Function at 0x1f721b2
Capabilities:
Execute anti-debugging instructions

Disassembly:
lea eax, [eax + edx]
bsf ecx, ebx
mov bx, 0x8bef
mov byte [esp + 0xb], dh
inc bh
neg ah
jmp 0x1f7208c
sub esp, 0x1b
mov word [esp + 0x13], di
dec edi
pop dword [esp + 0x12]
sbb edi, 0xb8e8815a
mov ecx, edi
jmp 0x1f71feb
mov dx, 0x84
bts bp, bx
cld
mov cl, byte [esp]
and si, bp
mov byte [esp], dl
jmp 0x1f72015
lea esi, [eax + edx]
add ch, 0xa7
neg edx
pop word [esp + 0x15]
jmp 0x1f720c6
xchg ecx, eax
bsr edx, esp
cld
neg edx
lea ebx, [ebp - 0xde]
sub esp, 0x19
jmp 0x1f72055
cmp ax, cx
lea esi, [edi*4]
pop dx
xchg dword [esp + 0xd], edi
lea ebp, [edx*4]
lea esp, [esp + 0xa]
jmp 0x1f7206b
bswap eax
xchg ebx, edi
call fcn.01f720de
mov esi, 0x28d9be28
popfd
rol byte [ebp - 0x2b], 1
mov esp, 0xf662e44f
add edi, esi
dec ebp
mov cs, word [di - 0x214a]
pop edi
add byte [eax], al
lea esi, reloc.KERNEL32.dll_FreeEnvironmentStringsA
dec ebx
pop dword [esp + 0xe]
mov edx, 0xec6f0de4
setp bh
sub esp, 0x13
jmp 0x1f720a9
sbb dl, bh
lea esi, [ecx + ebx]
pop bp
push eax
lea esp, [esp + 8]
mov dh, bh
jmp 0x1f72041
dec eax
bts ecx, ebx
jmp 0x1f72200
xchg dword [esp + 7], ebx
mov bp, 0xf4fb
inc dh
ror al, 5
pop dword [esp + 1]
jmp 0x1f722b6
xchg byte [esp + 3], bh
pop bx
pop dword [esp]
rdtsc
push cx
cpuid
jmp 0x1f7227c
std
mov ebx, esp
sub esp, 0
push word [esp + 3]
mov bx, 0x6cd2
mov eax, edi
jmp 0x1f72231
sub esp, 0x13
btr bp, sp
sete ah
xchg al, dh
rdtsc
add esp, 4
jmp 0x1f72291
push word [esp + 7]
btr ax, sp
or bx, ax
bswap ebp
bsf edx, ebp
xchg al, ah
jmp 0x1f7225a
mov edi, 0x9441efc5
push word [esp + 0x10]
push word [esp + 0xe]
push esi
mov byte [esp + 0x14], cl
pop dx
jmp 0x1f72305
lea edi, [ecx*4]
lea eax, [ebx*4]
push word [esp + 3]
lea ebp, [eax - 0x99]
xchg byte [esp + 1], cl
mov si, word [esp + 3]
jmp 0x1f72247
mov ah, byte [esp + 0x1a]
mov bx, ax
add cl, al
not bx
call fcn.01f722dd
mov cl, ch
dec bh
push dword [esp + 1]
push si
rdtsc
and bl, ch
jmp 0x1f7234d
push dword [esp + 0xa]
add ax, 0xb21f
push word [esp + 2]
mov dword [esp + 0xb], esp
setg bh
rdtsc
jmp 0x1f723bb
mov esi, dword [esp + 0xb]
rdtsc
mov dword [esp + 0xc], eax
cpuid
mov edi, 0xf4bfa9ac
call fcn.01f72399
lea esi, reloc.KERNEL32.dll_FreeEnvironmentStringsA
xchg word [esp + 0xd], bx
mov dh, 0xde
cmc
not eax
jmp 0x1f723f9
rdtsc
pop dword [esp + 0x10]
mov bx, sp
xchg word [esp], bp
bswap esi
jmp 0x1f72439
mov si, bp
call 0x1f72423
mov edi, 0x819b5e92
setg bl
mov bp, ax
mov edi, dword [esp + 0xc]
jmp 0x1f7247e
mov dword [esp + 5], esp
mov byte [esp + 8], al
xchg byte [esp + 6], ah
xchg dword [esp], ebx
jmp 0x1f724da
dec ax
not cx
mov dword [esp + 0x13], ecx
mov ax, dx
lea esp, [esp + 3]
mov di, word [esp + 3]
jmp 0x1f72468
inc ax
lea esp, [esp + 0x14]
setbe dl
rdtsc
sbb ecx, ecx
setb dh
jmp 0x1f7250b
xchg word [esp + 7], ax
mov dh, 5
neg bp
pop bp
mov ebx, edi
push cx
jmp 0x1f724bc
sub esp, 0xe
inc edx
cpuid
lea esp, [esp + 3]
lea ebx, reloc.KERNEL32.dll_FreeEnvironmentStringsA
mov dh, bh
jmp 0x1f72521
bsr eax, ebp
mov word [esp], dx
rcr ch, 5
mov ch, byte [esp]
mov word [esp], si
xchg byte [esp], ch
jmp 0x1f724ec
bt esi, esi
xchg byte [esp + 1], bh
push dword [esp + 9]
mov ch, 0x7f
mov bp, sp
pop ecx
jmp 0x1f72572
bsr ebp, esp
lea edi, reloc.KERNEL32.dll_FreeEnvironmentStringsA
call fcn.01f7255c
push word [esp + 5]
call int.01f73649
and byte [eax + 0x17b04126], dh
lodsd eax, dword ds:[esi]
cmp eax, 0x2844b744
mov esi, 0x73c64b2c
setbe byte [ecx]
mov edx, ebx
mov bh, bl
xchg byte [esp], cl
sub esp, 3
mov byte [esp + 6], al
pop bx
jmp 0x1f720fd