Function at 0x1728d1d
Capabilities:
Authenticate hmac
Execute anti-debugging instructions

Disassembly:
lea eax, [esp + 0x9c]
cmovg cx, ax
push eax
bswap ecx
mov ecx, esp
push 0x35
lea ecx, [esp + 0xd8]
jmp 0x1868e32
mov byte [esp + 0xb0], 0x6b
mov byte [esp + 0xb1], 0x20
jmp 0x541bf8
mov eax, dword [0x52afe0]
test ebx, ebx
sub eax, dword [0x52afdc]
test cx, di
sar eax, 2
test ah, dh
clc
cmp edi, eax
jmp 0x173b287
mov byte [esp + 0xb4], 0x20
jmp 0x1826c06
mov byte [esp + 0xb2], 0x54
jmp 0x1714e79
mov byte [esp + 0xd4], 0x63
jmp 0x16bde68
mov byte [esp + 0xd2], 0x64
jmp loc.0042de47
jb 0x579cc1
call fcn.0046e39f
mov ecx, dword [0x52afdc]
sets dl
mov edx, dword [ecx + edi*4]
jmp 0x1781c18
mov dword [esi + 0x188], 1
jmp 0x1681064
push edx
jmp 0x1853f5d
mov byte [esp + 0xb7], 0x64
mov byte [esp + 0xb8], 0x20
jmp 0x1766645
jne 0x17f46d1
mov eax, dword [0x52afe0]
sub eax, dword [0x52afdc]
cmp ecx, ebp
test si, cx
sar eax, 2
cmp si, 0x6ab8
jmp 0x175032e
mov byte [esp + 0xac], 0x43
jmp 0x172ab2d
mov byte [esp + 0xad], 0x20
jmp 0x16e82b3
jne 0x1821ad8
jmp 0x1885771
je 0x1754c2c
cmp byte [esi + 0x185], 0
jmp 0x1701f0f
mov byte [esp + 0xe5], 0x64
jmp 0x176de0d
mov byte [esp + 0xc0], 0
jmp 0x16a1955
mov byte [esp + 0xd1], 0x64
jmp 0x570816
mov byte [esp + 0xa9], 0x68
mov byte [esp + 0xaa], 0x65
jmp 0x1664234
mov byte [esp + 0xab], 0x63
jmp 0x173cce5
mov byte [esp + 0xbd], 0x65
jmp 0x18c475a
call fcn.016356d4
lea ecx, [esp + 0x20]
movsx bx, al
movzx ebx, dx
push ecx
xchg bh, bl
movzx bx, ah
cmovne bx, bp
mov ebx, eax
jmp 0x16fdbae
mov byte [esp + 0xc0], 0x20
call fcn.0178e819
add esp, 0x1c
jmp 0x188576c
mov byte [esp + 0xe1], 0x64
jmp 0x1748f3f
call fcn.0178e819
add esp, 0x1c
jmp 0x1821ad3
mov byte [esp + 0xb1], 0x65
jmp 0x1760600
mov byte [esp + 0xd5], 0x64
jmp 0x17daec4
mov byte [esp + 0xd8], bl
mov byte [esp + 0xd9], 0x64
jmp 0x17b3f45
push eax
jmp 0x1692817
jb 0x16e6ac6
call fcn.0046e39f
mov eax, dword [0x52afdc]
mov ecx, dword [eax + edi*4]
push ecx
jmp 0x18b516a
mov byte [esp + 0xc1], 0x65
jmp 0x179cb0f
mov byte [esp + 0xae], 0x54
jmp 0x1822ca2
jb 0x5392f9
cmp byte [esp + 0x13], 1
jmp 0x1607d2d
mov byte [esp + 0xd0], 0x63
jmp 0x1651853
jne 0x1754c2c
cmp dword [esi + 0x188], 0
jg 0x1754c2c
call fcn.01735cff
mov eax, dword [esi + 0x20]
jmp 0x17b1b43
mov byte [esp + 0xb3], 0x68
jmp 0x17c36d9
sar edx, 2
cmp ebx, ebp
cmp edi, edx
jmp 0x172654f
jb 0x172655a
call fcn.0046e39f
mov eax, dword [0x52afdc]
mov ecx, dword [eax + edi*4]
push ecx
call dword [0x4e7354]
jmp 0x1885771
mov byte [esp + 0xb6], 0x61
jmp 0x58f20a
push 0xcc07fda6
call fcn.01698646
mov byte [esp + 0xbf], 0x6e
jmp 0x1747f36
mov byte [esp + 0xad], 0x68
jmp 0x17cb5d1
mov byte [esp + 0xbb], bl
jmp 0x173cc97
push eax
jmp 0x58cd35
jb 0x173b292
call fcn.0046e39f
mov ecx, dword [0x52afdc]
mov edx, dword [ecx + edi*4]
lea eax, [esp + 0x1c]
jmp 0x173672e
mov byte [esp + 0xbc], 0x70
jmp 0x166666a
mov byte [esp + 0xac], 0x6b
jmp 0x15d4078
mov byte [esp + 0xc0], 0x63
jmp 0x16e7d74
mov byte [esp + 0xe2], bl
jmp 0x17d0274
mov edx, dword [0x52afe0]
jmp 0x17ce36f
cmp edi, eax
jmp 0x579cb6
mov ecx, dword [esp + 0x2e8]
bt esi, 0xcd
mov dword fs:[0], ecx
shld ebx, ecx, 0xab
pop ecx
add bh, ch
xor ecx, ebp
btr edi, ecx
pop edi
xor ecx, 0x4ae7258a
bswap ecx
pop esi
pop ebx
mov ecx, dword [esp + 0x2d0]
xor ecx, esp
jmp 0x17e8fbe
mov byte [esp + 0xd7], bl
jmp 0x16dec0b
mov byte [esp + 0xb2], 0x61
mov byte [esp + 0xb3], 0x64
jmp 0x539b75
mov byte [esp + 0xb9], 0x53
mov byte [esp + 0xba], 0x75
jmp 0x1730c3f
mov byte [esp + 0xbe], 0x61
jmp 0x1728d27
mov byte [esp + 0xe6], 0
jmp 0x15b70de
jbe 0x174fc8c
push 0xffffffffffffffff
setge ah
bswap ax
push 0x50f2bf
not ecx
push 0x50f2bf
movzx ecx, si
xchg cx, cx
jmp 0x533826
push 0x50f2bf
not ch
cmovno edx, esi
push 0x50f2bf
lea ecx, [esp + 0x9c]
movsx edx, dx
push ecx
movsx dx, bl
jmp 0x183360e
mov byte [esp + 0xbd], 0x43
jmp 0x1769aa1
push edx
jmp 0x17e53e3
mov byte [esp + 0x2f], 1
mov byte [esp + 0xe0], 0x63
jmp 0x169c495
mov byte [esp + 0xc2], 0x6c
jmp 0x18bfeef
mov byte [esp + 0xb9], 0x20
jmp 0x18d389b
mov byte [esp + 0xb7], 0x6f
jmp 0x18481d6
push 0xffffffffffffffec
push eax
jmp 0x58753a
mov byte [esp + 0xda], 0
jmp 0x187dcf3
mov byte [esp + 0xb4], 0x72
jmp 0x1866bea
mov byte [esp + 0xae], 0x65
jmp 0x18bbb8d
sub edx, dword [0x52afdc]
jmp 0x171a9ad
mov byte [esp + 0xe3], bl
jmp 0x18d7e28
mov byte [esp + 0xd6], bl
jmp 0x175db19
push 0xffffffffffffffff
jmp 0x177199d
call fcn.018bea59
test eax, eax
jmp 0x1771429
call fcn.0046df75
mov esp, ebp
pop ebp
jmp fcn.0045ba1c
push 0xffffffffffffffff
rdtsc
lahf
push 0x50f2bf
cwde
sete dl
push 0x50f2bf
mov dh, dh
bswap eax
rdtsc
lea edx, [esp + 0x9c]
movzx ax, bh
push edx
push 0x36
lahf
push 0x4d
lea eax, [esp + 0xd4]
jmp 0x18533e2
call fcn.01735cff
mov edx, dword [0x52afe0]
clc
test esp, eax
sub edx, dword [0x52afdc]
test esi, 0x5267660a
clc
cmc
sar edx, 2
cmp edi, edx
jmp 0x16e6abb
mov byte [esp + 0xaf], 0x68
mov byte [esp + 0xb0], 0x72
jmp 0x16ace49
mov byte [esp + 0xb5], 0x53
mov byte [esp + 0xb6], 0x74
jmp 0x17a9231
push 0x4d
not edx
mov edx, edi
lea edx, [esp + 0xcc]
mov byte [esp + 0x2b], 1
jmp 0x1865959
push 0x37
jmp 0x182cb07
mov byte [esp + 0xb8], 0x70
jmp 0x17a2d9c
mov byte [esp + 0x2b], 1
jmp 0x56b088
call fcn.01873476
test eax, eax
je 0x17de20c
cmp dword [esp + 0x1c], 0x103
jmp 0x5a6019
mov byte [esp + 0xcc], 0x63
mov byte [esp + 0xcd], 0x64
jmp 0x18cc4c8
mov byte [esp + 0xb5], 0x65
jmp 0x1726fd5
push 0x4d
jmp 0x18b4640
mov byte [esp + 0xbb], 0x72
jmp 0x177a0e3
mov byte [esp + 0xa8], 0x43
jmp 0x1659e3c
call fcn.01735cff
inc edi
cmp edi, dword [esp + 0x18]
jmp 0x16f1f40
push ecx
jmp 0x17876b1
call dword [0x4e7354]
test eax, eax
jmp 0x15ea1b9
mov byte [esp + 0xaf], 0x63
jmp 0x53757b
mov byte [esp + 0xc3], 0
jmp 0x16e3369
mov byte [esp + 0xbf], 0x64
jmp 0x1646d6a
mov byte [esp + 0xbe], 0x6e
jmp 0x18c3654
mov byte [esp + 0xce], bl
jmp loc.00419574
mov byte [esp + 0xba], 0x6f
jmp 0x187a671
mov byte [esp + 0xe4], bl
jmp 0x1640042