Function at 0x672b24
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x98999d
jmp 0x96ed78
pop ebx
mov eax, dword [esp]
add esp, 4
jmp 0x96ede1
push 0x5ff25be3
mov dword [esp], edi
push ebx
mov ebx, 0
mov dword [esp + 4], ebx
jmp 0x96ed69
jmp 0x98db97
jmp 0x970c70
mov eax, dword [esp]
add esp, 4
mov dword [esp], ebx
jmp 0x970d1f
push ecx
mov dword [esp], eax
push eax
mov eax, 0x713532ca
mov dword [esp + 4], eax
jmp 0x970c5f
jmp 0x980351
jmp 0x972fe7
push ecx
mov dword [esp], ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
sub ebp, 0x14
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x973006
jmp 0x970c05
jmp 0x974338
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp 0x9743b6
push dword [esp]
pop ecx
sub esp, 4
mov dword [esp], edx
jmp 0x9743a3
mov edx, esp
add edx, 4
add edx, 4
jmp 0x9742dc
jmp 0x98d2d6
push ebx
push edx
mov edx, 0x23b5bcf6
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
mov dword [esp], edx
pop dword [ebp - 0x10]
jmp 0x9748bc
jmp 0x980469
jmp 0x974ad9
cpuid
jmp 0x974ae0
jmp 0x994f87
jmp 0x975017
rdtsc
jmp 0x975080
jmp 0x99046a
push 0x14b7ea93
mov dword [esp], ebp
mov dword [esp], 0x6c6ee0cf
mov dword [esp], esi
mov dword [esp], edi
jmp 0x9803b4
mov dword [esp], ecx
jmp 0x980464
jmp 0x98f049
push ebp
mov dword [esp], 0
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
jmp 0x980591
jmp 0x98c0a1
add eax, ecx
jmp 0x985de2
adc ebx, edx
jmp 0x9933fd
jmp 0x9861a6
xor edi, ecx
xor ecx, edi
jmp 0x986220
xchg ecx, edi
xchg edi, edx
push edx
not dword [esp]
mov edx, dword [esp]
add esp, 4
xchg edi, edx
xor ecx, edi
jmp 0x9860e3
jmp 0x98e275
jmp 0x98718f
push dword [ebp - 8]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x9871b0
jmp 0x9970ce
jmp 0x989abd
pop dword [esp]
pop esp
mov dword [esp], ebp
jmp 0x989ae3
push 0x219d152d
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
mov ecx, dword [esp]
add esp, 4
jmp 0x9899fa
jmp 0x98c411
jmp 0x98c12e
cpuid
jmp 0x98c185
jmp 0x998d39
jmp 0x98c4c0
sub esp, 4
mov dword [esp], esp
push eax
mov eax, 4
add dword [esp + 4], eax
pop eax
push dword [esp]
pop ebp
add esp, 4
jmp 0x98c538
jmp 0x972ee7
jmp 0x98d32a
push dword [esp]
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
jmp 0x98d33e
push ebx
mov ebx, 4
add esi, ebx
pop ebx
xchg dword [esp], esi
pop esp
add esp, 4
jmp 0x98d3f6
jmp 0x992c75
jmp 0x98d622
cpuid
jmp 0x98d6d4
jmp 0x96ecc5
ret
jmp 0x98dca0
cpuid
jmp 0x98dca7
jmp 0x98dcac
jmp 0x98ddb4
rdtsc
jmp 0x98ddbb
jmp 0x9955ee
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
xor dword [esp], eax
xor eax, dword [esp]
xor dword [esp], eax
not eax
xchg dword [esp], eax
pop edx
jmp 0x98e3a4
jmp 0x994025
jmp 0x98e58a
push dword [ebp - 0xc]
push dword [esp]
pop eax
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x98e606
jmp 0x98707d
jmp 0x98ed68
leave
jmp 0x98edd1
jmp 0x98d8b9
jmp 0x98f098
push 0x3f306476
mov dword [esp], edx
push ebp
push 0x16882f43
pop ebp
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
jmp 0x98f15b
jmp 0x974f57
jmp 0x98f26e
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push 0x60002f85
mov dword [esp], eax
mov eax, 4
add ebx, eax
pop eax
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x98f295
jmp 0x97428d
jmp 0x99055b
sub esp, 4
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], eax
jmp 0x99056f
pop dword [ebp - 0x14]
jmp 0x990577
jmp 0x97479d
push dword [ebp - 4]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
jmp 0x992d81
jmp 0x98ecb9
push ebx
mov dword [esp], eax
push edx
mov edx, 0x30167936
mov dword [esp + 4], edx
pop edx
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0x993527
jmp 0x98f160
add ecx, 1
jmp 0x99402d
adc edx, 0
jmp 0x985ddb
jmp 0x99458f
sub esp, 4
mov dword [esp], ecx
push edi
mov edi, 0x6635f06b
mov dword [esp + 4], edi
pop edi
mov dword [esp], edx
pop dword [ebp - 8]
jmp 0x994658
jmp 0x98e4d8
jmp 0x994feb
push eax
mov dword [esp], 0
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
jmp 0x995091
jmp 0x98d5d1
jmp 0x9956af
xor ebx, 0x2acc204e
sub edx, ebx
pop ebx
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], eax
pop dword [ebp - 0xc]
jmp 0x995736
push edx
mov edx, esp
add edx, 4
push ebx
jmp 0x9956be
mov ebx, 0x6bd53e78
xor ebx, 0x27dfa9e3
sub ebx, 0xf7f39b6
sub ebx, 0x11bf3d9b
jne 0x9955f3
jmp 0x9956be
jmp 0x994549
push dword [ebp - 0x14]
mov ecx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
push esi
mov esi, 4
jmp 0x99713e
add ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
jmp 0x9971f0
jmp 0x99a31f
push edi
mov dword [esp], 0
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
jmp 0x998e69
jmp 0x9749cb
push dword [ebp - 0x10]
mov edx, dword [esp]
push edi
mov edi, esp
push eax
mov eax, 0x3fffea02
shr eax, 4
jnp 0x99a41a
jmp 0x99a399
and eax, 0x995c964
jne 0x99a401
jmp 0x99a401
pop esp
jmp 0x99a46f
add eax, 0xfe6a37e4
add edi, eax
pop eax
push esi
mov esi, 4
add edi, esi
pop esi
xchg dword [esp], edi
jmp 0x99a3a9
push ebx
mov ebx, dword [esp]
push eax
mov eax, esp
push ebp
mov ebp, 0x7b9f3b8a
xor ebp, 0x47da894d
or ebp, 0x7fefc0fc
add ebp, 0x7ebb5fd4
inc ebp
or ebp, 0x5fff3a8f
add ebp, 0x8525
add eax, ebp
pop ebp
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push 0x61778759
mov dword [esp], ebp
mov dword [esp], edx
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
jmp 0x99a401
jmp 0x9860de