Function at 0x464456
Capabilities:
Execute anti-debugging instructions

Disassembly:
lea esp, [esp + 0x25]
pushal
lea esp, [esp + 3]
mov dword [esp + 0x8c], edi
jmp 0x464476
pop word [esp + 5]
jmp 0x46443f
inc edi
mov dx, bx
xchg ah, bl
jmp 0x464602
lea esp, [esp + 0x8c]
pushfd
rcl ax, cl
jb 0x46445d
jae 0x4644a4
push 0
jmp 0x4644af
call 0x46448e
jmp 0x466267
inc edi
mov dx, bx
xchg ah, bl
jmp 0x464602
call 0x4644b4
jmp 0x466215
je fcn.004644f1
jne fcn.004644f1
mov ebp, esp
mov ax, bx
lea eax, [edi + ebp]
mov bx, word [esp]
clc
jmp 0x4644d2
rdtsc
rdtsc
xchg ecx, ebp
cpuid
sub esp, 0xc0
jmp 0x46454a
xchg ebp, edx
mov bl, byte [esp]
lea esi, [esp]
jmp 0x46457a
rdtsc
jmp 0x4645a2
mov edi, dword [esp + 0x28]
sub cx, 0x4078
js 0x4645bd
rdtsc
xchg ebp, edx
mov bl, byte [esp]
jmp 0x4645a7
test eax, eax
jmp 0x4661fe
je 0x464485
jne 0x466223
xchg edx, eax
push ss
test bl, ah
push ds
stosb byte es:[edi], al
add byte [ebx + 0x3e8d7e1b], cl
scasb al, byte es:[edi]
mov ecx, 0x1c2d5898
and eax, dword [edx]
add edi, edi
nop
enter 0xd6, 3
pop eax
sub eax, 0x302231c
call dword [eax + 0x300d6c8]
jmp 0x4661dc
call 0x466235
aas
aas
xor al, byte [eax + 0x59]
inc ecx
push eax
inc ecx
pop eax
dec ecx
inc eax
pop edx
add bl, ch
dec ecx
jg 0x466229
mov bh, byte [ecx + 0x30]
fist dword [eax - 0x3a]
mov eax, dword [reloc.USER32.dll_MessageBoxA]
das
and dword ss:[ebx - reloc.USER32.dll_MessageBoxA], ecx
leave
loope 0x46624f
invalid
dec dword [ecx + reloc.USER32.dll_MessageBoxA]
adc cl, ch
mov dword [reloc.USER32.dll_MessageBoxA], eax
push 0xffffffffffffffe2
jo 0x466278
mov dword [ecx + reloc.USER32.dll_MessageBoxA], eax
jmp 0x4662ff
loop 0x4662b7
mov dword [reloc.USER32.dll_MessageBoxA], eax
pop ecx
sub ecx, 0x1000e5d2
jmp 0x466251
sal byte [ebp + 0x2889f744], cl
dec ebx
loop 0x4662d1
call fcn.0045b3a6
jmp 0x464489
jmp 0x466368
mov dword [esp + 0x28], eax
jmp 0x466395
add byte [eax], al
add al, ch
add byte [eax], al
add byte [eax], al
call 0x4662bf
jmp 0x466310
push 0
jmp 0x4662d6
add byte [eax], al
add bl, ch
fsubp st(0)
add byte [eax], al
add byte [eax], al
call 0x4662db
jmp 0x466576
je 0x46636c
jne 0x466c7d
call 0x4662f9
jmp 0x466382
movzx ebx, byte [eax]
add ebx, 0x23c666f7
cmp ebx, 0x23c667c3
jmp 0x4662e8
pop eax
sub eax, 0x59af4041
jmp 0x46633e
test eax, eax
jmp 0x466478
jne 0x466295
pushal
jmp 0x4662ba
call 0x46634e
dec ebp
push ebx
push esi
inc ebx
push edx
push esp
insb byte es:[edi], dx
insb byte es:[edi], dx
add bl, ch
enter 0x6a, 0xffffffffffffffe9
push ss
add dword [eax], eax
add byte [ecx], bh
sbb byte [eax - 0x72fedb9c], cl
mov byte [esp + 1], ah
lea esp, [esp + 4]
cmp dword [esp + 4], 0
jmp 0x466332
inc dword [esp + 8]
popfd
jmp 0x4663b7
pop ecx
sub ecx, 0x1001043d
mov dword [ecx + reloc.USER32.dll_MessageBoxA], eax
jmp 0x4663c0
popal
call 0x46639c
mov eax, dword [reloc.USER32.dll_MessageBoxA]
add byte [ebp - 0x3cfbdb9c], cl
mov dword [esp + 0x28], eax
jmp 0x46653b
ret 4
movzx ebx, byte [eax]
jmp 0x4663de
add ebx, 0x93b6761b
cmp ebx, 0x93b676e7
je 0x466448
jne 0x46629a
call fcn.00466441
call 0x4663fc
jmp 0x4666bd
call 0x466420
pop edi
js 0x466476
jo 0x46648a
pop edi
push 0x6c646e61
jb 0x466452
add byte [eax - 0x18], dl
or byte [edi - 1], 0xff
jmp 0x4662f4
add al, 0xeb
pop edi
mov dword [esp + 0x28], eax
jmp 0x466603
add byte [eax], al
mov dword [esp + 0x28], eax
jmp 0x466a24
add byte [esi], bh
je 0x4662c1
jne 0x46640a
pop eax
sub eax, 0xfbd339b7
jmp 0x46648d
retf
call 0x46649f
dec ecx
push eax
dec eax
dec esp
push eax
inc ecx
push eax
dec ecx
inc esp
dec esp
dec esp
add bl, ch
cmp dword [edx], ebp
push 0
jmp 0x4667e2
popal
pushal
mov al, ah
popal
push esp
jmp 0x466560
mov dword [esp], eax
call 0x4665b2
pop eax
sub eax, 0x7920b79b
call dword [eax + 0x791f4d20]
jmp 0x46631e
popal
pushal
mov edx, 0xe7acb1a6
mov esi, dword [esp]
lea esp, [esp + 1]
lea esp, [esp + 2]
call fcn.00466912
setne al
lea eax, [edi*4]
bswap eax
mov eax, dword [esp]
push esp
jmp 0x4666a6
popfd
ret
call 0x4667e7
jmp 0x466f34
lea esp, [esp + 4]
ret
popal
popfd
jmp 0x466966
mov dword [esp + 0x24], eax
popal
jmp 0x466707
call dword [eax + 0x62f2a7a9]
jmp 0x466f61
pop eax
sub eax, 0x62f41730
jmp 0x466f1d
insb byte es:[edi], dx
test eax, eax
je 0x4664a1
jne 0x466f6f
scasd eax, dword es:[edi]
mov dh, 0xa1
loopne 0x466f58
call 0x466f81
pop edi
or eax, 0x5f000000
popal
push 0x75
jae 0x466fef
pop edi
imul si, word fs:[esi], 0xeb50
bound ecx, qword [ebp + 0x66012464]
mov dword [esp], edx
push word [esp + 2]
jmp 0x466fc8
lea esp, [esp + 1]
mov dword [esp], eax
call fcn.00466fa2
lodsd eax, dword [esi]
sub bh, byte [eax - 0x3216d521]
dec edi
fistp qword [edx - 0x629d1cb7]
in al, dx
inc esi
jno 0x466fcf
mov ebx, 0xe8ffff43
xchg esp, eax
invalid
inc dword [ebx + reloc.USER32.dll_MessageBoxA]