Function at 0x992d40
Capabilities:
Execute anti-debugging instructions

Disassembly:
lea esp, [esp + 4]
add esi, 0x4f187d0c
bsr ecx, edx
jno 0x992d1a
mov edx, eax
rdtsc
setnp ch
jmp 0x992d1e
mov dx, 0x5766
jmp 0x992ce1
rdtsc
setnp ch
jmp 0x992d1e
mov edx, eax
jmp 0x992d04
ror esi, 0
mov dx, cx
mov ecx, ebp
add esi, dword [ebp]
jmp 0x992d69
neg ax
jno 0x992cfe
mov dx, 0x5766
jmp 0x992d02
mov eax, ebp
sub esp, 4
jmp 0x992e25
neg ecx
js 0x992d4b
mov eax, ebp
sub esp, 4
jmp 0x992e25
mov ah, byte [esp]
dec cx
lea eax, [eax + ecx]
jmp 0x992db8
mov ah, byte [esp]
dec cx
lea eax, [eax + ecx]
call fcn.00992d78
add dl, bl
mov ah, 0xd9
mov ax, 0xb5d0
jmp 0x992e01
mov al, dl
neg ch
jns 0x992deb
js 0x992deb
mov eax, dword [reloc.mscoree.dll__CorExeMain]
fst st(1)
pop ebx
retf
movzx edx, byte [esi - 1]
bswap eax
cmp ax, bx
jge 0x992db0
jl 0x992d8e
call 0x992e07
int3
adc eax, esp
jle 0x992dc7
jg 0x992dc7
jmp 0x992e51
lea esp, [esp + 4]
add al, 0xa1
jmp 0x992e27
jmp 0x992dde
mov ecx, eax
mov ecx, 0x464c26c5
mov cl, ah
not al
lea ecx, [eax + esi]
jmp 0x992e3b
mov cl, al
not cx
sub esp, 0xf
jge 0x992e70
bswap ecx
pop cx
jmp 0x992e8a
not ecx
bsr ecx, edi
jnp 0x992e09
jp 0x992e09
pop cx
setle cl
add esp, 7
lea esp, [esp + 2]
jmp 0x992e74
bswap ecx
jmp 0x992e5a
jmp 0x992ecf
setle cl
add esp, 7
lea esp, [esp + 2]
call fcn.00992f80
enter 0xffffffffffffd84a, 0xffffffffffffffbf
dec edx
xchg byte [edx - 0x11], ch
jg 0x992ebd
jmp 0xcd6b0bd
lea esp, [esp + 3]
xchg dword [esp + 4], eax
mov cx, word [esp]
btr ecx, edx
call fcn.00992ee5
shr eax, 1
and al, byte [eax]
add byte [eax], al
popfd
and esi, dword [ebx - reloc.mscoree.dll__CorExeMain]
adc dword [edi], ecx
bswap ecx
jmp 0x992eaf
lea esp, [esp + 4]
not al
push ebp
mov dword [esp], ebx
lea ecx, [ebp - 0x66]
bswap ecx
jmp 0x992ef0
push dword [esp + 1]
jl 0x992f37
jge 0x992f37
les ecx, [ebx - 0x25]
mov esi, 0xec6aa24d
bound eax, qword [0xf97c16f4]
imul ecx, dword [eax], reloc.mscoree.dll__CorExeMain
mov bh, 0x8d
sbb bl, 0xff
invalid
mov ecx, 0x8175fb96
push word [esp + 0xb]
push word [esp + 2]
jmp 0x992f6a
lea esp, [esp + 8]
neg al
sub esp, 0x10
jmp 0x992f5c
push word [esp + 2]
xchg dword [esp + 3], ecx
mov cx, 0x8e99
jmp 0x992f72
jae 0x992f21
mov ecx, 0x8175fb96
push word [esp + 0xb]
jmp 0x992f42
xchg dword [esp + 3], ecx
mov cx, 0x8e99
lea ecx, reloc.mscoree.dll__CorExeMain
jmp 0x992f92
lea esp, [esp + 0x14]
neg al
bts ecx, ebp
jmp 0x993772
sbb cl, 0x49
xchg ch, cl
stc
mov cx, bp
lea ecx, [edi*4]
jmp 0x9930b7
xchg word [esp + 0xb], cx
jmp 0x99300a
xchg word [esp + 0xb], cx
dec ecx
dec eax
not ecx
bswap ecx
jmp 0x992ff6
dec esi
lea ecx, [esi + ebp]
sub esp, 0x10
jo 0x992fc7
jno 0x992fd2
bswap ecx
xchg cx, ax
sub esp, 0x14
jg 0x993026
jle 0x993010
jmp 0x99307d
dec ecx
dec eax
not ecx
jmp 0x992ff4
stc
jmp 0x993027
stc
lea esp, [esp + 0x14]
neg dl
mov cx, word [esp]
bts eax, eax
jmp 0x99305f
mov ecx, 0x9d593b0
jmp 0x992fe9
xor dl, 0xe0
setle ah
call fcn.00993096
cwde
sbb al, 0xb2
aad 0x24
retf
jne 0x993078
mov al, 0x4a
bsf cx, bp
jmp 0x99307e
mov al, 0x4a
bsf cx, bp
int 0xeb
leave
jmp 0x993049
jmp 0x9932f9
add bl, al
neg ax
jp 0x993042
mov ecx, 0x9d593b0
jmp 0x992fe9
mov ch, bh
add dl, 0x7f
mov ch, byte [esp]
call fcn.00993295
ror dl, 0
lea ecx, [ecx + 0x8a]
mov ax, word [esp]
bswap eax
jmp 0x99333c
jmp 0x9933cc
xchg esi, eax
adc al, 0x8a
in eax, dx
sbb al, 0xd0
add eax, eax
cmp dword [edx], 0x15
mov cx, 0xa5a5
not ah
inc dl
bsf cx, bx
jle 0x993326
pushal
push dword [esp + 0x1e]
inc cx
mov dword [esp + 0x1d], ecx
jmp 0x99338d
not ecx
not ax
mov ah, byte [esp]
mov eax, 0x4bbc94cf
jmp 0x9933b1
mov dword [esp + 0x1d], ecx
lea esp, [esp + 0x24]
add dl, 0x35
mov eax, 0x2b394dee
out dx, al
dec ebp
cmp dword [ebx], ebp
jmp 0x993373
mov word [esp + 5], bp
call fcn.009933ec
stc
jge 0x993395
je 0x993331
int3
xor dl, 4
sub esp, 9
jl 0x99339b
mov word [esp + 5], bp
jmp 0x9933a0
pushal
push dword [esp + 0x1e]
inc cx
jmp 0x993389
stc
mov cx, bp
lea ecx, [edi*4]
jmp 0x9930b7
jp 0x992fa1
sbb cl, 0x49
xchg ch, cl
jmp 0x993427