Function at 0x40465b
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push 0xe
push 0x418038
cmp byte [eax - 0x3317ffbf], al
add al, 0
add byte [ecx + 0x59], bl
push 0x14
push 0x41806c
call fcn.00404b4f
pop ecx
pop ecx
push 0x14
push 0x418084
call fcn.00404b4f
pop ecx
pop ecx
jge 0x4046a5
jmp 0x4046a7
jne 0x4046a3
jl 0x4046ab
jmp 0x4046ad
je 0x4046a9
jl 0x4046b4
je 0x4046b6
jne 0x4046b6
call 0x12ab402c
je 0x4046af
push 0x12
push 0x41809c
call fcn.00404b4f
pop ecx
pop ecx
push 0x12
push 0x4180b0
call fcn.00404b4f
pop ecx
pop ecx
push 0xe
push 0x4180c4
call fcn.00404b4f
pop ecx
pop ecx
jl 0x4046e4
jmp 0x4046e6
je 0x4046e2
jge 0x4046ea
jmp 0x4046ec
jne 0x4046e8
jl 0x4046f3
je 0x4046f5
jne 0x4046f5
call 0xeab406b
je 0x4046ee
push 0xe
push 0x4180f0
call fcn.00404b4f
pop ecx
pop ecx
push 0xd
push 0x418100
call fcn.00404b4f
pop ecx
pop ecx
push 0xe
push 0x418110
call fcn.00404b4f
pop ecx
pop ecx
je 0x404744
jne 0x404744
pushal
rdtsc
mov ebx, eax
mov ecx, edx
rdtsc
sub eax, ebx
sbb edx, ecx
rdtsc
add eax, ebx
adc edx, ecx
rdtsc
sub eax, ebx
push 0xc8c70ff0
sbb edx, ecx
test edx, edx
popal
push 0xc
push 0x418120
call fcn.00404b4f
pop ecx
pop ecx
push 0xc
push 0x418130
call fcn.00404b4f
pop ecx
pop ecx
push 0xd
push 0x418234
call fcn.00404b4f
pop ecx
pop ecx
pushf
push 0xa
jae 0x40477f
jmp 0x404778
call 0x404783
call 0xe937bb6a
call 0xeb450c0a
add ch, al
call 0x7164548d
add ch, al
call 0x2bb270e
jae 0x404778
call 0x504cb6e
jmp 0x40478a
dec dword [esp]
jno 0x404791
call 0x7b1fc17c
add ch, al
call 0x66450c1e
popfd
jns 0x404772
jp 0x404797
call 0x504cb82
add esp, 4
popf
jmp 0x4047a0
push 0x10
push 0x418244
call fcn.00404b4f
pop ecx
pop ecx
push 0x17
push 0x4182a0
call fcn.00404b4f
pop ecx
pop ecx
push 0xd
push 0x418258
call fcn.00404b4f
pop ecx
pop ecx
js 0x4047cf
jns 0x4047cf
call 0x68a8563d
add byte [ecx], 0xe8
je 0x4047dc
push 0xe
push 0x418268
call fcn.00404b4f
add byte [eax], al
pop ecx
pop ecx
push 0xb
push 0x418278
call fcn.00404b4f
pop ecx
pop ecx
push 0x2d
push 0x4182b8
call fcn.00404b4f
pop ecx
pop ecx
pushf
push 0xa
jb 0x404804
js 0x404809
jns 0x404809
call 0x404af0
add byte [ebx - 7], dh
call 0x40480b
jae 0x404804
add esp, 4
jb 0x404813
jae 0x404813
call 0x71645516
add byte [ecx - 0x1d], bh
dec dword [esp]
jno 0x404818
jns 0x4047fd
jp 0x40481c
add esp, 4
popf
je 0x404826
jne 0x404826
call 0xe8a87d94
add byte [ecx], 0xe8
sbb eax, 0x59000003
push 0x35
push 0x4182e8
call fcn.00404b4f
pop ecx
pop ecx
push 0xa
push 0x418334
call fcn.00404b4f
pop ecx
pop ecx
push 9
push 0x418340
call fcn.00404b4f
pop ecx
pop ecx
jl 0x404854
jmp 0x404856
je 0x404852
jge 0x40485a
jmp 0x40485c
jne 0x404858
jl 0x404863
je 0x404865
jne 0x404865
call 0xbab41db
je 0x40485e
push 0xb
push 0x41836c
call fcn.00404b4f
pop ecx
pop ecx
push 9
push 0x418378
call fcn.00404b4f
pop ecx
pop ecx
js 0x404886
jns 0x404886
call 0x84a85af4
add dword [ecx], 0xffffffe8
mov ebp, 0x59000002
push 0x12
push 0x418384
call fcn.00404b4f
pop ecx
pop ecx
push 0x19
push 0x4180d4
call fcn.00404b4f
pop ecx
pop ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push 0xd
push 0x4181d0
call fcn.00404b4f
pop ecx
pop ecx
push 0x10
push 0x4181e0
call fcn.00404b4f
pop ecx
pop ecx
push 0x10
push 0x4181f4
call fcn.00404b4f
pop ecx
pop ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push 0x13
push 0x418208
call fcn.00404b4f
pop ecx
pop ecx
push 0xc
push 0x41800c
call fcn.00404b4f
pop ecx
pop ecx
push 0xc
push 0x41801c
call fcn.00404b4f
pop ecx
pop ecx
push 9
push section..data
call fcn.00404b4f
pop ecx
pop ecx
push 0xb
push 0x41802c
call fcn.00404b4f
pop ecx
pop ecx
js 0x40493f
jns 0x40493f
call 0x1ca853ad
add byte [ecx], 0xe8
add al, 2
add byte [eax], al
push 0xa
push 0x41821c
call fcn.00404b4f
pop ecx
pop ecx
push 0x10
push 0x418398
call fcn.00404b4f
pop ecx
pop ecx
push 0xb
push 0x418294
call fcn.00404b4f
pop ecx
pop ecx
push 8
push 0x418360
call fcn.00404b4f
pop ecx
pop ecx
jae 0x40497e
je 0x404980
jne 0x404980
call 0xbab42f7
jne 0x404979
push 0xb
push 0x418228
call fcn.00404b4f
pop ecx
pop ecx
push 0xd
push 0x418284
call fcn.00404b4f
pop ecx
pop ecx
push 3
push 0x418320
call fcn.00404b4f
pop ecx
pop ecx
push 3
push 0x418324
call fcn.00404b4f
pop ecx
pop ecx
push 3
push 0x418328
call fcn.00404b4f
pop ecx
pop ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push 2
push 0x41832c
call fcn.00404b4f
pop ecx
pop ecx
push 2
push 0x418330
call fcn.00404b4f
pop ecx
pop ecx
push 3
push 0x418354
call fcn.00404b4f
pop ecx
pop ecx
push 7
push 0x41834c
call fcn.00404b4f
pop ecx
pop ecx
push 4
push 0x418358
call fcn.00404b4f
pop ecx
pop ecx
nop
nop
nop
nop
push 0x39
push 0x4183ac
call fcn.00404b4f
pop ecx
pop ecx
push 9
push str._nS_nQ_r
call fcn.00404b4f
pop ecx
pop ecx
push 0xb
push str.__f_
call fcn.00404b4f
pop ecx
pop ecx
push 0xb
push 0x41819c
call fcn.00404b4f
pop ecx
pop ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push 0xb
push 0x4181a8
call fcn.00404b4f
pop ecx
pop ecx
push 0xd
push 0x4181b4
call fcn.00404b4f
pop ecx
pop ecx
push 0xb
push 0x4181c4
call fcn.00404b4f
pop ecx
pop ecx
jne 0x404a9a
je 0x404a9a
jmp 0x40a88b08
push 0x40
push 0x418140
call fcn.00404b4f
pop ecx
pop ecx
push 8
push 0x418184
call fcn.00404b4f
pop ecx
pop ecx
push 0x18
push 0x4183f4
call fcn.00404b4f
pop ecx
pop ecx
pushf
push 0xa
jb 0x404acf
js 0x404ad4
jns 0x404ad4
call fcn.00404dbb
add byte [ebx - 7], dh
call 0x404ad6
jae 0x404acf
add esp, 4
jb 0x404ade
jae 0x404ade
call 0x716457e1
add byte [ecx - 0x1d], bh
dec dword [esp]
jno 0x404ae3
jns 0x404ac8
jp 0x404ae7
add esp, 4
popf
je 0x404af1
jne 0x404af1
call 0x10a85f5f
test byte [ecx], al
push 0x14
push 0x418410
call fcn.00404b4f
pop ecx
pop ecx
push 7
push 0x418428
call fcn.00404b4f
pop ecx
pop ecx
push 0xb
push 0x418054
call fcn.00404b4f
pop ecx
pop ecx
jne 0x404b20
jno 0x404b20
call 0x60a8548e
add byte [ecx], 0xe8
and eax, dword [eax]
add byte [eax], al
push 9
push 0x418060
call fcn.00404b4f
pop ecx
pop ecx
push 0xb
push 0x418048
call fcn.00404b4f
pop ecx
pop ecx
push 0x10
push 0x418430
call fcn.00404b4f
pop ecx
pop ecx
pop edi
pop esi
pop ebx
pop ebp
ret