Function at 0x13031b0
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x1302fdd
mov edx, edi
add edx, reloc.kernel32.dll_GetProcAddress
jmp 0x130300c
movzx ebx, byte [edx]
neg edx
xchg ah, al
lea eax, [ebx + ebx]
bsr dx, si
bt edx, edx
jmp 0x130305d
jnp 0x1302feb
movzx ebx, byte [edx]
neg edx
jmp 0x1303019
xchg ah, al
lea eax, [ebx + ebx]
bsr dx, si
jmp 0x1302ff9
mov ax, 0x6943
bts edx, ebx
call fcn.0130308d
inc esp
invalid
cmp dx, bp
jb 0x1303047
mov ax, 0x6943
bts edx, ebx
jmp 0x13030dc
add bl, cl
mov ah, bl
xchg ah, al
neg ax
jne 0x1303103
je 0x1303119
push cx
lea esp, [esp + 2]
jmp 0x1303143
jmp 0x1303119
mov dl, bl
not ax
lea eax, [eax + ecx]
mov ax, word [esp]
stc
jmp 0x1303159
inc dl
not ah
stc
jne 0x130321c
je 0x130321c
and bl, byte [ebp - 0x54]
mov edi, 0x668e7986
push ecx
jns 0x13030e9
push cx
lea esp, [esp + 2]
jmp 0x1303143
mov ah, al
adc ax, 0xb440
dec al
xchg al, ah
neg ah
jmp 0x13031e7
sub dl, 0x2b
bts ax, cx
jb 0x130317e
mov ah, al
jmp 0x13031c7
neg ah
jmp 0x13031e7
jmp 0x13031d1
rol dl, 0
call 0x13031b0
clc
mov ah, 0x18
rol al, cl
jle 0x13031fb
jg 0x1303237
aam 0x5f
iretd
adc ax, 0xb440
dec al
xchg al, ah
jmp 0x13031a1
mov ah, 0x66
mov eax, 0x5b0a6fc2
jmp 0x13031a7
rol dl, 0
not eax
setp ah
inc eax
jl 0x13031a5
mov ah, 0x66
mov eax, 0x5b0a6fc2
jmp 0x13031a7
mov eax, 0x42417de3
lea esp, [esp + 4]
neg dl
mov eax, dword [esp]
lea eax, reloc.kernel32.dll_GetProcAddress
jmp 0x1303221
jmp 0x1303194
lea eax, reloc.kernel32.dll_GetProcAddress
neg eax
jbe 0x1303254
rcl ah, cl
jmp 0x1303256
mov eax, 0x42417de3
jmp 0x1303200
add cl, dl
bsr dx, bp
jo 0x130334d
jno 0x1303312
sub eax, dword [edx - 3]
int3
rcl ah, cl
jmp 0x130323e
in al, 0x50
ror dword [edx + 0xf], cl
xor byte [edi], 0xfb
invalid
jmp 0x13032cf
dec edi
xchg dx, ax
rdtsc
setne al
inc ah
js 0x130327e
mov dx, bx
mov edx, 0xc0247428
mov dx, word [esp]
jmp 0x1303372
stc
push esi
bswap eax
jmp 0x130335c
mov dx, bx
mov edx, 0xc0247428
mov dx, word [esp]
call 0x13032f7
loopne 0x1303269
xchg dword [esp], ebx
sbb al, 0x24
mov dl, byte [esp]
neg dh
lea ebx, [ebx - 0x2e]
call fcn.01303334
and ebx, dword [edx - 0x4b]
bsf dx, cx
lea edx, [eax*4]
mov edx, 0xa20dff
mov edx, dword [esp]
jmp 0x13032e1
lea eax, [edi*4]
mov dl, dh
pushfd
jmp 0x1303357
lea eax, [edi*4]
mov dl, dh
pushfd
jmp 0x1303294
lea esp, [esp + 4]
inc bl
mov dh, ch
mov dh, byte [esp]
rdtsc
jmp 0x130337f
lea edx, [eax*4]
stc
jmp 0x13032ba
lea edx, reloc.kernel32.dll_GetProcAddress
jmp 0x13033bc
jmp 0x13033eb
xor bl, 4
mov edx, dword [esp]
mov ax, si
bts dx, sp
jg 0x13033a6
push ebp
mov ah, byte [esp + 2]
jmp 0x13033f0
push ebp
mov ah, byte [esp + 2]
call fcn.013034d6
rol dword [esi - 0x2c], 0xb3
dec esi
invalid
mov dx, word [esp]
jmp 0x13037ca
xchg bx, ax
mov dx, word [esp]
add esi, 4
mov ebx, dword [esp]
stc
ja 0x1303819
xchg dl, bh
jmp 0x1302fbf
add ecx, 0xdd22ac6a
jmp 0x13045fd
xchg dl, bh
jmp 0x1302fbf
add ecx, 0x52c4fc6c
jmp 0x130464a
jmp 0x13037f3
call fcn.01303863
add bh, byte [ebp + 0x14891f8c]
sub eax, dword [edx]
fmul dword [edi]
mov dword [ebx + ebp], edx
add bl, al
js 0x13037c3
mov byte [eax - 1], ch
invalid
xchg bx, ax
jmp 0x13037ad
dec eax
js 0x1303856
jp 0x1303891
in al, dx
pop edx
xchg ecx, eax
adc byte [ebx + 0x66cbeb9c], dl
pop dword [esp + 5]
pushfd
jmp 0x1303847
lea esp, [esp + 1]
push esp
lea esp, [esp + 1]
mov dword [esp + 0x28], edx
jmp 0x13038c3
movsd dword es:[edi], dword [esi]
aam 0x47
mov dword [esp + 0x1b], ebx
lea esp, [esp + 2]
mov dword [esp + 0x20], ecx
jmp 0x1303879
push esp
push word [esp + 1]
jnp 0x1303902
jp 0x1303902
add edx, 0x52c4fc6c
call fcn.01304f28
xchg edx, eax
or eax, 0xa417e49d
sbb al, 0x6f
jbe 0x130386f
add eax, 0x4102588f
jmp 0x1303850
call 0x13038ec
jmp 0x13040da
movzx eax, byte [esi - 1]
btr ecx, esi
jp 0x13040b1
mov dl, byte [esp]
jmp 0x1304120
mov dl, byte [esp]
mov cx, 0xcf34
clc
stc
mov dl, al
jmp 0x1304128
mov dl, al
jmp 0x1304128
mov cx, 0xcf34
clc
stc
jmp 0x130410a
sub al, bl
setno ch
call 0x1304133
mov ecx, 0xca876655
jmp 0x130417a
mov dl, 0x1c
xor cl, 0x9b
mov edx, dword [esp]
lea edx, [edx - 0xc7]
cmc
jmp 0x13041db
mov cl, al
lea edx, [edx + edx]
lea edx, [ecx + edx]
setg dl
mov dx, word [esp]
lea edx, [esi*4]
jmp 0x1304157
cmc
mov edx, eax
jmp 0x13041c3
not cl
bsr edx, ebp
jp 0x1304217
jnp 0x1304217
imul eax, dword [ebx], reloc.kernel32.dll_GetProcAddress
test byte [0x5ac453b7], 0x3d
int3
ja 0x1304192
cmc
mov edx, eax
jmp 0x13041c3
call 0x13041f8
neg cl
mov dh, 0xbe
mov dl, cl
sub esp, 8
jmp 0x1304662
lea edx, [eax + ebp]
lea edx, [esi + ebp]
bt edx, esp
bswap edx
neg dh
jmp 0x13042f9
call 0x1304270
inc ebx
lea esp, [esp + 0x28]
and al, 0x28
jmp 0x130427a
inc cl
xchg dh, dl
bswap edx
sub dx, dx
jnp 0x1304296
jp 0x13042cb
lds ebx, [edx + esi*8 - 0x6b]
aam 0x29
dec eax
jmp 0x1304293
call fcn.01304266
invalid
pushfd
push bx
bsf edx, edi
lea esp, [esp + 2]
jmp 0x13042d3
jmp 0x130426a
lea esp, [esp + 2]
jmp 0x13042d3
pushfd
push bx
bsf edx, edi
jmp 0x13042b5
sub bl, cl
lea ecx, reloc.kernel32.dll_GetProcAddress
mov ch, dl
btc ecx, esi
js 0x1304306
jns 0x1304591
int1
insb byte es:[edi], dx
loop 0x1304271
je 0x13042b3
fnstcw word [ecx - 0x17]
mov byte [ebx - 2], bh
fdivr dword [ebx]
adc cl, byte [ebp + 0x24648d1c]
or dh, bh
leave
lea esp, [esp + 8]
dec cl
pushal
inc dx
jle 0x1304291
jg 0x1304291
jmp 0x1304591
lea ecx, [edi*4]
cmc
jmp 0x1304562
inc ch
neg cx
mov cx, word [esp]
sete dh
shl dx, cl
jmp 0x1304412
bt edx, esp
bswap edx
neg dh
jmp 0x13042f9
lea esp, [esp + 1]
call fcn.01304391
mov cx, 0x85d0
xchg ch, dl
cmc
je 0x1304494
dec dx
mov ecx, ebp
mov dl, 0x54
mov dh, 0xb9
jmp 0x1304438
seto cl
mov edx, 0xde8eb9ad
dec dl
jmp 0x130433a
seto cl
mov edx, 0xde8eb9ad
dec dl
lea esp, [esp + 1]
xor al, 0xc9
jmp 0x1304343
sub al, 0xe5
lea ecx, [esi + esi]
sub esp, 1
jae 0x13043cc
jb 0x1304360
not cx
dec dx
lea ecx, [esi*4]
xchg dword [esp], edi
jmp 0x1304479
xor al, 0x53
adc ecx, esi
jle 0x13044a1
jg 0x13044d2
sub ch, byte [ebp + 0x4b7443d]
xor al, 0xbe
sub al, 0x4b
mov byte [edi], 0xf
xchg esi, eax
add eax, eax
cmp dword [edx], reloc.kernel32.dll_GetProcAddress
int 0xb2
push esp
mov ecx, ebp
mov dl, 0x54
mov dh, 0xb9
call 0x1304422
adc eax, 0xab0f6684
int1
lea edi, [edi - 0x29]
pushfd
mov dx, word [esp + 2]
jmp 0x13044bc
xchg cl, ch
lea edx, [esp + edi]
call 0x1304463
and ch, byte [edi + 0x71a95a3f]
dec eax
rcl byte [esi + 0x31], 0xc0
ja 0x130448d
sal byte [edi - 3], 0xcc
pop edi
cmpsb byte [esi], byte es:[edi]
shl dword [esi + 0x4a], 1
int3
dec dx
jmp 0x1304456
xchg dh, cl
push dword [esp + 4]
ret 8
xchg dx, cx
mov dx, 0x4e37
xchg dh, dl
lea edx, [ebx + edi]
xchg ecx, edx
jmp 0x13044f7
bswap ecx
pop ecx
xchg dword [esp + 4], edi
mov cx, word [esp]
lea edx, [edi*4]
xchg ch, dl
jmp 0x1304498
xchg dx, cx
mov dx, 0x4e37
xchg dh, dl
jmp 0x1304517
mov cx, word [esp]
sete dh
shl dx, cl
jmp 0x1304412
not al
mov edx, dword [esp]
bts edx, esi
jns 0x1304534
js 0x130451e
push ecx
fimul word [ebx + ebp - 0x1a]
and eax, 0xc6a333a1
xor eax, 0xaa34b9f0
int 0x3c
jmp dword [ecx + 0x3b148de0]
lea edx, [ebx + edi]
xchg ecx, edx
jmp 0x13044f7
lea ecx, [esp + ebx]
xchg cl, dl
not ch
jmp 0x130453b
lea ecx, [esp + ebx]
xchg cl, dl
not ch
call 0x1304541
movsb byte es:[edi], byte [esi]
lea esp, [esp + 2]
jmp 0x130454b
lea esp, [esp + 2]
jmp 0x1304572
jnp 0x1304319
inc ch
neg cx
jmp 0x13044e8
dec al
call 0x130457a
jo 0x1304572
not ecx
xchg ecx, edx
bswap ecx
jmp 0x13045d5
rol dword [edi - reloc.kernel32.dll_GetProcAddress], 1
push ebx
mul dword [bx + 2]
int1
dec ebx
jg 0x1304572
jle 0x13045a5
call 0x2864cabf
dec esi
mov dx, word [esp]
pushfd
pop dx
lea esp, [esp + 2]
jmp 0x130430b
bswap edx
jmp 0x1304629
add byte [eax], 0
add byte [eax - 0x34], bl
inc edx
and eax, 0x59ce66d4
leave
test al, 0x5b
in al, dx
cmp byte [ebx], bl
jb 0x130457a
shl ecx, 2
loope 0x13045bd
inc dx
jg 0x13045a2
bswap edx
mov dl, ch
jmp 0x13037e1
mov ecx, eax
lea edx, [edi*4]
mov edx, ecx
setae dl
bswap edx
jmp 0x13045b8
setle dh
jmp 0x1304609
cmc
jl 0x13045e7
setle dh
jmp 0x1304646
mov dl, bl
mov ecx, dword [ecx + reloc.kernel32.dll_GetProcAddress]
pushfd
pop word [esp]
mov dl, byte [esp]
jmp 0x1304630
mov dl, ch
jmp 0x13037e1
lea esp, [esp + 2]
jmp 0x1303807
mov dl, bl
jmp 0x130460b
adc edx, 0xb3b27ec
ja 0x1304808
mov dx, word [esp]
jmp 0x130480c
jae 0x130422b
lea edx, [eax + ebp]
lea edx, [esi + ebp]
jmp 0x1304331
mov dx, word [esp]
call fcn.013046db
mov edx, 0x309cffd8
jmp 0x130485c
xchg cl, dl
bt cx, cx
jge 0x1304844
mov ecx, 0x57a51acd
jmp 0x130487a
mov ecx, 0x57a51acd
mov ecx, dword [esp]
call fcn.013048f3
int3
mov dh, cl
inc ecx
and eax, 0x3c
jmp 0x1304818
sub ebp, 4
setne ch
setae dl
bts ecx, esp
jmp 0x1304902
mov ecx, dword [esp]
jmp 0x1304864
mov dx, di
mov ecx, dword [eax + edi]
rdtsc
jmp 0x1304921
jb 0x130487f
mov dx, di
jmp 0x1304882
xchg dx, ax
neg ah
jmp 0x1304974
mov dword [ebp], ecx
bt dx, si
js 0x1304956
jns 0x130498e
jmp 0x13049b3
xchg cx, ax
inc cx
jmp 0x1304978
ja 0x130492b
jbe 0x130492b
lea edx, [edx*4]
mov ax, bx
setne al
jmp 0x1304e88
xchg cx, ax
inc cx
jmp 0x1304978
invalid
cmp ebp, ecx
jmp 0x1305000
jp 0x13049f7
bsr ax, ax
mov edx, esp
jmp 0x13049fd
movzx eax, byte [esi - 1]
call 0x13049df
jecxz 0x1304a46
mov edx, 0x8766ad9a
retf 0x2c8a
bsr ax, ax
mov edx, esp
jmp 0x13049b4
neg ecx
jo 0x1304a6c
mov ecx, esp
mov cx, 0x82bd
setbe cl
jmp 0x1304a52
lea ecx, [edi*4]
jmp 0x1304a29
setbe cl
xor dl, 0x9b
not cx
mov cx, sp
jmp 0x1304a8a
mov ecx, esp
mov cx, 0x82bd
jmp 0x1304a4f
mov cx, 0x3dc7
stc
btr ecx, ecx
jmp 0x1304aa8
lea ecx, [ebx + edi]
bsf cx, cx
jg 0x1304a74
mov cx, 0x3dc7
jmp 0x1304a9e
stc
btr ecx, ecx
jmp 0x1304aa8
not dl
mov ch, 0x3e
mov ch, byte [esp]
mov cx, 0x909b
mov ch, byte [esp]
jmp 0x1304cd8
lea ecx, [edi + 0x50]
bswap edx
bts ax, bx
jmp 0x13049cb
jmp 0x1304b26
lea esp, [esp + 4]
dec dl
mov ecx, 0x103b0cec
bsf cx, cx
js 0x1304ad6
bswap ecx
not cx
inc cx
jmp 0x1304b0a
inc dl
mov cl, byte [esp]
mov cl, byte [esp]
pushal
pop ecx
jmp 0x1304b45
bswap ecx
not cx
inc cx
jmp 0x1304b0a
sub bl, dl
xchg ch, cl
jmp 0x1304b4f
xchg byte [esp + 0x16], cl
neg cl
jno 0x1304b2f
jo 0x1304b2f
btr dx, ax
jae 0x1304c1e
bsr cx, cx
pushal
jmp 0x1304bbc
not cx
mov ch, byte [esp]
lea ecx, [edx + edi]
jmp 0x1304aec
dec esi
call fcn.01304b8e
bsf ecx, ecx
jb 0x1304bf0
pop ecx
jmp 0x1304bf1
mov dh, al
btc dx, dx
jl 0x1304bf5
cmp ch, ah
jmp 0x1304c00
pop ecx
sub al, 0xe5
jmp 0x1304bda
cmp ch, ah
xchg dx, cx
call fcn.01304c25
sbb esp, dword [esi - 0x79]
retf 0xc8d
xchg dx, cx
lea ecx, [esp + eax]
mov ecx, edi
jmp 0x1304c46
bsr cx, cx
pushal
jmp 0x1304bbc
xor al, 0xc9
mov ecx, edx
lea ecx, [esp + ebx]
rol edx, 4
jb 0x1304c93
bswap ecx
clc
mov cx, di
mov edx, edi
not cl
jmp 0x1304e52
pushfd
jmp 0x1304b67
jmp 0x1304cb3
bswap ecx
clc
mov cx, di
jmp 0x1304cbf
mov edx, edi
not cl
jmp 0x1304e52
neg dl
bts ecx, edx
jbe 0x1304c64
pushfd
not cx
mov ch, byte [esp]
lea ecx, [edx + edi]
jmp 0x1304aec
stc
jmp 0x1304e34
pushfd
call fcn.01304e6f
mov cl, byte [esp]
push bp
mov cl, byte [esp + 1]
lea esp, [esp + 2]
jmp 0x1304eb2
xor al, 0x53
lea edx, [ebx*4]
call fcn.01304d04
shl edx, 2
neg ch
jno 0x1304e2d
stc
pushfd
jmp 0x1304e35
adc ecx, 0xfebdce21
jo 0x1304ac8
jno 0x1304ac8
bsf cx, cx
jle 0x1304ec3
mov ecx, 0x7942fa04
jmp 0x13038cd
mov ecx, edx
lea ecx, reloc.kernel32.dll_GetProcAddress
mov edx, dword [ecx]
mov ecx, 0xf18a0bb3
jmp 0x1304e9a
mov ecx, 0x7942fa04
call fcn.01304f06
inc esp
fisttp dword [ebx + 0x2e]
fstp qword [ecx]
stosb byte es:[edi], al
cmp al, 0xd2
mov ch, 0x44
invalid
ja 0x13049d5
mov ah, byte [esp]
xchg cl, dh
jmp 0x1305072
call 0x130505c
fcomp dword [edx - 0x38]
scasd eax, dword es:[edi]
pop edx
pushfd
cmp bh, byte [edi + 0x74b94a2f]
adc cl, byte [ebp - 0x728990e4]
push edi
inc eax
lea edx, [edi + 0x40]
btc eax, ecx
js 0x1305034
jns 0x1305034
arpl cx, sp
jno 0x1305068
jecxz 0x13050b9
mov al, byte [0x244486e3]
add dword [edi + reloc.kernel32.dll_GetProcAddress], eax
and al, 0xeb
insd dword es:[edi], dx
sbb dword [eax + 0x5e98690e], ebx
jno 0x1305062
imul ebx, dword [eax + reloc.kernel32.dll_GetProcAddress], 0x644aff0c
or al, 0xff
dec edx
mov ecx, edi
mov ecx, edi
setp ah
bswap edx
lea edx, [ecx*4]
bswap edx
jmp 0x130504a
adc esi, dword [ebx - 0x1e]
sub esp, 0x13
add esp, 0x1a
sub esp, 0x14
jmp 0x13050f9
and al, 0xfc
call 0x1305118
cmp al, 0xf
call fcn.0130511d
wait
adc al, 0x8a
in eax, dx
sbb al, 0xdf
jno 0x43b3c124
rol byte [ebx - 0x177beac6], 0xe5
invalid