Function at 0x67aa4e
Capabilities:
Execute anti-debugging instructions

Disassembly:
pushal
jp 0x5cff9f
jbe 0x5cff9f
push eax
push ecx
pop ecx
pop eax
push eax
push edx
jmp 0x5cffb4
rdtsc
jmp 0x5cffcf
pushal
popal
pop edx
pop eax
push eax
push edx
push eax
pop eax
rdtsc
jne 0x5cffdf
pop edx
pop eax
popal
push eax
push edx
jle 0x5cfff2
jnp 0x5cfff0
pushal
popal
jmp 0x5d0007
rdtsc
push eax
push edx
push eax
push edx
rdtsc
pop edx
pop eax
rdtsc
jmp 0x5d0029
push eax
pop eax
pop edx
pop eax
pop edx
pop eax
push ebp
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
push edi
push edx
push edi
mov dword [esp], 0x3fef2de9
pop edx
or edx, 0x6fbd5c37
and edx, 0x5fb948a8
shl edx, 3
push edi
mov edi, 0x5dfa69f5
push ecx
mov ecx, 0xa0302cb1
xor edi, ecx
pop ecx
xor edx, edi
pop edi
push edx
pop edi
pop edx
sub ebx, edi
pop edi
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], edi
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
push dword [esp]
mov edi, dword [esp]
add esp, 4
add esp, 4
add edi, 4
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push esi
mov dword [esp], ebp
mov ebp, esp
push edx
mov edx, 0x7fa72569
push ebx
mov ebx, 0x479bc751
push edx
mov edx, 1
sub ebx, edx
pop edx
add ebx, 0x183bc541
xor edx, ebx
pop ebx
shr edx, 6
not edx
sub esp, 4
mov dword [esp], edi
mov edi, 0x75fb3801
add edx, edi
pop edi
and edx, 0x7cd64328
push ecx
mov dword [esp], 0x33594e53
mov dword [esp], eax
mov eax, 0x8bafbefc
add edx, 0x42fb609a
add edx, eax
sub edx, 0x42fb609a
pop eax
sub ebp, 0x7fd57741
add ebp, edx
add ebp, 0x7fd57741
mov edx, dword [esp]
add esp, 4
sub ebp, 4
push ebp
push dword [esp + 4]
mov ebp, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
add ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
push ebx
mov ebx, esp
add ebx, 4
push edx
push ebx
push edi
push ebx
mov ebx, 0x6f3f98e6
mov edi, ebx
pop ebx
mov ebx, edi
pop edi
mov edx, 0x6f3f98ea
sub edx, 0x6ffcfe63
sub edx, ebx
add edx, 0x6ffcfe63
pop ebx
sub ebx, edx
pop edx
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ecx
push 0x176e5a39
mov dword [esp], esp
add dword [esp], 4
mov ecx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push edi
mov edi, 4
add ebx, edi
pop edi
xchg dword [esp], ebx
pop esp
add ecx, 4
push ebp
sub esp, 4
mov dword [esp], ebx
push 0x1d7d1bd3
pop ebx
xor ebx, 0x1d7d1bd7
mov ebp, ebx
mov ebx, dword [esp]
add esp, 4
sub ecx, ebp
pop ebp
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], edx
push esp
pop edx
push ecx
mov ecx, 0x57eb5300
push eax
mov dword [esp], edx
push 0x7fff17e0
pop edx
dec edx
push ebp
push eax
mov eax, 0x376e0421
mov ebp, eax
pop eax
push ebp
dec dword [esp]
pop ebp
and ebp, 0x37ffe0ec
sub ebp, 0x47737907
add edx, ebp
pop ebp
xor ecx, edx
pop edx
sub esp, 4
mov dword [esp], eax
mov eax, 0x4afb90c4
sub eax, 0xfea5768
shl eax, 3
shl eax, 5
add eax, 0x29229911
and ecx, eax
pop eax
push edx
mov edx, 0x7ded9321
or ecx, edx
mov edx, dword [esp]
add esp, 4
shl ecx, 2
sub ecx, 0x5737b984
xor ecx, 0xa0c7a344
add edx, ecx
pop ecx
push eax
mov eax, 0x36fdb091
inc eax
dec eax
push ecx
mov ecx, 0x3f734418
or eax, ecx
pop ecx
shl eax, 8
push ecx
mov ecx, 0xb6704
add eax, ecx
pop ecx
sub edx, 0x73e3d28d
sub edx, eax
add edx, 0x73e3d28d
pop eax
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
push edx
mov dword [esp], ecx
mov dword [esp], 0x316fcd5d
and dword [esp], 0x7b8d9377
shr dword [esp], 7
sub dword [esp], 0xa6f777a1
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push 0xcf14243
mov dword [esp], eax
mov eax, 0x3cde4835
push edx
mov edx, 0x6fb70695
inc edx
xor edx, 0x767e46df
or edx, 0x7dbcb18d
not edx
add edx, 0xfdafae67
and eax, edx
pop edx
push ebp
mov ebp, 0x5ea528ad
add eax, ebp
pop ebp
neg eax
inc eax
push esi
mov esi, 0x753fe2b5
xor eax, esi
pop esi
push ecx
push edx
mov edx, 0x7be7a52a
add edx, 0xb995983a
mov ecx, edx
pop edx
sub ecx, 1
sub ecx, 0xffffffff
push ebp
mov ebp, 0xb88d94aa
add ecx, ebp
pop ebp
add eax, ecx
pop ecx
sub ebx, eax
push dword [esp]
pop eax
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
xchg dword [esp], ebx
pop esp
mov dword [esp], ebx
push 0x7d49bf41
mov dword [esp], ebx
push esp
mov ebx, dword [esp]
add esp, 4
push edi
push ecx
push edx
push 0x71fd5139
pop edx
push edi
mov edi, 0x65fe63eb
sub edx, edi
pop edi
xor edx, 0x7ed70a55
push eax
mov eax, 0x776fb73f
xor eax, 0x8e3b7fca
add edx, eax
pop eax
mov ecx, edx
pop edx
shl ecx, 1
xor ecx, 0xa326e199
mov edi, ecx
pop ecx
push ecx
push eax
mov eax, 0x7f573d00
mov ecx, eax
pop eax
shl ecx, 8
sub ecx, 0x7fe15af9
shl ecx, 5
inc ecx
dec ecx
add ecx, 0x908ae5dd
add edi, ecx
pop ecx
push esi
mov esi, 0x424f78e
add edi, esi
pop esi
add ebx, edi
pop edi
push esi
mov esi, 4
sub ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], edi
mov dword [esp], ebp
push ebx
push ebx
mov dword [esp], esp
add dword [esp], 4
mov ebx, dword [esp]
add esp, 4
push edx
mov edx, 0x6faa1f1a
push ecx
mov ecx, 0x5fef53bc
sub edx, ecx
pop ecx
sub edx, 0xfbacb5a
add ebx, edx
mov edx, dword [esp]
add esp, 4
push 0x6ab7a0e0
mov dword [esp], edi
mov edi, 4
sub ebx, edi
pop edi
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], 0x53b6f10b
sub dword [esp], 1
add dword [esp], 0x2bc7647f
push esi
mov dword [esp], ecx
mov ecx, 0x4a8cf6e4
xor dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
mov dword [esp], esi
push ebx
sub esp, 4
push esp
pop dword [esp]
push ebx
mov ebx, 4
add dword [esp + 4], ebx
pop ebx
pop ebx
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebp
mov dword [esp], 0x4f1184e3
mov dword [esp], ecx
push ebp
mov ebp, 0x79fe2d8e
mov ecx, 0x43013dcb
xor ecx, ebp
pop ebp
not ecx
shl ecx, 6
xor ecx, eax
xor eax, ecx
xor ecx, eax
not eax
xchg ecx, eax
not ecx
xor ecx, 0x403bee84
add ebx, ecx
mov ecx, dword [esp]
add esp, 4
push edi
mov dword [esp], ecx
mov ecx, 4
sub ebx, ecx
mov ecx, dword [esp]
add esp, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], edi
call fcn.005d04bf
ror byte [edi], 1
mov byte [eax], dl
add byte [eax], al
add byte [eax + 0x50], ah
push edx
rdtsc
pop edx
pop eax
push eax
push edx
rdtsc
pop edx
pop eax
pushal
popal
popal
push eax
push edx
push eax
push edx
jb 0x67a9c1
rdtsc
js 0x67a9c9
jmp 0x67a9d8
pop edx
pop eax
rdtsc
push ecx
jno 0x67a9e3
jmp 0x67a9f4
pop ecx
je 0x67a9fd
push esi
pop esi
pop edx
pop eax
pushfd
push ebx
mov dword [esp], edi
mov dword [esp], 0x73fbefe9
add dword [esp], 0x5f1e9b7e
or dword [esp], 0x707b6977
add dword [esp], 0x673daac6
not dword [esp]
inc dword [esp]
push ebx
mov ebx, 0x5ab99821
add dword [esp + 4], ebx
pop ebx
push eax
mov dword [esp], ebp
mov dword [esp], 0x7c3943ed
push 0x635a2247
mov dword [esp], edi
mov edi, 0x7c11b461
sub dword [esp + 4], edi
pop edi
push ebp
mov ebp, esp
push edi
mov edi, 4
sub ebp, 0x5d36cc80
add ebp, edi
add ebp, 0x5d36cc80
pop edi
push eax
mov eax, 4
sub ebp, eax
pop eax
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
push 0x626d45b5
mov dword [esp], ebx
mov dword [esp], 0x6dfc3bbe
push ecx
mov ecx, 0x7fdf8785
add dword [esp + 4], ecx
pop ecx
not dword [esp]
add dword [esp], 0xef1c465d
mov dword [esp], ebx
push dword [esp + 0x10]
push dword [esp]
pop eax
push eax
mov eax, esp
push edi
mov edi, 0x7f3b4c44
inc edi
sub edi, 0x7f3b4c41
add eax, edi
pop edi
add eax, 4
xchg dword [esp], eax
pop esp
push dword [esp + 8]
push dword [esp]
pop ebx
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
push ebx
mov ebx, 4
add edx, ebx
pop ebx
xchg dword [esp], edx
pop esp
push dword [esp]
mov eax, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add esp, 4
jmp 0x5cff92