Function at 0x95c619
Capabilities:
Execute anti-debugging instructions

Disassembly:
pop dword [esp + 0xb]
lea esp, [esp + 0xc]
mov bl, 0xed
mov dword [esp], edx
stc
jmp 0x95c639
rdtsc
pop word [esp + 0xc]
xchg ch, dl
mov dword [esp + 8], ecx
mov ax, 0x3765
mov si, word [esp + 3]
jmp 0x95c5dd
rdtsc
rol bp, 0xd
cmp edx, edx
jmp 0x95c5f3
add esp, 2
xchg dx, cx
bsr cx, di
cpuid
lea esp, [esp + 7]
jmp 0x95c662
mov ch, 0x49
lea ebp, [eax + ecx]
push word [esp + 3]
not ebp
push dword [esp + 4]
std
jmp 0x95c623
add esp, 1
xchg esi, eax
mov bp, bx
add esp, 0
add esp, 0
jmp 0x95c675
bsf esi, edi
setge dl
mov ebp, dword [esp]
lea ebp, [eax + ecx]
xchg bh, dh
ror ecx, 2
jmp 0x95c64c
mov bp, word [esp]
pushal
rdtsc
std
lea esp, [esp + 0x19]
mov byte [esp + 5], ah
jmp 0x95c834
pop dword [esp + 0x1b]
push word [esp + 0x1f]
lea ebp, [ebx*4]
std
jmp 0x95c744
neg ecx
mov dword [esp + 0x18], ecx
mov bl, al
bswap edx
not edx
mov eax, 0x32ada8e4
jmp 0x95c699
shl esi, 0xb
add cx, 0x6d09
mov ecx, dword [esp]
clc
add esp, 1
jmp 0x95c6f2
mov cl, byte [esp + 2]
xchg bp, ax
mov word [esp], sp
xchg dh, dl
shr ecx, cl
xchg word [esp], dx
jmp 0x95c6c7
adc ebp, 0xb5fd4492
lea ebx, [eax*4]
jmp 0x95c71e
xchg si, bx
xchg dword [esp], ebp
bsf ebx, eax
setg bh
pop word [esp + 1]
add esp, 1
jmp 0x95c6dd
mov bp, 0x84e0
push bx
mov esi, dword [esp]
call 0x95c72d
mov eax, dword [ebx + reloc.RASAPI32.dll_RasGetConnectStatusA]
push dword [esp + 1]
jmp 0x95c758
xchg word [esp + 0x13], dx
stc
lea esp, [esp + 0x20]
bsr ebp, eax
xchg byte [esp], ah
mov al, 0xb4
jmp 0x95c708
mov ebp, 0x74de316c
dec ebp
bts ecx, edi
bsf eax, ecx
inc ebx
lea edi, [edi + ebp]
jmp 0x95c76e
rcr dx, 6
mov dl, 0xa5
mov ebp, dword [esp + 4]
inc ch
xchg edx, esi
jmp 0x95c7f6
not edx
mov ah, bh
mov eax, dword [esp + 0x15]
mov al, dh
ror cx, 9
mov bx, ax
jmp 0x95c6b4
mov dword [esp], ecx
xchg word [esp], dx
pop word [esp]
lea ebx, [esi + edi]
mov byte [esp], ah
mov bh, cl
jmp 0x95c7cd
stc
pop word [esp]
mov ebp, dword [esp]
neg si
mov dx, word [esp]
pop bx
jmp 0x95c79a
btr ecx, ebp
lea esi, [ecx + ecx]
xchg ch, al
dec dl
call 0x95c7dd
or dword [edi], reloc.RASAPI32.dll_RasGetConnectStatusA
std
mov byte [esp + 2], bl
jmp 0x95c80e
push word [esp + 4]
mov ebp, dword [esp + 6]
xchg word [esp + 3], bp
btc ebp, eax
std
mov dword [esp + 2], esp
jmp 0x95c7ba
rdtsc
mov ecx, ebx
mov dword [esp], edx
rdtsc
cpuid
rdtsc
jmp 0x95c89b
rdtsc
mov bl, byte [esp + 1]
add ebp, 0xf906863d
mov dword [esp + 1], edx
cld
jmp 0x95c86f
xchg bl, bh
mov edi, esp
lea ecx, [esi*4]
lea esi, reloc.RASAPI32.dll_RasGetConnectStatusA
lea edx, [edx + edi]
pushal
jmp 0x95c784
lea esi, [eax + ecx]
dec ecx
cld
lea esi, [ebx + ebp]
lea ebx, [ebx + edi]
add esp, 5
jmp 0x95c881
std
xchg dh, ah
sub esp, 0x15
pop dword [esp + 5]
bsf ebx, ebp
mov di, bx
jmp 0x95c84f
mov edx, 0xf6adeeda
add esp, 0xa
mov esi, ecx
mov eax, edx
pop bx
xchg word [esp + 2], ax
jmp 0x95c91e
mov al, byte [esp + 3]
xchg ecx, esi
xchg byte [esp], dh
push ax
mov ah, 0xf3
clc
jmp 0x95c81d
bsr dx, cx
std
mov word [esp + 6], ax
call fcn.0095c8ae
push word [esp + 3]
lea eax, [edx + edi]
mov eax, dword [esp + 6]
btc edx, eax
jmp 0x95c94b
btc di, di
mov byte [esp + 3], dh
rcl dl, 4
mov dh, 2
btc ebx, edx
push word [esp + 4]
jmp 0x95c8da
add esp, 1
adc dh, 0xd8
xchg si, ax
shr ebx, 0x19
jmp 0x95cf4a
pop dword [esp]
mov cl, 0x16
neg ah
mov eax, dword [esp + 3]
mov dl, cl
neg ebp
jmp 0x95c935
mov dword [esp + 0xf], eax
sub esp, 0x18
mov word [esp + 3], bx
inc si
pop dword [esp + 0xd]
rcr ch, cl
cld
jmp 0x95caa0
sub cl, 0x4d
cpuid
mov dh, byte [esp + 1]
add esp, 1
mov al, byte [esp]
lea eax, reloc.RASAPI32.dll_RasGetConnectStatusA
jmp 0x95cb23
mov ebp, 0xf29def43
push word [esp + 1]
mov ecx, 0x1a9b8e0
xchg ecx, esi
pop si
rdtsc
jmp 0x95cce2