Function at 0x112016e
Capabilities:
Execute anti-debugging instructions

Disassembly:
call 0x111fcfc
push ebx
popal
outsb dx, byte gs:[esi]
imul ebp, dword [bp + 0x65], 0x69685320
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
and byte [esi + 0x32], dh
xor al, 0x2e
xor byte [esi], ch
xor byte [eax], al
pushfd
call fcn.0111fcc5
dec esi
rol byte [esi + 0x21], 1
rcl byte [edi - 0x33]
dec ebp
frstor dword [edi + edx*2 - reloc.KERNEL32.dll_GetConsoleCP]
mov eax, dword [reloc.KERNEL32.dll_GetConsoleCP]
push esi
imul esp, dword [ebp + 0x77], 0x74726f70
inc ebp
js 0x111fd95
inc ebp
js 0x111fd24
bswap eax
neg ax
mov edx, dword [esp]
mov al, 0xda
bts edi, edx
mov edx, dword [esp]
jmp 0x111fdad
pop ds
stc
jmp 0x111fe10
lea edx, [eax + esi]
call 0x111fd79
mov ah, bl
lea edi, [ebp*4]
jmp 0x111fdef
pop ax
mov dl, 0xc9
std
mov eax, dword [esp + 0x18]
call 0x111fdb5
lea edx, [ecx*4]
push word [esp + 1]
clc
jmp 0x111fe3b
dec dl
mov dx, word [esp + 7]
push word [esp]
mov ax, 0xcfba
lea esp, [esp + 0x13]
lea esp, [esp + 1]
jmp 0x111fdd9
pop eax
mov byte [esp + 0xf], al
cld
lea edx, [ecx*4]
mov dx, ax
rcr di, cl
jmp 0x111fdcb
xchg byte [esp + 2], dh
mov byte [esp + 5], ch
lea edx, [ebx - 0x7f]
lea eax, [esp + eax]
jmp 0x111fe65
mov dl, byte [esp + 0xc]
mov al, dh
mov edx, ebp
mov edx, 0x2aa19cf9
not dl
xchg dx, ax
jmp 0x111fe25
xchg dx, ax
mov ax, word [esp + 4]
mov dh, byte [esp + 2]
pop dx
jmp 0x111fea5
shr dx, 0
push word [esp + 5]
add eax, 0xd03b7e1f
mov ax, word [esp + 1]
jmp 0x111fe4f
push dword [esp + 4]
pop edx
setp al
xchg dword [esp], edx
xchg word [esp + 3], di
jmp 0x111feb8
pop word [esp + 3]
neg eax
pop edi
bsr di, bp
mov ah, byte [esp]
mov edx, eax
jmp 0x111fe8f
xchg dx, di
lea edx, [eax + esi]
mov dword [esp], edx
mov ah, byte [esp + 5]
xchg byte [esp + 2], al
pop dx
jmp 0x111ff35
mov di, 0x2079
neg ax
xchg byte [esp + 0xa], al
sete dl
setbe dl
sub edi, 0xf56f4f9a
jmp 0x111ff1e
push dword [esp + 0xe]
btc di, sp
mov word [esp + 0xc], ax
lea eax, [ecx*4]
cld
pop word [esp + 7]
jmp 0x111fee5
setp dl
pop word [esp + 3]
setnp al
cmp ax, 0x1f31
jmp 0x111ff61
mov edi, edx
lea edi, [esp + 0x37]
rdtsc
add esp, 3
adc edi, 0xfa4de030
sub esp, 0xd
jmp 0x111ff02
mov word [esp], si
bsf edi, ecx
lea edi, reloc.KERNEL32.dll_GetConsoleCP
cmc
neg edx
jmp 0x111ffae
push dword [esp + 4]
shl al, cl
add esp, 0xd
xchg di, ax
pop ax
xchg word [esp], dx
jmp 0x111ff4b
bsf di, si
cmc
bts eax, esi
rcr edi, cl
not edi
call fcn.0111ff8a
xchg word [esp + 0x10], di
lea esp, [esp + 1]
pop word [esp + 9]
std
jmp 0x111ffec
push dword [esp + 0x13]
lea edi, [esi*4]
mov word [esp + 0x12], ax
mov byte [esp + 0x12], bh
jmp 0x11200ac
mov di, word [esp + 0x11]
call fcn.01120021
pop dword [esp]
mov dl, byte [esp + 3]
mov dword [esp], edi
setne dh
pushfd
xchg byte [esp + 3], ah
jmp 0x1120087
xchg byte [esp + 7], dh
mov dh, byte [esp + 1]
mov di, dx
pop dword [esp]
bswap edx
jmp 0x11201b8
mov dword [esp], eax
not edi
xor edx, edx
lea eax, [ecx + ebp]
lea eax, [eax + eax]
mov ax, word [esp + 4]
jmp 0x112005b
push word [esp + 0x12]
mov di, word [esp + 0x11]
std
mov ax, dx
btr edi, eax
rcr dx, cl
jmp 0x112003d
mov byte [esp + 0x26], bh
lea eax, [edx + edi]
lea edx, reloc.KERNEL32.dll_GetConsoleCP
std
lea edx, [esi + edi]
mov dword [esp + 3], edi
jmp 0x1120115
mov byte [esp + 0xd], dh
xchg dx, ax
pop ax
push dword [esp + 2]
sub esp, 0x14
inc al
jmp 0x11200c5
push dword [esp + 0x27]
cmp eax, eax
mov word [esp + 0xd], cx
pop dx
pushfd
jmp 0x1120150
mov eax, 0x568190cd
neg ah
dec edi
mov dl, byte [esp + 0x27]
btr di, bx
mov ax, word [esp + 0x23]
jmp 0x11200ff
push word [esp + 4]
mov dh, dl
push bp
mov byte [esp + 1], al
xchg dword [esp + 9], eax
add esp, 0x12
jmp 0x1120165
neg di
lea esp, [esp]
add esp, 0x20
mov dx, sp
mov al, byte [esp + 0xe]
neg dx
jmp 0x112012c
mov dh, 0x7c
cmc
call 0x112016e
ret 0xc483
sub esp, 0xe
mov ah, byte [esp + 0xf]
pop dx
pop word [esp + 2]
std
xchg di, ax
jmp 0x11200ec
mov word [esp], ax
push dword [esp + 1]
xchg dh, al
cmp edx, esp
neg al
xchg edx, eax
jmp 0x1120185