Function at 0x60b882
Capabilities:
Execute anti-debugging instructions

Disassembly:
pushal
push esi
push eax
push edx
rdtsc
pop edx
pop eax
pop esi
push ebx
push ebx
pop ebx
push eax
pop eax
pop ebx
popal
push eax
push edx
jmp 0x5dea86
push ecx
je 0x5dea8d
pop ecx
rdtsc
jbe 0x5dea98
push eax
pop eax
push edx
push eax
pop eax
push edi
pop edi
pop edx
pop edx
pop eax
push edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
push esp
pop eax
add eax, 4
push esi
push 0xb8b43e6
mov dword [esp], edi
mov edi, 0x7ee7c6b6
mov esi, 0xfffaabc
dec esi
and esi, 0x7ffb72a8
dec esi
sub esi, 0x37ef3cf2
sub esi, 0x97773a94
xor esi, edi
push dword [esp]
pop edi
push 0x5b0741f7
mov dword [esp], esi
mov esi, esp
push edi
mov edi, 4
add esi, edi
pop edi
add esi, 4
xchg dword [esp], esi
pop esp
and esi, 0x5f37581b
add esi, 0xe1ccb7f1
push esi
mov esi, 0x7f502c8e
add eax, esi
pop esi
sub eax, esi
sub eax, 0x7f502c8e
mov esi, dword [esp]
add esp, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push ebp
mov ebp, esp
add ebp, 4
push eax
mov eax, 4
sub ebp, eax
pop eax
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
mov dword [esp], ecx
mov dword [esp], 0x3dffcec6
push edi
push esi
mov esi, 0x4c7bfda1
shr esi, 3
add esi, 0xec66f5ed
mov edi, esi
pop esi
add dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
push ecx
mov ecx, 0x59bf2851
or dword [esp + 4], ecx
pop ecx
push esi
mov esi, 1
sub dword [esp + 4], esi
push dword [esp]
pop esi
add esp, 4
push ebp
mov ebp, 0xecabf81
sub dword [esp + 4], ebp
pop ebp
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], ecx
push esi
push esp
pop esi
add esi, 4
sub esp, 4
mov dword [esp], edi
mov edi, 4
add esi, 0x7bc76fc3
sub esi, 0x5bfc8337
sub esi, edi
add esi, 0x5bfc8337
push ecx
push ebp
mov dword [esp], ebx
push 0x75bb3abf
mov ebx, dword [esp]
add esp, 4
sub ebx, 0xf5c34d60
push edx
push ebx
pop edx
push edx
xor dword [esp], 0x55ffcf04
pop ecx
xor ecx, 0x55ffcf04
pop edx
mov ebx, dword [esp]
add esp, 4
shr ecx, 1
not ecx
inc ecx
add ecx, 0xbbc36672
sub esi, 0x1bffdd81
add esi, 0x7d37e295
sub esi, ecx
sub esi, 0x7d37e295
add esi, 0x1bffdd81
mov ecx, dword [esp]
add esp, 4
pop edi
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], edx
push esi
push esp
mov esi, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ebx
mov dword [esp], ebp
push edx
mov edx, 0x6ffbd393
mov dword [esp + 4], edx
pop edx
push edi
mov edi, 0x3efb262b
shl edi, 3
xor edi, 0xc9bc201c
push ebx
mov ebx, 0x7e7ebfbb
add dword [esp + 8], ebx
pop ebx
sub dword [esp + 4], edi
push esi
mov esi, 0x7e7ebfbb
sub dword [esp + 8], esi
pop esi
mov edi, dword [esp]
add esp, 4
mov dword [esp], esi
mov dword [esp], ecx
mov dword [esp], ebx
push eax
mov dword [esp], 0x7f3791ee
inc dword [esp]
sub dword [esp], 0x783d64c0
mov dword [esp], ecx
push eax
mov eax, 0x3bb5a74f
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
push 0x228dff71
mov dword [esp], eax
mov dword [esp], ecx
push 0x37fbe2ce
pop ecx
sub dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
push edx
mov edx, 0x7dfaa904
and dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
add dword [esp], 1
shl dword [esp], 3
sub esp, 4
mov dword [esp], edi
push eax
mov eax, 0x3f6f5b21
mov edi, eax
mov eax, dword [esp]
add esp, 4
or dword [esp + 4], edi
pop edi
add dword [esp], 0x921f538
mov dword [esp], ebx
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edi
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], esp
push edi
mov edi, 4
add dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov edi, dword [esp]
push 0x7467e300
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
sub esp, 4
mov dword [esp], edx
push ebx
mov ebx, 0x6bb512d7
push ebp
mov ebp, 0x17f767cf
or ebp, 0x1db96eeb
sub ebp, 0xa00020c9
sub ebx, 0x7f99365d
add ebx, ebp
add ebx, 0x7f99365d
pop ebp
shl ebx, 4
neg ebx
xor ebx, 0x7fbd294f
sub ebx, 0xbd0b8e33
push ebx
sub dword [esp], 0x7ba7dde2
pop edx
add edx, 0x7ba7dde2
pop ebx
shl edx, 4
dec edx
sub edx, 0xdf93b4bb
add edi, 0x6df5fb2b
add edi, edx
sub edi, 0x6df5fb2b
pop edx
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ebp
push ecx
mov dword [esp], 0x72c01fa0
mov dword [esp], edi
push esp
pop edi
sub esp, 4
mov dword [esp], eax
mov eax, 4
push ebx
push 0x1fff6f5d
pop ebx
add ebx, 0x4def1bd1
or ebx, 0x795f9f73
or ebx, 0x7f5f7262
add ebx, 0x1fbf47a5
sub ebx, 0x6f75378f
sub ebx, 0xc30e69c3
sub edi, ebx
pop ebx
add edi, 0x79dd83aa
add edi, eax
sub edi, 0x79dd83aa
add edi, 0x6d3ba5d2
pop eax
push ebx
mov ebx, 4
sub edi, ebx
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push esi
mov esi, 4
add ecx, esi
pop esi
xchg dword [esp], ecx
mov esp, dword [esp]
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
mov dword [esp], edx
mov dword [esp], esi
push 0x694c19b3
mov dword [esp], eax
push eax
push edi
push esi
push 0x5cffdbe9
mov esi, dword [esp]
add esp, 4
push esi
neg dword [esp]
pop esi
sub esi, 0x4670d4fe
mov edi, esi
pop esi
add edi, 0x7de26d8
shr edi, 7
not edi
xor edi, 0x7bd72086
sub edi, 0x7dbfa508
sub edi, 0xcf60d0f0
mov eax, edi
pop edi
mov dword [esp + 4], eax
pop eax
and dword [esp], 0x339fe7f5
sub dword [esp], 0xffffffff
neg dword [esp]
push ecx
mov ecx, esp
push eax
push ebx
mov ebx, 0x797bd8f1
neg ebx
not ebx
sub ebx, 0x73bfce8b
sub ebx, 0x5bc0a61
mov eax, ebx
pop ebx
add ecx, eax
pop eax
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edi
mov edi, 1
push edx
mov edx, 0x5fbde2d9
sub dword [esp + 8], edx
pop edx
add dword [esp + 4], edi
add dword [esp + 4], 0x5fbde2d9
mov edi, dword [esp]
add esp, 4
add dword [esp], 0x6b92b68f
sub dword [esp], 0x698db44
mov dword [esp], edi
call fcn.005def61
xor al, 0xa7
vmresume
sub ebx, 0xfa73415
pop eax
add ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ecx
mov ecx, 0x5e4fa790
neg ecx
or ecx, 0x7ff9e413
not ecx
xor ecx, 0x60388
add ebp, ecx
mov ecx, dword [esp]
add esp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0x5dea64