Function at 0x4f6aa4
Capabilities:
Execute anti-debugging instructions

Disassembly:
add eax, ecx
jmp 0x4e57d7
adc ebx, edx
jmp 0x74f92f
jmp 0x81470a
add ecx, 1
jmp 0x6fbb06
adc edx, 0
jmp 0x4e57d0
rdtsc
jmp 0x6ff9c1
jmp 0x8022fa
jmp 0x74f9e7
push esi
mov dword [esp], 0x6344be76
mov dword [esp], ecx
mov dword [esp], 0x7fffb1e4
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0x74fa65
jmp 0x814157
jmp 0x7d02b1
push 0
push dword [esp]
pop eax
push ebx
mov ebx, esp
push ebp
mov ebp, 0x71ebb7b0
not ebp
add ebp, 0x71ebb7b5
add ebx, ebp
pop ebp
add ebx, 4
xchg dword [esp], ebx
jmp 0x7d037c
pop esp
jmp 0x7d0382
jmp 0x7dffad
push eax
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop eax
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x2f97ec6f
neg ecx
dec ecx
jnp 0x7d150c
jmp 0x7d160f
sub ecx, 0x797a041
add eax, ecx
pop ecx
sub eax, 0x14
xchg dword [esp], eax
pop esp
jmp 0x7d1622
push ebx
mov dword [esp], 0x3f420adb
mov dword [esp], ebx
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ecx
mov dword [esp], ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push ebx
mov dword [esp], edi
mov dword [esp], eax
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x7d15b3
push ebx
push dword [esp]
pop eax
push esi
mov esi, esp
push ecx
mov ecx, 4
add esi, ecx
pop ecx
add esi, 4
xchg dword [esp], esi
pop esp
push ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push edx
mov dword [esp], eax
mov dword [esp], 0x6f42a193
mov dword [esp], eax
mov eax, dword [esp]
add esp, 4
jmp 0x7d14f7
push eax
mov dword [esp], ebx
push dword [esp]
pop ebx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebx
mov dword [esp], 0x1d256b7
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push eax
mov dword [esp], 0x72dfb51d
mov dword [esp], ebx
push dword [esp]
pop ebx
add esp, 4
push edi
push edx
mov edx, 0x5115dfc3
mov dword [esp + 4], edx
pop edx
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
jmp 0x7d1562
not ecx
and ecx, 0x17dfa345
jbe 0x7d15b3
jmp 0x7d14f7
jmp 0x815cd9
jmp 0x7d16e8
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
push ebp
jmp 0x7d1756
mov ebp, 0x434dd819
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], edx
jmp 0x7d1768
jmp 0x80277a
jmp 0x7d17cd
xchg ecx, eax
push eax
not dword [esp]
push dword [esp]
pop eax
add esp, 4
xor ecx, eax
xor eax, ecx
xor ecx, eax
jmp 0x7d1897
jmp 0x7e2471
push dword [ebp - 0xc]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x7df539
jmp 0x7e2f43
jmp 0x7e00cc
cpuid
jmp 0x7e00d3
jmp 0x801470
push edi
mov dword [esp], 0xbe84498
mov dword [esp], edx
xchg dword [esp], ecx
not ecx
jmp 0x7e256b
xor dword [esp], ecx
xor ecx, dword [esp]
xor dword [esp], ecx
pop edx
jmp 0x7e257a
jmp 0x6fbafe
push esp
mov ebp, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
xchg dword [esp], ebx
pop esp
jmp 0x7e2be4
jmp 0x7d14cf
jmp 0x7e2e00
ret
jmp 0x7e2fa4
push dword [ebp - 8]
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0x7e305c
jmp 0x7f91ea
jmp 0x7e68b5
push ebp
push 0x62cf139d
mov dword [esp], ebp
mov ebp, 0x486d1ed8
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
pop eax
push ecx
mov dword [esp], ebx
mov eax, dword [esp]
push edi
mov edi, esp
push esi
mov esi, 4
add edi, esi
pop esi
add edi, 4
xchg dword [esp], edi
pop esp
push edi
mov dword [esp], eax
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x7e6801
xor esi, 0x3f7a4d1
add ebx, esi
pop esi
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x7e6922
push eax
mov eax, esp
add eax, 4
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
pop edx
push edi
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], ebx
mov eax, dword [esp]
add esp, 4
push 0x5cd0b273
mov dword [esp], ebx
mov dword [esp], 0x7a9e6ef8
mov dword [esp], ebp
mov dword [esp], ebx
pop ebx
jmp 0x7e68d3
push dword [ebp - 0x10]
push dword [esp]
pop edx
push ebx
mov ebx, esp
push esi
mov esi, 0x7ef49ab7
shr esi, 5
js 0x7e686a
jmp 0x7e6852
push ebx
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
push edx
mov dword [esp], 0x476fc713
mov dword [esp], eax
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push 0x5eef60a3
mov dword [esp], esi
mov dword [esp], 0x7d64318c
mov dword [esp], ebx
mov ebx, dword [esp]
add esp, 4
jmp 0x7e6801
jmp 0x7d176d
push ebx
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xor eax, dword [esp]
jmp 0x7e756e
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], edx
pop dword [ebp - 0x10]
jmp 0x7e75e0
jmp 0x7ed5f6
jmp 0x7e8d4a
pop esp
add esp, 4
jmp 0x7e8d6a
push dword [esp]
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
jmp 0x7e8c97
jmp 0x801a29
jmp 0x7e8fc4
cpuid
jmp 0x7e8fcb
jmp 0x7d0253
jmp 0x7e955d
cpuid
jmp 0x7e9611
jmp 0x6ff8da
jmp 0x7eac66
push eax
mov eax, esp
push ebx
mov ebx, 4
add eax, ebx
pop ebx
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], edx
jmp 0x7eacd9
pop dword [ebp - 8]
jmp 0x7eace1
jmp 0x7df40d
jmp 0x7ed60d
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
jmp 0x7ed70e
push 0
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
jmp 0x7ed5fb
jmp 0x81572d
jmp 0x7f9297
push dword [ebp - 0x14]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
jmp 0x7f9309
jmp 0x7e67fc
jmp 0x7f93a9
shl ebp, 7
xor ebp, 0x77ed077f
jl 0x7f9481
jmp 0x7f9481
push ecx
mov ecx, esp
push ebp
mov ebp, 0x2f5b36a3
shl ebp, 5
jnp 0x7f9492
jmp 0x7f9417
shl ebp, 7
jns 0x7f9519
jmp 0x7f9492
or ebp, 0x7fff5609
jo 0x7f9417
jmp 0x7f950b
xor ebp, 0xb36a3004
add ecx, ebp
pop ebp
push ebp
mov ebp, 0x4fbe2ae4
neg ebp
jo 0x7f950b
jmp 0x7f9395
shr ebp, 7
jp 0x7f9519
jmp 0x7f950b
sub ebp, 0xffffba
sub ecx, ebp
pop ebp
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
pop dword [ebp - 0x14]
jmp 0x7f9531
jmp 0x7e74bb
jmp 0x8012bb
mov esp, dword [esp]
mov dword [esp], ecx
jmp 0x801338
push ebx
mov ebx, esp
push edi
push 4
pop edi
add ebx, edi
pop edi
sub ebx, 4
xchg dword [esp], ebx
jmp 0x8011fc
jmp 0x7d1627
jmp 0x801520
push ebp
push ebx
mov ebx, 0
mov dword [esp + 4], ebx
pop ebx
push dword [esp]
pop eax
add esp, 4
jmp 0x80159e
jmp 0x7e951a
push dword [ebp - 4]
push dword [esp]
pop eax
push ecx
mov ecx, esp
push edi
mov edi, 0x7bffc3e2
inc edi
add edi, 0x471744a7
jbe 0x801a29
jmp 0x801b5b
xor edi, 0xc5c222c
jmp 0x801b69
shl edi, 2
jnp 0x801aaa
jmp 0x801aaa
add ecx, edi
pop edi
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x801b78
jmp 0x823093
jmp 0x80235a
push edx
push 0x3096217b
mov dword [esp], esi
mov esi, 0x610a535a
jmp 0x802418
mov dword [esp + 4], esi
pop esi
mov dword [esp], eax
pop dword [ebp - 0xc]
jmp 0x802428
jmp 0x7eabc9
jmp 0x80288e
rdtsc
jmp 0x802895
jmp 0x7f9390
jmp 0x8067a3
mov ecx, dword [esp]
push ecx
mov ecx, esp
push 0x3d248342
mov dword [esp], ebx
mov ebx, 4
add ecx, ebx
pop ebx
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0x806879
jmp 0x7e8c34
sub esp, 4
mov dword [esp], edi
push 0x77c67d99
jmp 0x80c017
push ecx
mov ecx, 0xdff5eba
sub ecx, 0xb4d8f9ea
add edi, ecx
mov ecx, dword [esp]
add esp, 4
mov eax, edi
pop edi
jmp 0x80c0e1
pop edi
add edi, 0x796fe3b7
jo 0x80c029
jmp 0x80c03a
xor edi, 0x57effa60
js 0x80bffb
jmp 0x80c03a
push edi
mov dword [esp], ebx
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
sub esp, 4
mov dword [esp], eax
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 4
add eax, edx
pop edx
xchg dword [esp], eax
pop esp
push eax
mov dword [esp], 0x64c86f72
mov dword [esp], eax
push dword [esp]
pop eax
add esp, 4
jmp 0x80bf8d
jmp 0x7e8ec5
jmp 0x81425b
shl esi, 6
jp 0x814186
jmp 0x81428c
sub esi, 0x3956303e
add edx, esi
pop esi
add edx, 4
push edx
push dword [esp + 4]
mov edx, dword [esp]
add esp, 4
jmp 0x814283
or esi, 0x7a7b018c
jno 0x81424a
jmp 0x814283
push ebx
mov ebx, dword [esp]
push 0x3a0aa232
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
push edx
push esp
pop edx
add edx, 4
sub edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], eax
pop eax
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
jmp 0x81415c
push edi
mov dword [esp], eax
mov eax, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push 0xe677974
mov dword [esp], ebp
mov dword [esp], eax
push dword [esp]
pop eax
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
mov dword [esp], eax
mov eax, dword [esp]
add esp, 4
jmp 0x814197
and esi, 0x77ace085
je 0x814197
jmp 0x814275
mov edx, dword [esp]
push edx
mov edx, esp
push esi
mov esi, 0x77ef5773
shl esi, 7
jns 0x8141f7
jmp 0x81415c
shr esi, 1
js 0x814186
jmp 0x81416a
pop dword [esp]
pop esp
jmp 0x8142ef
push 0x6c72181d
mov dword [esp], eax
mov eax, dword [esp]
push 0x5daa41d8
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push edi
mov dword [esp], ebx
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
push ebp
mov ebp, 0x78f7f8e6
sub ebp, 0x6ef716b7
neg ebp
or ebp, 0x7bfd3888
or ebp, 0x7fa5bbf8
neg ebp
sub ebp, 0x4003
add edi, ebp
pop ebp
xchg dword [esp], edi
pop esp
jmp 0x814186
jmp 0x806740
push eax
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edi
mov edi, 0x369eba96
mov dword [esp + 4], edi
pop edi
mov dword [esp], ebp
jmp 0x81483d
jmp 0x7e2afa
cpuid
jmp 0x815854
jmp 0x80bf8d
jmp 0x815d37
mov dword [esp], ebx
jmp 0x815e02
push 0x7453c998
mov dword [esp], edi
mov dword [esp], 0x3d818834
mov dword [esp], edx
mov dword [esp], 0x37431ea9
jmp 0x815d2f
jmp 0x8011f7
jmp 0x823189
leave
jmp 0x82318f
jmp 0x7e2cfa