Function at 0x43d76b
Capabilities:
Execute anti-debugging instructions

Disassembly:
lea eax, [eax]
add dword [esp], 0x30bab
xchg dword [esp], edx
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x56]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], edx
pushfd
add ebp, 0x7e
popfd
lea ebp, [ebp - 0x7e]
xchg dword [esp], edx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x53]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
popfd
push eax
mov eax, edx
pop eax
jmp 0x43d748
popal
dec eax
xchg ebx, eax
mov ebx, dword [ebp - 0x14]
push eax
xchg ebx, eax
pop ebx
cmp eax, dword [ebp - 0x28]
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x2e]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
jae 0x4e3723
xchg ecx, ebx
mov ebx, dword [ebp - 0x2c]
push ecx
xchg ecx, ebx
pop ebx
xchg dword [ebp - 0x30], edx
mov edx, ecx
push dword [ebp - 0x30]
xchg dword [ebp - 0x30], edx
pop edx
push 0
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x7c]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
push 0
mov ecx, ecx
push 0
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x5c]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
push 0
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 2]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
lea edx, [ebp - 0x30]
push ebp
mov ebp, esp
leave
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
mov edx, dword [esp]
xchg esi, eax
mov esi, dword [ebp - 0x1c]
push eax
xchg esi, eax
pop esi
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, eax
mov eax, dword [esp]
xchg ecx, ebx
mov ebx, dword [ebp - 0x14]
push ecx
xchg ecx, ebx
pop ebx
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
mov ecx, dword [esp]
xchg edx, esi
mov esi, dword [ebp - 0xc]
push edx
xchg edx, esi
pop esi
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
mov edx, dword [esp]
pushfd
mov eax, eax
call 0x433f33
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x67]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
add dword [esp], 0xaf7a1
xchg dword [esp], eax
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x12]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], eax
lea ecx, [ecx]
xchg dword [esp], eax
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x4d]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
popfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0xf]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
jmp dword [0x414a18]
pushfd
pushfd
add ebp, 0x4c
popfd
lea ebp, [ebp - 0x4c]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
mov edx, dword [esp]
rdtsc
push edx
mov edx, dword [esp + 4]
pop edx
and eax, 1
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x22]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg edx, eax
xchg dword [esp], eax
xchg edx, eax
lea esp, [esp + 4]
xchg ebx, eax
xchg dword [esp], ebx
xchg ebx, eax
lea esp, [esp + 4]
je 0x461b84
jne 0x455a34
jmp 0x461b82
call fcn.0048056c
lcall 0xe87f, 0x218c75f6
mov al, 0xbe
or al, byte [eax]
mov dh, 0xe8
jecxz 0x43d767
add cl, ah
sbb dword [eax], esp
dec ebx
xor eax, eax
pop esi
ret
add byte [ebx - 0x74aafb3c], al
in al, dx
leave
xchg dword [ebp - 0x1c], ecx
mov ecx, eax
push dword [ebp - 0x1c]
xchg dword [ebp - 0x1c], ecx
pop ecx
cmp dword [ebp - 0x1c], 0
push ecx
mov ecx, edx
pop ecx
jne 0x435228
xchg ecx, edx
mov edx, dword [ebp - 0xc]
push ecx
xchg ecx, edx
pop edx
xchg ebx, ecx
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, ecx
mov ecx, dword [esp]
pushfd
push edi
mov edi, edx
pop edi
call 0x43d7aa
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x1b]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
add dword [esp], 0xa5ee7
xchg dword [esp], ecx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x6e]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], ecx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x2b]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], ecx
push esi
mov esi, eax
pop esi
popfd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x14]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
jmp dword [0x52e178]
sub byte [ecx], bl
xchg edi, eax
mov edi, dword [ebp - 0x14]
push eax
xchg edi, eax
pop edi
cmp eax, dword [ebp - 0x28]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x67]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
jae 0x4e3723
xchg ecx, eax
mov eax, dword [ebp - 0x2c]
push ecx
xchg ecx, eax
pop eax
xchg dword [ebp - 0x30], ebx
mov ebx, ecx
push dword [ebp - 0x30]
xchg dword [ebp - 0x30], ebx
pop ebx
push 0
push edi
mov edi, dword [esp]
pop edi
push 0
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x40]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
push 0
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x2a]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
push 0
lea ecx, [ecx]
lea edx, [ebp - 0x30]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x63]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg edi, edx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, edx
mov edx, dword [esp]
xchg ecx, eax
mov ecx, dword [ebp - 0x1c]
push eax
xchg ecx, eax
pop ecx
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, eax
mov eax, dword [esp]
xchg ecx, eax
mov eax, dword [ebp - 0x14]
push ecx
xchg ecx, eax
pop eax
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
mov ecx, dword [esp]
xchg edx, ebx
mov ebx, dword [ebp - 0xc]
push edx
xchg edx, ebx
pop ebx
xchg ebx, edx
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, edx
mov edx, dword [esp]
pushfd
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 5]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
call 0x43ee08
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x60]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
add dword [esp], 0xa48cc
xchg dword [esp], eax
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x5b]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], eax
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x32]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], eax
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x17]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
popfd
pushfd
add ebp, 0x5f
popfd
lea ebp, [ebp - 0x5f]
jmp dword [0x414a18]
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x23]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
je 0x43ed0c
jne 0x43ed0c
jmp 0x43ed0a
les esi, [edx - 0x4613b279]
or ebp, ebx
xchg edx, eax
push word [ebp - 0x14]
xchg dword [ebp - 0x14], ecx
mov ecx, 0x6692dd09
push dword [ebp - 0x14]
xchg dword [ebp - 0x14], ecx
pop ecx
pushfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x30]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
push 0x6692dd09
push edi
mov edi, dword [esp + 4]
xor dword [ebp - 0x14], edi
mov edi, dword [esp]
lea esp, [esp + 8]
popfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x26]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
jmp 0x433e4c
popfd
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x32]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
je 0x455070
jne 0x455070
jmp 0x45506e
pushfd
pushfd
add ebp, 4
popfd
lea ebp, [ebp - 4]
xchg edi, eax
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, eax
mov eax, dword [esp]
xchg ebx, edx
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, edx
mov edx, dword [esp]
rdtsc
push ecx
mov ecx, dword [esp + 9]
pop ecx
and eax, 1
mov edx, edx
xchg edx, eax
xchg dword [esp], eax
xchg edx, eax
lea esp, [esp + 4]
xchg ecx, eax
xchg dword [esp], ecx
xchg ecx, eax
lea esp, [esp + 4]
je 0x45d650
jne 0x443340
jmp 0x45d64e
add byte [eax], al
popfd
pushfd
add ebp, 0x23
popfd
lea ebp, [ebp - 0x23]
je 0x433e4c
jne 0x433e4c
jmp 0x433e4a
add byte [eax], al
popfd
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x5c]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
je 0x4e2af0
jne 0x4e2af0
jmp 0x4e2aee
add byte [eax], al
xchg dword [ebp - 0x14], esi
mov esi, 0x6487e699
push dword [ebp - 0x14]
xchg dword [ebp - 0x14], esi
pop esi
pushfd
pushfd
add ebp, 0x1d
popfd
lea ebp, [ebp - 0x1d]
push 0x6487e699
push edx
mov edx, dword [esp + 4]
xor dword [ebp - 0x14], edx
mov edx, dword [esp]
lea esp, [esp + 8]
popfd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 5]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
jmp 0x45aa94
pop esi
call fcn.0047f9b8
mov edx, dword [ebp - 0x1c]
push edx
call fcn.0044caac
call fcn.004ebdb0
jnp 0x4e371d
adc byte [ebp - 0x7f], cl
mov ch, 0xf
call fcn.004886fc
jecxz 0x4e373e
and ebp, eax
ljmp 0xdfe9