Function at 0x488bbe
Capabilities:
Execute anti-debugging instructions

Disassembly:
add edx, 0xe0903aa8
jmp 0x488a0e
add edx, 0x3aca89a6
jmp 0x488773
jmp 0x487c13
jmp 0x4883e3
push eax
add esp, 3
sub esp, 0x14
mov byte [esp + 0xa], al
lea eax, [edx*4]
jmp 0x488063
mov eax, edi
add eax, reloc.KERNEL32.dll_VirtualAlloc
jno 0x487bdc
movzx ebx, byte [eax]
rdtsc
mov eax, 0x7bbd2e89
push eax
call fcn.00488138
stosd dword es:[edi], eax
ret 0xc85c
mov ah, 0x9f
lea esp, [esp + 1]
jmp 0x488087
sub bl, cl
mov ax, word [esp]
mov dx, word [esp]
mov eax, edi
not eax
jmp 0x4880d2
mov dx, word [esp]
mov edx, 0x60337223
jmp 0x4880dd
mov al, bl
mov dx, 0x1694
clc
jb 0x4880bc
jae 0x4880fb
sub al, 0x7f
not dx
setb dh
setl dl
mov dl, byte [esp]
jmp 0x48811c
mov dx, word [esp]
mov edx, 0x60337223
jmp 0x4880dd
mov edx, dword [esp]
mov dx, si
lea edx, [edi - 0xef]
jmp 0x488155
mov dl, byte [esp]
ror al, 0
mov dx, di
mov edx, edi
mov dx, 0x4e09
jmp 0x488106
mov dh, 0x6f
jmp 0x48817b
xor al, 0x1d
sub esp, 0x11
jge 0x48813f
mov dh, 0x6f
pop word [esp + 3]
xchg byte [esp + 0xa], dh
mov dx, bx
mov word [esp + 5], di
jmp 0x488192
pop word [esp + 3]
xchg byte [esp + 0xa], dh
mov dx, bx
jmp 0x48818d
mov word [esp + 5], di
lea esp, [esp + 3]
jmp 0x488372
sub esp, 0x15
lea esp, [esp + 1]
jmp 0x488215
mov edx, ecx
setno dl
sub esp, 0x16
jno 0x4881df
mov edx, 0xcc8556dc
lea esp, [esp + 2]
jmp 0x4881ef
setae dh
mov dl, 0x63
setns dh
jmp 0x4881af
mov edx, 0xcc8556dc
call fcn.004882f7
add bh, byte [ebp + 0x224648d]
sub cl, al
jmp 0x488248
setae dh
mov dl, 0x63
setns dh
sub esp, 0x15
lea esp, [esp + 1]
lea esp, [esp + 0x14]
sub al, 0xb8
jmp 0x4881b8
shr dx, 3
bswap edx
push dword [esp]
ret 4
mov dx, word [esp]
mov edx, 0xcc965d5a
xchg dword [esp], ebp
mov dl, al
add edx, edi
ror edx, 0x15
jmp 0x48821d
mov eax, edi
add ax, si
jmp 0x48829a
bswap edx
mov eax, 0x73394dd3
jmp 0x488284
lea edx, [eax + eax]
mov dl, 0x42
mov edx, ebx
setne ah
mov ax, 0x4fa
call fcn.004882c8
cmp edx, dword [edx]
lea edi, reloc.KERNEL32.dll_VirtualAlloc
neg dl
lea ebp, [ebp + 2]
mov dh, al
mov edx, ecx
not edx
jmp 0x488233
dec edi
bsr edx, ebx
je 0x48825c
lea edx, [eax + eax]
jmp 0x4882bf
jge 0x488253
bswap edx
mov eax, 0x73394dd3
jmp 0x48825a
mov ax, 0x4fa
jmp 0x4882de
mov dl, 0x42
mov edx, ebx
setne ah
jmp 0x4882a5
mov edx, 0x8c59e610
jmp 0x488356
not bl
sub esp, 0xf
jle 0x48839b
lea edx, reloc.KERNEL32.dll_VirtualAlloc
xchg dword [esp + 3], edx
mov dx, 0x8d32
jmp 0x4883b9
lea esp, [esp + 0xc]
dec al
cmc
jne 0x488206
je 0x4881d5
xchg dword [esp + 3], edx
mov dx, 0x8d32
bsr eax, eax
btc eax, ecx
jmp 0x4883a3
lea edx, reloc.KERNEL32.dll_VirtualAlloc
jmp 0x488385
not dx
rcl dx, 3
jo 0x4883c1
lea eax, [ebp*4]
jmp 0x488679
bsr eax, eax
btc eax, ecx
jmp 0x4883a3
lea eax, [ebp*4]
lea esp, [esp + 3]
lea esp, [esp + 0xc]
add bl, 0x8a
sub ax, 0x5bbd
jge 0x4885b6
jl 0x488491
movzx ebx, byte [eax]
rdtsc
mov eax, 0x7bbd2e89
jmp 0x487be1
lea edx, [ecx - 0x9c]
setno al
lea eax, [ecx + ebp]
call fcn.004883f2
xchg dword [esp + 0xc], esi
mov dl, al
setae dh
mov al, byte [esp]
pushal
mov dx, bp
jmp 0x4884d1
lea esi, [esi + 0xe7]
lea eax, [edx*4]
lea edx, reloc.KERNEL32.dll_VirtualAlloc
mov dx, sp
xchg dword [esp + 0x2c], esi
mov dx, word [esp]
jmp 0x488560
lea edx, [ecx - 0x9c]
setno al
lea eax, [ecx + ebp]
rdtsc
xchg ah, dl
neg bl
lea edx, [eax + edi]
rcr al, 2
jmp 0x48851b
je 0x488531
lea edx, [ecx + ebx]
mov dh, 0xa0
call fcn.00488587
xchg byte [0xbd0ffc95], al
xor al, 0x27
dec esi
invalid
lea edx, [ecx + ebx]
mov dh, 0xa0
mov al, ah
jmp 0x4885ee
bt edx, ecx
btc ax, di
push dword [esp + 0x2c]
ret 0x30
jmp 0x4884fd
not ah
xchg edx, eax
neg bl
rcr dl, cl
jmp 0x488718
clc
mov edx, 0xa53acd30
sbb dx, 0xac79
inc dx
sub esp, 0x1b
jmp 0x488682
lea esp, [esp + 3]
jmp 0x4883cc
lea esp, [esp + 3]
lea esp, [esp + 0x18]
xor bl, 0x56
mov ah, byte [esp]
sub esp, 0x19
jmp 0x4886c1
sbb dx, 0xac79
inc dx
sub esp, 0x1b
jmp 0x488682
mov edx, ebx
lea eax, [ebp*4]
cmc
jno 0x4886ce
setge ah
jmp 0x4886f7
jo 0x4886ec
push word [esp + 0x15]
lea esp, [esp + 3]
jmp 0x4886f5
setge ah
jmp 0x4886f7
jmp 0x483027
push word [esp + 0x15]
lea esp, [esp + 3]
jmp 0x4886ab
shl edx, 2
pushfd
lea eax, [ebx*4]
mov ax, word [esp + 3]
btc eax, esi
jmp 0x488a42
jbe 0x488661
clc
mov edx, 0xa53acd30
jmp 0x48869f
mov al, byte [esp]
sete ah
mov ah, 0xac
jmp 0x483097
mov eax, edx
lea eax, reloc.KERNEL32.dll_VirtualAlloc
mov edx, dword [eax]
sub eax, esi
jo 0x488729
jno 0x4887a7
add eax, 0x5b22f0cf
push word [esp + 0x15]
mov ax, bp
lea esp, [esp + 2]
jmp 0x4887fa
sub esp, 0x18
jmp 0x48877c
ja 0x488757
add eax, 0x5b22f0cf
push word [esp + 0x15]
jmp 0x48878e
mov ax, bp
lea esp, [esp + 2]
jmp 0x4887fa
mov al, byte [esp]
sete ah
mov ah, 0xac
jmp 0x483097
bts eax, esi
jmp 0x4887ce
bswap eax
jmp 0x4887b4
push edx
ret
mov esp, ebp
clc
jg 0x4887ca
bswap eax
bts eax, esi
jmp 0x4887ce
sub esp, 0x12
lea esp, [esp + 2]
jmp 0x488747
bsr eax, ebp
jmp 0x488839
mov ax, sp
neg ax
jl 0x488957
bsr eax, ebp
sub esp, 0x12
lea esp, [esp + 2]
jmp 0x488840
jbe 0x4886d3
ja 0x483027
xchg byte [esp + 3], ah
lea esp, [esp + 1]
jmp 0x488a66
lea esp, [esp + 4]
dec bl
setae ah
lea eax, reloc.KERNEL32.dll_VirtualAlloc
bsr ax, ax
jmp 0x488a95
je 0x488ab2
mov ah, byte [esp]
cmc
jmp 0x488ae0
mov ah, byte [esp]
cmc
mov dx, 0x29d9
mov ax, word [esp]
neg ah
inc eax
jmp 0x488ac7
sub bl, 0x20
mov ax, word [esp]
lea eax, reloc.KERNEL32.dll_VirtualAlloc
lea eax, reloc.KERNEL32.dll_VirtualAlloc
jmp 0x488b02
mov dx, 0x29d9
mov ax, word [esp]
neg ah
jmp 0x488ac0
mov ah, 0xf0
jmp 0x488b11
bsf dx, cx
jg 0x488aec
mov ah, 0xf0
jmp 0x488b11
neg bl
mov ah, dl
mov ah, ch
and dx, bx
jo 0x488b4c
mov dx, word [esp]
lea eax, [ebx + ebp]
jmp 0x488b94
mov dx, word [esp]
lea eax, [ebx + ebp]
jmp 0x488b94
jmp 0x488b36
mov edx, dword [esp]
mov edx, edi
mov ah, bl
jmp 0x488b69
and ebx, 0x3c
jmp 0x488b4e
mov eax, dword [esi]
sub esp, 8
jmp 0x488bb2
pushfd
setge dl
add esp, 0xb
lea esp, [esp + 1]
jmp 0x488c47
sub bl, 0xc4
clc
jns 0x488b64
js 0x488b64
add esp, 0xb
jmp 0x488c21
jle 0x488b74
pushfd
setge dl
call 0x488bbe
salc
sub esp, 0x1a
pop edx
pop word [esp + 4]
xchg dword [esp + 7], edx
xchg dword [esp + 0x14], esi
jmp 0x488c6a
lea esp, [esp + 1]
jmp 0x488c47
mov dword [ebx + ebp], eax
clc
jmp 0x488ccd
mov eax, 0x12a8a49
lea ebx, [ecx + ebp]
jmp 0x488c99
setle dh
inc dx
call fcn.00488c14
rcr bh, 4
jmp 0x488c7d
mov al, 0x76
mov bx, word [esp]
jmp fcn.00487016
add esi, 4
bt edx, ecx
jno 0x488c74
rcr bh, 4
mov al, 0x76
mov bx, word [esp]
jmp fcn.00487016
ja 0x488c51
mov eax, 0x12a8a49
lea ebx, [ecx + ebp]
jmp 0x488c99