Function at 0x564d8a
Capabilities:
Execute anti-debugging instructions

Disassembly:
xchg dh, al
neg ax
mov al, ah
setle dh
mov byte [esp + 5], dh
mov edi, dword [esp + 0xc]
jmp 0x564cc0
push word [esp + 4]
mov dl, 0x74
xchg edx, edi
cmc
xchg word [esp], ax
sub esp, 4
jmp 0x564c66
setns dh
pop word [esp + 1]
mov dx, word [esp + 4]
pop word [esp]
jmp 0x564d3c
mov dh, byte [esp + 9]
adc dx, 0xa8c
lea edi, [esp + ebp]
pop dword [esp]
jmp 0x564c91
xchg byte [esp + 2], dl
sbb di, 0x1d46
mov dh, byte [esp + 5]
xchg edx, edi
inc di
xchg edi, edx
jmp 0x564ca9
mov dh, byte [esp + 5]
mov dh, byte [esp + 1]
pop edi
xchg byte [esp + 2], dl
mov di, word [esp + 6]
inc ax
jmp 0x564c7e
mov dl, dh
lea esp, [esp + 0xf]
lea esp, [esp + 0x15]
mov edx, ebp
inc dh
rdtsc
jmp 0x564ce1
shl edx, 0x1f
pushal
push word [esp + 0x23]
and ax, 0x5d5a
rol di, cl
pop dword [esp + 0xa]
jmp 0x564d6a
mov di, 0x4e31
bswap edi
mov word [esp], di
cmc
btc edi, edx
sub dh, ah
jmp 0x564d17
push word [esp + 6]
lea esp, [esp + 0x20]
pop edi
mov eax, dword [esp]
mov di, word [esp]
rdtsc
jmp 0x564f3f
mov byte [esp + 9], ch
shr eax, 7
lea edi, [ecx*4]
rdtsc
lea edi, [eax*4]
jmp 0x564d4e
lea edx, [ebx + ebx]
mov edi, 0x3ae36170
jmp 0x564d05
mov dh, byte [esp + 0x12]
xchg dx, ax
mov dh, bh
xchg dh, dl
mov edi, eax
mov eax, 0xfbdabd02
jmp 0x564e22
rcr di, cl
pushal
pop word [esp + 0x1a]
mov dword [esp + 6], ebp
pop eax
adc di, 0x8c6c
jmp 0x564d97
rdtsc
pop dword [esp + 6]
xchg byte [esp + 9], dl
stc
rdtsc
mov eax, dword [esp + 1]
jmp 0x564dff
lea eax, [eax*4]
mov word [esp], sp
lea esp, [esp + 7]
pop word [esp + 0xd]
and di, 0x6c3a
inc al
jmp 0x564dc5
not ax
xchg dword [esp], edx
mov word [esp + 8], bx
xchg word [esp + 3], dx
mov edi, ebx
xchg byte [esp + 2], dh
jmp 0x564e35
stc
xchg edi, eax
inc edx
mov byte [esp + 7], bh
xchg dword [esp + 8], eax
pop word [esp + 8]
jmp 0x564de2
push dword [esp + 8]
mov edi, 0xc613f582
lea esp, [esp + 5]
mov edx, ebp
lea edi, reloc.KERNEL32.dll_FileTimeToLocalFileTime
not dh
jmp 0x564f05
mov ax, 0x54c5
clc
xchg byte [esp], dh
add ax, 0xc004
mov eax, 0xebf700c2
add ax, 0xfe26
jmp 0x564db0
mov dh, byte [esp]
mov ax, 0x5a5d
call fcn.00564edd
jmp 0x564ef3
lea edi, [edx*4]
mov byte [esp], ch
lea edx, [ebp + 0x47]
rcl ax, cl
cmc
rdtsc
jmp 0x564e76
mov edx, ebp
bsf dx, ax
mov dh, bh
xchg dh, dl
btr edi, edx
mov edi, 0x529cfd56
jmp 0x564e8c
mov dl, dh
mov dh, byte [esp]
inc edi
lea edi, reloc.KERNEL32.dll_FileTimeToLocalFileTime
mov dx, word [esp]
mov dh, 0xd2
jmp 0x564eab
push es
inc dl
bswap edx
mov edx, 0xe820c1ec
jmp 0x564f1a
push edx
xchg byte [esp], dl
mov ah, byte [esp + 0xd]
xchg dh, al
push word [esp + 5]
lea esp, [esp + 0x10]
jmp 0x564ec9
mov edi, 0x9e903c70
lea edx, [eax*4]
sbb ax, 0x485e
bsf ax, si
call fcn.00564fa0
sbb dword [eax + 0x7a98690e], ebx
jne 0x564f9f
xchg edi, eax
dec cl
push 0xba24248d
not byte [ebx]
pop esp
loop 0x564fae
lea esp, [esp]
mov edx, 0xe25c13f6
bsf ax, si
bsf eax, esi
not di
lea edi, [edi*4]
xchg edi, eax
jmp 0x564e5c
hlt
lea edi, [ebp + 0xcf]
inc al
mov ax, word [esp + 5]
xchg byte [esp + 0x24], dl
jmp 0x564fe1
xchg word [esp + 0x19], ax
call fcn.00566b67
mov al, 0x26
inc ecx
mov al, 0x59
sub eax, 0x1960f3c
ror byte [ebp + 0x8d3c], 0
add byte [esi - 0x79], ah
push esp
and al, 0x16
xchg byte [esp + 0xa], dl
jmp 0x565039
neg di
shr edx, 0x19
rdtsc
add esp, 0x12
pop word [esp + 6]
mov al, ah
jmp 0x56507a
lea eax, [ecx + 0xab]
lea edx, [ebx + esi]
mov word [esp + 0x15], sp
push edx
bsf di, si
bsf di, ax
jmp 0x565015
mov edi, eax
inc al
bsr ax, cx
lea eax, [ecx*4]
xchg edx, edi
xchg byte [esp + 0xe], dl
jmp 0x5650c9
lea edx, [esi + 0xbd]
bswap edx
mov dh, bh
mov byte [esp + 0x13], ch
sub di, 0xf5a0
push esp
jmp 0x565052
mov edi, eax
bts eax, ebx
xchg edx, edi
xchg dh, al
mov dh, byte [esp + 4]
push word [esp + 3]
jmp 0x5650f5
pop edi
push word [esp + 0xb]
rdtsc
mov dword [esp + 3], ecx
mov ax, 0xec27
lea edx, [edi + ebp]
jmp 0x565090
pop dword [esp + 9]
mov al, ah
setno ah
pop word [esp + 1]
pop edx
push word [esp]
jmp 0x5650af
xchg dword [esp + 7], edi
mov dx, word [esp + 1]
lea esp, [esp + 0xb]
call fcn.00565296
pop ds
xchg cx, ax
adc byte [ebx - 0x5d1e409a], dl
mov di, 0xa2e1
pop edi
xchg word [esp + 1], di
setae dh
not edx
rdtsc
jmp 0x5650de