Function at 0x6346c7
Capabilities:
Execute anti-debugging instructions

Disassembly:
pushal
pushal
js 0x58658c
push eax
push edx
rdtsc
pop edx
pop eax
pushal
popal
popal
push eax
push edx
pushal
popal
rdtsc
pushal
popal
push eax
push edx
rdtsc
pop edx
pop eax
pop edx
pop eax
js 0x5865bf
jmp 0x5865bf
popal
push ecx
mov dword [esp], 0x7fff8ee5
add dword [esp], 0x6fffa86d
and dword [esp], 0x37ffa47d
shr dword [esp], 2
inc dword [esp]
push esi
push ebp
push ecx
mov ecx, 0x7f7373eb
not ecx
sub ecx, 0x635f0562
push ecx
add dword [esp], 0x7ffb1012
pop ebp
sub ebp, 0x7ffb1012
pop ecx
shl ebp, 8
dec ebp
neg ebp
sub ebp, 0xc26db1dc
push edx
mov edx, ebp
mov esi, edx
pop edx
mov ebp, dword [esp]
add esp, 4
sub dword [esp + 4], 0x3ff11ec5
add dword [esp + 4], esi
add dword [esp + 4], 0x3ff11ec5
pop esi
mov dword [esp], esi
mov dword [esp], 0x3fafb4bc
inc dword [esp]
push ecx
mov ecx, 0x5fb9877b
xor dword [esp + 4], ecx
pop ecx
push eax
push 0x70ff6015
mov dword [esp], ebp
mov ebp, 0xe60ac050
mov eax, ebp
pop ebp
sub dword [esp + 4], 0x7fb50ec6
add dword [esp + 4], eax
push edi
mov edi, 0x7fb50ec6
add dword [esp + 8], edi
pop edi
mov eax, dword [esp]
add esp, 4
mov dword [esp], eax
push ecx
mov dword [esp], 0x7bc725de
mov dword [esp], ecx
push edx
push esp
mov edx, dword [esp]
add esp, 4
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], esi
mov esi, 0x1b9a6678
mov dword [esp + 4], esi
push dword [esp]
pop esi
push ebx
push esp
pop ebx
push ebp
mov ebp, 0x72fe885f
or ebp, 0x6eee70a4
and ebp, 0x7eff9db5
neg ebp
dec ebp
shl ebp, 6
xor ebp, 0x4059d284
add ebx, ebp
pop ebp
push ecx
mov ecx, 4
sub ebx, 0x57df9463
add ebx, ecx
push edx
mov edx, 0x57df9463
add ebx, edx
pop edx
pop ecx
push ebx
push dword [esp + 4]
mov ebx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], ecx
push edx
mov dword [esp], ebp
mov dword [esp], edi
mov dword [esp], ecx
push esp
pop ecx
push ecx
mov dword [esp], edi
mov edi, 4
add ecx, 0x2f631353
add ecx, 0x5bfd0b17
add ecx, edi
sub ecx, 0x5bfd0b17
sub ecx, 0x2f631353
push dword [esp]
pop edi
add esp, 4
push ebp
mov ebp, 4
sub ecx, ebp
push dword [esp]
pop ebp
push edi
push esp
pop edi
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], edx
push ebx
mov dword [esp], ebp
push 0x2547e15b
mov dword [esp], ecx
mov ecx, 0x6ff65eff
mov dword [esp + 4], ecx
pop ecx
push edi
mov edi, 1
push edx
mov edx, 0x7c735636
sub dword [esp + 8], edx
push dword [esp]
pop edx
add esp, 4
add dword [esp + 4], edi
push edi
mov dword [esp], edx
mov edx, 0x7c735636
sub dword [esp + 8], 0x55ff249c
push ebx
mov ebx, 0x4bf9e613
sub dword [esp + 0xc], ebx
pop ebx
add dword [esp + 8], edx
add dword [esp + 8], 0x4bf9e613
add dword [esp + 8], 0x55ff249c
pop edx
push dword [esp]
pop edi
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
inc dword [esp]
sub dword [esp], 0x4634f743
mov dword [esp], ebx
push 0x7fdb3994
mov dword [esp], eax
mov eax, esp
add eax, 4
push ecx
push eax
mov eax, 0x7f5e430a
push esi
mov esi, 0x7a47d4bd
push ecx
mov ecx, 0x5327acf7
xor ecx, 0x6ed58368
neg ecx
and ecx, 0x5fd34011
not ecx
xor ecx, 0xe40e45a7
sub esi, ecx
pop ecx
mov ecx, esi
pop esi
xor ecx, eax
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
neg ecx
sub ecx, 0xffffffff
push ecx
push ebx
pop ecx
pop ebx
inc ebx
xchg ecx, ebx
or ecx, 0x6f7fcc79
not ecx
push edx
mov edx, 0x100010fe
add ecx, 0x17765bb6
sub ecx, edx
sub ecx, 0x17765bb6
pop edx
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x768e7ec1
not ebp
sub ebp, 0x17831323
add eax, ebp
pop ebp
sub eax, 0x11f38c00
sub eax, ecx
add eax, 0x11f38c00
sub eax, 0x71ee6e1b
pop ecx
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edi
mov dword [esp], 0x3ff4f493
xchg dword [esp], edi
push ebx
mov dword [esp], edi
xchg dword [esp], eax
not eax
xchg dword [esp], eax
pop edi
xchg dword [esp], edi
xor dword [esp], 0x7efec412
shl dword [esp], 1
xor dword [esp], 0x5a920063
push ebp
mov dword [esp], 0xa109ed5
mov dword [esp], ecx
mov dword [esp], edx
push 0x7ffda600
pop edx
or dword [esp + 4], edx
push dword [esp]
pop edx
push ebx
mov ebx, esp
push esi
push ebp
mov ebp, 0x7be9e48c
xor ebp, 0x7be9e488
mov esi, ebp
pop ebp
add ebx, esi
pop esi
add ebx, 4
xchg dword [esp], ebx
pop esp
sub dword [esp], 0xb4da58e
mov dword [esp], edi
mov dword [esp], ebp
push eax
mov dword [esp], edx
sub esp, 4
mov dword [esp], esp
push eax
mov eax, 4
add dword [esp + 4], eax
pop eax
pop edx
add edx, 4
sub edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], 0x22fd16ef
neg dword [esp]
shr dword [esp], 6
sub dword [esp], 1
push ecx
mov ecx, 0x7477fd11
xor dword [esp + 4], ecx
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
and dword [esp], 0x7d879e3d
push esi
mov esi, 0xb2617443
add dword [esp + 4], esi
pop esi
mov dword [esp], ecx
mov dword [esp], esi
push edx
mov edx, esp
push eax
push 0x861bb46
mov dword [esp], edi
push ebx
mov ebx, 0x7c7e200f
mov edi, ebx
mov ebx, dword [esp]
add esp, 4
mov eax, 0x7c7e200b
xor eax, edi
pop edi
sub edx, 0x5ffefefa
add edx, eax
add edx, 0x5ffefefa
push dword [esp]
pop eax
add esp, 4
push esi
push ebx
push 0x167a6001
mov dword [esp], ebp
mov dword [esp], 0x6aff6185
pop ebx
push esi
mov esi, 0x3e6bd040
sub ebx, esi
pop esi
inc ebx
sub ebx, 0x67e72247
sub ebx, 0xc4ac6efb
mov esi, ebx
pop ebx
sub edx, esi
mov esi, dword [esp]
add esp, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], eax
mov dword [esp], ebx
mov dword [esp], edi
call fcn.00586a1c
popal
pushfd
push edx
push esp
pop edx
add edx, 4
push eax
mov eax, 4
sub edx, eax
pop eax
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
mov dword [esp], 0x42b
push 0x73f97b21
mov dword [esp], ebx
mov dword [esp], edx
push ebx
push eax
push 0x76b641e2
pop eax
sub eax, 0x7693247c
mov ebx, eax
pop eax
mov dword [esp + 4], ebx
pop ebx
push ebp
mov ebp, esp
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], ecx
mov dword [esp], eax
push ecx
mov dword [esp], 0x7a7b1184
dec dword [esp]
xor dword [esp], 0x7e3b297d
and dword [esp], 0x7fefd400
neg dword [esp]
add dword [esp], 0x243fa9ca
or dword [esp], 0x67bff159
shr dword [esp], 5
dec dword [esp]
not dword [esp]
xor dword [esp], 0x6ed14800
sub dword [esp], 0x7deaab32
mov dword [esp], ebx
push dword [esp + 0x10]
mov eax, dword [esp]
push esi
mov esi, esp
push ebx
mov ebx, 0x5bcab7a7
inc ebx
shr ebx, 4
inc ebx
neg ebx
add ebx, 0x5bcab7f
add esi, ebx
pop ebx
push ecx
mov ecx, 0x7dffce13
not ecx
xor ecx, 0x820031e8
add esi, ecx
pop ecx
xchg dword [esp], esi
pop esp
push dword [esp + 8]
push dword [esp]
mov ebx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
push ecx
mov ecx, 4
add esi, ecx
pop ecx
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
push dword [esp]
pop eax
push ebp
mov ebp, esp
push esi
mov esi, 4
add ebp, esi
pop esi
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0x586584