Function at 0x656d83
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov dword [esp + 2], esp
mov ebx, dword [esp]
xchg dword [esp + 5], eax
mov ch, byte [esp + 0xd]
lea esp, [esp + 5]
pop esi
jmp 0x656791
mov byte [esp + 5], bh
mov bl, ch
lea esi, [ebx - 0xc3]
mov word [esp + 0xc], bx
xchg dword [esp + 5], ebp
cpuid
jmp 0x656751
xchg byte [esp + 3], bl
sub esp, 0xe
add esp, 0
sub esp, 0x10
mov edi, 0xdb05646c
jmp 0x6567da
lea edi, reloc.KERNEL32.dll_CreateEventA
mov bl, al
lea eax, reloc.KERNEL32.dll_CreateEventA
mov word [esp + 0xd], cx
cpuid
xchg dx, ax
jmp 0x656778
xchg ebp, edi
not dx
cpuid
xchg edx, ecx
mov al, ch
mov dh, 0x61
jmp 0x65695b
xchg cx, ax
rdtsc
mov dh, byte [esp + 1]
sub esp, 0x1a
lea esp, [esp + 0x42]
bsr edx, edi
jmp 0x6567c4
push word [esp + 0xb]
lea ebx, [esi + ebp]
pop esi
ror cx, 0xc
mov ax, word [esp + 2]
bsr si, bx
jmp 0x6567aa
bt cx, bx
neg ecx
xchg si, ax
bswap edx
cpuid
inc ebx
jmp 0x656861
mov ebx, dword [esp]
mov ax, word [esp]
cpuid
xchg ebx, edi
sete ah
mov eax, 0x4718ab6b
jmp 0x656819
adc bp, 0x645a
mov cx, sp
lea edi, [edx + edi]
xchg esi, edx
jmp 0x656874
bswap ebx
xchg bl, ch
lea edi, reloc.KERNEL32.dll_CreateEventA
mov ebx, dword [esp]
rdtsc
mov ch, 0xeb
jmp 0x65684b
bsf bx, dx
dec si
rdtsc
mov cx, sp
call 0x656885
or byte [ecx - 0x7699dbdc], cl
sbb al, 0x24
jmp 0x656928
bswap edx
xchg ch, bh
mov edx, 0x8df0444f
stc
neg ah
neg ax
jmp 0x656836
and dl, 0x25
neg dh
call fcn.006568ae
mov ebp, dword [esp]
mov bh, byte [esp]
lea edi, [ecx - 0x16]
lea ebp, reloc.KERNEL32.dll_CreateEventA
xchg ebp, eax
jmp 0x65690f
lea esi, [esi + 0x84]
sets al
mov byte [esp], bl
xchg word [esp], si
jmp 0x65693c
mov word [esp], di
rcl al, cl
lea esi, [edx + edi]
dec ah
xchg word [esp], si
jmp 0x6568f9
mov dword [esp], esi
lea ebx, [eax + 0xc5]
neg ecx
sbb esi, esi
neg al
push dword [esp]
jmp 0x6568c4
mov ebx, 0xe9c922f8
mov eax, edi
setg dh
lea ebp, [edi*4]
add esp, 1
dec bl
jmp 0x656985
xchg ebp, ecx
mov edi, dword [esp]
setno al
mov edx, ebx
xchg ah, bl
mov eax, edi
jmp 0x65689d
cld
stc
mov si, 0x8131
mov ebx, dword [esp]
setns cl
cmc
jmp 0x6569a2
lea esp, [esp]
mov eax, 0x267ccce2
lea ebp, reloc.KERNEL32.dll_CreateEventA
sets ah
rol al, cl
lea ecx, [edi*4]
jmp 0x65696e
inc dh
mov dx, bx
bts ebx, ebx
lea ebp, reloc.KERNEL32.dll_CreateEventA
xchg edx, ecx
clc
jmp 0x656b28
mov bx, ax
mov bl, 0x42
lea edi, [ebp + 0x37]
pop dword [esp + 0x10]
xchg ebp, edi
ror bx, cl
jmp 0x656801
xchg byte [esp], bh
cld
xchg bp, bx
push ebp
lea ebp, [ebp*4]
jmp 0x656a57
cld
cpuid
mov dx, di
not cl
mov bl, dh
mov bx, 0xb436
jmp 0x6569d4
mov ebp, dword [esp]
pop ax
mov si, dx
mov dh, ch
mov edx, esi
mov edi, 0xa1bdba88
jmp 0x6569ea
lea ebp, [eax - 0x75]
bt ecx, eax
mov dx, 0x5488
neg bx
jmp 0x656afc
mov edi, ebp
push word [esp + 6]
add esp, 0x11
setle al
push word [esp + 6]
pop cx
jmp 0x656a1e
rol ax, cl
xor bx, ax
add esp, 0
sub esp, 0x11
mov bl, ah
cpuid
jmp 0x656a34
cld
call fcn.00656a9a
salc
inc ecx
sal dword [eax + reloc.KERNEL32.dll_CreateEventA], 1
nop
test dword [edx], reloc.KERNEL32.dll_CreateEventA
inc esp
xchg dword [esp], ebp
mov byte [esp + 2], bh
mov word [esp + 1], dx
lea eax, reloc.KERNEL32.dll_CreateEventA
mov eax, ebx
xchg word [esp + 3], di
jmp 0x656a69
mov al, byte [esp + 6]
rdtsc
xchg cl, ah
mov ebx, dword [esp + 3]
bsf dx, bp
mov edx, esp
jmp 0x656a7f
lea esi, [esi*4]
rcr edi, cl
cld
mov eax, 0x9b2651e9
mov ebp, dword [esp]
mov word [esp + 4], bx
jmp 0x656ac5
neg ax
lea esp, [esp]
xchg byte [esp], ah
lea esp, [esp]
cpuid
push cx
jmp 0x656a0b
xchg bx, si
mov byte [esp], al
cld
stc
jmp 0x6569be