Function at 0xb3f81e
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov ecx, dword [ecx + 0x14]
sub esp, 0xc
jmp 0xb84122
ret
jmp 0xb405bf
mov ecx, dword [0xb2fbb8]
jmp 0xb83faf
jmp 0xb83fd4
jmp 0xb250ce
xchg edx, ecx
mov bl, byte [esp]
sub esp, 1
jge 0xb84c99
jl 0xb84c6b
adc eax, 0xc6ffc784
jmp 0xb253e6
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 8
call fcn.00b3f84a
cmp eax, 0xaa5f38aa
sbb eax, 0x3a5fcf5d
leave
pushal
loop 0xb3f84e
insb byte es:[edi], dx
jg 0xb3f87a
setb bh
mov ebx, dword [esp]
not bx
mov ebx, dword [esp + 0x28]
lea esp, [esp + 0x2c]
jmp fcn.00b251f8
jmp 0xb3f854
lea esp, [esp + 2]
lea esp, [esp + 4]
pushfd
lea esp, [esp + 4]
jmp 0xb251ca
sbb al, 0x24
mov ebx, edi
mov ebx, dword [esp]
mov eax, dword [esp + 0x24]
jmp 0xb3f834
jmp 0xb250e4
mov ecx, dword [ecx + 0xc0]
jmp 0xb84036
push ebp
jmp 0xb84010
lea esp, [esp + 4]
je 0xb250a0
push esi
jmp 0xb250fa
mov ebp, ecx
mov edx, dword [ebp]
pop ebp
cmp edx, eax
call fcn.00b83ffa
pop word [esp]
lea esp, [esp + 2]
jmp 0xb84044
test ecx, ecx
push sp
lea esp, [esp]
push esp
lea esp, [esp + 2]
jmp 0xb83fea
jae 0xb2508a
cmp si, di
mov esi, dword [esp]
mov esi, dword [ecx + 4]
jmp 0xb84680
mov eax, dword fs:[0x18]
call fcn.00b84bc8
adc eax, 0x80711680
aas
mov ebp, 0x91661f8c
add eax, dword [ecx + 0xc]
pop esi
jmp 0xb250a0
cmp edi, esi
jmp 0xb84869
mov ecx, dword [ebp - 8]
lea edx, [ebx - 0x6e]
jmp 0xb844e1
call fcn.00b84785
aam 0x68
dec ebp
pop esp
in eax, 0xda
out 0xf1, al
int1
arpl word [esi], cx
movsb byte es:[edi], byte [esi]
or al, cl
jge 0xb84114
ror byte [esi + edi*8 - 0x72749737], 0x64
and al, 0xc
lea esp, [esp + 0xc]
test ecx, ecx
jne 0xb250fa
mov si, bp
call fcn.00b840f0
mov ax, sp
mov ax, word [esp]
mov ax, word [esp]
jmp 0xb84517
push ebx
jmp 0xb845d5
inc ebx
jmp 0xb845cd
jmp 0xb84b75
jmp 0xb84c2b
push eax
jmp 0xb84b43
push dx
push cx
jmp 0xb84206
mov word [esp], di
jmp 0xb84ae7
jmp 0xb84a86
pushfd
jmp 0xb845fd
add eax, ecx
mov dh, 0xf0
rcr dl, cl
jmp 0xb844ff
mov eax, dword [esi]
pop esi
jmp 0xb840f2
cdq
sub eax, edx
jmp 0xb84535
push esi
mov esi, ebp
lea esi, [esi - 4]
jmp 0xb844f7
sar ebx, 1
lea edx, [ebx*4]
mov dl, byte [esp]
pushfd
jmp 0xb84540
pushal
mov dword [esp + 0x10], eax
popal
mov eax, dword [ebp - 0x10]
jmp 0xb8451f
mov edx, dword [eax + ebx*4]
clc
xchg al, ah
lea esp, [esp + 4]
jmp 0xb845f0
mov ecx, dword [ebp - 8]
stc
cmp ecx, dword [ebp - 4]
jmp 0xb845b4
dec ebx
call fcn.00b8459d
lcall 0x4e54, 0xcf461545
jecxz 0xb845c9
push esi
imul ebx, dword [ecx + 0x53], 0x89be5797
sub al, ch
xor ch, byte [ecx - 0x3f7a0005]
call 0xb3eec2
test eax, eax
je 0xb84269
btc ecx, ebx
jmp 0xb8456a
je 0xb841d0
test eax, eax
jle 0xb8418d
jmp 0xb84573
and al, 4
jmp 0xb8414c
jg 0xb845c6
invalid
mov dword [ebp - 8], ebx
jmp 0xb8414c
pushal
rdtsc
mov dword [esp + 0x10], ebp
popal
jmp 0xb84643
add edx, dword [ebp + 8]
mov al, cl
mov eax, dword [esp]
mov eax, dword [ebp + 0xc]
jmp 0xb8458b
mov eax, dword [ebp - 0xc]
bswap ecx
jmp 0xb8461e
jle 0xb84136
jmp 0xb841d0
push ecx
mov ecx, ebx
lea ecx, [ecx + ecx]
jmp 0xb8462a
lea ecx, [eax + ecx]
movzx eax, word [ecx]
pop ecx
not ch
shr ch, cl
jmp 0xb84664
lea ebx, [ebx - 4]
mov eax, dword [ebx]
pop ebx
cmp dword [ebp - 8], eax
jmp 0xb84613
mov ecx, dword [eax]
pop eax
mov edi, dword [esp]
dec di
jmp 0xb8469d
push eax
mov eax, esi
add eax, 0x1c
jmp 0xb8464e
add esi, edx
call fcn.00b84429
jmp 0xb846c2
lea esp, [esp + 4]
lea ecx, [ecx + eax*4]
mov eax, dword [ebp + 8]
call 0xb84687
pop ebp
jmp 0xb846cd
push ebp
mov ebp, ecx
lea ebp, [eax + ebp]
mov edi, dword [ebp]
jmp 0xb846ac
add edi, eax
call 0xb846d5
outsd dx, dword [esi]
lea esp, [esp + 8]
jne 0xb840b7
je 0xb841d0
push esi
hlt
mov eax, dword [ebp - 0x14]
jmp 0xb848a4
jb 0xb841a3
rcr al, cl
jmp 0xb84853
lea esp, [esp]
lea esp, [esp + 2]
jmp 0xb848b0
add esi, eax
cmp edi, esi
push cx
mov word [esp], sp
jmp 0xb8488e
jae 0xb841a3
xchg ah, al
not al
jmp 0xb848e5
call fcn.00b3f457
sbb cx, bx
rol bx, cl
jmp 0xb848f1
push 0x2e
lea eax, reloc.MSVCRT.dll_strncpy
mov eax, edi
jmp 0xb848cf
mov ebx, eax
cmc
jmp 0xb849de
mov dl, al
push esi
mov edx, edi
mov ecx, 0x2dfa0eb6
jmp 0xb84929
lea ecx, reloc.MSVCRT.dll_strncpy
pushfd
jmp 0xb84969
mov edx, dword [esp]
neg dx
mov dx, word [esp]
sub esi, edi
mov ecx, dword [esp]
jmp 0xb84918
lea esp, [esp + 4]
call 0xb3f104
setnp cl
call 0xb84952
lea esp, [esp + 0x24]
pop ecx
mov al, dh
lea eax, reloc.MSVCRT.dll_strncpy
jmp 0xb849c4
mov byte [ebp + esi - 0x118], 0
push ax
mov byte [esp], cl
lea esp, [esp + 2]
jmp 0xb849ae
test ebx, ebx
je 0xb84075
mov esi, ebx
xchg dl, dh
jmp 0xb84941
call dword [fcn.00b2fba0]
lea esi, reloc.MSVCRT.dll_strncpy
push bp
jmp 0xb84ad1
push eax
lea esp, [esp + 4]
push eax
jmp 0xb84989
pop ecx
sub esp, 0x1f
lea esp, [esp + 3]
lea esp, [esp + 0x1c]
jmp 0xb849a0
mov ecx, dword [esp]
jmp 0xb84a5c
sets ah
mov ah, 0xc3
mov eax, dword [0xb2fbb8]
mov ch, byte [esp]
mov cl, byte [esp]
jmp 0xb849ec
sub esp, 0x1e
lea esp, [esp + 0x48]
test esi, esi
jne 0xb8421d
je 0xb84a02
mov eax, dword [ebx]
pop ebx
mov ecx, 0xabdbd56
push esi
mov ch, byte [esp]
jmp 0xb84a45
not ecx
bswap ecx
jmp 0xb84a7a
push ebx
mov ebx, eax
lea ebx, [ebx + 0x10]
jmp 0xb84a33
lea ecx, reloc.MSVCRT.dll_strncpy
jmp 0xb84a9c
push esi
mov cl, 0x51
mov ecx, 0x525212b4
bswap ecx
jmp 0xb84a64
cmp esi, dword [ebp + 8]
call fcn.00b84aa6
loope 0xb84ab0
arpl word [edx - 0x1c2a3105], bx
invalid
push ecx
call eax
mov esi, eax
jmp 0xb8421d
call 0xb84ab6
in al, 0xe9
aad 0
add byte [eax], al
lea esi, [ebx*4]
push esp
jmp 0xb84b0d
sub esp, 0x1d
lea esp, [esp + 3]
mov esi, eax
sub esp, 0xe
mov word [esp + 6], si
mov dword [esp + 6], esi
jmp 0xb84a22
lea esp, [esp + 4]
lea eax, [ebx + 1]
clc
cmp byte [eax], 0x23
jmp 0xb84b59
mov esi, eax
lea esp, [esp + 4]
jmp 0xb841fc
sti
invalid
push esi
call 0xb84b67
mov dl, 0xad
mov esp, 0xd7b4018f
jecxz 0xb84ade
je 0xb84b32
invalid
jne 0xb841e6
add ebx, 2
call 0xb84af4
lea esp, [esp + 4]
call fcn.00b251f8
jmp 0xb253e8
test edi, edi
je 0xb84075
lea eax, reloc.MSVCRT.dll_strncpy
jmp 0xb84bf1
pushal
xchg ch, ah
mov dword [esp + 0x1c], edi
call fcn.00b84bc1
setp cl
jmp 0xb253c4
mov ebx, dword [ebp - 0xc]
jmp 0xb84108
call 0xb84c33
mov bl, ah
lea esp, [esp + 1]
sub edi, 8
mov bh, byte [esp]
xor ebx, 0x64c8ccdf
jmp 0xb84cea
lea esp, [esp + 1]
jmp 0xb84c9d
lea ebx, reloc.MSVCRT.dll_strncpy
mov ebx, dword [esp]
jmp 0xb84cba
jmp 0xb84ca4
lea esp, [esp + 1]
rdtsc
stc
jp 0xb84c49
jnp 0xb84c49
mov dword [edi], ecx
mov bh, byte [esp]
call fcn.00b84c7e
xchg ecx, eax
pop ds
invalid
xchg edx, ecx
not ebx
mov bx, word [esp]
mov bx, sp
sbb bx, di
jge 0xb84c7c
jl 0xb84ca4
jmp 0xb84cf7
lea ecx, [eax + esi]
mov cx, dx
bswap ecx
popal
jmp 0xb84d07
jle 0xb84c71
lea ebx, reloc.MSVCRT.dll_strncpy
mov ebx, dword [esp]
jmp 0xb84c7a
pushal
mov esi, 0xcbca1b51
mov dword [esp + 0x10], edi
mov cx, 0x5b50
jmp 0xb84cce
add ebx, 4
jne 0xb8515a
mov dword [ebx], eax
jmp 0xb85035
mov al, byte [esp]
mov ecx, dword [esp]
cmc
jmp 0xb379f9
mov dword [ebx], eax
mov al, byte [esp]
mov ecx, dword [esp]
cmc
jmp 0xb379f9