Function at 0x1015784f
Capabilities:
Execute anti-debugging instructions

Disassembly:
lea eax, [ebx*4]
mov edx, 0xb88d2b26
jmp 0x10157a5f
mov dx, bx
jmp 0x101578f2
btr edx, edx
mov dx, bx
jmp 0x101578f2
lea edx, [eax + ecx]
rcl dx, cl
js 0x101578b4
btr edx, edx
jmp 0x1015789e
lea edx, [eax + esi]
jmp 0x1015791d
add al, 0xec
bswap edx
lea edx, [edx + ebp]
mov dx, 0x6fac
mov edx, dword [esp]
jmp 0x101578dc
mov dl, byte [esp]
lea edx, reloc.WINMM.dll_midiStreamRestart
rcr edx, cl
dec dx
xchg dl, dh
cmc
jmp 0x10157976
sub al, 0x74
mov dh, byte [esp]
btc dx, si
jge 0x10157902
jl 0x10157932
jmp 0x101591a7
mov dl, byte [esp]
lea edx, reloc.WINMM.dll_midiStreamRestart
rcr edx, cl
jmp 0x10157943
dec dx
xchg dl, dh
jmp 0x10157911
rdtsc
jmp 0x101579af
neg dl
jns 0x10157986
js 0x10157986
pop ecx
enter 0x395e, 0xffffffffffffffc8
jnp 0x1015795e
cmc
pushfd
outsd dx, dword [esi]
fst dword [edi + eax*4]
cmp dword cs:[esi + edx*8], esi
xor al, 0xd6
mov dx, word [esp]
mov dl, byte [esp]
lea edx, [ebx - 0x36]
mov dh, 0x22
jmp 0x10157960
add al, 0xf5
clc
jmp 0x101579fa
lea edx, [ebx + edi]
neg dx
mov dl, 0x68
mov dl, bl
mov dl, 0x5f
bsr dx, ax
jmp 0x101579be
rdtsc
mov al, cl
setbe dl
mov dh, byte [esp]
mov edx, esp
jmp 0x101578cf
sub al, 0xf4
pushfd
mov dh, 0x53
not edx
mov dword [esp], edi
jmp 0x101579dc
mov dl, 0x68
mov dl, bl
mov dl, 0x5f
jmp 0x1015799b
neg dl
jno 0x10157a32
jo 0x10157a32
call fcn.10157a04
mov edi, 0x2adfb82a
pushfd
ror dword [edi - 0x21], cl
mov edx, 0xe07be249
jbe 0x10157a08
loopne 0x10157a4b
popfd
jnp 0x1015798f
lea edx, [ebx + edi]
neg dx
jmp 0x101579d4
mov dl, byte [esp]
inc eax
mov al, dh
mov ax, 0x2421
jmp 0x10157a42
add bl, al
neg eax
jp 0x101579e2
neg dx
jmp 0x10157aa0
xchg dword [esp], ebx
mov ax, 0x32d1
bswap eax
sub ax, dx
lea ebx, [ebx + 0x33]
mov ax, word [esp]
jmp 0x10157aca
add cl, bl
mov dh, byte [esp]
bt edx, ebp
js 0x101579ad
jns 0x1015795c
mov dx, bp
jmp 0x10157b46
mov edx, 0x2a1e1772
rcl ax, cl
push bp
lea esp, [esp + 2]
push dword [esp + 8]
ret 0xc
mov dx, bp
jmp 0x10157b46
mov ah, byte [esp]
jmp 0x10157af6
mov ah, byte [esp]
mov edx, ebx
mov dx, 0x40ff
mov eax, 0xae2a3d05
btr edx, ebp
jmp 0x10157b19
lea eax, [ebp + 0x4f]
sub esp, 8
shl edx, 2
mov eax, dword [esp + 3]
xchg dword [esp + 8], ebx
lea eax, [ebx + ebp]
jmp 0x10157a8b
btr edx, ebp
jmp 0x10157b19
mov edx, ebx
mov dx, 0x40ff
mov eax, 0xae2a3d05
jmp 0x10157ae0
neg eax
jns 0x10157b2c
js 0x10157b2c
outsd dx, dword [esi]
in al, dx
bound eax, qword [0xf97b44f4]
imul ecx, dword [eax], reloc.WINMM.dll_midiStreamRestart
xchg edx, eax
or eax, 0x6671e980
mov eax, 0xd0f6def2
sub cl, 0x71
mov ax, 0xdef2
not al
mov edx, 0x867b4c7
mov eax, dword [esp]
jmp 0x10157b03
call fcn.10157b6e
lahf
push ds
mov ebx, gs
nop
jmp 0x10157bac
dec edi
setne ah
dec dx
jb 0x10157aa8
jae 0x10157ab1
not edx
pushal
mov word [esp + 5], bx
jmp 0x10157bb0
pop word [esp + 0x14]
pop word [esp + 0x14]
lea esp, [esp + 7]
jmp 0x10157be7
mov cl, 0xb0
mov bl, 0xaa
lea esp, [esp + 0x20]
sub cl, 0x39
xchg dx, ax
rdtsc
sub esp, 0x1b
jmp 0x10157c30
lea esp, [esp + 0x10]
sub cl, 0x9e
mov edx, dword [esp]
mov edx, dword [esp]
jmp 0x10157c19
lea esp, [esp + 7]
jmp 0x10157be7
xchg al, ah
mov dh, 0x4e
jmp 0x101584df
rol ax, 8
jp 0x10157c03
xchg al, ah
mov dh, 0x4e
jmp 0x101584df
jae 0x10157b9a
pop word [esp + 0x14]
pop word [esp + 0x14]
jmp 0x10157bfd
rol cl, 0
lea eax, [eax*4]
call fcn.1015840d
push ecx
pop eax
jmp 0x10158570
sub esp, 0x1e
mov ax, 0x8c21
setl al
lea esp, [esp + 2]
jmp 0x1015853c
mov ah, cl
neg ax
jb 0x10158514
sub esp, 0x1e
jmp 0x10158556
lea esp, [esp + 0x1c]
add dl, 0xec
bsf ax, cx
jo 0x1015858f
jno 0x10158579
sahf
push cs
pushfd
sti
push ss
movsb byte es:[edi], byte [esi]
pop ds
xchg cx, ax
adc byte [ebx - 0x73de479a], dl
mov ax, 0x8c21
setl al
lea esp, [esp + 2]
jmp 0x1015853c
mov al, 0xc0
bsf eax, ecx
mov dl, cl
jmp 0x10158530
or eax, eax
mov ah, byte [esp]
btc eax, ecx
jmp 0x1015863a
or eax, eax
mov ah, byte [esp]
btc eax, ecx
mov eax, dword [esp]
mov ax, word [esp]
jmp 0x1015860d
mov eax, dword [esp]
neg ax
bswap eax
jmp 0x101585e4
mov eax, esp
jmp 0x101585b4
add dl, 0xf5
setg ah
pushal
bt eax, edi
jge 0x101585f0
jl 0x10158623
insb byte es:[edi], dx
cmc
or al, 0xff
dec edi
xchg edi, eax
setbe ah
xor dl, 0xd6
mov ax, word [esp]
jmp 0x101585ce
xchg word [esp + 1], ax
push word [esp + 8]
pop dword [esp + 0xa]
lea esp, [esp + 2]
jmp 0x1015877f
sub dl, 0x74
inc ah
jne 0x101585ca
mov eax, esp
mov eax, dword [esp]
neg ax
bswap eax
setbe ah
jmp 0x101585e7
xchg word [esp + 1], ax
push word [esp + 8]
pop dword [esp + 0xa]
jmp 0x101587ae
mov eax, dword [esp]
mov ax, word [esp]
jmp 0x1015860d
lea esp, [esp + 0x1c]
sub dl, 0xf4
not ah
bswap eax
bswap eax
call fcn.10158668
lea esp, [esp + 2]
jmp 0x1015877f
mov edx, dword [esp]
lea ebx, reloc.WINMM.dll_midiStreamRestart
mov dx, ax
cmc
mov edx, esp
lea esp, [esp]
jmp 0x10158ff2
ror ebp, 0
xchg ecx, ebx
xchg ebx, ecx
xchg cl, ch
mov ebx, dword [esp]
jmp 0x1015908b
mov dx, ax
cmc
mov edx, esp
jmp 0x10158fe1
mov dl, bl
jmp 0x10159064
jp 0x10159058
lea ebx, [edx*4]
mov dl, byte [esp]
jmp 0x1015901a
inc ebp
sub esp, 0x14
jge 0x10159074
mov dword [esp + 0xc], ebp
not ch
lea esp, [esp + 5]
lea esp, [esp + 3]
jmp 0x101590b0
lea ebx, [edx*4]
mov dl, byte [esp]
mov dl, bl
lea esp, [esp + 4]
xor ebp, 0x6e6eb2d3
mov bl, 0x42
not bl
jmp 0x1015903e
mov dword [esp + 0xc], ebp
jmp 0x101590cf
bswap ebx
mov ch, dh
ror ebp, 0
not ecx
bt dx, cx
jmp 0x10159030
lea ecx, [esi*4]
jmp 0x10159180
add ebp, dword [esi]
sub esp, 0x1b
jne 0x1015909a
lea ecx, [esi*4]
lea ecx, [edx*4]
lea esp, [esp + 3]
jmp 0x101590f7
not ch
lea esp, [esp + 5]
lea esp, [esp + 3]
jmp 0x101590b0
xchg dword [edx - 0x3f], esi
ljmp 0
lea ecx, [edx*4]
lea esp, [esp + 3]
jmp 0x101590f7
mov bx, 0x612
add ebx, esp
call fcn.101591f9
mov ch, 0x3a
test al, 0xcf
cmp cl, byte [esi - 0x1570e06b]
sbb dword [ebp - 0x7e198f03], edx
jo 0x1015917b
add byte [ebp + 0x3acfa83a], dh
mov ss, word [ebp + 0x19ea8f1f]
xchg ebp, eax
std
jo 0x1015919d
xor dword [eax - 0x3f], reloc.WINMM.dll_midiStreamRestart
adc dh, bh
invalid
in eax, dx
cld
jp 0x10158fd2
mov edx, dword [esp]
lea ebx, reloc.WINMM.dll_midiStreamRestart
jmp 0x10159012