll___dllonexit]
int1
ljmp 0x3d66
btc ax, di
jmp 0x1018122e
xchg al, ah
mov ah, byte [esp]
sub esp, 0x14
jmp 0x101811f8
rol eax, cl
mov ah, 0x4e
btr ax, sp
bsf ax, bp
dec eax
not ax
jmp 0x10181258
rol cl, 0
je 0x10181218
rol eax, cl
jmp 0x1018123b
mov ah, 0x4e
btr ax, sp
bsf ax, bp
jmp 0x1018126e
lcall 0x7116, 0x80047f69
and bl, 0xbd
mov word [edi], ds
jmp 0x1018120e
lea esp, [esp + 0x14]
sub cl, 0x3c
stc
jl 0x10181271
jge 0x1018129d
popal
in al, 0x7a
sbb eax, 0x1091d3ec
xchg ebx, eax
or cl, byte [eax - 0x15]
mov ah, 0x8d
add al, 0x85
add byte [eax], al
add byte [eax], al
dec eax
jmp 0x10181225
lea eax, [eax*4]
mov ax, word [esp]
neg eax
jmp 0x101816a1
lea eax, [eax*4]
mov ax, word [esp]
neg eax
mov ax, 0x9f5d
jmp 0x101816a5
mov ax, cx
lea eax, reloc.MSVCRT.dll___dllonexit
bsr eax, eax
jmp 0x101812e8
mov ax, bx
mov ax, cx
lea eax, reloc.MSVCRT.dll___dllonexit
bsr eax, eax
call fcn.10181302
outsd dx, dword [esi]
arpl word [esi], ax
cmc
xchg ecx, eax
jbe 0x10181356
mov al, byte [0xc1c0e3]
rol cl, 0
clc
je 0x101812d9
mov ax, bx
jmp 0x101812c3
shr ah, 7
mov ax, word [esp]
lea esp, [esp + 1]
jmp 0x101812f7
jmp 0x101813d8
add byte [edx], dh
mov cl, 0x21
inc eax
mov bl, 0xd3
xor al, 0xb2
and byte [edi - 0x4e], al
test dword [ebx], esi
sub al, byte [ebp - 0xc]
out 0xf7, eax
fadd dword [edx]
fprem1
jnp 0x10181352
mov cx, bp
push sp
bswap eax
lea esp, [esp + 2]
jmp 0x101813b1
pop word [esp]
pop ax
add esp, 1
jmp 0x1018132d
jmp 0x101813bf
lea esp, [esp + 2]
dec ebp
inc eax
jns 0x10181397
setb ah
jmp 0x10181424
setb ah
xchg cx, ax
mov ch, 0x9b
lea eax, [edx + edi]
lea eax, reloc.MSVCRT.dll___dllonexit
mov ecx, dword [esp]
jmp 0x101813e1
mov cx, bp
push sp
bswap eax
jmp 0x101813ad
not ax
lea ecx, [ebx + ebx]
neg cx
jbe 0x101813ff
ja 0x101813ff
inc edx
rcl byte [esi + 0x31], 0xc0
mov byte [0x8d5fccfd], al
add eax, 0x22381e1b
lea eax, reloc.MSVCRT.dll___dllonexit
jmp 0x101813cf
ror dl, 0
jmp 0x10181408
cmc
jb 0x10181443
btc cx, si
btr eax, ebx
xchg ecx, eax
jmp 0x1018142e
xchg cx, ax
mov ch, 0x9b
lea eax, [edx + edi]
jmp 0x101813f7
xchg ecx, eax
call fcn.10181587
cmp bh, byte [ecx - 0x2444b7d7]
sbb al, 0x9a
or byte [edi - 0x66], ch
lodsd eax, dword [esi]
jnp 0x10181493
int 0x5c
btc cx, si
btr eax, ebx
jmp 0x1018142d
jmp 0x1018138c
ret 0x1ae8
mov ax, 0x9f5d
dec cl
sub esp, 6
jno 0x1018145f
pop word [esp]
pop ax
add esp, 1
shr ah, 7
mov ax, word [esp]
jmp 0x10181334
inc cx
bswap eax
jmp 0x10181197
movzx eax, byte [ebp - 1]
cmp edx, ecx
jmp 0x10183d5b
mov cx, word [esp]
mov cx, 0xd75c
mov cx, 0xd3d2
push eax
mov cl, byte [esp]
setae ch
jmp 0x10183cec
sub esp, 0x1a
jnp 0x10183d23
lea esp, [esp + 2]
call fcn.10183d0c
fist dword [edi - 0x39]
mov byte [0xe54a4451], al
mov cx, 0xd3d2
push eax
mov cl, byte [esp]
jmp 0x10183cd5
lea esp, [esp + 2]
sub al, bl
jmp 0x10183e10
jb 0x10183cc5
mov cx, word [esp]
mov cx, 0xd75c
jmp 0x10183d02
je 0x10183e9e
mov edx, 0x906e0213
mov ecx, 0xad9ddef2
jmp 0x10183ea8
mov edx, 0x906e0213
mov ecx, 0xad9ddef2
call fcn.10183da6
lea esp, [esp + 2]
jmp 0x10183ee6
ror dl, 0
setne ch
call 0x10183ed0
pop cx
lea esp, [esp + 2]
ror dl, 0
btc ecx, edx
jge 0x10184122
mov ecx, 0xc59de14b
lea ecx, reloc.MSVCRT.dll___dllonexit
bswap ecx
jmp 0x10183f29
mov cx, bx
jmp 0x10183f46
mov cx, bx
call 0x10183f59
mov eax, 0x33c0a131
mov dh, 0xb0
xor ah, byte [eax - 0x4cafcd39]
stosb byte es:[edi], al
pop word [esp]
lea esp, [esp + 2]
jmp 0x10184056
mov ecx, 0xc59de14b
lea ecx, reloc.MSVCRT.dll___dllonexit
bswap ecx
jmp 0x10183f43
lea ecx, reloc.MSVCRT.dll___dllonexit
mov ecx, dword [esp]
neg ch
jmp 0x10183fbe
sub esp, 0xc
lea esp, [esp + 0x1c]
inc dl
mov ch, byte [esp]
jmp 0x10183f81
dec ecx
bts cx, sp
ror cl, cl
jmp 0x10183f97
jns 0x10183fd4
btc ecx, edi
mov cx, bx
jmp 0x10183fe2
btc ecx, edi
mov cx, bx
mov ecx, esi
jmp 0x10184022
mov ecx, esi
jmp 0x10184022
btc ecx, ecx
jmp 0x10183fb5
sub bl, dl
call fcn.10183fe6
btr edx, esp
xchg dx, cx
xchg cx, dx
xchg dh, ch
mov cx, word [esp]
jmp 0x1018406f
ror dl, 0
rol cl, cl
jl 0x10184007
btc ecx, ecx
dec ecx
bts cx, sp
ror cl, cl
sub esp, 0xc
jmp 0x10183f9a
bsr cx, dx
mov edx, 0x2d13ada7
adc cl, 0x71
jb 0x101840a5
xchg dx, cx
jmp 0x1018408f
xchg dh, ch
mov cx, word [esp]
jmp 0x1018406f
not al
bsr ecx, edi
jns 0x101840aa
bswap edx
mov ecx, dword [esp]
neg dh
call fcn.101840d3
sub byte [ebx - 0x1e], cl
loop 0x1018410c
xchg dx, cx
xchg edx, ecx
jmp 0x1018408f
bswap edx
jmp 0x101840b2
mov ecx, dword [esp]
neg dh
mov dx, word [esp]
call fcn.10184127
bnd jno 0x101840a4
xor byte [ebx + 0x13], 0xf0
btr edx, esp
xchg dx, cx
xchg cx, dx
jmp 0x10184087
mov ecx, dword [esp]
lea ebp, [ebp + 0x47]
jmp 0x10184191
jmp 0x10183f72
mov ecx, edi
clc
push dword [esp]
ret 4
not cx
mov dh, bl
lea edx, [eax + edi]
xchg dword [esp], ebp
lea ecx, reloc.MSVCRT.dll___dllonexit
sets dl
jmp 0x10184163
btc edx, edx
lea edx, [ebx + ebp]
push dword [esp + 0xc]
ret 0x10
neg ecx
ja 0x1019cc1b
rol cl, 2
neg al
xchg edx, ecx
jmp 0x1019cca1
rol cl, 2
jmp 0x1019cc24
neg al
xchg edx, ecx
call 0x1019cc70
dec edx
leave
pop ecx
cmp bl, cl
stosd dword es:[edi], eax
in al, dx
push 0xfffffffffffffff8
lahf
push 0x5d
or esp, dword [edx - reloc.MSVCRT.dll___dllonexit]
adc dx, 0xb71f
xchg dword [esp + 0xc], ebp
adc edx, 0xda9f933b
mov edx, 0x21fcae92
mov edx, ebp
jmp 0x1019cb97
lea edx, [esi + 0x50]
neg ecx
jo 0x1019ccec
bsf ecx, esi
adc al, bl
pushal
jmp 0x1019cd0c
bsf ecx, esi
jmp 0x1019cd09
adc al, bl
pushal
cmp edi, edx
jmp 0x1019dc67
setne ah
pop eax
lea eax, [esi + edi]
jmp 0x1019cd3e
sub esp, 7
setne ah
pop eax
lea eax, [esi + edi]
lea esp, [esp + 3]
jmp 0x1019cd92
lea esp, [esp + 3]
jmp 0x1019cd92
jmp 0x1019cd72
call fcn.1019cdb6
jmp 0x1019cd79
mov esp, eax
pushfd
lea esi, [eax + edx - 0x40]
jmp 0x1019cd9e
sub edx, ecx
jge 0x1019cd2a
sub esp, 7
jmp 0x1019cd14
sub eax, edx
clc
jl 0x1019cd46
jge 0x1019cd46
lea esp, [esp]
lea esp, [esp + 2]
jmp 0x1019cd4d
lea eax, [edi - 0x80]
and al, 0xfc
sub esp, 8
ja 0x1019cd44
jbe 0x1019cd72
push esi
sub esp, 8
jge 0x1019cdc6
jl 0x1019cdd0
in eax, dx
cld
iretd
mov dword [esp + 4], edi
jmp 0x1019cfbc
mov dword [esp + 4], edi
lea esp, [esp + 4]
jmp 0x1019cfc0
mov ah, dh
jmp 0x1019d1d2
pop esi
popfd
jmp fcn.101825d9
rep movsb byte es:[edi], byte [esi]
pop ecx
pop edi
jmp 0x1019cdef
mov edi, eax
mov ecx, edx
cld
jmp 0x1019ce11
lea esp, [esp + 4]
push ecx
mov esi, ecx
jmp 0x1019cee2
adc edx, eax
mov ah, dh
lea edx, [esi + 0x40]
mov eax, edi
mov ah, 0xde
lea eax, [ebx + edi]
jmp 0x1019cd69
mov ecx, esi
rcl edx, cl
jnp 0x1019d1ce
adc edx, eax
jmp 0x1019cde8
jmp 0x1019d26c
ja 0x10181139
mov eax, 0x532fc3a5
shl dl, cl
jb 0x1019d91d
jae 0x1019d91d
adc esi, ecx
mov dword [esp + 4], edx
sub esp, 0x15
jmp 0x1019dc98
lea esp, [esp + 1]
lea esp, [esp + 0x14]
popal
jmp 0x1019deee
pop esi
popfd
jmp 0x10183cb9
rep movsb byte es:[edi], byte [esi]
pop ecx
pop edi
jmp 0x1019de4b
mov edi, ecx
mov ecx, eax
cld
jmp 0x1019de96
lea esp, [esp + 1]
jmp 0x101ad6a7
lea esp, [esp + 4]
cmp eax, 1
push bx
call fcn.101ad601
lea ebx, [ecx + edx]
lea ecx, [esi + esi]
jmp 0x101ad707
cpuid
jmp 0x101ad77b
jmp 0x101ad7a5
mov dword [edi + 4], ecx
not ecx
mov bh, 0xbf
not bx
mov bl, 0xab
jmp 0x101ad787
cmp dword [edi + 0xc], 1
mov dword [edi + 0xc], eax
clc
jbe 0x101ad756
ja 0x101ad7a5
mov dword [edi], edx
mov ecx, esp
not ecx
push edi
jmp 0x101ad7d4
mov dword [edi + 8], ebx
lea ebx, [edx*4]
lea ebx, [eax + eax]
jmp 0x101ad758
lea esp, [esp + 0x28]
jmp 0x101ad800
popal
jmp 0x101ad8b3
jne 0x101ad7ea
pushal
mov dword [esp + 0x14], eax
mov ax, 0x7669
jmp 0x101ae535
mov cx, 0xb78b
mov ax, word [esp]
not ch
jmp 0x101ad935
jne 0x101ad7ea
xor byte [edi + 0xc], 0x20
call fcn.101ad86f
int 0x5c
add byte [eax], al
add ch, cl
pop esp
stosd dword es:[edi], eax
push edx
shr dword [ebx], cl
pushfd
push esp
push 0x2c
jg 0x101ad838
repe scasd eax, dword es:[edi]
cmp edx, 0xfe0
cpuid
mov bx, 0x111f
bswap ecx
jmp 0x101ad830
jmp 0x101ad849
lea edx, [ecx + ecx]
mov al, ah
cmc
jmp 0x101ad8ff
jmp 0x1019cbf8
jns 0x101ad8bf
js 0x1019cbf8
inc ecx
ret
and edx, 0xff0
mov eax, 0x88979bd0
mov bl, byte [esp]
cmc
jge 0x101ad8b1
jl 0x101ad849
sub esp, 0
jno 0x101ad96d
neg eax
jmp 0x101ada1f
neg eax
jmp 0x101ada1f
mov edx, esi
and ax, 0xd4da
add byte [edi + 4], cl
jmp 0x101ad999
mov edx, dword [esp]
bswap edx
jmp 0x101ad9ce
rdtsc
jmp 0x101ad98a
lea edx, [eax + esi]
jmp 0x1019cbf8
pushfd
pop dword [edi]
bswap eax
mov dx, word [esp]
jmp 0x101ad9b3
sub edi, 2
neg dx
jg 0x101ad9af
rdtsc
mov edx, esi
and ax, 0xd4da
jmp 0x101ad990
mov ax, word [esp]
not ch
jmp 0x101ad935
popal
bts cx, bx
jo 0x101ad810
mov cx, 0xb78b
jmp 0x101ada50