Function at 0xf50e5b
Capabilities:
Execute anti-debugging instructions

Disassembly:
movzx ebx, byte [edi - 1]
jmp 0xf4f9f4
xchg cx, dx
jmp 0xf4fa43
mov ecx, 0x7dda95d6
setp dl
sub esp, 0x1f
jl 0xf4f9de
xchg cx, dx
lea esp, [esp + 3]
jmp 0xf4fa29
bsr dx, sp
neg ecx
stc
jmp 0xf4fa4e
lea esp, [esp + 3]
bsr dx, sp
neg ecx
stc
sub dl, 0xad
jmp 0xf4fa57
mov dx, word [esp]
mov dx, bp
not cl
sub bl, al
jb 0xf4fd32
jae 0xf4faba
call 0xf4fa6f
jmp 0xf50e2d
cmc
mov ecx, 0x7495fe1
jmp 0xf4fc8a
lea ecx, reloc.KERNEL32.dll_SetConsoleCtrlHandler
mov ecx, 0x163064c3
jmp 0xf4fc07
rol cx, 0xa
jp 0xf4faec
lea ecx, reloc.KERNEL32.dll_SetConsoleCtrlHandler
mov ecx, 0x163064c3
bswap ecx
bswap ecx
mov ch, 0x62
jmp 0xf4fbb1
sets cl
mov cl, byte [esp]
bswap ecx
jmp 0xf4fb4b
jmp 0xf4fb33
mov ecx, 0x1074558f
lea ecx, reloc.KERNEL32.dll_SetConsoleCtrlHandler
call fcn.00f4fbde
call 0xf4fb60
jmp 0xf50fa9
mov cx, word [esp]
mov cl, byte [esp]
add dl, 0xd7
or ecx, edx
jne 0xf4fb49
sets cl
mov cl, byte [esp]
bswap ecx
mov ecx, 0x1074558f
lea ecx, reloc.KERNEL32.dll_SetConsoleCtrlHandler
jmp 0xf4fb8d
add dl, 0x1c
mov cx, bx
mov cl, byte [esp]
clc
jmp 0xf4fcb5
bsf cx, ax
lea ecx, [edi + ebp]
rol dl, 0
mov ecx, 0x7ecad7a7
lea ecx, reloc.KERNEL32.dll_SetConsoleCtrlHandler
jmp 0xf4fb66
mov dword [esp + 0x28], eax
jmp 0xf50fd5
bswap ecx
bswap ecx
mov ch, 0x62
jmp 0xf4fbb1
call 0xf4fc4d
jmp 0xf51160
not ch
inc dl
btr cx, di
jmp 0xf4fd05
mov dl, bl
lea ecx, [ebx*4]
jmp 0xf4fb02
bsr cx, bx
lea ecx, [eax*4]
lea ecx, reloc.KERNEL32.dll_SetConsoleCtrlHandler
bts ecx, esi
dec ch
call fcn.00f4fce2
pop esp
scasd eax, dword es:[edi]
ja 0xf4fc6a
not ch
jmp 0xf4fc6c
not dl
bsf cx, bp
jmp 0xf4fec6
lea ecx, reloc.KERNEL32.dll_SetConsoleCtrlHandler
bts ecx, esi
dec ch
jmp 0xf4fcbb
ja 0xf4fc98
bsr cx, bx
lea ecx, [eax*4]
jmp 0xf4fcd1
call 0xf4fc35
mov ecx, dword [esp]
push cx
sub esp, 9
lea edx, [esp + ecx]
jmp 0xf4fd57
inc ecx
neg cx
lea esp, [esp + 1]
jmp 0xf4fd37
pop ecx
lea esp, [esp + 3]
lea esp, [esp + 4]
sub bl, 0xc9
mov ecx, 0x3719ebc8
jmp 0xf4fd8e
jmp 0xf4fd4d
pushal
xchg word [esp + 9], cx
jmp 0xf4fdb7
lea edx, [esi*4]
mov cx, word [esp]
mov ch, cl
rol cx, 9
jge 0xf4fd78
jl 0xf4fdab
stosd dword es:[edi], eax
cmp ebx, dword [esi - 0x53]
sbb ecx, dword [esi - 0x27]
pushal
xchg word [esp + 9], cx
jmp 0xf4fdb7
lea esp, [esp + 0x20]
xor bl, 0x82
mov dx, word [esp]
shl cx, cl
jae 0xf4fdf1
sub esp, 0x1f
jmp 0xf4fdf3
xchg ecx, edx
mov edx, esp
dec edi
sub esp, 0x15
jb 0xf4fd76
inc ecx
neg cx
lea esp, [esp + 1]
mov ecx, dword [esp]
push cx
jmp 0xf4fd3c
jmp 0xf4fe58
mov ecx, 0x7c8937d5
lea esp, [esp + 3]
jmp 0xf4fe64
jmp 0xf4fe3c
xchg byte [esp + 0x16], cl
push word [esp]
not dx
mov cl, 0xfe
jmp 0xf4fe26
seto cl
mov ch, cl
jmp 0xf4ffa5
lea esp, [esp + 3]
jmp 0xf4fe91
xchg dx, cx
sub esp, 0x1d
xchg ch, dl
jmp 0xf4fe00
sub esp, 0x1f
mov ecx, 0x7c8937d5
lea esp, [esp + 3]
rol bl, 0
js 0xf4fdfe
xchg dx, cx
sub esp, 0x1d
xchg ch, dl
xchg byte [esp + 0x16], cl
push word [esp]
jmp 0xf4fe08
bswap edx
bsf ecx, edi
lea edx, [ecx + ebp]
not ch
bsr edx, eax
call fcn.00f4feeb
cmp eax, 0x8de69f0c
and al, 0x38
lea esp, [esp + 0x38]
xor bl, 0x47
stc
jbe 0xf4fe7b
ja 0xf4fea5
or dl, byte [ecx + 0x55936001]
nop
adc ecx, dword [edi]
retf 0xbc0f
bswap edx
bsf ecx, edi
lea edx, [ecx + ebp]
jmp 0xf4ff03
jmp 0xf4ff6a
jg 0xf4ff9c
clc
mov ch, byte [esp]
jmp 0xf4fe1c
not ch
bsr edx, eax
jmp 0xf4feaf
mov dl, byte [esp]
bsr edx, esi
jmp 0xf4ffaf
add bl, 0xec
ror dx, cl
jp 0xf4ff44
mov dl, byte [esp]
call 0xf4ff7b
mov bl, 0x83
in al, dx
or dh, byte [ecx - 0x3d3e9906]
add ah, byte [esi - 0x79]
ror dword [ebp - reloc.KERNEL32.dll_SetConsoleCtrlHandler], 1
cld
add dword [eax], eax
add byte [ecx - 0x16dbdbbc], cl
jge 0xf4ffac
add byte [eax], al
stosb byte es:[edi], al
lds esi, [eax + edi*8 - 0x76]
sub al, 0x24
clc
mov ch, byte [esp]
seto cl
mov ch, cl
sub al, dl
lea edx, [esp + edi]
jmp 0xf4fdd5
invalid
neg dx
call fcn.00f50041
pop eax
sub eax, 0xd17ec081
jmp 0xf50e4b
call 0xf50e5b
dec ebp
push ebx
push esi
inc ebx
push edx
push esp
insb byte es:[edi], dx
insb byte es:[edi], dx
add bh, bh
nop
invalid
pop ecx
sub ecx, 0x10016fe8
mov dword [ecx + reloc.KERNEL32.dll_SetConsoleCtrlHandler], eax
jmp 0xf50ff6
popal
popfd
jmp 0xf5100c
movzx ebx, byte [eax]
jmp 0xf51011
lea esp, [esp + 4]
ret
add ebx, 0x4f006987
cmp ebx, 0x4f006a53
jmp 0xf51084
inc dword [esp + 8]
popfd
jmp 0xf512e2
add al, 0x24
jmp 0xf510b7
je 0xf5107b
jne 0xf4fbd2
mov dx, 0x1774
call fcn.00f510e6
rdtsc
push sp
xchg ah, al
pop ax
rdtsc
bswap edx
jmp 0xf510d0
setge al
push edx
mov dx, word [esp]
lea edx, reloc.KERNEL32.dll_SetConsoleCtrlHandler
mov edx, ebp
lea eax, [ebx*4]
jmp 0xf5108c
pop esi
lea edx, [esi*4]
mov eax, edx
bswap eax
mov edx, edi
xchg al, ah
jmp 0xf5114f
jne 0xf5103f
je 0xf51176
add ah, byte [eax + 0x27a05136]
pop ebp
fisttp qword [ebp + 0x14]
out 0x54, eax
lodsb al, byte [esi]
mov edi, 0x8b66c80f
add al, 0x24
bswap eax
mov ax, word [esp]
pop eax
cmp dword [esp + 4], 0
jmp 0xf5111b
mov edx, dword [esp]
pop edx
lea eax, [edx + edx]
mov eax, dword [esp]
mov ax, bx
not ah
jmp 0xf51131
pop eax
sub eax, 0xc7fc25bb
jmp 0xf51192
pushal
jmp 0xf4fc48
call 0xf511a2
dec ebp
push ebx
push esi
inc ebx
push edx
push esp
insb byte es:[edi], dx
insb byte es:[edi], dx
add bl, ch
fcom dword [eax + 0x1ced8a14]
mov dword [reloc.KERNEL32.dll_SetConsoleCtrlHandler], eax
add byte [eax], al
add byte [edi], bh
aas
xor al, byte [eax + 0x59]
inc ecx
push eax
inc ecx
pop eax
dec ecx
inc eax
pop edx
add al, ch
sbb edi, edx
invalid
mov ecx, dword [reloc.KERNEL32.dll_SetConsoleCtrlHandler]
lea esp, [esp - 4]
ret
lea esp, [esp + 4]
push dword [esp]
lea esp, [esp + 8]
jmp 0xf511e2