Function at 0xb9970f
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov di, 0x582f
mov cx, sp
call 0xb9970f
in eax, dx
mov edx, ebp
lea edx, [ebp + 0xa7]
xchg si, bp
inc dl
jmp 0xb99779
mov dh, byte [esp]
pop edx
pushal
lea esp, [esp + 0x49]
clc
bswap edx
jmp 0xb99702
bsf di, si
sub esp, 0x16
sub esp, 0
xchg word [esp + 0x1f], si
jmp 0xb99725
inc bl
shr bh, 3
mov ch, byte [esp + 1]
lea esi, reloc.WINMM.dll_midiStreamStop
mov dword [esp], esi
sub esp, 0x16
jmp 0xb997ab
mov si, dx
btr edx, edx
mov cx, di
xchg bp, di
inc ax
rol bp, cl
jmp 0xb9974d
lea ebp, [eax - 0xa1]
mov al, ah
mov ebp, eax
xchg bh, cl
neg dh
mov dword [esp + 0x13], eax
jmp 0xb99837
push edx
mov si, word [esp + 0xc]
lea ecx, [ecx - 0xd3]
mov esi, ebp
setnp ah
mov eax, dword [esp + 9]
jmp 0xb9978c
mov si, 0xfb1
lea ebp, [eax - 0x19]
bsf di, ax
mov cl, ch
mov byte [esp + 7], dh
jmp 0xb99811
mov word [esp + 0xc], di
rdtsc
mov ch, byte [esp + 0x15]
xchg dh, al
mov bh, byte [esp + 0x1b]
mov dword [esp + 0x17], esi
jmp 0xb997c2
pop word [esp + 0x13]
rdtsc
call fcn.00b997f4
mov edx, 0xd77f6628
pushal
and ecx, ecx
pushal
lea esp, [esp + 0x5e]
inc bp
jmp 0xb9984f
push word [esp + 0x15]
mov word [esp + 8], bx
xchg ah, bl
pop esi
mov word [esp + 0xe], sp
mov dword [esp + 3], eax
jmp 0xb997dd
lea ebx, reloc.WINMM.dll_midiStreamStop
btc edx, ebx
add si, 0x81ee
jmp 0xb99925
add esp, 9
cpuid
xchg esi, eax
lea edi, [edx*4]
mov bh, 0xc3
pop dword [esp + 2]
jmp 0xb998ef
mov bp, 0xffe5
mov ecx, esi
mov ch, byte [esp + 5]
xchg word [esp + 0x11], dx
pop word [esp + 0xb]
pop word [esp + 9]
jmp 0xb99874
setle ch
xchg ch, dl
inc dx
mov byte [esp + 8], bh
cpuid
btc ecx, ebx
jmp 0xb9989d
mov dl, dh
mov dl, dh
add esp, 0
lea eax, [esp + edi]
rdtsc
clc
jmp 0xb99900
mov edi, 0x7b83e65e
mov dword [esp + 1], ebp
pop esi
mov dl, dh
mov bl, 0x58
pop ebp
jmp 0xb998d1
mov bx, word [esp]
mov ecx, dword [esp]
bsr si, cx
mov dx, word [esp]
mov cl, 0xca
rdtsc
jmp 0xb99982
lea edi, [esp + ecx]
xchg bh, cl
neg ch
bswap esi
sub esp, 0x10
sub esp, 0xa
jmp 0xb998bf
mov eax, ebp
call fcn.00b9994c
lea ecx, [ecx + 0x8b]
mov bh, byte [esp + 9]
setnp bh
jmp 0xb9af20
mov ebx, dword [esp]
xchg ecx, eax
sub esp, 8
lea ebp, [ebx + edi]
bswap ecx
btr ebx, edx
jmp 0xb99965
not si
xchg ch, dl
add bp, 0x5fce
neg ebp
setl ah
cpuid
jmp 0xb99a8d
lea edx, [ecx - 0xab]
xor si, 0xd894
xchg dh, al
lea ebx, [edi*4]
jmp 0xb999b5
add esp, 0
rdtsc
xchg cx, bp
lea esp, [esp]
mov ebx, dword [esp]
mov dx, 0xc3b7
jmp 0xb999cf
xchg word [esp], di
lea esp, [esp + 1]
btc eax, edi
not ax
cpuid
mov dx, sp
jmp 0xb999e9
btc edx, ebx
xchg byte [esp], al
bswap edx
lea ebp, [ecx + edx]
rol di, cl
clc
jmp 0xb99a5d
mov cl, ch
bsf bx, si
xchg esi, ecx
mov al, ah
mov bx, di
cpuid
jmp 0xb99a18
mov ax, word [esp + 6]
mov dl, dh
push esp
push word [esp + 5]
neg edx
xchg edi, eax
jmp 0xb99ac0
sub esp, 0xa
xchg di, ax
lea esp, [esp + 3]
mov word [esp], sp
xchg ah, bl
not ax
jmp 0xb99a44
xchg ch, dl
mov dl, dh
mov ebp, eax
stc
mov ebp, 0xef8479f4
mov ecx, eax
jmp 0xb99a33
shl si, cl
mov ecx, 0xd2cc0e02
xchg byte [esp], al
bsr cx, cx
mov eax, dword [esp]
mov ecx, 0xa95aa1d8
jmp 0xb99a76
push dword [esp + 1]
pop dword [esp]
neg si
inc edx
mov cl, 0xca
pop ebp
jmp 0xb99b4d
pop word [esp + 9]
mov byte [esp + 0xa], dh
push word [esp + 5]
add esp, 7
btr edi, edx
lea esi, [ecx*4]
jmp 0xb99aa6
neg ah
inc edi
lea ebp, [edi*4]
cmc
mov bl, 0x90
xor dl, ch
jmp 0xb99a03
pop dword [esp]
lea esp, [esp + 2]
call int.00b99b2a
mov eax, dword [reloc.WINMM.dll_midiStreamStop]
into
rcr dword [ebx - 0x35], 1
scasb al, byte es:[edi]
pop ebp
mov ch, 0x3e
or dword [eax - reloc.WINMM.dll_midiStreamStop], ebp
cmc
mov bp, 0xf5f1
neg ah
cpuid
btr edi, edx
mov word [esp + 4], sp
bswap ebp
jmp 0xb99afa
mov al, ah
mov ebx, 0x7c7d20dc
mov byte [esp + 1], bh
lea ecx, [esi*4]
sub esp, 2
push esp
jmp 0xb99b16
pushal
sub esp, 6
cpuid
pop bx
mov dx, word [esp + 0x14]
lea esp, [esp + 0x23]
jmp 0xb99ae6
mov dx, word [esp]
lea esp, [esp + 1]
mov bp, word [esp]
lea ebx, reloc.WINMM.dll_midiStreamStop
setl ch
mov al, ah
jmp 0xb99b70
mov word [esp + 6], sp
sub esp, 0x1a
sub bx, 0x1688
mov ecx, 0xc3aac1cc
popal
pop si
jmp 0xb9a305