Function at 0x556fa7
Capabilities:
Execute anti-debugging instructions

Disassembly:
bsr di, di
pop dword [esp + 6]
mov edi, dword [esp + 6]
mov esi, edx
pushfd
jmp 0x5568ea
mov al, byte [esp + 0xa]
rdtsc
mov di, 0x2db6
and bp, cx
btr eax, edx
pop edi
jmp 0x5568a5
std
bsf ax, cx
mov di, word [esp + 0x12]
std
mov al, byte [esp + 9]
mov dh, dl
jmp 0x5568bb
pop dword [esp]
sub esp, 9
xchg edx, ebx
mov ebx, eax
mov dx, ax
mov cl, 0xad
jmp 0x556946
lea esp, [esp + 0xf]
dec ecx
bsr ax, bx
mov ah, dl
sub esp, 0xa
cpuid
jmp 0x556928
mov esi, dword [esp + 0xc]
inc edx
pop dx
rol ebx, cl
btr ebx, esi
lea ebx, reloc.MSVCRT.dll_strncpy
jmp 0x5568d7
cld
mov ax, 0xe025
mov bh, 0x85
xchg byte [esp + 0xf], bl
mov ebx, dword [esp + 0x11]
pop bx
jmp 0x55696f
neg dx
mov esi, ebp
cmc
xchg dword [esp + 9], edi
push word [esp + 3]
mov dh, al
jmp 0x5568fb
bswap ecx
add esp, 2
neg bx
cld
pop dword [esp + 3]
neg ecx
jmp 0x556a10
xchg byte [esp + 5], bh
lea ecx, [ebp*4]
shl ebp, 0x12
mov ch, 0xa9
pop cx
and dh, 0x29
jmp 0x556959
push di
std
xchg word [esp + 8], bx
mov ax, word [esp + 7]
lea ebx, [edx*4]
mov al, ah
jmp 0x556914
xchg dword [esp], esi
lea esi, [ebx + edi]
neg ecx
xchg edx, ebp
clc
not ebp
jmp 0x5569f7
add esp, 4
neg di
pop edi
mov ch, byte [esp + 1]
push word [esp]
bts di, ax
jmp 0x5569ab
mov ebx, dword [esp + 3]
mov bh, 0xf9
inc cl
lea ecx, [ebp*4]
jmp 0x556a34
xchg byte [esp], cl
std
sub ebp, 0xee11d368
mov dx, word [esp + 3]
rcr di, cl
jmp 0x5569e1
dec eax
lea ecx, [edx + ebx]
std
mov ax, di
push si
bswap ebp
jmp 0x5569cc
mov al, byte [esp + 0x1c]
push dword [esp + 0xc]
not esi
bsr esi, edx
neg eax
jmp 0x556aa8
mov word [esp], bx
lea ebp, [edx - 0x33]
mov bl, byte [esp + 3]
pushal
push dword [esp + 0x19]
jmp 0x556a1e
rcl edx, cl
pop ebp
xchg dword [esp + 0xc], edi
lea edi, [edx + 0xab]
not bh
mov dword [esp + 3], ecx
jmp 0x556990
push ebp
cpuid
pop edi
neg si
mov edx, 0x2fcd5b19
jmp 0x556a8f
mov dh, al
push dword [esp + 0x26]
bts bx, dx
pushal
lea esp, [esp + 0x52]
lea esi, [eax + edi]
jmp 0x556a65
mov bp, 0xdd37
lea edi, [edx + ebp]
cpuid
rdtsc
mov di, word [esp]
mov dh, cl
jmp 0x556cbd
bsf bx, si
mov word [esp + 0x28], si
lea ebp, reloc.MSVCRT.dll_strncpy
mov ebx, ebp
bsr ecx, esi
push word [esp + 0xe]
jmp 0x556a7b
mov dx, 0xe95f
bsf si, bx
sub esp, 0xc
pop dword [esp + 8]
jmp 0x556b1e
cpuid
rdtsc
pop edi
mov edx, 0x16b392e5
pop word [esp + 6]
cld
jmp 0x556ac3
push dword [esp + 5]
push word [esp + 2]
btc esi, edx
mov byte [esp + 0x1d], bl
jmp 0x556b4f
mov ah, 0x39
lea ebp, reloc.MSVCRT.dll_strncpy
xor cl, ah
lea eax, reloc.MSVCRT.dll_strncpy
mov byte [esp + 0x1c], bh
seto bh
jmp 0x556aeb
mov bh, byte [esp + 3]
sub esp, 0xe
push word [esp + 9]
sets cl
mov dword [esp + 0xa], ebp
pop ebx
jmp 0x556b01
push dword [esp + 0xf]
mov eax, dword [esp + 0x1e]
mov di, 0x61ed
inc dx
sub esp, 0x14
jmp 0x556b7b
pop word [esp + 0x16]
mov esi, 0x56c8f6e6
sub bx, bp
xchg cl, ah
lea eax, [esp + ebp]
mov dl, cl
jmp 0x556b34
bsr ecx, ebp
pop bp
lea ebp, [ecx + edx]
xchg word [esp + 1], ax
bswap ecx
jmp 0x556bf6
lea edx, [ecx*4]
mov bl, 0xa5
lea esp, [esp + 0x34]
bswap edx
setnp bl
stc
jmp 0x556b65
cmp ebx, 0x533ec1d6
ror ah, cl
xchg dword [esp + 6], ebx
xchg ebx, ebp
cpuid
bswap ebx
jmp 0x556ad9
mov ecx, dword [esp]
cmc
xchg bh, ah
btc di, ax
mov cl, ch
stc
jmp 0x556bdd
stc
add esp, 0
mov ecx, 0x872c4312
xchg ebx, esi
add esp, 0
xchg byte [esp], dh
jmp 0x556bb4
xchg byte [esp], ch
sub esp, 0x18
rdtsc
rdtsc
lea ebp, [ebx + esi]
lea esp, [esp + 6]
jmp 0x556c46
shr ebx, cl
pop si
rcl ebx, cl
lea ecx, [esp + ecx]
pop cx
rcl esi, 0x14
jmp 0x556bca
rdtsc
rdtsc
mov edi, 0x5d29f41c
not bl
add ah, ah
neg edx
jmp 0x556c2c
cld
and di, dx
std
cld
push dword [esp + 0x10]
mov dword [esp + 0x10], ebp
jmp 0x556c06
cpuid
not al
setg ch
lea esp, [esp + 0x10]
mov edi, edx
mov word [esp + 3], bx
jmp 0x556c5d
mov dword [esp + 2], ebx
clc
mov byte [esp + 8], bh
mov dword [esp + 0xc], edi
mov bp, 0xe427
bsf cx, sp
jmp 0x556c1c
mov dx, cx
mov ax, word [esp + 5]
pop word [esp]
mov dword [esp], eax
mov ebx, dword [esp + 2]
xchg bl, al
jmp 0x556c9d
mov bp, word [esp + 5]
xchg dword [esp], edi
not ax
cmp edx, 0x79c0d6a6
sub esp, 0xb
btc si, bp
jmp 0x556b9d
lea edx, reloc.MSVCRT.dll_strncpy
rdtsc
pop cx
std
mov byte [esp], bl
rcl cx, cl
jmp 0x556e6c
pushfd
push word [esp + 2]
xchg bh, dh
xchg byte [esp + 3], al
mov edx, 0xbc3ea1f9
rdtsc
jmp 0x556c80
shr dl, 6
mov bp, 0x27f8
and ah, 0x6a
xchg byte [esp], bl
mov bp, word [esp + 2]
lea esi, reloc.MSVCRT.dll_strncpy
popal
mov word [esp + 0xb], dx
jmp 0x556a4d