Function at 0xd991ce
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x10b79ed
jmp 0xed7816
rdtsc
jmp 0xed7877
jmp 0x13431fe
add ecx, 1
jmp 0xf41ae2
adc edx, 0
jmp 0x114768c
adc ebx, edx
jmp 0x10430ea
push dword [ebp - 0x10]
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
jmp 0xf87e7f
pop esp
jmp 0xf87f97
jmp 0x10b78a8
jmp 0xf8869f
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
mov dword [esp], edx
pop dword [ebp - 8]
jmp 0xf8878a
push 0x5ddc9486
mov dword [esp], esi
mov esi, esp
add esi, 4
jmp 0xf8868a
jmp 0x1252c33
push esp
mov ebp, dword [esp]
push edx
push esp
pop edx
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp 0xfb689f
jmp 0x1342fbb
jmp 0xfb6f31
xor edx, esi
xor esi, edx
xor edx, esi
xor esi, ebp
xor ebp, esi
xor esi, ebp
not ebp
xor esi, ebp
xor ebp, esi
xor esi, ebp
xchg edx, esi
jmp 0xfb6f4c
jmp 0xf41ada
jmp 0x1043029
add esp, 4
jmp 0x10430e5
push edi
mov dword [esp], ebx
mov dword [esp], esi
mov dword [esp], 0
mov eax, dword [esp]
jmp 0x104301e
jmp 0x1342e78
push 0x5912450c
mov dword [esp], ebx
mov ebx, esp
push edi
mov edi, 0x57b1ce86
xor edi, 0x57b1ce82
add ebx, edi
jmp 0x1043107
pop edi
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0x1043221
jmp 0x1047056
jmp 0x104715b
push dword [esp]
mov edx, dword [esp]
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0x104717e
jmp 0x12aa9a4
leave
jmp 0x104873b
jmp 0x121b48d
jmp 0x10b6a11
push eax
mov dword [esp], edx
mov dword [esp], ebp
mov dword [esp], 0x49428773
mov dword [esp], esi
mov dword [esp], ebx
jmp 0x10b6ad9
jmp 0x1292f72
jmp 0x10b79b4
push ecx
xchg dword [esp], ebx
xor ebx, edx
xor edx, ebx
xor ebx, edx
not edx
xchg ebx, edx
xchg dword [esp], ebx
mov ecx, dword [esp]
add esp, 4
jmp 0x10b79d3
jmp 0xfb6e3e
jmp 0x10b7a99
sub esp, 4
mov dword [esp], esi
mov esi, esp
push eax
push 4
jmp 0x10b7aaf
pop eax
add esi, eax
pop eax
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebp
jmp 0x10b7b1f
jmp 0xfb6779
jmp 0x11079a8
push ecx
sub esp, 4
mov dword [esp], ebx
push 0
pop ebx
mov dword [esp + 4], ebx
pop ebx
pop eax
jmp 0x1107a24
jmp 0x1294b72
add eax, ecx
jmp 0xf47816
jmp 0x1148d99
push ebx
push ecx
push ebx
mov dword [esp], 0
pop ecx
mov dword [esp + 4], ecx
pop ecx
pop eax
jmp 0x1148e46
jmp 0x121ae47
jmp 0x11ac573
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x11ac58d
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edi
mov dword [esp], edx
mov edx, esp
add edx, 4
jmp 0x11ac564
jmp 0x13430db
push dword [ebp - 0x14]
push dword [esp]
pop ecx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x12175cd
jmp 0xf87e5b
cpuid
jmp 0x12195d4
jmp 0x11078e1
jmp 0x121aef0
cpuid
jmp 0x121af59
jmp 0x1042fc5
jmp 0x121b551
ret
push 0x4203983f
mov dword [esp], edi
mov dword [esp], ebx
mov dword [esp], eax
pop dword [ebp - 0xc]
jmp 0x12284fa
jmp 0xf88685
jmp 0x1245b74
inc ebx
js 0x1245b45
jmp 0x1245b6b
add ebx, 0x4406f1fc
add edx, 0x77f83b7e
add edx, ebx
sub edx, 0x77f83b7e
pop ebx
sub edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
jmp 0x1245b6b
pop esp
mov dword [esp], edx
jmp 0x1245b8e
push edx
mov edx, esp
push ebx
mov ebx, 0x2bf7567f
sub ebx, 0x6ffe4878
ja 0x1245b74
jmp 0x1245b39
jmp 0xed776c
jmp 0x1252ccd
push dword [ebp - 0xc]
push dword [esp]
pop eax
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x1252d2d
jmp 0x1379d27
jmp 0x129307b
push eax
push esp
pop eax
add eax, 4
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], esi
mov dword [esp], ecx
jmp 0x129309d
jmp 0x1245a24
jmp 0x1294c8b
cpuid
jmp 0x1294c92
jmp 0x1148d3d
jmp 0x12aaa41
mov ecx, dword [esp]
push 0x7aa42d20
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
mov eax, dword [esp]
add esp, 4
pop dword [esp]
pop esp
jmp 0x12aaac4
jmp 0x11ac46e
jmp 0x12acfd1
sub esp, 4
mov dword [esp], edi
mov dword [esp], ebp
mov dword [esp], 0x7061a797
jmp 0x12ad046
mov dword [esp], edx
pop dword [ebp - 0x10]
jmp 0x12ad051
jmp 0x12e418a
jmp 0x12e42b3
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp 0x12e42cc
push ecx
mov dword [esp], 0
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
jmp 0x12e418f
jmp 0x12194d3
jmp 0x1342f69
cpuid
jmp 0x1342f70
jmp 0x14042e9
jmp 0x1343010
push edx
mov edx, esp
add edx, 4
push edx
mov dword [esp], esi
mov dword [esp], ebx
mov ebx, 0x14
sub edx, ebx
pop ebx
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x13430d6
jmp 0x10b69b5
jmp 0x13431df
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x13431f3
push dword [ebp - 4]
mov eax, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
jmp 0x134316b
jmp 0x1048637
jmp 0x13432a0
push 0x4e157a7
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edi
mov dword [esp], eax
pop dword [ebp - 0x14]
jmp 0x134331c
jmp 0x12acf13
jmp 0x1379d87
push dword [ebp - 8]
push dword [esp]
pop ebx
push ecx
mov ecx, esp
add ecx, 4
push ebx
mov ebx, 0x7bff8a79
sub ebx, 0x7bff8a75
add ecx, ebx
pop ebx
xchg dword [esp], ecx
pop esp
jmp 0x1379e47
jmp 0x12174a9
jmp 0x14043e8
rdtsc
jmp 0x14043ef
jmp 0x12283f5