Function at 0xd00f31
Capabilities:
Execute anti-debugging instructions

Disassembly:
add eax, 0x88fed1ee
jmp 0xd010b6
ror edx, 7
jge 0xd00f4d
mov ax, word [esp]
add dh, 0x58
jmp 0xd00f37
bswap edx
xchg edx, eax
jmp 0xd00f17
ror cl, 0
rdtsc
setne al
bsr edx, edi
jmp 0xd00f85
mov ax, word [esp]
add dh, 0x58
jmp 0xd00f37
rdtsc
mov eax, ecx
jmp 0xd00f60
not dx
mov dh, bh
mov dx, bp
jmp 0xd01016
jns 0xd00f56
rdtsc
call 0xd00f8f
sub dword [ebp - reloc.mscoree.dll__CorExeMain], ecx
xlatb
jmp 0xd010a6
add byte [eax], al
push edx
retf 0x3f58
stc
clc
lea edx, [eax*4]
jmp 0xd01036
mov edx, dword [esp]
stc
clc
lea edx, [eax*4]
bsf dx, bx
mov esp, 0x11e8d3
add byte [eax], al
call fcn.00d01020
into
insb byte es:[edi], dx
loop 0xd00f98
je 0xd01008
stc
shl eax, 2
je 0xd00ffa
mov edx, dword [esp]
jmp 0xd00fe4
bsf dx, bx
jmp 0xd0100a
mov dword [esp], edi
jmp 0xd0108b
mov dx, 0x5b65
lea ecx, [ecx - 0x36]
ror dl, cl
bts dx, ax
ror edx, cl
call fcn.00d00fde
mov edx, dword [esp + 1]
jmp 0xd01043
mov eax, dword [eax + reloc.mscoree.dll__CorExeMain]
xor dl, 0xd8
jbe 0xd0125b
bsr dx, dx
clc
jmp 0xd010cc
dec edx
not edx
xchg dword [esp], ecx
sub esp, 0
inc dl
mov edx, dword [esp]
jmp 0xd01059
not dx
mov dx, 0xb623
dec edx
js 0xd011a1
jns 0xd01102
xchg byte [ecx], dh
xor byte [ebx], dh
sub al, byte [ebp + 0xf]
xchg esi, eax
invalid
setbe dh
jmp 0xcff8a6
clc
setbe dh
jmp 0xcff8a6
push eax
ret
mov dx, word [esp]
jmp 0xd011a5
jae 0xd010ec
jb 0xd010ec
mov dx, sp
bsr dx, dx
dec edx
lea eax, [edx - 0xa0]
bswap edx
jmp 0xd01176
mov al, bh
mov ax, bp
xchg dx, ax
mov dh, al
setnp ah
bsr edx, ecx
jmp 0xd011fb
rdtsc
rdtsc
add cl, 0xc0
mov ax, sp
mov al, 0x78
jmp 0xd01160
not cl
xchg dl, ah
bsf edx, esp
jne 0xd011c8
dec ax
dec eax
stc
xchg dx, ax
jmp 0xd011e3
mov dx, word [esp]
mov esp, esi
xchg dl, dh
mov edx, esi
or edx, eax
jmp 0xd01121
dec ax
dec eax
stc
jmp 0xd011e0
jmp 0xd011b2
push bx
mov dx, 0xf8dd
mov edx, 0xd94a20bf
sub esp, 0x10
jmp 0xd01235
xchg dx, ax
not cl
rdtsc
btr dx, ax
jmp 0xd01215
ja 0xd01184
jbe 0xd01184
mov edx, 0xd94a20bf
sub esp, 0x10
lea esp, [esp + 2]
jmp 0xd01239
jge 0xd011ca
push bx
mov dx, 0xf8dd
jmp 0xd011ff
lea esp, [esp + 2]
lea esp, [esp + 0x10]
neg cl
call fcn.00d0121f
sub esp, 8
jne 0xd012b3
push dword [esp + 0xa]
not dl
jmp 0xd0127e
bsr dx, dx
jmp 0xd010e3
jmp 0xd01297
lea esp, [esp + 2]
jmp 0xd012f1
lea esp, [esp + 0x10]
xor cl, 0x45
setne dl
sub esp, 6
jno 0xd01264
btc ax, cx
jmp 0xd01266
btc ax, cx
lea esp, [esp + 2]
jmp 0xd012f1
push dword [esp + 0xa]
not dl
jmp 0xd0127e
xchg byte [esp], dh
jmp 0xd01312
sub ebp, 4
push ecx
push word [esp]
jno 0xd012bb
xchg byte [esp], dh
pop eax
lea esp, [esp + 2]
jmp 0xd01317
and ecx, 0x3c
mov ah, 0xbf
xchg ah, dl
rdtsc
jmp 0xd012d1
bswap eax
mov cl, byte [esp]
lea eax, [edx + edi]
lea eax, reloc.mscoree.dll__CorExeMain
jmp 0xd0131c
pop eax
lea esp, [esp + 2]
mov edx, dword [ecx + esi]
jmp 0xd012fc
mov dword [ebp], edx
neg cx
jl 0xd01672
push dx
inc eax
jmp 0xd01355
not dh
bswap ecx
sub esp, 6
jmp 0xd013fe
mov word [esp], bp
lea esp, [esp + 2]
jmp 0xd0133e
cmp ebp, edx
jmp 0xd01a64
setnp al
mov ah, 0x6a
cmc
js 0xd01379
jns 0xd01379
js 0xd01498
lea esp, [esp + 2]
jmp 0xd0149c
lea esp, [esp + 2]
lea edx, [esi + 0x50]
lea eax, [edi + ebp]
jmp 0xd013c7
inc eax
mov word [esp], bp
lea esp, [esp + 2]
jmp 0xd0133e
push dx
jmp 0xd014e1
mov dword [esp + 0x28], eax
jmp 0xd054a1
ja fcn.00d01363
mov ecx, edi
mov cl, byte [esp]
bsr dx, ax
jmp 0xd01a92
setae dh
cmc
jmp 0xd01aa0
jbe 0xd01ac0
ja 0xd01ac0
setae dh
cmc
jmp 0xd01aa0
lea edx, [esi + 0x40]
clc
jmp 0xd01b35
neg ax
adc eax, esp
jmp 0xd01ae5
mov ecx, esi
btc ax, sp
jae 0xd01a7c
jb 0xd01a96
lea eax, [ebp - 0x80]
stc
jae 0xd01b09
sub esp, 6
lea esp, [esp + 2]
jmp 0xd01b0e
sub edx, ecx
push esi
push esp
lea esp, [esp + 1]
lea esp, [esp + 3]
jmp 0xd01aca
lea esp, [esp + 2]
jmp 0xd01b0e
sub esp, 6
jmp 0xd01af3
and al, 0xfc
call 0xd01b17
mov cs, word [bx + si + 0x2444]
add al, byte [ebx + 0x387001c4]
jno 0xd01b42
call 0xd01b27
jmp 0xd055b4
jnp 0xd01aaa
neg ax
adc eax, esp
jmp 0xd01ae5
lea esp, [esp + 3]
call fcn.00d01bb6
call 0xd01b50
jmp 0xd05454
call 0xd01b68
jmp 0xd05550
lea ecx, [edx + esi]
mov ecx, dword [esp]
lea esp, [esp + 4]
jmp 0xd05475
sub ecx, 0x10014f88
jmp 0xd054e6
popal
popfd
jmp 0xd054bc
lea esp, [esp + 4]
ret
cmp ebx, 0x6a81bb05
je 0xd05525
jne 0xd0194c
push 0
jmp 0xd054f7
mov dword [ecx + reloc.mscoree.dll__CorExeMain], eax
movzx ebx, byte [eax]
add ebx, 0x6a81ba39
jmp 0xd054c1
pushfd
jmp 0xd05569
inc dword [esp + 8]
popfd
ret 4
sal byte [ebx], 0xf5
mov esi, 0x32c7a032
xor byte [ebx + 0xbe8], 0
call 0xd0553f
dec ebp
push ebx
push esi
inc ebx
push edx
push esp
insb byte es:[edi], dx
insb byte es:[edi], dx
add bh, bh
nop
pop ebp
or byte [eax - 0x17], 0x43
invalid
pushal
jmp 0xd01b63
pop eax
sub eax, 0x99eb3c44
jmp 0xd05588
cmp dword [esp + 4], 0
jne 0xd0550d
jmp 0xd0554a
call 0xd05598
dec ebp
push ebx
push esi
inc ebx
push edx
push esp
insb byte es:[edi], dx
insb byte es:[edi], dx
add bh, bh
nop
or eax, 0xe999e98f
inc ebx
invalid
pop eax
sub eax, 0x204e2d53
jmp 0xd0552f