Function at 0x955805
Capabilities:
Execute anti-debugging instructions

Disassembly:
xchg byte [esp], cl
lea ecx, [edi + edi]
mov ch, byte [esp + 1]
xchg ebp, esi
mov cx, 0xb31b
bswap esi
jmp 0x955807
xchg byte [esp + 0x14], cl
pop dword [esp + 9]
lea esp, [esp + 0x16]
xchg dword [esp], ebp
not dx
mov byte [esp + 3], ah
jmp 0x9557a4
push dword [esp + 3]
neg dh
add bp, 0xa596
inc ax
push dword [esp + 0x18]
mov bl, 0x88
jmp 0x9557c3
jmp 0x9557e5
push dword [esp + 1]
xchg dword [esp + 3], ecx
cpuid
mov dx, word [esp + 8]
sub esp, 0xa
xchg word [esp + 1], di
jmp 0x9558d4
xchg dword [esp + 4], ebx
mov dword [esp + 5], ecx
mov bl, 0x48
pop word [esp + 5]
lea ebx, [esi*4]
xchg word [esp + 5], bx
jmp 0x9558a0
xchg dword [esp + 6], ebx
xchg byte [esp + 0xa], dl
neg edx
cmc
bswap edi
rdtsc
jmp 0x955849
push word [esp + 1]
mov ebp, 0xd3f2b4ca
setg bh
mov dh, byte [esp + 7]
push dword [esp]
mov si, di
jmp 0x95586c
lea edx, [edx*4]
xchg ebx, eax
pop dword [esp]
bsf cx, si
mov ah, byte [esp + 3]
jmp 0x955938
xchg ah, bl
rcr bh, 3
mov word [esp + 5], di
mov dword [esp + 3], ebp
lea esp, [esp + 3]
jmp 0x955887
xchg byte [esp + 0xa], al
push esp
mov al, 0x7e
add esp, 4
lea esp, [esp + 0xa]
mov dh, byte [esp]
jmp 0x9558b9
mov al, ah
rdtsc
setno dh
mov dx, 0x9c87
rdtsc
cpuid
jmp 0x955b17
mov ebx, 0xca32dd22
mov esi, dword [esp + 1]
lea ecx, reloc.KERNEL32.dll_GetCommandLineW
push word [esp + 1]
pop ecx
lea esp, [esp + 3]
jmp 0x955913
neg cx
lea ebp, [ebp - 0x4f]
call fcn.009559c8
bswap edi
mov byte [esp + 7], dh
rdtsc
sub bl, ah
pop cx
pop dword [esp + 4]
jmp 0x955a65
rdtsc
mov eax, ebp
lea esi, [ecx*4]
mov dx, word [esp + 4]
lea ebp, [edx*4]
mov dword [esp + 1], eax
jmp 0x955af8
inc bl
xchg byte [esp], bl
xchg bh, cl
bsr cx, bp
mov edx, ecx
rcl ax, cl
jmp 0x955a42
mov cl, 0xca
mov di, 0xfd4d
xchg bh, cl
xchg bx, dx
mov bl, 0x28
call fcn.00955abf
mov byte [ebp - 0x2b], 0xbc
dec edi
scasd eax, dword es:[edi]
jo 0x955ae6
invalid
add edi, esi
pop ss
mov ds, word [bx + di]
js 0x955b52
pop ecx
mov word [esp], bx
sub esp, 8
inc cl
rdtsc
mov dx, 0xb851
jmp 0x955ad6
bsf ax, si
neg bh
mov bh, byte [esp]
btr eax, esp
mov bl, bh
push esp
jmp 0x9559e4
lea edi, reloc.KERNEL32.dll_GetCommandLineW
mov al, ah
mov cx, 0xbd7
clc
mov cl, 0x62
mov di, 0x8fff
jmp 0x955b76
into
xchg ah, bl
not edx
jmp 0x955b2b
xchg ah, bl
cmc
bsr dx, bp
xchg si, ax
mov dl, 0xc4
mov word [esp + 8], bx
jmp 0x955b8c
lea edi, [edi + edi]
rcr ecx, 5
xchg ecx, ebx
xchg dword [esp + 4], edx
push dword [esp]
pushal
jmp 0x955c69
bswap eax
mov byte [esp + 0x27], ch
ror edi, 7
cpuid
pop dword [esp + 0xa]
lea ecx, [ebp + 0x8f]
call fcn.00955bd6
sub esp, 0x14
cpuid
xchg word [esp + 7], dx
mov bl, bh
lea ebx, reloc.KERNEL32.dll_GetCommandLineW
mov bl, bh
jmp 0x955e91
btr edx, esp
xchg byte [esp], dl
lea ebp, [ecx*4]
shr ch, 5
lea esp, [esp + 1]
mov ch, byte [esp]
jmp 0x955e69
lea esi, [ecx + ebx]
bswap ecx
bswap ebx
setp bh
lea ebp, [eax - 0xe1]
cpuid
jmp 0x955cfe
pop word [esp]
mov ebx, dword [esp]
mov ebp, esi
mov byte [esp + 1], dh
xchg byte [esp], bl
mov byte [esp + 1], ah
jmp 0x955dd4
mov ch, byte [esp + 3]
mov eax, dword [esp + 3]
mov word [esp + 1], dx
mov ebx, 0x9ab8418c
jmp 0x955d3d
cmc
lea edx, [edx + ebp]
mov ebx, 0xa0028c46
bsr dx, cx
lea esi, [ecx*4]
push edx
jmp 0x955d68
mov eax, esi
rdtsc
sub esp, 0xa
pop dword [esp]
lea ebp, [eax - 0xd9]
not ch
jmp 0x955e44
xchg bp, dx
mov eax, dword [esp]
mov bx, word [esp + 1]
mov eax, esi
mov eax, 0x3cfde2b6
mov word [esp], dx
jmp 0x955d99
mov dl, dh
inc cl
mov dl, dh
mov bl, 0xc0
mov ebp, 0xa6d56a84
mov edx, dword [esp]
jmp 0x955db6
neg edx
mov byte [esp + 2], ch
mov dl, 0xdc
pop edi
mov dx, word [esp]
xchg byte [esp], dl
jmp 0x955ed5
mov bh, byte [esp + 3]
not ax
inc esi
inc esi
mov bl, 8
pop word [esp + 1]
jmp 0x955de6
lea eax, [edx + esi]
neg ax
and cl, bh
mov eax, 0x19aa217e
mov eax, ecx
lea ecx, [ebp - 0x3f]
jmp 0x955e0a
xchg word [esp + 4], bx
bsf bp, si
push word [esp + 8]
add esp, 1
pop word [esp + 3]
cpuid
jmp 0x955e2b
rdtsc
lea edi, [edi*4]
xchg esi, eax
mov si, 0x5c65
mov ecx, eax
mov di, word [esp]
jmp 0x955d82
stc
lea ebx, [edi*4]
add esp, 4
lea esp, [esp + 0x11]
xchg byte [esp + 1], dl
pop di
jmp 0x955d29
cmc
bswap ecx
bsf di, ax
setne ch
mov cl, 0x12
rol ax, cl
jmp 0x955fb5
lea esi, [edx*4]
setnp dh
neg ah
lea ecx, [edx + edi]
jmp 0x955f8e
mov dx, word [esp]
mov dl, dh
add al, dh
pop di
mov eax, ebp
cpuid
jmp 0x955eab
mov esi, dword [esp + 3]
sub esp, 0x10
push dword [esp + 0xa]
add esp, 0x15
bswap eax
mov byte [esp + 1], ah
jmp 0x955f67
lea eax, [ebx + edi]
not ch
lea ebx, reloc.KERNEL32.dll_GetCommandLineW
mov ebx, dword [esp + 3]
cmc
mov bp, bx
jmp 0x955ee5
mov ax, word [esp + 2]
mov dword [esp], ecx
xchg si, di
stc
bswap esi
inc al
jmp 0x955f06
mov cl, ch
add esp, 1
mov word [esp], di
mov ebx, dword [esp]
add esp, 1
call fcn.00955f41
invalid
inc al
rcl bx, cl
xchg si, ax
clc
push esp
lea ebp, [edi*4]
jmp 0x955f2f
xchg si, dx
rdtsc
neg ah
xchg bh, cl
mov al, byte [esp]
xchg bh, cl
jmp 0x955ebf