Function at 0x64daa9
Capabilities:
Execute anti-debugging instructions

Disassembly:
push eax
push edx
jmp 0x578ed1
push eax
push edx
push eax
push edx
rdtsc
pop edx
pop eax
rdtsc
jb 0x578ee1
push ecx
pop ecx
pop edx
pop eax
rdtsc
pushal
push edx
pop edx
jo 0x578ef0
push eax
push edx
rdtsc
pop edx
pop eax
push eax
push edx
rdtsc
pop edx
pop eax
popal
pop edx
pop eax
push eax
mov dword [esp], 0xa383692
mov dword [esp], edx
push esp
pop edx
push ebx
mov ebx, 0x75d56ddb
dec ebx
sub ebx, 0x75d56dd6
add edx, ebx
pop ebx
sub esp, 4
mov dword [esp], edi
push ebp
push esi
push 0x7ffdd9e9
pop esi
neg esi
add esi, 0xddfd28e9
mov ebp, esi
pop esi
mov edi, ebp
pop ebp
sub edi, 0x77df1fd8
push edx
mov edx, 0x5ff6ac61
or edx, 0x19d5fcb5
sub edx, 0x5efd954d
add edx, 0x7e1a307a
sub edi, edx
pop edx
not edi
or edi, 0x62e6018f
push edx
mov edx, 0x7fff4f81
xchg edx, eax
neg eax
xchg edx, eax
sub edx, 0x4075364d
or edi, edx
pop edx
sub edi, 0xffff7bfb
sub edx, edi
push dword [esp]
mov edi, dword [esp]
add esp, 4
add esp, 4
push ecx
mov dword [esp], edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push ebp
sub esp, 4
mov dword [esp], ebp
mov dword [esp], esp
add dword [esp], 4
pop ebp
push esi
mov esi, 0x7ff73208
push ecx
mov ecx, 0x5ffb2fa1
or esi, ecx
pop ecx
push eax
push ecx
mov ecx, 0x7b6b1562
mov eax, 0x8494ea9d
xor eax, ecx
pop ecx
add esi, eax
pop eax
push ebp
mov ebp, 0x7fff3fa4
sub esi, ebp
pop ebp
add ebp, esi
pop esi
push ecx
push ebp
mov ebp, 0x77cb9f1f
sub ebp, 0xffffffff
neg ebp
dec ebp
sub ebp, 0x7ff76739
push eax
mov eax, 0x6f9e152f
sub eax, 0x77db0ed1
add ebp, eax
pop eax
mov ecx, ebp
pop ebp
add ebp, 0x7b3f8fd0
sub ebp, 0x67cb8cd1
sub ebp, ecx
add ebp, 0x67cb8cd1
sub ebp, 0x7b3f8fd0
pop ecx
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], ebx
mov dword [esp], ecx
push ebp
mov dword [esp], ecx
push esp
pop ecx
push ebx
mov dword [esp], ebp
push esi
mov dword [esp], edx
mov edx, 0x7fe6ac46
push 0
sub dword [esp], edx
pop edx
add edx, 0x57b42c5e
push eax
mov eax, 0x76ffb900
shl eax, 3
add eax, 0xb6e1bdca
add edx, eax
pop eax
or edx, 0x5ed7e431
push ebx
mov dword [esp], ecx
mov ecx, 0x5f57b587
sub edx, 0x33ffe990
sub edx, ecx
push eax
mov eax, 0x77b7c8e7
sub eax, 0x43b7df57
add edx, eax
pop eax
pop ecx
sub edx, 0xffa83068
mov ebp, edx
pop edx
add ecx, 0x6dfff085
add ecx, ebp
sub ecx, 0x6dfff085
pop ebp
sub ecx, 4
push ecx
mov dword [esp], 0x68537c03
mov dword [esp], ecx
push dword [esp + 4]
mov ecx, dword [esp]
add esp, 4
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
push ecx
mov ecx, esp
push edx
mov edx, 0x7fe70576
xor edx, 0x5df675f2
dec edx
or edx, 0x3dfc239d
dec edx
shr edx, 8
push eax
mov eax, 0xffc00291
add edx, eax
pop eax
add ecx, edx
pop edx
push edi
mov edi, 4
sub ecx, edi
pop edi
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
push edi
mov dword [esp], 0x2d537960
mov dword [esp], esp
add dword [esp], 4
pop edx
push ecx
mov ecx, 4
sub edx, 0x77afa37f
push eax
mov dword [esp], ecx
mov ecx, 0x55b63d2f
add edx, ecx
mov ecx, dword [esp]
add esp, 4
sub edx, 0x7fba29ca
add edx, ecx
add edx, 0x7fba29ca
sub edx, 0x55b63d2f
add edx, 0x77afa37f
pop ecx
push ebp
mov ebp, 4
sub edx, ebp
pop ebp
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push esi
mov dword [esp], 0x53f743e1
push ecx
mov ecx, 1
add dword [esp + 4], ecx
pop ecx
sub esp, 4
mov dword [esp], eax
push eax
mov dword [esp], 0x7fdf1e00
push esi
mov esi, 0x6f01a5e0
or dword [esp + 4], esi
pop esi
sub dword [esp], 0x7fd72f92
xor dword [esp], 0x71f7e5fe
dec dword [esp]
xor dword [esp], 0x456c857b
shr dword [esp], 6
add dword [esp], 0x7165131d
mov dword [esp], edx
push eax
push ebx
mov ebx, 0x54e791b1
mov eax, 0xd41e6373
sub eax, 0x7a0dfd69
sub eax, ebx
add eax, 0x7a0dfd69
pop ebx
mov edx, 0x71d04200
sub edx, eax
pop eax
push edx
pop eax
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], ebx
push 0x3e1c2e81
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], edx
mov dword [esp], ebp
mov dword [esp], 0x5e8ffb3c
shl dword [esp], 2
sub esp, 4
mov dword [esp], edx
mov edx, 0x13d773d
sub dword [esp + 4], 0x645ddde6
add dword [esp + 4], edx
add dword [esp + 4], 0x645ddde6
pop edx
sub esp, 4
mov dword [esp], ebx
mov dword [esp], 0xd8e0095
mov dword [esp], edi
mov edi, 0x5ffeb661
xor dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
add dword [esp], 0x5dbfdabd
add dword [esp], 0x7d7f4b83
sub esp, 4
mov dword [esp], eax
mov eax, 0x89dbf607
xor dword [esp + 4], eax
pop eax
mov dword [esp], eax
mov dword [esp], ebp
push eax
push edx
mov dword [esp], ebp
mov dword [esp], 0x6ee1cf1f
mov dword [esp], eax
push esi
push edx
mov dword [esp], 0x65338187
mov dword [esp], ecx
push ebp
push ecx
mov ecx, 0x7eca49a0
mov ebp, ecx
pop ecx
mov ecx, ebp
pop ebp
shr ecx, 5
neg ecx
shl ecx, 4
add ecx, 0x5d644e6d
mov esi, ecx
pop ecx
push ebp
push edx
push 0xdfffa67
mov edx, dword [esp]
add esp, 4
neg edx
not edx
inc edx
sub edx, 0xceb06305
mov ebp, edx
pop edx
add ebp, 0x2dafbc26
or esi, ebp
pop ebp
add esi, 0xec712189
push 0x25b7d441
mov dword [esp], esi
add dword [esp], 0x693e0831
push dword [esp]
pop eax
add esp, 4
sub eax, 0x693e0831
mov esi, dword [esp]
add esp, 4
mov dword [esp + 4], eax
pop eax
mov dword [esp], esi
push 0x30d2fe7a
mov dword [esp], ebp
push 0x7b47869b
push esp
pop dword [esp]
push ebp
mov ebp, 4
add dword [esp + 4], ebp
pop ebp
mov ebp, dword [esp]
push 0x54c8f220
mov dword [esp], ebx
mov ebx, esp
push edx
push edi
mov edi, 4
mov edx, edi
pop edi
add ebx, edx
pop edx
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push esi
mov dword [esp], ebx
mov ebx, 4
add ebp, ebx
pop ebx
push ecx
push 4
mov ecx, dword [esp]
add esp, 4
add ebp, 0x3bdfbcb4
sub ebp, ecx
sub ebp, 0x3bdfbcb4
pop ecx
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], edi
call fcn.00579394
sbb al, 0x24
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
mov ebx, dword [esp]
push edi
mov dword [esp], edx
mov edx, esp
push edi
mov edi, 4
add edx, edi
pop edi
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov eax, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
push edx
mov edx, 0x7e33eae6
add edx, 0x81cc151e
add edi, edx
pop edx
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0x578eb6