Function at 0x479840
Capabilities:
Execute anti-debugging instructions

Disassembly:
push eax
push edx
pushal
pushal
popal
push eax
push edx
rdtsc
pop edx
pop eax
push eax
push edx
rdtsc
pop edx
pop eax
popal
jmp 0x44e08b
rdtsc
je 0x44e095
push eax
pop eax
pop edx
pop eax
push ebp
mov ebp, esp
add ebp, 4
sub esp, 4
mov dword [esp], edi
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
mov ecx, 4
push eax
push edx
mov edx, 0x1f6e2400
mov eax, 0x65b5133c
xor eax, edx
pop edx
shr eax, 5
or eax, 0x3eff0582
xor eax, 0x5184c39b
add ebp, 0x5bb7f5e2
sub ebp, eax
sub ebp, 0x5bb7f5e2
pop eax
add ebp, 0x56f73eb8
sub ebp, ecx
sub ebp, 0x56f73eb8
add ebp, 0x6e7b1e20
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], eax
push 0x1613da6e
mov dword [esp], ebx
push eax
mov eax, 0x735fd401
mov dword [esp + 4], eax
pop eax
shl dword [esp], 4
shl dword [esp], 3
shl dword [esp], 4
shl dword [esp], 5
sub dword [esp], 0x950266ee
shr dword [esp], 8
xchg dword [esp], eax
xor eax, ebp
xor ebp, eax
xor eax, ebp
xchg ebp, edi
xchg edi, esi
not esi
xchg edi, esi
xchg ebp, edi
xchg ebp, eax
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
push edi
mov edi, 0x6fd6ce67
and dword [esp + 4], edi
pop edi
sub dword [esp], 0x52ea8431
push eax
mov eax, 0xefa279eb
add dword [esp + 4], 0x37dd9fdc
add dword [esp + 4], eax
push edx
push ecx
mov ecx, 0x7fed65b4
mov edx, 0xb7f03a28
add edx, ecx
pop ecx
sub dword [esp + 8], edx
pop edx
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
mov dword [esp], ecx
sub esp, 4
mov dword [esp], eax
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop eax
push esi
mov esi, 0x76f1c2f6
or esi, 0x7ffe8e79
inc esi
sub esi, 0x7ef75f79
inc esi
add esi, 0x7e57759d
push edx
mov edx, 0x2ffed99c
add edx, 0x5be866e5
and edx, 0x2bf68444
not edx
sub edx, 0xf419fffe
sub esi, edx
pop edx
push 0x666eb405
mov dword [esp], edx
mov edx, 0x4cb923b9
sub edx, 1
xor edx, 0x324e1f29
or esi, edx
mov edx, dword [esp]
add esp, 4
dec esi
inc esi
push edx
push esi
mov esi, 0x7ff7dfb7
mov edx, esi
pop esi
neg edx
or edx, 0x62ff1c72
sub edx, 0x7f5fc231
shr edx, 5
sub edx, 0x831cf983
add esi, edx
mov edx, dword [esp]
add esp, 4
add eax, esi
pop esi
push ecx
mov ecx, 4
sub eax, ecx
mov ecx, dword [esp]
add esp, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], edx
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
sub ebx, ebp
pop ebp
xchg dword [esp], ebx
pop esp
mov dword [esp], edi
mov dword [esp], 0x7ebe00b1
push eax
push edi
mov edi, 0x77776fd9
push eax
push ebx
mov ebx, 0x393cd0e4
mov eax, ebx
pop ebx
xor eax, 0x46cbe4e6
and edi, eax
mov eax, dword [esp]
add esp, 4
push ecx
mov ecx, 0x57ff2483
sub edi, ecx
pop ecx
shr edi, 2
shl edi, 2
xor edi, 0x5e5fc485
push edx
mov edx, 0x3cbb14c5
add edi, edx
pop edx
push 0x49990d80
mov dword [esp], ebp
push esi
push 0x6d5b9f20
pop esi
not esi
sub esi, 0x3bff53e1
sub esi, 0xf935cc56
mov ebp, esi
pop esi
shl ebp, 5
push 0
add dword [esp], 0x3ff70d42
sub dword [esp], ebp
sub dword [esp], 0x3ff70d42
pop ebp
inc ebp
or ebp, 0x79d321e2
push ebx
mov ebx, 0x7006347
add ebp, ebx
pop ebx
sub edi, ebp
pop ebp
mov eax, edi
pop edi
add dword [esp + 4], eax
pop eax
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edx
mov dword [esp], 0x6a379fde
sub dword [esp], 0xffffffff
inc dword [esp]
add dword [esp], 0x4bd7b018
not dword [esp]
push ebx
mov dword [esp], ecx
mov ecx, 0x35eebe15
add dword [esp + 4], ecx
pop ecx
add dword [esp], 0x7ff79079
shr dword [esp], 5
push eax
push edi
push ebp
mov ebp, 0x73bffb8b
mov edi, 0x4491e329
xor edi, ebp
pop ebp
mov eax, edi
pop edi
push edi
mov edi, 0xd7a9d6b
dec edi
neg edi
push edx
mov edx, 0x3a99fca1
add edi, 0x7fbf178a
sub edi, edx
push ebp
mov ebp, 0x3efb925a
xor ebp, 0x414485d0
sub edi, ebp
pop ebp
pop edx
shl edi, 3
add edi, 0xbed988af
xor eax, edi
pop edi
xor eax, 0x76efbdde
sub eax, 0xffffffff
shl eax, 6
sub eax, 0x19e2c7d2
sub dword [esp + 4], eax
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
push edx
mov dword [esp], 0x5f3f1aac
push ebx
mov ebx, 0x5ee30f82
xor dword [esp + 4], ebx
pop ebx
sub dword [esp], 0x83e4443d
push ebx
push edx
mov edx, 0x7ffdd928
or edx, 0x4a9d5a18
not edx
push ecx
mov ecx, 0x7f786afd
or ecx, 0x77e9ebfc
neg ecx
dec ecx
xor ecx, 0x80061403
add edx, ecx
pop ecx
sub edx, 0x800224c7
mov ebx, edx
mov edx, dword [esp]
add esp, 4
push ecx
mov dword [esp], ebp
mov ebp, 0x7af6f865
push ecx
mov ecx, 0x6f3a7d71
sub dword [esp + 0xc], ecx
pop ecx
sub dword [esp + 8], ebp
add dword [esp + 8], 0x6f3a7d71
mov ebp, dword [esp]
add esp, 4
sub dword [esp + 4], ebx
add dword [esp + 4], 0x7af6f865
pop ebx
add dword [esp], 0x7ffc99e5
add dword [esp], 1
xor dword [esp], 0xe7de19ce
mov dword [esp], ebp
push edi
mov dword [esp], ecx
mov dword [esp], 0x7b7e1103
not dword [esp]
shl dword [esp], 1
xchg dword [esp], esi
neg esi
xchg dword [esp], esi
add dword [esp], 1
inc dword [esp]
push 0x7b8cc5ec
mov dword [esp], eax
mov dword [esp], 0x595eeb00
mov dword [esp], ebx
mov ebx, 0xad17924e
xor dword [esp + 4], ebx
pop ebx
or dword [esp], 0x6eff6faf
shr dword [esp], 1
push ebp
mov dword [esp], edx
mov edx, 0x1fd962f2
sub dword [esp + 4], edx
pop edx
push esi
mov dword [esp], ebp
mov ebp, 0x55ee728e
and dword [esp + 4], ebp
pop ebp
not dword [esp]
add dword [esp], 1
push ebx
push 0xa5ebd4e7
pop ebx
xor dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
mov dword [esp], esi
push esi
mov dword [esp], ecx
push esi
mov dword [esp], edx
mov dword [esp], 0x6bee887e
neg dword [esp]
sub dword [esp], 0x547b93d0
push esp
pop dword [esp]
push 0x1eda72ca
mov dword [esp], edi
mov edi, 4
add dword [esp + 4], 0x5cfffa14
add dword [esp + 4], edi
sub dword [esp + 4], 0x5cfffa14
mov edi, dword [esp]
add esp, 4
pop ecx
add ecx, 4
push ebx
push eax
mov eax, 0x3eed9ff6
mov ebx, eax
pop eax
push edx
mov edx, 0x79efeb1a
add edx, 0x7fef6db9
not edx
add edx, 0x7caee800
not edx
and edx, 0x56efc770
sub edx, 0xd4207528
xor ebx, edx
pop edx
dec ebx
xor ebx, 0x411254d9
sub ecx, ebx
pop ebx
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
mov dword [esp], 0x3519aacd
mov dword [esp], edi
call fcn.0044e59b
and al, 0x8b
sbb al, 0x24
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov eax, dword [esp]
push edx
push esp
mov edx, dword [esp]
add esp, 4
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
jmp 0x44e069