Function at 0x1f7082c
Capabilities:
Execute anti-debugging instructions

Disassembly:
pop dx
push word [esp]
pop word [esp + 4]
std
pop word [esp + 7]
jmp 0x1f709b2
and eax, eax
mov edx, dword [esp]
mov dh, byte [esp]
push bp
setb bl
setg ah
jmp 0x1f7088c
setp bl
mov dl, byte [esp]
dec bx
xchg byte [esp], dl
lea edx, [ecx + esi]
mov dx, word [esp]
jmp 0x1f70862
xchg word [esp], dx
lea eax, [eax*4]
mov byte [esp], bl
mov ax, 0x2978
pushfd
push dword [esp + 3]
jmp 0x1f708e3
cld
lea esp, [esp]
mov byte [esp], bh
rdtsc
shr edx, cl
mov byte [esp], dl
jmp 0x1f70878
xchg dword [esp + 0x19], edx
mov edx, 0x98e070d
bswap eax
pop dword [esp + 0x22]
bt bx, sp
lea esp, [esp + 0x1a]
jmp 0x1f7092e
mov word [esp + 8], di
stc
not dx
mov edx, 0x27d9f9a1
mov word [esp + 3], cx
pushal
jmp 0x1f708c3
bswap eax
rdtsc
add esp, 0
lea esp, [esp + 0xc]
btr edx, eax
xchg dl, bh
jmp 0x1f70959
pop dword [esp]
push ecx
add eax, 0x9ba7e61a
inc al
push ebx
mov edx, dword [esp]
jmp 0x1f708f9
inc ah
pop dword [esp + 1]
xchg byte [esp], bh
mov eax, esp
mov eax, 0x955a5268
lea ebx, [esp + ecx]
jmp 0x1f7090f
mov eax, dword [esp]
rol edx, cl
mov bx, word [esp]
push sp
jmp 0x1f70987
bts edx, ebx
lea edx, [esi*4]
sete al
mov al, ah
mov edx, esi
mov eax, 0xa0dc9990
jmp 0x1f70943
lea ebx, reloc.KERNEL32.dll_GetTimeZoneInformation
mov edx, dword [esp + 2]
jmp 0x1f7099a
lea ebx, [eax*4]
std
lea edx, [edi + ebp]
pushfd
inc bx
lea esp, [esp]
jmp 0x1f70971
lea ebx, [edx*4]
mov bx, word [esp + 5]
xchg byte [esp + 4], dh
shl edx, cl
jmp 0x1f70dd8
xchg dword [esp + 2], eax
mov dx, si
add esp, 0xa
neg edx
mov dh, dl
adc ax, cx
jmp 0x1f708b3
setb bl
call fcn.01f709c8
mov ah, byte [esp]
neg al
ror ebx, 4
cld
mov bh, byte [esp + 2]
jmp 0x1f70a1b
push word [esp + 1]
bsr eax, edx
rol edx, 0x16
pushal
xchg byte [esp + 6], dh
rol ax, 2
jmp 0x1f70a70
mov ebx, esi
dec eax
btr edx, esp
bswap ebx
mov bh, byte [esp + 0x20]
mov ah, byte [esp + 0x22]
jmp 0x1f70a9b
push word [esp + 0xf]
mov bx, word [esp + 0x13]
stc
pop eax
xchg ah, bh
xchg word [esp + 7], ax
jmp 0x1f70a5a
mov edx, 0xb8bde945
mov dx, word [esp + 0x15]
mov ah, cl
xchg dword [esp + 5], ebx
jmp 0x1f70cd6
not al
mov bx, 0x5772
xchg dword [esp + 9], edx
pop eax
btr ebx, ebp
xchg dx, ax
jmp 0x1f70a85
mov dword [esp], edi
mov word [esp + 2], bx
pop edx
xchg bl, dl
xchg edx, ebx
mov dx, 0x6665
jmp 0x1f709de
neg dh
xchg word [esp + 0x14], dx
mov byte [esp + 0x15], dh
lea esp, [esp + 7]
jmp 0x1f70b09
bswap edx
setb al
lea edx, [esi + edi]
xchg bx, ax
mov dx, 0xa5ed
xchg byte [esp], bl
jmp 0x1f70aca
not al
bsr bx, ax
mov dx, bx
sub esp, 0
call fcn.01f70b42
movsb byte es:[edi], byte [esi]
xlatb
or dword ds:[eax + reloc.KERNEL32.dll_GetTimeZoneInformation], ebp
bsf eax, ebx
mov eax, dword [esp]
bsf ax, bx
mov byte [esp + 0xb], dh
mov dx, 0xacc0
mov eax, 0xed81cc2c
mov word [esp + 0xd], bp
jmp 0x1f70af3
mov ax, word [esp + 0xf]
shl ebx, cl
neg ax
mov bh, 0xc1
xchg dh, bl
mov bl, byte [esp + 0xd]
jmp 0x1f70ae0
pop word [esp + 0x14]
pop ax
xchg word [esp + 0xd], bx
dec eax
mov al, bl
xchg byte [esp + 3], bl
jmp 0x1f70b2e
xchg dword [esp + 1], edx
xchg dx, ax
mov dword [esp + 0xc], edi
xchg byte [esp + 0x17], dh
btc edx, ebx
setle dh
jmp 0x1f70b63
xchg word [esp], ax
pop eax
rcr eax, 0
neg dx
bsf ebx, edx
mov edx, dword [esp + 0x10]
jmp 0x1f70ba3
btr edx, ebp
xchg dword [esp], ebx
mov dx, word [esp + 3]
neg dh
xchg dh, bh
lea edx, [ecx + esi]
jmp 0x1f70ab4