Function at 0x6413e9
Capabilities:
Execute anti-debugging instructions

Disassembly:
push eax
push edx
pushal
push edx
pop edx
jmp 0x5839e0
popal
rdtsc
pushal
je 0x5839ea
jns 0x5839f0
pushal
popal
popal
pop edx
pop eax
pushal
jb 0x583a0f
push eax
push edx
rdtsc
pop edx
pop eax
jmp 0x583a0f
jmp 0x583a1a
jmp 0x583a28
popal
push 0x301e870e
mov dword [esp], eax
push ebp
mov dword [esp], 0x2132d139
mov dword [esp], esp
add dword [esp], 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edx
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push edx
push eax
mov dword [esp], 0x960c54a
mov dword [esp], ecx
push 0x7f7f4571
pop ecx
add ecx, 0x7ffff9b3
dec ecx
shl ecx, 8
sub ecx, 0x27438fef
mov edx, ecx
pop ecx
shr edx, 2
shr edx, 8
sub edx, 0x3fffcbea
not edx
push eax
mov eax, 0x7ecff575
dec eax
push ebp
mov ebp, 0x53fe66d3
inc ebp
sub ebp, 0x74bb2785
not ebp
or ebp, 0x7d894e6b
push edx
mov edx, 0x367fd300
dec edx
add edx, 0x88843987
sub ebp, edx
pop edx
sub eax, ebp
pop ebp
add edx, eax
pop eax
add eax, edx
pop edx
sub eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
sub esp, 4
mov dword [esp], edi
mov dword [esp], ebx
mov ebx, esp
push eax
mov eax, 0x7eb7fa94
and eax, 0x7defb97c
inc eax
shl eax, 8
xor eax, 0xa7b81504
add ebx, eax
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push 0x24b80ba
mov dword [esp], edx
push ebp
mov ebp, 4
push ebp
add dword [esp], 0x72d5f3c6
pop edx
sub edx, 0x72d5f3c6
mov ebp, dword [esp]
add esp, 4
sub ebx, 0x7cfbdab0
sub ebx, edx
add ebx, 0x7cfbdab0
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
add esi, 4
push 0x231e971b
mov dword [esp], esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ecx
push 0x6087575c
mov dword [esp], ebx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
mov ebx, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add ebx, 4
push esi
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
mov dword [esp], edi
mov dword [esp], edx
mov edx, 4
sub ebx, 0x7fd43172
sub ebx, edx
add ebx, 0x7fd43172
pop edx
push 0x18155020
mov dword [esp], ebp
mov dword [esp], ebx
push dword [esp + 4]
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
pop dword [esp]
pop esp
mov dword [esp], edx
push 0x69734a6e
mov dword [esp], eax
mov dword [esp], ecx
push eax
mov dword [esp], 0x7cca8cf2
mov dword [esp], esp
add dword [esp], 4
pop ecx
push eax
mov eax, 0x5ffd600b
not eax
inc eax
not eax
shr eax, 1
sub eax, 0x2ffeb001
add ecx, eax
pop eax
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], edi
push ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
sub ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
mov dword [esp], esp
add dword [esp], 4
pop edi
add edi, 4
push 0x12b4b2a8
mov dword [esp], ebx
mov ebx, 4
sub edi, ebx
pop ebx
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
push edi
mov dword [esp], 0x7eef3f78
and dword [esp], 0x7fbd70cb
add dword [esp], 0xf6a78218
mov dword [esp], esp
push edi
mov edi, 4
add dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
pop ecx
push ebp
mov ebp, 4
add ecx, 0x7efff124
add ecx, ebp
push edx
mov edx, 0x78cf5d20
not edx
shl edx, 7
neg edx
and edx, 0x5fd56246
xor edx, 0x397bf124
sub ecx, edx
pop edx
pop ebp
push esi
mov esi, 0x5ef66d6f
inc esi
add esi, 0x7fd4f06f
push ebx
mov ebx, 0x3fbe9346
or esi, ebx
pop ebx
sub esi, 0xffffdfdb
add ecx, 0x6de7b841
sub ecx, esi
push eax
push ebp
push 0x3dbf1d2d
pop ebp
xor ebp, 0x5eb76185
sub esp, 4
mov dword [esp], eax
mov eax, 0x66b3a76b
add ebp, eax
pop eax
sub ebp, 0x49bcdff2
mov eax, ebp
pop ebp
sub eax, 0x7bf8ec75
dec eax
xor eax, 0x69e1efea
sub ecx, eax
pop eax
pop esi
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ebx
sub esp, 4
mov dword [esp], eax
mov dword [esp], 0x7eff131b
push edx
mov edx, 0x67d77989
add dword [esp + 4], edx
pop edx
shr dword [esp], 5
inc dword [esp]
sub esp, 4
mov dword [esp], ecx
push 0x5898536f
mov dword [esp], edi
push 0x1bbb134b
pop edi
add edi, 0x73d8352e
add edi, 1
not edi
push ebp
mov ebp, 0xa48d9168
sub edi, 0x4fe79543
add edi, ebp
add edi, 0x4fe79543
pop ebp
push edi
push esi
mov esi, 0x4d7f871b
xor dword [esp + 4], esi
pop esi
pop ecx
xor ecx, 0x4d7f871b
mov edi, dword [esp]
add esp, 4
xor dword [esp + 4], ecx
push dword [esp]
pop ecx
add esp, 4
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], ebp
push esi
sub esp, 4
mov dword [esp], esp
push eax
mov eax, 4
add dword [esp + 4], eax
pop eax
pop esi
add esi, 4
push edx
push ecx
mov ecx, 4
mov edx, ecx
pop ecx
push eax
push edi
mov dword [esp], 0x7ff70169
xor dword [esp], 0x2c88da1
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
add esi, 0x6aff1b28
add esi, eax
sub esi, 0x6aff1b28
mov eax, dword [esp]
add esp, 4
sub esi, edx
push edx
mov edx, 0x3bf5def1
shr edx, 6
sub edx, 0x83b04ab3
sub esi, edx
pop edx
pop edx
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], esi
sub esp, 4
mov dword [esp], esi
push eax
sub esp, 4
mov dword [esp], edi
mov edi, 0x77f72ca9
shl edi, 1
sub edi, 0x7bbf5e91
sub esp, 4
mov dword [esp], edx
mov edx, 0x163d6b60
push eax
push edi
mov edi, 0x3f9f6110
sub edi, 0xd028d56d
mov eax, edi
pop edi
and edx, eax
pop eax
sub esp, 4
mov dword [esp], eax
mov eax, 0
sub eax, edx
mov edx, eax
push dword [esp]
pop eax
add esp, 4
push ebp
mov ebp, 0x7fbf2ef1
sub edx, ebp
pop ebp
xor edx, 0x5f552f81
push ebp
push edi
push 0x5e761638
pop edi
shr edi, 2
or edi, 0x6f7fad82
add edi, 0x2567f998
mov ebp, edi
pop edi
sub edx, ebp
push dword [esp]
pop ebp
add esp, 4
or edi, edx
pop edx
shl edi, 4
sub edi, 0xccc163d4
mov eax, edi
mov edi, dword [esp]
add esp, 4
mov dword [esp + 4], eax
pop eax
mov dword [esp], edi
call fcn.00583eee
mov edi, 0xc815bcf
and al, 0xc7
aam 0xff
arpl di, di
add al, 0x24
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
dec edi
xchg dword [esp], edi
xor dword [esp], 0x7ffffe8b
push edi
mov dword [esp], 0x743f2b74
and dword [esp], 0x7f1bd4fc
add dword [esp], 0xc3c41de0
push eax
push ebp
mov ebp, 0x3f278381
mov eax, 0x891d4fc9
add eax, ebp
pop ebp
add dword [esp + 4], eax
pop eax
push edi
mov edi, esp
push eax
mov eax, 4
add edi, 0x6f9b028a
add edi, eax
sub edi, 0x6f9b028a
pop eax
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], eax
sub esp, 4
mov dword [esp], eax
push ebx
push eax
mov eax, 0x3b47de63
mov ebx, eax
pop eax
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ebx
push dword [esp + 0x10]
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 4
add edi, ecx
pop ecx
xchg dword [esp], edi
pop esp
push dword [esp + 8]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
push dword [esp]
mov ebx, dword [esp]
push eax
mov eax, esp
push ecx
mov ecx, 0x5fff625e
dec ecx
add ecx, 0xa0009da7
add eax, ecx
pop ecx
add eax, 4
xchg dword [esp], eax
pop esp
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x5839c4