Function at 0x7109d1
Capabilities:
Authenticate hmac
Execute anti-debugging instructions
Parse pe header
Read file on windows

Disassembly:
push 0
jmp fcn.005dacc7
mov word [ebp - 0xa2c], dx
jmp 0x622d18
ja 0x42c169
mov ecx, dword [0x500c28]
jmp 0x6503af
test esi, esi
jmp 0x5ea1e1
push 0
jmp 0x70eb09
jl 0x5ea1e7
mov ebx, dword [ebp - 0xe50]
xor ax, dx
shrd eax, esp, 0x1a
sbb al, 0x7c
sub esi, esi
lea eax, [ebp - 0x40c]
push eax
jmp 0x6f7313
mov word [ebp - 0x276], ax
clc
mov ecx, 0x79
mov word [ebp - 0x274], cx
mov edx, 0xd2d4
mov eax, 0xbfb4
mov ecx, 0xd1a9
test ebp, 0x47ca5fc4
jmp 0x69fc43
ja 0x42c169
mov ecx, dword [0x500c30]
clc
cmp eax, edi
cmc
cmp byte [ecx], 0xe9
jne 0x42c169
mov edx, dword [ecx + 1]
cmc
clc
stc
lea ecx, [edx + ecx + 5]
test ebx, edi
clc
cmp ecx, eax
jmp 0x6746e8
je 0x605451
test esi, esi
jmp 0x725780
mov dword [ebp - 0xe44], esi
jmp 0x5ca2f4
je 0x59c7e4
mov ecx, esi
call fcn.0043e982
mov ecx, esi
jmp 0x657f6a
mov dword [ebp - 0xe78], eax
call fcn.005af9e5
mov ecx, dword [0x500c50]
mov edi, ebp
mov edi, eax
jmp 0x6e9a6a
jne 0x42c169
mov edx, dword [ecx + 1]
cmp bl, bh
lea ecx, [edx + ecx + 5]
clc
cmp ecx, eax
jb 0x42c169
cmp ecx, edi
jmp 0x575db6
jle 0x546bdc
lea eax, [ebp - 0x294]
movzx edx, di
lea edx, [eax + 2]
jmp 0x77b192
push 0
jmp 0x769ef4
mov word [ebp - 0x220], cx
inc ecx
and ah, 0x1a
mov word [ebp - 0x21e], dx
shl dl, 7
test bx, bp
inc ch
mov eax, 0xbba7
mov word [ebp - 0x21c], ax
mov ecx, 0xcbf9
sbb edx, edx
mov edx, 0xd3d0
adc al, 0x2d
and ah, 0xa3
shr al, 0x95
mov word [ebp - 0x21a], cx
seto ch
btr ecx, eax
mov word [ebp - 0x218], dx
shl ecx, cl
mov eax, 0xb5c4
mov ecx, 0xb9a4
setge dl
mov edx, 0xd7f7
clc
mov word [ebp - 0x216], ax
or ah, 0x6a
mov eax, 0xbcb0
cmp si, 0x76c0
cmc
mov word [ebp - 0x214], cx
xadd cx, cx
mov word [ebp - 0x212], dx
bswap ecx
rol edx, cl
bts cx, dx
mov ecx, 0xcbf9
ror dx, 0xff
bswap edx
mov edx, 0xd3d0
stc
test ax, 0x7574
mov word [ebp - 0x210], ax
btr ax, 0x8b
mov word [ebp - 0x20e], cx
movzx eax, di
add eax, ecx
jmp 0x607831
push 0
jmp 0x6d1710
test esi, esi
jmp 0x659518
mov word [ebp - 0x20c], dx
bts ecx, esi
mov eax, 0xcdf8
mov ecx, esi
rcr cl, cl
mov word [ebp - 0x20a], ax
ror eax, 0x2e
or cx, 0x683f
mov edx, 0xb6d4
adc ax, di
cmp ebp, edi
shr cl, cl
mov word [ebp - 0x206], dx
add dl, 0xec
shld ecx, ebx, 3
cmc
mov eax, 0x42
add dl, 0x55
adc edx, ecx
shl cx, 0xd3
mov word [ebp - 0x204], ax
cmove ecx, ecx
rdtsc
mov ecx, 0xd3d1
sbb dx, 0x4678
movsx edx, bx
mov word [ebp - 0x208], cx
mov edx, 0x32
bts ecx, ebp
cmp esi, edi
mov word [ebp - 0x200], dx
cmp cx, 0x540
sal eax, 0x8c
sete ch
mov eax, 0x33
jmp 0x682d42
inc edi
test cx, 0x531d
stc
cmp edi, esi
mov dx, word [ebp + edx*2 - 0x294]
jmp 0x6cc0c3
call fcn.00454550
mov ecx, 0xb1be
clc
sal al, 0xbf
sar al, 0xf4
mov word [ebp - 0x294], cx
bts dx, bx
rol eax, 0xe3
clc
mov edx, 0xbeab
cwde
sar eax, cl
shr al, 0x62
mov word [ebp - 0x292], dx
shrd eax, edi, 0xff
mov eax, 0xbbaa
add cl, 0xec
mov word [ebp - 0x290], ax
not ecx
sbb dx, cx
rcl cl, cl
mov ecx, 0xcad6
adc ah, 0xaa
lahf
mov word [ebp - 0x28e], cx
xor al, 0x8b
mov edx, 0xb2e1
btc cx, 0x40
mov word [ebp - 0x28c], dx
mov eax, 0xcad5
ror dh, cl
mov word [ebp - 0x28a], ax
shld ecx, esi, 0x9d
mov ecx, 0x2e
xor al, ch
rol ah, cl
mov word [ebp - 0x288], cx
mov ah, 0x6c
mov edx, 0xc2bc
mov word [ebp - 0x286], dx
bsf dx, cx
neg dx
mov eax, 0xb5c4
or ch, 0xe4
mov word [ebp - 0x284], ax
bswap dx
mov ecx, 0xcec4
ror ax, cl
mov word [ebp - 0x282], cx
adc ax, ax
bt cx, dx
mov edx, 0xd5c2
mov word [ebp - 0x280], dx
add cx, sp
rcl edx, cl
mov eax, 0x71
mov word [ebp - 0x27e], ax
btr dx, 0x92
sal ax, cl
mov ecx, 0x77
sar ah, 0xa8
mov word [ebp - 0x27c], cx
mov edx, 0x72
rol al, cl
mov word [ebp - 0x278], dx
mov eax, 0x74
jmp 0x5560f7
mov edx, 0xd6f7
not ax
mov word [ebp - 0x248], dx
stc
bsf ax, si
setp dl
mov eax, 0xd7aa
test dh, 0x5a
shr dx, cl
mov word [ebp - 0x246], ax
mov ecx, 0xccfb
mov dl, cl
xor edx, ebp
mov word [ebp - 0x244], cx
xor edx, 0x5e503add
test bx, dx
mov edx, 0x62
sub al, dh
setae ch
mov word [ebp - 0x242], dx
cwde
shr ax, cl
rcl ax, cl
mov eax, 0x6e
btr edx, ebp
bts ecx, eax
or dx, sp
mov word [ebp - 0x240], ax
cdq
or ax, sp
mov ecx, 0x6d
movsx ax, bl
rcl edx, 0x90
cwde
mov word [ebp - 0x23e], cx
adc al, 1
bts ax, cx
mov edx, 0x4b
bts cx, cx
sal al, 0x5a
btc eax, 0x6a
mov word [ebp - 0x23c], dx
mov eax, 0x48
shl cx, cl
mov word [ebp - 0x23a], ax
sub ch, 0x87
mov ecx, 0x46
mov word [ebp - 0x238], cx
cmovne edx, esp
mov edx, 0x44
mov word [ebp - 0x236], dx
inc ax
ror ch, cl
clc
mov eax, 0x53
adc ch, ch
mov word [ebp - 0x234], ax
inc dl
rol ch, cl
mov ecx, 0xc2db
add al, ah
ror dh, 0x3b
rol edx, 0x7e
mov word [ebp - 0x232], cx
shl ax, 9
xor ch, bl
mov edx, 0xccb3
shld eax, esi, 0x75
cbw
rol ecx, 0x99
mov word [ebp - 0x230], dx
shrd ax, bx, 0xb7
mov eax, 0xbbf2
shl dl, cl
ror ch, cl
xor ecx, edx
mov word [ebp - 0x22e], ax
mov ecx, 0xcfe0
lahf
mov word [ebp - 0x22c], cx
mov edx, 0xb9d8
cmp eax, edx
rcl ax, 0x44
dec ecx
mov word [ebp - 0x22a], dx
mov eax, 0xb5c4
mov word [ebp - 0x228], ax
mov ecx, 0xc2db
ror al, cl
mov word [ebp - 0x226], cx
bt cx, 0x2e
shl dh, 0xd2
mov edx, 0xccb3
movzx cx, cl
rcr ecx, cl
mov word [ebp - 0x224], dx
and ecx, 0x20746b35
xchg dl, dl
mov eax, 0xd7a2
and ecx, 0x7739008b
shl cl, 0xb2
mov word [ebp - 0x222], ax
test ax, di
mov ecx, 0xb2e1
btc eax, 0xd6
cmovno eax, edx
shr dx, cl
mov edx, 0xd3c3
sub ax, si
adc eax, 0x218c18ce
jmp 0x5f2e4b
call fcn.00454550
add esp, 0xc
xor edx, edx
bswap eax
xchg al, ah
push 0x206
bswap eax
movsx eax, ax
movzx eax, si
push edx
movsx ax, ah
not ah
lahf
lea eax, [ebp - 0xa2a]
jmp 0x6dd510
cmp byte [ecx], 0xe9
jmp 0x5e7199
jl 0x546bed
call fcn.006fd736
mov esi, eax
stc
cmp ebp, 0x2298190f
test esi, 0x37a57a9e
cmp edi, 0xffffffff
jmp 0x582fd7
call fcn.00454550
lea esp, [esp + 0xc]
xor eax, eax
jmp 0x745818
call fcn.00444cad
jmp fcn.00737bf9
je 0x6ae34f
push 0
jmp 0x5edcf3
jmp 0x75c790
div ebx
jmp 0x60d84e
call fcn.004520c9
cdq
rcl esi, 0x44
bswap si
mov ecx, 0xa
idiv ecx
mov esi, edx
lea esi, [esi + 3]
xor edi, edi
jmp 0x50caa5
mov word [ebp - 0xc34], ax
jmp 0x63b9d1
jb 0x42c169
cmp ecx, edi
jmp 0x691621
mov word [ebp - 0x1fe], ax
mov ecx, 0x31
xadd eax, edx
bt ax, 0xd9
mov word [ebp - 0x202], cx
mov edx, 0x35
neg ch
cmp ebx, 0x38cb6caa
mov word [ebp - 0x1fa], dx
mov eax, 0x36
cmc
or dl, 0x56
xor ecx, 0x38fc2c22
mov word [ebp - 0x1f8], ax
cmp esi, 0x551f3195
neg ax
mov ecx, 0x34
inc ax
bswap ax
bts ax, di
mov word [ebp - 0x1fc], cx
stc
mov edx, 0x38
rcl ah, 0xb5
btr ax, 0xa7
mov word [ebp - 0x1f4], dx
btr ax, sp
cmp esi, edi
mov eax, 0x39
mov ch, 0xf1
ror edx, 0x60
mov word [ebp - 0x1f2], ax
sub cx, 0x2d55
mov ecx, 0x37
btr ax, cx
test esp, esi
mov word [ebp - 0x1f6], cx
cwd
neg ax
bswap eax
mov edx, 0xd6ca
movsx ecx, ax
mov word [ebp - 0x1ee], dx
mov eax, 0xb5c4
mov word [ebp - 0x1ec], ax
mov ecx, 0xd0d4
bt ax, sp
cwde
cbw
mov word [ebp - 0x1f0], cx
or edx, edx
inc ax
mov edx, 0xd5c2
or ax, ax
mov cx, 0x2f72
mov word [ebp - 0x1e8], dx
cmp ah, ah
cbw
mov eax, 0xb3fd
mov word [ebp - 0x1e6], ax
add ecx, ebp
ror dh, cl
btc eax, 0x8e
mov ecx, 0xcec4
bt ax, bx
xchg dx, ax
adc edx, esp
mov word [ebp - 0x1ea], cx
mov cx, cx
sal dx, 0x7e
mov edx, 0xccd8
sub eax, esi
mov word [ebp - 0x1e2], dx
mov eax, 0x2e
mov word [ebp - 0x1e0], ax
cmovb cx, si
mov ecx, 0xb7c7
mov word [ebp - 0x1e4], cx
xchg dl, al
mov edx, 0xd3c5
rcl al, cl
shl cx, 0xcc
mov word [ebp - 0x1dc], dx
rol cl, cl
cwd
mov eax, 0xd0e3
mov word [ebp - 0x1da], ax
bts cx, bp
xor eax, edx
movzx edx, sp
mov ecx, 0xb1f0
cmp eax, esi
bsf ax, di
mov word [ebp - 0x1de], cx
setne dl
or ecx, ebp
sal ax, 0x15
mov edx, 0xd2bb
stc
mov word [ebp - 0x1d6], dx
mov eax, 0xb0e3
sbb ecx, ebx
or ch, ch
xadd dl, cl
mov ecx, 0xb5c4
bt dx, sp
mov word [ebp - 0x1d4], ax
cmp edx, 0x5a20729c
mov edx, 0xcad5
mov word [ebp - 0x1d8], cx
btc ax, 0x19
sbb al, 0x7e
mov word [ebp - 0x1d0], dx
or ecx, ebp
sar ecx, cl
mov eax, 0xc2bc
sar cx, 0xb7
sub edx, edx
test ah, al
mov ecx, 0xb2bb
push 0x3e
cmp ax, bx
mov word [ebp - 0x1ce], ax
mov word [ebp - 0x1d2], cx
rol eax, cl
push edx
cmp bp, 0x62cd
clc
shld ax, si, 0x1b
lea eax, [ebp - 0x40a]
sub ecx, ecx
jmp 0x6dba18
mov eax, esi
jmp 0x72df10
ja 0x42c169
push 0x44
xchg dx, dx
movzx edx, cx
lea edx, [ebp - 0xf14]
jmp 0x5fb461
ja 0x42c169
mov ecx, dword [0x500c38]
test ax, 0x5041
cmp esp, edx
cmp byte [ecx], 0xe9
jmp 0x7386b4
mov word [ebp - 0x272], dx
rcl dl, 0xf1
test bx, 0x1668
xchg dh, dl
mov word [ebp - 0x270], ax
and edx, ebx
sar dh, cl
bsr ax, bp
mov word [ebp - 0x26e], cx
sub ah, dl
shl al, 0xfa
mov edx, 0x2e
sbb ax, si
mov eax, 0xc2db
mov ecx, 0xccb3
stc
clc
cmc
mov word [ebp - 0x26c], dx
sbb dh, 0x85
mov word [ebp - 0x26a], ax
btc dx, 0x53
mov word [ebp - 0x268], cx
not edx
cdq
mov edx, 0xd4ad
add cx, ax
bswap eax
mov eax, 0x51
bt ecx, 0x63
bsr cx, dx
stc
mov ecx, 0x57
cmp bx, 0x1b19
mov word [ebp - 0x266], dx
cmp esi, eax
add dx, 0x3377
mov word [ebp - 0x264], ax
lahf
btc ax, 0xc3
mov word [ebp - 0x262], cx
btc edx, esi
movzx edx, cx
mov edx, 0x45
movsx ax, cl
mov ah, 0x70
mov eax, 0x52
movsx ecx, sp
sub cl, ah
sal ecx, 0x5e
mov ecx, 0x54
lea esp, [esp + 0xc]
clc
mov byte [ebp - 0xe45], 0
clc
mov word [ebp - 0x27a], bx
test cx, 0x12f1
clc
test ah, al
mov word [ebp - 0x260], dx
inc dl
xchg dx, dx
shr dx, cl
mov word [ebp - 0x25e], ax
add dh, bl
shr ah, 0x44
btc dx, 0xa9
mov word [ebp - 0x25c], cx
sal dx, cl
inc al
mov edx, 0x59
btr cx, 0x84
sal ch, cl
dec ax
mov word [ebp - 0x25a], dx
xor dl, 1
mov eax, 0x75
mov word [ebp - 0x258], ax
bsr ax, sp
cmp edi, edx
mov ecx, 0x69
mov word [ebp - 0x256], cx
ror ah, 0xc9
xchg dx, ax
cbw
mov edx, 0x6f
rol ecx, 0x94
not cx
mov word [ebp - 0x254], dx
btc eax, 0x3e
rdtsc
mov eax, 0x70
mov word [ebp - 0x252], ax
movzx edx, cx
mov dx, di
mov ecx, 0xb4b4
rcr ax, cl
rdtsc
cwde
mov word [ebp - 0x250], cx
movzx edx, bp
mov edx, 0xcec4
bt eax, esi
mov word [ebp - 0x24e], dx
bts ecx, eax
clc
mov eax, 0xd5c2
inc cx
mov word [ebp - 0x24c], ax
mov ecx, 0xceaa
bswap ax
lahf
rcr ah, 3
mov word [ebp - 0x24a], cx
jmp 0x6358b8
mov edx, dword [esi + 0x20]
push edx
jmp 0x6c27c2
lea ecx, [ebp - 0x40c]
movzx edx, bp
cdq
push ecx
movsx edx, bp
xchg dx, dx
jmp loc.0042d201
call fcn.00708fa5
test eax, eax
jmp 0x6e3352
mov word [ebp + edi*2 - 0x40e], dx
jmp 0x546bd6
push edx
jmp 0x65146c
jb 0x42c169
cmp ecx, edi
jmp 0x689a32
push 0
call fcn.0045108d
mov edx, dword [ecx + 1]
test cx, 0x7405
clc
jmp 0x6e8099
push ecx
mov dword [ebp - 0xf14], 0x44
jmp 0x67456b
push eax
jmp 0x742531
push eax
jmp 0x50a487
je 0x685703
mov eax, dword [esi + 0x20]
jmp 0x751308
lea ecx, [edx + ecx + 5]
cmp ecx, eax
jmp 0x706caa
call fcn.005af9e5
test edi, edi
jmp 0x786fda
push ebx
call fcn.004520eb
mov edi, eax
test cx, 0x5736
clc
test ch, bl
lea esp, [esp + 8]
test edx, esi
test edi, edi
jmp 0x7088e8
jb 0x42c169
cmp ecx, edi
jmp 0x50a50d
jne 0x77b192
sub eax, edx
sar eax, 1
jmp 0x7850c7
je 0x6ae34f
inc esi
cmp esi, 0x64
jmp 0x651449
call fcn.0042dd60
push edi
movzx edi, ax
mov edi, 0x4e9080
jmp 0x75c790
push ebp
mov ebp, esp
cmovbe ax, si
push 0xffffffffffffffff
cwde
test ax, di
push 0x4c03ab
rol al, 0x9f
mov eax, dword fs:[0]
cmc
push eax
xadd eax, eax
dec eax
sbb ah, 0x11
sub esp, 0xf68
cmp ecx, 0x756570de
rol eax, cl
add eax, 0x1c0e7f5d
mov eax, dword [0x4f65e8]
cmc
xor eax, ebp
mov dword [ebp - 0x14], eax
jmp 0x72195f
push ebx
jmp 0x733c76
je 0x6ae34f
push 0
jmp 0x512560
call fcn.00418f20
jmp 0x6d57b3
push esi
push edi
push eax
lea eax, [ebp - 0xc]
bswap esi
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov esi, esp
mov esi, ecx
movsx cx, bl
movzx ecx, bp
movsx ecx, di
mov ecx, dword [0x500c44]
jmp 0x5861c3
jne 0x42c169
mov edx, dword [ecx + 1]
cmp esp, 0x1a24264f
stc
lea ecx, [edx + ecx + 5]
cmc
cmp ecx, eax
jmp 0x6d355d
call fcn.004520b7
add esp, 4
jmp 0x6711cc
mov word [ebp - 0x1cc], cx
jmp 0x761e1d
push 0x206
push eax
cmovns ecx, ecx
setle ch
mov cx, si
lea ecx, [ebp - 0xc32]
jmp 0x6d5813
push eax
jmp 0x7a4d89
call dword [0x4c236c]
push eax
jmp 0x7413be
call fcn.0041c220
add esp, 0xc
mov si, ax
mov esi, dword [ebp - 0xe44]
jmp loc.00426c69
mov word [ebp - 0x40c], dx
call fcn.00454550
add esp, 0xc
jmp 0x7536cb
call fcn.0042dd60
push 0xffffffffffffffff
mov edi, esi
mov edi, 0x4e90b0
jmp 0x662eb5
mov cx, word [eax]
cmc
add eax, 2
cmp cx, 0x10b8
test cx, cx
jmp 0x707e92
mov ebx, eax
call fcn.004520c9
xor edx, edx
jmp 0x66a07d
je 0x6abf9d
test eax, eax
jmp loc.0041a954
call fcn.006197db
test eax, eax
jmp 0x59c7d7