Function at 0x65019c
Capabilities:
Execute anti-debugging instructions

Disassembly:
pushal
pushal
jo 0x5be691
jp 0x5be697
pushal
popal
popal
push eax
push edx
jmp 0x5be6b2
pushal
popal
rdtsc
pushal
popal
pop edx
pop eax
push edi
jbe 0x5be6c1
jne 0x5be6c7
pop edi
jmp 0x5be6d9
popal
push ecx
push eax
push edx
pushal
popal
rdtsc
push edi
pop edi
pop edx
pop eax
pop ecx
push edx
push ebx
mov ebx, 0x7dff2e9a
mov dword [esp + 4], ebx
pop ebx
dec dword [esp]
sub dword [esp], 0x3df79eac
not dword [esp]
xor dword [esp], 0xc0073f9d
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
not ebp
xchg dword [esp], ebp
inc dword [esp]
push ebx
mov ebx, 0x5feef351
push edx
mov edx, 0x7bfb931d
sub dword [esp + 8], edx
pop edx
add dword [esp + 4], 0x766fcb60
add dword [esp + 4], ebx
sub dword [esp + 4], 0x766fcb60
add dword [esp + 4], 0x7bfb931d
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push edx
mov edx, 0x7efdf37b
xor dword [esp + 4], edx
pop edx
push edi
push ebp
mov ebp, 0x6d0e804b
mov edi, ebp
pop ebp
add dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], esi
mov dword [esp], eax
push 0x6d088d75
mov dword [esp], ecx
mov dword [esp], ebp
mov dword [esp], 0x27fe0f6d
shl dword [esp], 5
shl dword [esp], 7
push eax
mov eax, 0x74fec6bf
sub dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
and dword [esp], 0x3d7f0e2a
dec dword [esp]
dec dword [esp]
push edi
mov dword [esp], esi
mov esi, 0x4f6f8bf3
or dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
push edx
sub esp, 4
mov dword [esp], ebx
push 0x7fbfbab9
pop ebx
and ebx, 0x7dfbb801
add ebx, 0xffffffff
sub ebx, 0x65f92ee0
push esi
mov esi, 0x4c5b16f4
xor ebx, esi
pop esi
push ebx
pop edx
push dword [esp]
pop ebx
add esp, 4
sub dword [esp + 4], edx
pop edx
mov dword [esp], edx
mov dword [esp], ecx
push 0x7f4eb609
mov dword [esp], ebx
mov dword [esp], ebp
push esp
pop ebp
push ecx
mov dword [esp], 0x67f841d2
mov dword [esp], ecx
push ebx
push ecx
mov ecx, 0x7ae5bf3d
push eax
mov eax, 0x73dfdfc6
xor eax, 0x696192d1
and ecx, eax
pop eax
and ecx, 0xbbf05eb
add ecx, 0x3ffedb30
sub ecx, 0x7767cdcb
shl ecx, 2
push ebp
mov ebp, 0x3e7c2eac
dec ebp
push eax
mov eax, 0x7290673f
xor ebp, eax
pop eax
sub ecx, ebp
pop ebp
mov ebx, ecx
pop ecx
mov ecx, ebx
pop ebx
add ebp, 0x3dd7aea8
add ebp, ecx
push ecx
push edx
push 0x5cf607ab
pop edx
mov ecx, edx
pop edx
sub ecx, 0x1f1e5903
sub ebp, ecx
pop ecx
pop ecx
push edx
mov edx, 4
add ebp, 0x2be5f2ac
sub ebp, edx
sub ebp, 0x2be5f2ac
pop edx
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], edx
push ebx
mov dword [esp], 0x1853d8b7
mov dword [esp], ebx
mov ebx, esp
push eax
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x6e658439
mov eax, 0xa63b52bb
sub eax, 0x2e7ebc7a
sub eax, ecx
add eax, 0x2e7ebc7a
pop ecx
add eax, 0x6e6fe2e6
shl eax, 6
shr eax, 3
add eax, 0xedd274c4
add ebx, eax
pop eax
push esi
mov dword [esp], ecx
push ebp
push ecx
push 0x7d5f8a5a
mov ecx, dword [esp]
add esp, 4
inc ecx
add ecx, 0xd20578f2
mov ebp, ecx
pop ecx
push edx
mov edx, 0x7f6f0bfa
xor edx, 0x2a89978
or ebp, edx
mov edx, dword [esp]
add esp, 4
push ebp
not dword [esp]
pop ebp
add ebp, 0xaad768a1
mov ecx, ebp
mov ebp, dword [esp]
add esp, 4
xor ecx, 0x2aefd4d5
sub ebx, ecx
mov ecx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], ebx
push ebp
mov dword [esp], edi
push edx
mov dword [esp], 0x4eb947ef
mov dword [esp], ebx
push ebp
mov dword [esp], ecx
push 0x4fddf08d
pop ecx
push eax
mov eax, 0x65f8b5e4
sub ecx, eax
pop eax
push esi
mov dword [esp], 0x50a25554
mov dword [esp], edi
push ecx
push edi
push edx
mov edx, 0x7b4e0f11
mov edi, edx
pop edx
xor edi, 0x377f3d74
shr edi, 7
add edi, 0x2847199d
mov ecx, edi
pop edi
mov edi, ecx
pop ecx
dec edi
add edi, 0x71ffc3f3
shl edi, 3
push edi
dec dword [esp]
not dword [esp]
pop edi
add edi, 0x59cf3f23
sub ecx, 0x3ecb5d07
sub ecx, edi
add ecx, 0x3ecb5d07
mov edi, dword [esp]
add esp, 4
mov ebx, ecx
pop ecx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edx
mov dword [esp], edi
mov dword [esp], edx
push esp
pop edx
push ecx
mov ecx, 0x3f6fade9
dec ecx
add ecx, 0xffffffff
neg ecx
xor ecx, 0xc090521d
add edx, ecx
mov ecx, dword [esp]
add esp, 4
push 0x1f10a420
mov dword [esp], ebp
push eax
push edi
mov edi, 0x6fff0440
xor edi, 0x7fd541c9
add edi, 0x7ffe5589
xor edi, 0x3faf8c5f
add edi, 0x5078e8b7
mov eax, edi
pop edi
push edx
mov edx, eax
mov ebp, edx
pop edx
pop eax
sub edx, ebp
mov ebp, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], ebp
push ecx
sub esp, 4
mov dword [esp], eax
push esp
pop eax
push edi
push edx
mov edx, 0x79dffcf6
and edx, 0x447fb9d7
xor edx, 0x2b9675cf
mov edi, edx
pop edx
shr edi, 1
push ebx
push 0x3cce3abd
pop ebx
xor edi, ebx
pop ebx
push ebp
push ebx
mov ebx, 0x77679ef1
mov ebp, 0x271a0af
add ebp, ebx
pop ebx
xor edi, ebp
mov ebp, dword [esp]
add esp, 4
xor edi, 0x70f3e395
add eax, edi
mov edi, dword [esp]
add esp, 4
push edx
mov dword [esp], esi
mov esi, 4
sub eax, esi
pop esi
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ecx
push ebp
mov ebp, 0x1dce7321
mov ecx, ebp
pop ebp
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebp
mov dword [esp], esi
push ebx
mov dword [esp], edx
mov dword [esp], 0x6fbea1bf
add dword [esp], 0xcaee6087
mov dword [esp], ecx
mov dword [esp], 0x6ffd3bb3
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
not ecx
xchg dword [esp], ecx
dec dword [esp]
or dword [esp], 0x5dbbd119
add dword [esp], 0xa2237b2f
xor dword [esp], 0x6fe9b30e
xor dword [esp], 0x6f6dcd53
inc dword [esp]
sub esp, 4
mov dword [esp], ebp
mov ebp, 0xcfa4ae05
add dword [esp + 4], ebp
pop ebp
push edi
mov edi, 0x3f7f1084
push edx
mov edx, 0x6b9e2100
shr edx, 1
dec edx
inc edx
inc edx
not edx
add edx, 0x8cbe3585
and edi, edx
pop edx
neg edi
add edi, 0x5f6060ea
neg edi
xor edi, 0x7c35e755
sub edi, 0x979c2a81
sub dword [esp + 4], edi
pop edi
not dword [esp]
shr dword [esp], 5
sub esp, 4
mov dword [esp], esi
mov esi, 0xb7299fbd
sub dword [esp + 4], 0x3fb78a46
sub dword [esp + 4], esi
add dword [esp + 4], 0x3fb78a46
mov esi, dword [esp]
add esp, 4
mov dword [esp], edi
call fcn.005beba9
mov dh, 0xe6
das
add dword [esp], 0x333b68c8
xor dword [esp], 0x18cfaf3e
dec dword [esp]
not dword [esp]
inc dword [esp]
xor dword [esp], 0x8436a6b3
push 0x2554f114
mov dword [esp], ebp
mov dword [esp], 0x57fe5900
push edx
mov edx, 0xa8c6dea4
add dword [esp + 4], edx
pop edx
mov dword [esp], eax
push ecx
mov ecx, esp
push edx
push edi
mov edi, 0x1adf4d3d
sub edi, 0x1b26547b
shr edi, 8
add edi, 0xff00470c
mov edx, edi
pop edi
add ecx, edx
pop edx
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ebx
push dword [esp + 0x10]
mov eax, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
push dword [esp + 8]
push dword [esp]
pop ebx
push ebp
mov ebp, esp
push esi
mov esi, 0x67df2d00
add esi, 0x62ff0c82
inc esi
neg esi
add esi, 0xcade3987
add ebp, esi
pop esi
add ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 0x7b7ba9c1
inc edx
dec edx
or edx, 0x3dcd0500
shr edx, 5
xor edx, 0x3fffd6a
add edi, 0x7f3fdb13
add edi, edx
sub edi, 0x7f3fdb13
mov edx, dword [esp]
add esp, 4
xchg dword [esp], edi
pop esp
push dword [esp]
push dword [esp]
pop eax
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x5be689