Function at 0x563624
Capabilities:
Execute anti-debugging instructions

Disassembly:
add byte [eax], al
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x1c]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
je 0x44a4f0
jne 0x44a4f0
jmp 0x44a4ee
add byte [eax], al
lea eax, [ebp - 4]
pushfd
add ebp, 0x76
popfd
lea ebp, [ebp - 0x76]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, dword [esi + 0x1c]
xchg dword [esp], eax
pushfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x7a]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
call 0x44a262
lea ecx, [ecx]
add dword [esp], 0x89891
xchg dword [esp], ebx
lea ecx, [ecx]
xchg dword [esp + 4], ebx
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x72]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], ebx
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x6a]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
popfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x7b]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
jmp 0x55fe84
add byte es:[ebp - 0x74ac03bb], cl
ficomp dword [ebx - 0x6d]
lea eax, [ebp - 4]
push ebx
mov ebx, edx
pop ebx
xchg ebx, eax
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, eax
mov eax, dword [esp]
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, dword [esi + 0x1c]
xchg dword [esp], eax
pushfd
pushfd
add ebp, 0x63
popfd
lea ebp, [ebp - 0x63]
call 0x44a51f
mov ebx, ebx
add dword [esp], 0x895d4
xchg dword [esp], ebx
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x73]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], ebx
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x63]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], ebx
push ebp
mov ebp, esp
leave
popfd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x30]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
jmp 0x55fe84
popfd
push ebp
mov ebp, esp
leave
je 0x55c27c
jne 0x55c27c
jmp 0x55c27a
pushfd
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x65]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg esi, edx
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, edx
mov edx, dword [esp]
rdtsc
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x3a]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
and eax, 1
pushfd
add ebp, 0x30
popfd
lea ebp, [ebp - 0x30]
xchg esi, edx
xchg dword [esp], esi
xchg esi, edx
lea esp, [esp + 4]
xchg ecx, eax
xchg dword [esp], ecx
xchg ecx, eax
lea esp, [esp + 4]
je 0x44890c
jne 0x4d15bc
jmp 0x44890a
add byte [eax], al
xchg ebx, edi
xchg dword [esp], ebx
xchg ebx, edi
lea esp, [esp + 4]
xchg edx, esi
xchg dword [esp], edx
xchg edx, esi
lea esp, [esp + 4]
xchg ecx, ebx
xchg dword [esp], ecx
xchg ecx, ebx
lea esp, [esp + 4]
leave
push edx
mov edx, eax
pop edx
ret 8
popfd
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0xc]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
je 0x44a220
jne 0x44a220
jmp 0x44a21e
inc edi
add byte [edi + 0xc558bd1], al
xchg ecx, edx
mov edx, dword [ebp + 0xc]
push ecx
xchg ecx, edx
pop edx
xor edx, edx
mov edx, edx
xchg edx, eax
mov edx, dword [ecx + 0x3c]
push eax
xchg edx, eax
pop edx
add eax, ecx
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x76]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
movzx ebx, word [eax + 0x14]
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x38]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
add ebx, eax
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x32]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg dword [ebp - 8], edi
mov edi, ebx
push dword [ebp - 8]
xchg dword [ebp - 8], edi
pop edi
cmp dx, word [eax + 6]
mov eax, eax
jae 0x569b68
lea esi, [ebx + 0x20]
pushfd
add ebp, 0x4b
popfd
lea ebp, [ebp - 0x4b]
xchg ebx, ecx
mov ecx, eax
push ebx
xchg ebx, ecx
pop ecx
jmp 0x4ab5c0
add byte [eax], al
lea eax, [ebp - 4]
pushfd
add ebp, 0x12
popfd
lea ebp, [ebp - 0x12]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
push 2
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x19]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, dword [ebx + 0x24]
xchg dword [esp], edx
xchg edi, ecx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, ecx
mov ecx, dword [esp]
jmp 0x55d8dc
pushfd
pushfd
add ebp, 0x57
popfd
lea ebp, [ebp - 0x57]
call 0x55d8ea
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x18]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
add dword [esp], 0xfff7623d
xchg dword [esp], ebx
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x5b]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], ebx
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x30]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], ebx
mov ecx, ecx
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x35]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
jmp dword [0x581ddc]
call 0x5590bc
jbe 0x55fe9c
mov bl, 0x4c
and byte [edx + 0x44], bl
and edx, dword [0xdee814ab]
out dx, al
std
push dword [edi + 0x31514547]
arpl ax, bp
inc ebp
push ecx
xor dword [ebx - 0x18], esp
sti
xchg ebp, eax
out dx, al
inc edx
mov esi, 0x5d585f48
ret
jmp 0x571264
pushfd
push ecx
mov ecx, dword [esp + 9]
pop ecx
xchg ebx, eax
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, eax
mov eax, dword [esp]
xchg edi, edx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, edx
mov edx, dword [esp]
rdtsc
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x7c]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
and eax, 1
push ecx
mov ecx, edi
pop ecx
xchg edx, eax
xchg dword [esp], eax
xchg edx, eax
lea esp, [esp + 4]
xchg ecx, eax
xchg dword [esp], ecx
xchg ecx, eax
lea esp, [esp + 4]
je 0x56a934
jne 0x44d42c
jmp 0x56a932
add byte [eax], al
popfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x3d]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
je 0x572530
jne 0x572530
jmp 0x57252e
call fcn.004d2ca8
pop ecx
test byte [esi - 0x6e], bh
sbb dword [ebp + 0x5fdb2f01], ebx
popal
mov al, byte [0x7377428e]
aam 0x3b
xor ch, al
mov ebx, 0x58fffcdc
aad 0x63
stosd dword es:[edi], eax
pop edx
or eax, 0x55870d15
and al, 0xfd
mov edx, 0xf9de4e0d
jno 0x5712ea
insd dword es:[edi], dx
xchg ebp, eax
inc esp
add byte [ebp - 0x7bf03675], bl
pop ebx
dec ecx
idiv bh
jne 0x4d5bfc
jmp 0x4d5bfa
lea ebx, [ebx + 0xe]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
je 0x4c7be0
jne 0x4c7be0
jmp 0x4c7bde
arpl word [eax], ax
lea eax, [ebp - 4]
pushfd
add ebp, 0x1e
popfd
lea ebp, [ebp - 0x1e]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
push 2
mov eax, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, dword [ebx + 0x24]
xchg dword [esp], ecx
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
mov ecx, dword [esp]
jmp 0x55d8dc