Function at 0x4709e0
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7c
mov eax, dword [0x4ed214]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x4db8bc]
movq xmm0, qword [str.GenuineIntel]
mov dword [ebp - 0x1c], eax
movzx eax, byte [0x4db8c0]
movq qword [ebp - 0x24], xmm0
movq xmm0, qword [str.AuthenticAMD]
mov byte [ebp - 0x18], al
mov eax, dword [0x4db8cc]
push ebx
movq qword [ebp - 0x34], xmm0
xorps xmm0, xmm0
mov dword [ebp - 0x2c], eax
movzx eax, byte [0x4db8d0]
push esi
push edi
mov byte [ebp - 0x28], al
mov dword [0x5d6884], 0
mov byte [ebp - 0x6b], 0
mov byte [ebp - 0x6c], 0
mov byte [ebp - 0x69], 0
mov byte [ebp - 0x6a], 0
mov byte [ebp - 0x6d], 0
mov byte [ebp - 0x6e], 0
mov byte [ebp - 0x6f], 0
mov byte [ebp - 0x14], 0
mov byte [ebp - 0x68], 0
mov byte [ebp - 8], 0
mov byte [ebp - 0x38], 0
movq qword [0x5d6890], xmm0
mov dword [0x5d6898], 0
mov byte [0x5d689c], 0
movups xmmword [0x5d68a1], xmm0
movq qword [0x5d68b1], xmm0
movups xmmword [0x5d68b9], xmm0
pushfd
pop eax
mov ebx, eax
xor eax, 0x200000
push eax
popfd
pushfd
pop eax
cmp eax, ebx
je 0x470aae
mov byte [ebp - 0x6f], 1
cmp byte [ebp - 0x6f], 0
jne 0x470ac7
xor al, al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00476c36
mov esp, ebp
pop ebp
ret
xor eax, eax
cpuid
lea esi, [ebp - 0x14]
mov dword [esi], ebx
mov dword [esi + 4], edx
mov dword [esi + 8], ecx
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0xc]
lea ecx, [ebp - 0x14]
movq xmm0, qword [ebp - 0x14]
lea edx, [ebp - 0x24]
mov dword [0x5d6898], eax
mov eax, dword [0x4db2fc]
mov dword [0x5d68b9], eax
mov al, byte [0x4db300]
mov byte [0x5d68bd], al
mov eax, dword [ecx]
movq qword [0x5d6890], xmm0
cmp eax, dword [edx]
jne 0x470b38
mov eax, dword [ecx + 4]
cmp eax, dword [edx + 4]
jne 0x470b38
mov eax, dword [ecx + 8]
cmp eax, dword [edx + 8]
jne 0x470b38
mov eax, dword [str.Intel]
mov cl, 1
mov dword [0x5d68b9], eax
mov ax, word [0x4db904]
mov word [0x5d68bd], ax
jmp 0x470b3b
mov cl, byte [ebp - 0x6b]
lea edx, [ebp - 0x14]
mov eax, dword [edx]
lea esi, [ebp - 0x34]
cmp eax, dword [esi]
jne 0x470b65
mov eax, dword [edx + 4]
cmp eax, dword [esi + 4]
jne 0x470b65
mov eax, dword [edx + 8]
cmp eax, dword [esi + 8]
jne 0x470b65
mov al, 1
mov dword [0x5d68b9], 0x444d41
jmp 0x470b68
mov al, byte [ebp - 0x6c]
cmp dword [ebp - 0x74], 0
je 0x470d51
test cl, cl
je 0x470bbd
mov eax, 1
cpuid
test edx, 0x800000
setne byte [ebp - 0x69]
test edx, 0x2000000
setne byte [ebp - 0x6a]
mov eax, dword [0x4db8dc]
movq xmm0, qword [str.Pentium_Family]
mov dword [ebp - 0x60], eax
mov ax, word [0x4db8e0]
mov word [ebp - 0x5c], ax
mov al, byte [0x4db8e2]
movq qword [ebp - 0x68], xmm0
mov byte [ebp - 0x5a], al
jmp 0x470c6d
test al, al
je 0x470c46
mov eax, 1
cpuid
test edx, 0x800000
setne byte [ebp - 0x69]
test edx, 0x2000000
setne byte [ebp - 0x6a]
mov eax, 0x80000000
cpuid
cmp eax, 0x80000005
jb 0x470c44
mov eax, 0x80000001
cpuid
test edx, 0x80000000
setne byte [ebp - 0x6d]
test edx, 0x40000000
setne byte [ebp - 0x6e]
mov eax, 0x80000002
cpuid
lea esi, [ebp - 0x68]
mov dword [esi], eax
mov dword [esi + 4], ebx
mov dword [esi + 8], ecx
mov dword [esi + 0xc], edx
mov eax, 0x80000003
cpuid
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], ebx
mov dword [esi + 0x18], ecx
mov dword [esi + 0x1c], edx
mov eax, 0x80000004
cpuid
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], ebx
mov dword [esi + 0x28], ecx
mov dword [esi + 0x2c], edx
jmp 0x470c6d
mov eax, 1
cpuid
test eax, 0x800000
setne byte [ebp - 0x69]
mov al, byte [0x4db300]
mov ecx, dword [0x4db2fc]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 0x10], al
mov dword [ebp - 0x68], ecx
mov byte [ebp - 0x64], al
rdtsc
mov dword [ebp - 0x7c], eax
mov edi, dword [0x4bb42c]
call edi
lea esi, [eax + 0x3e8]
call edi
cmp eax, esi
jb 0x470c80
rdtsc
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x78]
mov eax, 0x431bde83
sub ecx, dword [ebp - 0x7c]
mul ecx
lea eax, [ebp - 0x14]
push eax
shr edx, 0x12
push 0x4db8e4
mov dword [0x5d6888], edx
call fcn.00412b10
lea eax, [ebp - 0x68]
push eax
push str.________________name____s__n
call fcn.00412b10
cmp byte [ebp - 0x6e], 0
mov ecx, 0x4c39d1
mov eax, str.E3DNow
cmove eax, ecx
cmp byte [ebp - 0x6d], 0
push eax
mov eax, str.3DNow_
cmove eax, ecx
cmp byte [ebp - 0x6a], 0
push eax
mov eax, 0x4db958
cmove eax, ecx
cmp byte [ebp - 0x69], 0
push eax
mov eax, 0x4db95c
cmove eax, ecx
push eax
push str._______________________s__s__s__s_n
call fcn.00412b10
mov cl, byte [ebp - 0x6d]
add esp, 0x24
mov bl, byte [ebp - 0x69]
mov dl, byte [ebp - 0x6a]
mov al, byte [ebp - 0x6e]
mov byte [0x5d6886], cl
mov byte [0x5d689f], cl
xor ecx, ecx
mov byte [0x5d6884], bl
mov byte [0x5d6885], dl
mov byte [0x5d6887], al
mov byte [0x5d689d], bl
mov byte [0x5d689e], dl
mov byte [0x5d68a0], al
nop
mov al, byte [ebp + ecx - 0x68]
lea ecx, [ecx + 1]
mov byte [ecx + 0x5d68a0], al
test al, al
jne 0x470d40
mov ecx, dword [ebp - 4]
mov al, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00476c36
mov esp, ebp
pop ebp
ret