Function at 0x4a871a
Capabilities:
Execute anti-debugging instructions

Disassembly:
xchg dword [esp], ebp
mov ax, cx
mov ax, 0x9746
pushal
lea edx, [ecx*4]
lea edx, [edx - 0x24]
jmp 0x4a8729
neg eax
mov eax, dword [esp]
mov ax, word [esp]
xchg al, dh
neg ah
jmp 0x4a86f8
lea ebp, [ebp + 0x4f]
rcl dx, cl
setae dl
mov al, byte [esp]
btr ax, si
xchg dword [esp + 0x20], ebp
jmp 0x4a8bc9
rcl eax, 8
dec eax
call fcn.004a8abc
neg dl
mov eax, 0x8bd10628
lea edx, reloc.oleaut32.dll_SysFreeString
jmp 0x4a8bf8
jmp 0x4a8c2f
adc ax, 0x8bb5
jo 0x4a8c60
mov dx, 0x8636
jmp 0x4a8c64
lea esp, [esp + 8]
not cl
pushfd
xchg byte [esp + 2], dh
mov dword [esp], ecx
lea edx, [esi + ebp]
jmp 0x4a8c19
mov dx, 0x8636
lea esp, [esp + 4]
jmp 0x4a8f02
xor cl, 0xee
mov dx, word [esp]
adc dx, 0x647
jmp 0x4a8cc2
setnp ah
jmp 0x4a8db1
bsf dx, bp
setnp al
mov ax, 0xe3ed
jmp 0x4a8c9b
jo 0x4a8ce0
rdtsc
jmp 0x4a8ce2
not dx
rdtsc
cmc
jns 0x4a8d04
js 0x4a8d04
retf
rdtsc
and ecx, 0x3c
lea eax, [eax*4]
jmp 0x4a8cc8
neg ax
js 0x4a8d2f
not edx
inc edx
mov edx, esi
jmp 0x4a8d0b
sub ebp, 4
jmp 0x4a8cee
mov edx, esi
mov eax, dword [ecx + esi]
xchg edx, ecx
bsr ecx, ecx
jmp 0x4a8d54
call 0x4a8d34
mov eax, dword [reloc.oleaut32.dll_SysFreeString]
lodsd eax, dword [esi]
retf
not edx
inc edx
jmp 0x4a8d09
ja 0x4a8d19
jbe 0x4a8d19
dec ecx
jmp 0x4a8d6f
call 0x4a8d75
sbb ecx, dword [edi]
xor ebx, ebp
add al, 0x72
insd dword es:[edi], dx
jl 0x4a8dcc
mov edx, 0xcee417cc
bsf dx, bx
jae 0x4a8e69
jb 0x4a8e69
rcl dword [edx + ecx*8 - 0x53]
pop esp
and eax, 0x3051c149
ret
mov dx, word [esp]
bsf dx, bp
setnp al
mov ax, 0xe3ed
setnp ah
sub esp, 0x1a
pop dword [esp + 2]
lea esp, [esp + 2]
lea esp, [esp + 0x14]
jmp 0x4a8c85
not ecx
call fcn.004a8e19
shr eax, 1
dec ebp
add byte [eax], al
add byte [ebx - 8], dh
jae 0x4a8dc6
outsb dx, byte [esi]
or eax, edi
jg 0x4a8e28
aad 0x45
sub al, 0xdf
mov esp, eax
ja 0x4a8e39
mov dl, 0xbe
not ecx
lea ecx, [edx*4]
cmc
jo 0x4a8e81
jno 0x4a8e6b
test al, 0x29
mov ecx, 0xc80c2bd8
imul eax, dword [edx - reloc.oleaut32.dll_SysFreeString], 0xffffffc1
lea eax, [esi + 0x50]
rol cl, 1
jge 0x4a8ddb
mov dl, 0xbe
jmp 0x4a8dc5
and al, 0xeb
fmul dword [edi]
cwde
ror dword [edx - reloc.oleaut32.dll_SysFreeString], 0
add byte [eax], al
add byte [edi - 0x17fbdba4], al
or eax, dword [eax]
add byte [eax], al
sets cl
mov cl, dl
lea ecx, [edi*4]
xchg dword [esp + 4], ebx
and al, 4
call fcn.004a8e4b
out 0x8d, al
pop ebx
adc ecx, dword [ebp - reloc.oleaut32.dll_SysFreeString]
jmp 0x4a8e2b
jmp 0x4a8df8
mov cl, 0xff
lea edx, reloc.oleaut32.dll_SysFreeString
cmp ebp, eax
jmp 0x4a8e98
mov cl, 0xff
lea edx, reloc.oleaut32.dll_SysFreeString
cmp ebp, eax
lea ecx, reloc.oleaut32.dll_SysFreeString
jmp 0x4a94a4
lea ecx, reloc.oleaut32.dll_SysFreeString
jmp 0x4a94a4
not cl
neg ax
jae 0x4a8d9f
mov dx, word [esp]
jmp 0x4a8cb5
ja fcn.004a8ed3
bswap ecx
rdtsc
xchg cx, dx
mov ax, cx
jmp 0x4a94d7
not dl
mov dl, byte [esp]
push eax
ret
lea eax, [esi + 0x40]
jmp 0x4a94e0
mov ecx, esi
shr dx, cl
jle 0x4a94c1
jg 0x4a94c1
lea edx, [ebp*4]
mov dx, 0x1756
call fcn.004a9501
inc esi
jno 0x4a9564
jae 0x4a9560
mov edx, ebx
mov dl, cl
mov esp, esi
mov dh, byte [esp]
jmp 0x4a94ba
pop word [esp + 1]
neg edx
lea esp, [esp + 2]
xchg dword [esp + 4], ecx
mov dl, ch
bsr edx, ebx
jmp 0x4a95aa
bsf edx, edi
rcl dx, 4
rcl edx, 4
lea ecx, [ecx + 0x27]
sub esp, 6
push word [esp + 4]
mov dword [esp + 1], ebp
jmp 0x4a9544
mov edx, dword [esp]
mov dl, 2
push dword [esp + 4]
ret 8