Function at 0x68d558
Capabilities:
Execute anti-debugging instructions

Disassembly:
pushal
push eax
push edx
push eax
push edx
rdtsc
pop edx
pop eax
rdtsc
jmp 0x5ca485
pushal
popal
pop edx
pop eax
jmp 0x5ca498
push eax
push edx
pushal
popal
rdtsc
jl 0x5ca4a4
jns 0x5ca4aa
pop edx
pop eax
popal
pushal
jmp 0x5ca4bf
jmp 0x5ca4cc
pushal
jmp 0x5ca4e1
push eax
push edx
rdtsc
pop edx
pop eax
jmp 0x5ca4f5
push eax
push edx
rdtsc
pop edx
pop eax
popal
jmp 0x5ca510
popal
push eax
push esp
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edi
mov dword [esp], 0x7b9491a4
shr dword [esp], 6
push ebx
push esi
push 0x7ff77a53
pop esi
not esi
push edx
mov edx, 0x7fbd4bcf
sub esi, edx
pop edx
shl esi, 6
sub esi, 0x92cf5e1b
mov ebx, esi
pop esi
xor dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
shl dword [esp], 6
shr dword [esp], 7
dec dword [esp]
add dword [esp], 0x71b6c17f
xchg dword [esp], eax
not eax
xor dword [esp], eax
xor eax, dword [esp]
xor dword [esp], eax
push esi
mov esi, 1
add dword [esp + 4], esi
pop esi
neg dword [esp]
shl dword [esp], 4
dec dword [esp]
xor dword [esp], 0x1088a351
sub dword [esp], 0xffffffff
push edx
push 0x665b009c
mov dword [esp], ecx
mov ecx, 0x4274dd02
mov edx, ecx
pop ecx
xor dword [esp + 4], edx
pop edx
mov dword [esp], eax
push ebp
mov dword [esp], 0x17b3a668
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], 0x7dd50800
neg dword [esp]
neg dword [esp]
push 0x100297c5
mov dword [esp], ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
xchg ebp, ecx
not ecx
xchg ebp, ecx
xchg dword [esp], ebp
push edi
mov edi, 0xed4cfacb
add dword [esp + 4], edi
pop edi
xchg dword [esp], ecx
neg ecx
xor dword [esp], ecx
xor ecx, dword [esp]
xor dword [esp], ecx
push ebp
mov dword [esp], ecx
mov ecx, 0x7ffbc399
add dword [esp + 4], ecx
pop ecx
xchg dword [esp], eax
push eax
dec dword [esp]
pop eax
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
dec dword [esp]
sub dword [esp], 1
add dword [esp], 0x42578d03
mov dword [esp], ecx
push ecx
mov dword [esp], edi
mov dword [esp], 0x5cf5073d
push edi
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
mov ebx, 0x2f483a35
mov edi, 0x1eb70892
add edi, ebx
pop ebx
sub edi, 0xffffffff
sub edi, 0x222f44af
xor dword [esp + 4], edi
push dword [esp]
pop edi
add esp, 4
push eax
push edi
mov dword [esp], 0xc9ea0fef
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add dword [esp + 4], 0x7bb93ab8
add dword [esp + 4], eax
sub dword [esp + 4], 0x7bb93ab8
pop eax
mov dword [esp], edx
push ecx
mov dword [esp], 0x7fb360a4
mov dword [esp], ebp
mov dword [esp], 0x4fe4ffaf
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esp, 4
mov dword [esp], edx
push ebp
mov dword [esp], ecx
mov dword [esp], 0x5bfa39e5
inc dword [esp]
sub dword [esp], 0x5fb1eaac
sub dword [esp], 0x5fff1700
not dword [esp]
push edx
mov edx, 0x75db9542
or dword [esp + 4], edx
pop edx
push eax
mov eax, 0x2a407b46
sub dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
shl dword [esp], 5
push edx
mov edx, 0xcf7c35b
sub dword [esp + 4], edx
pop edx
dec dword [esp]
push edi
mov edi, 0x67fb27ea
or dword [esp + 4], edi
pop edi
add dword [esp], 0x10041016
pop edx
sub esi, 0x7ec383db
sub esi, edx
add esi, 0x7ec383db
mov edx, dword [esp]
add esp, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebx
push edx
mov dword [esp], 0x4d00eac2
mov dword [esp], edx
mov dword [esp], ecx
push esi
mov dword [esp], edx
mov dword [esp], eax
push ecx
mov ecx, 0x61ab531b
mov eax, ecx
pop ecx
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
mov dword [esp], eax
push 0x411b38c
mov dword [esp], eax
mov dword [esp], ecx
mov ecx, 0x727df3d3
mov dword [esp + 4], ecx
push dword [esp]
mov ecx, dword [esp]
push esi
mov esi, esp
push ebx
mov ebx, 0x3febd944
not ebx
xor ebx, 0xc01426bf
add esi, ebx
pop ebx
add esi, 4
xchg dword [esp], esi
pop esp
add esp, 4
mov dword [esp], ebx
push ebx
mov dword [esp], edi
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop edi
push ebx
mov dword [esp], 0x13ce1d1d
mov dword [esp], ebp
push esi
mov esi, 0x677b3f56
mov ebp, 0x9884c0ae
push ebx
mov ebx, 0x77fa469a
add ebx, 0xffffffff
or ebx, 0x7ad38755
xor ebx, 0x44768d
sub ebp, ebx
pop ebx
add ebp, esi
add ebp, 0x7fbfb150
push dword [esp]
pop esi
push esi
mov esi, esp
add esi, 4
push ecx
push edx
mov edx, 4
mov ecx, edx
pop edx
add esi, ecx
pop ecx
xchg dword [esp], esi
mov esp, dword [esp]
add edi, ebp
pop ebp
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebp
push 0x70a75c61
mov dword [esp], edx
mov edx, esp
add edx, 4
push 0x5508a5d
mov dword [esp], ebp
mov ebp, 4
sub esp, 4
mov dword [esp], eax
mov eax, 0x2dfb86ad
add edx, eax
pop eax
sub edx, ebp
sub edx, 0x2dfb86ad
mov ebp, dword [esp]
push edx
push esp
pop edx
add edx, 4
push esi
mov esi, 4
add edx, esi
pop esi
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
mov dword [esp], 0x5d2f2581
and dword [esp], 0x6f77b441
shl dword [esp], 1
xchg dword [esp], ecx
dec ecx
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
sub dword [esp], 0x97b4a727
mov dword [esp], esi
push ebp
mov dword [esp], 0x3ffd8521
inc dword [esp]
push esi
mov esi, 0x7be7d280
or dword [esp + 4], esi
pop esi
shl dword [esp], 5
xor dword [esp], 0x5dfff100
push 0x35b28282
mov dword [esp], edx
mov edx, 0xbbf7b64c
push eax
mov eax, 0x77fa0409
push edx
mov edx, 0x57dfd14b
push edx
push eax
pop edx
pop eax
not eax
xchg edx, eax
sub edx, 0x5db20f50
push ecx
mov ecx, 0x5deb1316
sub edx, ecx
pop ecx
and edx, 0x67618e2e
and edx, 0x3ff73001
add edx, 0x3336e13a
and eax, edx
pop edx
sub eax, 0x7fc7a069
push esi
mov esi, 0x5edf260a
and eax, esi
pop esi
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x7be5c69b
xor eax, ebx
pop ebx
push ebx
mov ebx, 0xadf1fd66
sub eax, ebx
pop ebx
add dword [esp + 8], 0x1ffbf9aa
sub dword [esp + 8], eax
sub dword [esp + 8], 0x1ffbf9aa
pop eax
add dword [esp + 4], edx
push eax
mov eax, 0x7af3e1cb
shr eax, 7
dec eax
add eax, 0x7ec7db69
add dword [esp + 8], eax
pop eax
pop edx
mov dword [esp], edi
call fcn.005ca98d
inc eax
lcall 0x5024, 0x489b9e3
mov eax, esp
push ebx
mov ebx, 0x7f7e2d10
neg ebx
add ebx, 0x7f7e2d14
add eax, ebx
pop ebx
sub eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
mov dword [esp], ebx
push dword [esp + 0x10]
mov eax, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
push eax
mov eax, 4
add ebx, eax
pop eax
xchg dword [esp], ebx
pop esp
push dword [esp + 8]
mov ebx, dword [esp]
push ebx
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push ebp
mov ebp, 0x657f20f3
shr ebp, 1
inc ebp
not ebp
add ebp, 0x32bf907f
add ecx, ebp
pop ebp
xchg dword [esp], ecx
pop esp
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
push edi
mov edi, 4
add ebp, edi
pop edi
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x5ca468