Function at 0xb9603d
Capabilities:
Execute anti-debugging instructions

Disassembly:
bswap edx
push word [esp + 1]
mov word [esp + 2], sp
push edx
mov ax, 0x2ae5
rdtsc
call fcn.00b95fbb
push esp
insb byte es:[edi], dx
jae 0xb95ff1
je 0xb95ff7
popal
insb byte es:[edi], dx
jne 0xb9600a
add byte [edx], cl
movsd dword es:[edi], dword [esi]
push word [esp + 1]
rdtsc
xchg dh, al
mov dh, bh
rdtsc
mov eax, dword [esp + 3]
jmp 0xb95f82
mov dh, 0x6a
mov dh, bh
rcr dh, 7
neg dh
sub edx, ebp
xchg dh, dl
jmp 0xb95ff2
xchg esi, edx
add esp, 0x17
inc ax
sub esp, 0
setb dh
pop ax
jmp 0xb95fa8
mov dh, 0x66
pop dword [esp + 3]
pop word [esp + 3]
lea esp, [esp + 3]
lea edx, [ecx - 0x63]
mov dl, byte [esp]
inc dh
xchg si, ax
jmp 0xb960ca
add byte [ebx + esi*2 + 0x74], ch
jb 0xb96073
jo 0xb9608b
inc ecx
add byte [esi - 0x77], ah
push esp
and al, 0xa
mov byte [esp + 9], bh
cld
lea esp, [esp + 1]
mov dh, ch
inc al
jmp 0xb95fbd
jmp 0xb95fe1
mov dh, byte [esp]
lea esi, [eax*4]
mov dl, dh
jmp 0xb96099
bts eax, ebx
lea esp, [esp + 3]
shr edx, 0x1b
lea esp, [esp + 1]
mov eax, dword [esp + 0xb]
adc dx, 0x6cda
jmp 0xb9603f
rol si, cl
lea esi, [ebp - 0xf]
int1
mov si, word [esp]
lea esi, [edx + ebx]
ror esi, 0x19
shr esi, 1
jmp 0xb960b3
add byte [eax], al
inc edi
je 0xb960d7
imul ebp, dword [ebp + 0x53], reloc.WINMM.dll_midiStreamStop
mov edx, 0x2985cc80
mov esi, dword [esp]
mov esi, dword [esp]
mov dh, bh
lea edx, [esi*4]
mov edx, dword [esp + 0x4a]
jmp 0xb9606e
mov esi, dword [esp + 0x51]
lea esp, [esp + 0x64]
popfd
jmp 0xb96222
and dh, bh
push edx
cmc
sub esp, 0
clc
clc
jmp 0xb96055
outsd dx, dword [esi]
bound esp, qword [ecx + 0x6c]
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
add byte gs:[edi - 0x12], al
lea esp, [esp + 0x46]
pushal
mov byte [esp], ch
mov dword [esp + 0x15], ecx
push edx
pop word [esp + 0x11]
call fcn.00b96154
mov dword [esp + 0x10], ebp
mov word [esp + 8], sp
lea esp, [esp + 0x1c]
push word [esp + 1]
jmp 0xb961db
pushal
mov dword [esp + 0x1f], eax
push word [esp + 3]
pop dword [esp + 0x10]
mov word [esp + 4], bx
pushal
jmp 0xb96177
pop word [esp]
push dword [esp + 6]
push dword [esp + 3]
mov byte [esp + 0xf], ch
pop dword [esp + 5]
push word [esp + 0xa]
call fcn.00b961bf
pop dword [esp + 1]
mov word [esp + 8], sp
pop word [esp + 4]
mov dword [esp + 2], eax
lea esp, [esp + 9]
call fcn.00b961c1
push ebx
je 0xb9625d
outsb dx, byte [esi]
dec edi
inc si
imul ebp, dword [ebp], reloc.WINMM.dll_midiStreamStop
or eax, 0x240481e9
invalid
push 0xe90d8a39
add dword [esp], reloc.WINMM.dll_midiStreamStop
push esp
push esp
mov byte [esp], ah
jmp 0xb961a9
pop dword [esp + 8]
mov word [esp + 0xc], di
mov byte [esp + 0xb], bh
push word [esp + 9]
pop word [esp + 7]
jl 0xb96283
or al, 0x88
jl 0xb96287
or esp, dword [esi - 1]
je 0xb9628c
or dword [esi - 0x71], esp
inc esp
and al, 7
call fcn.00b96238
pop dword [esp + 0xc]
lea esp, [esp + 1]
call fcn.00b9623f
inc edi
insb byte es:[edi], dx
outsd dx, dword [esi]
bound esp, qword [ecx + 0x6c]
inc edi
je 0xb962cb
je 0xb962fb
insd dword es:[edi], dx
dec esi
popal
insd dword es:[edi], dx
inc ecx
add bh, bh
je 0xb962ba
push es
pop word [esp + 9]
mov word [esp + 0xc], di
push dword [esp]
pop word [esp + 0x11]
jmp 0xb96257
add byte [edx], ah
pop ebp
push dword [esp + 2]
call 0xb96293
push dword [esp + 6]
call fcn.00b962e7
sbb byte [eax], al
add byte [eax], al
inc esi
outsd dx, dword [esi]
jb 0xb96340
popal
je 0xb96323
jae 0xb9634c
popal
inc ecx
add byte [ebp - 0x17fcdb9c], cl
invalid
add byte [eax], al
push ebx
je 0xb9634d
popal
jae 0xb96378
inc ebp
jb 0xb96379
outsd dx, dword [esi]
jb 0xb9630a
add byte [eax], al
add byte [edi + 0x65], al
je 0xb9637c
dec edi
push eax
xor al, byte [eax]
insb byte es:[edi], dx
and al, 0xff
je 0xb96374
add bh, bh
je 0xb96378
add al, 0x88
jl 0xb9637c
or dword [ecx - reloc.WINMM.dll_midiStreamStop], ecx
iretd
inc ecx
je 0xb963e7
insd dword es:[edi], dx
add byte [eax - 0x17fadb9c], cl
fdiv st(7), st(0)
invalid
and al, 5
call 0xb9635f
push edx
jae 0xb963fc
insd dword es:[edi], dx
push esp
push 0x64616572
add byte [ecx + ecx*4 - 0x76f5dbb4], ch
dec esp
and al, 0xe
call 0xb9637a
push dword [esp]
mov word [esp + 4], sp
lea esp, [esp + 5]
mov byte [esp + 1], bh
test eax, 0x24448f66
add ecx, dword [eax - reloc.WINMM.dll_midiStreamStop]
add al, 0x24
xor ebp, dword [edx]
inc ebp
hlt