Function at 0xfa3d19
Capabilities:
Execute anti-debugging instructions

Disassembly:
not esi
lea ebx, [ebx + 0xb0]
mov ch, 0xdd
pop bx
xchg ebp, esi
mov byte [esp + 1], cl
jmp 0xfa3cf6
mov dx, word [esp]
xor bx, si
bswap ebx
sub esp, 0xe
jmp 0xfa3ce0
jmp 0xfa3cb4
lea ecx, [ebx*4]
mov ch, ah
dec cl
rdtsc
jmp 0xfa3d07
bswap ecx
xchg word [esp], di
neg ebp
setne dh
clc
xchg byte [esp], dl
jmp 0xfa3cc8
push word [esp + 0xd]
push ax
rcl bl, 7
rdtsc
call 0xfa3d19
cld
mov bx, si
pop word [esp + 6]
jmp 0xfa3dff
bts eax, esi
lea ecx, [edi*4]
cpuid
lea ebx, [ebx + ebx]
jmp 0xfa3d8d
lea ebp, [esi + edi]
push dword [esp]
mov ebp, edi
bsf ax, si
push word [esp + 4]
sub esp, 0x19
jmp 0xfa3d4b
inc bl
mov byte [esp + 0x10], cl
add esp, 0xa
rdtsc
add esp, 0x12
jmp 0xfa3dbd
lea edi, [esi*4]
mov ah, byte [esp + 0x1f]
bsr di, si
xchg word [esp + 5], bx
btr edx, esp
cld
jmp 0xfa3d77
btr bx, sp
mov byte [esp + 1], bh
xchg dword [esp], ebp
xchg byte [esp + 1], bl
jmp 0xfa3dd6
mov al, byte [esp + 5]
lea edi, [esp - 2]
mov word [esp + 1], ax
xchg dx, di
mov edx, 0x66f54911
pop dx
jmp 0xfa3da7
lea ebx, [esp + edx]
mov dword [esp], edi
lea edi, reloc.KERNEL32.dll_SetEndOfFile
setno bh
mov eax, dword [esp + 2]
mov eax, dword [esp + 4]
jmp 0xfa3f78
xchg word [esp + 0x11], dx
lea esi, [ecx - 0xde]
neg dh
lea esp, [esp + 0x13]
stc
xchg dword [esp], esi
jmp 0xfa3d61
add esp, 0
neg cl
mov ebp, esi
bswap edx
mov byte [esp], al
pushfd
call fcn.00fa3e61
mov byte [esp + 2], ah
cmp ah, 0xe2
clc
rdtsc
xchg dx, ax
mov bl, byte [esp]
jmp 0xfa3f01
xchg byte [esp + 1], bh
mov ebp, 0xe4481c53
sets al
sub esp, 0x13
jmp 0xfa3f1b
lea eax, reloc.KERNEL32.dll_SetEndOfFile
mov edx, 0x96a416cd
xchg dword [esp], edi
bswap ebx
pop word [esp]
bt ax, dx
jmp 0xfa3eeb
lea ebp, [esp - 0x3f]
btc bx, bp
add esp, 0xf
mov si, word [esp + 4]
xchg dword [esp + 4], ebx
stc
jmp 0xfa3f56
stc
btr ax, sp
setnp bl
xchg dword [esp], ebp
pushfd
bswap edi
jmp 0xfa3fa7
mov word [esp], dx
lea edx, reloc.KERNEL32.dll_SetEndOfFile
cpuid
rdtsc
mov ebp, 0x15ca0bbd
pop edx
jmp 0xfa3eb5
bswap eax
rdtsc
mov byte [esp + 4], dl
mov word [esp + 4], sp
push di
jmp 0xfa3fd1
mov byte [esp + 9], ah
pop dword [esp + 2]
lea ebx, [edi + ebp]
mov ah, 0xc4
mov si, bx
xchg al, cl
jmp 0xfa3f91
pop dword [esp]
mov bx, 0x9655
rcl di, cl
pop ebx
xchg bl, cl
mov al, byte [esp]
jmp 0xfa3fe3
pop word [esp + 6]
mov bx, ax
rdtsc
cpuid
rdtsc
cpuid
jmp 0xfa3fbb
add esp, 0
rdtsc
mov ax, 0x2f9e
or di, 0xf73e
not dl
rdtsc
jmp 0xfa57e6
lea edx, [edx*4]
xchg word [esp + 2], dx
setp al
call fcn.00fa407f
mov bh, bl
xchg dword [esp + 9], ebx
xchg byte [esp + 0xe], cl
cmp edi, esp
mov edi, ebp
jmp 0xfa4134
xchg dword [esp + 0xf], edi
mov ch, byte [esp + 4]
call fcn.00fa40e9
cpuid
push word [esp + 3]
xchg bx, ax
pop word [esp + 2]
stc
pop si
jmp 0xfa4165
xchg byte [esp + 0xf], bl
mov word [esp + 9], bx
xchg dword [esp], ebp
sub ebp, 0xe6ab1e36
mov ax, sp
mov si, 0x5678
jmp 0xfa40ff
xchg byte [esp], ch
neg ecx
not si
mov byte [esp + 1], ch
not dl
jmp 0xfa417b
cmp al, 0x4f
pop dword [esp + 1]
setge ch
pop dword [esp]
mov edi, dword [esp]
mov cx, word [esp + 1]
jmp 0xfa414f
bsr ax, cx
call fcn.00fa41c6
inc esi
insb byte es:[edi], dx
jne 0xfa41fb
push 0x656c6946
inc edx
jne 0xfa41f6
jb 0xfa4207
add byte [esi - 0x42], ah
out 0x4a, al
xchg word [esp + 0xa], ax
xchg dx, cx
mov dword [esp + 0xb], edx
mov ax, 0x38f2
rdtsc
call fcn.00fa40e7
mov si, word [esp + 5]
mov ecx, 0xecd09951
sub esp, 0xb
pushfd
jmp 0xfa4242
bt ax, dx
push word [esp + 0xe]
pop dword [esp + 0x19]
call fcn.00fa421e
dec eax
popal
jo 0xfa4247
imul edi, dword [edx + 0x65], reloc.KERNEL32.dll_SetEndOfFile
add dh, bh
ror dword [ecx - reloc.KERNEL32.dll_SetEndOfFile], 0xdb
inc cl
mov dword [esp + 9], edi
neg bl
jl 0xfa4221
or esi, esi
invalid
push sp
neg bl
bswap edi
jmp 0xfa41dd
aad 0xbb
jmp 0xfa425b
mov ebx, 0xfbb50eb
mov bp, cx
push word [esp + 8]
push esp
jmp 0xfa422b
in eax, dx
add byte [eax], al
add ah, bh
bsr eax, edx
jmp 0xfa4208
rcr di, 0xc
stc
push dword [esp + 0xb]
xchg dx, bx
pop word [esp + 3]
jmp 0xfa426b
pop dword [esp + 9]
sub esp, 0x1a
pop edi
bswap ebp
neg bh
pop word [esp + 0xb]
in al, dx
sbb bl, byte [edi + 0xf]
int 0xf6
fbld tbyte [esi - 0x71]
inc esp
and al, 0xb
jmp 0xfa41f8
neg bx
push dword [esp + 0xa]
mov word [esp + 0x30], ax
or ah, byte [esi - 0x77]
inc esp
and al, 0x30
xchg word [esp], bx
jmp 0xfa4292
std
mov ah, byte [esp + 0x25]
pop di
xchg byte [esp + 0x17], cl
rdtsc
neg edx
jmp 0xfa4255
ror cx, 1
mov dh, byte [esp + 0xe]
pop word [esp + 4]
jmp 0xfa46d8
mov dh, byte [esp + 0x2e]
pushfd
pop dx
setnp ah
not ebx
xchg ah, ch
jmp 0xfa427c
mov dx, word [esp]
lea ebx, reloc.KERNEL32.dll_SetEndOfFile
lea ebp, reloc.KERNEL32.dll_SetEndOfFile
pop word [esp + 1]
jmp 0xfa438b
xchg byte [esp], bh
xchg byte [esp], ah
not dl
inc bx
neg edx
pop word [esp]
jmp 0xfa42c2
pop word [esp + 0x17]
xchg dword [esp + 2], edx
lea edi, [eax*4]
mov eax, dword [esp + 0xd]
jmp 0xfa4356
rdtsc
pop ebx
push word [esp + 0xc]
xchg word [esp + 2], cx
mov di, 0x824a
ror edi, cl
jmp 0xfa42f2
mov ebp, esi
lea ecx, [eax*4]
btc ebx, edi
jmp 0xfa4366
setg cl
xor eax, 0x70180b31
cld
mov edi, edx
stc
mov bl, byte [esp]
jmp 0xfa4321
bsr edx, ebp
inc edx
clc
mov dword [esp + 0xc], ebx
push dword [esp + 6]
popal
jmp 0xfa4337
mov edx, 0x368509dd
bswap ecx
mov edi, dword [esp]
lea edx, reloc.KERNEL32.dll_SetEndOfFile
clc
mov edx, 0x8305297a
jmp 0xfa43bb
push word [esp]
cpuid
pop word [esp]
pop word [esp]
bsr si, ax
sub esp, 0x1e
jmp 0xfa430c
mov edi, 0x4549d02a
lea eax, [ebx*4]
xchg di, si
jmp 0xfa4608
bsf dx, dx
lea edx, reloc.KERNEL32.dll_SetEndOfFile
mov bl, dh
jmp 0xfa43a5
lea edi, [ecx*4]
xchg dword [esp + 0x19], edi
popal
inc dl
pop dword [esp]
push dword [esp + 1]
jmp 0xfa42e0
bsf esi, esp
stc
lea eax, reloc.KERNEL32.dll_SetEndOfFile
bsf edx, eax
jmp 0xfa456a
mov edi, 0xfba8d7d4
mov ebp, dword [esp]
lea ebp, [edi*4]
mov ecx, dword [esp]
mov ah, byte [esp]
cpuid
jmp 0xfa43ec
pop word [esp]
mov cx, dx
mov cx, 0x6189
call fcn.00fa4434
dec dx
bsr eax, esp
push word [esp + 8]
mov bl, 0x31
mov esi, dword [esp + 3]
jmp 0xfa449f
pop di
mov ebx, 0xec902d85
mov byte [esp + 0x17], cl
mov di, bx
and esi, 0xb4ad42ca
jmp 0xfa44d2
mov edi, dword [esp + 2]
sub esp, 2
lea esi, [edx + edx]
pop cx
cmc
lea edx, reloc.KERNEL32.dll_SetEndOfFile
jmp 0xfa4461
mov dx, 0xb378
rdtsc
mov dl, byte [esp + 6]
mov al, bl
ror cx, cl
bswap ecx
jmp 0xfa4536
mov ch, byte [esp]
mov ebp, 0x84e05e8e
ror dh, cl
lea esp, [esp]
mov ebp, edx
push edi
jmp 0xfa44bd
neg ax
rcl esi, 7
mov ch, byte [esp + 0xe]
setp bl
rol edx, 0x1e
jmp 0xfa454c
push dword [esp + 0x17]
std
cpuid
xchg word [esp + 0x10], di
xchg word [esp + 0xa], si
jmp 0xfa4508
pop word [esp + 0xc]
mov di, word [esp + 0x10]
rdtsc
std
xchg bh, bl
mov eax, 0x8a78a410
jmp 0xfa451e
push dword [esp + 0x1b]
cpuid
bsf di, dx
std
lea esp, [esp + 9]
pop bx
jmp 0xfa45d8
bsr cx, ax
mov cl, 7
inc bx
sub esp, 5
add esp, 2
pop ax
jmp 0xfa44f6
xchg dword [esp + 8], edx
lea ebx, [ecx - 0x53]
bswap edi
call fcn.00fa4595
lea ebx, [ebp*4]
lea ebp, [edi*4]
mov di, ax
push dword [esp + 0x1b]
add esp, 0x19
jmp 0xfa4642
mov ebp, dword [esp]
lea eax, reloc.KERNEL32.dll_SetEndOfFile
mov bl, cl
dec ch
ror edx, 0
lea edx, [edx*4]
jmp 0xfa4402
xchg ecx, eax
pop ebp
cpuid
lea esp, [esp + 0x12]
xchg byte [esp], bl
bsf esi, esi
jmp 0xfa4673
mov dx, word [esp + 0x10]
and bx, 0x10e6
lea ebp, [esp + ebx]
neg edx
mov word [esp + 0x12], ax
mov bp, word [esp + 0xf]
jmp 0xfa4624
xchg edi, ebp
mov byte [esp], dl
mov bx, 0x9081
mov ax, 0x17e1
sbb bl, ch
jmp 0xfa469d
mov byte [esp], bl
bsf ebp, ebx
mov word [esp], bp
setb bl
mov ebp, dword [esp]
xor edi, ecx
jmp 0xfa465d
push si
sub di, 0x3f25
pop bp
inc bl
sete dh
jmp 0xfa46b3
bts edx, esp
push word [esp]
xchg word [esp + 1], di
pop word [esp]
rdtsc
cpuid
jmp 0xfa4687
adc bx, 0xc153
clc
neg dl
xchg byte [esp], bl
sub bx, di
mov word [esp], di
jmp 0xfa4734
lea ebp, [edi + 0x8c]
ror al, cl
xchg word [esp + 0xa], di
rdtsc
add esp, 0x28
sub esp, 0x1d
jmp 0xfa43d2
xchg di, si
xchg byte [esp], ch
setno ah
mov byte [esp], bh
lea esp, [esp + 2]
popal
call fcn.00fa4708
not cl
push ebx
cpuid
xchg word [esp + 2], di
shr dh, 7
mov byte [esp + 3], ah
jmp 0xfa40bd