Function at 0x8fbbd8
Capabilities:
Execute anti-debugging instructions

Disassembly:
sub esp, 0x1f
not bh
lea eax, [ecx*4]
xchg word [esp + 0xc], bx
push sp
jmp 0x8fbc1d
mov word [esp + 3], bx
mov esi, esp
mov bl, byte [esp + 0xd]
mov dl, bh
clc
jmp 0x8fbc6c
bsf dx, di
xchg dword [esp + 5], edx
std
rdtsc
neg ch
mov al, byte [esp + 0x29]
jmp 0x8fbc07
mov dh, byte [esp + 0xb]
mov bx, sp
mov esi, 0xc645e70a
lea esp, [esp + 0x15]
push ebp
pop cx
jmp 0x8fbc83
mov si, di
neg eax
mov bl, bh
bsr di, ax
setns cl
lea ecx, [edi*4]
jmp 0x8fbc4f
mov byte [esp + 0xf], dh
xchg ecx, ebp
mov si, 0xfa14
neg ah
std
lea esp, [esp + 4]
jmp 0x8fbcff
inc cl
mov ch, 0xd1
setle bh
xchg di, bp
bsf bx, bp
cmc
jmp 0x8fbccf
bsf cx, bp
push bp
mov ecx, 0x2c5c96fe
rdtsc
cpuid
jmp 0x8fbd38
lea esi, [eax*4]
rdtsc
bsr cx, si
mov si, 0x8378
mov di, word [esp + 1]
and ebp, 0x6aaaef28
jmp 0x8fbcb9
xchg dword [esp + 0x13], edx
lea eax, reloc.iphlpapi.dll_GetAdaptersInfo
add esp, 0x15
pop si
dec bh
pop ecx
jmp 0x8fbc96
xchg bh, ch
push word [esp + 1]
rdtsc
rcr ebx, 0x18
mov byte [esp + 1], al
xchg dword [esp], esi
jmp 0x8fbd66
mov dl, byte [esp + 1]
add esp, 2
mov edi, 0x387a9f95
lea ebx, [esi + edi]
rdtsc
mov ax, word [esp + 1]
jmp 0x8fbd13
inc edi
mov di, word [esp]
lea esp, [esp]
mov si, 0x7acd
or esi, ebx
jmp 0x8fbd93
setae cl
pop word [esp]
xchg word [esp], di
add esp, 2
mov ax, word [esp]
setge bl
jmp 0x8fbd50
mov ax, dx
mov ebx, edi
or eax, ebx
dec si
push cx
mov dl, cl
jmp 0x8fbdc3
mov bl, 0x67
mov byte [esp], dl
btc bp, di
lea edx, [ecx*4]
sub eax, 0x657c867b
lea eax, [edi + ebp]
jmp 0x8fbd7d
mov al, byte [esp + 3]
xchg ebp, ebx
neg edx
cpuid
pop bp
push dword [esp + 3]
jmp 0x8fbf48
sub esp, 0x12
ror ax, cl
mov eax, 0xe0374537
xchg bl, bh
lea edx, [edi*4]
mov edx, dword [esp + 0xb]
jmp 0x8fbdad
pop dword [esp + 0x17]
add edi, ebp
add esp, 0x17
mov esi, 0x8c7dc486
jmp 0x8fbe2c
neg ax
setl al
pop bp
mov bp, ax
mov ebx, esp
neg bl
jmp 0x8fbe05
mov ecx, dword [esp + 2]
rcl al, cl
pop word [esp + 2]
or ebp, 0xec559138
lea esi, [ebx*4]
mov dl, 0x86
jmp 0x8fbe81
mov di, ax
mov eax, ebx
mov eax, 0xcc5e8bcb
or bl, 0xac
bt di, cx
shl ch, 4
jmp 0x8fbe1b
mov bx, dx
bsr eax, esi
pop ax
pop dword [esp + 1]
rdtsc
jmp 0x8fbef3
bswap edi
sub esp, 0x12
mov dx, sp
lea ecx, [edx + ebx]
xchg cl, ah
lea ecx, [edx + esi]
jmp 0x8fbe6b
std
mov ebp, esi
dec ch
bsf eax, edi
sub esp, 0xf
mov ebx, dword [esp + 0x22]
jmp 0x8fbe55
push dword [esp + 9]
pop si
xchg edx, edi
push word [esp + 1]
pushal
cpuid
jmp 0x8fbed9
and edi, 0x943d2c82
pop eax
not ebp
dec ebx
mov cl, 0x32
bswap ecx
jmp 0x8fbeb3
xchg dh, bh
mov edi, dword [esp + 0x21]
push ecx
mov di, ax
cmc
xchg byte [esp + 0x16], bl
jmp 0x8fbf1f
bsf edx, ebp
stc
lea eax, [edi*4]
neg bx
cpuid
mov edi, dword [esp + 7]
jmp 0x8fbec9
mov ch, dh
cpuid
sub esp, 0x18
cpuid
push dword [esp + 0x2c]
mov dx, bx
jmp 0x8fbf2e
mov si, 0x4a0e
inc ecx
bswap ebp
push dword [esp + 0x18]
popal
cld
jmp 0x8fbf09
xchg dword [esp + 0x2f], eax
pop word [esp + 0x29]
call fcn.008fbfcc
ror dword [ecx - 0x27], 0xb8
dec ebx
stosd dword es:[edi], eax
push 0xac5d228b
mov edi, 0x724448f
pop dword [esp + 7]
push word [esp + 0x10]
mov al, byte [esp + 0xc]
rdtsc
xchg dx, ax
rcr edi, cl
jmp 0x8fbea2