Function at 0x4a9a8d
Capabilities:
Execute anti-debugging instructions

Disassembly:
pushfd
pushfd
add ebp, 0x70
popfd
lea ebp, [ebp - 0x70]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
mov edx, dword [esp]
rdtsc
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x68]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
and eax, 1
pushfd
add ebp, 0x12
popfd
lea ebp, [ebp - 0x12]
xchg ebx, edx
xchg dword [esp], ebx
xchg ebx, edx
lea esp, [esp + 4]
xchg ecx, eax
xchg dword [esp], ecx
xchg ecx, eax
lea esp, [esp + 4]
je 0x569f10
jne 0x4e8460
jmp 0x569f0e
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x5e]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
add dword [esp], 0xf428f
xchg dword [esp], ecx
push ecx
mov ecx, eax
pop ecx
xchg dword [esp + 4], ecx
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0xf]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], ecx
pushfd
add ebp, 0x20
popfd
lea ebp, [ebp - 0x20]
popfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x4c]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
jmp 0x53fc00
popfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x62]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
je 0x4cd3c4
jne 0x4cd3c4
jmp 0x4cd3c2
pushfd
push ebp
mov ebp, esp
leave
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
mov edx, dword [esp]
rdtsc
mov ecx, ecx
and eax, 1
pushfd
add ebp, 0x48
popfd
lea ebp, [ebp - 0x48]
xchg edx, eax
xchg dword [esp], eax
xchg edx, eax
lea esp, [esp + 4]
xchg ecx, eax
xchg dword [esp], ecx
xchg ecx, eax
lea esp, [esp + 4]
je 0x56c4c0
jne 0x4aba60
jmp 0x56c4be
popfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x6e]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
je 0x564db0
jne 0x564db0
jmp 0x564dae
add byte [eax], al
xchg ecx, eax
mov ecx, dword [ebp - 8]
push eax
xchg ecx, eax
pop ecx
add eax, 1
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x4f]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg dword [ebp - 8], ecx
mov ecx, eax
push dword [ebp - 8]
xchg dword [ebp - 8], ecx
pop ecx
jmp 0x57996c
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x20]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
je 0x561af8
jne 0x561af8
jmp 0x561af6
add byte [eax], al
popfd
pushfd
add ebp, 0x57
popfd
lea ebp, [ebp - 0x57]
je 0x57996c
jne 0x57996c
jmp 0x57996a
popfd
push esi
add byte [eax], al
xchg dword [ebp - 0xc], ebx
mov ebx, 0x25e0d48d
push dword [ebp - 0xc]
xchg dword [ebp - 0xc], ebx
pop ebx
pushfd
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x11]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
push 0x25e0d48d
push edx
mov edx, dword [esp + 4]
xor dword [ebp - 0xc], edx
mov edx, dword [esp]
lea esp, [esp + 8]
popfd
push ebp
mov ebp, esp
leave
xchg ecx, eax
mov ecx, dword [ebp - 0xc]
push eax
xchg ecx, eax
pop ecx
xchg dword [ebp - 0x14], ecx
mov ecx, eax
push dword [ebp - 0x14]
xchg dword [ebp - 0x14], ecx
pop ecx
xchg dword [ebp - 8], edi
mov edi, 0x788e952e
push dword [ebp - 8]
xchg dword [ebp - 8], edi
pop edi
pushfd
mov ebx, ebx
push 0x788e952e
push ecx
mov ecx, dword [esp + 4]
xor dword [ebp - 8], ecx
mov ecx, dword [esp]
lea esp, [esp + 8]
popfd
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 6]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
jmp 0x448098
call 0x451394
jne 0x53fc4f
push ss
inc esp
sub dword [esi + 0x1c5a9f], ebx
add byte [ebp - 0x3db9b73], dl
mov dword [esp], eax
mov eax, ebp
mov ebp, dword [esp]
xchg ebp, edx
mov edx, esp
push ebp
xchg ebp, edx
pop edx
push 0x14
not dword [esp]
inc dword [esp]
add esp, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
mov esi, dword [ebp + 8]
push eax
xchg esi, eax
pop esi
xchg dword [eax], ecx
mov ecx, 0x57f5c87d
push dword [eax]
xchg dword [eax], ecx
pop ecx
pushfd
push ebp
mov ebp, esp
leave
push 0x57f5c87d
cmc
push edi
push ecx
mov ecx, dword [esp + 4]
xor dword [eax], ecx
mov ecx, dword [esp]
lea esp, [esp + 8]
popfd
push edi
mov edi, dword [esp + 0xc]
pop edi
xchg ecx, esi
mov esi, dword [ebp + 8]
push ecx
xchg ecx, esi
pop esi
xchg dword [ecx + 4], edx
mov edx, 0x453c24ee
push dword [ecx + 4]
xchg dword [ecx + 4], edx
pop edx
pushfd
push ebp
mov ebp, esp
leave
push 0x453c24ee
push edi
mov edi, dword [esp + 4]
xor dword [ecx + 4], edi
mov edi, dword [esp]
lea esp, [esp + 8]
popfd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0xb]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg edx, eax
mov eax, dword [ebp + 8]
push edx
xchg edx, eax
pop eax
add edx, 8
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x69]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg dword [ebp - 0x10], eax
mov eax, edx
push dword [ebp - 0x10]
xchg dword [ebp - 0x10], eax
pop eax
xchg dword [ebp - 8], ecx
mov ecx, 0x450e2b58
push dword [ebp - 8]
xchg dword [ebp - 8], ecx
pop ecx
pushfd
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x25]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
push 0x450e2b58
push ebx
mov ebx, dword [esp + 4]
xor dword [ebp - 8], ebx
mov ebx, dword [esp]
lea esp, [esp + 8]
popfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x4b]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
jmp 0x556fb8
pushfd
push ecx
mov ecx, dword [esp]
pop ecx
xchg edi, eax
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, eax
mov eax, dword [esp]
xchg ecx, edx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edx
mov edx, dword [esp]
rdtsc
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x18]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
and eax, 1
push ebp
mov ebp, esp
leave
xchg edi, edx
xchg dword [esp], edi
xchg edi, edx
lea esp, [esp + 4]
xchg esi, eax
xchg dword [esp], esi
xchg esi, eax
lea esp, [esp + 4]
je 0x4e7624
jne 0x4d53a8
jmp 0x4e7622
out 0x63, al
cmp dword [ebp - 8], 0x100
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x4c]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
jge 0x4e9524
xchg ecx, eax
mov eax, dword [ebp - 0x10]
push ecx
xchg ecx, eax
pop eax
add ecx, dword [ebp - 8]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x5a]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
mov dl, byte [ebp - 8]
push ebp
mov ebp, esp
leave
mov byte [ecx], dl
push edi
mov edi, eax
pop edi
jmp 0x571fbc
add byte [eax], al
xchg dword [ebp - 0xc], ecx
mov ecx, 0x24b6f4fc
push dword [ebp - 0xc]
xchg dword [ebp - 0xc], ecx
pop ecx
pushfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0xf]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
push 0x24b6f4fc
push ecx
mov ecx, dword [esp + 4]
xor dword [ebp - 0xc], ecx
mov ecx, dword [esp]
lea esp, [esp + 8]
popfd
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 2]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
mov ecx, dword [ebp - 0xc]
push eax
xchg ecx, eax
pop ecx
xchg dword [ebp - 0x14], ecx
mov ecx, eax
push dword [ebp - 0x14]
xchg dword [ebp - 0x14], ecx
pop ecx
xchg dword [ebp - 8], eax
mov eax, 0x9d82e92
push dword [ebp - 8]
xchg dword [ebp - 8], eax
pop eax
pushfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x58]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
push 0x9d82e92
push edi
mov edi, dword [esp + 4]
xor dword [ebp - 8], edi
mov edi, dword [esp]
lea esp, [esp + 8]
popfd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 3]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
jmp 0x56e62c
add byte [eax], al
popfd
pushfd
add ebp, 0xb
popfd
lea ebp, [ebp - 0xb]
je 0x571fbc
jne 0x571fbc
jmp 0x571fba
add byte [eax], al
popfd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x5d]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
je 0x56e62c
jne 0x56e62c
jmp 0x56e62a
sub dl, byte [ebp + ebx*4 + 0x244c8b51]
add al, 0x8d
dec ecx
xchg dword cs:[esp + 4], ecx
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x2e]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
je 0x4e9524
jne 0x4e9524
jmp 0x4e9522
pushfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x4b]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg ecx, edx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edx
mov edx, dword [esp]
rdtsc
lea ebx, [ebx]
and eax, 1
push ebp
mov ebp, esp
leave
xchg edx, eax
xchg dword [esp], eax
xchg edx, eax
lea esp, [esp + 4]
xchg ebx, eax
xchg dword [esp], ebx
xchg ebx, eax
lea esp, [esp + 4]
je 0x568c94
jne 0x451c00
jmp 0x568c92
salc
add byte [ecx + 0x100f87d], al
add byte [eax], al
cmp dword [ebp - 8], 0x100
push eax
mov eax, dword [esp + 0xd]
pop eax
jge 0x5730ea
xchg edx, edi
mov edi, dword [ebp - 0x10]
push edx
xchg edx, edi
pop edi
add edx, dword [ebp - 8]
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x34]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
mov al, byte [edx]
pushfd
add ebp, 0x39
popfd
lea ebp, [ebp - 0x39]
mov byte [ebp - 1], al
pushfd
add ebp, 0x41
popfd
lea ebp, [ebp - 0x41]
movzx ecx, byte [ebp - 1]
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x71]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
add ecx, dword [ebp - 0x14]
pushfd
add ebp, 5
popfd
lea ebp, [ebp - 5]
xchg edx, eax
mov eax, dword [ebp + 0xc]
push edx
xchg edx, eax
pop eax
add edx, dword [ebp - 0xc]
mov edi, edi
movzx eax, byte [edx]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x17]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
add ecx, eax
push eax
mov eax, edx
pop eax
movzx ecx, cl
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0xd]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg dword [ebp - 0x14], esi
mov esi, ecx
push dword [ebp - 0x14]
xchg dword [ebp - 0x14], esi
pop esi
xchg edx, eax
mov eax, dword [ebp - 0x10]
push edx
xchg edx, eax
pop eax
add edx, dword [ebp - 8]
push edx
mov edx, eax
pop edx
xchg ecx, eax
mov ecx, dword [ebp - 0x10]
push eax
xchg ecx, eax
pop ecx
add eax, dword [ebp - 0x14]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x4e]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov cl, byte [eax]
pushfd
add ebp, 0x23
popfd
lea ebp, [ebp - 0x23]
mov byte [edx], cl
pushfd
add ebp, 0x5b
popfd
lea ebp, [ebp - 0x5b]
xchg edx, ecx
mov ecx, dword [ebp - 0x10]
push edx
xchg edx, ecx
pop ecx
add edx, dword [ebp - 0x14]
push ebp
mov ebp, esp
leave
mov al, byte [ebp - 1]
push edi
mov edi, eax
pop edi
mov byte [edx], al
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x4f]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
mov eax, dword [ebp - 0xc]
push ecx
xchg ecx, eax
pop eax
add ecx, 1
push ebp
mov ebp, esp
leave
xchg dword [ebp - 0xc], esi
mov esi, ecx
push dword [ebp - 0xc]
xchg dword [ebp - 0xc], esi
pop esi
xchg edx, eax
mov eax, dword [ebp - 0xc]
push edx
xchg edx, eax
pop eax
cmp edx, dword [ebp + 0x10]
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x76]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
jl 0x5730e8
xchg dword [ebp - 0xc], ebx
mov ebx, 0x25aeda15
push dword [ebp - 0xc]
xchg dword [ebp - 0xc], ebx
pop ebx
pushfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x1c]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
push 0x25aeda15
push edi
mov edi, dword [esp + 4]
xor dword [ebp - 0xc], edi
mov edi, dword [esp]
lea esp, [esp + 8]
popfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x4c]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
jmp 0x5730e8
xchg ebp, eax
add byte [edx + 0x50f8558b], dl
xchg edx, eax
mov edx, dword [ebp - 8]
push eax
xchg edx, eax
pop edx
add eax, 1
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x39]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg dword [ebp - 8], ebx
mov ebx, eax
push dword [ebp - 8]
xchg dword [ebp - 8], ebx
pop ebx
jmp 0x57996c
je 0x57996c
cmp dword [ebp - 8], 0x100
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x1b]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
jge 0x4a9a8c
xchg ecx, edx
mov edx, dword [ebp - 0x10]
push ecx
xchg ecx, edx
pop edx
add ecx, dword [ebp - 8]
push eax
mov eax, dword [esp + 4]
lea eax, [eax]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
mov dl, byte [ebp - 8]
lea edi, [edi]
mov byte [ecx], dl
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0xb]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
jmp 0x56d650