Function at 0x678ead
Capabilities:
Execute anti-debugging instructions

Disassembly:
push eax
push edx
push eax
push edx
jmp 0x5cf376
push edi
pop edi
rdtsc
je 0x5cf380
jp 0x5cf386
pop edx
pop eax
push eax
push edx
jp 0x5cf390
push ecx
pop ecx
rdtsc
je 0x5cf39a
pushal
popal
pop edx
pop eax
rdtsc
pushal
jmp 0x5cf3b4
push eax
push edx
rdtsc
pop edx
pop eax
push eax
pop eax
popal
pop edx
pop eax
jmp 0x5cf3d4
push 0x418bf2b0
mov dword [esp], edx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop edx
add edx, 4
sub esp, 4
mov dword [esp], esi
mov esi, 4
sub edx, 0x347ef6ec
sub edx, 0x6acf9b81
sub edx, esi
add edx, 0x6acf9b81
push eax
push edx
mov edx, 0x6f7ba0d6
sub edx, 0xffa09d01
mov eax, edx
pop edx
add eax, 0x7ff747e0
push ebx
mov ebx, 0x6dafc825
sub eax, ebx
pop ebx
add eax, 0xb25c735c
push ebp
push ebx
mov ebx, 0x7fdf4106
shl ebx, 6
neg ebx
xor ebx, 0x5dd5b4a2
mov ebp, ebx
pop ebx
sub edx, 0x3b7fcc0e
sub edx, 0x4cdfaa51
add edx, ebp
add edx, 0x4cdfaa51
add edx, 0x3b7fcc0e
mov ebp, dword [esp]
add esp, 4
add edx, eax
sub edx, 0x55fa0a22
pop eax
mov esi, dword [esp]
add esp, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], eax
push ebx
mov dword [esp], 0x5723bd2c
mov dword [esp], edx
mov dword [esp], 0xfd15ded
mov dword [esp], ecx
mov dword [esp], 0x7dff5827
add dword [esp], 0xffffffff
add dword [esp], 0x7bdff960
and dword [esp], 0x67bf4c49
dec dword [esp]
add dword [esp], 0x1dcceb8b
push ebx
push edi
mov edi, 0x67bc065f
mov ebx, 0x4e0f5f6d
sub ebx, edi
mov edi, dword [esp]
add esp, 4
push edx
push ebp
mov dword [esp], ebx
push edi
mov dword [esp], 0x727744f7
mov ebx, dword [esp]
add esp, 4
shl ebx, 1
neg ebx
dec ebx
sub ebx, 0x9c230bcb
mov edx, ebx
pop ebx
add dword [esp + 8], edx
mov edx, dword [esp]
add esp, 4
add dword [esp + 4], ebx
sub dword [esp + 4], 0x7eee6a46
mov ebx, dword [esp]
add esp, 4
mov dword [esp], ecx
push edx
mov dword [esp], 0x46db861b
mov dword [esp], edi
mov edi, esp
push ebx
mov dword [esp], 0x3194da6d
mov dword [esp], esi
push esi
mov dword [esp], 0x6d7ab6ea
add dword [esp], 0x777b4483
sub dword [esp], 0x7bfbb400
xor dword [esp], 0x68fa4769
pop esi
add edi, esi
pop esi
push esi
push eax
push esi
mov dword [esp], 0x5bd9a1b5
add dword [esp], 1
or dword [esp], 0x78edf8f1
shl dword [esp], 2
push eax
mov eax, 0x7ec7d555
add dword [esp + 4], eax
pop eax
mov eax, dword [esp]
add esp, 4
and eax, 0x5ffc6900
shl eax, 3
add eax, 0x8a1eb804
mov esi, eax
pop eax
add edi, 0x79eee0eb
sub edi, esi
push ebp
mov ebp, 0x79eee0eb
sub edi, ebp
pop ebp
pop esi
xchg dword [esp], edi
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], eax
push ebx
mov dword [esp], esp
push edx
mov edx, 4
add dword [esp + 4], edx
pop edx
pop eax
add eax, 4
push ecx
mov ecx, 4
sub eax, ecx
pop ecx
push eax
push dword [esp + 4]
mov eax, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], 0x7b673791
dec dword [esp]
shl dword [esp], 2
push ebp
push ecx
mov ecx, 0x7d5d5ddf
shr ecx, 8
add ecx, 0x5759292d
mov ebp, ecx
pop ecx
sub dword [esp + 4], ebp
pop ebp
add dword [esp], 0x377f96d9
push edx
mov dword [esp], 0x26cbe0d2
mov dword [esp], esi
push ebp
push 0x5ac40cfd
pop ebp
mov esi, 0x517673c
add esi, ebp
pop ebp
xor dword [esp + 4], esi
pop esi
push edx
mov edx, 0x242c4140
sub dword [esp + 4], edx
pop edx
mov dword [esp], ebx
push 0x25e05dbd
mov dword [esp], eax
mov dword [esp], 0x77973aa7
dec dword [esp]
xchg dword [esp], esi
not esi
xchg dword [esp], esi
push esi
push edx
mov edx, 0x33ff3f78
sub edx, 0x33ff3f79
mov esi, edx
pop edx
add dword [esp + 4], esi
pop esi
add dword [esp], 0xbb6d3e94
mov dword [esp], edi
mov dword [esp], 0x7dfd6f2e
and dword [esp], 0x4ffa7e8a
not dword [esp]
dec dword [esp]
push edx
mov edx, 0xac50ffa7
xor dword [esp + 4], edx
pop edx
xchg dword [esp], ebx
add ebx, 1
xchg dword [esp], ebx
add dword [esp], 0xffffffff
inc dword [esp]
sub dword [esp], 0xc25a9cea
xor dword [esp], 0x4db3b74a
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], ebx
push esi
mov dword [esp], ecx
mov dword [esp], 0x671a1967
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
push edi
mov dword [esp], edx
mov edx, 0xd7a5e00
shl edx, 4
push edi
mov dword [esp], 0x7f7ecbec
xor dword [esp], 0x5518ead3
mov dword [esp], esi
mov esi, 0x5fb90d7d
xchg esi, eax
push eax
not dword [esp]
pop eax
xchg esi, eax
shl esi, 6
push ebx
mov ebx, 0x4a3a67c5
add esi, ebx
pop ebx
and edx, esi
pop esi
xor edx, 0x475f2793
sub edx, 0x14fa278f
sub ecx, 0x58ad3b71
sub ecx, edx
add ecx, 0x58ad3b71
pop edx
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
mov dword [esp], edi
mov dword [esp], ebp
push ebx
mov dword [esp], 0x7ba72f00
xor dword [esp], 0x451831dd
shr dword [esp], 6
push edx
push 0x6e9d194c
mov dword [esp], ecx
mov ecx, 0x11b1977d
mov edx, ecx
mov ecx, dword [esp]
add esp, 4
add dword [esp + 4], edx
pop edx
mov dword [esp], ecx
mov dword [esp], 0x7f7d76e5
inc dword [esp]
and dword [esp], 0x1d7f2adf
push eax
push esi
mov esi, 0x7e777a54
mov eax, 0x57d80b85
xor eax, esi
pop esi
sub dword [esp + 4], eax
pop eax
push esi
mov esi, 0xad325406
xor dword [esp + 4], esi
pop esi
push eax
mov dword [esp], 0xcc29438
mov dword [esp], edx
mov edx, 0xfde6b62a
add dword [esp + 4], 0x35fd60c3
sub dword [esp + 4], edx
push ebx
mov ebx, 0x35fd60c3
sub dword [esp + 8], ebx
pop ebx
pop edx
mov dword [esp], esi
push edx
mov dword [esp], 0x7effda93
add dword [esp], 0x7ffba55f
xchg dword [esp], edx
dec edx
xor dword [esp], edx
xor edx, dword [esp]
xor dword [esp], edx
or dword [esp], 0x2fcf593e
shl dword [esp], 1
push 0x43b7d42e
mov dword [esp], edi
mov edi, 0xb87a550
push eax
mov eax, 0x77fd342d
add dword [esp + 8], eax
pop eax
sub dword [esp + 4], 0x7be7c1d3
add dword [esp + 4], edi
add dword [esp + 4], 0x7be7c1d3
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edi
mov edi, 0x77fd342d
sub dword [esp + 8], 0x7f7e7fe0
sub dword [esp + 8], edi
add dword [esp + 8], 0x7f7e7fe0
pop edi
push dword [esp]
pop edi
add esp, 4
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], esi
mov dword [esp], edi
call fcn.005cf85a
fisub dword [edx + 0x27]
add byte [esi], al
add byte [edi], cl
add byte [ecx + 0x7900ae00], bl
salc
je 0x678cb1
invalid
and eax, dword [eax]
scasb al, byte es:[edi]
add byte [ecx + 0x2700ae00], bl
add byte [edi], ah
add byte [edx], cl
daa
add dh, bl
and cl, byte [edx + 3]
daa
add bl, ch
pop es
cli
inc eax
push ecx
jne 0x678d0f
add byte [0x6a9d59cd], ah
xchg esp, eax
mov bl, 0x32
add ebx, dword [ecx + 0x57a99f00]
loop 0x678ccc
sub edi, dword [ecx - 0x1c]
jg 0x678c65
mov eax, eax
and ebp, dword [edx + 0x79]
cli
shl byte [ebx], 0x6a
jns 0x678cdb
inc edx
stosb byte es:[edi], al
pop ds
inc ebp
mov ah, 0xc1
sub cl, bh
ja 0x678cea
ja 0x678cea
scasb al, byte es:[edi]
add byte [ecx], dh
xor al, 0x7b
daa
add byte [eax], al
jbe 0x678cfb
adc eax, dword [ebx]
outsb dx, byte [esi]
dec eax
invalid
enter 0xffffffffffffda8d, 0xffffffffffffffeb
str edi
je 0x678d21
imul eax, dword [esi], 0
scasb al, byte es:[edi]
add bh, ah
push esp
cdq
add byte [esi + 0x6000f00], ch
sldt word [esi]
add byte [esi - 0x51a79000], ch
add byte [edi], ah
add byte [ecx + 0x4b000600], bl
iretd
and eax, dword [eax]
pop ss
add byte [edi], cl
add byte [ecx + 0xf00ae00], bl
add byte [esi], al
add byte [edx - 0x2e44da22], ah
dec edx
aaa
fst dword [edi]
add byte [ecx + 0xf009900], bl
add byte [0x236dbc02], dl
add byte [esi + 0x6001700], ch
add byte [edi + edi], bh
daa
add byte [ebx], ah
add byte [edi], cl
add byte [edx], cl
dec edx
add byte [edi], cl
add bh, ch
outsb dx, byte [esi]
scasb al, byte es:[edi]
add byte [edi], dl
add byte [edx], cl
push es
add byte [ecx - 0x3c], bh
scasb al, byte es:[edi]
add byte [ecx + 0x27000f00], bl
add byte [edi], ah
add byte [edi], cl
add ch, ch
nop
les esi, [edi]
push es
add byte [esi + 0x12], cl
push es
add byte [edi], bh
rcr byte [edx + edx*8 + 0x67282], cl
out dx, al
cmp al, byte [edi]
adc byte [edi], bl
dec ebx
sub ebx, dword [edx + 0x27]
add byte [ebx], ah
add byte [esi + 0x4a001700], ch
add byte [edi + 0x4a002703], ah
add byte [esi + 0x17002300], ch
add byte [ecx + 0x23009900], bl
add byte [edx], cl
daa
add byte [ecx + 0x23001700], bl
add byte [esi - 0x51ff6700], ch
add byte [edi], ah
add byte [edx], cl
pop ss
add byte [eax - 0x66fe3adf], dh
add byte [eax], ah
add byte [edi], dl
add byte [esi], al
add byte [edx + 4], ah
and eax, dword [eax]
str word [edx]
lldt word [edi + ecx*2 + 0x2700ae]
cmp al, 0x56
dec edx
add byte [ebx], ah
add byte [edi], cl
add byte [esi], al
add byte [edi], ah
add byte [esi], al
add byte [ebx + 0x35], cl
sub byte [ecx + 0x47], dl
xor dword [eax + 0x37], ebx
push es
add byte [eax + 0x52ffb46e], dh
add ch, byte [eax + edx*8]
and eax, dword [eax]
push es
add byte [ebp + 2], bh
dec edx
add byte [edi], cl
add byte [esi - 0x5dfff100], ch
adc byte [ecx + 0x46000600], bl
or dword [edi + 0x78], ebp
cmpsd dword [esi], dword es:[edi]
jae 0x678e76
aaa
scasb al, byte es:[edi]
add byte [esi], al
add byte [edx], ah
add al, 0x23
add byte [edi], cl
add byte [esi - 0x50fff100], ch
pop edx
scasb al, byte es:[edi]
add byte [esi + 0x70], ch
lcall 0x6b9, 0xdd0006cc
add dh, dl
invalid
idiv dword [ecx - 0x77]
inc esp
and al, 4
pop eax
shl dword [esp], 8
not dword [esp]
push edx
mov edx, 0x88a3cd4
sub dword [esp + 4], edx
pop edx
push 0x756ac368
mov dword [esp], edi
sub esp, 4
mov dword [esp], edx
mov dword [esp], eax
mov eax, 0x276e94
mov dword [esp + 4], eax
pop eax
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], 0x40d5e813
mov dword [esp], eax
push 0x549c26b9
mov dword [esp], eax
push ecx
mov ecx, 0x1feee25f
add ecx, 0x488ef30e
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
push dword [esp + 0x10]
mov eax, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp + 8]
push dword [esp]
pop ebx
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
push edi
mov edi, 4
add ebp, edi
pop edi
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
mov eax, dword [esp]
push ebx
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0x5cf35a