Function at 0x6f1aee
Capabilities:
Execute anti-debugging instructions

Disassembly:
pushal
push eax
push edx
push eax
pop eax
push eax
push edx
rdtsc
pop edx
pop eax
rdtsc
pushal
popal
jmp 0x5c609e
pop edx
pop eax
push edx
push edi
pop edi
pop edx
jle 0x5c60ae
push ecx
pop ecx
push eax
pop eax
popal
push 0x52f0c54e
mov dword [esp], edi
mov edi, esp
add edi, 4
sub esp, 4
mov dword [esp], eax
push ebx
push 0x169f87b4
pop ebx
or ebx, 0x6e72ea2c
sub ebx, 0xffffffff
push ecx
mov ecx, 0xf8bb109d
add ebx, ecx
pop ecx
mov eax, ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push ebx
mov ebx, 0x2e69fe5c
and ebx, 0x57ffd66c
shl ebx, 8
dec ebx
shr ebx, 8
or ebx, 0x5ff332cd
add ebx, 0xc6c32c89
and eax, ebx
pop ebx
push esi
mov esi, 0x4fffa457
add esi, 1
shr esi, 2
and esi, 0x773b630e
shr esi, 5
sub esi, 0x7fbeba0a
sub esi, 0x21fb9bc7
or eax, esi
pop esi
dec eax
neg eax
add eax, 0x7eff8582
sub edi, eax
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], eax
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ecx
mov dword [esp], ebp
mov dword [esp], 0x5e9556f9
push esi
mov esi, 0x3fdf2e75
and dword [esp + 4], esi
pop esi
not dword [esp]
add dword [esp], 0xffffffff
xchg dword [esp], ecx
not ecx
xchg dword [esp], ecx
push eax
push edi
sub esp, 4
mov dword [esp], edx
mov edx, 0x357fd422
and edx, 0x66ff2c8d
xor edx, 0x7ac435db
mov edi, edx
mov edx, dword [esp]
add esp, 4
push ecx
mov ecx, 0x7fbf4948
dec ecx
dec ecx
and ecx, 0x5fbfad31
dec ecx
sub ecx, 0xf19039a4
xor edi, ecx
pop ecx
mov eax, edi
mov edi, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
xor dword [esp + 4], eax
pop eax
mov dword [esp], ecx
push ebx
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push ebx
push edx
mov dword [esp], 0x7d9fe290
not dword [esp]
not dword [esp]
sub dword [esp], 0x7d9fe28c
push dword [esp]
pop ebx
add esp, 4
push eax
push ecx
push esi
mov dword [esp], 0x49b78424
pop ecx
inc ecx
or ecx, 0x1dffc884
xor ecx, 0x2709d90c
mov eax, ecx
pop ecx
push ebx
mov ebx, 0x12f873a8
sub eax, ebx
pop ebx
add ecx, 0x77df0e92
add ecx, eax
sub ecx, 0x77df0e92
pop eax
add ecx, 0x7bf681c4
sub ecx, ebx
sub ecx, 0x7bf681c4
push edx
mov edx, 0x67fda201
sub ecx, edx
pop edx
pop ebx
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
mov dword [esp], edx
sub esp, 4
mov dword [esp], ebx
mov dword [esp], edx
mov edx, esp
sub esp, 4
mov dword [esp], ebx
push edx
mov edx, 0x77fecad3
mov ebx, edx
pop edx
push 0x7b3e2c9e
mov dword [esp], edx
mov edx, 0x88013531
add ebx, edx
pop edx
add edx, ebx
push dword [esp]
pop ebx
add esp, 4
sub esp, 4
mov dword [esp], eax
push ebx
mov ebx, 0x7f31afc4
and ebx, 0x5df3332c
xor ebx, 0x5d312300
mov eax, ebx
pop ebx
push ebx
mov dword [esp], eax
push ebp
mov ebp, 0x3e024601
sub ebp, 0xbe453cec
mov eax, ebp
pop ebp
sub edx, eax
pop eax
sub edx, eax
add edx, 0x7fbd0915
pop eax
push 0x5421ae01
mov dword [esp], edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], ebx
push edi
push esp
pop edi
push ebp
mov ebp, 0x47fc9adb
push ecx
mov ecx, 0x73444b1f
inc ecx
sub ecx, 0x7dff4381
and ecx, 0x3f068e1b
add ecx, 0x49f82a8c
and ebp, ecx
pop ecx
push ebx
mov ebx, 0x1fdf5f32
add ebp, 0x77ff50d3
add ebp, ebx
sub ebp, 0x77ff50d3
pop ebx
xor ebp, 0x66db6fb1
add edi, ebp
pop ebp
push ebp
mov ebp, 4
sub edi, ebp
pop ebp
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ecx
push esi
push ebp
push 0xc6901ca
mov dword [esp], edi
mov edi, 0x79fffd95
mov ebp, edi
pop edi
add ebp, 0x79ef6ba4
xchg ebp, esi
not esi
xchg ebp, esi
sub ebp, 0xafb8243
push eax
mov eax, 0xbb48e67
not eax
xor eax, 0x3de72b44
xor eax, 0x9ec1b08c
or ebp, eax
pop eax
add ebp, 0x31bc65
mov esi, ebp
mov ebp, dword [esp]
add esp, 4
mov dword [esp + 4], esi
push dword [esp]
pop esi
add esp, 4
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edx
mov edx, esp
push edx
mov dword [esp], edi
mov edi, 0x5dcff197
sub edi, 0x7babe97a
not edi
shr edi, 5
sub esp, 4
mov dword [esp], eax
push edx
mov edx, 0xff112045
mov eax, edx
pop edx
add edi, eax
mov eax, dword [esp]
add esp, 4
add edx, edi
pop edi
push edi
push ebx
mov ebx, 0x7f3eefb1
or ebx, 0x699f08e7
neg ebx
sub ebx, 0x14945627
mov edi, 0x1453d8e3
add edi, ebx
pop ebx
and edi, 0x793f3971
sub edi, 1
xor edi, 0x6b7e18f0
sub edi, 0x7f5e2d96
push esi
mov esi, 0x51dda9d9
shl esi, 5
inc esi
shr esi, 5
push eax
mov eax, 0x4f3ead00
xor esi, eax
pop eax
shl esi, 3
add esi, 0xf604fe22
add edi, esi
pop esi
add edx, 0x7fb1718
add edx, 0x3ffbc990
sub edx, edi
push esi
mov esi, 0x7fffb788
not esi
sub esi, 0x40047ee7
sub edx, esi
pop esi
sub edx, 0x7fb1718
mov edi, dword [esp]
add esp, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], ebp
push ecx
mov dword [esp], ebp
push esp
pop ebp
push ecx
push edx
push eax
mov eax, 0x7c3f71d9
push ebp
mov ebp, 0x7a3f268a
and eax, ebp
pop ebp
and eax, 0x7ffbcfec
shr eax, 2
push edi
mov edi, 0x7fef66f0
xor eax, edi
pop edi
sub eax, 0x7f7bc5ed
sub eax, 0x6e65efbd
mov edx, eax
pop eax
mov ecx, 0x1cae6f36
xor ecx, edx
pop edx
and ecx, 0x7ff15f20
and ecx, 0x65e7c6de
push edx
mov edx, 0x733f68b6
inc edx
not edx
dec edx
xor edx, 0x167e6d43
add ecx, edx
pop edx
sub ebp, 0x5fff35b3
add ebp, ecx
push edx
mov edx, 0x57fdbe09
xor edx, 0x8028bba
add ebp, edx
pop edx
pop ecx
push 0x20f8da91
mov dword [esp], ebx
mov ebx, 4
add ebp, 0x7bf1d651
sub ebp, ebx
sub ebp, 0x7bf1d651
push dword [esp]
pop ebx
add esp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
mov dword [esp], esi
push eax
mov dword [esp], edi
push ecx
push ecx
mov dword [esp], 0x27d77ffa
mov dword [esp], eax
push edi
mov edi, 0x6f6e96ff
mov eax, 0x9f2e7c5d
sub eax, edi
pop edi
mov ecx, 0x342fc83b
add ecx, eax
pop eax
mov dword [esp + 4], ecx
pop ecx
push edi
push eax
push ebx
mov ebx, 0x3fde6f17
add ebx, 0xbcbb9150
mov eax, ebx
pop ebx
mov edi, eax
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add dword [esp + 4], 0x7dfdcc10
add dword [esp + 4], 0x537d635b
add dword [esp + 4], edi
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x537d635b
sub dword [esp + 8], ecx
pop ecx
push esi
mov esi, 0x7dfdcc10
sub dword [esp + 8], 0x31fede15
sub dword [esp + 8], esi
add dword [esp + 8], 0x31fede15
pop esi
pop edi
mov dword [esp], edi
call fcn.005c65df
add al, 0x24
xor dword [esp], 0xd96c87f1
mov dword [esp], ecx
mov dword [esp], ebx
push dword [esp + 0x10]
push dword [esp]
pop eax
push ebp
mov ebp, esp
push eax
mov eax, 4
add ebp, eax
pop eax
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp + 8]
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 4
add edi, ecx
mov ecx, dword [esp]
add esp, 4
xchg dword [esp], edi
pop esp
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edx
push esp
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
mov eax, dword [esp]
push edi
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
jmp 0x5c6084