Function at 0x635f9e
Capabilities:
Execute anti-debugging instructions

Disassembly:
pushal
jmp 0x57ef4c
push eax
push edx
pushal
popal
rdtsc
push eax
push edx
rdtsc
pop edx
pop eax
pop edx
pop eax
pushal
push eax
push edx
rdtsc
pop edx
pop eax
jmp 0x57ef6f
jmp 0x57ef87
push esi
pop esi
popal
push eax
push edx
jl 0x57ef92
rdtsc
pushal
popal
push edi
pop edi
pop edx
pop eax
popal
je 0x57efb7
push eax
push edx
pushal
popal
push eax
pop eax
rdtsc
push eax
push edx
rdtsc
pop edx
pop eax
jp 0x57efb5
pop edx
pop eax
push edx
mov dword [esp], ebp
mov dword [esp], 0x6fdc2aa1
and dword [esp], 0x7fbaa925
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
not ecx
xor dword [esp], ecx
xor ecx, dword [esp]
xor dword [esp], ecx
push ebp
mov ebp, 0x3df7d7e1
push ebx
mov ebx, 0x7df5e94f
add dword [esp + 8], 0x552a6800
sub dword [esp + 8], ebx
push eax
mov eax, 0x552a6800
sub dword [esp + 0xc], eax
pop eax
pop ebx
add dword [esp + 4], ebp
push ecx
mov ecx, 0x7df5e94f
add dword [esp + 8], ecx
mov ecx, dword [esp]
add esp, 4
pop ebp
and dword [esp], 0x57ffd95c
sub dword [esp], 0x5fdfd272
sub esp, 4
mov dword [esp], eax
mov eax, 0x307ac682
push ebx
mov ebx, 0x75af1660
sub dword [esp + 8], ebx
pop ebx
add dword [esp + 4], eax
add dword [esp + 4], 0x75af1660
mov eax, dword [esp]
add esp, 4
mov dword [esp], esi
mov dword [esp], eax
push 0x3b7bd1ac
mov dword [esp], eax
mov dword [esp], edi
mov dword [esp], 0x1cefd5e0
sub dword [esp], 0x7fdbbb2a
or dword [esp], 0x7d6f1edc
and dword [esp], 0x73728000
push esi
mov esi, 0xf78ec8e7
sub dword [esp + 4], esi
pop esi
sub dword [esp], 0x76ab6bb4
or dword [esp], 0x7e9b46ab
xor dword [esp], 0x1016e807
push eax
mov eax, 0x6ceba460
xor dword [esp + 4], eax
pop eax
push esi
push eax
mov eax, 0x5ffdb058
push edx
mov edx, 0x2f5e549f
sub edx, 0x6fbf3691
and edx, 0x2bff69ac
add edx, 0x3f7f46e0
or edx, 0x1d755415
add edx, 0xc05f041d
sub esp, 4
mov dword [esp], edx
add dword [esp], 1
pop edx
xor edx, 0x7daf7cf4
xchg edx, edi
inc edi
xchg edx, edi
shl edx, 1
or edx, 0x76ba1200
sub edx, 0xdd531cef
mov esi, edx
pop edx
xor esi, eax
pop eax
add dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], edi
mov dword [esp], esi
mov dword [esp], ecx
push 0x6657f340
mov dword [esp], ebx
mov dword [esp], 0x5fe27a0d
push esi
mov esi, 0x775f9611
sub dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
push edi
mov edi, 0xd9b35599
sub dword [esp + 4], edi
pop edi
mov dword [esp], ebx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop ebx
add ebx, 4
push ebp
push 0xa6d7f32
mov dword [esp], ecx
mov ecx, 0x37fb3fdb
dec ecx
neg ecx
add ecx, 0x37fb3fde
mov ebp, ecx
pop ecx
sub ebx, ebp
push dword [esp]
mov ebp, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], edx
push eax
mov dword [esp], 0x7fde966d
add dword [esp], 1
not dword [esp]
push ebp
mov dword [esp], ebx
push 0xfcd44a8
mov dword [esp], edi
mov edi, 0x36ffd9d0
shr edi, 3
sub edi, 0x767e61ce
sub edi, 0x5ff2cd12
sub edi, 0x65b53197
push esi
mov esi, 0x3ceb7975
shl esi, 4
sub esi, 0x799fb96c
add edi, esi
pop esi
mov ebx, edi
pop edi
xor dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
push 0x27548aba
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
push ebp
mov dword [esp], ecx
mov ecx, 0x7dffd516
mov eax, ecx
pop ecx
or dword [esp + 4], eax
pop eax
push ecx
push ebx
mov ebx, 0x179ad454
mov ecx, ebx
pop ebx
sub dword [esp + 4], 0x6e7e267e
add dword [esp + 4], ecx
push edx
mov edx, 0x6e7e267e
add dword [esp + 8], edx
pop edx
pop ecx
mov dword [esp], ebx
push edi
push esp
pop edi
sub esp, 4
mov dword [esp], eax
mov eax, 0x7bfba100
xor eax, 0x7bfba104
add edi, eax
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ebp
mov ebp, 4
sub edi, ebp
pop ebp
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
sub ecx, edx
pop edx
push esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov dword [esp], ecx
push dword [esp + 4]
mov ecx, dword [esp]
push ecx
mov ecx, esp
push edx
mov edx, 4
add ecx, edx
pop edx
add ecx, 4
xchg dword [esp], ecx
pop esp
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push esi
mov esi, esp
push 0x762584a7
mov dword [esp], ebx
mov ebx, 4
sub esi, 0x3f7a2165
add esi, ebx
push edx
mov edx, 0x3ff70210
or edx, 0x633e02e7
sub edx, 0x4084e192
add esi, edx
pop edx
mov ebx, dword [esp]
push ebp
push eax
mov dword [esp], esp
push ebx
mov ebx, 4
add dword [esp + 4], ebx
pop ebx
pop ebp
push esi
mov esi, 0x7f7f1163
not esi
and esi, 0x34c731de
sub esi, 0x802098
add ebp, esi
pop esi
sub esp, 4
mov dword [esp], eax
mov eax, 0x7cff8a96
dec eax
shr eax, 7
sub eax, 0x7b74ea82
push edx
mov edx, 0x7a7aeb71
add eax, edx
mov edx, dword [esp]
add esp, 4
add ebp, eax
pop eax
xchg dword [esp], ebp
pop esp
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], 0x60ea
mov dword [esp], ebp
push 0x2e02e7f6
mov dword [esp], ebx
mov dword [esp], 0x73dc1fad
push edx
mov edx, 0x6e3fb486
push edx
mov edx, 0x259b1f96
sub dword [esp + 8], edx
pop edx
sub dword [esp + 4], 0x59f37de2
add dword [esp + 4], edx
add dword [esp + 4], 0x59f37de2
add dword [esp + 4], 0x259b1f96
mov edx, dword [esp]
add esp, 4
push edx
mov dword [esp], ebx
mov ebx, 0xcf7e5b09
xor dword [esp + 4], ebx
push dword [esp]
pop ebx
push esi
push eax
mov dword [esp], esp
push eax
mov eax, 4
add dword [esp + 4], eax
pop eax
mov esi, dword [esp]
add esp, 4
add esi, 4
push edx
mov edx, 0x76b7ac7e
and edx, 0x6dcf5ad2
add edx, 0x3fdfa062
not edx
shr edx, 7
xor edx, 0xb732aa
add esi, edx
pop edx
xchg dword [esp], esi
pop esp
mov dword [esp], eax
mov dword [esp], esi
push ecx
mov dword [esp], 0x6aff3ccb
mov dword [esp], eax
mov dword [esp], esi
mov dword [esp], 0x59dd2ffd
xor dword [esp], 0x76be2bf8
sub dword [esp], 0x4f6e6abf
xor dword [esp], 0xd50bc188
push ebx
push 0x576cc773
mov dword [esp], ecx
push eax
mov eax, 0x7e5fb06f
mov ecx, eax
pop eax
push ecx
not dword [esp]
pop ecx
sub ecx, 1
push ecx
xchg dword [esp], ebx
neg ebx
xchg dword [esp], ebx
pop ecx
inc ecx
neg ecx
add ecx, 0xb1199a4
mov ebx, ecx
pop ecx
sub dword [esp + 4], 0x7ddfdda7
sub dword [esp + 4], ebx
add dword [esp + 4], 0x7ddfdda7
pop ebx
push eax
push edi
mov dword [esp], 0x7aff7ed0
pop eax
sub dword [esp + 4], eax
pop eax
xor dword [esp], 0x57732d39
shr dword [esp], 2
or dword [esp], 0x6fbeaf44
xor dword [esp], 0xc4903dc
mov dword [esp], edi
call fcn.0057f4ab
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp + 8]
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push 0x442693c
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp]
pop eax
push ecx
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
jmp 0x57ef38