Function at 0xbbf646
Capabilities:
Execute anti-debugging instructions

Disassembly:
pop dword [esp + 9]
pop bx
pop dword [esp + 0xd]
xchg ch, dl
mov al, ah
jmp 0xbbf472
lea esp, [esp + 0xb]
xchg byte [esp + 0xb], bl
xchg cx, si
xchg ebx, esi
jmp 0xbbf51a
setno bh
setp bh
mov edx, 0x8860ca8a
xchg dword [esp + 0xc], ecx
mov cx, dx
jmp 0xbbf45c
xchg byte [esp + 6], cl
cpuid
pop edx
pop eax
add esp, 5
call fcn.00bbf4a6
xchg esi, eax
neg ax
xchg word [esp + 7], si
mov word [esp + 0xc], di
shl bx, cl
mov byte [esp + 0xb], bh
jmp 0xbbf550
xchg dword [esp + 2], ecx
setle bh
mov edx, ecx
mov dword [esp + 3], esi
cpuid
mov byte [esp + 5], ah
jmp 0xbbf4cb
lea edi, [esp + edx]
ror esi, 0x17
sub esp, 6
mov bl, 0x50
xchg bp, di
bswap eax
jmp 0xbbf61f
neg ecx
pop esi
setae ch
mov word [esp + 2], bx
pop dword [esp + 6]
jmp 0xbbf52f
xchg dword [esp], ebp
mov bl, bh
mov ch, byte [esp + 0x10]
inc ebp
btc eax, edi
call fcn.00bbf5a8
lea ebp, [edx + edi]
bsf di, si
mov dl, dh
xchg word [esp], bp
setae dh
xchg di, cx
jmp 0xbbf663
mov edx, 0xd6277718
mov dl, dh
mov eax, 0xb32a23a4
bsf bp, ax
mov ecx, dword [esp]
xchg word [esp + 3], si
jmp 0xbbf5ee
inc bl
btr ecx, edx
xor eax, esi
call 0xbbf646
jae 0xbbf6ad
neg edx
not edx
mov dword [esp], esi
jmp 0xbbf675
xchg ch, dl
lea ebx, [esp + esi]
stc
rdtsc
lea esp, [esp + 1]
bsf di, si
jmp 0xbbf639
rdtsc
pop bx
mov dl, dh
and cl, bh
mov ebp, 0xd397c1d6
not edx
jmp 0xbc000b
mov cx, word [esp]
cpuid
pop dword [esp]
pop esi
not ch
lea edi, [eax + 0x19]
jmp 0xbbf712
salc
inc al
lea eax, [ebx*4]
mov byte [esp + 7], ch
mov al, ah
jmp 0xbbf697
mov eax, ebp
pop edi
lea esp, [esp + 1]
lea edx, [ecx*4]
xchg word [esp + 3], bx
mov edi, dword [esp + 1]
jmp 0xbbf6ae
inc ecx
xchg ch, dl
pop bp
mov byte [esp + 5], ch
not esi
xchg ecx, esi
jmp 0xbbf6c5
xchg bx, ax
mov bl, 0x60
sub esp, 8
mov dword [esp + 1], ecx
mov dl, dh
sub esp, 0x10
jmp 0xbbf7bf
xor edx, esi
mov dh, byte [esp + 1]
inc ebx
mov byte [esp], bh
cld
mov edi, dword [esp]
jmp 0xbbf6fb
mov al, 0x96
bswap edx
cpuid
xchg word [esp + 0x20], dx
lea esp, [esp + 0x16]
add si, 0x12e
jmp 0xbbf6ec
xchg ch, dl
neg edx
xor esi, esi
push dword [esp + 0x11]
rdtsc
mov ch, byte [esp + 0x16]
jmp 0xbbf737
xchg word [esp + 0x17], dx
lea ebx, [edx*4]
mov cl, 0x2a
mov edx, dword [esp + 3]
setns ah
mov esi, dword [esp + 0x11]
jmp 0xbbf79e
pop dword [esp + 0x10]
bsr ax, cx
xchg ah, bl
not ebp
inc si
push dword [esp + 0x1a]
jmp 0xbbf76a
rcr ah, 1
cld
pop dword [esp + 0x10]
cmc
push edx
xchg di, ax
jmp 0xbbf820
inc edi
clc
push dword [esp + 0x16]
lea ecx, [eax + edx]
push dword [esp + 6]
inc ebx
jmp 0xbbf78a
mov al, 6
cpuid
cpuid
bswap esi
mov bl, 0x40
mov word [esp + 5], di
jmp 0xbbf833
inc cl
lea esp, [esp]
mov cl, ch
xchg esi, edx
neg cx
sub esp, 0xc
jmp 0xbbf7cf
rol ax, cl
mov ebp, esi
lea esp, [esp + 0x17]
sub ebx, eax
setp ch
bswap esi
jmp 0xbbf7e8
pop ax
neg dh
neg si
bswap ebp
xchg word [esp + 0xf], ax
neg cx
jmp 0xbbf809
xchg ebx, ecx
pop word [esp + 0xa]
lea esp, [esp + 2]
mov edx, dword [esp + 6]
xchg esi, eax
jmp 0xbbf89e
mov esi, ebp
xchg bx, dx
mov dword [esp + 3], ebp
not dx
push esp
mov edi, dword [esp + 0x17]
jmp 0xbbf758
rcl bx, cl
mov al, 0xee
push dword [esp + 0x2b]
lea esi, [ecx + 0x422ca2e3]
bsr ax, bp
jmp 0xbbf91f
cpuid
mov esi, ecx
xchg dx, di
sub esp, 0x1e
xchg ah, bl
xchg dword [esp + 2], ecx
jmp 0xbbf864
push word [esp + 0xe]
xchg bh, cl
bsr di, cx
neg di
push dword [esp + 9]
rdtsc
jmp 0xbbf87d
xchg bx, di
mov byte [esp + 0x19], bh
mov bp, di
mov eax, ebp
setne ah
cld
jmp 0xbbf84e
mov bl, 0x18
pop di
call 0xbbf8cc
adc byte [edi + 0x7e817217], al
scasb al, byte es:[edi]
cmp byte [esi - 0x7f72c737], ch
adc eax, 0xb41fec85
add al, 0xb7
sahf
cmc
add ecx, ebp
sub esp, 6
sub esp, 0x10
xchg bh, cl
xchg byte [esp + 0x2a], dl
jmp 0xbbf8e4
mov bl, bh
pop bx
cpuid
cmc
mov cl, 0x32
popal
jmp 0xbbf902
xchg byte [esp + 6], bl
mov edi, 0x54d0d0ae
lea edi, [ecx*4]
btc ecx, edi
sub ax, 0xa528
rdtsc
jmp 0xbbf8ba
mov ebx, dword [esp + 0x13]
mov dword [esp + 0x11], ebp
lea edi, [ebp + 0x520aacb7]
push word [esp + 5]
lea ecx, [esi*4]
mov bx, word [esp + 0xd]
jmp 0xbbf9c6
push dword [esp + 2]
setne ah
bsf bx, ax
lea ebx, [ebx*4]
lea esi, [eax - 0xb1]
lea edx, [ebp - 0x67]
jmp 0xbbfa74
mov bp, word [esp + 1]
xchg bh, cl
mov edx, ecx
push esp
mov ah, byte [esp + 3]
sub esp, 0x12
jmp 0xbbfd94