Function at 0x6fb798
Capabilities:
Execute anti-debugging instructions

Disassembly:
push eax
push edx
jmp 0x5cfff5
rdtsc
push eax
push edx
jmp 0x5d0012
jmp 0x5d001d
rdtsc
pushal
popal
pushal
popal
pop edx
pop eax
push ecx
pushal
popal
push ebx
pop ebx
pop ecx
pop edx
pop eax
push ebx
push eax
push edx
js 0x5d0036
pushal
popal
rdtsc
push eax
push edx
rdtsc
pop edx
pop eax
pop edx
pop eax
push esi
jp 0x5d0049
push esi
pop esi
pop esi
pop ebx
push ebx
push 0x62f86672
mov dword [esp], esp
add dword [esp], 4
pop ebx
add ebx, 4
push eax
mov eax, 0x32cb5f99
xchg edx, eax
inc edx
xchg edx, eax
xor eax, 0x3b773764
push edi
mov edi, 0x7fbdc74c
or eax, edi
push dword [esp]
mov edi, dword [esp]
add esp, 4
add esp, 4
push edx
mov edx, 0x4df9ce00
shl edx, 3
sub edx, 0xf0108006
sub eax, edx
pop edx
add ebx, 0x63fd0f09
sub ebx, eax
push ebp
mov ebp, 0x6fdff4b5
neg ebp
inc ebp
push esi
mov esi, 0x5e7fc587
shr esi, 8
neg esi
dec esi
inc esi
inc esi
sub esi, 0x88358dcc
add ebp, 0x7fbaa68e
sub ebp, esi
sub ebp, 0x7fbaa68e
pop esi
sub ebp, 0xb4b709d3
sub ebx, ebp
mov ebp, dword [esp]
add esp, 4
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
push edx
mov dword [esp], ebp
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], esi
mov dword [esp], 0x73f5c4df
push ebx
mov ebx, 0x7dbfb7f0
dec ebx
sub ebx, 0x37eafa52
shr ebx, 3
add ebx, 0xf745684c
add dword [esp + 4], ebx
pop ebx
add dword [esp], 0x7d7f8def
push edx
mov dword [esp], eax
mov eax, 0x6adfeb70
or dword [esp + 4], eax
push dword [esp]
pop eax
push ecx
push eax
mov dword [esp], 0x1ec4169d
mov dword [esp], esp
add dword [esp], 4
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebx
mov ebx, 0x7ef43a34
or dword [esp + 4], ebx
pop ebx
push ebx
mov ebx, 0x8cd0024f
xor dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
push 0x64e3819c
mov dword [esp], edx
mov edx, esp
push eax
mov eax, 0x771bbedc
push esi
mov esi, 0x43ee6bdc
xor eax, esi
pop esi
add eax, 0xffffffff
push ebx
mov ebx, 0
sub ebx, eax
xchg ebx, eax
pop ebx
shr eax, 5
add eax, 0xf9a7aeac
push esi
push ebx
mov ebx, 0x79f2e4fb
add ebx, 0x5fb1719
mov esi, ebx
pop ebx
and esi, 0xe802e82
dec esi
xor esi, 0x755c852b
push esi
mov dword [esp], ebx
mov ebx, 0xf76295d7
sub esi, 0x6ff23600
add esi, ebx
push edx
mov edx, 0x3f67cd21
dec edx
shl edx, 3
not edx
add edx, 0x7772e3d7
xor edx, 0x13c64cd6
add esi, edx
pop edx
pop ebx
add edx, esi
mov esi, dword [esp]
add esp, 4
add edx, eax
sub edx, 0x733f44ab
mov eax, dword [esp]
add esp, 4
sub edx, 4
push edx
push dword [esp + 4]
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
pop dword [esp]
pop esp
mov dword [esp], edi
mov dword [esp], edx
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edi
mov edi, esp
push ecx
mov ecx, 4
add edi, ecx
mov ecx, dword [esp]
add esp, 4
push 0x7d70b6fd
mov dword [esp], edx
mov edx, 4
sub edi, edx
pop edx
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push ebp
mov dword [esp], 0x44ce401f
mov dword [esp], edi
push esi
mov esi, 0x7dde1831
mov edi, 0x9936d360
sub edi, 0x3b4ae3d1
sub edi, esi
add edi, 0x3b4ae3d1
pop esi
mov dword [esp + 4], edi
push dword [esp]
pop edi
add esp, 4
mov dword [esp], edx
mov dword [esp], ebx
push edi
mov dword [esp], 0x57dfbe1b
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], 0x576f7140
and dword [esp], 0x65372200
xchg dword [esp], edx
not edx
xchg dword [esp], edx
add dword [esp], 0xffffffff
shr dword [esp], 5
sub esp, 4
mov dword [esp], edx
mov edx, 0x4de5a9c0
add dword [esp + 4], 0x7baf98c0
push eax
mov eax, 0x5bcfcde5
add dword [esp + 8], eax
pop eax
add dword [esp + 4], edx
push ebp
mov ebp, 0x5bcfcde5
sub dword [esp + 8], 0x7a63bc50
sub dword [esp + 8], ebp
add dword [esp + 8], 0x7a63bc50
pop ebp
push ecx
mov ecx, 0x7baf98c0
sub dword [esp + 8], ecx
pop ecx
pop edx
push esi
mov esi, 0x29f2498f
add dword [esp + 4], 0x3fff5066
add dword [esp + 4], esi
push eax
mov eax, 0x3fff5066
sub dword [esp + 8], eax
pop eax
pop esi
mov dword [esp], ebp
mov dword [esp], ebx
push 0x2b8f520e
mov dword [esp], edx
mov dword [esp], 0x39ff7397
push edi
push eax
mov eax, 0x7ff70c26
sub eax, 0x7c511709
mov edi, eax
pop eax
xor dword [esp + 4], edi
push dword [esp]
pop edi
add esp, 4
mov dword [esp], eax
push edx
mov edx, 0x7efcb326
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edx
mov edx, 0x3f45d35f
sub dword [esp + 4], 0x53bf5f3b
add dword [esp + 4], edx
add dword [esp + 4], 0x53bf5f3b
pop edx
dec dword [esp]
sub dword [esp], 1
and dword [esp], 0x6bd327b9
push ebx
mov ebx, 0x65b5955a
xor dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
xor dword [esp], 0x5e772f13
xor dword [esp], 0x3e3c450b
mov dword [esp], ebp
push 0x133f004
mov dword [esp], edx
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
push esp
pop dword [esp]
add dword [esp], 4
mov edx, dword [esp]
add esp, 4
add edx, 4
push ebx
mov dword [esp], esi
push edi
mov edi, 0x7eec12ed
mov esi, edi
pop edi
push 0x3d2d8099
mov dword [esp], ebx
mov ebx, 0x4efb7318
xor ebx, 0x3303faf1
xor esi, ebx
pop ebx
xor esi, 0x754a4fd3
dec esi
or esi, 0x5fab01b2
xor esi, 0x7fffd5f2
sub edx, esi
mov esi, dword [esp]
add esp, 4
push edx
push dword [esp + 4]
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], esi
push ebp
mov dword [esp], edi
mov dword [esp], 0x7b7e8e00
shl dword [esp], 3
xchg dword [esp], ebp
not ebp
xchg dword [esp], ebp
xchg dword [esp], ebx
xchg ebx, esi
not esi
xchg ebx, esi
xor dword [esp], ebx
xor ebx, dword [esp]
xor dword [esp], ebx
push 0x72442d9f
mov dword [esp], ecx
mov ecx, 0x6bfa9315
push ebx
mov ebx, 0x337f79f5
sub dword [esp + 8], ebx
pop ebx
sub dword [esp + 4], ecx
add dword [esp + 4], 0x337f79f5
pop ecx
dec dword [esp]
push edi
push esi
push 0x73eedf8a
mov esi, dword [esp]
add esp, 4
and esi, 0x7ba5ca0e
xor esi, 0x6fefb7c8
push ebp
mov ebp, 0x57df01e1
or ebp, 0x7ffc092e
push ebx
mov ebx, 0x7f9f6719
sub ebp, ebx
pop ebx
add ebp, 0xa0f53fc9
add esi, 0x3dfb0717
sub esi, 0x477b9fe3
sub esi, ebp
add esi, 0x477b9fe3
sub esi, 0x3dfb0717
pop ebp
mov edi, esi
pop esi
xor dword [esp + 4], edi
pop edi
mov dword [esp], edi
call fcn.005d0531
push ecx
mov ecx, esp
add ecx, 4
push eax
mov eax, 4
add ecx, eax
pop eax
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
push dword [esp + 8]
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push dword [esp]
push dword [esp]
pop eax
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x5cffe0