Function at 0x10113496
Capabilities:
Execute anti-debugging instructions

Disassembly:
pop eax
setb dh
mov cl, byte [esp + 3]
neg si
add esp, 1
xchg ah, cl
jmp 0x101134ae
jmp 0x10113480
lea edi, [edi*4]
pop ebp
lea esp, [esp]
setae dh
cld
jmp 0x101134c5
mov al, 0x7f
push word [esp + 2]
cmc
mov edx, 0xdced4a1
xchg byte [esp], ah
mov edi, 0xd08af41f
jmp 0x10113498
rol esi, 0x1b
xchg bh, bl
add esp, 0
cld
xchg esi, ecx
xchg byte [esp], bh
jmp 0x10113507
bts si, si
mov dl, 0x74
xchg cl, dl
setl ch
pop word [esp + 1]
jmp 0x101136c7
push ax
mov si, word [esp]
bt edx, eax
lea esi, [ebx*4]
pushfd
mov ebp, edi
jmp 0x101134f1
pop bx
lea ecx, [eax*4]
xchg ebx, ecx
mov edi, dword [esp]
xchg edi, eax
jmp 0x101135b4
lea esi, [ebx*4]
push word [esp + 0x12]
cpuid
add esp, 0x11
mov byte [esp + 1], bl
rol ebp, cl
jmp 0x1011353c
neg bp
neg edi
mov bl, dh
lea esp, [esp + 8]
mov dword [esp + 0xc], ebp
mov edx, ecx
jmp 0x10113552
push word [esp + 3]
std
pop word [esp]
shr dl, 5
mov bx, 0x3c02
rcl dh, 3
jmp 0x101135c8
or edx, ebx
xchg bx, dx
rcr eax, 0x1d
push word [esp]
mov ax, 0x62e7
mov bh, 0xf6
jmp 0x10113591
setp dl
pop word [esp]
sub esp, 0x11
std
push word [esp + 0x12]
pop cx
jmp 0x10113668
xchg ah, dl
lea edx, reloc.KERNEL32.dll_FlushFileBuffers
pop ebp
xchg dword [esp + 0xb], edi
setp dl
pop ax
jmp 0x1011357e
mov dh, byte [esp + 6]
dec si
xchg edi, eax
push word [esp + 0xf]
bt esi, ebx
lea ecx, [ebp + ebp]
jmp 0x10113651
sub di, si
mov byte [esp + 0x11], ch
bsr bp, cx
push dword [esp + 0xf]
neg edi
xchg ecx, edi
jmp 0x101135fe
xchg cx, si
not eax
neg ecx
rdtsc
add esp, 0xb
mov bx, dx
jmp 0x10113698
pop ebx
pushfd
neg bh
mov dword [esp + 0xe], edx
xchg ah, bl
add esp, 0xa
jmp 0x1011363b
shl bp, cl
cpuid
xchg byte [esp + 8], dh
mov word [esp + 6], bp
lea esi, [ebx*4]
rol di, cl
jmp 0x10113626
rcr ch, cl
not dx
sub esp, 0x13
push word [esp + 0xb]
jmp 0x101136aa
xchg bl, dh
mov dx, ax
xchg esi, edi
pop word [esp]
xchg edx, ecx
add esp, 1
jmp 0x10113682
lea ebx, [ebp*4]
bswap esi
mov byte [esp + 0xb], ah
push word [esp + 3]
rdtsc
cpuid
jmp 0x1011391c
not ebp
mov bp, word [esp + 3]
mov al, bl
lea esp, [esp + 4]
bswap edx
pushal
jmp 0x101135ea
mov dword [esp + 0x16], ebp
not dl
mov cx, word [esp + 0x16]
pop di
jmp 0x10113743
lea edx, [ecx - 0xe6]
neg di
lea esp, [esp + 6]
sub esp, 0x1d
lea esi, [ebx*4]
pop ecx
jmp 0x101136dc
ror ah, cl
add esp, 5
lea edx, reloc.KERNEL32.dll_FlushFileBuffers
push dword [esp + 6]
push dword [esp + 6]
mov byte [esp + 8], ah
jmp 0x101136f2
rdtsc
cpuid
add esp, 0xc
lea esp, [esp + 0xa]
xchg dword [esp], ebp
std
jmp 0x10113771
pop dword [esp + 3]
mov ebx, 0xe36bbb92
mov ecx, 0x5c5e434a
mov di, ax
lea eax, [edx + ebp]
mov edi, ebx
jmp 0x1011372d
mov dword [esp + 2], eax
mov di, dx
mov ebp, 0xb3f9f418
inc esi
jmp 0x1011378b
mov dx, 0x750d
add esp, 3
mov edi, 0x254d57d4
sub esp, 0xa
mov ecx, 0x6d597126
mov al, byte [esp + 9]
jmp 0x1011375b
xchg word [esp + 4], di
xchg dword [esp + 3], edi
rdtsc
mov edx, dword [esp + 1]
xchg esi, edx
mov cl, byte [esp + 2]
jmp 0x101137dd
pop edx
bsr cx, bp
cpuid
rdtsc
xchg word [esp + 7], bx
pop ax
jmp 0x10113714
xchg word [esp + 9], bx
xchg byte [esp + 5], dh
pop edi
lea ebx, reloc.KERNEL32.dll_FlushFileBuffers
jmp 0x10113807
lea ecx, [eax + edx]
stc
mov esi, 0x131231bd
add esp, 0
xchg cl, ah
mov bp, 0x702b
jmp 0x101137c7
push word [esp + 1]
mov dword [esp], esp
mov al, byte [esp + 4]
xchg byte [esp + 2], dh
jmp 0x10113819
setge cl
pop dword [esp]
xchg ebx, edi
add esp, 1
bsr edi, esp
neg dl
jmp 0x101137f1
rdtsc
mov si, word [esp + 5]
xchg word [esp + 3], bp
xchg si, bp
xchg edx, ebp
xchg byte [esp + 1], cl
jmp 0x10113883
sete dl
pop ax
pop ebp
bts ebx, esp
dec bl
seto ch
jmp 0x101137b2
mov bh, 0x4e
mov eax, ebx
mov ebp, 0x72cc0f1d
bsf bp, bp
jmp 0x101138b2
mov ebx, 0xb170cec7
mov dl, al
mov edx, esi
mov edx, 0x6ff53e46
pop eax
mov ecx, dword [esp]
jmp 0x1011384e
cpuid
clc
not dl
mov esi, ecx
pop word [esp + 1]
lea esi, [ebx + ebp]
jmp 0x10113864
xchg bl, al
xchg bl, al
neg bp
lea esi, [edx*4]
call fcn.101138e4
adc eax, 0xa455329c
dec ebx
imul ecx, dword [eax + reloc.KERNEL32.dll_FlushFileBuffers], 0xfdd0bc0f
bsf dx, ax
std
seto ch
mov bx, 0xe4ed
lea esi, reloc.KERNEL32.dll_FlushFileBuffers
xchg cx, bp
jmp 0x10113894
mov bl, 0xeb
mov edx, dword [esp + 0x14]
mov ebx, esp
mov byte [esp + 9], cl
lea edi, reloc.KERNEL32.dll_FlushFileBuffers
xchg cl, bh
jmp 0x1011383b