Function at 0x631422
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov dword [esp + 4], eax
call fcn.0063140c

Function at 0x63142b
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov byte [esp + 2], ah
call fcn.00631487
dec ebx
mov byte [esp], cl
mov word [esp], si
jmp 0x6314bc
mov dword [esp], ebp
pushfd
mov dword [esp + 8], edx
pushfd
mov byte [esp], dl
mov dword [esp + 8], ebx

Function at 0x6315a9
Capabilities:
Execute anti-debugging instructions

Disassembly:
lea esi, [esp + 8]
rdtsc
xchg edi, edx
jmp 0x631576

Function at 0x636029
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov word [esp], cx
pop word [esp]
lea esp, [esp + 2]
not ah
xchg cl, dh
jmp 0x63602b
jmp 0x636013
rcl ch, cl
jb 0x63608b
neg edx
rcr ax, 5
jmp 0x636063
lea edx, reloc.MSVCRT.dll_strncpy
mov cx, 0x5e5f
clc
bswap eax
rdtsc
jmp 0x6360a0
xor ebp, 0x64bb9521
xchg cl, dl
cmc
jo 0x636037
jno 0x636093
bswap eax
rdtsc
jmp 0x6360a0
neg edx
rcr ax, 5
jmp 0x636063
lea edx, reloc.MSVCRT.dll_strncpy
mov cx, 0x5e5f
clc
jmp 0x636070
inc ebp
mov ax, sp
mov eax, esp
cmc
jle 0x636643
not ecx
mov cl, 0xf4
jmp 0x6364d4
mov dh, byte [esp]
bts cx, ax
jle 0x636538
mov cl, 0x69
jmp 0x6364ef
not ecx
mov cl, 0xf4
ror ebp, 0
jmp 0x6364ba
jmp 0x636509
mov ecx, ebx
jmp 0x63653c
pushal
mov ch, byte [esp + 0xb]
jmp 0x636513
xchg edx, ecx
mov dh, cl
mov dx, 0x5b68
jmp 0x6364f3
rol ebp, 0
xchg dh, dl
cmp dl, bh
jmp 0x636575
add ebp, dword [edi]
mov eax, 0xeb163c63
sub esp, 0xa
jl 0x636554
xchg dh, al
xchg ch, ah
jmp 0x636559
mov cl, 0x69
mov ecx, ebx
ror ebp, 0
setae dl
inc ecx
jo 0x6364d9
xchg edx, ecx
mov dh, cl
mov dx, 0x5b68
pushal
mov ch, byte [esp + 0xb]
jmp 0x636513
call 0x636579
lea esp, [esp + 2]
jmp 0x6365da
jp 0x636520
jnp 0x636520
stc
lea ecx, [eax*4]
xor edx, 0x533b8737
sub esp, 6
jmp 0x636609
lea esp, [esp + 2]
xchg dword [esp + 0x1c], edx
lea edx, [ecx*4]
mov al, ch
lea eax, [ecx + esi]
rdtsc
jmp 0x6365f0
mov al, 0x78
lea edx, [edx + 0x37]
sub esp, 0x1e
lea ecx, [edx + ebp]
xchg cx, ax
lea eax, [eax + eax]
jmp 0x6365a6
push dword [esp + 0x1c]
ret 0x20
add esp, 4
lea esp, [esp + 2]
xchg dword [esp], edx
lea ecx, [ebx*4]
mov eax, dword [esp]
shr cx, 0
jmp 0x6365c8
jmp 0x6364d0

Function at 0x7395a7
Capabilities:
Packed with generic packer

Disassembly:
call fcn.007381b7
mov byte [esp + 2], bl
lea esp, [esp + 2]
lea esp, [esp + 4]
jmp 0x7395f2
push word [esp]
mov word [esp + 3], si
jmp 0x739591
call fcn.006caf19
jmp 0x7381b2

Function at 0x73a522
Capabilities:
Access peb ldr_data
Packed with generic packer

Disassembly:
call fcn.0073a02c
call 0x73a474
mov word [esp], sp
call 0x73a4ef
xor al, 0xe8
add byte cs:[eax], al
add byte [ebp - 0x76fddb9c], cl
jl 0x73a51f
lea esp, [esp + 2]
mov dword [esp + 0x10], edi
lea esp, [esp + 0x10]
jmp 0x73a951
adc byte [ebp - 0x16efdb9c], cl
dec esp
add al, 0
add byte [0xad5e3bab], bh
sbb al, 0x4e
fnstcw word [eax]
pop word [esp]
mov byte [esp], bh
lea esp, [esp + 3]
mov dword [esp + 8], esi
call 0x73a4e5
push word [esp + 9]
jmp 0x73a4f4
invalid
mov eax, dword [eax]
mov eax, dword [eax + 8]
push eax
jmp 0x73a027
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x1c]
jmp 0x73a7d8