Function at 0x72572d
Capabilities:
Check for software breakpoints
Execute anti-debugging instructions
Parse pe header

Disassembly:
call fcn.00440fd0
cmp dword [eax + 0x18], 0x10
jb 0x449402
mov eax, dword [eax + 4]
jmp 0x449405
xor edi, edi
lea esi, [esp + 0x59c]
jmp 0x41491d
add eax, 4
push eax
jmp 0x766d5d
mov byte [esp + 0x1b2d], 0x52
jmp 0x77fce9
mov byte [esp + 0x1bf8], 0x7f
jmp 0x757139
mov dword [esp + 0x18], eax
jl 0x79886c
test byte [esp + 0x14], 7
jmp 0x18d6191
push eax
call fcn.00450231
lea esp, [esp + 4]
mov ecx, dword [esp + 0x838]
movsx bx, ch
ror ebx, cl
adc bl, bh
sub ecx, dword [esp + 0x834]
mov eax, 0x92492493
adc bx, sp
bsr dx, bp
imul ecx
inc bl
rcl bx, 0x2c
add edx, ecx
jmp 0x6c83f5
call fcn.0046e038
mov ecx, dword [esp + 0x14]
cmovo dx, cx
mov edx, dword [ecx + 0x84]
mov dword [edx + 0xbe0], eax
jmp 0x72a0c1
je 0x5de6a5
push 0x511994
not cl
lea ecx, [esp + 0x994]
call fcn.004062b0
lea ecx, [esp + 0x990]
not dx
jmp 0x6a0efd
call fcn.00450231
add esp, 4
cmp eax, esi
mov dword [esp + 0xc44], esi
mov dword [esp + 0xc40], edi
cmc
mov byte [esp + 0xc30], 0
cmp dword [esp + 0x938], ebx
jb 0x18617ea
mov edx, dword [esp + 0x924]
jmp 0x7f6773
mov byte [esp + 0x1b52], 0x5f
jmp 0x80f592
mov byte [esp + 0xbf8], 0
cmp dword [esp + 0x890], ebx
jmp 0x18b2544
mov byte [esp + 0x1bf0], 6
jmp 0x5de68e
call fcn.0046e038
mov ecx, dword [esp + 0x14]
mov dx, bx
bts edx, esi
mov edx, dword [ecx + 0x84]
mov dword [edx + 0xbdc], eax
bts eax, ebp
and eax, 0x1ad37a7e
add esp, 4
mov ax, ax
cmovnp ax, cx
mov eax, dword [esp + 0x18]
inc eax
cmp eax, ebx
jmp 0x18e2d5d
jb 0x826246
mov edx, dword [esp + 0xa00]
jmp 0x774d37
mov dword [esp + 0xc08], edi
jmp 0x58a6b3
mov byte [esp + 0x1b1d], 0x46
jmp 0x6c4ded
mov byte [esp + 0x1b5b], 0x4c
jmp 0x6c3183
call fcn.00465a6c
jmp 0x79c0cf
call fcn.00440f80
mov ebx, 0x10
movsx ecx, si
movzx esi, dx
lea esi, [ebx - 1]
cmovg dx, bx
lea edx, [esp + 0x1b44]
movzx ecx, di
xchg ecx, ecx
movsx ecx, bp
push edx
lea ecx, [esp + 0xa00]
mov byte [esp + 0x1b48], 0x3c
jmp 0x62a6df
lea edx, [esp + 0x1674]
lea ecx, [esp + 0x880]
jmp 0x6b446e
push edx
cmovae edx, ebp
lea eax, [esp + 0xbf8]
mov dx, bp
movsx ecx, sp
not dh
push eax
movsx edx, sp
xchg dh, dl
jmp 0x5e7552
mov byte [esp + 0x1b23], 0x53
jmp 0x18236c4
cmp dword [esp + 0x8c8], ebx
jb 0x835e6d
mov eax, dword [esp + 0x8b4]
jmp 0x8143fa
mov byte [esp + 0x1bf8], 0x7d
jmp 0x189294c
push eax
jmp 0x636853
jb 0x63685b
mov eax, dword [esp + 0x994]
jmp 0x5f7240
lea ecx, [esp + 0x5d0]
jmp 0x6da72c
mov byte [esp + 0x1b49], 0x42
jmp 0x1883394
push eax
jmp 0x5419e6
call fcn.00450231
add esp, 4
mov ecx, dword [esp + 0x5ac]
btc bx, 0xc8
sub ecx, dword [esp + 0x5a8]
btc eax, 0xcb
sal bx, cl
setae bl
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
bt bx, dx
sal bx, 0x8a
mov ebx, edx
cmp esi, esp
cmc
shr ebx, 0x1f
cmp esp, 0x5d15132a
stc
add ebx, edx
stc
sub eax, eax
cmp eax, ebx
clc
stc
cmp ebx, edi
mov dword [esp + 0x9a8], esi
mov dword [esp + 0x9a4], edi
jmp 0x7dee25
mov byte [esp + 0x1b1a], 0x54
jmp 0x82e573
or dword [esp + 0x18], 2
jmp 0x1855ec3
jb 0x69068e
mov eax, dword [eax + 4]
jmp 0x1864bba
cmp dword [esp + 0xa14], ebx
jmp 0x5aef73
call fcn.004062b0
lea eax, [esp + 0x18b8]
mov cx, 0x3ec1
setl cl
xchg ch, cl
push eax
lea ecx, [esp + 0x9cc]
mov byte [esp + 0x1bf4], 0x7c
jmp 0x816e99
call fcn.00440f80
xor edi, edi
mov eax, 0x113849dd
movsx ecx, ax
cmovbe eax, ebx
lea ebx, [edi + 0x10]
bswap eax
lea esi, [edi + 0xf]
lea eax, [esp + 0x1b14]
mov ecx, ebp
movsx ecx, dx
cmovg ecx, edx
push eax
lea ecx, [esp + 0x95c]
jmp 0x18557d6
shl ecx, 8
jmp 0x6efd21
call fcn.00450202
lea esp, [esp + 4]
test bh, 0x32
mov dword [esp + 0x1c], eax
mov byte [esp + 0x1bf0], 0x7b
cmp eax, edi
jmp 0x7a628d
inc eax
cmp eax, 0x46f81b2f
test bp, bp
cmp eax, ebx
jmp 0x53b81b
mov byte [esp + 0x1b2a], 0x4f
jmp 0x185ce4b
je 0x1846a7c
sub eax, 1
jne 0x59b771
lea edi, [eax + 1]
jmp 0x1837c18
push eax
call fcn.0046e038
mov ecx, dword [esp + 0x14]
sal edx, cl
mov edx, dword [ecx + 0x84]
cmp ax, ax
or dword [esp + 0x18], 4
jmp 0x78530b
mov byte [esp + 0x1b5a], 0x4f
jmp 0x5c0395
add eax, 4
jmp 0x68dd48
mov edi, 1
xchg esi, esi
lea esi, [esp + 0x59c]
jmp 0x77a3c5
mov byte [esp + 0x1b4c], 0x5f
mov byte [esp + 0x1b4d], 0x46
mov byte [esp + 0x1b4e], 0x52
jmp 0x7aa33d
push ecx
cdq
lea edx, [esp + 0x5a0]
not cx
push edx
lea ecx, [esp + 0x1658]
jmp 0x7f17cf
mov byte [esp + 0x1bf4], 0x75
jmp 0x188043a
mov byte [esp + 0x1bf8], 0x72
call fcn.0042cfb0
push 0xffffffffffffffff
push edi
movsx ecx, dx
push eax
lea ecx, [esp + 0x165c]
jmp 0x71f2b3
jb 0x184e6e1
mov eax, dword [esp + 0x95c]
push eax
jmp 0x184e6d8
jb 0x793137
mov eax, dword [eax + 4]
jmp 0x18b3c7a
mov byte [esp + 0x1b5c], 0x4f
jmp 0x72afcd
mov byte [esp + 0x1b1e], 0x52
jmp 0x75314b
sar edx, 4
mov bx, si
sbb ebx, 0x375019df
bt bx, ax
mov ebx, edx
cmp si, 0x7fba
jmp 0x7b6333
push ecx
jmp 0x72589c
or ecx, edx
jmp 0x756746
mov byte [esp + 0x1b29], 0x43
jmp 0x676da2
push eax
call fcn.00450231
lea esp, [esp + 4]
test ebp, eax
cmc
mov dword [esp + 0xb80], esi
mov dword [esp + 0xb7c], edi
cmp bh, 0xcd
mov byte [esp + 0xb6c], 0
cmp dword [esp + 0x9e0], ebx
jmp 0x189996b
mov byte [esp + 0x1bfc], 0x73
jmp 0x18273bb
push 0xa6202d08
call fcn.018c27f3
mov byte [esp + 0x1a39], 0x54
jmp 0x754d8c
lea ecx, [esp + 0x1658]
jmp 0x5353e5
jmp 0x59b767
mov byte [esp + 0x1b5d], 0x52
mov byte [esp + 0x1b5e], 0x3e
jmp 0x8007ba
mov byte [esp + 0x1b27], 0x44
mov byte [esp + 0x1b28], 0x5f
jmp 0x6f9b4b
push ecx
mov ecx, ebp
xchg cx, cx
bswap cx
lea ecx, [esp + 0x87c]
jmp 0x7f5169
mov byte [esp + 0x1b1f], 0x41
jmp 0x77da4e
mov byte [esp + 0x1a3a], 0x5f
mov byte [esp + 0x1a3b], 0x50
jmp 0x8110f0
push ecx
movsx ecx, ax
mov ecx, eax
jmp 0x5c8228
call fcn.0044a3a0
add esp, 8
stc
test ch, 0x1a
jmp 0x7de319
mov byte [esp + 0x1b55], 0x41
jmp 0x188b585
mov byte [esp + 0x1b57], 0x4b
jmp 0x837879
call fcn.00406480
cmp dword [esp + 0xb80], ebx
jmp 0x7adb0b
lea esp, [esp + 4]
xchg al, al
btc ax, 0xf0
sub edi, edi
mov eax, dword [esp + 0x18]
jmp 0x6761c2
push edx
jmp 0x82623d
call fcn.00440fd0
cmp dword [eax + 0x18], 0x10
jmp 0x1828ece
mov byte [esp + 0x1b20], 0x4d
mov byte [esp + 0x1b21], 0x45
mov byte [esp + 0x1b22], 0x5f
jmp 0x5eaafd
mov byte [esp + 0x1b50], 0x4d
jmp 0x7f20b6
mov byte [esp + 0x1b2e], 0x3e
mov byte [esp + 0x1b2f], 0
call fcn.004062b0
lea ecx, [esp + 0x18b8]
push ecx
movsx cx, bh
movzx ecx, di
bswap cx
lea ecx, [esp + 0x924]
jmp 0x6a32fc
mov dword [edx + 0xbec], eax
jmp 0x18a6ee1
mov byte [esp + 0x1b19], 0x42
jmp 0x63ec3a
add eax, 4
jmp 0x634e42
call fcn.00450231
add esp, 4
mov byte [esp + 0x1bf0], 6
mov dword [esp + 0x9e0], esi
stc
mov dword [esp + 0x9dc], edi
test esi, 0x3e085cb2
cmp bx, bp
clc
mov byte [esp + 0x9cc], 0
jmp 0x65624b
mov byte [esp + 0x1bf8], 0x74
call fcn.0044a3a0
lea esp, [esp + 8]
mov byte [esp + 0x1bf0], 6
test dl, 0xec
cmp dword [esp + 0x900], ebx
jmp 0x1849f99
jle 0x53b825
sub eax, edi
je 0x415330
sub eax, 1
je 0x69dca8
sub eax, 1
jmp 0x183b716
xor eax, eax
cmovs esi, ebx
bswap esi
movzx esi, sp
mov ecx, dword [esp + 0x10]
xchg esi, esi
movsx esi, ax
mov dword [ecx + 0x170], eax
mov si, bx
lea esi, [esp + 0x59c]
jmp 0x590b85
je 0x79c0c5
mov ecx, dword [esp + 0x10]
adc si, 0x69f
mov edx, dword [ecx + 0x84]
cmovno cx, dx
movzx ecx, byte [edx + 0xbec]
movsx esi, sp
movzx esi, byte [edx + 0xbe8]
jmp 0x7afc09
jb 0x5e9bff
mov edx, dword [esp + 0x908]
jmp 0x409701
mov dword [esp + 0x18], eax
jmp 0x798866
mov byte [esp + 0x1b4f], 0x41
jmp 0x77f47e
jb 0x7031d6
mov eax, dword [esp + 0xb6c]
jmp 0x7031c9
call fcn.00450231
add esp, 4
cmp ebp, ebp
mov byte [esp + 0x1bf0], 6
clc
mov dword [esp + 0x890], esi
mov dword [esp + 0x88c], edi
mov byte [esp + 0x87c], 0
clc
jmp 0x5ee6e3
movzx edx, byte [edx + 0xbe4]
cmc
shl ecx, 8
or ecx, esi
clc
jmp 0x6627b1
shr ebx, 0x1f
jmp 0x7fa367
jb 0x57ff7e
mov ecx, dword [esp + 0xc30]
push ecx
jmp 0x57ff74
lea ecx, [esp + 0x928]
jmp 0x18258c1
jl 0x185ec92
lea esi, [esp + 0x828]
jmp 0x65f84f
mov byte [esp + 0x1bf0], 0x81
clc
cmp dword [esp + 0x91c], ebx
jmp 0x7a72e2
mov byte [esp + 0x994], 0
jmp 0x7a7dd3
mov byte [esp + 0x1b2c], 0x4f
jmp 0x5332aa
mov byte [esp + 0x1bf8], 0x78
jmp 0x80f910
mov byte [esp + 0x1b51], 0x45
jmp 0x5853e0
jmp 0x766d84
mov byte [esp + 0x1bf4], 0x71
jmp 0x187704a
push edx
jmp 0x18617e0
lea ebx, [ebx + edx]
cmc
sub eax, eax
mov dword [esp + 0x900], 0xf
test al, ah
mov dword [esp + 0x8fc], 0
cmp esi, eax
test esp, edi
mov byte [esp + 0x8ec], 0
mov dword [esp + 0x18], eax
cmp ch, 0xa0
test di, ax
test edi, 0x40987dec
test ebx, ebx
jmp 0x185ec8c
mov byte [esp + 0x1b5f], 0
jmp 0x65d674
jmp 0x813e11
mov byte [esp + 0x1b53], 0x54
jmp 0x185caaf
call fcn.0044a3a0
add esp, 8
mov byte [esp + 0x1bf0], 0x7a
cmc
cmp dword [esp + 0x9a8], ebx
jmp 0x610e40
mov byte [esp + 0x1a3c], 0x4f
jmp 0x189d8a6
push eax
jmp 0x59b744
push eax
jmp 0x835e5d
call fcn.004062b0
lea ecx, [esp + 0x9fc]
push ecx
lea edx, [esp + 0xb6c]
cmovbe ecx, eax
push edx
bswap edx
mov dl, 4
lea edx, [esp + 0x1674]
mov ecx, 0x6cc045ae
lea ecx, [esp + 0x9d0]
jmp 0x5f1981
add eax, 4
jmp 0x813e11
call fcn.00450231
add esp, 4
cmc
mov dword [esp + 0xa14], esi
stc
cmp si, 0x3fa4
mov dword [esp + 0xa10], edi
cmp bp, bp
stc
mov byte [esp + 0xa00], 0
stc
cmp esp, edi
mov dword [esp + 0x14], edi
cmp dword [esp + 0x1664], edi
je 0x717999
push 0x511994
movsx ecx, bp
lea ecx, [esp + 0x908]
call fcn.004062b0
lea eax, [esp + 0x904]
mov cx, bx
push eax
jmp 0x614933
jb 0x82a93b
mov ecx, dword [esp + 0xbf8]
push ecx
call fcn.00450231
lea esp, [esp + 4]
cmc
clc
test bx, di
mov dword [esp + 0xc0c], esi
stc
jmp 0x5b4a06
mov byte [esp + 0x1b1b], 0x4e
jmp 0x18a6785
call fcn.00450231
lea esp, [esp + 4]
cmp eax, 0x1e885949
cmp esp, ecx
mov dword [esp + 0x8c8], esi
cmp eax, edx
test si, cx
mov dword [esp + 0x8c4], edi
cmp ebp, 0x4fb568fb
test dh, 0xc1
mov byte [esp + 0x8b4], 0
test ecx, 0x1e52322d
cmp dword [esp + 0x1664], edi
je 0x65f869
push 0x511994
cmovno ecx, ebp
mov cl, 0x13
lea ecx, [esp + 0x8ec]
call fcn.004062b0
lea ecx, [esp + 0x8e8]
movsx edx, di
push ecx
not dl
lea edx, [esp + 0x82c]
push edx
not cx
lea ecx, [esp + 0x1658]
jmp 0x7975ac
mov byte [esp + 0x1b58], 0x5f
mov byte [esp + 0x1b59], 0x43
jmp 0x68def5
mov byte [esp + 0x1b24], 0x45
mov byte [esp + 0x1b25], 0x4c
mov byte [esp + 0x1b26], 0x45
jmp 0x737617
mov byte [esp + 0x1bf8], 0x76
jmp 0x18e7e79
call fcn.0046e038
mov ecx, dword [esp + 0x14]
adc dx, 0x20ec
mov edx, dword [ecx + 0x84]
jmp 0x644183
call fcn.00406480
cmp dword [esp + 0xc0c], ebx
jmp 0x82a91f
jb 0x182cf7d
mov eax, dword [eax + 4]
jmp 0x182cf80
add eax, 4
push eax
jmp 0x1826ada
lea esi, [esp + 0x828]
call fcn.00440fd0
cmp dword [eax + 0x18], 0x10
jmp 0x6bd544
jne 0x766d91
lea edi, [eax + 2]
bswap si
lea esi, [esp + 0x59c]
jmp 0x184a1ba
sub edi, edi
mov si, sp
lea esi, [esp + 0x828]
call fcn.00440fd0
cmp dword [eax + 0x18], 0x10
jb 0x81cef0
mov eax, dword [eax + 4]
jmp 0x8068f1
jb 0x54170e
mov eax, dword [esp + 0x8ec]
jmp 0x541704
call fcn.00440fd0
cmp dword [eax + 0x18], 0x10
jmp 0x64c6e3
call fcn.00450231
lea esp, [esp + 4]
mov dword [esp + 0x970], esi
test esi, ebp
cmc
mov dword [esp + 0x96c], edi
mov byte [esp + 0x95c], 0
mov dword [esp + 0x14], edi
cmp dword [esp + 0x1664], edi
jmp 0x57be4d
mov byte [esp + 0x1b18], 0x3c
jmp 0x7927f5
mov dword [edx + 0xbe8], eax
jmp 0x7f2670
mov byte [esp + 0x1b54], 0x52
jmp 0x75ec6c
mov byte [esp + 0x1b2b], 0x4c
jmp 0x7e74d4
jle 0x7d9359
sub eax, 0
jmp 0x688fae
call fcn.00450231
lea esp, [esp + 4]
clc
mov byte [esp + 0x1bf0], 6
mov dword [esp + 0x938], esi
clc
mov dword [esp + 0x934], edi
mov byte [esp + 0x924], 0
cmp dword [esp + 0x970], ebx
jmp 0x6bbd3b
jmp 0x68dd48
call fcn.00406480
cmp dword [esp + 0xc44], ebx
jmp 0x7cc7b4
call fcn.004062b0
lea edx, [esp + 0x8b0]
jmp 0x5ea58f
call fcn.004062b0
lea edx, [esp + 0x958]
movzx ecx, bp
push edx
xchg dx, dx
not dh
lea eax, [esp + 0xc30]
movzx edx, sp
push eax
cdq
cwd
lea edx, [esp + 0x1674]
jmp 0x7d19d3
mov byte [esp + 0x1b4a], 0x54
mov byte [esp + 0x1b4b], 0x4e
jmp 0x69efb1
mov byte [esp + 0x1b56], 0x43
jmp 0x763e01
call fcn.0042cfb0
push 0xffffffffffffffff
setge cl
movsx ecx, ax
bswap ecx
push edi
movzx ecx, si
bswap ecx
push eax
xchg cl, cl
lea ecx, [esp + 0x165c]
mov byte [esp + 0x1bfc], 0x7e
jmp 0x766199
mov byte [esp + 0x1a3e], 0x3e
mov byte [esp + 0x1a3f], 0
jmp 0x18ebb20
jb 0x796b02
mov ecx, dword [esp + 0x9cc]
push ecx
jmp 0x796afa
mov byte [esp + 0x1a3d], 0x53
jmp 0x18985ed
mov byte [esp + 0x1b1c], 0x5f
jmp 0x5bde37
jmp 0x766d84
jb 0x7aebcd
mov edx, dword [esp + 0x87c]
push edx
jmp 0x7aebc3
jmp 0x634e42
je 0x79c0e1
push 8
jmp 0x6751ba
mov dword [esp + 0x18], eax
jmp 0x7d9353
call fcn.0042cfb0
push 0xffffffffffffffff
push edi
push eax
mov cl, 0x10
movsx ecx, cx
lea ecx, [esp + 0x165c]
mov byte [esp + 0x1bfc], 0x77
jmp 0x186d450
call fcn.004062b0
lea ecx, [esp + 0x18b8]
jmp 0x738ca6