Function at 0x4b7c0e
Capabilities:
Execute anti-debugging instructions

Disassembly:
rdtsc
cmp eax, 0x29891682
jne 0x4b7a3a
nop
nop
rdtsc
cmp ebx, 0x33386402
jne 0x4b7a45
nop
rdtsc
cmp edx, 0x66760322
jne 0x4b7a50
nop
nop
nop
rdtsc
sub eax, 0x91144142
cmp eax, 0x94738062
jne 0x4b7a5d
nop
nop
nop
rdtsc
cmp eax, ecx
jne 0x4b7a6e
nop
nop
rdtsc
cmp eax, edx
jne 0x4b7a76
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, 1
cpuid
cmp eax, ecx
jne 0x4b7a84
nop
nop
nop
nop
mov eax, 0x28112982
mov ecx, 0x51595702
cmp eax, ecx
jne 0x4b7a93
nop
nop
nop
mov eax, 5
cpuid
sub eax, 0x66989622
and dl, byte [esi - 0x167e9968]
inc edx
xor eax, 0xc13b9936
jne 0x4b7aa4
nop
nop
nop
nop
nop
mov eax, 0x23749382
mov ecx, 0x36342202
add eax, ecx
cmp eax, ecx
jne 0x4b7abf
nop
nop
nop
nop
rdtsc
cmp eax, 0x61816123
jne 0x4b7ad3
nop
nop
nop
nop
rdtsc
cmp eax, 0x75290933
jne 0x4b7ae0
nop
nop
nop
rdtsc
cmp eax, 0x8694853
jne 0x4b7aec
nop
nop
nop
rdtsc
cmp edx, 0x33068673
jne 0x4b7af8
nop
nop
nop
nop
nop
nop
mov eax, 0x36461593
mov ecx, 0x60045411
cmp eax, ecx
jne 0x4b7b08
nop
nop
nop
nop
mov ebp, 0x93411231
mov esp, 0x8815151
cmp ebp, esp
jne 0x4b7b1a
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
xor ebx, 0x462d28
xor edi, 0x23ffd1fa
xor edi, 0x7e26937e
nop
nop
nop
nop
sub ecx, 0x1c
dec edi
nop
inc edi
nop
cmp eax, 0x55898091
jne 0x4b7b76
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push eax
push ecx
mov eax, 0x124254
mov ecx, 0x256
pop ecx
pop eax
nop
nop
nop
nop
nop
inc ecx
inc esi
inc esi
inc edi
dec edi
sub ebx, 0x17
sub esp, 0x4c
sub ecx, 0x3e
inc edi
dec esi
sub ebp, 0xffffffeb
sub esp, 0xfffffffe
sub eax, 0x4c
inc ebp
sub eax, 0xffffffca
sub edx, 0xfffffff2
sub ebp, 0xfffffff0
sub ebp, 0xffffffd6
inc esi
dec edx
inc edx
sub eax, 0xfffffff0
dec eax
nop
cmp eax, 0x55898091
jne 0x4b7bc9
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push eax
push ecx
mov eax, 0x124254
mov ecx, 0x256
pop ecx
pop eax
nop
nop
nop
nop
nop
inc ebp
nop
inc esp
add esi, 0xffffffeb
add ecx, 0x25
add ebp, 0x49
sub esp, 0x3c
sub edx, 0xffffffd4
sub edi, 0x33
dec edx
sub edx, 0x3d
dec ebp
dec edi
sub edi, 0xffffffcd
inc esp
add esp, 0xffffffe5
add eax, 0x47
add edi, 0xffffffef
nop
dec edx
add esi, 0xfffffffe
add edx, 0x31
add edi, 0xffffffdf
inc edi
sub ecx, 0x16
nop
add ebp, 0x41
add esp, 0x30
inc eax
dec esp
inc ecx
add ebp, 0x1f
pop ds
sub ebp, 0xffffffb1
sub ebx, 0x1a
inc eax
add esp, 0xb
inc edx
inc edi
add ebx, 0xffffffb3
add edi, 0x48
add ebx, 0xffffffd7
sub edi, 0x35
dec ebp
dec ecx
sub edi, 0x33
dec eax
add edi, 0x21
inc edx
inc esi
sub ecx, 0x30
add ecx, 0xffffffc1
dec ebp
add edx, 0x1f
dec ebx
sub esp, 0xffffffb3
sub ebx, 0x33
dec esi
sub esi, 0xd
dec ebp
inc ebp
dec esi
dec esi
dec esp
dec ecx
inc esi
add esi, 1
sub esi, 0xffffffff
add eax, 0xffffffbe
sub edx, 0xffffffff
add edx, 3
add esi, 0x11
sub edx, 0xffffffff
add eax, 0xffffffff
sub esp, 0xffffffbe
add ecx, 0xffffffee
add esi, 0xffffffff
sub esp, 1
add edi, 0x21
add esp, 0xffffffff
add edx, 0xffffffff
inc esi
sub ebp, 4
inc edi
dec ebx
sub edi, 1
add esi, 0xffffffff
sub ebx, 0xffffffff
dec eax
sub eax, 1
add ecx, 0x3e
add eax, 1
sub esp, 1
add edx, 0x2a
inc ebx
inc ebp
inc ecx
inc esi
add esi, 2
add ebx, 0xffffffff
add esi, 1
add ebp, 1
dec edi
inc eax
sub ebp, 1
sub ecx, 0xfffffff8
sub edx, 0x4c
add edx, 0xffffffb6
sub edi, 0xffffffcb
sub ebp, 1
sub edi, 1
add ecx, 0x16
inc ebx
inc edx
add ebx, 0xffffffe0
add ebp, 0x12
inc edi
sub esi, 1
sub edx, 0x1f
sub esi, 0xffffffeb
add edi, 0x11
sub esp, 0xffffffe5
sub edx, 0x48
add ebx, 0x33
add esi, 0xffffffd8
sub ecx, 0xffffffd4
sub esi, 0x47
sub edx, 0x31
sub ecx, 0xffffffff
sub ebp, 0x10
dec edx
add edi, 0xffffffbe
sub ebx, 0xffffffff
sub ecx, 0xffffffff
add esp, 0xffffffff
dec ecx
add esp, 0xffffffde
add esp, 0xffffffda
inc ebp
sub ecx, 0xfffffffe
add ebx, 0xffffffff
add ebx, 1
inc edx
sub edx, 0xffffffff
dec edx
add ebp, 0xffffffd6
sub ebp, 0xe
add esp, 0xffffffd0
add ebp, 0xffffffb7
sub edi, 1
add esp, 1
sub esp, 0xfffffffe
dec ebp
add esp, 0xffffffb3
add ecx, 0xffffffeb
sub edx, 1
add esi, 0xffffffff
inc edi
add ebx, 0x4a
sub eax, 5
add ebp, 0x3f
sub ebp, 0x48
sub eax, 1
add eax, 0xffffffd8
add eax, 0xfffffffa
inc ebp
sub eax, 0xffffffff
inc ecx
sub edi, 1
inc edx
dec esp
sub ebp, 0xffffffdc
sub ebx, 0xffffffe9
sub ebx, 1
add ebp, 0x14
add edx, 6
sub edi, 1
add ebx, 0xfffffff4
sub esp, 0xffffffce
sub esi, 0xffffffff
sub ecx, 1
sub edi, 1
add ecx, 0xffffffff
add ebp, 0x14
add edi, 0x40
sub eax, 1
inc esp
add edi, 1
sub ebx, 0xf
sub ecx, 0xffffffec
inc ebx
sub edx, 0xffffffff
sub ebp, 0xffffffdc
sub edx, 0x1a
sub ebx, 0xffffffdf
inc ecx
dec esp
add ebx, 0x1a
sub ebp, 0x3b
cmp eax, dword [ebx - 0x3f7c1139]
inc dword [ebx - 0x7cb3fe39]
ret
mov dh, 0x83
jmp 0xe21101b7
sub esi, 1
add esp, 0xfffffffe
dec edi
sub ebx, 1
add ebp, 1
sub eax, 0xffffffff
add esi, 1
add dword [ebx - 0x3d7cfe3c], eax
std
add edx, 0xffffffff
sub esi, 0xd
sub edx, 0xe
add edx, 0x1f
dec eax
add edi, 0xffffffff
add edx, 1
sub edx, 0xffffffff
add edx, 1
add esp, 0x4c
sub ecx, 1
sub eax, 0x1d
inc esi
add edi, 0x20
sub eax, 0xe
add edi, 0xffffffff
inc edi
sub edx, 1
add esp, 0xffffffff
add edx, 0x3e
add edi, 0xfffffffc
add eax, 0x16
add ebp, 0xffffffeb
sub ebx, 1
sub eax, 0x10
sub edx, 0x24
add esi, 0x47
sub edx, 1
add eax, 1
add esi, 1
add esp, 0xfffffff2
sub esi, 0xffffffff
sub eax, 5
sub eax, 0x2b
sub esp, 0xffffffc9
inc esp
sub ecx, 0xffffffff
inc ebx
add ecx, 0xffffffff
sub esp, 6
add eax, 0x4c
sub edi, 0x39
add edx, 0xffffffd4
dec ecx
inc ebp
add eax, 0xfffffffb
sub esp, 1
sub eax, 0x43
sub edx, 0xffffffea
add ebx, 0x4d
add ecx, 0xffffffcc
sub ecx, 0xffffffff
add ecx, 0x3f
sub esi, 0xf
inc ecx
sub edi, 0x44
add esi, 1
add eax, 0xffffffff
sub ecx, 1
sub eax, 0x47
inc ebp
add esp, 1
sub esi, 0xffffffb3
sub esi, 0xffffffda
sub esi, 0x24
sub eax, 0x1d
add ebp, 0xffffffb8
sub ebx, 0xffffffdc
add esi, 0xffffffb7
add esp, 0xffffffba
add esi, 0xffffffec
add esi, 0xd
sub ebx, 0x20
sub esi, 0xffffffff
sub edx, 0x1f
inc esp
sub ecx, 0xffffffc1
add edi, 0xffffffff
sub edi, 0xffffffcd
sub ebp, 0xffffffff
add edx, 1
add edx, 0x3b
add esp, 0xffffffff
sub esp, 0x10
add eax, 0xffffffff
add esp, 0xfffffff4
add esi, 0xffffffba
add esi, 0x3b
add esi, 0xffffffff
dec ebp
add edi, 1
sub ebp, 1
sub ecx, 1
add ebx, 1
add eax, 0xffffffff
dec edx
sub eax, 0x40
sub edi, 0xffffffff
inc edi
inc esp
sub ecx, 0xfffffff8
add ecx, 0xfffffffa
inc esp
sub esp, 0xffffffff
sub ebp, 0xffffffed
sub ebp, 0x30
inc esp
dec esi
add ebp, 0xffffffff
dec edi
dec edx
add edi, 0x49
add edi, 0xffffffdf
sub ebx, 1
add eax, 0x16
add esi, 0xffffffef
sub ebx, 0xffffffd1
sub ebp, 0xffffffff
add edi, 0xffffffcd
add esp, 6
sub edx, 0xffffffe5
dec esi
dec ebx
add ebp, 9
sub edx, 1
add esp, 0x3c
add esp, 0x48
sub ebx, 1
sub ebx, 0xfffffffe
add eax, 0xffffffca
sub edx, 0xffffffbb
inc eax
sub esp, 0x3c
sub edx, 0xffffffc7
dec ebx
sub esi, 0xffffffff
sub esp, 1
dec esp
sub ecx, 0xffffffd0
sub esp, 0x20
add eax, 0x34
add ebp, 0x28
add edx, 0x19
add ebx, 0x1a
sub ecx, 0x22
add ebp, 0xffffffbf
add edx, 0x3d
sub ebp, 0xfffffffe
sub esi, 0xffffffff
add ecx, 0xffffffde
rcr esi, 0x83
rcr dword [ebx + eax*4], 0xc2
inc esp
push ebp
ror ah, 0xb1
mov ebp, esp
cwde
adc eax, 0x41257260
push ecx
sete al
and ecx, 0x10dd485d
lahf
wait
fnstcw word [ebp - 4]
mov eax, dword [ebp + 0xc]
mov ecx, eax
and eax, dword [ebp + 8]
not ecx
cmc
test ah, 0x4f
test ax, si
and ecx, dword [ebp - 4]
jmp 0x4b7a41