Function at 0x63361f
Capabilities:
Execute anti-debugging instructions

Disassembly:
push eax
push edx
push esi
push eax
push edx
rdtsc
pop edx
pop eax
push eax
push edx
rdtsc
pop edx
pop eax
pop esi
pushal
push eax
push edx
rdtsc
pop edx
pop eax
je 0x581f36
pushal
popal
je 0x581f3e
popal
rdtsc
jmp 0x581f5a
pop edx
pop eax
push eax
push edx
jg 0x581f68
pushal
popal
push ecx
pop ecx
jmp 0x581f79
rdtsc
push eax
push edx
ja 0x581f83
jp 0x581f89
rdtsc
push eax
pop eax
jo 0x581f93
pop edx
pop eax
pushal
push eax
push edx
rdtsc
pop edx
pop eax
pushal
popal
jmp 0x581fb2
popal
pop edx
pop eax
sub esp, 4
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], edi
push ecx
mov dword [esp], ebp
push 0x6dfff827
mov dword [esp], edx
mov dword [esp], 0x7fdfe197
xor dword [esp], 0x6fbf4536
shr dword [esp], 3
add dword [esp], 0x6ffdf995
neg dword [esp]
and dword [esp], 0x7ff75283
push eax
mov eax, 0x49dbd2fa
xor dword [esp + 4], eax
pop eax
push dword [esp]
mov ebp, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
mov dword [esp + 4], ebp
push dword [esp]
mov ebp, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
push 0x6dec5711
mov dword [esp], eax
mov dword [esp], 0x1cde4ad3
mov dword [esp], edx
push esp
mov edx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
sub esp, 4
mov dword [esp], eax
mov eax, 4
add ebx, eax
pop eax
xchg dword [esp], ebx
mov esp, dword [esp]
push ecx
mov ecx, 0x5ef9943c
add ecx, 0x7ff7a8ed
shr ecx, 1
dec ecx
xor ecx, 0x6f789e97
push edi
mov edi, 0x9efb242
add edx, edi
pop edi
push edi
mov edi, 0x3ffe1e3d
sub edx, edi
pop edi
add edx, ecx
add edx, 0x3ffe1e3d
sub edx, 0x9efb242
pop ecx
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
push ecx
push esp
pop ecx
push esi
push ebp
push 0x73feab45
pop ebp
or ebp, 0x4fe58713
push ecx
mov ecx, 0x396ee4fc
and ebp, ecx
pop ecx
xor ebp, 0x396ea450
mov esi, ebp
pop ebp
add ecx, 0x3bb2876d
add ecx, esi
sub ecx, 0x3bb2876d
pop esi
sub ecx, 4
push 0x51ddf5bb
mov dword [esp], ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], 0x7fffbd14
dec dword [esp]
push esi
push 0x6fbf1d41
pop esi
xor dword [esp + 4], esi
pop esi
xor dword [esp], 0x7fbf8242
shr dword [esp], 6
dec dword [esp]
not dword [esp]
push ecx
mov ecx, 0x3dcbeb69
xor dword [esp + 4], ecx
pop ecx
push 0x2fc39c4b
mov dword [esp], eax
mov eax, 0xa4702111
xor dword [esp + 4], eax
pop eax
dec dword [esp]
xor dword [esp], 0x727c1a53
mov dword [esp], ecx
mov dword [esp], edx
push edx
push esp
pop edx
add edx, 4
push ecx
mov ecx, 4
sub edx, ecx
pop ecx
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], ebp
mov dword [esp], 0x11e5d751
sub dword [esp], 1
push 0x74cb433b
mov dword [esp], ecx
mov ecx, 0x7fd35ff7
or dword [esp + 4], ecx
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
shl dword [esp], 5
push eax
mov eax, 0x7e6dcf19
add dword [esp + 4], eax
pop eax
push edx
push ecx
mov ecx, 0x9ed8f1
mov edx, ecx
pop ecx
sub dword [esp + 4], 0x7dff6067
sub dword [esp + 4], edx
add dword [esp + 4], 0x7dff6067
pop edx
mov dword [esp], edx
mov dword [esp], ecx
mov dword [esp], ebx
push ecx
mov ecx, esp
push 0x700f1cd
mov dword [esp], ebx
mov ebx, 0x66d2ecd1
push eax
mov eax, 0x66d2eccd
sub ebx, eax
push dword [esp]
pop eax
add esp, 4
add ecx, ebx
pop ebx
push 0x5955bafb
mov dword [esp], eax
push eax
mov dword [esp], edx
mov dword [esp], 4
pop eax
sub ecx, 0x2e0d57a9
sub ecx, eax
add ecx, 0x2e0d57a9
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 4
add eax, edx
mov edx, dword [esp]
add esp, 4
xchg dword [esp], eax
mov esp, dword [esp]
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push edx
mov dword [esp], 0x7f3f27e0
shr dword [esp], 5
or dword [esp], 0x66f77823
shr dword [esp], 7
xchg dword [esp], esi
not esi
xchg dword [esp], esi
xor dword [esp], 0xbb81956a
mov dword [esp], edi
push esp
pop edi
add edi, 4
push eax
push 0x7d1dab85
mov dword [esp], esi
mov esi, 0x5f6a9e85
xor esi, 0x5ffdf5c2
add esi, 1
push ecx
mov ecx, 0x7515ecf3
inc ecx
xor ecx, 0x37ca5338
add ecx, 0x42c884d8
sub esi, ecx
pop ecx
mov eax, esi
push dword [esp]
pop esi
add esp, 4
sub eax, 1
shr eax, 4
add eax, 0x3feb1b71
shl eax, 4
add eax, 0x7dbd4ed0
push esi
push eax
mov eax, 0x377f933b
mov esi, eax
pop eax
push ebp
mov ebp, 0x3fde40bf
xor esi, ebp
pop ebp
add eax, esi
pop esi
sub edi, eax
pop eax
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebp
push 0x6f3ced1f
mov dword [esp], eax
mov eax, esp
add eax, 4
push esi
mov esi, 4
sub eax, esi
pop esi
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ebp
push ebp
push esp
pop dword [esp]
add dword [esp], 4
mov ebp, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push ecx
mov ecx, 4
add ebp, ecx
push dword [esp]
pop ecx
add esp, 4
sub esp, 4
mov dword [esp], eax
mov eax, 4
sub ebp, eax
pop eax
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
mov dword [esp], esi
push eax
mov dword [esp], ebp
mov dword [esp], 0x4ee45b00
neg dword [esp]
inc dword [esp]
push esi
mov dword [esp], ebp
push eax
push 0x76a90cb0
pop eax
sub eax, 0x79d77b1b
sub eax, 0x99521595
mov ebp, eax
mov eax, dword [esp]
add esp, 4
and dword [esp + 4], ebp
pop ebp
not dword [esp]
push edx
mov edx, 0x7cdafd60
xor dword [esp + 4], edx
pop edx
push eax
mov eax, 0x737bb00e
add dword [esp + 4], eax
pop eax
push ecx
mov ecx, 0x71b71795
sub dword [esp + 4], ecx
push dword [esp]
pop ecx
add esp, 4
shr dword [esp], 1
sub dword [esp], 0x76d06637
inc dword [esp]
push eax
mov eax, 1
sub dword [esp + 4], eax
pop eax
push edi
push 0x61fb0dd0
mov edi, dword [esp]
add esp, 4
sub dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], edi
call fcn.00582401
add byte [edi], cl
mov word [eax], es
add byte [eax], al
add byte [edx + 0x58], bl
pop edi
pushfd
push eax
mov dword [esp], 0x7f752225
push esi
mov dword [esp], edi
mov edi, 0x7fff66cc
and edi, 0x6a7f5ca2
inc edi
or edi, 0x7cfe1141
add edi, 0x6fbdeb23
add edi, 0x735f2a5a
xor edi, 0x1d694a9c
xor dword [esp + 4], edi
pop edi
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 0x3effe014
sub edx, 0x59f57384
sub edx, 0x7ff6928e
add edx, 0x67fbb0a2
neg edx
and edx, 0x4ecbba00
sub edx, 0x2c02ffc
sub edi, edx
pop edx
xchg dword [esp], edi
pop esp
mov dword [esp], edx
push edi
mov edi, 0x2319c4
mov dword [esp + 4], edi
pop edi
push ecx
sub esp, 4
mov dword [esp], edi
push ebp
mov ebp, 0x39fe52b5
sub ebp, 0x757a84a1
sub ebp, 0x243706b6
sub ebp, 0x69fe773b
sub ebp, 0xccce5b3e
mov edi, ebp
pop ebp
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
push ebp
mov ebp, esp
add ebp, 4
push ebx
mov ebx, 4
sub ebp, ebx
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
push dword [esp + 0x10]
mov eax, dword [esp]
push edx
mov edx, esp
push esi
mov esi, 0x3facdc8f
add esi, 0x5b99a336
or esi, 0x7bffb410
xor esi, 0x4f7b748d
neg esi
add esi, 0xb4848b5c
add edx, esi
pop esi
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
push dword [esp + 8]
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
push dword [esp]
pop ebx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
push dword [esp]
mov eax, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
jmp 0x581f19