Function at 0x72fe07
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0xd347c6
push ebx
push edx
mov edx, 0
mov dword [esp + 4], edx
pop edx
mov eax, dword [esp]
push ebx
jmp 0xd13603
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xd1361a
jmp 0xd1e63e
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
jmp 0xd13b31
mov dword [esp], 0x47dee84a
mov dword [esp], edx
pop dword [ebp - 8]
jmp 0xd13c53
jmp 0xd1e2e8
push esi
push esi
mov esi, 0x59a70eb2
mov dword [esp + 4], esi
pop esi
mov dword [esp], ecx
not dword [esp]
mov ecx, dword [esp]
add esp, 4
jmp 0xd15d23
jmp 0xd168b2
push edx
push esi
push dword [esp + 4]
mov esi, dword [esp]
add esp, 4
pop dword [esp]
not esi
xor dword [esp], esi
xor esi, dword [esp]
xor dword [esp], esi
pop edx
jmp 0xd169e7
jmp 0xd30cbc
cpuid
jmp 0xd1a098
jmp 0xd34906
jmp 0xd1c047
cpuid
jmp 0xd1c0ff
jmp 0xd3b111
jmp 0xd1cfa0
cpuid
jmp 0xd1cfa7
jmp 0xd134e8
jmp 0xd1d88e
add ebx, 0x8600ce1c
add edi, ebx
pop ebx
add edi, 4
jmp 0xd1d7e1
xchg dword [esp], edi
pop esp
jmp 0xd1d8a3
push dword [ebp - 4]
push dword [esp]
pop eax
push edi
mov edi, esp
push ebx
mov ebx, 0x79ff31e8
jmp 0xd1d7cd
jmp 0xd3dde6
push dword [ebp - 0xc]
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0xd1e404
jmp 0xd3a0a9
push esp
mov ebp, dword [esp]
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
jmp 0xd1e42b
mov esp, dword [esp]
jmp 0xd1e52f
jmp 0xd3dc42
jmp 0xd1e6ed
cpuid
jmp 0xd1e743
jmp 0xd278cf
jmp 0xd1f774
mov dword [esp], 0
pop eax
jmp 0xd1f787
push esi
mov dword [esp], edx
mov dword [esp], 0x60b05eeb
mov dword [esp], eax
jmp 0xd1f653
jmp 0xd19f8f
jmp 0xd1f834
rdtsc
jmp 0xd1f8ca
jmp 0xd2dabb
jmp 0xd21652
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
sub ecx, edx
pop edx
jmp 0xd216cd
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], edx
jmp 0xd216df
jmp 0xd1f7de
jmp 0xd2179b
push ecx
push edx
mov edx, 0x5902f27d
mov dword [esp + 4], edx
pop edx
mov dword [esp], edx
pop dword [ebp - 0x10]
jmp 0xd2180e
jmp 0xd1f64e
jmp 0xd21baf
push dword [ebp - 0x10]
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
jmp 0xd21c2d
jmp 0xd15c17
push edx
push ecx
mov ecx, 0xa1560c2
mov dword [esp + 4], ecx
mov ecx, dword [esp]
jmp 0xd22e9c
add esp, 4
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0xd22f4a
jmp 0xd3be64
jmp 0xd2755b
pop esp
jmp 0xd27588
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
jmp 0xd2745c
jmp 0xd1d772
jmp 0xd27977
rdtsc
jmp 0xd279d0
jmp 0xd3d10e
jmp 0xd2db46
not eax
not eax
dec eax
xor eax, 0x517558c
add edx, eax
pop eax
push eax
mov eax, 0x7ffff3d4
and eax, 0x7f0f534a
inc eax
neg eax
neg eax
add eax, 0x80f0acc3
sub edx, eax
pop eax
xchg dword [esp], edx
pop esp
mov dword [esp], eax
jmp 0xd2db5f
push edx
mov edx, esp
push eax
mov eax, 0x5ae9f9ec
xor eax, 0x5ffeac65
jg 0xd2db15
jmp 0xd2dbbe
pop dword [ebp - 0x14]
jmp 0xd2dc00
push 0x4dcfdbb2
mov dword [esp], eax
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push ebx
push dword [esp]
pop eax
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0xd2db46
jmp 0xd216e4
add ecx, 1
jmp 0xd3ef52
jmp 0xd34879
push edx
mov edx, esp
push eax
mov eax, 4
add edx, eax
pop eax
sub edx, 4
xchg dword [esp], edx
jmp 0xd34893
pop esp
mov dword [esp], ebp
mov dword [esp], 0x530b36be
mov dword [esp], ebp
jmp 0xd34901
jmp 0xd1e40e
push edi
push esi
mov esi, 0
mov dword [esp + 4], esi
pop esi
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xd34a40
jmp 0xd1bfe7
jmp 0xd34aea
ret
add eax, ecx
jmp 0xd3c3f6
jmp 0xd39ceb
add ebp, edx
pop edx
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0xd39dac
push dword [ebp - 0x14]
mov ecx, dword [esp]
push ebp
mov ebp, esp
push edx
mov edx, 4
jmp 0xd39cda
jmp 0xd21afa
jmp 0xd39ebf
push 0x17467f8e
mov dword [esp], eax
mov dword [esp], 0x21cb517d
mov dword [esp], edi
mov dword [esp], esi
mov dword [esp], ecx
jmp 0xd39f7c
jmp 0xd215a5
jmp 0xd3a10e
push dword [ebp - 8]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
jmp 0xd3a1cc
jmp 0xd39c78
jmp 0xd3b28b
mov esi, dword [esp]
add esp, 4
jmp 0xd3b2a0
inc ebx
xor ebx, 0xaa01dd24
mov esi, ebx
pop ebx
or esi, 0x7ef8a10c
js 0xd3b218
jmp 0xd3b27e
pop edi
inc esi
jno 0xd3b201
jmp 0xd3b218
add esi, 0x6cfd884e
or esi, 0x66fc13c6
jg 0xd3b201
jmp 0xd3b218
sub esi, 0xeefd7bdf
mov eax, esi
jmp 0xd3b116
push edi
push esp
pop edi
add edi, 4
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
mov dword [esp], ebx
pop eax
sub esp, 4
mov dword [esp], ecx
mov dword [esp], eax
push dword [esp]
pop eax
add esp, 4
push edx
mov dword [esp], ebx
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
push ecx
mov ecx, 0x779a8196
inc ecx
shl ecx, 6
shr ecx, 8
sub ecx, 0xe6a061
add edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
jmp 0xd3b201
push edi
mov edi, 0xffffffff
sub esi, edi
jmp 0xd3b19e
push esi
push ebx
mov ebx, 0x5fdfa0c2
shl ebx, 4
js 0xd3b121
jmp 0xd3b225
jmp 0xd1cead
jmp 0xd3be47
mov dword [esp], eax
mov dword [esp], 0x52ee1eb2
mov dword [esp], esi
mov dword [esp], ebx
jmp 0xd3be5f
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xd3be32
jmp 0xd39e5a
jmp 0xd3bf62
push dword [esp]
mov edx, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
jmp 0xd3bf82
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0xd3bf8d
jmp 0xd3e422
adc ebx, edx
jmp 0xd22e32
jmp 0xd3d165
push ebx
push ebp
mov ebp, 0x10568872
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], ebx
mov dword [esp], eax
pop dword [ebp - 0xc]
jmp 0xd3d224
jmp 0xd13b16
push ebx
mov ebx, esp
add ebx, 4
push eax
push 0x14
pop eax
sub ebx, eax
pop eax
push 0x4cd53d23
mov dword [esp], ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
jmp 0xd3dd3a
jmp 0xd3bd13
leave
jmp 0xd3def4
jmp 0xd34a45
jmp 0xd3e477
push dword [esp]
pop ecx
push eax
push esp
mov eax, dword [esp]
add esp, 4
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xd3e540
jmp 0xd27457
adc edx, 0
jmp 0xd35bc7