Function at 0xd1deb2
Capabilities:
Execute anti-debugging instructions

Disassembly:
lea ebp, [edx + edx]
mov eax, dword [esp + 0xf]
std
jmp 0xd1ddf4
mov al, dl
mov dx, di
mov dx, 0x72c2
mov dl, byte [esp + 2]
clc
bsr ax, bp
call fcn.00d1dd7b
pop dword [esp]
mov dword [esp + 0x14], edi
xchg dword [esp + 0xc], ebp
pop dx
jmp 0xd1dddd
lea ebp, [eax*4]
push dword [esp + 3]
pop eax
mov byte [esp + 2], bh
jmp 0xd1e22d
xchg dword [esp + 0xc], ebp
not ax
mov ebp, dword [esp + 9]
not dh
xchg dx, ax
rdtsc
jmp 0xd1dd98
bt dx, bp
bswap eax
not eax
not bp
sub esp, 0x14
jmp 0xd1de49
xchg dword [esp + 0x32], ebp
xchg bp, dx
mov ax, si
sub esp, 0x17
lea esp, [esp + 0x51]
not dl
jmp 0xd1de08
rdtsc
call 0xd1deb2
pop ecx
jecxz 0xd1deb0
push ss
in eax, 0x52
mov eax, dword [reloc.MSVCRT.dll_malloc]
lahf
rcl dword [eax - 0x2d]
lea edx, [eax*4]
mov dl, 0x1f
mov ah, byte [esp + 0xe]
sete dh
setnp dh
mov word [esp], si
jmp 0xd1de33
lea edx, [esi + esi]
lea edx, reloc.MSVCRT.dll_malloc
pop eax
btc ax, bx
add esp, 5
pushal
jmp 0xd1de1e
mov dh, 0xbe
mov dh, bl
xchg edx, eax
pushfd
mov ax, 0x7da1
std
jmp 0xd1ded8
mov dx, ax
mov dh, byte [esp + 0x1b]
mov ax, word [esp + 4]
rdtsc
cmc
jmp 0xd1de85
mov dh, 0xa1
push dword [esp + 0xc]
bt ebp, edi
mov bp, 0xbcf9
xchg ebp, edx
cld
jmp 0xd1de9b
mov ax, word [esp + 0x13]
mov dl, 0x1a
lea eax, [eax + edi]
push dword [esp + 0xf]
pop eax
jmp 0xd1df06
pop word [esp + 0x13]
bswap ebp
push edi
mov dx, word [esp + 0x10]
xchg al, dh
lea eax, [ecx*4]
jmp 0xd1dec2
mov byte [esp + 2], dh
not al
btr ebp, edx
stc
add esp, 0x19
bswap eax
jmp 0xd1df56
bsr dx, dx
rdtsc
clc
bsf ax, ax
mov al, byte [esp + 0x1f]
mov ebp, dword [esp + 0x21]
jmp 0xd1def0
xchg al, ah
push word [esp + 0xf]
not ebp
bswap eax
pop word [esp + 0xe]
jmp 0xd1df80
mov dword [esp + 0x1c], ecx
lea esp, [esp + 0x10]
mov dx, word [esp + 1]
pop dx
rdtsc
push word [esp + 0x11]
jmp 0xd1df1b
lea ebp, [ebx + ebp]
mov dh, 0x4d
mov word [esp + 3], bp
xchg dx, ax
add esp, 0
sub esp, 0x1b
jmp 0xd1df31
mov dx, ax
mov eax, esi
mov dword [esp + 2], esp
rol dx, cl
pop dword [esp + 5]
jmp 0xd1df92
pop word [esp + 2]
mov bp, di
pop edx
inc ah
rdtsc
setns ah
jmp 0xd1df6a
mov al, dh
lea esp, [esp + 3]
mov word [esp + 1], si
sub esp, 0x16
not ebp
xchg word [esp + 0x14], bp
jmp 0xd1e099
mov bp, word [esp + 8]
sub esp, 5
mov dx, word [esp + 8]
pop word [esp + 0x1e]
mov ebp, dword [esp + 7]
xchg edx, eax
jmp 0xd1de71
and dx, 0x1bef
mov al, bh
xchg dx, ax
mov ax, 0x416e
jmp 0xd1e069
xchg ebp, eax
not ax
rol bp, 6
pop eax
sub esp, 0x12
mov dx, word [esp + 0x26]
jmp 0xd1dfda
xchg word [esp + 1], ax
call fcn.00d1e004
lea eax, [edx + edi]
cmc
mov ebp, dword [esp]
xchg byte [esp], ah
xchg byte [esp], al
bswap edx
jmp 0xd1e052
mov word [esp], bx
mov ax, word [esp]
sbb bp, 0xab5d
jmp 0xd1e079
mov ebp, dword [esp + 1]
pop ebp
xchg dl, dh
add esp, 0x1d
pop edx
mov bp, bx
jmp 0xd1e01a
lea ebp, reloc.MSVCRT.dll_malloc
rcr edx, cl
neg edx
lea edx, [ebx + ebp]
mov dx, word [esp]
mov bp, 0x6cdc
jmp 0xd1e151
cld
pop word [esp + 5]
bswap edx
bswap eax
bsr dx, bx
mov bp, 0xaa97
jmp 0xd1dff0
xchg dl, al
rdtsc
stc
rcl al, cl
lea esp, [esp + 1]
xchg byte [esp], dl
jmp 0xd1e11d
xchg byte [esp], dl
mov edx, 0x7312f24e
lea edx, [ecx - 8]
mov word [esp], di
lea edx, [ebx + esi]
mov ax, 0x7e61
jmp 0xd1e0b0
mov dh, cl
bswap eax
cld
neg ax
pushfd
setb dl
jmp 0xd1e105
rdtsc
setg al
mov dx, bp
xchg ah, dh
setne dl
bswap edx
jmp 0xd1e0de
setp ah
mov dh, byte [esp + 4]
mov ah, 0x9c
sub esp, 0xe
xchg dword [esp + 0xb], edx
jmp 0xd1e12d
xchg edx, eax
rdtsc
mov ebp, dword [esp]
lea esp, [esp]
mov bp, cx
std
jmp 0xd1e0f4
lea eax, [edi*4]
mov eax, ebp
xchg word [esp + 0xa], dx
not ah
xchg byte [esp], ah
mov bp, si
jmp 0xd1e186
bswap ebp
lea edx, reloc.MSVCRT.dll_malloc
setg dh
lea eax, [ebx*4]
mov dh, byte [esp + 1]
bsf ebp, edi
jmp 0xd1e0c6
mov dx, 0x10bf
mov al, byte [esp + 0xb]
rdtsc
bt eax, esi
jmp 0xd1e1d7
neg ax
pop eax
mov eax, dword [esp + 0xe]
xchg ebp, eax
mov dh, bl
mov dword [esp + 3], esi
jmp 0xd1e170
xchg dword [esp + 0xa], eax
sub esp, 0xc
lea eax, [edx*4]
add esp, 7
call fcn.00d1e1ae
mov edx, dword [esp + 0x24]
mov ebp, dword [esp]
std
neg ax
lea ebp, [ebp + ebp]
jmp 0xd1e2a4
mov ah, byte [esp + 0x1d]
mov dh, byte [esp + 0xf]
xchg edx, eax
xchg dword [esp + 8], ebp
bt dx, ax
xchg dword [esp + 0xd], edx
jmp 0xd1dfbd
mov eax, dword [esp + 0x33]
lea esp, [esp + 0x48]
popfd
jmp 0xd1e6e9
inc ah
lea eax, [esi + edi]
btr ax, di
lea eax, [esi*4]
mov ah, byte [esp]
bswap eax
jmp 0xd1e248
btr ebp, ebp
mov bp, 0xdd3b
shl ax, 6
mov ebp, dword [esp + 0x29]
setle ah
mov eax, 0x8e944d84
jmp 0xd1e25e
lea esp, [esp + 0x4d]
push si
call fcn.00d1e72b
call fcn.00c7b9bc
ret 4
pop word [esp + 0xc]
mov dword [esp + 0x1f], ebx
push word [esp + 0x2a]
mov word [esp + 8], cx
mov dword [esp + 0x1f], esp
pushal
jmp 0xd1e669
push 0x533d5caa
add dword [esp], reloc.MSVCRT.dll_malloc
call 0xd1e6ba
pop dword [esp + 8]
push dword [esp + 9]
pushal
mov dword [esp + 0x2a], esi
jmp 0xd1e755
push dword [esp + 1]
lea esp, [esp + 0x24]
lea esp, [esp]
mov word [esp], bp
jmp 0xd1e7af
pop dword [esp + 2]
push dword [esp + 4]
push dword [esp + 3]
push word [esp + 0x1b]
lea esp, [esp + 0x13]
pop dword [esp + 0x1b]
jmp 0xd1e73f
pop dword [esp + 0x15]
push ebp
mov dword [esp + 0x16], esi
pop dword [esp + 0xd]
mov byte [esp + 0x11], dh
mov word [esp + 0xf], sp
jmp 0xd1e68a
mov byte [esp], al
call fcn.00d1e799
mov esp, 0x43c43552
add byte [ecx + 0xe8b7819], cl
test al, 0xcb
bound ebx, qword [ebp + 0x24048fec]
pop dword [esp]
push word [esp + 1]
jmp 0xd1e77e