Function at 0x1004794b
Capabilities:
Execute anti-debugging instructions

Disassembly:
add edx, 0x4c89b56e
jmp 0x10048440
jmp 0x1004799f
mov dx, 0x51c4
mov ebx, 0xbb9bb1f7
jmp 0x10047988
lea esp, [esp + 3]
jmp 0x100479b7
sub esp, 7
jge 0x10047978
mov dx, 0x51c4
mov ebx, 0xbb9bb1f7
lea esp, [esp + 3]
jmp 0x100479b7
lea esp, [esp + 4]
neg ebp
clc
jb 0x10047a16
jae 0x100479f4
out 0x61, eax
int1
nop
arpl si, sp
daa
mov byte [0x25a25730], al
arpl di, sp
ja 0x100479e4
loope 0x10047a02
lcall 0x1c24, 0x74ffe4f5
sub esp, 0x18
jmp 0x10047a21
wait
or ebp, dword [esi - 0x63]
popfd
dec edi
jl 0x100479e7
xchg edx, eax
cmc
add al, 0xef
dec ecx
call 0xc4e21c00
scasd eax, dword es:[edi]
mov ah, 0xaf
mov ah, 0x5b
mov dx, 0x7a08
jmp 0x100479de
rcl ebx, cl
pop word [esp + 0x14]
inc esp
and al, 0x14
neg al
mov ah, 0x5c
mov dl, ah
xchg dword [esp + 9], ebx
jmp 0x10047b63
mov ah, 0xaf
mov ah, 0x5b
mov dx, 0x7a08
sub esp, 0x18
ror ebp, 0
sub esp, 0x1a
jge 0x100479fe
jl 0x10047a33
add eax, 0x8c7d1a84
mov cl, 0xb0
rcl ebx, cl
pop word [esp + 0x14]
neg al
jmp 0x10047d6d
jnp 0x10047a8b
bswap eax
xchg dx, bx
jmp 0x10047a90
sub ebp, 0x229252b
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
setge dh
call fcn.10047b0b
mov byte [edx + eax*4], cl
in eax, 0x14
xchg ebx, eax
push ds
cdq
or dword [eax - 0x65], ebp
push ds
js 0x10047ae5
mov dl, 0xf
enter 0xffffffffffff8766, 0xffffffffffffffda
bswap eax
xchg dx, bx
jmp 0x10047a68
xchg ebx, edx
jmp 0x10047aef
jg 0x10047aba
xchg ebx, edx
jmp 0x10047aef
movzx ebx, byte [ebp]
mov ah, al
jmp 0x10047b2c
push dword [esp + 6]
jmp 0x10047b41
mov dl, byte [esp]
setnp dl
sub esp, 7
jb 0x10047b16
push dword [esp + 6]
jmp 0x10047c4a
add esp, 2
mov edx, dword [esp + 6]
mov eax, 0xdce54341
mov dx, ax
bswap edx
lea esp, [esp + 1]
jmp 0x10047b78
lea eax, [ebx*4]
lea esp, [esp + 0x30]
inc ebp
mov ax, si
stc
jmp 0x10047a5f
add bl, cl
ja 0x10047c19
mov al, dl
jmp 0x10047bae
mov dx, ax
jmp 0x10047b50
mov dl, bl
lea eax, [edx*4]
inc al
je 0x10047be5
adc al, bl
pushal
rcl ax, cl
jmp 0x10047bbd
or ax, 0x10ff
mov edx, ebp
rcl dh, 7
jmp 0x10047c24
pushal
rcl ax, cl
lea esp, [esp + 0x20]
jmp 0x10047bc7
sub dl, 0xc8
sub esp, 0x1a
jnp 0x10047bff
bsr eax, edi
jmp 0x10047be9
adc al, bl
jmp 0x10047bb9
mov al, byte [esp + 0x14]
mov ax, 0xc022
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
jmp 0x10047c29
bsr eax, edi
mov al, byte [esp + 0x14]
mov ax, 0xc022
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
mov al, dh
jmp 0x10047d22
mov al, dl
or ax, 0x10ff
mov edx, ebp
rcl dh, 7
jmp 0x10047b93
mov al, dh
jmp 0x10047d22
jmp 0x10047cc7
add esp, 2
mov edx, dword [esp + 6]
mov eax, 0xdce54341
jmp 0x10047b8e
call 0x10047c86
inc ebx
invalid
out dx, al
mov dword [eax - 0x54], edi
xlatb
push ebp
lds ebp, [edi + ebx*2 + 0x648d44b6]
and al, 2
lea esp, [esp + 2]
not dl
cmc
jns 0x10047c5b
js 0x10047d0c
neg esi
sub dword [eax + 0x66], ecx
mov eax, dword [esp]
mov ax, word [esp]
setle ah
rcr ax, 3
jmp 0x10047ce9
jmp 0x10047d96
xor ax, 0x93be
neg al
bt eax, eax
jmp 0x10047dda
push di
mov ah, byte [esp + 1]
sub ax, 0x42c8
jmp 0x10047c73
lea eax, [eax + 0x3c]
call fcn.10047cfc
push cs
mov byte [esi], bl
jns 0x10047c68
jns 0x10047c82
and eax, 0xcf2fdcb5
aam 0x47
btr ax, dx
xchg dword [esp], eax
stc
sub esp, 0x1d
push bx
lea esp, [esp + 3]
jmp 0x10047cd3
lea eax, [edx*4]
lea eax, reloc.PSAPI.DLL_GetMappedFileNameW
dec ah
jmp 0x10047cab
lea esp, [esp + 2]
lea esp, [esp + 0x18]
dec dl
btc eax, ebp
jl 0x10047c30
push di
mov ah, byte [esp + 1]
sub ax, 0x42c8
lea esp, [esp + 2]
jmp 0x10047c77
mov ah, 0x5c
mov dl, ah
jmp 0x10047a0b
neg al
bt eax, eax
jmp 0x10047dda
sub esp, 0x11
bsf ax, dx
add esp, 1
push word [esp + 0xf]
lea esp, [esp + 3]
jmp 0x100487dc
neg dl
bsf ax, dx
jp 0x10047cb0
xor ax, 0x93be
jmp 0x10047d76
ror dl, 0
jo 0x10047d7d
sub esp, 0x11
call fcn.10047da8
xchg byte [ebp - 0x2853], cl
lea ebp, [ebp - 0x29]
invalid
invalid
rdtsc
jmp 0x1004824a
rdtsc
inc ebp
neg eax
jle 0x100482ce
jg 0x10048280
or dword [ebx + reloc.PSAPI.DLL_GetMappedFileNameW], edx
xchg ecx, eax
adc al, 0x8a
in eax, dx
sbb al, 0x9b
add eax, eax
cmp dword [edx], reloc.PSAPI.DLL_GetMappedFileNameW
and al, 3
lea esp, [esp + 3]
jmp 0x10048398
lea esp, [esp + 2]
rdtsc
jmp 0x100482dd
mov dl, 0xbf
sub esp, 2
xchg word [esp], ax
jmp 0x1004826a
cmc
bswap edx
neg eax
pushfd
jmp 0x100482b8
ror bl, 0
jns 0x1004828b
cmc
jmp 0x100482ad
bswap edx
neg eax
pushfd
jmp 0x100482b8
lea esp, [esp + 4]
neg bl
mov al, byte [esp]
mov ax, word [esp]
bsr edx, esi
jmp 0x10048306
mov dl, 0xbf
sub esp, 2
xchg word [esp], ax
lea esp, [esp + 2]
rdtsc
mov dx, sp
not dh
mov al, byte [esp]
jmp 0x100482a1
call fcn.10048320
btr dx, bp
jo 0x1004830a
pushfd
xchg edx, eax
jmp 0x10048322
jne 0x1004833a
je 0x1004833a
pushfd
xchg edx, eax
jmp 0x10048322
ror bl, 0
jl 0x1004835b
lea edx, [ecx*4]
jmp 0x10048345
inc bl
setg al
add dl, dh
jb 0x100482e7
jae 0x100482e7
xchg dl, dh
lea eax, [ebp*4]
mov dl, ch
jmp 0x10048376
lea edx, [ecx*4]
xchg dl, dh
lea eax, [ebp*4]
mov dl, ch
mov edx, dword [esp]
jmp 0x100486af
mov edx, dword [esp]
jmp 0x100486af
btr eax, edx
lea esp, [esp + 3]
add cl, dl
sbb dh, 0x6c
js 0x10048248
jns 0x10048232
add esp, 0
add esp, 9
lea esp, [esp + 3]
jmp 0x100483ce
mov edx, 0x8629d29b
add esp, 0
add esp, 9
lea esp, [esp + 3]
jmp 0x100483e4
mov edx, ebx
rol ah, cl
jp 0x10048473
mov al, bl
jmp 0x10048438
add bl, 1
sub esp, 0xc
jne 0x100483bf
mov edx, 0x8629d29b
jmp 0x100483a9
mov al, 0x26
mov ax, si
btc ax, bx
jmp 0x100470e7
btc ax, bx
jmp 0x100470e7
not ax
mov ah, byte [esp]
jmp 0x1004847b
lea eax, [ebx*4]
mov al, byte [esp]
bswap eax
setns al
jmp 0x10048518
jge 0x1004840d
mov al, 0x26
mov ax, si
jmp 0x1004841c
mov al, bl
not ax
mov ah, byte [esp]
shl edx, 2
or eax, eax
jmp 0x10048456
mov edx, dword [edx - reloc.PSAPI.DLL_GetMappedFileNameW]
mov eax, esp
lea eax, [ebp*4]
setbe ah
jmp 0x10047119
xchg ah, al
lea edx, [eax*4]
setb dl
mov ax, word [esp]
lea esp, [esp + 8]
jmp 0x100483fe
push dword [esp + 0xc]
push dword [esp + 4]
jnp 0x10048391
btr eax, edx
jmp 0x10048261