Function at 0x101727e5
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x1017192b
rol ecx, 0x11
jmp 0x1017196f
mov edi, dword [esi]
sub dx, 0x1441
jb 0x10171915
rol ecx, 0x11
bswap edx
jmp 0x10171971
rcr bx, cl
jb 0x10171959
mov edx, dword [esp]
jmp 0x1017197b
mov edx, dword [esp]
jmp 0x1017197b
bswap edx
add esi, 4
lea ebx, [ecx + edi]
mov ch, bl
jmp 0x1017193b
mov dx, word [esp]
inc edx
jmp 0x101719cb
stc
push ebp
jmp 0x10171a40
jo 0x10171986
stc
call fcn.1017198e
cld
btr ebx, ecx
push dword [esp]
ret 4
dec bx
lea ebx, [ecx*4]
jmp 0x10171a8e
inc bx
jb 0x10171a2a
dec bx
lea ebx, [ecx*4]
xchg ecx, edx
call fcn.10171a6b
pop ds
xchg ebp, ebx
mov dl, 0xa7
neg bl
lea eax, [eax + 0x3c]
lea ebp, [ebx + esi]
bswap ebx
jmp 0x10171aa6
xchg ecx, edx
push eax
xchg bh, bl
mov bl, byte [esp]
jmp 0x10171bc6
shr dl, cl
xchg dword [esp], eax
mov bl, 0xb5
sub esp, 2
push word [esp + 1]
sub esp, 0x1f
jmp 0x10171c60
cmc
mov cl, 6
sub esp, 2
jmp 0x10171b26
jmp 0x10171ae8
jmp 0x10171b50
mov bl, byte [esp]
mov ecx, 0x99a14b4f
xchg ah, al
bt bp, sp
jmp 0x10171b76
lea esp, [esp + 2]
push esi
bsf edi, ebp
jge 0x10171b03
cmp bp, 0x134b
lea edx, reloc.KERNEL32.dll_ExitProcess
lea eax, [eax + edi]
mov bl, byte [esp]
mov ecx, 0x99a14b4f
jmp 0x10171b0d
cmp bp, 0x134b
lea edx, reloc.KERNEL32.dll_ExitProcess
lea eax, [eax + edi]
jmp 0x10171b05
jmp 0x10171b7a
jge 0x10171b98
jl 0x10171b98
neg edi
bswap eax
pop esi
jmp 0x10171ba5
sub esp, 0x15
mov ch, 0x2c
lea esp, [esp + 1]
mov edx, dword [esp + 0x14]
lea esp, [esp + 0x18]
jmp 0x10171be9
pop ebp
xchg esi, ebx
dec bl
jne 0x10171b60
neg edi
bswap eax
jmp 0x10171b7e
lea edx, [esi + edi]
cpuid
sbb ebx, ebx
js 0x10171b81
jns 0x10171c0d
mov edx, dword [esp + 0x14]
lea esp, [esp + 0x18]
jmp 0x10171be9
lea ecx, [ecx*4]
mov dx, cx
push edi
bsf ebp, edx
jo 0x10171b01
cmc
mov cl, 6
sub esp, 2
lea esp, [esp + 2]
jmp 0x10171b2a
mov ebx, 0x18f3ea64
mov ax, word [esp]
mov bx, word [esp]
sub esp, 0x12
jno 0x10171c2e
jo 0x10171c18
adc ebx, dword [edx + esi + reloc.KERNEL32.dll_ExitProcess]
jmp 0x39023482
sub esp, 0x15
mov ch, 0x2c
lea esp, [esp + 1]
jmp 0x10171bb0
lea esp, [esp + 2]
jmp 0x10171c32
lea esp, [esp + 2]
add esp, 0x10
jmp 0x10171c70
pop edi
jmp 0x10163990
mov ah, al
cmc
jmp 0x10171c7f
mov word [esp + 0x16], di
lea esp, [esp + 3]
push dword [esp + 0x20]
ret 0x24
jae 0x10171c3b
jb 0x10171c3b
jne 0x10171c4a
mov ah, al
cmc
jmp 0x10171c7f
sub ebp, 4
sub esp, 0x14
jno 0x10171fd9
pop bx
jmp 0x10171cc2
clc
mov bh, ah
lea eax, reloc.KERNEL32.dll_ExitProcess
mov bx, dx
call fcn.10171ce1
popfd
in al, dx
inc esi
lea esp, [esp + 2]
jmp 0x10171e05
mov bx, dx
jmp 0x10171cb9
clc
mov bh, ah
lea eax, reloc.KERNEL32.dll_ExitProcess
jmp 0x10171d06
lea esp, [esp + 2]
mov ecx, dword [esi]
bsr bx, dx
jne 0x10171cac
je 0x10171d69
mov ebx, dword [esp]
jmp 0x10171e20
lea ebx, [ecx + edx]
dec bh
mov bl, byte [esp]
jmp 0x10171e57
xor eax, 0x5906580f
mov ebx, dword [esp]
not ebx
lea ebx, [edi*4]
mov bh, dl
jmp 0x10171eb0
sub edx, eax
mov bh, byte [esp]
mov ah, al
add esi, 4
jmp 0x10171e94
bt ax, bp
jb 0x10171fa3
mov eax, dword [esp]
mov eax, dword [esp]
inc bl
setl bh
jmp 0x10171ec3
sub eax, 0x59124678
mov bx, bp
mov bl, 0x96
mov ebx, 0x7b4cc3ae
bswap ebx
jmp 0x10171e84
sub esp, 4
jmp 0x10171ee1
inc bl
setl bh
sub esp, 4
setg bl
not eax
lea esp, [esp + 4]
add ecx, 0x7caa2e30
jmp 0x10171f0c
lea ebx, [ebx*4]
call fcn.10171ef2
mov ax, di
mov eax, dword [esp]
lea esp, [esp + 4]
inc ecx
mov ebx, 0xba55f9e8
jmp 0x10171f57
mov ah, al
adc ax, bx
jmp 0x10171f7c
neg eax
jno 0x10171f41
mov ah, al
adc ax, bx
bswap eax
neg al
mov eax, 0xc5b6a25d
jmp 0x10171f8c
bswap eax
neg al
mov eax, 0xc5b6a25d
jmp 0x10171f8c
ror ecx, 0
push ebp
xchg word [esp + 1], ax
mov bx, 0x8236
lea esp, [esp + 3]
jmp 0x10171fae
mov eax, dword [esp]
mov eax, dword [esp]
jmp 0x10171ed9
neg ax
jb 0x10172016
lea esp, [esp + 1]
jmp 0x1017201a
push ax
mov eax, dword [esp]
lea esp, [esp + 2]
mov dword [ebp], ecx
neg bx
jmp 0x10171fe0
pop bx
jmp 0x10171e01
ja 0x10171ff6
bsf bx, dx
mov ecx, dword [esp]
jmp 0x10172035
bsf bx, dx
mov ecx, dword [esp]
setno bl
jmp 0x1017201f
lea esp, [esp + 1]
ror ecx, 0
jmp 0x10171fb9
bsf ax, di
jo 0x10172068
rol bx, 0xf
jmp 0x1017204b
setno bl
jmp 0x1017201f
lea eax, [esi*4]
jmp 0x10172073
rol bx, 0xf
lea eax, [esi*4]
lea ecx, [edi + 0x50]
dec bh
jo 0x101720a8
jno 0x10172084
add byte [edx], 0x90
test dword [edx], reloc.KERNEL32.dll_ExitProcess
and dword [esi + reloc.KERNEL32.dll_ExitProcess], eax
mov al, 0x21
xchg al, bl
sub esp, 7
jmp 0x10172091
lea esp, [esp + 3]
jmp 0x101720b3
mov al, 0x21
xchg al, bl
sub esp, 7
lea esp, [esp + 3]
cmp ebp, ecx
ja 0x10165249
dec cx
jmp 0x1017241f
bswap eax
neg ecx
jmp 0x10172235
bsf ax, si
pushal
mov eax, 0x5a0db069
jmp 0x10172115
jmp 0x101720e7
mov al, ch
lea eax, reloc.KERNEL32.dll_ExitProcess
jmp 0x10172166
push word [esp + 0x15]
lea esp, [esp + 2]
lea esp, [esp + 0x20]
stc
jmp 0x10172184
mov eax, ebx
setb al
mov ax, 0x60b0
sub ecx, ebx
jp 0x101720fd
bsf ax, si
pushal
mov eax, 0x5a0db069
push word [esp + 0x15]
lea esp, [esp + 2]
jmp 0x1017211e
pushfd
mov byte [esp + 1], bh
mov word [esp + 1], di
jmp 0x10172194
lea eax, [ebp - 0x80]
pushfd
mov dword [esp], eax
and al, 0xfc
jmp 0x10172150
je 0x101720ff
mov al, ch
lea eax, reloc.KERNEL32.dll_ExitProcess
jmp 0x10172166
sub eax, ecx
pushfd
mov dword [esp], edx
add esp, 2
jbe 0x101721da
lea esp, [esp + 2]
jmp 0x101721bf
lea ecx, [edi + 0x40]
jmp 0x1017212e
lea esp, [esp + 2]
mov esp, eax
pushfd
jmp 0x10172204
push ecx
jmp 0x101721dc
jmp 0x101721bb
mov esi, ebx
pushal
setb dl
mov dword [esp], eax
jmp 0x101721eb
sub esp, 0x1c
jge 0x1017220c
mov byte [esp + 0xf], cl
push dword [esp + 0x15]
lea esp, [esp + 0x20]
popal
jmp 0x1017221f
lea edi, [eax + ecx - 0x40]
push esi
push edi
jmp 0x101721c4
mov byte [esp + 0xf], cl
push dword [esp + 0x15]
jmp 0x1017221a
lea esp, [esp + 0x20]
popal
mov ecx, ecx
jmp 0x10172334
mov ebx, edi
mov eax, dword [esp]
inc cx
ja 0x101721b3
jbe 0x101721b3
jmp 0x101722f7
pop edi
pop esi
popfd
jmp fcn.101644a9
mov ecx, ebp
mov esi, dword [ecx]
push ecx
mov ecx, dword [esp + 1]
mov ecx, edx
jmp 0x1017229b
jmp 0x10172268
jmp 0x101722c7
mov bh, 0x11
add ebp, 4
xchg ch, bl
sub esp, 0x15
ja 0x10172282
pop cx
lea ecx, [edx - 0x26]
lea esp, [esp + 3]
jmp 0x10163990
push ss
invalid
pop cx
lea ecx, [edx - 0x26]
lea esp, [esp + 3]
jmp 0x10163990
sbb dl, dl
setne dh
jmp 0x10172353
movsb byte es:[edi], byte [esi]
xlatb
or dword ds:[edi - reloc.KERNEL32.dll_ExitProcess], eax
ret
xchg ebx, ecx
xchg bh, ah
mov eax, 0x8789cbc3
xor eax, eax
jp 0x10172280
jnp 0x10172280
bswap edx
mov ch, al
jmp 0x10172318
sub ebp, 4
xchg edx, ecx
neg eax
jae 0x101722e0
jb 0x101723c0
repne outsb dx, byte [esi]
cld
wait
jbe 0x101722f3
loopne 0x101722b2
adc esi, dword [esi - 0x7b]
xor al, 0xc6
cld
rep movsb byte es:[edi], byte [esi]
pop ecx
jmp 0x10172260
setae ah
bswap ecx
mov ax, word [esp]
seto ch
sub esp, 0x19
call fcn.10172397
jno 0x101723c3
mov edx, dword [esi - 4]
mov ax, 0xad3f
btr ecx, esi
jno 0x1017233d
jo 0x1017238c
seto ch
sub esp, 0x19
jmp 0x1017236d
bt ecx, edi
jmp 0x10172f22
mov ecx, edx
bswap eax
bts ax, ax
jo 0x10172b4e
jno 0x101728c2
daa
dec esi
invalid
setae ah
bswap ecx
mov ax, word [esp]
jmp 0x10172361
sbb dl, dl
setne dh
jmp 0x10172353
xchg ebp, eax
invalid
jge 0x101720c3
bswap eax
neg ecx
jmp 0x101720c7
stc
setg al
mov ax, 0xba26
jmp 0x10172446
jmp 0x1017242e
lea eax, [esi*4]
jmp 0x10172829
neg ax
jmp 0x10172b5d
mov al, ah
or eax, 0xa3dc59ba
lea esp, [esp + 1]
jmp 0x10172515
neg ax
jle 0x1017251e
mov eax, esp
or ah, ah
jmp 0x101725fd
inc ecx
mov ax, word [esp]
mov al, 0x38
jmp 0x101724fb
mov eax, esp
or ah, ah
jmp 0x101725fd
call 0x1017247a
mov ax, word [esp]
lea eax, [edx + edx]
lea eax, [ecx + ebp]
jmp 0x101725af
xchg ah, al
jmp 0x1017253e
call 0x10172558
push ebx
xchg word [esp + 1], cx
inc cx
jmp 0x10172592
sub esi, 4
not al
neg cx
ja 0x101725ba
add al, 0xf6
shl byte [esi - 9], 1
fnstenv [edi + 0x1e]
jbe 0x101725da
cmpsb byte [esi], byte es:[edi]
cmp ebp, dword [ebx - reloc.KERNEL32.dll_ExitProcess]
sbb al, 0xb2
aad 0x24
loop 0x10172594
or byte [ebx - 0x3e3e823e], ch
add byte [esi + 0xf], ah
mov esp, 0x7fb67ec5
mov ah, 0x8d
test ebx, eax
add byte [eax], al
add byte [esi + 0x51], ah
rol ecx, 0
bsf ax, bp
jle 0x1017256e
jg 0x1017256e
lea eax, [ebp + 0xc3]
push cx
lea esp, [esp + 2]
clc
pushal
jmp 0x101726e1
lea eax, [ebp + 0xc3]
push cx
lea esp, [esp + 2]
jmp 0x101727ba
xor ecx, 0x43448f39
bsf ax, sp
jg 0x10172554
xchg ah, al
mov ax, word [esp]
lea eax, [edx + edx]
lea eax, [ecx + ebp]
jmp 0x101725af
rol edx, 0
jp 0x101726ab
clc
jmp 0x1017265c
lea esp, [esp + 2]
jmp 0x1017261b
xchg cx, ax
call fcn.1017267e
cmc
jno 0x101726fb
jo 0x101726fb
retf 0xcc5e
bsr ax, dx
lea eax, [esi + 0x70]
mov eax, dword [esp]
jmp 0x10172637
clc
bsr ax, dx
lea eax, [esi + 0x70]
mov eax, dword [esp]
xchg cx, ax
bswap eax
jmp 0x1017263f
push word [esp + 5]
mov eax, ecx
btr cx, cx
jle 0x10172631
lea esp, [esp + 2]
jmp 0x1017261b
rol edx, 0
jne 0x10172721
je 0x1017272c
xchg dword [edi], ebx
invalid
mov ax, 0xaede
jmp 0x10172782
mov ax, 0xaede
mov ecx, dword [esp]
mov eax, ebp
jmp 0x10172787
lea eax, [eax*4]
add ch, ah
jmp 0x101727a2
lea eax, [esp + ebx]
mov ecx, dword [esp]
jmp 0x1017278c
mov ecx, dword [esp]
mov eax, ebp
rol edx, 0
jmp 0x10172757
lea esp, [esp + 0x20]
xor edx, 0x603f1fc
mov al, byte [esp]
jmp 0x101727fb
jp 0x10172766
lea eax, [esp + ebx]
mov ecx, dword [esp]
jmp 0x1017276c
clc
pushal
jmp 0x101726e1
rol edx, 0
mov ax, word [esp]
mov ch, ah
btc cx, cx
jmp 0x1017280e
jmp 0x101727c1
mov ecx, dword [esp]
mov dword [ebp], edx
call 0x101727e5
fmul dword [edi]
xor ebx, ebp
jb 0x10172827
mov edi, 0x5b94a2f
adc eax, 0x90610690
daa
lea ebx, [edi + ebp*2]
jbe 0x1017285b
mov al, byte [0x240c8b66]
mov cx, word [esp]
xchg al, ch
mov ax, 0x4958
cmp cx, 0xffe8
jno 0x101727d7
jo 0x101727d7
jbe 0x101727d9
mov ecx, dword [esp]
jmp 0x101727dc
xchg edi, eax
dec ecx
mov ah, 0xb3
mov eax, 0xbf3a7dde
sub esp, 1
jle 0x10172539
setns al
add esp, 0
jmp 0x101724d8
xchg edx, ecx
jmp fcn.10172845
xchg ah, al
mov eax, dword [esp]
lea eax, [ecx*4]
jmp 0x1017245c
xchg ah, al
mov eax, dword [esp]
lea eax, [ecx*4]
neg ax
inc ecx
not eax
shl eax, cl
jnp 0x10172444
stc
setg al
mov ax, 0xba26
lea eax, [esi*4]
jmp 0x10172829
pop dword [esp + 2]
lea esp, [esp + 1]
add edx, ebx
xchg ecx, eax
mov ch, 0x73
jmp 0x10172375