Function at 0x4b1e7a
Capabilities:
Execute anti-debugging instructions

Disassembly:
sbb byte [ebp + esi + 0x5a], dl
salc
popal
int 0xba
xchg ebx, eax
jb 0x4b1c5f
add byte [ecx + 0x2b103df2], 0x37
mov ebx, 0x9803c6be
xor ebx, 0x4ce862f6
popal
nop dword [eax]
nop dword [eax]
pushal
mov eax, 0xc6323699
xor esi, eax
xor esi, 0x62b1ee89
popal
nop dword [eax]
pushal
mov ecx, 0x17968c37
xor ecx, 0x90e05e67
mov eax, 0x4a1dbfff
xor eax, 0xe6914238
mov edx, 0x6bb795a2
xor edx, 0xe50d9f0b
mov ebx, 0x81812143
xor ebx, 0x3665bbc3
popal
nop dword [eax]
sbb eax, 0x4238354a
xchg ecx, eax
out 0xba, al
mov byte [0x816bb795], al
or ebx, dword [edi + 0x43bbe50d]
and dword [ecx - 0x3c0c7e7f], eax
mov ebx, 0xf613665
pop ds
add byte [eax], 0
add byte [eax], al
nop dword [eax]
pushal
mov eax, 0xafaf8dfc
xor esi, eax
xor esi, 0x4c23119c
popal
nop dword [eax]
pushal
mov ecx, 0xc56ce3d5
xor ecx, 0x7a517e55
mov eax, 0x2f4254e8
xor eax, 0x901b09f6
mov edx, 0x44ffa7a1
xor edx, 0xbe4979d9
mov ebx, 0x5abcfa59
xor ebx, 0xd406cc92
popal
nop dword [eax]
nop dword [eax]
pushal
mov eax, 0x88f7a31a
xor esi, eax
xor esi, 0x3ddc4333
popal
nop dword [eax]
pushal
mov ecx, 0x9eb4f9b8
xor ecx, 0x53999433
mov eax, 0x87e306b
xor eax, 0xa4f1b415
mov edx, 0x1e3b864e
xor edx, 0xd32c59b6
mov ebx, 0x6f9fdbef
fistp dword [edi + 0x2ff3816f]
bound ebp, qword [ebx]
mov ecx, 0x801f0f61
add byte [eax], al
add byte [eax], al
nop dword [eax]
pushal
mov eax, 0x6e0fffd0
xor esi, eax
xor esi, 0xe759d208
popal
nop dword [eax]
pushal
mov ecx, 0x83cd5288
xor ecx, 0x38b1eec1
mov eax, 0xb207fb53
xor eax, 0x4e7b7a62
mov edx, 0xc7c54e0c
xor edx, 0x7ca9e88d
mov ebx, 0xf5f3bac5
xor ebx, 0x92673e65
popal
nop dword [eax]
nop dword [eax]
pushal
mov eax, 0x4756f65e
xor esi, eax
xor esi, 0xc0a0c6de
popal
nop dword [eax]
pushal
mov ecx, 0x5d144910
xor ecx, 0xdab7fdd4
mov eax, 0xcb376407
xor eax, 0x67aae7b1
mov edx, 0xe0f4b831
xor edx, 0x95e58d52
mov ebx, 0xf2f60fc
xor ebx, 0xaba2e3e9
popal
nop dword [eax]
nop dword [eax]
pushal
mov eax, 0xf52e6d53
xor esi, eax
xor esi, 0xaa13098c
popal
nop dword [eax]
pushal
mov ecx, 0x467747cc
xor ecx, 0xbfc11b76
mov eax, 0x74b1f097
xor eax, 0xedfbc117
mov edx, 0x8a6f4350
xor edx, 0x3f53ddd0
mov ebx, 0xb89dafff
xor ebx, 0x551133a9
popal
nop dword [eax]
nop dword [eax]
pushal
mov eax, 0xce673eca
xor esi, eax
xor esi, 0x834bd94a
popal
nop dword [eax]
pushal
mov ecx, 0xfc95acf4
xor ecx, 0x99092bfd
mov eax, 0x898893ab
xor eax, 0x2d265dd
mov edx, 0x9f45e65d
xor edx, 0x189bf17e
mov ebx, 0xcd808f1e
xor ebx, 0x69f40f9e
popal
nop dword [eax]
nop dword [eax]
pushal
mov eax, 0xe33de1d7
xor esi, eax
xor esi, 0x98227c57
not byte [edi + 0x7c]
and bl, byte [eax - 0x7fe0f09f]
add byte [eax], al
add byte [eax], al
pushal
mov ecx, 0x116c4e90
xor ecx, 0x7e2187fa
mov eax, 0xf777931b
xor eax, 0xac5b1074
mov edx, 0x48ce941e
xor edx, 0xc2186323
mov ebx, 0x76fd04b5
xor ebx, 0xf046d6ee
popal
nop dword [eax]
nop dword [eax]
pushal
mov eax, 0x8cc69056
xor esi, eax
xor esi, 0x41ab2c8e
popal
nop dword [eax]
pushal
mov ecx, 0xbf4ee473
xor ecx, 0x975d2d85
mov eax, 0x10a70129
xor eax, 0xc58b9ba9
mov edx, 0x3ed56de2
xor edx, 0xdb552a6a
mov ebx, 0x9039c6a2
xor ebx, 0x9839723
popal
nop dword [eax]
nop dword [eax]
pushal
mov eax, 0xa5f7195b
xor esi, eax
xor esi, 0x1f40e9dc
popal
nop dword [eax]
pushal
mov ecx, 0xd4258786
xor ecx, 0x70a542a7
mov eax, 0xba30c8e7
xor eax, 0x6f15651f
mov edx, 0xe85f38c0
xor edx, 0x84d2b7ce
mov ebx, 0xfe1c8b79
xor ebx, 0xb30127b1
popal
nop dword [eax]
nop dword [eax]
pushal
mov eax, 0x4f80e11a
xor esi, eax
xor esi, 0xc8cab4c4
popal
nop dword [eax]
pushal
mov ecx, 0x7daf50fc
xor ecx, 0x3293eb77
mov eax, 0xcf076db4
xor eax, 0x83ec082d
mov edx, 0xfd35de43
xor edx, 0x99b59ad6
mov ebx, 0x12ff6b56
xor ebx, 0xc7e4078e
popal
nop dword [eax]
nop dword [eax]
pushal
mov eax, 0x412ddb39
xor esi, eax
xor esi, 0xdda03d1f
popal
nop dword [eax]
pushal
mov ecx, 0x9284daca
xor ecx, 0xbdae5ea
mov eax, 0xa84e666b
xor eax, 0x21983899
mov edx, 0xd67cd643
xor edx, 0x43320c84
mov ebx, 0xbc7bdebc
xor ebx, 0x7160793d
popal
nop dword [eax]
nop dword [eax]
pushal
mov eax, 0xeab6845d
xor esi, eax
xor esi, 0x8b83ec48
popal
nop dword [eax]
pushal
mov ecx, 0x4cdbe80
xor ecx, 0xf54d2301
mov eax, 0x91c0a6a6
xor eax, 0xb0a75ae
mov edx, 0xbffb4c39
xor edx, 0x39451e71
mov ebx, 0xd5b89ef2
xor ebx, 0x8a9d3b2a
popal
nop dword [eax]
nop dword [eax]
pushal
mov eax, 0x3e70ed5
xor esi, eax
xor esi, 0xa05a8f55
popal
nop dword [eax]
pushal
mov ecx, 0x19a4618d
xor ecx, 0xce9534f6
mov eax, 0x47df0724
xor eax, 0xe4528eb7
mov edx, 0x99372aef
xor edx, 0x1271b930
mov ebx, 0x7f26f128
xor ebx, 0xf870c1a8
popal
nop dword [eax]
nop dword [eax]
pushal
mov eax, 0xad61983b
xor esi, eax
xor esi, 0x26ab6a73
popal
nop dword [eax]
pushal
mov ecx, 0xc31eeaf4
xor ecx, 0xb39e512c
mov eax, 0x2ce824cd
xor eax, 0xc95ba3d6
mov edx, 0x42a57785
xor edx, 0xf7952dbd
mov ebx, 0x9408aff5
xor ebx, 0xd5283a0
popal
nop dword [eax]
nop dword [eax]
pushal
mov eax, 0xc2371fd8
xor esi, eax
xor esi, 0x3b80f059
popal
nop dword [eax]
pushal
mov ecx, 0xd7f47291
xor ecx, 0x514a7bef
mov eax, 0x62f1828
xor eax, 0xa2a29bd2
mov edx, 0x1bec6c53
xor edx, 0xd0d1088b
mov ebx, 0x4a1adc36
xor ebx, 0xe69a942c
popal
nop dword [eax]
nop dword [eax]
pushal
mov eax, 0x701acbd6
xor esi, eax
xor esi, 0xe9649e0f
popal
nop dword [eax]
pushal
mov ecx, 0xc172e88f
xor ecx, 0x3abcc018
mov eax, 0xefa15c50
xor eax, 0x507a12c9
mov edx, 0x56ae7ed
xor edx, 0xba4f8271
mov ebx, 0x339954a1
xor ebx, 0xd00cd84b
popal
nop dword [eax]
nop dword [eax]
pushal
mov eax, 0x4956a8cc
xor esi, eax
xor esi, 0xfe3b4504
popal
nop dword [eax]
pushal
mov ecx, 0x9aaec8a5
xor ecx, 0x1404d09b
mov eax, 0xc8e96e46
xor eax, 0x4233407e
mov edx, 0xdea6c0fe
xor edx, 0x57f09337
mov ebx, 0xcd530e1
xor ebx, 0xa948b162
popal
nop dword [eax]
nop dword [eax]
pushal
mov eax, 0x229ebc82
xor esi, eax
xor esi, 0xa7c50cc3
popal
nop dword [eax]
pushal
mov ecx, 0x443771c9
xor ecx, 0xfc388960
mov eax, 0xc5cd5676
xor eax, 0x56f1f886
mov edx, 0x53e2f234
xor edx, 0x8a43a9ca
mov ebx, 0xf1f8a56f
xor ebx, 0x52d15da7
popal
nop dword [eax]
nop dword [eax]
pushal
mov eax, 0x7b5f827
xor esi, eax
xor esi, 0xbc9a983e
popal
nop dword [eax]
pushal
mov ecx, 0x35f0a4d0
invalid
xor eax, 0x23dff181
sar byte fs:[eax + 0x4badf789], cl
xor eax, 0x92920a
mov edx, 0x9d061442
xor edx, 0x164fe7ec
mov ebx, 0xcb348425
xor ebx, 0x448a8d8d
popal
nop dword [eax]
nop dword [eax]
pushal
mov eax, 0xe557f406
xor esi, eax
xor esi, 0x5ea1c47c
popal
jmp 0x647118
add dl, byte [edx + 0x1bf0016]
add byte [eax], al
add cl, ch
mov ebp, 0x66001ba8
mov ecx, dword [eax]
mov ebx, 1
jmp 0x609798
test bl, 8
jmp 0x60ee4b
sub eax, eax
test edx, ebx
push esi
clc
cmc
test bl, 0x10
je 0x4edb2d
invalid
invalid
push 1
stc
pop eax
cmp esp, 0x49b7992
jmp 0x4edb2d
fstp dword [eax]
add al, ch
push ebx
aad 0xf8
invalid
push edx
jmp 0x5fa911
mov ecx, dword [esi + 0x6c]
not dl
rcr dh, cl
mov edx, dword [esi + 0x78]
test eax, ecx
imul ecx, dword [esi + 0x68]
cmp esi, 0x5692771e
test ah, ch
cmp eax, ebp
add ecx, edx
mov edx, dword [esi + 0xac]
mov byte [edx + ecx], bl
setnp dh
jmp 0x63c5eb
jne 0x622e71
mov ecx, dword [ebp - 4]
add ecx, 0x2a4
jmp 0x622e6c
je 0x5fa92e
mov ecx, dword [ebp - 4]
cmove edx, esp
cwd
xchg dh, dl
mov edx, dword [ecx + 0x28c]
jmp 0x5d97fb
jl 0x5dca78
inc ecx
cmp sp, 0x4450
mov edx, 0x10
cmc
sar edx, cl
jmp 0x5fe771
push edx
call dword [0x100e1340]
mov eax, dword [ebp - 4]
clc
stc
cmp dword [eax + 0x28c], 0
jmp 0x5e2e09
call dword [0x100e1344]
mov eax, dword [ebp - 4]
mov dword [eax + 0x28c], 0
sub ecx, 0x28684884
btc cx, si
mov ecx, dword [ebp - 4]
stc
xor edx, edx
cmp dword [ecx + 0x2a0], 0
mov dl, cl
sete dl
test edx, edx
jmp 0x5e2633
inc edx
mov dword [esi + 0x78], edx
jmp 0x4dbd2d
mov dword [esi + 0x64], ecx
jmp 0x4b1c0e
test ebx, eax
cmp dword [eax + 0x28c], 0
je 0x5f9706
push 0xffffffffffffffff
mov ecx, dword [ebp - 4]
movsx edx, si
mov edx, dword [ecx + 0x28c]
jmp 0x5f96ff
jne 0x60ee5d
add dword [esi + 0x68], edi
cmc
test dx, 0x6075
cmp ah, 0x2a
cmp ecx, 3
jmp 0x613a69
jne 0x613a75
add dword [esi + 0x68], 4
cmp esi, eax
cmp ecx, 4
jmp 0x661475
call fcn.004faf97
mov ecx, dword [ebp - 4]
jmp 0x4d0ead
mov edx, dword [esi + 0x78]
jmp 0x5fca09
add dword gs:[ecx - 0x2e], ecx
fcom qword [eax - 0x3b40f070]
rdtsc
cmp eax, ecx
jmp 0x50abc4
jne 0x661489
add dword [esi + 0x68], 2
shl dx, 0xd9
sbb dh, 0xfe
test ax, cx
mov edx, dword [esi + 0x68]
cmp edx, dword [esi + 0x58]
jmp 0x5f1646