Function at 0x5f8f7b
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ebx
pushal
push esi
pop esi
push eax
push edx
rdtsc
pop edx
pop eax
popal
jmp 0x5782f7
pop ebx
jo 0x578334
jmp 0x578310
push eax
push edx
push esi
pop esi
rdtsc
push eax
push edx
rdtsc
pop edx
pop eax
jmp 0x578332
pop edx
pop eax
push 0x2212f9e2
mov dword [esp], ecx
push ecx
mov dword [esp], 0x1bd069c3
push esp
pop dword [esp]
add dword [esp], 4
mov ecx, dword [esp]
add esp, 4
push edx
mov dword [esp], 0x166b0abd
mov dword [esp], edi
push ebp
push edx
mov edx, 0x3fffa017
mov ebp, edx
push dword [esp]
pop edx
add esp, 4
and ebp, 0x2ef39352
push ebp
not dword [esp]
pop ebp
push edi
mov edi, 0x5df32900
xor ebp, edi
mov edi, dword [esp]
add esp, 4
xor ebp, 0x8cff56e9
mov edi, ebp
pop ebp
add ecx, edi
pop edi
push edi
mov edi, 4
sub ecx, edi
pop edi
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], eax
push ecx
mov ecx, esp
push edx
mov edx, 0x3bb7fd15
inc edx
not edx
add edx, 0x3bb7fd1b
add ecx, edx
pop edx
push edx
mov edx, 4
sub ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
mov dword [esp], edi
mov dword [esp], 0x37a5941c
add dword [esp], 0xffffffff
xor dword [esp], 0x77941e00
sub dword [esp], 0x3f8e35b1
or dword [esp], 0x59ff4c00
dec dword [esp]
push edx
push eax
push ecx
mov dword [esp], 0x7acf2be1
mov eax, dword [esp]
add esp, 4
or eax, 0x78fbcb47
shr eax, 7
add eax, 0xe88f40
mov edx, eax
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
push edi
push edx
mov edx, 0x75cb4703
mov edi, edx
pop edx
add dword [esp + 8], edi
pop edi
add dword [esp + 4], 0x7d7fce21
add dword [esp + 4], edx
sub dword [esp + 4], 0x7d7fce21
sub dword [esp + 4], 0x75cb4703
pop edx
mov dword [esp], eax
mov dword [esp], ecx
sub esp, 4
mov dword [esp], ebx
push esp
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add ebx, 4
push eax
push 4
pop eax
sub esp, 4
mov dword [esp], edi
mov edi, 0x2ffb04ee
shr edi, 2
and edi, 0x7efc4fb1
or edi, 0x7ffe4de9
add edi, 0x7f7fe047
and edi, 0x51f31e51
add edi, 0xfa078391
sub ebx, edi
pop edi
sub ebx, eax
add ebx, 0x4b7991d1
pop eax
push edx
mov dword [esp], ebx
push dword [esp + 4]
push dword [esp]
pop ebx
push ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
xchg dword [esp], ebx
pop esp
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
push edx
mov dword [esp], 0x1341c1fa
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], esi
mov esi, esp
push ecx
mov ecx, 4
sub esi, 0x756ba63f
sub esi, 0x7ae8b467
add esi, ecx
add esi, 0x7ae8b467
push edi
push eax
mov eax, 0x4b5718b8
add eax, 0x767fbf36
and eax, 0x7fb866c1
sub eax, 0x5efb8e54
push edi
mov edi, 0x92d6edd3
add eax, edi
pop edi
mov edi, eax
mov eax, dword [esp]
add esp, 4
add esi, edi
pop edi
mov ecx, dword [esp]
add esp, 4
push ebx
mov ebx, 4
add esi, 0x7ff7a0a1
sub esi, ebx
push edi
mov edi, 0x7ff7a0a1
sub esi, edi
pop edi
mov ebx, dword [esp]
add esp, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ebx
mov dword [esp], 0x67ebbe9b
mov dword [esp], ecx
mov ecx, esp
push 0x46b98918
mov dword [esp], ecx
mov dword [esp], esi
mov esi, 0x5fbc0ee4
shl esi, 7
dec esi
xor esi, 0xde0771fb
add ecx, esi
push dword [esp]
mov esi, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push ebp
mov dword [esp], esi
mov esi, 4
push ebp
push ecx
mov ecx, 0x6bef12fd
mov ebp, ecx
pop ecx
xor ebp, 0x633a810e
and ebp, 0x3b3f4a7a
sub ebp, 0x7febff18
push edi
mov edi, 0xd5c2fbb0
add ebp, edi
pop edi
sub ecx, ebp
pop ebp
sub ecx, esi
add ecx, 0x5debff0a
pop esi
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], ebx
push edx
mov dword [esp], eax
push 0x74755643
mov dword [esp], esp
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov ecx, 4
add dword [esp + 4], ecx
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
push edi
mov edi, 0x6feec381
shl edi, 7
and edi, 0x5f1bbf8f
inc edi
shr edi, 6
and edi, 0x5f6f447a
add edi, 0xfeb3fc02
add eax, edi
pop edi
xchg dword [esp], eax
mov esp, dword [esp]
mov eax, dword [esp]
add esp, 4
push edi
push ebp
push 0x669a916c
pop ebp
and ebp, 0x1ffb279a
shr ebp, 2
not ebp
xor ebp, 0xfe597fb9
mov edi, ebp
mov ebp, dword [esp]
add esp, 4
add eax, edi
pop edi
push edi
mov edi, 4
sub eax, edi
pop edi
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebp
push 0x5ef8e18d
mov dword [esp], esi
mov dword [esp], ebp
push 0x1cf55455
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop dword [esp]
push ecx
mov dword [esp], esi
mov esi, 4
add dword [esp + 4], 0x55de84bb
sub dword [esp + 4], 0x5efe278c
add dword [esp + 4], esi
add dword [esp + 4], 0x5efe278c
push ebp
mov ebp, 0x55de84bb
sub dword [esp + 8], ebp
mov ebp, dword [esp]
add esp, 4
pop esi
push dword [esp]
pop ebp
add esp, 4
push ecx
mov ecx, 4
add ebp, ecx
mov ecx, dword [esp]
add esp, 4
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], edx
mov dword [esp], esi
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push edx
mov edx, 0x667f6ecf
shr edx, 5
push 0xa5ee82
mov dword [esp], ebp
push ecx
mov ecx, 0x7d966afc
mov ebp, ecx
pop ecx
add edx, ebp
pop ebp
xor edx, 0x7ffe1945
push edi
mov dword [esp], ebp
mov ebp, 0x3fff0d05
push esi
mov esi, 0x3fb2a4ca
add ebp, esi
pop esi
sub ebp, 0x4f6fbffd
push edi
push eax
mov eax, 1
mov edi, eax
pop eax
add ebp, 0x5bfb5ec8
sub ebp, edi
sub ebp, 0x5bfb5ec8
mov edi, dword [esp]
add esp, 4
sub ebp, 0x7b7d727d
xor ebp, 0x4bf00067
sub edx, ebp
pop ebp
sub ebp, edx
push dword [esp]
pop edx
push esi
mov esi, esp
add esi, 4
push edx
mov edx, 4
add esi, edx
pop edx
xchg dword [esp], esi
pop esp
xchg dword [esp], ebp
pop esp
mov dword [esp], edi
call fcn.005787f7
fmul qword [ecx - 0x21ff6699]
rol byte [eax + eax], cl
jbe 0x5f8dec
call [ecx + 0x5c000000]
add byte [ecx - 0x4efffc00], ah
add ch, cl
movsb byte es:[edi], byte [esi]
cdq
add byte [eax], al
add byte [eax + eax - 0x5f], bl
add byte [eax + eax], al
mov cl, 0
int 0xa4
add byte [eax], al
mov cl, 0
pop esp
add byte [ebx - 0x6cff5f00], dl
add byte [eax + eax], al
mov ah, 0x5c
cdq
pop esi
or byte [eax], dl
and byte [eax], al
mov eax, dword fs:[0x30]
jae 0x5f8e59
push eax
push edx
push eax
push edx
rdtsc
pop edx
pop eax
js 0x5f8e2b
rdtsc
push eax
push edx
rdtsc
pop edx
pop eax
jmp 0x5f8e49
pop edx
pop eax
push eax
push edx
push eax
push edx
rdtsc
pop edx
pop eax
rdtsc
push ebx
pop ebx
pop edx
pop eax
jno 0x5f8e8d
jno 0x5f8e67
push edi
pop edi
push eax
push edx
jns 0x5f8e6f
push edi
pop edi
rdtsc
jmp 0x5f8e8b
pop edx
pop eax
pushfd
push eax
mov dword [esp], 0x4f753401
neg dword [esp]
add dword [esp], 0x2ff533f1
push edi
mov edi, 0x6addee16
sub dword [esp + 4], edi
pop edi
dec dword [esp]
not dword [esp]
add dword [esp], 0xf57e2038
push edx
mov edx, 0x7fdc0a8c
sub dword [esp + 4], edx
pop edx
push edx
mov dword [esp], 0x6f89479d
sub dword [esp], 0xffffffff
xor dword [esp], 0x75f3e884
add dword [esp], 0x6dad0ec6
inc dword [esp]
sub dword [esp], 0x5beda4bd
add dword [esp], 0xfc2798ec
mov dword [esp], edi
mov dword [esp], 0x1f7c65
push ebp
mov dword [esp], ecx
mov dword [esp], 0x35d1c68a
mov dword [esp], ebp
mov dword [esp], eax
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edx
mov dword [esp], 0x68dfaad5
mov dword [esp], eax
mov dword [esp], ebx
push dword [esp + 0x10]
push dword [esp]
pop eax
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp + 8]
push dword [esp]
pop ebx
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
push dword [esp]
pop eax
push eax
mov dword [esp], 0x59a22a52
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x5782d5