Function at 0x67c802
Capabilities:
Execute anti-debugging instructions

Disassembly:
push 0xf0666278
jmp 0x67c83e
mov dword [esp + 0x24], edi
lea esp, [esp + 0x24]
jmp 0x67c866
mov dword [esp], eax
push bx
mov byte [esp + 1], al
lea esp, [esp + 2]
jmp 0x67c7ec
lea edi, [ebp*4]
mov ah, 0xa1
call 0x67c84e
nop
adc esp, dword [esi - 1]
je 0x67c876
add bh, byte [ebx + 0x30]
lea esp, [esp + 2]
jmp 0x67c887
pushfd
jmp 0x67add9
lea esp, [esp + 2]
jmp 0x67c887
ficomp dword [eax]
mov edi, 0x39caaf3f
cmc
xchg edi, eax
adc byte [esi + 0xdd510e1], al
jmp 0x67c86c
mov esi, dword [esp + 0x30]
mov dh, al
lea ebx, reloc.WINMM.dll_midiStreamStop
lea edi, [eax*4]
jmp 0x67c8b6
lea edi, [esp + 4]
rdtsc
mov ecx, dword [esp]
btc bx, sp
jge 0x67cd11
jl 0x67cd11
xchg ebx, eax
sbb byte [esi - 0xa50e717], cl
in al, 0x17
jle 0x67c923
pop es
mul byte [edx - 0x62d88780]
add byte [edi], 0x7e
lahf
adc cl, 0xa8
sahf
sub byte [edx + 0xe809cf2], 0x47
mov dword [reloc.WINMM.dll_midiStreamStop], eax
adc byte [edx], 0x29
mov al, byte [0xa42a1780]
adc ch, 0x3b
popfd
sbb byte [eax + 0x7a809c49], 0x96
pushfd
adc byte [edx + edi*8], 0x9f
or byte [esi - 0x7b], 0x9c
and bl, 0x7d
sahf
cmp byte [eax - 0x20], 0xa3
add byte [eax + 0x41], 0x9c
xor byte [ecx], 0xd6
sahf
add byte [esi - 0x6f7f6393], 0x76
mov al, byte [0x9c414080]
insd dword es:[edi], dx
pushfd
adc byte [eax + 0x4080a076], 0x41
pushfd
or byte [esi], 0x9f
sub byte [edi], 0x58
lahf
xor byte [edi], 0xfa
mov al, byte [0x9c414080]
xor byte [edx - 0x67], 0x9e
cmp byte [ecx], 0x18
popfd
xor byte [edi - 0x12], 0xa0
xor byte [edx + 0x36], 0x9c
xor byte [ebx + 0x1a80a196], 0xfc
pushfd
cmp byte [esi - 0x35], 0x9f
and byte [edi], 0xe9
pushfd
add byte [eax + 0x41], 0x9c
sub byte [esi], 0x88
pushfd
add byte [esi + 0x29], 0x9d
and byte [edi], 0x73
mov dword [reloc.WINMM.dll_midiStreamStop], eax
xor byte [edx + 0x36], 0x9c
adc byte [eax], 0x78
mov eax, dword [reloc.WINMM.dll_midiStreamStop]
xor cl, 0x8a
pushfd
add byte [edx - 0x24], 0xa5
adc byte [eax + edx*4 - 0x76a07f62], 0xa0
add byte [eax + 0x41], 0x9c
sbb byte [edx + 0x7280a357], 0x36
pushfd
xor byte [ecx], 0x41
mov eax, dword [reloc.WINMM.dll_midiStreamStop]
add byte [eax + 0x18], 0x9e
cmp bh, 0x27
mov byte [0x9ff1d780], al
xor byte [edx + 0x36], 0x9c
and byte [esi + 0x56], 0xa1
cmp byte [ecx], 0x3d
pushfd
or byte [ecx], 0x85
sahf
sub byte [ebp + 0x72809d36], 0x36
pushfd
sbb byte [ebx + 0x18], 0xa0
sbb byte [edx], 0xcf
mov al, byte [0xa07d4080]
and byte [ebx + 0x72809df0], 0x36
pushfd
cmp byte [eax + ebx*4 + 0xdbd809c], 0x9d
adc byte [ebx - 0x64], 0x80
add dword [eax], esp
adc cl, 0xe8
lahf
or al, 0xe8
movsd dword es:[edi], dword [esi]
add byte [ecx + 0x42809f61], 2
lahf
add byte [eax + 0x41], 0x9c
sub ch, 0x5f
mov byte [0x9c578680], al
xor dh, 0xeb
popfd
sub byte [edi + 0x27], 0xa4
cmp byte [edx], 0x9d
popfd
add byte [eax + 0x41], 0x9c
xor byte [edi + 0x5c809fbc], 0xe9
pushfd
and byte [eax], 0xcf
lahf
xor byte [edi + ecx*8 - 0x60], 0x80
jb 0x67ca5e
pushfd
sub byte [edx + 0x5c809deb], 0x71
pushfd
or byte [esi - 0x447f6317], 0x21
popfd
adc al, 0x28
popfd
or byte [esi], 0x1c
sahf
adc al, 0xc9
wait
cmp byte [esp + ebx*8 - 0x5d], 0x80
scasb al, byte es:[edi]
sti
mov al, byte [0xa06f1280]
xor byte [0xc4809c72], 0x1f
lahf
cmp byte [ebp + 0x3e], 0x9d
xor byte [edx + 0x36], 0x9c
jb 0x67ca96
pushfd
sub byte [esi], 0x44
mov al, byte [0xa3e50a80]
sbb byte [esi + ebp - 0x65], 0x80
into
jnp 0x67ca10
xor ah, 0x62
sahf
or byte [ebx - 0x6b], 0x9e
xor byte [edx + 0x36], 0x9c
xor byte [edx + 0x32], 0x9f
sub ah, 0x6e
pushfd
sbb byte [ecx], 0xf4
popfd
sub ah, 0x3b
popfd
xor byte [edi], 0x60
popfd
cmp byte [esi + 0x1b], 0x9d
and byte [esi + 0x56809e10], 0xf1
sahf
cmpsb byte [esi], byte es:[edi]
adc byte [esi - 0x610ea980], bl
xor dh, 0x45
popfd
sbb dh, 0xe
sahf
and byte [eax - 4], 0xa0
xor byte [ecx], 0xb2
pushfd
cmp bh, 0x79
mov eax, dword [reloc.WINMM.dll_midiStreamStop]
adc byte [ebx], 0xee
mov al, byte [0x9c414080]
xor dh, 0x36
pushfd
and dl, 0x61
popfd
xor byte [edx + 0x36], 0x9c
and byte [ecx], 0x2e
lahf
add byte [eax + 0x41], 0x9c
sbb byte [edx + 0x2f80a194], 0x36
popfd
or byte [ecx - 0x3f7f604f], 0x38
pushfd
sub bl, 0x5a
pushfd
and byte [ecx], 3
mov byte [0x9c414080], al
xor byte [ebx], 0xe8
mov al, byte [0xa09c6880]
adc byte [ecx - 0x7d], 0x9e
cmp byte [edx - 0x347f5f30], 0x59
mov al, byte [0x9d489280]
adc byte [eax + 0x880a34b], 0x22
popfd
sub byte [ecx + ecx*4], 0x9e
xor byte [edi + ecx + 0x367280a2], 0x9c
adc byte [eax + ebp - 0x3c967f61], 0xa1
add byte [ebp + 0x75809f42], 0x8e
sahf
add byte [ebx - 0x79], 0x9c
or byte [0x3e80a03e], 0xc0
mov al, byte [0x9c367280]
and byte [ebp + 0x2c809f90], 0x64
sahf
and ah, 0xa
sahf
adc byte [edx - 0x16], 0xa0
sbb byte [ecx + 0x7a80a0b8], 0xe0
mov eax, dword [reloc.WINMM.dll_midiStreamStop]
and byte [esi - 0x1f], 0xa1
sbb byte [edx + 0x1c809d0d], 0xa0
sahf
and byte [edi], 0x27
popfd
add byte [eax + 0x41], 0x9c
sbb cl, 0x3a
lahf
adc byte [esi - 0x70], 0x9b
xor byte [edx], 0x7c
mov al, byte [0xa2ec5b80]
or byte [ebp + 0x40809d8e], 0x41
pushfd
and byte [edi + 0xe], 0xa1
xor byte [edx + 0x36], 0x9c
add byte [edx + 0x1b], 0x9d
sub byte [eax - 0x41], 0x9c
adc byte [ebx + edx*8 - 0xcf97f60], 0xa2
xor byte [edi + 0x39], 0x9f
xor byte [edx + ebp*4], 0x9c
sbb dh, 0x4b
mov al, byte [0x9ff21d80]
adc ch, 0xe3
pushfd
add byte [eax + 0x41], 0x9c
sbb al, 0xac
mov eax, dword [reloc.WINMM.dll_midiStreamStop]
add byte [edx + ecx*8], 0x9c
cmp byte [edi], 0x39
lahf
cmp byte [edi - 0x42], 0x9c
xor byte [edi - 0x4d], 0xa0
sbb byte [edi + 0x72], 0xa2
adc byte [esi], 0x44
mov dword [reloc.WINMM.dll_midiStreamStop], eax
adc byte [eax], 0xa6
lahf
or byte [eax], 0x3f
movsb byte es:[edi], byte [esi]
add byte [eax + 0x41], 0x9c
adc byte [ebp - 0x7b], 0x9c
sbb byte [edi], 0x30
lahf
xor dh, 0x3a
lahf
and byte [eax + 0x6b], 0x9c
xor byte [edx + 0x36], 0x9c
adc byte [esi + 0x580a0a1], 0x8a
movsd dword es:[edi], dword [esi]
xor byte [edx + 0x36], 0x9c
sbb byte [edi - 0x7d], 0xa1
cmp byte [eax - 0x747f5bb6], 0x37
pushfd
and byte [ebp - 0xe], 0xa1
xor byte [edx + 0x36], 0x9c
or byte [esi - 0x74], 0x9d
xor byte [eax - 0x76], 0x9e
add byte [eax - 0x6e], 0x9e
and dh, 0x7a
mov byte [0x9c402a80], al
sbb byte [ebx], 0x85
sahf
cmp byte [ecx + 0x4c809f6a], 0xa7
sahf
add byte [eax + 0x74], 0x9c
cmp bl, 0x45
lahf
sbb bl, 0x4c
sahf
and cl, 0xd8
mov byte [0xa0d60380], al
or ah, 0xd
movsd dword es:[edi], dword [esi]
or byte [ebp + 0x4080a609], 0x41
pushfd
sub dl, 0x65
pushfd
cmp byte [ebx], 0x23
sahf
adc byte [ebp + 0xf809ce2], 0x94
movsd dword es:[edi], dword [esi]
sub byte [esp + eax*2], 0x9f
sbb byte [esi + 0x67809f4d], 0x1e
lahf
and bh, 0x33
lahf
sub ah, 0xaf
mov byte [0x9ed2d680], al
xor byte [ebp + 0x59], 0x9c
sub ch, 0x8b
pushfd
and byte [esi - 0x207f60ba], 0x68
sahf
sub dl, 0x3a
movsd dword es:[edi], dword [esi]
add byte [ecx + 0x40809e48], 0x41
pushfd
and cl, 0xaf
mov byte [0xa060e280], al
sub byte [ebp - 0x52], 0xa3
xor byte [esi + 0x44], 0xa3
or byte [ebx + 0x42], 0x9f
cmp byte [ecx + 0x16], 0x9d
adc byte [ecx], 0xe
popfd
cmp ch, 4
wait
and byte [0xa780a091], 0x6e
popfd
cmp byte [ecx + 0x4e809cf8], 0xc5
lahf
and byte [ebx], 0x6d
mov byte [0x9fa18880], al
xor byte [ebx - 0xf7f608d], 0xf3
ljmp 0xec83
seto cl
sub esp, 0x11
lea edx, [eax + edx]
lea esp, [esp + 1]
mov ecx, esi
jmp 0x67cf1e
sub esp, 0xbc
mov ebp, esp
and edx, 0x31c723bd
jb 0x67ccda
jae 0x67cd29
xlatb
pop ebp
int 0x94
aad 0x27
scasb al, byte es:[edi]
cmp al, 0x5b
mov dh, 9
aas
push es
mov cl, 0xeb
fisttp qword [ebp - 0x14fedb9c]
into
mov al, byte ds:[0x16a05136]
inc eax
fisttp qword [ebp + 0x14]
out 0x27, eax
lodsb al, byte [esi]
mov edi, 0x900f3186
rol dword [ebx + reloc.WINMM.dll_midiStreamStop], 0x10
jmp 0x67ccf0
seto cl
sub esp, 0x11
lea edx, [eax + edx]
call 0x67cd38
mov eax, dword [ebx - reloc.WINMM.dll_midiStreamStop]
bsf dx, ax
bts eax, esp
add dh, 0xdd
jmp 0x67df8f
bsr ebx, edi
neg ah
jne 0x67cdf9
lea esp, [esp + 2]
jmp 0x67cdfd
mov ebx, dword [esp]
push bx
mov dx, 0x12ae
jmp 0x67cd4d
mov al, byte [esp]
not bl
adc bh, 0x4b
jmp 0x67cdb0
xchg bh, ah
mov al, byte [esp]
not bl
adc bh, 0x4b
xchg edx, ebx
mov ax, word [esp]
rol esi, 0
jne 0x67cdb4
je 0x67cdd7
xchg edx, ebx
jmp 0x67cd94
rdtsc
xchg dx, ax
mov bx, 0xc8f1
setle ah
sub esp, 0x17
jmp 0x67cde1
ror esi, 0
rol bh, 5
jno 0x67cd88
xchg bh, ah
jmp 0x67cd72
rdtsc
xchg dx, ax
mov bx, 0xc8f1
jmp 0x67ce15
xchg byte [esp + 0xe], dl
xchg bx, dx
lea esp, [esp + 3]
jmp 0x67ce4a
lea esp, [esp + 2]
jmp 0x67cdcb
setle ah
sub esp, 0x17
call 0x67cdff
lea ebx, [si]
mov ch, 0
add byte [eax], al
add byte [esi - 9], ah
shl byte [esi + 0x55], cl
lea esp, [esp + 2]
lea esi, [esi - 0x3f]
jmp 0x67ceb3
not edx
sbb ax, 0x841a
jmp 0x67cd67
lea esp, [esp + 0x14]
add esi, 0x76b6e389
jmp 0x67ce84
mov ax, bx
bswap ebx
setae bh
push dword [esp]
ret 4
rdtsc
mov ebx, ebp
lea eax, [ecx + edx]
xchg ah, bl
mov ah, 7
jmp 0x67cec8
lea ebx, [ebx*4]
ror dx, 6
jnp 0x67ce6e
rdtsc
jmp 0x67ce99
mov ebx, ebp
lea eax, [ecx + edx]
xchg ah, bl
jmp 0x67ceee
setb dl
add ax, sp
mov dh, byte [esp]
mov dh, 0xcc
mov edx, 0x46eac966
xchg dword [esp], esi
jmp 0x67ce60
dec esi
rdtsc
mov bx, 0x3ee0
sub esp, 0x16
jmp 0x67cef2
mov word [esp + 2], bp
pop dword [esp + 4]
lea esp, [esp + 2]
jmp 0x67cfbd
mov ah, 7
jmp 0x67cec8
ja 0x67ced8
mov word [esp + 2], bp
pop dword [esp + 4]
jmp 0x67cf03
lea esp, [esp + 2]
jmp 0x67cfbd
rol edx, cl
jne 0x67ce3f
not edx
sbb ax, 0x841a
mov ebx, dword [esp]
push bx
mov dx, 0x12ae
jmp 0x67cd4d
add esi, dword [edi]
dec bh
jno 0x67cf76
bswap eax
jmp 0x67cf60
pop word [esp + 2]
lea ebx, [edx + ebp]
lea esp, [esp + 2]
jmp 0x67cf9b
not eax
jmp 0x67cf9d
bswap eax
not eax
jmp 0x67cf9d
pop word [esp + 2]
lea ebx, [edx + ebp]
lea esp, [esp + 2]
jmp 0x67cf3a
lea esp, [esp + 0x10]
not esi
sub esp, 0x1c
jp 0x67cf8f
jnp 0x67cf52
stc
lea esp, [esp + 2]
lea eax, [eax - 0x24]
mov bl, bh
shl dx, cl
xchg ecx, edx
inc dh
jmp 0x67d47a
xchg dword [esp + 8], eax
setbe bl
sub esp, 0x10
pushal
mov dh, ch
push word [esp + 0xc]
jmp 0x67d83a