Function at 0x44ca55
Capabilities:
Execute anti-debugging instructions

Disassembly:
add eax, ecx
jmp 0x4faaa7
jmp 0x6e9b14
adc ebx, edx
jmp 0x5c4df7
cpuid
jmp 0x538f73
jmp 0x6eded0
jmp 0x5750f3
rdtsc
jmp 0x575147
jmp 0x5bebfd
jmp 0x575833
cpuid
jmp 0x5758d8
jmp 0x67bcb3
jmp 0x57e5e7
cpuid
jmp 0x57e647
jmp 0x5de463
add ecx, 1
jmp 0x585188
adc edx, 0
jmp 0x4298db
jmp 0x59e03c
pop esp
jmp 0x59e0c0
push dword [ebp - 8]
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
add ecx, edx
mov edx, dword [esp]
add esp, 4
xchg dword [esp], ecx
jmp 0x59df95
jmp 0x5fa13d
jmp 0x5a22c3
pop dword [esp]
pop esp
mov dword [esp], ebx
jmp 0x5a22f2
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
mov ecx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x5a21b7
jmp 0x6ea236
jmp 0x5aef88
push edi
mov dword [esp], 0x23dfecb4
push esp
pop dword [esp]
push ebp
mov ebp, 4
add dword [esp + 4], ebp
pop ebp
pop ebp
jmp 0x5aefa5
jmp 0x5b0e85
jmp 0x5b0ee5
push edx
mov edx, esp
add edx, 4
sub edx, 0x14
push ebp
mov dword [esp], 0x1e43f77e
mov dword [esp], edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
jmp 0x5b0fbf
jmp 0x5a21b2
jmp 0x5b22bb
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x5b2377
push dword [ebp - 0x10]
mov edx, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
jmp 0x5b225d
jmp 0x5b9bd6
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x5b280d
jmp 0x5b3b04
jmp 0x5b2bcb
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x5b2c37
push ecx
mov dword [esp], 0
push dword [esp]
jmp 0x5b2bb2
jmp 0x538e85
jmp 0x5b3bba
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x5b3c08
push dword [ebp - 4]
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
jmp 0x5b3b53
jmp 0x5c3e49
jmp 0x5b776b
ret
jmp 0x5b8f60
push ebx
mov dword [esp], edx
push esp
pop edx
add edx, 4
sub edx, 4
jmp 0x5b8fd5
xchg dword [esp], edx
pop esp
mov dword [esp], edx
pop dword [ebp - 0x10]
jmp 0x5b8fe4
jmp 0x5b2b04
jmp 0x5b9be3
push ebx
pop ecx
pop ebx
jmp 0x5b9d03
xor ecx, ebx
xor ebx, ecx
xor ecx, ebx
not ebx
push ebp
mov ebp, esp
add ebp, 4
jmp 0x5b9c95
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
jmp 0x5b9bdb
jmp 0x5b9efe
jmp 0x5b9f58
sub esp, 4
mov dword [esp], ebx
mov dword [esp], edx
xchg dword [esp], edx
xchg edx, ebx
not ebx
xchg edx, ebx
xchg dword [esp], edx
pop edx
jmp 0x5b9ff4
jmp 0x585180
jmp 0x5ba9d9
sub edi, 0x7effe7c8
xor edi, 0xa1002b7c
add ecx, edi
pop edi
push edx
mov edx, 4
add ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
jmp 0x5ba9f9
shr edi, 2
and edi, 0x3f6d97f5
jns 0x5ba88a
jmp 0x5ba9d9
push dword [esp]
pop edx
push ecx
mov ecx, esp
push edi
mov edi, 0x7de612de
or edi, 0x6df3a2e8
neg edi
jnp 0x5ba8ab
jmp 0x5ba9d9
jmp 0x5dd605
push esi
mov esi, esp
add esi, 4
push ebp
mov ebp, 0x7ff7192e
add ebp, 0x8008e6d6
sub esi, ebp
pop ebp
xchg dword [esp], esi
pop esp
mov dword [esp], edx
mov dword [esp], eax
pop dword [ebp - 0x14]
jmp 0x5bed39
jmp 0x5b8ebb
jmp 0x5c3e93
leave
jmp 0x5c3f32
jmp 0x5b7673
push eax
mov eax, esp
push esi
mov esi, 0x4d775e3a
or esi, 0x65b39cef
ja 0x5c4f74
jmp 0x5c4ec2
push edx
mov dword [esp], esi
mov dword [esp], ebx
push dword [esp]
pop eax
add esp, 4
push ecx
mov dword [esp], 0x5237e40c
mov dword [esp], eax
push dword [esp]
pop eax
add esp, 4
sub esp, 4
mov dword [esp], ecx
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
push eax
push dword [esp]
pop eax
push 0x418c2695
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x5c4e6e
push edi
mov dword [esp], ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
push ebx
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x5c4ec2
sub edi, 0x77bfd544
sub edi, 0xd8352350
add esi, edi
pop edi
add eax, esi
pop esi
sub eax, 4
jmp 0x5c4f65
push edi
mov edi, 0x7ed6b791
shr edi, 1
jp 0x5c4e6e
jmp 0x5c4ec2
xor esi, 0x6f7643c4
js 0x5c4e11
jmp 0x5c4ede
xchg dword [esp], eax
pop esp
mov dword [esp], eax
pop dword [ebp - 4]
jmp 0x5c4f87
inc esi
or esi, 0x37be8415
dec esi
jnp 0x5c4f65
jmp 0x5c4f54
jmp 0x5ba885
jmp 0x5dd70c
pop ebx
xchg dword [esp], edi
pop esp
jmp 0x5dd73e
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
push 0x746638d0
mov dword [esp], ebx
mov ebx, 0x563d02f3
add ebx, 0xa9c2fd11
sub edi, 0x7f93568b
add edi, ebx
add edi, 0x7f93568b
jmp 0x5dd655
jmp 0x5b26e9
jmp 0x5de575
rdtsc
jmp 0x5de57c
jmp 0x67a536
jmp 0x5f2e57
push dword [ebp - 0xc]
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push esi
jmp 0x5f2f2a
mov esi, 4
add ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
jmp 0x5f2f3b
jmp 0x59df90
push dword [ebp - 0x14]
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
jmp 0x5fa24d
add esp, 4
jmp 0x5fa258
jmp 0x5b2258
jmp 0x62b14f
push edx
push ebp
mov ebp, 0x6dfc5134
mov dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp], edx
pop dword [ebp - 8]
jmp 0x62b1be
jmp 0x5f2e11
jmp 0x67a593
push eax
mov dword [esp], 0x96539a1
mov dword [esp], ebp
mov dword [esp], edi
mov dword [esp], eax
pop dword [ebp - 0xc]
jmp 0x67a655
jmp 0x62b093
jmp 0x67afd2
mov dword [esp], edx
jmp 0x67b08e
push 0x2adee6fb
mov dword [esp], ecx
mov dword [esp], 0x65a70d74
mov dword [esp], eax
mov dword [esp], esi
jmp 0x67af68
jmp 0x575041
jmp 0x67bd0f
push edx
sub esp, 4
mov dword [esp], ebx
mov ebx, 0
jmp 0x67bd23
mov dword [esp + 4], ebx
pop ebx
mov eax, dword [esp]
add esp, 4
jmp 0x67bdf3
jmp 0x6d46bd
jmp 0x680a21
push esi
mov dword [esp], edi
mov dword [esp], 0
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x680a47
jmp 0x57e548
cpuid
jmp 0x6d47c4
jmp 0x680916
push eax
mov eax, esp
push edi
mov edi, 4
sub eax, 0x5c9b2b92
add eax, edi
add eax, 0x5c9b2b92
pop edi
push edx
mov edx, 4
sub eax, edx
pop edx
xchg dword [esp], eax
pop esp
mov dword [esp], ebp
jmp 0x6e9c54
jmp 0x5aee7b
jmp 0x6ea33e
pop esi
mov dword [esp], ecx
jmp 0x6ea356
push 0xe7548f0
mov dword [esp], eax
push esi
push 0x3725ca9d
pop esi
mov dword [esp + 4], esi
jmp 0x6ea2dc
jmp 0x67af63
push edi
mov dword [esp], ebp
mov ebp, 0x7f9a4c62
sub ebp, 0x1f6ea31e
jno 0x6ee02e
jmp 0x6edeea
push edi
push esp
mov edi, dword [esp]
add esp, 4
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
pop ebx
push ebx
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push ebx
mov dword [esp], edx
mov dword [esp], 0x7e6afb78
mov dword [esp], ecx
mov edx, dword [esp]
add esp, 4
jmp 0x6edf9b
add ebp, 0xf84f0583
mov eax, ebp
mov ebp, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
jmp 0x6edfb4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x6ee048
push 0x3430dc72
mov dword [esp], ebx
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push edi
mov dword [esp], 0x1b54240f
mov dword [esp], esi
mov dword [esp], 0x667b2e15
mov dword [esp], ebx
pop eax
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
mov dword [esp], ebx
mov ebx, dword [esp]
add esp, 4
jmp 0x6eded0
xor ebp, 0x67be2c6e
jns 0x6edf9b
jmp 0x6edfc3
sub ebp, 0xffffffff
sub ebp, 0x7e1b301a
add ebp, 0x7dfe5ce8
js 0x6edeea
jmp 0x6ee01d
jmp 0x5757d0