Function at 0x4624f5
Capabilities:
Check for software breakpoints
Packed with generic packer

Disassembly:
sub byte [ebx - 0x57], 0x54
std
add eax, 0x725dfdf0
add dword [esp + ebp*4 + 0x72507269], ebx
imul esi, dword [edx + 0x50], 0x37fdfc72
xchg edi, eax
invalid
cmp ebx, 0xd3fd37c3
jne 0x462478
inc ebp
pop ebx
pop edi
inc ebx
dec ebp
jns 0x462485
push esp
inc edx
pop edx
pop esp
inc edx
dec sp
inc edx
insb byte es:[edi], dx
inc edi
inc eax
push edi
inc ecx
push 0x61
inc ebp
push esi
arpl word [esi + 0x4c], ax
inc edi
popal
inc eax
inc esp
pop ebx
inc ecx
pop esi
dec ebp
dec edx
push ecx
popal
push esp
imul eax, dword [ecx + 0x4f], 0x4054675d
inc esp
push edi
push 0x5c566c58
pop esp
jnp 0x4624bd
pop ecx
push 0x55
imul ecx, dword [esi + 0x6b], 0x48686a6d
dec ebx
inc edi
push edx
pop ecx
dec edi
push esp
insb byte es:[edi], dx
inc ebx
pushal
mov edi, edi
cmp dword [esp + 0x58], 0x35b20fcf
cmove ecx, eax
push ebp
mov ebp, esp
cmp edx, 0xc0a52d7d
je 0x4624f3
call 0x4624f5
jmp 0x4624d9
dec ebp
push dword [ebp - 0x28]
inc edx
lea eax, [eax + ecx + 0x18]
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xfffffffffffffff4
mov ecx, dword [esp + 4]
inc esi
push edi
push dword [ebp - 0x24]
arpl word [eax + 0x75], ax
or edi, eax
add byte [eax + eax], cl
add byte [eax], al
jne 0x4624e4
mov dword [eax], 0xc
mov dword [0x40a004], esi
cmp eax, ebx
mov al, byte [0xc33b0040]
imul esp, dword [esi + 0x42], 0x58
je 0x462657
xor ebx, ebx
add dword [esp], 0xfffa5dcb
cmp dword [esp + 0x50], 0xabf44795
jne 0x46256e
test edi, edi
call fcn.004649d4
je 0x46252b
add ebx, ecx
mov edi, eax
mov eax, dword [ebp + 8]
push eax
test edx, edx
jne 0x462617
cmp bl, 0x20
dec ebx
push ebx
push 0x35890c74
add al, 0xa0
inc eax
add byte [ebx - 0x80000000], bh
or al, 0x89
xor eax, 0x40a004
mov ebx, 0x80000000
shr ecx, 2
push esi
arpl word [ecx - 0x22f4b], cx
invalid
call fcn.004625d8
cmp eax, dword [0x40b5a0]
mov eax, dword [ebp - 0x1c]
inc ebx
dec ecx
dec ebx
pushal
dec edx
push ebx
push ecx
mov edi, edi
jae 0x4625ad
jne 0x4625a8
outsb dx, byte [esi]
insd dword es:[edi], dx
pop ecx
outsb dx, byte [esi]
push ecx
dec ecx
push edi
dec edi
mov eax, dword [ebp + 8]
push edi
call fcn.00463c64
ret
invalid
xlatb
pop ecx
push esp
dec edi
popal
dec esp
insd dword es:[edi], dx
push bx
mov ebp, esp
pop ebp
pop ecx
push dword [ebp + 0x20]
push dword [ebp - 8]
push edi
add esp, 0xc
mov dword [ebp - 8], eax
inc eax
pop esi
dec ebp
jmp 0xbff843b
insb byte es:[edi], dx
push eax
dec ebx
insd dword es:[edi], dx
pop eax
dec ebx
push esi
inc ebp
dec ebp
push edi
inc edi
inc edi
push edi
pop edi
push ebp
inc edi
pushal
inc edx
dec edi
inc edi
outsb dx, byte [esi]
outsd dx, dword [esi]
push ebp
push edi
pop sp
inc eax
inc eax
push esi
inc ebx
dec edx
outsb dx, byte [esi]
jns 0x4626a4
push edi
push ebx
jns 0x4626a7
inc eax
insd dword es:[edi], dx
push ecx
push ebp
dec edi
push 0x43
inc ebx
pop eax
dec edx
dec edx
pop edx
dec eax
jnp 0x4626af
push esi
inc ebp
pop ebx
inc esi
dec esi
pop edx
push ebp
pop edi
push ecx
imul ecx, dword [edx + 0x48], 0x5e4a5345
inc ebx
inc edx
imul dx, word [edi + 0x6b], 0x5c52
pop di
push ecx
pop ebp
inc esi
insb byte es:[edi], dx
push ecx
push ebp
inc eax
dec edx
push esi
push edi
imul ebp, dword [eax + 0x66], 0x65
push edx
add byte [ecx - 0x2e40dbc4], cl
add byte [eax], al
add byte [edi], cl
inc esp
jl 0x4626b5
or al, byte [ecx]
fcompi st(0)
xchg dword [esp + 0xa], edi
xchg dword [esp], eax
dec edx
bound esp, qword [ebp + 0x59]
inc esi
bound ecx, qword [ecx + 0x66]
inc bp
dec ecx
inc bp
jns 0x46271e
pop edi
dec bp
inc ebx
push eax
dec edi
push ebx
bound edx, qword [edx + 0x49]
push ecx
pop ebp
pop edi
pop eax
dec eax
dec edi
dec esp
jns 0x46271e
inc ecx
pushal
pop eax
pushal
push ebp
outsb dx, byte [esi]
imul eax, dword [edx + 0x54], 0x4b6c6f54
push edx
inc edi
pop esp
inc ebp
dec eax
inc edx
dec esp
dec esi
imul eax, dword [esi + ebx*2 - 0x7f], 0xb9fc247c
inc edx
insd dword es:[edi], dx
lahf
je 0x439a92
call fcn.00462729
pop ebp
js 0x4626bf
call 0x46243c
inc ecx
push esi
dec edx
pop edx
outsd dx, dword [esi]
jmp 0x462684
add byte [ebp + 0x5852f845], cl
inc ebx
pop ebp
pop edi
pop esi
ret