Function at 0x101ea002
Capabilities:
Execute anti-debugging instructions

Disassembly:
rcr bp, cl
cld
jmp 0x101ea055
not cx
mov ebp, 0xbc49a26a
pop di
bsr di, bp
cpuid
pop esi
jmp 0x101ea067
mov dword [esp], edx
mov edi, dword [esp + 3]
xchg bl, al
pushfd
xchg byte [esp + 5], ch
cmp ebx, ecx
jmp 0x101ea031
rdtsc
std
lea ebp, [edi - 0x1271abf2]
xchg bl, dh
push dx
bswap edx
jmp 0x101ea0a1
mov ah, byte [esp + 3]
mov dh, 0x4e
xchg ebp, esi
mov al, 0x93
xchg dl, bl
mov bp, 0x7e1f
jmp 0x101efe78
adc dl, dl
lea ebp, [ebx*4]
mov ecx, dword [esp]
mov ebp, ecx
xchg edx, ecx
jmp 0x101efdaf
neg bp
cpuid
shl eax, cl
btr eax, ecx
not ebx
mov dword [esp], esp
jmp 0x101efd54
mov word [esp + 1], sp
ror bx, 1
adc di, cx
btc ax, si
mov edx, dword [esp + 2]
or ebp, edx
jmp 0x101efd6a
mov ecx, ebx
lea eax, [ebp + 0x49eef8e6]
push word [esp]
rdtsc
jmp 0x101efe4a
mov edx, ebp
pop word [esp]
lea ecx, [ebp*4]
lea edx, [edx + edi]
jmp 0x101efd99
mov ebp, dword [esp + 1]
mov bl, 0xac
and ch, 0x87
mov word [esp], cx
mov cl, 0xbb
xchg edi, eax
jmp 0x101efd82
sub cl, 0xc6
xchg byte [esp], ah
inc eax
mov dl, byte [esp]
mov ecx, edi
lea esp, [esp]
jmp 0x101efe17
clc
mov bp, ax
mov ch, al
mov ebp, ebx
rdtsc
setne dh
jmp 0x101efdd8
xchg byte [esp], ah
sub esp, 0x13
mov edx, dword [esp + 4]
push word [esp + 7]
call fcn.101efdfd
lea edi, [0x74f0e2d4]
pushfd
xchg bh, ch
lea ebp, [edi*4]
lea eax, [edi*4]
jmp 0x101efe61
mov bp, 0x3307
lea esp, [esp + 1]
add esp, 2
mov ebp, 0x97ae8434
bswap esi
xchg bp, cx
jmp 0x101efdee
pop word [esp + 0x14]
rol ecx, 0x13
mov bx, 0xf403
push ecx
lea esp, [esp + 0x18]
jmp 0x101efedb
mov bp, word [esp + 1]
std
mov word [esp], ax
mov bl, 0x94
shl eax, cl
xchg bp, di
jmp 0x101efdc6
bt dx, cx
neg cx
xchg byte [esp], cl
push word [esp]
jmp 0x101efeb5
adc ch, dl
mov ecx, dword [esp]
xchg byte [esp], cl
mov al, bl
mov bl, 0x3b
lea edi, [esp + edi]
jmp 0x101efe8e
neg cx
mov word [esp + 1], ax
cmc
setb ch
not ecx
lea esp, [esp]
jmp 0x101eff93
pop bx
add esp, 3
xchg edx, ecx
lea esp, [esp + 3]
neg edx
bsf edx, ebp
jmp 0x101efea4
mov bl, 0xf0
mov di, word [esp + 0xa]
mov al, 0x67
xchg word [esp + 5], bx
mov esi, edi
jmp 0x101eff4a
push dword [esp + 5]
sub esp, 5
cld
mov di, word [esp + 0xc]
lea edi, [ebp*4]
mov cx, si
jmp 0x101efeed
add esp, 2
call fcn.101eff32
mov ah, 0x3e
rdtsc
std
shr si, cl
xchg cl, dl
mov word [esp], ax
jmp 0x101eff70
cpuid
pop ebx
clc
call 0x101eff7a
sbb al, 0x8d
mov cl, 0xf4
add byte [eax], al
add byte [esi - 0x77], ah
sbb al, 0x24
clc
jmp 0x101effd4
rdtsc
cld
not al
push word [esp + 1]
mov al, 0x4b
xchg byte [esp + 2], bl
jmp 0x101eff03
pop word [esp + 3]
lea esp, [esp + 8]
mov esi, 0xe7937856
xchg byte [esp], dl
add esp, 0
mov cl, byte [esp]
jmp 0x101effea
bts ebx, ecx
xchg byte [esp + 1], al
mov bh, 0xfb
adc bl, 0x37
push dword [esp + 4]
mov byte [esp + 2], dh
jmp 0x101effa8
lea edi, [esi + ebp]
sub esp, 0x1f
mov edi, 0x683b1e8a
pushal
jmp 0x101f142d
xchg edx, eax
insb byte es:[edi], dx
xchg edx, eax
pop ss
xchg edx, esp
adc edi, esi
or byte [eax + 0x7a88791e], cl
cmpsb byte [esi], byte es:[edi]
and eax, 0xd22fdcb5
rcl byte [esi - 0x3c]
mov dword [0xcb42bb5e], eax
pop ebx
int 0x7a
call 0x84a4ed5f
invalid
lea esi, [esi*4]
mov bp, 0x7dcf
mov ebx, dword [esp]
mov eax, esi
call fcn.101f0487
xchg edx, eax
sbb ecx, dword [ebx - 0x755e212]
jl 0x101f0b5a
jne 0x101f0ace
into
dec ecx
fnstcw word [eax - 0x159f05b5]
js 0x101f0b74
ljmp 0x9fa:0x9f0f826d
cli
or dword [eax + 0x5136a022], edx
mov al, byte [0x4ddd5c5e]
adc al, 0xe7
or eax, 0xdbbc2eae
les edi, ss:[ebx + eax*2 - 0x43ba492d]
add byte [edx + ebx*4], 0xfd
mov esp, 0xfd9a0482
or al, 0xe9
xor al, 0xb1
and dword [eax - 0x4d], eax
add byte [esi], dh
mov dl, 0x20
inc edi
mov dl, 0
xor al, 0xb7
daa
inc edx
mov cl, 0xc
and ch, byte [eax + 0x2fa8593e]
dec esp
lds edx, [ebp + 0x3c]
iretd
push word [esp + 0x2e]
lea esp, [esp + 0x42]
cmp ah, bl
dec al
xchg ch, ah
mov cl, 0x58
jmp 0x101f0b2a