Function at 0x9b1d30
Capabilities:
Execute anti-debugging instructions

Disassembly:
pushal
xchg byte [esp + 0x16], ah
bsr ax, bp
xchg bp, ax
not dx
jmp 0x9b1d63
mov word [esp + 4], cx
rcl dl, cl
mov dx, ax
mov bp, 0x9ef7
jmp 0x9b1e40
lea esp, [esp + 8]
not edx
mov dl, bh
mov byte [esp + 0xd], ah
mov bp, bx
rdtsc
jmp 0x9b1d4d
add esp, 2
push word [esp + 1]
call 0x9b1d97
lds eax, [edx + ebx*8 - 0x43]
dec esp
mov ebx, 0x61f175
jbe 0x9b1e37
jae 0x9b1e33
test dword [edi], esi
mov dl, dh
rdtsc
neg eax
lea ebp, [edx + 0xa5]
neg dh
push word [esp + 1]
jmp 0x9b1dad
add ebp, 0x58840949
add esp, 0x1c
pop word [esp]
lea esp, [esp + 2]
std
mov word [esp], sp
jmp 0x9b1dcc
add bl, ch
and ebp, dword [ebp - 0x13]
in eax, dx
jge 0x9b1e3e
not dword [ebx]
jl 0x9b1e8d
salc
inc ecx
mov dword [esp + 0x16], ebx
rdtsc
xor bp, 0x7c8
mov dh, byte [esp + 0x15]
sub esp, 4
mov dx, word [esp + 3]
jmp 0x9b1e03
add byte [eax], al
add byte [edi], cl
enter 0xffffffffffff9d0f, 0xffffffffffffffc4
bt dx, sp
mov ah, 0x1b
sub esp, 0x1d
jmp 0x9b1f1d
mov dword [esp + 1], eax
pop word [esp + 9]
lea edx, [edi + ebp]
jmp 0x9b1ef9
push word [esp + 6]
push word [esp + 0x12]
add dx, 0xf35e
rdtsc
jmp 0x9b1ebe
pop eax
bsf ebp, ebp
and eax, ebp
mov eax, ecx
mov eax, esp
stc
jmp 0x9b1ed4
lea eax, [edi*4]
dec ebp
lea esp, [esp + 0xd]
mov dl, byte [esp + 5]
mov byte [esp + 3], cl
lea edx, reloc.PSAPI.DLL_GetMappedFileNameW
jmp 0x9b1f42
pushfd
bswap ebp
add esp, 0x12
rdtsc
mov dx, 0x7ec0
std
jmp 0x9b1eec
btc ebp, ebp
mov ah, 0x1a
lea eax, [edi*4]
jmp 0x9b1f6d
add esp, 0
lea ebp, [ebx + esi]
mov ebp, edi
xchg dx, ax
stc
mov eax, 0x8c5bc1a1
jmp 0x9b1f2c
cmp bp, sp
btr ebp, edi
mov dword [esp], esi
mov bp, 0x4299
mov al, 0xa
jmp 0x9b1f96
mov ax, 0xfdab
mov ah, 0x1d
mov ebp, dword [esp + 5]
mov ax, word [esp]
dec eax
sub ah, al
jmp 0x9b1f55
pop ax
bsf dx, ax
xchg ebp, edx
inc bp
mov byte [esp + 1], ch
jmp 0x9b1fc7
mov dl, byte [esp + 5]
neg al
xchg dword [esp], ebp
mov byte [esp + 1], cl
xchg dword [esp], edx
lea esp, [esp + 1]
jmp 0x9b1f80
xchg al, dh
sub esp, 0xa
mov dword [esp + 2], esi
xchg edx, eax
call fcn.009b1fdc
cwde
sbb byte [esi - 0xa3fe717], cl
in al, 0x17
jle 0x9b2010
mov dx, word [esp + 2]
pop bp
sete dl
xchg ah, dl
xchg dx, bp
mov dx, 0xf80e
jmp 0x9b1fac
cmc
mov ax, di
xchg byte [esp], ah
mov ebp, edx
mov ebp, 0x5338c16
jmp 0x9b2070
jmp 0x9b1feb
rdtsc
mov dword [esp + 0x12], esi
pop eax
mov byte [esp + 9], dh
setae dh
jmp 0x9b2195
bt edx, ecx
xchg word [esp + 9], ax
mov dh, byte [esp + 0x11]
bswap edx
rcr ax, 4
not bp
jmp 0x9b2030
sub esp, 0x17
xchg dl, al
mov ax, cx
mov word [esp + 0x15], di
mov ah, bh
pop word [esp + 0xd]
jmp 0x9b2046
btr edx, eax
push word [esp + 0x10]
call fcn.009b2086
call 0x9b20ae
jmp 0x9b3649
pop dword [esp + 2]
xchg dword [esp + 0xe], eax
bswap eax
pop eax
mov bp, 0x67f1
push dword [esp + 5]
jmp 0x9b209c
call 0x9b213c
jmp 0x9b3683
call 0x9b215d
jmp 0x9b368d
mov dword [esp + 7], ecx
mov dword [esp + 0xa], esi
btc dx, bp
mov word [esp + 7], sp
push word [esp + 0xc]
mov ebp, 0x2a4e337b
jmp 0x9b20b7
call 0x9b218a
jmp 0x9b3c58
setb al
rdtsc
sub esp, 3
bts ebp, eax
mov dl, 0xe
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
jmp 0x9b2165
mov byte [esp], al
lea esp, [esp + 8]
jmp 0x9b3675
setbe ah
mov ah, 0x7a
mov ah, byte [esp]
mov eax, dword [esp]
pushfd
jmp 0x9b3633
add ebx, sym.imp.kernel32.dll_CreateThread
mov dword [ebx], eax
jmp 0x9b2137
sub eax, 0x9b20ae
mov ebx, eax
add eax, 0x4cb334
jmp 0x9b3657
pop eax
sub eax, 0x9b213c
mov ebx, eax
jmp 0x9b36c4
mov eax, dword [esp]
lea esp, [esp + 4]
jmp 0x9b36ae
sub eax, 0x9b215d
jmp 0x9b36d6
add eax, 0x4cb74c
add ebx, 0x47a8b0
mov dword [ebx], eax
jmp 0x9b2158
mov ebx, eax
add eax, 0x4cbb64
add ebx, 0x47a8b4
jmp 0x9b3fce
call 0x9b371b
mov al, byte [esp + 1]
setno al
neg ecx
mov di, word [esp + 1]
pop esi
mov ebp, esi
jmp 0x9b3c8d
bswap eax
mov ecx, dword [esp]
xchg bl, bh
inc ecx
mov bp, 0x1dfd
neg ebx
jmp 0x9b3cee
bsr di, bx
rcl si, cl
mov edi, dword [esp]
bsr edi, ebp
mov ch, dl
jmp 0x9b3d28
cpuid
mov ax, di
mov di, 0x806
mov al, byte [esp]
std
std
jmp 0x9b3cbe
xchg bx, si
xchg cx, bx
mov bl, byte [esp]
not eax
bts ebp, eax
xchg byte [esp], bh
jmp 0x9b3cd4
xchg di, bp
xchg si, cx
cpuid
mov ebx, dword [esp]
xor cx, ax
mov bx, word [esp]
jmp 0x9b3d4e
not ch
mov al, byte [esp]
mov ch, byte [esp]
xchg si, cx
cmc
not ch
jmp 0x9b3d01
mov ecx, dword [esp]
mov cl, al
call int.009b3d60
mov eax, 0x3bc8a939
loope 0x9b3ce1
sti
ror byte [ebp - 0x24], cl
das
mov bl, 0x9c
mov di, 0x2ef5
mov cl, byte [esp]
lea esp, [esp]
lea esp, [esp]
cld
jmp 0x9b3d38
mov dword [ebx], eax
jmp 0x9b2185