Function at 0x995ac1
Capabilities:
Execute anti-debugging instructions

Disassembly:
not cx
lea edi, [eax + edi]
std
jmp 0x995b06
xor cx, di
xchg byte [esp + 8], bl
lea esp, [esp + 0x10]
lea ebx, reloc.MSVCRT.dll_strncpy
pushfd
mov byte [esp + 4], dh
jmp 0x995c18
pushal
pop word [esp + 0x1b]
bt ax, bp
push dword [esp + 1]
jmp 0x995b96
std
lea esp, [esp + 6]
cmc
add esp, 7
lea esp, [esp + 3]
mov bp, 0xd3be
jmp 0x995b4f
bsr eax, ecx
xchg byte [esp + 1], al
push dword [esp + 1]
sub esp, 7
push word [esp + 2]
cld
jmp 0x995b65
xchg byte [esp + 9], bl
pushal
lea esp, [esp + 0x44]
xchg bp, ax
lea ebp, reloc.MSVCRT.dll_strncpy
mov dl, 0xb1
jmp 0x995bfa
lea ebp, [edx*4]
lea eax, [esi*4]
mov ebx, dword [esp + 1]
lea edx, [esi*4]
xchg word [esp + 2], di
pop word [esp + 1]
jmp 0x995b80
mov ecx, dword [esp]
lea edi, [esp - 0x8e]
not ax
mov ax, bx
jmp 0x995cb1
rdtsc
mov bl, 0x94
mov ebp, dword [esp]
neg cl
lea edx, [edi*4]
mov dh, 0x55
jmp 0x995be4
push word [esp + 1]
lea esp, [esp + 1]
xchg bl, dl
mov esi, 0x8c7b176e
xchg byte [esp], bl
cld
jmp 0x995bbf
cmp ax, bx
std
lea esi, [esi + edi]
pop edi
lea esp, [esp]
shr dl, cl
jmp 0x995c59
btr si, ax
mov di, 0xb70e
mov edi, esp
inc bp
cld
bts eax, ebp
jmp 0x995c2e
mov ecx, dword [esp]
setno cl
neg ah
cmc
add esp, 0
pushfd
jmp 0x995c94
and dl, 0xde
mov si, word [esp]
mov si, word [esp]
bsr bx, di
mov esi, 0x5c8d5c9a
sub esp, 5
jmp 0x995c47
bswap eax
mov byte [esp + 1], bl
sub esp, 0x19
bts bx, si
mov edi, 0x1b6fa8fd
xchg dword [esp + 0xe], edi
jmp 0x995cd8
mov ecx, dword [esp]
xchg edx, eax
mov al, 0x22
mov edx, dword [esp]
lea ebp, [ecx + ebx]
cpuid
jmp 0x995c7b
mov bp, word [esp + 3]
xchg byte [esp], al
push word [esp]
jmp 0x995cec
push dword [esp + 0x10]
popal
push word [esp + 1]
mov cl, 7
btc dx, cx
bswap eax
jmp 0x995cc2
mov bx, 0x5adb
cpuid
neg bl
lea ebx, [edx + 8]
mov di, word [esp + 5]
dec eax
jmp 0x995d92
mov bl, 0x92
mov ebp, 0x73493c2f
cpuid
xchg dx, bx
bts si, si
jmp 0x995d66
lea edx, [esp + edx]
rdtsc
bswap ebp
not bh
setns dl
add esp, 7
jmp 0x995d21
dec cl
push dword [esp + 4]
mov byte [esp + 7], bh
cpuid
xchg bl, ch
std
jmp 0x995d79
btc si, bp
mov al, bh
bsr eax, ebx
mov edi, ebx
rdtsc
xchg byte [esp + 2], ch
jmp 0x995d48
pop cx
mov edx, 0x9b6fb29b
mov word [esp + 1], bp
xchg esi, edx
xchg dword [esp + 3], ecx
jmp 0x995e11
bswap eax
pop word [esp]
bts edx, ebx
rdtsc
mov di, word [esp + 2]
sub esp, 9
jmp 0x995d37
pop cx
dec si
mov ah, byte [esp]
lea ebx, reloc.MSVCRT.dll_strncpy
lea eax, [ecx + edi]
jmp 0x995de9
rcl al, 0
add esp, 4
neg al
push word [esp]
lea ebx, [esi + 0xc2]
pop di
jmp 0x995da7
rdtsc
sbb ecx, edi
mov esi, esp
lea edx, reloc.MSVCRT.dll_strncpy
cmc
jmp 0x995dfa
rdtsc
setno bh
bswap eax
btc di, sp
mov edi, edx
shr bh, cl
jmp 0x995dd3
mov bp, 0x2785
adc si, ax
xchg al, ah
cpuid
inc dh
lea eax, [edi + ebp]
jmp 0x995e4d
sbb bh, bh
push bp
xchg bx, di
mov bl, byte [esp + 1]
bswap eax
pop edx
jmp 0x995dbd
cld
call fcn.00995e21
add bx, bp
lea ebp, [edx - 0x7e]
cpuid
btr edi, edx
ror dl, 3
mov dh, ah
jmp 0x995f1e
lea esp, [esp]
rcl ah, cl
mov si, sp
btr bp, di
mov ecx, dword [esp]
xchg byte [esp], ch
call fcn.00995e9c
mov word [esp], bp
xchg byte [esp + 1], dl
bsr edi, edi
inc edx
mov bh, byte [esp]
jmp 0x995f07
not dl
std
push sp
push word [esp + 2]
lea edx, reloc.MSVCRT.dll_strncpy
jmp 0x995f93
mov si, word [esp + 1]
mov ebx, esp
cld
rdtsc
add esp, 0
btr dx, sp
jmp 0x995ef1
xchg ah, dh
xchg esi, edx
btc si, bx
mov si, word [esp]
add esp, 0
cld
jmp 0x995eb2
rcr bh, 3
lea ebp, [ebp*4]
xchg byte [esp + 3], dl
jmp 0x995f6e
mov cx, word [esp + 3]
mov dword [esp], ecx
xchg ebx, eax
neg esi
rdtsc
cpuid
jmp 0x995f30
neg dx
add esp, 0xe
pop word [esp + 1]
mov dword [esp], esp
jmp 0x995fb9
mov ecx, 0x57847686
dec bh
push dword [esp + 3]
xchg bp, cx
xchg ch, dh
sub esp, 0xa
jmp 0x995f58
mov eax, dword [esp + 5]
mov al, 0x1a
cld
xchg byte [esp], ah
xchg ecx, ebx
not edi
jmp 0x995f46
xchg bh, al
xchg ah, ch
call fcn.00995fe5
pop edi
fimul dword [eax + 0x2f]
fidiv dword [ebx]
mov bl, 0x3f
scasd eax, dword es:[edi]
retf 0xa539
mov byte [esp + 3], ah
std
xchg dword [esp], ebx
bt bx, ax
mov edi, dword [esp + 3]
mov di, word [esp]
jmp 0x995fa3