Function at 0x640b76
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x5773d2
push eax
push edx
push ebx
push esi
pop esi
push ebx
pop ebx
pop ebx
rdtsc
jmp 0x5773e6
jbe 0x5773f4
push eax
push edx
rdtsc
pop edx
pop eax
push esi
pop esi
pop edx
pop eax
push 0x1e070f8
mov dword [esp], eax
mov dword [esp], edi
push 0x7587827b
mov dword [esp], esp
add dword [esp], 4
mov edi, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
sub esp, 4
mov dword [esp], ebp
push 4
pop ebp
add edi, 0x76b3c0da
sub edi, 0x7fff7e84
add edi, ebp
add edi, 0x7fff7e84
sub edi, 0x76b3c0da
mov ebp, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], esi
mov esi, 4
push ebp
mov ebp, 0x22f4e002
add edi, ebp
pop ebp
sub edi, esi
sub edi, 0x22f4e002
pop esi
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push eax
mov dword [esp], ecx
mov dword [esp], esi
push esp
pop esi
push eax
mov eax, 0x7ad324d
shl eax, 8
shr eax, 5
push edx
mov dword [esp], eax
xchg dword [esp], ecx
not ecx
xchg dword [esp], ecx
mov eax, dword [esp]
add esp, 4
shl eax, 2
sub eax, 0x5ff385a9
push edi
push ebx
mov ebx, 0x7b5dc6a2
not ebx
and ebx, 0x18a7dddc
add ebx, 0x720d4665
mov edi, ebx
pop ebx
push 0x5eb05937
mov dword [esp], esi
push eax
mov eax, 0x3d7fcaf0
or eax, 0x7efe4e9c
add eax, 0xeffc7765
mov esi, eax
pop eax
push ebx
mov ebx, 0x77ef165d
and esi, ebx
pop ebx
shl esi, 4
dec esi
push eax
mov eax, 0x7fbfdac1
xor eax, 0x50189f1b
add esi, eax
pop eax
not esi
push edx
mov edx, 0xa7311960
add esi, edx
pop edx
xor edi, esi
pop esi
xor eax, edi
pop edi
add esi, 0x75fb19b9
add esi, eax
sub esi, 0x75fb19b9
pop eax
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ecx
sub esp, 4
mov dword [esp], ebx
push esp
pop ebx
push ecx
mov ecx, 4
push esi
push ebp
mov ebp, 0x3fb79bee
shr ebp, 8
shl ebp, 8
dec ebp
inc ebp
not ebp
add ebp, 0x9fa60dd8
mov esi, ebp
pop ebp
sub ebx, esi
pop esi
sub ebx, 0x75bf45e3
add ebx, ecx
add ebx, 0x75bf45e3
add ebx, 0x5fee72d7
pop ecx
push edx
mov edx, 4
sub ebx, edx
mov edx, dword [esp]
add esp, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebp
mov dword [esp], edx
mov dword [esp], 0xfbfbca2
and dword [esp], 0x52c75e51
push edx
mov edx, 0x9cfeefb9
sub dword [esp + 4], edx
pop edx
mov dword [esp], ecx
mov dword [esp], ebx
mov dword [esp], esi
mov dword [esp], eax
mov dword [esp], edx
push esi
mov dword [esp], 0x5bdd5969
xchg dword [esp], edx
neg edx
xchg dword [esp], edx
or dword [esp], 0x6abeca2e
xor dword [esp], 0xb0e0afe9
mov dword [esp], edi
mov edi, esp
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
mov ecx, 0x6f2f7d41
or ecx, 0x7cfd9e30
sub ecx, 0x7fbb06ca
add ecx, 0xffbb075d
push ecx
mov ecx, 0x7f1f9298
sub edi, ecx
pop ecx
add edi, 0x7bffc13b
add edi, ecx
sub edi, 0x7bffc13b
add edi, 0x7f1f9298
push dword [esp]
pop ecx
add esp, 4
push ebx
mov ebx, 4
sub edi, ebx
pop ebx
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edi
push dword [esp + 4]
mov edi, dword [esp]
add esp, 4
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edx
mov dword [esp], 0x6fb7cc7e
push eax
mov eax, 0x3ff70a89
or dword [esp + 4], eax
pop eax
sub dword [esp], 0x1fa99b41
inc dword [esp]
sub dword [esp], 0x7ffbbddc
or dword [esp], 0x2ddfc37f
add dword [esp], 0x5b0d84a5
add dword [esp], 0x5ccf98d2
dec dword [esp]
add dword [esp], 1
sub dword [esp], 0x7ddfd0e3
push eax
mov eax, 0x621967cb
xor dword [esp + 4], eax
push dword [esp]
pop eax
add esp, 4
mov dword [esp], ebp
mov ebp, esp
push ecx
mov ecx, 4
add ebp, ecx
mov ecx, dword [esp]
add esp, 4
sub ebp, 4
sub esp, 4
mov dword [esp], ebp
push dword [esp + 4]
mov ebp, dword [esp]
push 0x7efff954
mov dword [esp], esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push edx
push eax
mov eax, 0x5fefb319
mov dword [esp + 4], eax
push dword [esp]
pop eax
add esp, 4
xor dword [esp], esi
xor esi, dword [esp]
xor dword [esp], esi
push edx
push esp
pop edx
push eax
mov eax, 0xfdf9e60
and eax, 0x36c567e5
shr eax, 7
or eax, 0x767a4cef
and eax, 0x65ffb15d
xor eax, 0x647f8049
add edx, eax
pop eax
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], esi
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
xchg edx, edi
not edi
push edx
push edi
pop edx
pop edi
xchg dword [esp], edx
pop esi
xchg dword [esp], esi
sub dword [esp], 1
not dword [esp]
sub dword [esp], 0x31fc824d
mov dword [esp], esi
mov dword [esp], ebp
push eax
mov dword [esp], ecx
mov dword [esp], edx
mov edx, esp
push ecx
sub esp, 4
mov dword [esp], edx
push esi
push 0x64a3d673
pop esi
dec esi
push ebx
mov ebx, 0x77ff0716
not ebx
xor ebx, 0xd3dba2b9
sub esi, ebx
pop ebx
add esi, 0x3325895b
mov edx, esi
pop esi
mov ecx, edx
mov edx, dword [esp]
add esp, 4
xor ecx, 0x5e7db868
xchg ecx, ebp
not ebp
xchg ecx, ebp
inc ecx
push ebp
mov dword [esp], edx
mov edx, 0x9a6c42ef
xor ecx, edx
pop edx
sub edx, 0x353bc002
add edx, ecx
add edx, 0x353bc002
mov ecx, dword [esp]
add esp, 4
push ebp
push ebx
mov dword [esp], 4
mov ebp, dword [esp]
add esp, 4
sub edx, ebp
pop ebp
xchg dword [esp], edx
pop esp
mov dword [esp], esi
push edx
mov edx, esp
sub esp, 4
mov dword [esp], esi
mov esi, 4
push ebp
mov dword [esp], 0x2f65d3ff
mov dword [esp], eax
push ebx
push edi
mov edi, 0x7fb7aeba
mov ebx, edi
pop edi
shl ebx, 4
shl ebx, 2
shl ebx, 1
sub ebx, 0x690baea2
mov eax, 0xceaa5b4f
sub eax, 0x4f03373a
add eax, 0x52faa0e8
sub eax, ebx
sub eax, 0x52faa0e8
add eax, 0x4f03373a
pop ebx
add edx, eax
mov eax, dword [esp]
add esp, 4
add edx, esi
sub edx, 0x5bdeacf1
push dword [esp]
pop esi
add esp, 4
push ebx
mov ebx, 0x7f5f5041
shr ebx, 8
shr ebx, 7
add ebx, 0xffff0146
sub edx, ebx
pop ebx
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], edx
mov dword [esp], edi
call fcn.00577882
sub byte [eax + eax + 0x17], ah
add byte fs:[edi], dl
add byte [ebx], al
insb byte es:[edi], dx
add byte [esi], al
test dword [ecx], edi
pop ecx
mov ch, 0x30
pop ss
add byte [esi], dh
add bh, dh
cmp al, byte [eax]
adc edi, dword [eax + 0x6c]
add byte [ebx - 0x65d67cdd], ah
add byte [edx], dh
add ebx, dword [edx + 0x43e7b800]
add byte [ebx + edx*4 - 0x16], al
pop ss
add byte [eax], cl
push edi
lds ebx, [edx + 0x43550000]
add byte [eax + 0x18], cl
add dword [ebx], ebp
in eax, dx
add byte fs:[esi], ah
dec ecx
or dword [esi], 0x39
std
xor esi, dword [ebx]
cmp al, byte [eax]
jno 0x640812
sub byte [edi - 0x427dae15], bl
mov ebp, 0x274e9c0f
adc al, 0xea
loopne 0x6408d0
add byte [ebx], al
add byte fs:[0x49643ebb], dh
outsd dx, dword [esi]
jmp 0x640811
sub byte ds:[esp + 0x1be4fb00], dl
or ah, byte [eax - 0x1d]
insb byte es:[edi], dx
add ch, ah
mov cl, 1
inc ebx
add cl, al
salc
push es
pop edx
inc ebx
add byte [edi], dl
add byte [eax], ah
sub cl, byte [ecx]
add bh, byte [edx]
add byte [ecx], dl
fnstcw word [edx - 0x65cfeb77]
add byte [eax + eax + 0x43], ch
add byte [esi - 0x5f], al
into
and byte [edx + 0x15004300], bl
xor eax, dword [eax]
inc edi
xchg dword [ebx], esi
cmp al, byte [eax]
insb byte es:[edi], dx
add byte [edx - 0x65f23a00], bl
add dh, ah
bound esi, qword [eax + eax + 0x36b678]
lcall 0xb400, 0x6c003600
add cl, bl
jns 0x640938
inc ebx
add byte [0x87470033], dl
xor edi, dword [edx]
add byte [eax + eax - 0x66], ch
add dh, al
or eax, 0x62e6009a
mov ah, 0
js 0x64089e
add byte ss:[edx + 0x6c003600], bl
add byte [eax + eax + 0x4379d9], dh
das
add byte [edi], ch
cld
call 0x6464bd23
add byte [edx - 0x6fffe900], bl
cdq
pop ss
add byte [edx + 0x6c006400], bl
add byte [esi], dh
add byte [0x1a0043a4], bh
cmp byte [edi + 0x36009ae0], ah
add byte [ebx], al
pop ss
add byte [esp + ebp*2 + 0x36], ch
add byte [edx + 0x3600b400], bl
add byte [edx], bh
add byte [ecx], al
mov bh, 0x43
add byte [eax + eax + 0x6c], ch
add byte [edi], dl
add byte [ecx + 0x59], ch
mov ah, 0
cmp al, byte [eax]
add byte ss:[edi], dl
add byte [edx], bh
add byte [eax + eax + 0x640036], dh
add byte fs:[eax + eax + 0x17], ah
add byte [edi], dl
add byte [eax + eax + 0x640036], dh
insb byte es:[edi], dx
add byte [edx], bh
add byte [eax + eax - 0x4c], ch
add byte [esi], dh
add byte [ecx + 0x77], bl
cmp al, byte [eax]
dec ebx
cmp ah, byte [eax]
add byte [edx], bh
add byte [ecx - 0x651b5bcf], dh
add byte [edi], dl
add byte [ebx], al
inc ebx
or cl, byte [ebp + ecx - 0x66]
add byte [ebx], al
adc dx, word [ecx - 0x22ff6561]
dec esi
mov edi, 0x76009a9e
dec esp
test eax, 0x9abe5bb7
add byte [eax + eax + 0x43], ch
add byte [ebx], al
inc ebx
add byte [edx], bh
add byte [eax + eax - 0x6f], ah
and esi, dword [eax + eax + 0x640064]
pop ss
add byte [edi], ch
xor eax, 0x9a0036
add byte fs:[edi], dl
add byte [edx], bh
add cl, ah
jbe 0x6409f6
add byte [edi], ch
dec ebx
ja 0x640a00
lcall 0xb400, 0x43003600
inc esi
invalid
salc
mov esi, 0x20100c
cpuid
push eax
push edx
jmp 0x640a0e
pushal
jne 0x640a15
push eax
push edx
rdtsc
pop edx
pop eax
ja 0x640a21
popal
rdtsc
push eax
push edx
pop edx
push eax
pop eax
pop eax
jmp 0x640a36
pop edx
pop eax
ja 0x640a58
push ecx
push eax
push edx
rdtsc
pop edx
pop eax
push ebx
pop ebx
pop ecx
push eax
push edx
jp 0x640a50
push ebx
pop ebx
rdtsc
push eax
pop eax
pop edx
pop eax
pushfd
push 0x43cbcd4a
mov dword [esp], eax
mov dword [esp], 0x4311c3b8
mov dword [esp], eax
mov dword [esp], 0x77ed3b97
or dword [esp], 0x5ff6773a
dec dword [esp]
inc dword [esp]
xor dword [esp], 0x7fff7cc0
push ebx
mov dword [esp], 0x7efc38bf
sub dword [esp], 0x50d8114e
mov dword [esp], esi
mov dword [esp], 0x6de73e30
or dword [esp], 0x486f1918
xor dword [esp], 0x6dcb3818
push edi
mov dword [esp], 0x3fb66000
add dword [esp], 0x7ead6f34
sub dword [esp], 0x75b75daf
add dword [esp], 0x36cded18
xor dword [esp], 0x383a2e68
push esi
mov esi, 0xcf375f2b
sub dword [esp + 4], esi
pop esi
mov dword [esp], eax
push edi
mov dword [esp], 0x77f774c1
not dword [esp]
xor dword [esp], 0x7ffd86ce
add dword [esp], 0x5bbf973
push eax
mov eax, 0x6edf649a
or dword [esp + 4], eax
pop eax
xor dword [esp], 0x79fb8474
add dword [esp], 0xae1f51d4
mov dword [esp], esi
mov dword [esp], ebx
push dword [esp + 0x10]
push dword [esp]
pop eax
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp + 8]
push dword [esp]
pop ebx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
push dword [esp]
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
add esp, 4
mov eax, dword [esp]
push ebp
mov ebp, esp
push esi
mov esi, 0x6efdf743
not esi
and esi, 0x7dbfb030
inc esi
xor esi, 0x11020035
add ebp, esi
mov esi, dword [esp]
add esp, 4
push ebx
mov ebx, 0x79efdc05
add ebx, 0x861023ff
add ebp, ebx
pop ebx
xchg dword [esp], ebp
pop esp
jmp 0x5773bd