Function at 0x401fa0
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [0x491870]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x14], str.t85laRRJhTTT9wjmSLTHh0gxKMerW4j6pW17FORihwDe4LjBiihzGTs0rXLxEMnLYDLX7Sm1DdgHqMqyo3mvju0viurFIVSq1Dx9tmFT545iPSlPbCY3K4df3iYR5ChCfaj0s2GMOqJx6sKsGnMSir4gPDpLTW5kpeU2seUsuTcHcSvRQsgOUX4wk18Gv7TTcy1TxNnwqE7dpo6g1AoXd6JYE2BiJ6roL0zo4Bpsr8F8ubbvAxgdz9HHrj0qzAeDmsP69S4VXvWmoN6VyGrI7d8sMzOyyh6AQogEifXAIOT0yQAMTnCkKbeBmoQ1rc3BUubTsMjEKIGavio2r7akXMDJ7Y7d1L2N2zx98pICsvD2PtbqQzbyMGsLleNxbMW5vB4fq0ghx7kIeaBvQ6lRRU0cP8cTaWc0LmUAHlBGXRFvuHavs2SoAzeFQu3tYvdLDTGdW7hg7AmeXGbqSUHDiR0wSwyE1X9l2pawEfj5kFoLqMpnDh4JWpMS0vnrEjjXqbcMzsCOmRK3OOlSFG0BExxt97nb0JXUGut9CaHKSlIkNQzwhBf4BhJBdwJxIAqz7wnuQvzHrKQaC6CXcsnFblp8ulX28YNB2hL1wlin3y6uHHSYkHeF5ezCmmvfswBF9VsJkeQFpqUkIbamzJeSAx0jeYzuSNTA3vhX0m61rSf3UcisHrnET6hFDV9vGWRjUH9alAFgOXPfvE7oGD6XtdovO8dbv6uB4Vvp1bpANYpw6qg7DPlsGEzRBIMqnkx7VjilCUrwinLDEh7qPfziPDlev1SgJEvgapUgLFrei4IIDWCnL9OJPWK8QGyq7WFsG9lDIqcNqJpz5ImG6OMToBJOikIlU8dODqbY9r5rbWX3RykutaSeMqo7vrmDiO5Kw2liLtVLwUv8P9MpGKMDrQKryK91B5qs1MPTc7qx9rLHkqiDPbipH5Fpezk2CdJI1yJy2G5FpL0y6BL472gfT3NI1EIaBOO0BaboNhdaNExq2JfDuchP0lIL3k0DPj3qcw7AHs5zAsXuAoAOHcOQqr0ARl11aEBUKuz0x02GYu3PJnXwlVGmQWhaSDXK4nnuSdlwL9W3wFp5v11cr8iQwp9G6xp5n3g1SwvVgts5ae3t4FnF3gSWmSJjVFeNbkeLY4Xaw1J5lFgUOJRa7yxn1VM2iSEpGOlroasiNnxgTIGYmAjipBKLDQbzlG1pev3uh7kYmKzgJARHlgcbiPUmHtXz4IoOFRMcHcmPbXP0P3EargP3jkBX4VEVKNJxPiLnR5EtP8PfdBNQrQoKwnv4Apz4JEUJL6Qgih52v3TqoV4jwEvhrd90hNwWho4QdMV9VchwwcQzRarrsxNLS0LTgFQ9wEwGx3Tp3hCKkM3fWRcqHzXm8QoMPlpL9lo86QvCHMLjTyQKTwaYNJC8APKBioCtqAaLLgVVmenNgS4shhwnG7La2vnc8iOOQwFLFXpmP8jaq6xw5YmWTVarP1K4En2p9nXRkVBDISr9Uht683GkneNroJuzAtxVHhC2AKpwHhzf6BHTOO2onFVG9o8QsDiBqgyyCGSNxuvH9qN98vlitz0IF6cMC1Y9QdfWVzlgTTnzVuFR7xTNkOSCYkymnAgPCdr6HIHuYQBHdY6qE7SlhEcPMdln6CpGuoI1u3bdr7seVHrzTUOyTHAtTFA5y1ATTEFoMiBQDPzFpsCfo8wNSKPMrPBAdpPUVSzV9MzU0zufJcgTiQeGgdU1E9JLlxQIhQaFuvWV3fLXQ0Fuj2D8k90uPwch4m5LbeBS76KsmaSDx7SwKQwIsFqigg4WLJErzkcb190lshugrF5hluC9xptyNcB3QMTU7kCpS12AXTgD0HYhbwCOpRaTslD0gdQ8deauMLcQvfEWqQXh1Ce47dD03JuoyGhLCIKKF0IbD7WvVWA4701GYVILqrUR3I5eD78WHztO0lOFtFC7hvsUBPOiqB3VQEjy4f0jpKYdaTnGMvRAOxUsP53R
mov dword [ebp - 0x1c], str.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
rdtsc
mov dword [ebp - 0xc], eax
rdtsc
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0xc]
cmp eax, 0x64
jbe 0x401fed
mov dword [ebp - 0x10], 1
jmp 0x401ff4
mov dword [ebp - 0x10], 0
mov al, byte [ebp - 0x10]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004136d5
mov esp, ebp
pop ebp
ret