Function at 0x1dbda6b
Capabilities:
Execute anti-debugging instructions

Disassembly:
add edx, 0x451aeaf8
jmp 0x1dbdfa1
add edx, 0xed58d766
jmp 0x1dbe021
shr edx, cl
jb 0x1dbdaa6
rdtsc
bswap eax
pop dx
lea esp, [esp + 2]
jmp 0x1dbda89
jmp 0x1dbda51
mov ax, di
mov ah, 0x1f
neg al
jp 0x1dbda8e
jnp 0x1dbda8e
xor al, 0xa8
pop ecx
test al, 0x17
inc ebp
hlt
pop dx
lea esp, [esp + 2]
xor cl, 0xdd
jmp 0x1dbda6d
and ecx, 0x3c
jmp 0x1dbdac7
rdtsc
bswap eax
jmp 0x1dbda83
setle dh
jmp 0x1dbdaee
mov edx, dword [ecx + edi]
mov al, 0x33
lea eax, reloc.hipo.dll_hipoInitConfig
mov cx, 0x9ca8
jmp 0x1dbdad4
sets al
push esp
sub dl, ah
js 0x1dbdaac
setle dh
jmp 0x1dbdaee
bts ax, bp
js 0x1dbdf2d
jns 0x1dbdf2d
add byte [edi], 0x97
add dword [edx + reloc.hipo.dll_hipoInitConfig], edi
sub esi, 4
xchg dx, ax
mov dh, bh
jmp 0x1dbdab1
lea esp, [esp + 3]
call fcn.01dbe410
popfd
or byte [esi + 0x3dcd08f9], bl
movsd dword es:[edi], dword [esi]
xor eax, 0x541caf5c
clc
btr dx, sp
mov dh, byte [esp]
jmp 0x1dbdd19
ror al, 0
btr dx, di
jg 0x1dbdd6b
bswap edx
mov dx, 0xc51c
jmp 0x1dbdd86
pushfd
lea esp, [esp + 1]
jmp 0x1dbdcce
mov dx, 0xc51c
neg dx
mov dh, byte [esp]
jmp 0x1dbdd6f
bswap edx
jmp 0x1dbdd55
sub al, 0x56
mov edx, 0xff41f1f2
mov edx, dword [esp]
sub esp, 2
jmp 0x1dbde4f
neg dx
mov dh, byte [esp]
jmp 0x1dbdd6f
mov dx, word [esp + 1]
mov dx, word [esp]
add esp, 0
jmp 0x1dbddf0
add esp, 0
mov word [esp], sp
lea esp, [esp + 2]
jmp 0x1dbddf8
inc edx
jae 0x1dbdd4b
pushfd
lea esp, [esp + 1]
lea esp, [esp + 3]
call fcn.01dbe2d9
add al, 0xf
popfd
les ecx, [edi]
mov esp, 0xb73febd4
sahf
jmp 0x1dc860e2
setge ah
bsf edx, esp
jmp 0x1dbde12
sub esp, 0x1b
xchg dword [esp + 0xd], eax
lea esp, [esp + 3]
jmp 0x1dbde33
mov word [esp], sp
lea esp, [esp + 2]
add bl, al
jmp 0x1dbddcb
lea esp, [esp + 3]
jmp 0x1dbde33
jge 0x1dbddd7
sub esp, 0x1b
xchg dword [esp + 0xd], eax
jmp 0x1dbddfc
jmp 0x1dbde79
dec ebp
xchg dx, ax
mov ax, si
neg edx
jl 0x1dbde1d
mov edx, 0x99f115c1
lea edx, reloc.hipo.dll_hipoInitConfig
pushal
jmp 0x1dbdea9
jb 0x1dbdd8e
mov dx, word [esp + 1]
mov dx, word [esp]
jmp 0x1dbdda0
mov dx, cx
mov dword [esp + 0xa], esp
shl dx, 7
push word [esp + 0xc]
jmp 0x1dbdec8
mov edx, 0x99f115c1
lea edx, reloc.hipo.dll_hipoInitConfig
pushal
jmp 0x1dbde63
lea esp, [esp + 2]
lea esp, [esp + 0x20]
neg cl
jmp 0x1dbdeb2
dec dx
jge 0x1dbdeed
not eax
jmp 0x1dbdeef
mov dx, cx
mov dword [esp + 0xa], esp
jmp 0x1dbde6a
mov dl, 0xa8
lea edx, reloc.hipo.dll_hipoInitConfig
mov dl, ah
mov al, byte [esp]
setae ah
jmp 0x1dbde93
jne 0x1dbde87
lea esp, [esp + 2]
jmp 0x1dbde8b
mov eax, 0xbe4d2822
bts ax, dx
je 0x1dbdf0a
mov eax, 0xcc14017b
jmp 0x1dbdef4
not eax
sub cl, 0xbc
jmp 0x1dbded0
mov dx, ax
jmp 0x1dbdf12
mov eax, 0xcc14017b
mov dx, ax
xor cl, 0x56
mov dl, 8
lea edx, [edi - 0x87]
btr eax, ebx
jmp 0x1dbe459
mov ecx, esi
mov dword [ecx], edx
jmp 0x1dbddb9
clc
sub esp, 0xb
lea esp, [esp + 3]
jmp 0x1dbe04c
ja 0x1dbe03e
bsr dx, di
not edx
jmp 0x1dbdf36
mov eax, dword [esp]
jmp 0x1dbb44a
lea eax, [esp + ebx]
shl ax, 4
jl 0x1dbdf5a
mov eax, dword [esp]
jmp 0x1dbb44a
mov edx, ecx
not eax
xchg al, ah
lea eax, [edx*4]
shl edx, 2
jmp 0x1dbdf70
push di
push edi
jmp 0x1dbdfa9
rol eax, 0x1b
jbe 0x1dbe005
stc
add esp, 1
lea esp, [esp + 1]
jmp 0x1dbdfdf
lea esp, [esp + 8]
dec cl
mov dx, 0xb878
mov edx, dword [esp]
mov ax, word [esp]
jmp 0x1dbdf8f
lea esp, [esp + 1]
mov edx, dword [edx - reloc.hipo.dll_hipoInitConfig]
mov eax, 0x178e023f
mov al, ch
jmp 0x1dbb473
stc
add esp, 1
jmp 0x1dbdfdb
not ax
mov eax, dword [esp]
btr ax, si
jp 0x1dbe023
jnp 0x1dbe023
cli
insb byte es:[edi], dx
loop 0x1dbdfa2
je 0x1dbdfe5
stc
fsubr st(3)
call 0x97c5c7b2
add byte [eax], al
add byte [esi], ch
mov edi, 0x71b94a2f
add al, 0x90
push es
popal
nop
and dword [edx + reloc.hipo.dll_hipoInitConfig], ebx
rcr byte [edi + ebp*2], 1
jmp 0x1dbe00b
mov esp, edi
jmp 0x1dbe0bf
bsr dx, di
not edx
clc
sub esp, 0xb
lea esp, [esp + 3]
jmp 0x1dbdfc8
push edx
ret
mov ax, 0xc181
jmp 0x1dbe051
mov eax, dword [esp]
dec eax
jne 0x1dbe07c
mov ax, 0xc181
jmp 0x1dbe080
mov ax, word [esp]
mov edx, ebp
jmp 0x1dbe694
jg 0x1dbe680
lea edx, [ebp*4]
lea edx, [ecx*4]
jmp 0x1dbe357
lea edx, [ebp*4]
lea edx, [ecx*4]
mov ax, word [esp]
mov edx, ebp
dec cl
neg dx
jmp 0x1dbdf4c