Function at 0xb343a6
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0xfaf9bf
add eax, ecx
jmp 0xc6e9b8
adc ebx, edx
jmp 0x1017030
push dword [ebp - 4]
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
jmp 0xeacb07
jmp 0xefc66a
jmp 0xec0ebf
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
jmp 0xec0ed3
push esi
push ebx
mov ebx, 0
mov dword [esp + 4], ebx
pop ebx
mov eax, dword [esp]
jmp 0xec0e50
xchg dword [esp], ebx
pop esp
jmp 0xec0f2e
jmp 0xf5d42e
ret
push 0xbe07e7
mov dword [esp], ebx
mov ebx, esp
push ebp
mov ebp, 0x7cee1847
shl ebp, 2
jns 0xefb693
jmp 0xefb734
sub ebp, 0x76dfb1d1
jl 0xefb7cd
jmp 0xefb734
pop esp
mov dword [esp], ebx
jmp 0xefb7de
push edx
mov dword [esp], 0x65f9cfcb
mov dword [esp], ebx
push dword [esp]
pop ebx
add esp, 4
sub esp, 4
mov dword [esp], ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push 0x5e5a1822
mov dword [esp], eax
push eax
mov eax, 0x3c7bc037
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
pop ebx
jmp 0xefb753
push ebx
mov eax, dword [esp]
push edi
mov edi, esp
push ecx
mov ecx, 4
add edi, ecx
pop ecx
push eax
mov eax, 0x75ff7084
and eax, 0x737fa874
or eax, 0x6cffd730
not eax
add eax, 0x7dfff739
add edi, eax
pop eax
xchg dword [esp], edi
pop esp
push edx
push eax
mov eax, 0x6f75d319
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], ebx
pop ebx
sub esp, 4
mov dword [esp], edi
mov dword [esp], eax
push dword [esp]
pop eax
add esp, 4
jmp 0xefb68a
shl ebp, 6
je 0xefb65b
jmp 0xefb742
xor ebp, 0x6df7e073
jp 0xefb6dc
jmp 0xefb679
add ebp, 0x72aa6439
add ebx, ebp
pop ebp
sub ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
jmp 0xefb68a
sub ebp, 0x7fba59d7
jbe 0xefb753
jmp 0xefb753
jmp 0x100a47f
jmp 0xefc588
push ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
push esi
push 0x14
pop esi
sub ebp, esi
pop esi
xchg dword [esp], ebp
pop esp
jmp 0xefc665
jmp 0xefb65b
jmp 0xefc6d1
leave
jmp 0xefc784
jmp 0xec0f33
jmp 0xf03e7c
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
mov ebp, dword [esp]
push eax
mov eax, esp
push esi
mov esi, 0x5fb9860f
sub esi, 0x5fb9860b
add eax, esi
pop esi
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xf03f5f
jmp 0xefc52f
adc edx, 0
jmp 0xc6e9b1
jmp 0xf33275
push dword [ebp - 0x14]
mov ecx, dword [esp]
push esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0xf33336
jmp 0xf9357e
jmp 0xf5a256
pop eax
sub ecx, eax
pop eax
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
jmp 0xf5a34d
push ecx
push esp
pop ecx
add ecx, 4
push eax
push 4
jmp 0xf5a246
jmp 0xf92a41
cpuid
jmp 0xf5d53e
jmp 0x100136e
add ecx, 1
jmp 0xf04915
jmp 0xf85c26
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0xf85d1c
push 0
mov eax, dword [esp]
push ebx
mov dword [esp], edx
mov edx, esp
jmp 0xf85c0f
jmp 0x1001ff1
jmp 0xf92b65
rdtsc
jmp 0xf92b6c
jmp 0xf990f7
sub esp, 4
mov dword [esp], edi
mov dword [esp], 0
push dword [esp]
pop eax
add esp, 4
jmp 0xf92fdc
jmp 0xfa97d6
jmp 0xf9368b
push dword [ebp - 0x10]
push dword [esp]
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
jmp 0xf936a2
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
jmp 0xf936b7
jmp 0xfb07de
push ebp
mov dword [esp], ecx
mov dword [esp], eax
push ecx
mov ecx, 0
mov dword [esp + 4], ecx
pop ecx
pop eax
jmp 0xf93b72
jmp 0xfa8047
jmp 0xf991c4
add esp, 4
mov dword [esp], eax
pop dword [ebp - 0x14]
jmp 0xf99220
push edi
push ecx
mov ecx, 0x50c03d30
mov dword [esp + 4], ecx
mov ecx, dword [esp]
jmp 0xf990fc
jmp 0xfc7d3c
jmp 0xf9ee01
mov edx, dword [esp]
push ecx
push esp
pop ecx
push eax
mov eax, 4
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0xf9ee1e
jmp 0x100f68f
jmp 0xfa80e2
cpuid
jmp 0xfa8144
jmp 0xec0df8
jmp 0xfa98f2
cpuid
jmp 0xfa98f9
jmp 0xf85c0a
jmp 0xfaf3a3
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
jmp 0xfaf3be
push dword [ebp - 0xc]
mov eax, dword [esp]
push 0x17abee
mov dword [esp], edx
mov edx, esp
add edx, 4
jmp 0xfaf300
jmp 0xfbf878
jmp 0xfaf7cf
push ebx
push ebx
mov ebx, 0x6cb77571
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
pop dword [ebp - 8]
jmp 0xfaf89f
jmp 0xfaf2a5
jmp 0xfafac5
push ecx
mov dword [esp], ebx
push edi
mov edi, 0xd39b5a0
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], ebp
jmp 0xfafae4
jmp 0xf03e25
jmp 0xfb08e7
xchg ecx, eax
not eax
push edi
mov dword [esp], 0x61143283
mov dword [esp], ecx
sub esp, 4
mov dword [esp], eax
pop ecx
pop eax
jmp 0xfb0902
jmp 0xfe7197
jmp 0xfbaebe
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
jmp 0xfbaede
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
jmp 0xfbaf93
jmp 0xeac9eb
jmp 0xfbf8cc
push dword [ebp - 8]
push dword [esp]
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
jmp 0xfbf98f
jmp 0xf3321b
jmp 0xfc7da8
pop dword [ebp - 0x10]
jmp 0xfc7e83
push ecx
push esi
mov dword [esp], eax
mov eax, 0x36526138
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
jmp 0xfc7da0
jmp 0xf92ec5
push edx
sub esp, 4
mov dword [esp], ebp
pop edx
pop ebp
push ebp
xchg dword [esp], esi
not esi
xchg dword [esp], esi
pop ebp
xchg edx, ebp
jmp 0xfe72cd
jmp 0xf84acb
jmp 0xfe858b
mov dword [esp], eax
pop dword [ebp - 0xc]
jmp 0xfe85f6
push edx
mov dword [esp], 0x9337f90
mov dword [esp], edx
jmp 0xfe8580
jmp 0xfaf76b
rdtsc
jmp 0x1001494
jmp 0xfe84d2
jmp 0x10020f4
cpuid
jmp 0x10020fb
jmp 0xf93a68
jmp 0x100a592
push 0x64f7db8a
mov dword [esp], ebx
push esi
mov esi, 0x2da6ed6
mov dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], ecx
jmp 0x100a5b2
jmp 0xf5a241
jmp 0x100f69a
pop esp
jmp 0x100f7d4
mov ecx, dword [esp]
push edi
mov edi, esp
push esi
mov esi, 4
add edi, esi
pop esi
push ebp
mov ebp, 4
sub edi, 0x5bffd898
add edi, ebp
add edi, 0x5bffd898
pop ebp
xchg dword [esp], edi
jmp 0x100f694
jmp 0xfbae71
jmp 0x101713c
push ebx
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push eax
mov eax, 4
sub ebp, eax
pop eax
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0x1017160
jmp 0xf9ecdc