Function at 0x2ff854
Capabilities:
Execute anti-debugging instructions

Disassembly:
push edi
mov edi, eax
mov ebx, edi
pop edi
push dword [esp]
push dword [esp]
pop eax
jmp 0x2ff266
pop ecx
add esp, 4
jmp 0x2ff30a
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
cmp edi, 0xffff92fc
jne 0x2ff8c0
sti
push edx
sub esp, 4
mov dword [esp], esi
mov dword [esp], 0x7767ba02
neg dword [esp]
jmp 0x2ff2dc
add edi, 0xc5baeebf
push edx
mov edx, edi
jmp 0x2ff257
mov eax, edx
jmp 0x2ff7a7
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x2ffb90
sub edx, edi
pop edi
jmp 0x2ff463
add ecx, 0xc3d2a9fa
xor eax, ecx
pop ecx
push edx
push 0x621b1bd9
mov dword [esp], esi
mov esi, 0x5fee0fe1
jmp 0x2ff6a6
dec ecx
jmp 0x2ff833
dec dword [esp]
jmp 0x2ff9c5
and edx, ecx
jmp 0x2ff572
push edx
pop ebx
jmp 0x2ff4c1
and eax, 0x7bfe1300
push edi
mov edi, 0x3f9f8006
and eax, edi
push dword [esp]
pop edi
add esp, 4
push ecx
mov dword [esp], edx
push 0x1331d67b
mov edx, dword [esp]
jmp 0x2ffa69
push dword [esp]
jmp 0x2ff160
pop edx
push eax
jmp 0x2ff915
add edx, 0x77f9c700
pop ebx
and edi, edx
jmp 0x2ff9e5
mov ecx, dword [esp]
add esp, 4
shr edx, 7
inc edx
push eax
mov eax, 0x82af2a41
sub edx, eax
pop eax
jmp 0x2ff6d9
mov edx, esi
mov esi, dword [esp]
add esp, 4
xor eax, edx
pop edx
jmp 0x2ff41e
add eax, edx
pop edx
jmp 0x2ff14e
xor ecx, edx
pop edx
add ecx, 0x3d38e2ad
mov eax, ecx
pop ecx
sub edi, eax
jmp 0x2ff6f7
mov eax, dword [esp]
push eax
push esp
pop eax
jmp 0x2ff1dc
sub dword [esp], 0xf412e427
pop edx
jmp 0x2ff7be
pop edx
push dword [esp]
jmp 0x2ff950
push 0x37923cc6
mov dword [esp], ecx
mov ecx, 0xf4cff16f
push ecx
mov ecx, 0x76ef2d45
jmp 0x2ff2d6
sub ecx, 0x23702e88
add edx, ecx
jmp 0x2ffa2a
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
jmp 0x2ff875
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ecx
jmp 0x2ff887
mov ecx, 0x6bd73dc7
add ecx, 0x535bbaee
jmp 0x2ff897
inc ecx
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
mov edx, 0x6badc55f
push ebp
jmp 0x2ff991
push edi
mov edi, 0x7edd9719
shr edi, 3
push edx
push 0x5f909acd
mov dword [esp], ebx
mov ebx, 0x79fa1ef1
push ebp
mov ebp, 0x7f36e42a
not ebp
shl ebp, 5
shl ebp, 2
or ebp, 0x5efdb243
xor ebp, 0x7efed13f
xor ebx, ebp
pop ebp
push ebx
push eax
jmp 0x2ffa44
pop edi
jmp 0x2ffa9f
add dword [esp], 0x3e0c0b15
xor dword [esp], 0x64ad2eb2
xchg dword [esp], edx
push eax
mov eax, 0xffffffff
add edx, 0x7f7d128f
add edx, eax
sub edx, 0x7f7d128f
pop eax
xchg dword [esp], edx
not dword [esp]
neg dword [esp]
and dword [esp], 0x63fd77e0
jmp 0x2ff757
push eax
mov eax, 0x7d5f0f00
xor eax, 0x7a64c37a
mov ebp, eax
pop eax
add edx, ebp
pop ebp
jmp 0x2ff9a7
and edx, 0x7f9db5cd
push ecx
jmp 0x2ff9b3
push 0x7dfe5181
pop ecx
dec ecx
or ecx, 0x65ffac44
jmp 0x2ff9db
xor dword [esp], 0xe3a91fd0
not dword [esp]
xor dword [esp], 0x74f877cc
jmp 0x2ff956
shr ecx, 2
neg ecx
jmp 0x2ffa16
pop edx
inc edi
push eax
mov eax, 0x58b7b762
push ecx
jmp 0x2ffa5f
push ebx
mov ebx, 0x7eebee22
sub ebx, 0xc77177f4
xor ecx, ebx
pop ebx
jmp 0x2ff303
pop ecx
add edx, ecx
push edi
mov edi, 0x537efebc
jmp 0x2ff284
mov eax, 0x77f9c700
sub dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
push dword [esp]
pop edx
add esp, 4
jmp 0x2ff4d0
mov ecx, 0x1dd5ac69
jmp 0x2ffa74
add esp, 4
jmp 0x2ff6d1
add ecx, 0x3ae20afa
jmp 0x2ffa8e
sub eax, ecx
pop ecx
add edi, eax
pop eax
xor edi, 0x7fdd25a3
jmp 0x2ff219
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x2ffab4
mov edx, 0x73505abc
xor edx, eax
mov eax, dword [esp]
add esp, 4
push eax
push ebx
mov ebx, 0x4df716e1
mov eax, 0x29e8078
xor eax, ebx
pop ebx
push ecx
mov ecx, 0x7c222546
and ecx, 0x5dbbe43e
jmp 0x2ff295
jmp 0x2ffdfb
lea eax, [ebp + 0x124b6c03]
mov dword [ebp + 0x1245a9ca], eax
lea eax, [ebp + 0x124b6c99]
mov dword [ebp + 0x122d1dd4], eax
lea eax, [ebp + 0x124b6c60]
mov dword [ebp + 0x124ae90a], eax
jmp 0x2fff60
cmp dword [ebp + 0x122d2d92], 1
je 0x300516
cld
mov byte [ebp + 0x122d1cfe], 0x43
clc
push 0xaf7f6c41
push eax
push edx
push ebx
pushal
popal
pop ebx
rdtsc
jmp 0x2fff9a
pop edx
pop eax
xor dword [esp], 0x43dabcb4
jmp 0x2fffba
push dword [ebp + 0x122d15ad]
jns 0x2fffd3
pushal
sbb dx, 0x83a1
or edx, 0x661701b2
popal
lea eax, [ebp + 0x1248735d]
jl 0x2fffe5
pushal
xor ch, 0x50
cmc
popal
call eax
pushal
movzx esi, dx
cmc
popal
mov dword [ebp + 0x1247ded5], eax
stc
jmp 0x300008
mov byte [ebp + 0x122d1cfe], 0x50
stc
call 0x300019
push esi
lodsd eax, dword [esi]
lodsd eax, dword [esi]
test al, 0x56
jae 0x300036
jmp 0x300036
pop esi
push eax
push eax
push edx
jmp 0x30004f
rdtsc
jmp 0x300066
pop edx
pop eax
mov eax, dword [esp + 4]
jmp 0x30007e
mov eax, dword [eax]
push eax
push eax
push edx
pushal
popal
rdtsc
jmp 0x300099
pop edx
pop eax
pop eax
mov dword [esp + 4], eax
jmp 0x3000b9
pop eax
push 0
push eax
call 0x3000c5
and byte [eax - 0x3d], bl
pop eax
mov dword [esp + 4], eax
add dword [esp + 4], 0x1b
inc eax
push eax
ret
mov edx, edx
push ecx
push esi
mov esi, 0x3ff556af
neg esi
add esi, 0x6edf7921
shl esi, 8
sub esp, 4
mov dword [esp], edi
mov edi, 0x3f5fafbe
sub edi, 0x3579e0de
dec edi
or edi, 0x5dfb3b0d
and edi, 0x7feb8065
xor edi, 0x77ffca4f
xor edi, 0x55ebae13
and esi, edi
mov edi, dword [esp]
jmp 0x30059c
mov dword [esp], edi
mov dword [esp], eax
jmp 0x3005a8
inc edx
shr edx, 7
xor edx, 0xfba214fb
jmp 0x300578
sub esi, edx
jmp 0x30063b
or edx, 0x7f550f12
jmp 0x300569
push 0x623408e2
mov dword [esp], esi
mov esi, 4
jmp 0x300693
add esp, 4
push eax
jmp 0x3005d4
jmp 0x30073d
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push dword [esp]
pop ecx
jmp 0x300682
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
jmp 0x300603
mov eax, 0x5f9df7ea
shl eax, 6
neg eax
and eax, 0x1f7b9a24
and eax, 0x1bb93a0d
shr eax, 5
sub eax, 0x29c5df7
add esi, 0x5eef2d9a
sub esi, eax
sub esi, 0x5eef2d9a
jmp 0x3006df
xchg dword [esp], eax
jmp 0x300643
add esp, 4
push esi
jmp 0x30064c
mov dword [esp], edx
mov edx, 0x2eff7271
shr edx, 4
add edx, 0x7e779391
add edx, 0x7ffd8af2
xor edx, 0x3e884567
mov ecx, edx
jmp 0x30066c
mov edx, dword [esp]
jmp 0x30060b
pop esp
push ebp
mov ebp, esp
jmp 0x300688
pop ecx
jmp 0x30065d
xor edx, 0x51e7661c
jmp 0x300720
pop esi
sub esp, 4
mov dword [esp], ecx
jmp 0x3005ad
pop edx
jmp 0x300729
sub edx, 0x4d03f6a
add eax, edx
mov edx, dword [esp]
jmp 0x3006d4
push edx
jmp 0x3005c2
add ebp, 4
jmp 0x3006e8
sub eax, esi
pop esi
xchg dword [esp], eax
pop esp
jmp 0x30055e
mov dword [esp], ecx
push ebx
mov dword [esp], eax
pop ecx
mov eax, dword [esp]
add esp, 4
sub ecx, 0x3fdfa09c
sub ecx, 0x7df761be
xor ecx, 0x72dbd969
add ecx, 0x8f2d9f28
xor edx, ecx
pop ecx
xor edx, 0x5dbb30bc
inc edx
jmp 0x300672
add esp, 4
jmp 0x30058a
pop eax
shl esi, 2
jmp 0x3006fe
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edi
mov dword [esp], eax
push esp
jmp 0x300714
and esi, 0x7fdefbc5
dec esi
shl esi, 5
push edx
mov edx, 0x7ff75803
inc edx
jmp 0x30057f
pop eax
push edx
mov edx, 0x77775f8f
jmp 0x300652
push ecx
sub esp, 4
jmp 0x300617
not ecx
xor ecx, eax
xor eax, ecx
xor ecx, eax
not eax
push 0x32904cda
jmp 0x30069f
call 0x300742
push dword [esp]
pop ebx
push 0x8bb4a5c
jmp 0x300d67
sub edx, 0x62da5400
xor edx, 0xa2724751
jmp 0x30087b
mov dword [esp], ebx
mov ebx, 4
add eax, ebx
mov ebx, dword [esp]
add esp, 4
xor eax, dword [esp]
xor dword [esp], eax
jmp 0x300d32
push ecx
push esp
pop ecx
add ecx, 4
push edi
mov edi, 4
add ecx, edi
pop edi
xchg dword [esp], ecx
pop esp
jmp 0x300c9f
add ebx, edx
pop edx
jmp 0x300a91
push dword [eax + ebx]
push dword [esp]
push dword [esp]
jmp 0x300d8b
pop esp
mov dword [esp], ecx
mov ecx, 0x4fff3735
sub edx, 0x5cef882a
add edx, ecx
push esi
mov esi, 0x71e733e1
jmp 0x300cc5
xchg dword [esp], ecx
not ecx
xchg dword [esp], ecx
pop edx
jmp 0x300ed7
add edx, 0x614cb070
jmp 0x300a4d
push edi
push esi
mov esi, 0x7e8f4485
add esi, 0xd82044a2
mov edi, esi
jmp 0x300a5a
sub ebx, ecx
add ebx, 0x7eed0894
pop ecx
jmp 0x300df5
mov ebp, edx
pop edx
sub edx, ebp
push dword [esp]
jmp 0x300db4
pop esi
and edx, edi
pop edi
jmp 0x300750
shr eax, 6
add eax, 0x7dd344ea
add edx, eax
pop eax
jmp 0x3009b9
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
mov edx, esp
push edi
mov edi, 0x7c750a17
add edi, 0x838af5ed
add edx, 0x6ff7d148
jmp 0x300aea
add edx, edi
sub edx, 0x6ff7d148
pop edi
push ebx
push 0x7f17f435
jmp 0x300bfb
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
xor eax, ebx
push dword [esp]
pop ebx
add esp, 4
jmp 0x300908
push edi
jmp 0x300fa9
mov dword [esp], edi
push 0x4fef4f1a
pop edi
and edi, 0x3a731f19
sub edi, 0xa630f14
mov ebx, edi
pop edi
jmp 0x300f75
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
jmp 0x300e09
add eax, 4
push edx
jmp 0x30077a
sub ebx, ecx
mov ecx, dword [esp]
jmp 0x300c4d
inc esi
xor esi, 0x2d08bbc8
add edx, esi
jmp 0x300dd6
sub ebx, 0x7eed0894
jmp 0x300a2d
xor eax, dword [esp]
mov esp, dword [esp]
sti
push ecx
mov ecx, 0x7fbd6a70
jmp 0x300caa
mov dword [esp], eax
mov eax, esp
add eax, 4
push 0x1a677577
mov dword [esp], ebx
mov ebx, 4
jmp 0x300ebb
mov dword [esp], edi
jmp 0x300f17
pop edx
push ebx
mov ebx, esp
add ebx, 4
push ebp
jmp 0x300ea9
pop ebp
add esp, 4
add edx, ebx
push eax
mov eax, esp
add eax, 4
jmp 0x301044
pop esi
pop ecx
pop ebx
xchg dword [esp], edx
mov esp, dword [esp]
push edi
mov dword [esp], 0x49e23e2a
mov dword [esp], ebx
push 0x57ed9aa6
pop ebx
jmp 0x3010b7
push 0x52ba24fc
mov dword [esp], edx
push 0x33faf463
pop edx
push edx
jmp 0x300963
pop esp
add ebx, 0x7745b884
add ebx, 0x16fe84f4
add ebx, 0x7f2db0dd
add ebx, dword [esp]
sub ebx, 0x7f2db0dd
sub ebx, 0x16fe84f4
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x7745b884
jmp 0x300d27
mov ebp, 0x7ff55aa5
sub ebp, 0x7ff55aa1
add ebx, ebp
jmp 0x301137
sub eax, ebx
pop ebx
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], eax
push 0x751b6d03
jmp 0x30117c
push eax
push edi
jmp 0x300ede
mov edi, 0x2fdf5200
add edi, 0x501f950f
jmp 0x300b80
mov edi, 0x7ff92b5a
sub edi, 0x7ff92b56
sub esi, 0x7bbe1d83
add esi, edi
jmp 0x30115e
push esi
jmp 0x30107f
add dword [esp], 0x299db8c8
pop eax
sub eax, 0x299db8c8
jmp 0x30104f
sub eax, 4
xchg dword [esp], eax
jmp 0x300947
pop edi
xor eax, 0x77afabd1
jmp 0x300a70
mov dword [esp], ebp
jmp 0x3010a3
push edx
push 0x792de91a
pop edx
sub edx, 0x67e06fdf
neg edx
jmp 0x3009a7
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x57ed9aa6
push edx
mov dword [esp], edi
mov dword [esp], 0x3379b4d6
mov dword [esp], edx
mov dword [esp], 0x1b885914
mov dword [esp], ebx
pop eax
push dword [esp]
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push ecx
mov ecx, esp
jmp 0x300afe
pop ebp
xchg dword [esp], ebx
pop esp
push 0x4311c510
mov dword [esp], ecx
mov dword [esp], esi
push esi
mov dword [esp], esp
add dword [esp], 4
mov esi, dword [esp]
add esp, 4
push esi
mov dword [esp], edx
jmp 0x300d83
mov dword [esp], esp
add dword [esp], 4
mov eax, dword [esp]
jmp 0x300858