Function at 0x11e47ee
Capabilities:
Execute anti-debugging instructions

Disassembly:
push 0xf11ce8ec
jmp 0x11e48c3
call 0x11e47d8
call fcn.011e4838
leave
inc ecx
sal dword [eax + reloc.WINMM.dll_midiStreamOut], 1
nop
test dword [edx], reloc.WINMM.dll_midiStreamOut
xor al, cl
jns 0x11e4805
invalid
aad 0x44
mov dword [esp + 0x38], edx
pushfd
mov dword [esp + 0x38], ebx
call fcn.011e47ee
mov dword [esp + 0x40], esp
push di
mov byte [esp], bh
push word [esp + 1]
js 0x11e483e
jns 0x11e4848
cld
jnp 0x11e481b
invalid
mov byte [esp + 2], bh
jmp 0x11e488c
mov byte [esp + 2], bh
mov dword [esp + 0x40], ebp
push esi
push dword [esp + 2]
push di
jmp 0x11e4878
push di
push cx
mov dword [esp + 0x48], esi
pushfd
push dword [esp + 3]
jmp 0x11e48b2
mov dword [esp + 0x40], ebp
push esi
push dword [esp + 2]
jmp 0x11e4876
mov byte [esp + 2], bl
mov dword [esp + 0x48], edi
lea esp, [esp + 0x48]
jmp 0x11e48f7
jae 0x11e48e4
mov byte [esp + 5], cl
pop dword [esp]
jmp 0x11e4897
pushfd
jmp 0x11e33e0
lea eax, [ecx + 0x8b]
xchg ecx, edx
xchg bx, di
mov ebp, dword [esp + 0x2c]
jmp 0x11e48f9
mov byte [esp + 5], cl
pop dword [esp]
mov byte [esp + 2], bl
mov dword [esp + 0x48], edi
lea esp, [esp + 0x48]
jmp 0x11e48bd
rcl si, cl
jb 0x11e4d5b
mov si, word [esp]
mov al, 0x2a
jmp 0x11e4d10
lea esi, [esp + edx]
jmp 0x11e4d2b
lea esi, [esp + edx]
lea edi, [esp]
mov bh, dh
neg esi
jmp 0x11e4f66
cpuid
cpuid
jmp 0x11e4e90
jmp 0x11e4e0d
mov si, word [esp]
mov al, 0x2a
jmp 0x11e4d28
mov byte [esp + 5], bh
pop word [esp + 2]
lea esp, [esp + 1]
jmp fcn.011e4d79
sub esp, 0xc0
mov esi, esp
mov dl, cl
sub esp, 7
jo 0x11e4d41
mov byte [esp + 5], bh
pop word [esp + 2]
lea esp, [esp + 1]
jmp fcn.011e4d79
jb 0x11e4d38
cpuid
cpuid
jmp 0x11e4d3c

Function at 0x12322b7
Capabilities:
Check for peb beingdebugged flag

Disassembly:
xor al, dl
jmp 0x12322ee
lea esp, [esp + 0x30]
mov byte [ecx], al
pushal
stc
push word [esp + 4]
call fcn.01232316
mov ebx, 0x29c0d92
rol byte [ebx - 0x137cf714], 1
adc ecx, dword [eax - reloc.WINMM.dll_midiStreamOut]
and al, 3
add dl, al
sub esp, 8
sub esp, 0x13
mov byte [esp + 4], bh
lea esp, [esp + 3]
jmp 0x12322d8

Function at 0x12be246
Capabilities:
Execute anti-debugging instructions

Disassembly:
push word [esp + 3]
lea eax, [edx + ebp]
jmp 0x12be29f
sub esp, 0xa
mov edi, 0x4c18e1b8
mov al, byte [esp + 0x32]
mov ebx, dword [esp + 0xb]
xchg di, dx
add esp, 6
jmp 0x12be289

Function at 0x12be3b1
Capabilities:
Execute anti-debugging instructions

Disassembly:
sete dh
xchg word [esp + 2], bp
cpuid
rdtsc
jmp 0x12be3fa
mov ah, 0xf2
rdtsc
push word [esp + 0xc]
bswap esi

Function at 0x12be5d0
Capabilities:
Execute anti-debugging instructions

Disassembly:
lea esp, [esp + 0x43]
bsr ebx, edx
lea esi, [edx + 0xc3]
bswap ebp
mov edi, 0x5de637e2
rol dx, 2
jmp 0x12be5e8
jmp 0x12be5a6
btr ax, ax
mov bl, cl
rdtsc
mov bp, word [esp]
mov ah, 0x3c
std
jmp 0x12be612
rcl ecx, cl
mov cl, byte [esp]
btc ebx, eax
lea eax, [ebx*4]
cpuid
stc
jmp 0x12be5d2
lea ecx, [esi*4]
rdtsc
lea ebp, [ebp*4]
jmp 0x12be65c
xor si, bp
bswap ebx
mov ecx, 0xe8ae398
mov ah, 0x6c
mov edi, dword [esp]
rdtsc
jmp 0x12be5fc
sub al, 0xe4
mov bx, 0xb931
dec edi
inc edx
mov cx, word [esp]
sub esp, 0xc
jmp 0x12be646