Function at 0x560c48
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov word [esp + 8], di
lea eax, reloc.KERNEL32.dll_FileTimeToLocalFileTime
push word [esp + 0x1a]
xchg byte [esp + 0x1c], dl
jmp 0x560ecf
pushal
lea esp, [esp + 0x43]
clc
inc si
setg ch
bsf dx, ax
jmp 0x560ce0
pop dword [esp + 0x12]
mov word [esp + 0x18], sp
xchg edx, edi
xchg cx, ax
push edx
mov cx, 0x448d
jmp 0x560c87
neg cx
lea ebp, reloc.KERNEL32.dll_FileTimeToLocalFileTime
mov word [esp + 0xa], sp
mov bx, word [esp + 8]
pop word [esp + 0x15]
mov ax, 0xdbff
jmp 0x560d9b
xchg edx, ecx
lea ecx, [edi*4]
rcr ch, 5
not bp
pushal
mov bx, sp
jmp 0x560cbb
xchg bp, dx
cmc
pop esi
push word [esp + 0x1e]
neg ah
lea edx, [ebx + edi]
jmp 0x560ca7
mov edx, dword [esp + 2]
lea edx, [eax + edx]
rdtsc
add esp, 0xe
sub esp, 0x1c
mov dx, bx
jmp 0x560d52
xchg word [esp + 4], dx
setnp ch
xchg ecx, ebx
bsr dx, bp
mov word [esp + 1], dx
lea ebx, [ebp + 0xb7]
jmp 0x560d1b
add esp, 0x14
mov al, ah
pop dword [esp]
lea esp, [esp + 2]
mov ecx, dword [esp]
jmp 0x560d7e
mov cl, 0x82
ror ch, 5
add di, 0xdcf6
btc edx, edi
mov al, ah
pop dword [esp + 2]
jmp 0x560d37
add esp, 1
mov ax, 0x3bed
mov edi, dword [esp]
mov dl, dh
mov bp, dx
lea edi, [ebx + esi]
jmp 0x560e08
xchg word [esp + 0xb], si
lea edi, [eax - 0xd9]
mov di, dx
add esp, 9
xchg byte [esp + 0x12], dl
pop bp
jmp 0x560d69
add esp, 9
bsr si, bp
pop word [esp + 7]
mov ah, byte [esp + 0xf]
sub esp, 0x12
jmp 0x560e6f
cpuid
neg bh
mov cl, ch
mov byte [esp + 6], dh
mov edx, ecx
push esp
jmp 0x560db4
mov bp, di
rdtsc
cpuid
xchg bh, cl
mov ebp, dword [esp + 0x23]
xchg ah, bl
jmp 0x560dcf
pushal
bsr cx, cx
push word [esp + 0x21]
bsf bx, ax
xchg byte [esp + 0xa], cl
inc di
jmp 0x560de6
pop dword [esp + 1]
mov dword [esp + 3], eax
cmc
rdtsc
xchg byte [esp + 0xa], bl
setle ch
jmp 0x560e47
popal
not edi
cpuid
mov cx, word [esp + 5]
mov edx, esi
inc ebx
jmp 0x560e1e
mov edi, dword [esp + 5]
mov bx, word [esp]
xchg word [esp + 6], ax
push word [esp + 2]
mov bl, bh
mov eax, 0x4db61994
jmp 0x560e9b
lea ebx, [esp + ecx]
xchg dword [esp + 0x29], ebp
stc
bswap ebx
pop dx
push edx
jmp 0x560e38
lea edi, [edx*4]
mov eax, 0x1498adb8
bswap eax
mov dword [esp + 3], eax
mov ch, byte [esp + 0x10]
jmp 0x560eb0
push word [esp + 0xc]
pop dx
shr ah, 1
mov word [esp + 7], di
sub esp, 6
rdtsc
jmp 0x560e7e
lea esi, [ecx + ebx]
sub esp, 6
xchg byte [esp + 0xc], dl
xchg ah, bl
cld
bsr bx, bp
jmp 0x560ee8
inc cx
mov edi, 0x94e0fc36
sub esp, 4
clc
mov byte [esp + 0xf], ah
pop word [esp + 0x1f]
jmp 0x560d0a
cld
not si
mov bh, byte [esp + 0xe]
xchg word [esp + 6], ax
add esp, 0xe
push word [esp + 3]
jmp 0x560f42
mov bx, word [esp + 2]
mov bx, 0x5eaf
inc ax
push dword [esp + 0xa]
pop dword [esp]
jmp 0x560f94
lea esp, [esp]
mov byte [esp + 3], ch
add esp, 1
mov bx, 0xbb5f
lea ebx, [ecx - 0xd3]
cpuid
jmp 0x560f29
cpuid
neg si
inc ecx
lea edi, reloc.KERNEL32.dll_FileTimeToLocalFileTime
xchg dh, al
xchg di, si
jmp 0x560fd2
mov dh, byte [esp]
neg dh
mov al, 0x6e
mov bl, bh
xchg ch, dl
pop edi
jmp 0x560f5a
rdtsc
sub esp, 0x14
sub esp, 0x1c
cmc
mov si, dx
lea esp, [esp + 0x39]
jmp 0x560f77
add esp, 0
and bx, 0x91e2
mov byte [esp], ch
mov al, 0xce
xchg edi, ecx
mov edx, ebp
jmp 0x560fe5
neg ecx
xchg esi, edi
xchg byte [esp], bl
call fcn.0056163f
invalid
xchg ecx, eax
mov byte [esp], ch
lea edi, [esp + ecx]
mov eax, 0x118fe198
mov ebx, ebp
xchg esi, ecx
jmp 0x560fa6
lea eax, [ecx + 0x43]
mov bh, byte [esp]
mov bh, byte [esp]
mov eax, 0xf47a78d4
mov ecx, eax
xchg ecx, ebp
jmp 0x560fb9