Function at 0x976949
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0xd660eb
add eax, ecx
jmp 0xd28bed
adc ebx, edx
jmp 0xd4b74a
jmp 0xd3d03b
pop esp
add esp, 4
jmp 0xd3d055
push dword [esp]
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
jmp 0xd3cf1f
jmp 0xd40028
jmp 0xd3d1cc
leave
jmp 0xd3d27f
jmp 0xd3da04
jmp 0xd3da58
ret
jmp 0xd3dde0
push eax
mov eax, esp
add eax, 4
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
pop dword [ebp - 8]
jmp 0xd3de61
jmp 0xd4b50e
jmp 0xd40145
mov ecx, dword [esp]
push edi
mov edi, esp
push ebx
mov ebx, 4
add edi, ebx
pop ebx
push edx
mov edx, 4
add edi, edx
pop edx
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0xd40168
jmp 0xd47382
push eax
mov eax, esp
add eax, 4
push esi
mov esi, 4
jmp 0xd4261e
sub eax, esi
pop esi
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
jmp 0xd42635
jmp 0xd4ca5a
jmp 0xd42fcf
sub esp, 4
mov dword [esp], ebp
mov dword [esp], edx
mov dword [esp], eax
pop dword [ebp - 0x14]
jmp 0xd42fe3
jmp 0xd4b162
jmp 0xd43547
push 0
mov eax, dword [esp]
push edi
mov edi, esp
push ebp
mov ebp, 0x750f5092
not ebp
or ebp, 0x1ef4ea91
jmp 0xd435c1
add ebp, 0x610b1007
add edi, ebp
mov ebp, dword [esp]
add esp, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xd435db
jmp 0xd48902
jmp 0xd44b78
push ecx
mov dword [esp], esi
push ebx
mov ebx, 0
mov dword [esp + 4], ebx
pop ebx
mov eax, dword [esp]
add esp, 4
jmp 0xd44c52
jmp 0xd4a06c
jmp 0xd44d6a
push 0x1944c3dd
mov dword [esp], ebx
push eax
push 0
pop eax
mov dword [esp + 4], eax
pop eax
pop eax
jmp 0xd44d84
jmp 0xd4f420
jmp 0xd46509
sub esp, 4
mov dword [esp], esi
push edi
mov edi, 0x7d52c794
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], ebx
jmp 0xd46578
jmp 0xd42528
add ecx, 1
jmp 0xd46585
adc edx, 0
jmp 0xd28be6
mov ebx, dword [esp]
push edx
mov dword [esp], eax
mov eax, esp
add eax, 4
jmp 0xd47438
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
jmp 0xd474a2
jmp 0xd47956
sub esp, 4
mov dword [esp], ecx
push edx
pop ecx
mov edx, dword [esp]
add esp, 4
xchg edx, eax
not eax
xchg edx, eax
xchg ecx, edx
jmp 0xd47728
jmp 0xd64617
jmp 0xd47a12
push dword [ebp - 4]
mov eax, dword [esp]
push 0x55a3c863
mov dword [esp], edi
mov edi, esp
add edi, 4
push ebx
mov ebx, 4
add edi, ebx
pop ebx
xchg dword [esp], edi
pop esp
jmp 0xd47a99
jmp 0xd3d16f
jmp 0xd489af
cpuid
jmp 0xd48a12
jmp 0xd4a626
push dword [ebp - 8]
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xd4906c
jmp 0xd4b3af
jmp 0xd4953c
rdtsc
jmp 0xd495e3
jmp 0xd4a28a
jmp 0xd4a0d3
cpuid
jmp 0xd4a199
jmp 0xd44c57
jmp 0xd4a327
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 4
jmp 0xd4a33b
sub ebx, edx
pop edx
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
pop dword [ebp - 0xc]
jmp 0xd4a3a5
jmp 0xd3dd2a
jmp 0xd4a64c
add edx, 0xe1ac67bb
and ebx, edx
pop edx
dec ebx
and ebx, 0xed7435a
or ebx, 0x49d71ea0
je 0xd4a62b
jmp 0xd4a69f
push ebx
push 0x7a3e01a8
mov ebx, dword [esp]
add esp, 4
jmp 0xd4a65d
push edx
mov edx, 0x597b4966
sub edx, 0x55ffef19
jge 0xd4a693
jmp 0xd4a69f
xor edx, 0x65ff446c
jp 0xd4a798
jmp 0xd4a685
sub ebx, 0x4bd75ffb
push ebx
pop eax
pop ebx
jmp 0xd4a7a6
inc edx
jge 0xd4a674
jmp 0xd4a685
inc ebx
jo 0xd4a62b
jmp 0xd4a685
shl edx, 2
js 0xd4a62b
jmp 0xd4a65d
jmp 0xd4baaa
push dword [ebp - 0x10]
mov edx, dword [esp]
push ebp
push esp
pop ebp
push edx
mov edx, 0x7c7d3651
neg edx
jne 0xd4af65
jmp 0xd4af8b
and edx, 0x7b3df487
jl 0xd4aff4
jmp 0xd4af8b
xor edx, 0x80019e0d
add ebp, edx
pop edx
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xd4b0a3
and edx, 0x75b20a5a
not edx
sub edx, 0x7efe61f4
jbe 0xd4af8b
jmp 0xd4af76
push edx
push ebp
mov ebp, 0x7bf0aab2
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ebx
mov ebx, dword [esp]
add esp, 4
push 0x45d11248
mov dword [esp], ebx
mov eax, dword [esp]
push edi
mov edi, esp
push ebp
mov ebp, 0x57679139
shl ebp, 7
shr ebp, 4
sub ebp, 0xb3c89c4
add edi, ebp
pop ebp
add edi, 4
xchg dword [esp], edi
pop esp
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
jmp 0xd4aff4
jmp 0xd475f4
jmp 0xd4b20f
push ecx
mov dword [esp], eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 4
sub eax, ecx
pop ecx
xchg dword [esp], eax
pop esp
mov dword [esp], edx
pop dword [ebp - 0x10]
jmp 0xd4b285
jmp 0xd434a8
jmp 0xd4b471
push dword [ebp - 0x14]
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
add esp, 4
jmp 0xd4b4cf
jmp 0xd4af49
jmp 0xd4b569
push dword [ebp - 0xc]
mov eax, dword [esp]
sub esp, 4
mov dword [esp], edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
jmp 0xd4b5ee
pop esp
jmp 0xd4b64b
jmp 0xd48f62
jmp 0xd4b7a5
push esi
push esp
pop esi
push ecx
mov ecx, 0x13bf2834
and ecx, 0x3ef88d00
xor ecx, 0x12b80804
jmp 0xd4b85b
pop dword [ebp - 4]
jmp 0xd4b86d
add esi, ecx
pop ecx
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
jmp 0xd4b7bf
jmp 0xd3cf1a
jmp 0xd4bb40
cpuid
jmp 0xd4bb9d
jmp 0xd44b20
jmp 0xd4bc6e
rdtsc
jmp 0xd4bd0b
jmp 0xd42ec4
jmp 0xd4cb13
sub esp, 4
mov dword [esp], ebx
push eax
mov eax, 0x690097a5
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], edx
jmp 0xd4cb86
jmp 0xd4bc0e
jmp 0xd4f483
cpuid
jmp 0xd4f534
jmp 0xd494d5
jmp 0xd6471b
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
not edx
xchg dword [esp], edx
pop edx
jmp 0xd64742
jmp 0xd4657d
jmp 0xd65b88
push ebx
mov dword [esp], 0x4c8b14fa
push esp
pop dword [esp]
add dword [esp], 4
mov ebp, dword [esp]
jmp 0xd65ba0
add esp, 4
jmp 0xd65ba8
jmp 0xd65df1
jmp 0xd65e4f
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edx
mov edx, esp
add edx, 4
jmp 0xd65efa
sub edx, 0x14
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
jmp 0xd65f0e
jmp 0xd4644a
jmp 0xd6614d
push edx
mov edx, esp
add edx, 4
push ebp
mov ebp, 4
sub edx, ebp
pop ebp
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], ebp
jmp 0xd6620c
jmp 0xd65a77