Function at 0xf70112
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0xf39f22
push eax
push edx
jmp 0xf39f32
jg 0xf39f3e
push eax
push edx
rdtsc
pop edx
pop eax
rdtsc
jmp 0xf39f59
push eax
push edx
jmp 0xf39f74
jmp 0xf39f85
rdtsc
push eax
push edx
rdtsc
pop edx
pop eax
pop edx
pop eax
pop edx
pop eax
sub esp, 4
mov dword [esp], ecx
mov dword [esp], 0x7ed775d6
and dword [esp], 0x3b549b24
or dword [esp], 0x5bcf2c62
shr dword [esp], 1
add dword [esp], 0xf85cb7c8
mov dword [esp], ebp
mov dword [esp], 0x3f7e9e0a
sub dword [esp], 0xffffffff
xchg dword [esp], esi
push esi
xchg dword [esp], ebp
not ebp
xchg dword [esp], ebp
mov esi, dword [esp]
add esp, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
dec dword [esp]
xor dword [esp], 0x6b7e8200
xchg dword [esp], ebx
dec ebx
xchg dword [esp], ebx
sub dword [esp], 0x46923299
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebp
push eax
mov eax, 0x3ff7fad4
xor eax, 0x3a75620a
mov ebp, eax
pop eax
xor dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], eax
push ecx
mov dword [esp], 0x4eafc43
mov dword [esp], edi
mov dword [esp], edx
mov dword [esp], 0xfef4500
sub esp, 4
mov dword [esp], ecx
push 0x58afb67e
mov dword [esp], eax
push eax
mov dword [esp], 0x7e80ee82
pop eax
not eax
add eax, 0x7eebea5c
shl eax, 1
sub eax, 0xa51a8894
mov ecx, eax
pop eax
xor dword [esp + 4], ecx
pop ecx
dec dword [esp]
push 0x50fb2501
mov dword [esp], edi
mov edi, 0x7f707c13
sub dword [esp + 4], 0x2dfb1fe1
add dword [esp + 4], edi
add dword [esp + 4], 0x2dfb1fe1
pop edi
sub dword [esp], 0xb10262be
mov dword [esp], edi
mov dword [esp], 0x5bd73d81
push eax
mov eax, 0x5ed76f31
sub dword [esp + 4], eax
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
xor dword [esp], 0xa30cdad3
mov dword [esp], ecx
push eax
push ecx
mov dword [esp], ebp
mov ebp, 0x3ffc5320
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
shl dword [esp], 2
shr dword [esp], 1
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
dec edi
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
push 0x56e16f21
mov dword [esp], eax
mov eax, 0x5e7c29a1
xor dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
push ebp
mov ebp, 0xf08c67db
sub dword [esp + 4], 0x37f7bb65
push ecx
mov ecx, 0x6fbed5ef
add dword [esp + 8], ecx
pop ecx
add dword [esp + 4], ebp
sub dword [esp + 4], 0x6fbed5ef
push ebx
push esi
mov esi, 0x766b56d6
mov ebx, 0x419cedb3
xor ebx, esi
pop esi
add dword [esp + 8], ebx
pop ebx
pop ebp
mov dword [esp], edx
mov dword [esp], ecx
mov dword [esp], edx
push edi
mov dword [esp], ebx
mov dword [esp], 0x5ffdc744
push ecx
mov ecx, 0x35fbc3be
or ecx, 0x7dff1756
sub ecx, 0x3fffec6f
push edi
mov edi, 0x2fb5462e
or ecx, edi
pop edi
dec ecx
not ecx
push esi
mov esi, 0xb7fcf1c9
add ecx, esi
pop esi
or dword [esp + 4], ecx
mov ecx, dword [esp]
push esi
push esp
pop esi
push edi
mov edi, 4
add esi, 0x7fefcf32
add esi, edi
sub esi, 0x7fefcf32
pop edi
add esi, 4
xchg dword [esp], esi
pop esp
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
mov eax, 0x6dd5fdfd
or dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x36e7872d
xor dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
push ecx
mov dword [esp], esi
push esp
pop esi
push 0x54383e56
mov dword [esp], ebx
push 0xf4a802a
mov dword [esp], edx
mov edx, 0x16f7dfaf
xor edx, 0x5f7dad33
push eax
mov eax, 0x7f4068dd
push esi
mov esi, 0x5ae7456f
add esi, 0x1fecf338
sub eax, esi
pop esi
shl eax, 6
push ebp
mov ebp, 0x7bffeb3c
xor ebp, 0x693dda0b
dec ebp
and ebp, 0x7c2c14b5
xor ebp, 0x70cdd657
add eax, ebp
mov ebp, dword [esp]
add esp, 4
or eax, 0x5fbf16dd
add eax, 0x7ece230e
and eax, 0x48ebc4fe
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x71ff7996
shl ecx, 4
sub ecx, 0x8da366bc
sub eax, ecx
mov ecx, dword [esp]
add esp, 4
sub edx, 0x6fffbec2
add edx, eax
add edx, 0x6fffbec2
pop eax
sub esp, 4
mov dword [esp], edi
mov dword [esp], edx
pop ebx
pop edx
add esi, ebx
pop ebx
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
push edx
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
push edi
mov dword [esp], 0x72cf3aea
mov dword [esp], esi
mov esi, 0x54f765d7
mov dword [esp + 4], esi
push dword [esp]
pop esi
add esp, 4
dec dword [esp]
push edx
mov dword [esp], edi
mov dword [esp], edx
mov edx, 0xf272a542
add dword [esp + 4], 0x7bf3f6b5
sub dword [esp + 4], edx
push edi
mov edi, 0x7bf3f6b5
sub dword [esp + 8], edi
pop edi
pop edx
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], ebp
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 4
sub ebx, edx
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], esi
push 0x1abf92b5
mov dword [esp], ebx
mov ebx, 0x3ff661fa
shr ebx, 3
or ebx, 0x43cf4258
push ecx
push esi
push eax
mov eax, 0x27fb6c5a
mov esi, eax
pop eax
mov ecx, 0xec06f5c2
xor ecx, esi
pop esi
sub ebx, ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp + 4], ebx
push dword [esp]
pop ebx
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov dword [esp], esi
push edi
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
push dword [esp]
mov edi, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
sub esp, 4
mov dword [esp], edx
push ecx
mov ecx, 4
mov edx, ecx
mov ecx, dword [esp]
add esp, 4
sub eax, 0x7abd7981
add eax, edx
add eax, 0x7abd7981
mov edx, dword [esp]
add esp, 4
xchg dword [esp], eax
pop esp
push ecx
mov ecx, 4
add edi, ecx
mov ecx, dword [esp]
add esp, 4
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], ecx
mov dword [esp], edi
call fcn.00f3a410
inc ecx
add byte [edx - 0x55122400], ch
imul ebx, dword [edx], 0xaab60a
leave
xor dword [eax + 0x5900aa00], edi
cld
mov ebp, 0x5a005ad5
add byte [edx + 0x5e6a9d00], ch
add byte [ebx - 0x53], al
pop esi
add byte [ecx + ebp*8 + 4], al
dec ecx
xor al, 0xb
stosb byte es:[edi], al
add byte [edi], ch
cmpsb byte [esi], byte es:[edi]
mov eax, dword [0x5c00aab7]
push ds
cmp eax, 0x5e003d00
add byte [eax - 0x47ff8000], al
add byte [esi], bl
mov eax, 0x41002900
add byte [ecx], al
sub dword [eax], eax
ja 0xf70079
out dx, eax
out 0xff, eax
pop ebx
or byte [eax], dl
and byte [eax], al
call eax
jmp 0xf70046
push edi
push edx
jmp 0xf7005f
pop edx
push eax
push edx
push eax
push edx
rdtsc
pop edx
pop eax
pushal
popal
rdtsc
push esi
pop esi
push eax
push edx
rdtsc
pop edx
pop eax
pop edx
pop eax
pop edi
pushfd
push 0xdfe403f
mov dword [esp], edx
mov dword [esp], 0x7f67cb00
not dword [esp]
aas
inc eax
dec byte [0xc7241489]
and al, 0xc7
add al, 0x24
add bl, cl
jg 0xf7007f
adc al, 0x24
push edx
mov edx, 0x80983093
xor dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
push edx
mov dword [esp], 0x5d790806
add dword [esp], 0xffffffff
shl dword [esp], 3
inc dword [esp]
push ecx
mov ecx, 0x7dfd5125
dec ecx
xor ecx, 0x119986e7
shr ecx, 3
not ecx
xor ecx, 0x199aeea5
xor dword [esp + 4], ecx
pop ecx
push ebx
mov ebx, esp
add ebx, 4
sub esp, 4
mov dword [esp], eax
mov eax, 4
sub ebx, eax
mov eax, dword [esp]
add esp, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
push ebp
mov dword [esp], ecx
mov dword [esp], 0x48857bb1
mov dword [esp], eax
mov dword [esp], ebx
push dword [esp + 0x10]
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
push dword [esp + 8]
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
push dword [esp]
mov eax, dword [esp]
push eax
mov eax, esp
push edi
mov edi, 0x3a7b68ac
shl edi, 7
neg edi
and edi, 0x6eb7bf3e
shr edi, 7
xor edi, 0x840750
add eax, edi
pop edi
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
jmp 0xf39f0a