Function at 0xb03a25
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov ax, bp
bsr ax, si
jmp 0xb02920
mov al, bh
jmp 0xb028ec
clc
jp 0xb02944
mov eax, ecx
mov ah, 0xa7
mov eax, dword [esp]
jmp 0xb0294a
rol cl, 0
setae ah
not dx
and ecx, 0x3c
jmp 0xb0290a
mov eax, dword [esp]
jmp 0xb0294a
mov eax, ecx
mov ah, 0xa7
jmp 0xb0292e
sub ebp, 4
mov edx, 0x2949bca8
mov ah, al
mov ax, 0x17e3
jmp 0xb02999
xchg dh, ah
mov eax, dword [esp]
rol ax, cl
jae 0xb02906
mov al, bh
mov ax, bp
bsr ax, si
jmp 0xb02920
mov dword [ebp], edx
jmp 0xb029b9
mov edx, dword [ecx + esi]
mov eax, edi
dec ecx
je 0xb02983
jne 0xb02983
mov dx, ax
xchg ecx, eax
jmp 0xb029c9
neg ax
jne 0xb029a3
mov dx, ax
xchg ecx, eax
jmp 0xb029c9
jmp 0xb02a4d
lea ecx, [ecx*4]
rcr dl, 1
jmp 0xb02a09
rdtsc
shl ax, cl
jmp 0xb02b85
jmp 0xb02a2d
lea edx, [esi + 0x50]
xchg cx, ax
pushfd
cmp ebp, edx
jmp 0xb02f9d
mov dx, 0x7b5d
jmp 0xb02ab9
movzx ecx, byte [edi]
inc ax
jae 0xb02a17
mov dx, 0x7b5d
lea edx, [eax*4]
jmp 0xb02ac0
adc al, bl
ja 0xb029ce
lea ecx, [ecx*4]
rcr dl, 1
jmp 0xb02a09
lea edx, [eax*4]
call fcn.00b02a7a
mov dl, cl
bsf ax, bp
jno 0xb02b05
inc eax
lea eax, [ebx*4]
jmp 0xb02b07
inc eax
lea eax, [ebx*4]
lea eax, reloc.KERNEL32.DLL_WriteFile
mov ax, dx
jmp 0xb02b16
jmp 0xb02ae3
lea eax, reloc.KERNEL32.DLL_WriteFile
mov ax, dx
jmp 0xb02b16
neg dl
not ah
bsf eax, edi
jo 0xb02b53
jno 0xb02b3d
cwde
setg dl
or edx, edx
mov al, byte ss:[0x63a05136]
pop ebp
lodsb al, byte [esi]
mov edi, 0x487a3186
dec eax
mov byte [esp], dl
jmp 0xb029e9
mov eax, 0x3e946809
sub esp, 6
lea eax, [ebx*4]
jmp 0xb02ba6
mov eax, 0x3e946809
sub esp, 6
lea eax, [ebx*4]
mov ax, di
lea esp, [esp + 2]
jmp 0xb02b90
lea esp, [esp + 4]
dec cl
jmp 0xb0296e
ror dl, 0
bts eax, edi
jp 0xb02df1
mov ax, bx
jmp 0xb02c20
mov ax, di
lea esp, [esp + 2]
jmp 0xb02b90
mov ah, byte [esp]
mov eax, dword [esp]
mov ax, 0x1a3a
jmp 0xb02d84
mov eax, dword [esp]
xchg ah, al
clc
jmp 0xb02c53
add al, 0xd3
dec edx
in eax, 0x14
bts eax, edx
clc
push di
lea esp, [esp + 2]
jmp 0xb02c8b
mov eax, 0x6b5a5530
jmp 0xb02c47
mov al, ch
call fcn.00b02d16
jb 0xb02c4e
inc esi
and eax, edx
push edi
int 0x4d
frstor dword [edi + edx*2 - reloc.KERNEL32.DLL_WriteFile]
rol dl, 0
or eax, edi
js 0xb02c75
mov al, ch
jmp 0xb02c77
lea esp, [esp + 4]
add dl, 0xbc
neg al
jne 0xb02c6e
mov eax, 0x6b5a5530
mov eax, dword [esp]
xchg ah, al
clc
bts eax, edx
jmp 0xb02c56
jmp 0xb02ca9
mov ax, bx
call fcn.00b02c10
mov dx, 0x4857
btc eax, esi
jmp 0xb02e64
call fcn.00b02e4e
out 0x74, al
ljmp 0xf161
not cl
mov edx, dword [esp]
mov ax, 0xbf3c
bts dx, cx
js 0xb02e28
jns 0xb02e28
pop word [esp]
lea esp, [esp + 1]
not edx
mov eax, dword [esp]
lea esp, [esp + 1]
jmp 0xb03434
bswap edx
jmp 0xb02ecf
rdtsc
jmp 0xb02e9e
shl eax, 2
call fcn.00b02ef3
cdq
or al, 0x82
in eax, 0x14
mov al, byte [0x68099901]
wait
pop ebp
js 0xb02f29
mov dl, 0x8b
sar dword [edx + reloc.KERNEL32.DLL_WriteFile], 0x8a
ror dword [edx - reloc.KERNEL32.DLL_WriteFile], cl
mov eax, ecx
mov edx, 0x6cca1081
mov dl, bl
mov dh, byte [esp]
jmp 0xb02eb8
call fcn.00b02efe
mov ah, 0x2d
mov ebp, 0xa6f737c4
lodsb al, byte ds:[esi]
retf
neg cl
lea edx, [ebp*4]
clc
jl 0xb02eb4
rdtsc
bswap edx
jmp 0xb02ecf
jl 0xb02f14
int3
ja 0xb029f3
lea ecx, [eax*4]
sbb edx, eax
jmp 0xb02ffa
jb 0xb03010
jae 0xb03010
jp 0xb03003
xchg ebx, eax
test byte [0x5ac440b6], 0x3d
mov dh, 0x40
les ebx, [edx + 0x3d]
int3
pushal
neg bh
jmp 0xb030c0
mov dword [esp + 0x18], esi
lea edx, [ebx*4]
popal
mov al, byte [esp]
setp ah
xchg dl, dh
jmp 0xb030d3
jmp 0xb02f14
popal
mov al, byte [esp]
setp ah
call fcn.00b03044
push esi
bsf dx, bx
sub esp, 0x13
pop word [esp + 0xb]
rdtsc
lea esp, [esp + 1]
jmp 0xb03096
lea edi, [edi - 0x3b]
lea edx, reloc.KERNEL32.DLL_WriteFile
mov ax, 0xf6db
xchg dword [esp + 0x2c], edi
xchg dx, ax
mov al, 3
jmp 0xb030f7
jb 0xb03019
mov dword [esp + 0x18], esi
lea edx, [ebx*4]
jmp 0xb0305a
lea edx, [esi + 0x40]
call 0xb030dc
jmp 0xb03066
lea eax, [ebx*4]
mov ax, 0x47bb
push dword [esp + 0x2c]
ret 0x30
xor cl, 0x48
mov ah, 0x38
neg edx
jbe 0xb0303f
ja 0xb0303f
jmp 0xb0348a
mov dl, byte [esp]
lea edx, reloc.KERNEL32.DLL_WriteFile
rol al, 0
jmp 0xb0349c
js 0xb034b9
setp dh
mov edx, dword [esp]
jmp 0xb034dd
setp dh
mov edx, dword [esp]
bswap edx
mov edx, dword [esp]
neg edx
call fcn.00b05211
fdivp st(5)
popal
int1
nop
arpl di, bx
cmp eax, 0xa25730a2
arpl word [bp + si - 0x1b0b], bx
pop ss
bswap edx
mov edx, dword [esp]
neg edx
jmp 0xb034c6
jns 0xb039ef
js 0xb039ef
push cs
invalid
add ebp, 4
sub dh, 0xba
jmp 0xb03a49
call fcn.00b03a33
sbb cl, bl
jmp 0xb029f3
push eax
jmp 0xb03a0e
push ecx
push edx
push edx
pushal
call 0xb03a63
pop esp
fisttp word [edi + 0x2a]
fstp dword [ecx - 0x46]
xor byte [esi - 0x5278cf3f], ah
mov esp, 0x86240c88
mov byte [esp], cl
xchg byte [esp + 2], dl
sbb eax, 0x11e79b13
jmp 0xb039d9
jle 0xb039fb
jg 0xb039fb
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], esp
call fcn.00b03a6d
or dword [edi + reloc.KERNEL32.DLL_WriteFile], eax
mov edx, 0x448f0495
and al, 1
mov byte [esp + 5], dh
jmp 0xb03a4d