Function at 0x6d8c87
Capabilities:
Execute anti-debugging instructions

Disassembly:
push edx
push eax
push edx
jmp 0x6305b1
rdtsc
jno 0x6305b9
push edi
pop edi
pop edx
pop eax
pop edx
push eax
push edx
push edi
jg 0x6305c7
jno 0x6305cd
pop edi
pushal
jmp 0x6305da
jmp 0x6305f3
js 0x6305f9
jmp 0x630611
popal
rdtsc
pushal
jmp 0x630623
push ebx
pop ebx
jmp 0x63063c
popal
pop edx
pop eax
push ebp
push 0x6a3aa19c
mov dword [esp], esp
add dword [esp], 4
mov ebp, dword [esp]
push 0x2bd4a5dc
mov dword [esp], ecx
mov ecx, esp
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
push edi
push eax
mov eax, 4
mov edi, eax
pop eax
add ebp, 0x5f3fa568
add ebp, edi
push edx
mov edx, 0x3d400e21
sub edx, 0x3fe796f0
and edx, 0x7aff7732
xor edx, 0x7ff3feb
neg edx
push ecx
mov ecx, 0xdee6ee43
add edx, ecx
pop ecx
sub ebp, edx
mov edx, dword [esp]
add esp, 4
pop edi
push eax
mov eax, 0x7ef12837
push edx
mov edx, 0x7f7737d1
neg edx
dec edx
not edx
shl edx, 7
dec edx
shl edx, 6
sub edx, 0xaafcf283
xor eax, edx
pop edx
and eax, 0x79d5a807
or eax, 0x7e55399a
xor eax, 0x157be93d
sub eax, 0x6a2ed0a3
sub ebp, eax
pop eax
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], eax
push edi
sub esp, 4
mov dword [esp], ebx
push 0x37f62bd4
mov dword [esp], esp
add dword [esp], 4
pop dword [esp]
push ecx
mov dword [esp], edx
mov edx, 4
add dword [esp + 4], edx
pop edx
pop edi
push esi
mov esi, 4
add edi, esi
push dword [esp]
mov esi, dword [esp]
add esp, 4
add esp, 4
push ecx
mov ecx, 4
sub edi, ecx
pop ecx
push edi
push dword [esp + 4]
push dword [esp]
pop edi
add esp, 4
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
mov dword [esp], ebx
mov dword [esp], ecx
push 0x7e103a81
mov dword [esp], edi
push esi
mov dword [esp], ecx
push esi
push 0x69577bd6
pop esi
sub esi, 0x5fee82f6
or esi, 0x37978c8a
add esi, 0xe746b2a8
mov ecx, esi
pop esi
mov dword [esp + 4], ecx
push dword [esp]
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 0x7fefb601
push ecx
mov ecx, 1
add edx, ecx
mov ecx, dword [esp]
add esp, 4
or edx, 0x7a973101
push ebx
mov ebx, 0x7d671b35
xor edx, ebx
pop ebx
neg edx
sub esp, 4
mov dword [esp], eax
mov eax, 0x3fff33d4
add eax, 0x22ef4ba0
xor eax, 0x6076d34e
add edx, eax
pop eax
sub eax, 0x22d884dd
add eax, edx
add eax, 0x22d884dd
pop edx
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
add esp, 4
mov dword [esp], edx
push 0x16a12bea
mov dword [esp], edi
mov dword [esp], 0x7757e35d
sub dword [esp], 0x675a68d8
xor dword [esp], 0x79a5e900
not dword [esp]
shl dword [esp], 1
neg dword [esp]
xor dword [esp], 0x7967c7a9
sub dword [esp], 0x3cc6d309
mov dword [esp], edx
mov edx, esp
push 0x6cfd06fd
mov dword [esp], edi
mov edi, 4
add edx, edi
push dword [esp]
pop edi
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ecx
push ebp
mov dword [esp], 4
push dword [esp]
pop ecx
add esp, 4
add edx, 0x4bffec7c
sub edx, ecx
push ecx
mov ecx, 0x6d9f4159
and ecx, 0x7b5eade6
shl ecx, 5
or ecx, 0x29ff2714
not ecx
add ecx, 0x77ff1b91
sub edx, ecx
pop ecx
pop ecx
xchg dword [esp], edx
pop esp
mov dword [esp], edi
mov dword [esp], ebx
push esi
mov dword [esp], edi
mov dword [esp], ecx
mov dword [esp], 0x7acfb55b
sub dword [esp], 0x1a9cb401
inc dword [esp]
or dword [esp], 0x519d5b59
not dword [esp]
sub dword [esp], 0x1240edf0
not dword [esp]
or dword [esp], 0x42ff5bb8
add dword [esp], 0xffffffff
push esi
push edx
mov edx, 0x3af777bf
mov esi, 0x717533ff
xor esi, edx
mov edx, dword [esp]
add esp, 4
add dword [esp + 4], 0x7b676b31
sub dword [esp + 4], esi
sub dword [esp + 4], 0x7b676b31
mov esi, dword [esp]
add esp, 4
and dword [esp], 0x7e7f7ec1
add dword [esp], 0x7f779ab2
push esi
push eax
mov eax, 0xca067693
mov esi, eax
pop eax
sub dword [esp + 4], esi
pop esi
add dword [esp], 0x6ddbf295
push ebx
mov dword [esp], ebp
mov ebp, 0x544ebaef
sub dword [esp + 4], 0x7ddbe7c0
sub dword [esp + 4], ebp
add dword [esp + 4], 0x7ddbe7c0
pop ebp
mov dword [esp], eax
mov dword [esp], ebx
push edx
mov edx, esp
push ebx
mov dword [esp], edx
mov dword [esp], ecx
mov ecx, 0x539f08d0
or ecx, 0x4ead2c64
sub ecx, 0x5fbf2cf0
add edx, ecx
mov ecx, dword [esp]
add esp, 4
push esi
mov esi, 4
sub edx, 0x7fdf055c
push ebx
mov ebx, 0x7fdf306c
neg ebx
or ebx, 0x647b0846
and ebx, 0x469cc69a
xor ebx, 0x5b57e109
sub edx, ebx
pop ebx
push edi
mov edi, 0x4ecb6452
xor edi, 0x7f3f8a86
and edi, 0x41ef1a00
shl edi, 4
xor edi, 0x61a7f5e7
add edx, edi
pop edi
push ebx
mov ebx, 0x1bf486fb
sub edx, ebx
pop ebx
sub edx, esi
add edx, 0x1bf486fb
push ebx
mov ebx, 0x7d936233
or ebx, 0x3df060c7
or ebx, 0x1dee1f96
sub ebx, 0xfe182a10
sub edx, ebx
pop ebx
add edx, 0x1f4f279b
push esi
mov dword [esp], ebx
mov ebx, 0x19fb5e14
dec ebx
shr ebx, 8
sub ebx, 0x7eff8a25
inc ebx
not ebx
push esi
mov esi, 0x13a8b99
xor ebx, esi
pop esi
add edx, ebx
pop ebx
pop esi
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebp
sub esp, 4
mov dword [esp], edx
push esp
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push esi
mov dword [esp], ebp
push 0x7d493f00
mov dword [esp], esi
mov dword [esp], eax
mov eax, 0x7f4db2a4
mov ebp, 0x7f4db2a8
sub ebp, eax
pop eax
push edi
mov edi, 0x5fff2ddf
sub edx, 0x7bbf2a35
sub edx, edi
push ecx
mov ecx, 0x7bbf2a35
add edx, ecx
pop ecx
mov edi, dword [esp]
add esp, 4
sub edx, 0x7f9b7132
add edx, ebp
add edx, 0x7f9b7132
add edx, 0x5fff2ddf
mov ebp, dword [esp]
add esp, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], esi
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
mov dword [esp], ecx
push edx
mov edx, 0x6f5f83ec
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
add dword [esp], 0x372f5220
sub dword [esp], 0x5dbf9d30
dec dword [esp]
sub dword [esp], 0xcd877e3
add dword [esp], 0x3ff8f025
xor dword [esp], 0x47a1cdc
inc dword [esp]
shl dword [esp], 8
push esi
push eax
push ebx
mov ebx, 0x2ffd0400
mov eax, 0xff2f175
add eax, ebx
pop ebx
push 0xb6efbf3f
pop esi
sub esi, eax
pop eax
and dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
shr dword [esp], 6
or dword [esp], 0x7fda7a87
push ebx
mov dword [esp], 0x67d1e1c9
mov dword [esp], ebx
mov ebx, 0x4f3ea111
sub dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], ebp
mov dword [esp], edi
call fcn.00630b4e
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ecx
push edx
mov edx, 0x6ffbf3ff
sub edx, 0xf87ceaf5
mov ecx, edx
pop edx
and ecx, 0x7fbdfe6c
neg ecx
push esi
mov esi, 0x773d080c
add ecx, esi
pop esi
add ebp, ecx
pop ecx
xchg dword [esp], ebp
pop esp
jmp 0x630597