Function at 0x96bc37
Capabilities:
Execute anti-debugging instructions

Disassembly:
push 0
jmp 0x96b7ef
push ecx
jmp 0x96b73d
call 0x96b6ca
push dword [esp + 0xa]
mov dword [esp + 0x40], edx
mov dword [esp + 0x3c], ebx
jmp 0x96b70e
pushfd
push word [esp + 4]
je 0x96b78f
mov word [esp + 2], sp
jmp 0x96b794
mov word [esp + 2], sp
call fcn.0096b771
mov byte [esp + 1], ah
mov dword [esp + 0x48], esi
push bp
push cx
mov byte [esp], ah
jmp 0x96bc4f
jmp 0x96bc1b
rcr ah, 6
jne 0x96bc2b
bsr bx, ax
dec cx
jmp 0x96bc31
bswap ebx
bswap edi
xchg bx, dx
bswap ebx
mov ax, dx
xchg ecx, eax
jmp 0x96bc05
bsr bx, ax
dec cx
call 0x96bc37
pop edi
jmp 0x96bd5a
push word [esp + 1]
lea esp, [esp + 2]
mov dword [esp + 0x48], edi
lea esp, [esp + 0x48]
pushfd
jmp 0x96a040
mov dx, word [esp]
call fcn.0096bc66
mov esi, dword [esp + 0x30]
mov dl, dh
stc
jmp 0x96bccc
rdtsc
lea ebp, [ecx*4]
neg di
bsf di, ax
jmp 0x96bd7f
lea esp, [esp + 1]
mov ebp, dword [esp]
mov eax, 0xa5f6d57
jmp 0x96bc7c
jno 0x96bc92
rdtsc
lea ebp, [ecx*4]
call fcn.0096bd1b
sub dword [ebx + 0x3c], esp
je 0x96bd35
xchg esi, eax
pop ebx
fmul dword [esi + 0x29]
fdivr dword [edx]
mov ch, 0xa4
xlatb
or dword ds:[eax - reloc.mscoree.dll__CorExeMain], ebp
imul ebx
mov bl, 0x66
xchg word [esp], cx
mov esi, 0xf7c7d078
jmp 0x96bca8
xchg ah, bl
pop di
lea esp, [esp + 2]
xchg dword [esp], eax
jmp 0x96bd36
lea ecx, [edi + ebp]
xchg di, bx
mov cl, 0xde
not ebp
xchg dword [esp], eax
jmp 0x96bdc8
push 0xffffffffffffff81
invalid
sbb ebx, 0x728534a0
lea ecx, [ecx + edx]
bswap ecx
mov edx, ebx
lea eax, [eax - 0x26]
setae dl
jmp 0x96bd20
xchg dword [esp], ebp
lea esp, [esp]
rcl bl, 2
jg 0x96bcee
mov esi, 0xf7c7d078
lea esp, [esp + 1]
mov ebp, dword [esp]
mov eax, 0xa5f6d57
mov dx, word [esp]
jmp 0x96bc80
mov edx, 0xea7d2ebc
lea ebp, [edi + 0x58]
sub esp, 0x11
jmp 0x96bddb
call 0x96bdf1
mov ebx, dword [esp + 0xe]
call 0x96bdaf
salc
mov ax, dx
mov bx, word [esp + 0x10]
mov bp, 0x9a3
jmp 0x96bebb
mov dx, word [esp]
xor bx, sp
mov dh, bl
bsr bp, dx
push dword [esp]
ret 4
jg 0x96bda0
jle 0x96bda0
push ecx
aad 0x45
sub al, 0xdf
aas
mov dword [edx + reloc.mscoree.dll__CorExeMain], 0xc8a95e77
imul eax, dword [edx - reloc.mscoree.dll__CorExeMain], 0x14
lodsd eax, dword [esi]
add byte [eax], al
add byte [eax], al
not dl
xchg dl, ch
clc
jmp 0x96bf19
pop edi
not bx
dec al
jmp 0x96be2f
add esp, 0x15
pop edi
not bx
dec al
jmp 0x96be5b
cpuid
sub esp, 0xc
jmp 0x96be7e
sub esp, 0xc
mov di, 0x5505
inc di
mov edi, dword [esp + 1]
jmp 0x96be68
lea ebp, [esp + 4]
neg ax
jae 0x96be31
cpuid
jmp 0x96be3c
mov cx, word [esp + 0xb]
bts ebx, edx
jl 0x96bea0
mov word [esp + 5], cx
jmp 0x96be8a
mov di, 0x5505
inc di
mov edi, dword [esp + 1]
jmp 0x96be68
push sp
mov dword [esp + 7], ebx
pop word [esp]
jmp 0x96bee5
mov word [esp + 5], cx
push sp
mov dword [esp + 7], ebx
pop word [esp]
btr ax, bp
xchg dh, bh
jmp 0x96becc
not dh
clc
jp 0x96be26
add esp, 0x15
jmp 0x96be10
bswap edi
xchg ecx, ebx
bts bx, sp
jle 0x96bf01
mov word [esp + 3], sp
mov ch, 0x40
jmp 0x96bfb5
btr ax, bp
jmp 0x96beb3
mov ch, 0x40
mov cx, word [esp + 2]
rdtsc
mov al, bl
push word [esp]
jmp 0x96bf3e
mov word [esp + 3], sp
jmp 0x96beeb
jp 0x96bda5
mov ebx, dword [esp + 0xe]
jmp 0x96bda9
mov ch, bl
mov eax, 0x4578db33
add ax, 0xb283
jmp 0x96bf50
lea esp, [esp + 1]
lea esp, [esp + 1]
sub esp, 0xb0
mov edi, esp
jmp 0x96bf28
jle 0x96bf66
mov ch, 0x77
not bx
jmp 0x96bf8a
mov ch, 0x77
not bx
sub esp, 0x1e
sub esp, 0x1e
rdtsc
pop ax
jmp 0x96bf94
sub esp, 0x1e
sub esp, 0x1e
rdtsc
jmp 0x96bf73
lea esp, [esp + 0x1d]
mov word [esp + 6], dx
add esp, 5
js 0x96bfd9
rcl cx, cl
lea esp, [esp + 7]
jmp 0x96c41d
mov cx, word [esp + 2]
rdtsc
mov al, bl
jmp 0x96bef6
rcl cx, cl
call 0x96bfe2
jnp 0x1071b6b1
mov dword [reloc.mscoree.dll__CorExeMain], eax
xchg dword [esp], edi
jmp 0x96cd0c
ja 0x96c20f
lea esp, [esp + 3]
jmp fcn.0096c213
lea esp, [esp + 3]
bsr bx, cx
lea edx, [eax + eax]
xchg byte [esp + 0xc], ch
xchg dword [esp + 5], edx
pop word [esp + 7]
sub esp, 0xc
jmp 0x96c131
xchg bh, cl
lea edx, [ebp - 0x5a]
lea edx, [ebp*4]
jmp 0x96c29c
bsf edx, edi
mov cx, word [esp]
cmc
push dword [esp]
ret 4
inc al
mov ebx, 0xd19b11c0
mov dx, bx
mov ch, byte [esp]
xchg dword [esp], edi
btc edx, esi
jmp 0x96c7fe
stc
neg ax
mov ch, byte [esp]
setge al
lea edi, [edi - 0x1e]
mov eax, 0x46057f29
jmp 0x96c83a