Function at 0x972ba8
Capabilities:
Execute anti-debugging instructions

Disassembly:
std
lea ebp, [esp + ebp]
dec ax
mov al, byte [esp + 2]
mov al, 0xfb
jmp 0x972bca
xchg dword [esp], esi
xchg bp, si
sub esp, 0
xchg bp, dx
xchg di, ax
push dword [esp + 4]
jmp 0x972c6f
lea eax, [ecx*4]
xchg byte [esp], dl
rdtsc
xchg al, cl
jmp 0x972c4c
mov ebx, 0x43c48410
mov ebp, dword [esp + 8]
inc ch
xchg dword [esp + 3], eax
xchg si, bx
lea eax, [ecx + ebx]
jmp 0x972c09
push dword [esp + 2]
mov byte [esp + 5], bh
xchg word [esp + 0xa], cx
lea eax, [eax + ecx]
jmp 0x972c8a
lea esi, reloc.oleaut32.dll_SysFreeString
inc edx
mov bx, 0x62e6
not si
mov cx, 0xab6f
xchg byte [esp + 3], bl
jmp 0x972c36
mov word [esp + 6], bx
push word [esp + 2]
mov bh, byte [esp + 6]
bsf ax, bx
not si
mov edx, dword [esp + 6]
jmp 0x972c1f
mov byte [esp + 0xb], ah
xchg byte [esp + 0xa], ch
mov bh, bl
not ebx
pop word [esp + 3]
mov byte [esp + 6], bh
jmp 0x972cd3
rdtsc
inc bx
not ax
mov ebp, esi
cpuid
mov ax, 0x7ce5
jmp 0x972cfd
dec dl
bswap eax
pop bp
xchg word [esp + 5], dx
or cx, 0x9108
neg dl
jmp 0x972cbd
add esp, 4
push dword [esp + 2]
bswap eax
xchg word [esp + 5], bx
jmp 0x972d24
mov edx, 0xf4e5eff
cld
pop ax
cld
ror ebx, 1
mov ax, 0xba13
jmp 0x972ce7
xchg dl, al
lea edx, [esp + edi]
rcr ch, cl
mov cl, dh
xchg bx, dx
jmp 0x972ed5
mov dword [esp], edx
mov dl, dh
xchg byte [esp + 6], al
mov ebp, dword [esp + 8]
lea ebp, [ecx + esi]
lea ebx, [eax + edi]
jmp 0x972d0e
pop ebx
add esp, 8
lea esp, [esp]
call fcn.00972d6c
not edi
mov di, word [esp + 6]
setnp bl
mov si, di
neg ebp
jmp 0x972e1b
pushfd
xchg ebx, edi
std
mov bh, 0x8a
mov word [esp + 0xa], ax
lea ebp, [ecx + ebx]
jmp 0x972d8f
pop dword [esp]
lea esp, [esp + 4]
not ah
rdtsc
cmc
mov bx, 0x46b4
call fcn.00972dfc
mov word [esp + 2], dx
pop dword [esp]
mov di, 0x81f2
not bh
jmp 0x972e5a
xchg di, si
xchg dword [esp], ebp
ror ebx, cl
xchg byte [esp + 3], ch
btr edi, ebp
jmp 0x972e79
add esp, 3
mov edi, 0x6459fa53
not dx
mov dx, bx
push edx
cld
jmp 0x972eac
xchg dl, al
bswap edi
mov bh, 0x7a
xchg di, dx
bt bp, sp
lea ebp, [ebp - 0x63]
jmp 0x972f96
mov word [esp], bx
mov cl, byte [esp]
add esp, 0
cld
add esp, 2
btc ax, si
jmp 0x972e8b
lea ebx, [ecx*4]
mov ch, 0x67
mov cl, 0xaf
mov ebp, dword [esp + 3]
mov di, word [esp + 2]
xchg ah, ch
jmp 0x972dd6
inc ax
sub esp, 0xa
lea eax, [ebx - 4]
xchg dword [esp], ebx
lea edx, [ecx*4]
call fcn.00972f06
pop dword [esp + 0x10]
rdtsc
pop word [esp + 0xc]
mov word [esp + 0x1e], si
jmp 0x972fd6
cpuid
stc
mov byte [esp + 7], bh
xchg ecx, eax
lea ebp, [edi*4]
pop edx
jmp 0x974218
lea esp, [esp + 2]
stc
xchg dh, ch
btc dx, dx
not ax
jmp 0x973051
lea edx, [esi + ebp]
setae ch
push word [esp + 4]
add esp, 7
mov byte [esp], bh
mov bh, 0x79
jmp 0x972fec
mov edi, ecx
mov bh, 0xc3
cpuid
xchg dword [esp + 7], esi
btr ax, ax
pop ebp
jmp 0x973002
xchg ebx, ecx
lea esp, [esp]
mov cx, ax
bsf edx, esp
mov byte [esp + 1], bh
mov ecx, eax
jmp 0x97307d
lea esp, [esp + 1]
bsf edi, esi
push ax
lea esp, [esp]
mov word [esp], di
bsr bp, bp
jmp 0x97302f
dec edx
lea esi, [edx*4]
xchg ebx, ebp
inc esi
pushfd
add esp, 4
jmp 0x97311e
mov word [esp], cx
lea eax, [edx*4]
dec ch
mov byte [esp + 1], bh
mov word [esp], ax
xchg si, bp
jmp 0x973067
pop ebp
mov word [esp + 3], bp
bsf esi, edx
lea esi, [eax + edx]
lea esp, [esp]
bsr di, si
jmp 0x97301e
add esp, 0x1f
xchg si, bp
lea edi, [eax + ebx]
mov byte [esp], bh
mov dh, 0x98
jmp 0x9730f8
rdtsc
xchg byte [esp], dh
bswap edx
mov ebx, 0xbc7c872
sub esp, 0x1f
clc
jmp 0x9730bd
pop di
bswap esi
not cl
bswap esi
push sp
pop edx
jmp 0x9730d3
lea edi, [edx*4]
mov byte [esp], cl
lea ebx, [eax + 0xa5]
add esp, 0
std
rdtsc
jmp 0x97314a
rdtsc
mov dh, 0xe2
not ax
push word [esp + 2]
mov eax, 0xec7d73f6
setb al
jmp 0x9730eb
mov cl, byte [esp]
xchg byte [esp], dh
call 0x973134
mov word [esp + 1], sp
mov dword [esp], ecx
mov bx, cx
add esp, 3
inc dl
jmp 0x97317e
mov esi, dword [esp]
call 0x973194
popal
jbe 0x9731eb
jo 0x9731f5
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [edx + 0x3245486], ah
mov word [esp + 2], bx
add esp, 4
mov dh, byte [esp]
jmp 0x9735d7
xchg word [esp + 0xd], di
push ax
mov si, word [esp + 0xb]
mov word [esp + 0xd], bx
mov bh, byte [esp + 0x10]
pop dword [esp + 5]
jmp 0x9730a5
dec ebp
call fcn.009731f3
push edx
dec edi
jo 0x973239
outsb dx, byte [esi]
dec ebx
jns 0x97321e
js 0x97321c
add byte [edi], bh
push es
mov cl, 0x80
dec dh
rdtsc
lea edx, reloc.oleaut32.dll_SysFreeString
setb ch
mov dx, word [esp]
xchg edx, eax
lds esp, [esi - 0x75]
adc al, 0x24
jmp 0x9731c8
xor dword [esi - 0x79], esp
ret 0x648d
bswap edx
sbb edx, ebx
mov eax, dword [esp]
bswap edx
sets ah
xchg cx, si
jmp 0x9731de
mov bx, 0xf711
adc edi, esi
mov dl, byte [esp + 2]
not cx
bt ax, si
cld
jmp 0x973288
inc ebx
lea esp, [esp + 3]
sub esp, 1
lea edi, [esi*4]
jmp 0x97321c
pop edi
mov ax, 0x21d5
rol edi, cl
bsr di, si
xchg byte [esp], bl
not si
jmp 0x9732e2
add esp, 0
xchg dx, ax
push esi
mov di, word [esp]
pop word [esp]
mov cl, ah
jmp 0x97325f
mov bp, word [esp]
call fcn.00973272
xchg cx, ax
mov edx, ebx
not dx
dec ax
pop bx
lea edx, [eax + ecx]
jmp 0x973480
mov bx, word [esp]
bswap ebx
mov ecx, dword [esp]
std
lea eax, [esp + ebp]
mov ch, byte [esp]
jmp 0x97320b
bsr cx, ax
mov bx, sp
neg bh
mov ax, word [esp]
add esp, 0
jmp 0x9733de
dec al
rdtsc
mov ebp, 0xfe3327dd
xchg bp, bx
lea ecx, [esi + edi]
stc
jmp 0x973330
btc edi, eax
mov ebp, dword [esp]
sete dl
xchg dh, al
mov ah, 0xf9
mov ax, di
jmp 0x973346
mov ebx, 0x537fee2c
bswap ebp
mov bp, word [esp]
mov bl, 0xc8
call fcn.009733b6
push edx
inc ebx
insb byte es:[edi], dx
outsd dx, dword [esi]
jae 0x9733fe
dec ebx
jns 0x97339d
stosd dword es:[edi], eax
ret 0x3c8d
lea edi, [edi + ebp]
mov edx, 0x491ccd9f
setnp bl
mov eax, 0xec221aa7
mov bl, 0x6a
sete dh
jmp 0x97337f
clc
inc ebx
bt bx, bx
setno ch
btr ax, ax
mov al, dl
jmp 0x97339f
neg si
not di
mov ax, 0xca9e
rdtsc
jmp 0x97341e
je 0x97344e
outsb dx, byte gs:[esi]
jne 0x973405
mov dh, byte [esp]
mov edi, 0x39c512c7
lea esp, [esp]
lea esp, [esp]
lea esp, [esp]
lea ebp, reloc.oleaut32.dll_SysFreeString
jmp 0x9733ef
lea ebp, [edi*4]
lea esi, [eax + esi]
shl cx, cl
pushfd
mov di, 0x2920
jmp 0x973461
lea ecx, [edx + esi]
call fcn.009734c1
jne 0x9734c8
jb 0x97348b
xor ch, byte [esi]
insb byte es:[edi], dx
insb byte es:[edi], dx
add byte [ebp - 0x24], cl
das
mov si, di
mov eax, ebp
mov byte [esp + 1], al
cpuid
bswap eax
push cx
jmp 0x97344b
inc al
mov dx, word [esp]
lea esi, [edx*4]
add byte [eax], al
add esp, 0
mov eax, 0x2a63c608
dec ch
jmp 0x97336d
invalid
mov bp, 0xc41a
mov byte [esp], dh
mov dx, word [esp + 1]
pop dx
bsf bx, cx
lea ebp, [edx + ebp]
jmp 0x97331b
pop ebx
neg ax
bsr bx, ax
mov si, 0x770a
mov cx, sp
mov dword [esp], ebp
jmp 0x9731aa
btc edi, edx
xchg word [esp + 9], ax
xchg dword [esp + 0x16], ebx
mov ebx, eax
pop dword [esp + 1]
pop cx
jmp 0x9739a4