Function at 0x1f71c47
Capabilities:
Execute anti-debugging instructions

Disassembly:
not dx
sbb cl, 0x64
clc
mov al, byte [esp + 0x18]
jmp 0x1f71ceb
not dl
push word [esp + 0x16]
not ax
lea edx, reloc.KERNEL32.dll_FreeEnvironmentStringsA
jmp 0x1f71cbc
xchg di, si
not dh
bsf ax, si
mov dword [esp + 8], edi
mov di, word [esp + 0x13]
xchg dword [esp + 0x11], esi
jmp 0x1f71c78
clc
btc edx, edi
dec ebp
lea edi, [ecx*4]
pop dword [esp + 0x10]
jmp 0x1f71d1f
mov dword [esp + 1], edx
mov eax, 0x44fa495c
xchg dword [esp + 0xa], edi
mov esi, 0x5f62ba5d
setp bl
bsf ecx, esi
jmp 0x1f71ca6
lea edx, [ecx*4]
lea edi, [edx*4]
pop edx
mov cl, byte [esp + 0x17]
mov ebp, 0x80aab1cb
mov cx, 0x89e6
jmp 0x1f71c8e
sete al
xchg dword [esp + 0x12], edx
xchg byte [esp + 0xd], ah
pop dword [esp + 0xe]
jmp 0x1f71d72
bswap edi
cld
inc ah
pop dword [esp + 0xc]
lea ebx, [esp + esi]
push word [esp + 4]
jmp 0x1f71d09
pop ax
xchg esi, ebp
lea eax, [ebp*4]
xchg word [esp + 1], di
jmp 0x1f71d9a
pop dword [esp + 0xa]
mov ebp, dword [esp + 0xe]
rdtsc
add esp, 7
stc
pop di
jmp 0x1f71d5c
ror ch, 1
clc
ror bp, cl
xchg dword [esp + 2], edi
bswap esi
add esp, 7
jmp 0x1f71def
bswap edx
sub esp, 0xb
rdtsc
rdtsc
push word [esp]
lea edi, [eax*4]
jmp 0x1f71d84
xchg word [esp + 3], bx
mov dword [esp], eax
clc
push word [esp + 1]
jmp 0x1f71e16
cpuid
mov dword [esp + 4], edx
not ebx
mov dword [esp + 5], eax
pop ebp
xor ch, bh
jmp 0x1f71dd9
lea esi, [esi*4]
pop ebp
cpuid
inc bx
mov byte [esp + 1], dl
jmp 0x1f71e9c
mov dword [esp + 3], esi
sbb dl, 0xc
push word [esp + 1]
not cx
std
mov dword [esp + 3], ebp
jmp 0x1f71e00
mov al, 0x8c
push esi
mov cx, word [esp + 3]
mov bl, 5
pop cx
btr cx, cx
jmp 0x1f71e80
mov cl, al
xchg byte [esp], ch
rdtsc
pop edi
mov bh, byte [esp]
mov ecx, 0x70794f97
jmp 0x1f71e58
mov ecx, 0x9bd33d3a
mov edi, dword [esp]
lea eax, [ebp - 0x11]
mov word [esp], dx
mov ebx, dword [esp]
add esp, 1
jmp 0x1f71ece
pop dx
std
clc
mov edx, dword [esp + 2]
mov ah, byte [esp + 2]
not ax
jmp 0x1f71e6e
mov ecx, 0xe742b764
push word [esp + 0x13]
add esp, 0x19
lea edi, [eax + esi]
mov ebx, esi
pop edi
jmp 0x1f71ef6
mov byte [esp], ch
mov dx, word [esp]
setle bl
xchg byte [esp], dl
pushal
rdtsc
jmp 0x1f71ead
cpuid
mov dx, word [esp]
not eax
bswap ebp
mov ah, 0xd3
pop ecx
jmp 0x1f71f87
mov ebp, dword [esp + 4]
pop word [esp]
inc edi
mov ebx, 0x76260219
mov al, cl
mov di, word [esp + 2]
jmp 0x1f71ee0
rcr bx, 7
mov ecx, 0xce3979fc
clc
mov edi, ebp
rdtsc
xchg dl, bh
jmp 0x1f71f6f
mov edx, 0xf1bc14ce
mov cl, ah
mov ebx, dword [esp]
lea esi, [esi*4]
lea ebp, reloc.KERNEL32.dll_FreeEnvironmentStringsA
mov edx, dword [esp]
jmp 0x1f71f27
xchg byte [esp + 1], ah
stc
xchg byte [esp + 1], cl
mov si, 0xbedb
jmp 0x1f71fc0
lea ecx, [eax*4]
mov al, ah
neg dl
pushfd
mov word [esp + 1], bp
jmp 0x1f71f59
mov ebx, esp
xchg bp, ax
bt bp, si
mov bl, 0x5b
xchg cx, ax
mov bl, byte [esp]
jmp 0x1f71f3d
mov eax, dword [esp + 8]
xchg dword [esp + 7], ebx
push ax
lea eax, reloc.KERNEL32.dll_FreeEnvironmentStringsA
sub esp, 0x18
setle bl
jmp 0x1f71fd7
mov word [esp + 1], bp
mov bp, 0xfe6e
mov bl, bh
push dword [esp + 1]
pushfd
mov ebp, 0x877364ae
jmp 0x1f71f9a
xchg ecx, eax
rcr di, 4
popal
lea edx, [esi*4]
std
call fcn.01f738a7
test dword [ebp - reloc.KERNEL32.dll_FreeEnvironmentStringsA], ecx
retf