Function at 0xb806fe
Capabilities:
Execute anti-debugging instructions

Disassembly:
xchg bp, ax
mov si, word [esp + 3]
mov byte [esp + 7], dl
mov dl, byte [esp]
pop bp
pop dword [esp]
jmp 0xb80376
rdtsc
mov edi, esi
mov dl, byte [esp + 3]
bswap esi
not bx
pop di
jmp 0xb80348
push word [esp + 1]
mov ch, al
bsf ecx, ebp
mov word [esp + 3], ax
rcl si, cl
xchg cx, di
jmp 0xb8040f
push dword [esp + 3]
shl ebx, 0x1a
xchg bh, ch
clc
bsr ecx, edx
push dword [esp + 8]
jmp 0xb80365
mov cl, byte [esp + 3]
pop eax
lea esi, [ebp - 0xc3]
bsf di, sp
jmp 0xb803e9
xchg bl, al
lea esp, [esp + 2]
add ax, 0x4d85
sub esp, 0x12
add esp, 0x11
push ax
jmp 0xb803a9
not bl
setp cl
mov ecx, 0x29b720be
inc bl
sub esp, 0x1d
jmp 0xb80442
btr bx, bx
cpuid
clc
or bx, 0x5d92
mov dx, bx
mov ax, sp
jmp 0xb803d3
and bx, 0xc904
pop word [esp]
lea edi, reloc.KERNEL32.dll_LockFile
mov word [esp + 2], bp
add esp, 2
lea ecx, [edx + ebx]
jmp 0xb803bf
pop ebp
rdtsc
mov bh, byte [esp + 0xa]
cld
add esp, 8
xchg dword [esp + 6], eax
jmp 0xb80453
cpuid
xchg ebp, edi
pop ax
pop di
mov dx, bp
mov bl, byte [esp + 2]
jmp 0xb8042c
add esp, 0
pop word [esp + 4]
mov byte [esp + 2], cl
mov eax, ebx
cld
sete dh
jmp 0xb804a0
not di
xchg di, bp
mov di, word [esp]
lea ecx, [esi*4]
rdtsc
mov di, 0x330d
jmp 0xb80396
rcr ebx, 8
lea esi, reloc.KERNEL32.dll_LockFile
mov byte [esp + 9], bh
jmp 0xb80538
xchg cl, dl
mov cx, 0xe808
inc edx
cld
xchg ah, dl
std
jmp 0xb8048a
xchg dword [esp], esi
rdtsc
std
xchg ebp, esi
not edx
call fcn.00b804ad
xchg dword [esp + 0x10], edi
pushfd
xchg edi, ecx
add esp, 5
xchg dword [esp + 0x11], esi
lea edi, [ecx + ebx]
jmp 0xb8051a
mov edi, dword [esp]
sub esp, 4
mov dx, 0x98d8
lea esp, [esp]
setp bh
jmp 0xb805a3
popal
pop ebp
mov eax, ebp
bts eax, ecx
lea esp, [esp]
mov edx, dword [esp]
jmp 0xb80504
bsf cx, sp
xchg byte [esp + 8], dh
push dword [esp + 5]
mov byte [esp + 0xb], bh
pop dword [esp + 4]
push edx
jmp 0xb804c3
mov ah, 0x1d
std
mov ebx, 0xcb0fde10
lea ebx, [ecx + ebx]
sub esp, 0x1c
jmp 0xb8057a
and bl, al
mov edx, dword [esp]
mov word [esp + 1], cx
mov dh, bl
pop dx
cpuid
jmp 0xb80552
mov bx, word [esp + 6]
lea edi, [edx*4]
lea esp, [esp + 0x19]
bsr bx, sp
sub esp, 3
setle ah
jmp 0xb805cb
bswap ebp
pop cx
not dx
not bp
lea esi, [eax + ecx]
lea edi, [ecx + edi]
jmp 0xb80568
and bh, al
bswap ebp
mov cx, sp
setae dl
xchg cl, bl
mov dl, dh
jmp 0xb80665
mov bl, byte [esp]
mov cl, byte [esp + 4]
mov ebp, ecx
mov ah, dl
neg al
mov word [esp + 4], sp
jmp 0xb805b5
sub esp, 0x16
std
bswap esi
pop dword [esp + 7]
inc bp
xchg dl, bh
jmp 0xb80606
bt bx, di
bswap ebx
add esp, 2
pop ax
cpuid
bswap esi
jmp 0xb805df
adc ebp, esp
bswap ebx
lea ecx, [ebx + 0xc9]
mov bl, byte [esp]
std
xchg di, bp
jmp 0xb8063f
lea ecx, [edx + esi]
xchg edi, ecx
push word [esp + 1]
cpuid
xchg dword [esp], ebx
sub esp, 2
jmp 0xb805f5
cpuid
bsr ecx, esp
mov ch, byte [esp + 7]
mov ch, 0x74
xchg dword [esp + 0xa], ebx
push dword [esp + 9]
jmp 0xb80694
xchg byte [esp + 2], bh
mov al, 0xec
xchg word [esp], cx
pop bx
mov ah, byte [esp + 4]
pop edx
jmp 0xb8062b
xchg word [esp + 6], cx
sub esp, 0xc
add esp, 0x15
bswap edx
xchg word [esp + 5], di
jmp 0xb806be
mov word [esp + 0x14], bx
cld
mov ah, byte [esp + 0x17]
pop edx
xchg dword [esp + 0xc], esi
xchg bx, di
jmp 0xb80678
btr edi, ecx
setl ch
bsr ecx, ebx
bswap ecx
jmp 0xb806d2
pop word [esp + 3]
sub cx, di
mov ebp, esp
mov ax, 0xb3e7
rdtsc
inc bx
jmp 0xb806a8
lea ebp, [ebx*4]
pop word [esp + 1]
lea edi, [eax + eax]
mov ebx, esi
mov bh, dl
pop dx
jmp 0xb807b2
add esp, 4
not eax
add esp, 0x28
xchg bl, ch
jmp 0xb8046e
mov dh, 0xfa
mov ecx, dword [esp]
call 0xb80785
push ebx
je 0xb8076e
je 0xb80781
dec eax
popal
outsb dx, byte [esi]
insb byte es:[edi], dx
add byte gs:[edx - 0x771063f3], dl
inc esp
and al, 3
mov byte [esp + 3], al
pop word [esp]
lea ebp, [edx*4]
mov edx, 0xb0a2ca49
mov ah, 0x4d
mov bx, 0x90c0
jmp 0xb8070d
pop di
rcr si, 3
mov dword [esp + 2], esp
call fcn.00b80744
xor si, cx
lea esp, [esp + 0x17]
and al, 0x17
lea esp, [esp + 1]
bsr eax, esi
sub cx, 0x930a
shl edx, 0x16
jmp 0xb80799
mul cl
and byte [ebx - 0x76], ah
pop esp
and al, 1
sub esp, 0x1f
lea edx, [edx*4]
mov bp, 0xd1af
jmp 0xb8075a
push word [esp]
mov di, word [esp + 2]
lea esi, reloc.KERNEL32.dll_LockFile
rdtsc
jmp 0xb807d8
pop di
pop dx
pushfd
bsr ebp, ecx
neg ch
stc
jmp 0xb80728
std
mov ah, byte [esp + 1]
mov si, bx
mov esi, 0x1ae8c62
add esp, 3
jmp 0xb80802
push dword [esp + 3]
xchg ebp, edx
pop word [esp + 3]
mov dword [esp], esp
xchg bx, di
std
jmp 0xb807c2
sub esp, 0x12
call 0xb807ec
mov ax, 0x3067
pop esi
neg ax
lea edx, [edx*4]
pop si
stc
jmp 0xb80be9