Function at 0x5712dc
Capabilities:
Execute anti-debugging instructions

Disassembly:
add byte [eax], al
jns 0x4d285c
movzx eax, ax
pushfd
add ebp, 0x6d
popfd
lea ebp, [ebp - 0x6d]
jmp 0x577b18
pushfd
pushfd
add ebp, 0x5d
popfd
lea ebp, [ebp - 0x5d]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, eax
mov eax, dword [esp]
xchg edi, edx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, edx
mov edx, dword [esp]
rdtsc
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0xd]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
and eax, 1
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x34]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg edi, edx
xchg dword [esp], edi
xchg edi, edx
lea esp, [esp + 4]
xchg edx, eax
xchg dword [esp], edx
xchg edx, eax
lea esp, [esp + 4]
je 0x44c518
jne 0x4e7944
jmp 0x44c516
jmp 0x44c518
popfd
pushfd
add ebp, 0x11
popfd
lea ebp, [ebp - 0x11]
je 0x4c8cc8
jne 0x4c8cc8
jmp 0x4c8cc6
call fcn.0057baec
adc esp, edi
xchg edi, eax
dec edi
cmpsb byte [esi], byte es:[edi]
jge 0x44ebdb
scasd eax, dword es:[edi]
invalid
and al, 4
je 0x44a9e4
jmp 0x56d29c
mov edi, 0x87f98716
or al, 0x24
xchg ecx, edi
xchg dword [esp], ecx
xchg ecx, edi
lea esp, [esp + 4]
xchg edi, esi
xchg dword [esp], edi
xchg edi, esi
lea esp, [esp + 4]
xchg ecx, ebx
xchg dword [esp], ecx
xchg ecx, ebx
lea esp, [esp + 4]
leave
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0xd]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
ret
popfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x77]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
je 0x450744
jne 0x450744
jmp 0x450742
xchg esi, eax
add byte [0xffffffff], cl
or eax, 0xffffffff
mov esi, esi
jmp 0x570388
pushfd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0xa]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
mov edx, dword [esp]
rdtsc
pushfd
add ebp, 0x5e
popfd
lea ebp, [ebp - 0x5e]
and eax, 1
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x64]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg esi, edx
xchg dword [esp], esi
xchg esi, edx
lea esp, [esp + 4]
xchg ebx, eax
xchg dword [esp], ebx
xchg ebx, eax
lea esp, [esp + 4]
je 0x53fbc4
jne 0x56c4a8
jmp 0x53fbc2
popfd
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x2a]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
je 0x4ce97c
jne 0x4ce97c
jmp 0x4ce97a
add byte [eax], al
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg esi, ecx
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, ecx
mov ecx, dword [esp]
pushfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x45]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
call 0x4ce9b4
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x51]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
add dword [esp], 0x9832f
xchg dword [esp], eax
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x16]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], eax
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x3c]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], eax
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x64]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
popfd
push eax
mov eax, ecx
pop eax
jmp dword [0x581de8]
add byte [eax], al
popfd
mov ecx, ecx
je 0x4d285c
jne 0x4d285c
jmp 0x4d285a
push ecx
add byte [2], al
add eax, 2
push edi
mov edi, dword [esp + 6]
pop edi
add eax, edi
push ecx
mov ecx, dword [esp + 0xc]
pop ecx
jmp 0x577b18
popfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x79]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
je 0x560088
jne 0x560088
jmp 0x560086
sbb al, 0
popfd
pushfd
add ebp, 0x6e
popfd
lea ebp, [ebp - 0x6e]
je 0x577b18
jne 0x577b18
jmp 0x577b16
popfd
push ecx
mov ecx, dword [esp + 0xc]
pop ecx
je 0x53e5a4
jne 0x53e5a4
jmp 0x53e5a2
std
add byte [2], al
add eax, 2
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x3a]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
add eax, edi
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x31]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
jmp 0x577b18
add byte [eax], al
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x22]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
je 0x57b6ec
jne 0x57b6ec
jmp 0x57b6ea
add al, 0
popfd
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 8]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
je 0x577784
jne 0x577784
jmp 0x577782
dec edx
fmul qword [0xffffffff]
or eax, 0xffffffff
push edi
mov edi, dword [esp + 0xc]
pop edi
jmp 0x577784
pushfd
pushfd
add ebp, 0x77
popfd
lea ebp, [ebp - 0x77]
xchg esi, eax
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, eax
mov eax, dword [esp]
xchg ecx, edx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edx
mov edx, dword [esp]
rdtsc
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x2e]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
and eax, 1
push ebp
mov ebp, esp
leave
xchg esi, edx
xchg dword [esp], esi
xchg esi, edx
lea esp, [esp + 4]
xchg edi, eax
xchg dword [esp], edi
xchg edi, eax
lea esp, [esp + 4]
je 0x4d2704
jne 0x4e8510
jmp 0x4d2702
add ebx, 0x14
call fcn.0056b70c
mov al, byte [0x2b171eb1]
outsd dx, dword [esi]
pop esp
pushal
pushal
retf
pushfd
pushfd
add ebp, 0x7a
popfd
lea ebp, [ebp - 0x7a]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg ecx, edx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edx
mov edx, dword [esp]
rdtsc
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x41]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
and eax, 1
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x52]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ecx, edx
xchg dword [esp], ecx
xchg ecx, edx
lea esp, [esp + 4]
xchg ecx, eax
xchg dword [esp], ecx
xchg ecx, eax
lea esp, [esp + 4]
je 0x4e7970
jne 0x4cb06c
jmp 0x4e796e
popfd
push ebp
mov ebp, esp
leave
je 0x448f9c
jne 0x448f9c
jmp 0x448f9a
xchg edx, eax
mov edx, dword [ebp - 8]
push eax
xchg edx, eax
pop edx
and dword [ebp + 8], 0
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x6c]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
mov eax, dword [eax]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x55]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
test eax, eax
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x5b]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
je 0x566d0a
and dword [ebp - 4], 0
pushfd
add ebp, 0x42
popfd
lea ebp, [ebp - 0x42]
test eax, eax
push ebp
mov ebp, esp
leave
jmp 0x4c93dc
pushfd
push ebx
mov ebx, eax
pop ebx
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, eax
mov eax, dword [esp]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
mov edx, dword [esp]
rdtsc
pushfd
add ebp, 0x53
popfd
lea ebp, [ebp - 0x53]
and eax, 1
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x31]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg esi, edx
xchg dword [esp], esi
xchg esi, edx
lea esp, [esp + 4]
xchg edi, eax
xchg dword [esp], edi
xchg edi, eax
lea esp, [esp + 4]
je 0x553e34
jne 0x4c8c70
jmp 0x553e32
jmp 0x44eb98
nop
add byte [edi + 0x241487fa], al
xchg edx, edi
xchg dword [esp], edx
xchg edx, edi
lea esp, [esp + 4]
xchg ecx, esi
xchg dword [esp], ecx
xchg ecx, esi
lea esp, [esp + 4]
xchg ecx, ebx
xchg dword [esp], ecx
xchg ecx, ebx
lea esp, [esp + 4]
leave
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 1]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
ret
add byte ds:[edx - 0x3db9b73], dl
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, eax
mov eax, dword [esp]
xchg edi, ecx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, ecx
mov ecx, dword [esp]
pushfd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 7]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
call 0x577b50
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x55]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
add dword [esp], 0xfffef193
xchg dword [esp], eax
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x43]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], eax
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x2f]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], eax
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x75]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
popfd
lea esi, [esi]
jmp dword [0x581de8]
add byte [eax], al
jns 0x56656c
movzx eax, ax
pushfd
add ebp, 0x6a
popfd
lea ebp, [ebp - 0x6a]
jmp 0x5677d8