Function at 0x9b5f16
Capabilities:
Execute anti-debugging instructions

Disassembly:
cpuid
rdtsc
inc di
push dword [esp + 1]
jmp 0x9b5fa6
btc ax, ax
std
xchg dword [esp], esi
xor cl, dl
lea esp, [esp + 1]
jmp 0x9b5f88
not al
pop si
pop dword [esp]
mov ax, bx
lea esp, [esp]
pop ax
jmp 0x9b5f4b
mov ecx, dword [esp + 2]
push eax
pop ebp
bts ecx, eax
mov byte [esp], dl
bt bp, si
jmp 0x9b5fd9
bsr esi, edi
setne ah
xchg word [esp], cx
add esp, 0
and ch, al
stc
jmp 0x9b5f72
lea ecx, [eax + ebp]
btc ax, cx
bts ax, bp
lea esi, [ebp*4]
push dword [esp + 8]
not ebp
jmp 0x9b5f61
xchg dh, ah
cpuid
ror bx, 5
mov ah, 0x30
xchg dl, al
adc dx, 0x5801
jmp 0x9b5feb
pushal
mov byte [esp + 0xe], ah
xchg dword [esp + 3], eax
popal
cld
xchg word [esp + 1], bx
jmp 0x9b5fc0
mov dh, byte [esp + 2]
mov word [esp + 1], si
push word [esp + 1]
dec bh
rdtsc
xchg byte [esp + 3], ah
jmp 0x9b6035
mov di, 0x300f
xchg byte [esp + 0xc], dl
push word [esp + 0xb]
neg di
jmp 0x9b604b
xchg cx, ax
mov byte [esp], al
mov ah, byte [esp + 3]
shl di, 0
push dword [esp + 2]
sub esp, 0x1c
jmp 0x9b601f
xchg byte [esp + 0xd], dh
bswap ecx
push dword [esp + 0x1f]
pop ax
xchg ah, dl
push dword [esp + 0x17]
jmp 0x9b61f4
cpuid
pop word [esp + 4]
xchg esi, ebx
mov ax, 0xd3fd
jmp 0x9b60b4
lea esp, [esp + 0x19]
bsr edx, edx
cpuid
mov byte [esp + 0x10], bl
mov dx, bp
inc bl
jmp 0x9b608a
add esi, 0x1cce2588
neg di
xchg bl, dl
lea esp, [esp + 9]
neg ecx
mov di, word [esp + 0xc]
jmp 0x9b60ff
inc eax
mov al, byte [esp + 0x14]
mov bp, word [esp + 0x12]
xchg byte [esp + 0xa], bh
lea edi, [ecx - 0xef]
neg ecx
jmp 0x9b60a0
cmc
lea edx, [esi - 0x96]
mov dword [esp + 7], ebp
pop ax
pop dword [esp]
jmp 0x9b611a
xchg word [esp + 7], di
cpuid
mov cx, sp
lea ebx, reloc.KERNEL32.dll_GetStartupInfoA
xchg byte [esp + 0xb], dh
mov word [esp + 5], cx
jmp 0x9b60e9
clc
sbb di, 0xc41f
lea ebx, reloc.KERNEL32.dll_GetStartupInfoA
lea ebp, [eax*4]
mov dx, bx
dec esi
jmp 0x9b6175
push dword [esp + 0x19]
push dword [esp + 0x1b]
mov ax, word [esp + 0x29]
xchg dh, al
mov word [esp + 0x2e], sp
pop ax
jmp 0x9b60d1
mov bh, bl
mov dword [esp + 5], ebp
xchg cx, si
pop ax
btr bp, ax
inc ecx
jmp 0x9b6188
setl dl
sub esp, 0xa
pop edi
lea ebx, [edx + ebx]
xchg word [esp + 3], ax
rcr bl, cl
jmp 0x9b6155
xchg bp, dx
cpuid
push word [esp + 1]
mov al, bl
mov bp, word [esp + 0xa]
mov dword [esp + 2], eax
jmp 0x9b61d8
bt ebx, eax
mov ebx, dword [esp + 0x23]
cpuid
mov esi, 0x472870fc
mov byte [esp + 0x1a], al
bswap ecx
jmp 0x9b613a
mov dword [esp], esi
pushfd
xchg word [esp + 1], bx
mov bx, bp
pop dword [esp]
jmp 0x9b63a6
neg ebx
clc
clc
stc
lea esp, [esp + 7]
neg ch
jmp 0x9b61c2
lea eax, [ebx*4]
sub esp, 1
ror bl, cl
cpuid
pop dword [esp + 3]
lea ebx, [eax + ebx]
jmp 0x9b61a9
mov bp, dx
call 0x9b6227
mov esi, 0x2c3099e0
mov eax, 0x1ca8ce91
adc eax, 0x563e19d3
jmp 0x9b62ff
sub esp, 0x1c
mov byte [esp + 0x19], dl
mov eax, dword [esp + 0x18]
clc
jmp 0x9b633e
mov bx, 0xd541
rdtsc
std
lea ebp, reloc.KERNEL32.dll_GetStartupInfoA
mov byte [esp], al
lea esp, [esp]
jmp 0x9b62e9
popal
mov ax, word [esp]
cpuid
lea esi, reloc.KERNEL32.dll_GetStartupInfoA
not ch
xchg byte [esp], dh
jmp 0x9b6297
pop word [esp + 0x17]
mov bp, di
cmc
neg di
xchg bh, dl
xchg dword [esp + 0xc], ecx
jmp 0x9b638a
mov al, byte [esp]
rdtsc
pushal
clc
rdtsc
mov ch, 1
jmp 0x9b6327
mov dh, byte [esp + 0x11]
lea edi, [esp + ecx]
rdtsc
mov ch, 0x87
xchg byte [esp + 8], al
jmp 0x9b63ce
mov dword [esp + 0x13], ebp
sub ebx, 0xc70c800c
xchg byte [esp + 4], dl
pop ax
pop ebx
push dword [esp + 3]
jmp 0x9b6374
pop si
sub esp, 0x1c
sub cl, dh
push word [esp + 0x18]
popal
not di
jmp 0x9b6367
pop word [esp]
rcl ah, 5
cpuid
shr eax, 0x1d
bswap ebx
pushfd
jmp 0x9b6bb9
mov word [esp + 7], ax
sub esp, 0
mov word [esp + 0x14], dx
lea esp, [esp + 0xb]
rdtsc
push dword [esp + 2]
jmp 0x9b63b8
mov edx, 0xb1d0b0b7
mov byte [esp + 1], cl
cld
call fcn.009b6ad9
mov al, ah
xchg di, si
setbe dh
lea edi, reloc.KERNEL32.dll_GetStartupInfoA
cmc
dec ecx
jmp 0x9b6bf5
rcl ecx, cl
mov cx, bp
adc ecx, edi
mov byte [esp], ch
lea eax, [eax + ebp]
mov dh, byte [esp]
jmp 0x9b6c39
push dword [esp + 0xb]
std
push word [esp + 0x17]
clc
lea esp, [esp + 2]
jmp 0x9b6cde
lea esp, [esp + 1]
popal
clc
pushal
pop word [esp + 6]
pop word [esp + 0x12]
jmp 0x9b6c23
lea esp, [esp + 0x20]
popfd
lea esp, [esp + 4]
call fcn.009b6ca5