Function at 0x627411
Capabilities:
Execute anti-debugging instructions

Disassembly:
push eax
pushal
pushal
popal
push eax
push edx
rdtsc
pop edx
pop eax
popal
jl 0x5743f4
push ebx
pop ebx
pop eax
jb 0x57442b
push eax
push edx
pushal
popal
pushal
popal
rdtsc
push eax
push edx
rdtsc
pop edx
pop eax
pop edx
pop eax
jno 0x57442b
jmp 0x574429
push ecx
pop ecx
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebp
push 0x7110689d
push esp
pop dword [esp]
add dword [esp], 4
pop ebp
push edx
mov edx, 4
add ebp, edx
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push edi
mov edi, 4
add ecx, edi
pop edi
xchg dword [esp], ecx
pop esp
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebp
mov dword [esp], edi
mov dword [esp], edx
mov dword [esp], edi
mov dword [esp], ecx
mov dword [esp], edx
mov dword [esp], eax
push eax
push ebx
mov ebx, 0x57dbc1a1
mov dword [esp + 4], ebx
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add dword [esp], 0xf17c68a
xor dword [esp], 0x6abda94d
push edx
mov edx, 0x4fdfb62b
shl edx, 6
sub edx, 0x77ee84d5
sub dword [esp + 4], 0x7bf7f067
add dword [esp + 4], edx
add dword [esp + 4], 0x7bf7f067
pop edx
push ebp
mov ebp, 0xd5fcc3b8
xor dword [esp + 4], ebp
pop ebp
add dword [esp], 0xffffffff
xchg dword [esp], edx
xor edx, edi
xor edi, edx
xor edx, edi
not edi
push edx
push edi
mov edx, dword [esp]
add esp, 4
pop edi
sub esp, 4
mov dword [esp], edx
push dword [esp + 4]
pop edx
pop dword [esp]
add dword [esp], 0x68ff3da9
mov dword [esp], ecx
push ebp
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
push ebx
mov ebx, 0x673f688a
shl ebx, 3
push ecx
mov ecx, 0x617582e2
or ecx, 0x5df7e4f7
push edi
mov edi, 0x57faa861
sub ecx, edi
pop edi
inc ecx
xor ecx, 0x1fff3422
add ecx, 0x7bdfb810
add ecx, 0xb91dbfad
or ebx, ecx
pop ecx
xor ebx, 0x7fffc676
add ecx, 0x3cf67135
add ecx, ebx
sub ecx, 0x3cf67135
pop ebx
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
push 0x30dd7436
mov dword [esp], ebx
mov dword [esp], esi
mov esi, 0x73a145e7
mov eax, esi
pop esi
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], edx
mov dword [esp], 0x689fea56
push edi
mov edi, 0x7bbb7246
and dword [esp + 4], edi
pop edi
shl dword [esp], 7
push esi
mov esi, 0x70f4a150
xor dword [esp + 4], esi
pop esi
mov dword [esp], ebp
mov dword [esp], edx
push ecx
mov dword [esp], ebx
mov dword [esp], 0x3ec9b44c
push edi
mov edi, 0x7f5fd3ef
and dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
or dword [esp], 0x77efb28f
shr dword [esp], 8
shr dword [esp], 8
shl dword [esp], 5
xor dword [esp], 0x6ffd6e24
push esi
mov esi, 0xe7fd1f8e
push edx
mov edx, 0x7feebc24
add dword [esp + 8], edx
pop edx
add dword [esp + 4], esi
push edi
mov edi, 0x7feebc24
sub dword [esp + 8], edi
pop edi
mov esi, dword [esp]
add esp, 4
push edx
push ebx
mov ebx, 0x7f7b95fc
push 0x7fee7d07
mov dword [esp], ecx
push 0x6f027e36
pop ecx
inc ecx
neg ecx
sub ecx, 0x1181ebcc
mov edx, ecx
pop ecx
xor edx, ebx
pop ebx
sub dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
neg dword [esp]
push ecx
mov ecx, 0xad068ff0
add dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
push esi
push esp
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop edx
push esi
mov dword [esp], ecx
push eax
mov eax, 0x7a54bdb0
mov ecx, eax
mov eax, dword [esp]
add esp, 4
shl ecx, 2
shr ecx, 4
shr ecx, 8
xor ecx, 0xe952b
sub edx, 0x7bfddc27
push ecx
mov ecx, 0x7fdeda75
add edx, ecx
pop ecx
add edx, 0x6dcae600
add edx, ecx
push ebp
mov ebp, 0x7fdf15f7
not ebp
shr ebp, 7
sub ebp, 0x56a3353c
add ebp, 0xc36dd968
sub edx, ebp
pop ebp
sub edx, 0x7fdeda75
add edx, 0x7bfddc27
push dword [esp]
pop ecx
add esp, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push ecx
push esp
push dword [esp]
mov ecx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
push edx
mov edx, 4
add ecx, 0x7d5c9fc4
add ecx, edx
sub ecx, 0x7d5c9fc4
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
push eax
push edx
mov dword [esp], 0x3d6d64c1
pop eax
add eax, 0xc2929b43
sub ecx, eax
pop eax
push eax
mov dword [esp], ecx
push dword [esp + 4]
mov ecx, dword [esp]
add esp, 4
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ebp
push edi
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], 0x65fee400
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edx
push esi
mov esi, 0x3e3fe68f
push edi
mov edi, 0x7ffdea17
dec edi
sub edi, 0x7fe71211
dec edi
sub edi, 0xa29ae034
xor esi, edi
pop edi
push esi
mov dword [esp], 0
sub dword [esp], esi
pop esi
shl esi, 8
not esi
xchg esi, eax
inc eax
xchg esi, eax
xor esi, 0xbcaa8b7
push 0x423796ea
mov dword [esp], esi
xor dword [esp], 0x7fad8ad5
pop edx
xor edx, 0x7fad8ad5
mov esi, dword [esp]
add esp, 4
and dword [esp + 4], edx
pop edx
sub dword [esp], 0x7ffd08b8
push 0x11493ef6
mov dword [esp], ebx
push edi
mov edi, 0x713ed7d9
mov ebx, 0x713ed7d8
xor ebx, edi
pop edi
add dword [esp + 4], ebx
pop ebx
sub dword [esp], 0xb6b5d0c0
mov dword [esp], esi
push edi
mov dword [esp], 0x4c2da7ba
mov dword [esp], ebx
mov dword [esp], 0x7fb73c94
or dword [esp], 0x3db4236e
shl dword [esp], 6
sub dword [esp], 0x76446c5c
push ecx
mov dword [esp], esi
mov esi, 0x6ca3c272
and esi, 0x776f6091
add esi, 0x7f7fd0a3
not esi
inc esi
sub esi, 0x7f6b84f5
sub esi, 0x9cf16a59
add dword [esp + 4], 0x79955420
sub dword [esp + 4], esi
sub dword [esp + 4], 0x79955420
push dword [esp]
pop esi
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
and dword [esp], 0x7efbdd0a
not dword [esp]
xchg dword [esp], eax
inc eax
xchg dword [esp], eax
push edi
push eax
mov eax, 0x7d7f599f
or eax, 0x7ff9d114
shr eax, 6
shr eax, 2
or eax, 0x6f9fb11d
sub eax, 0x51b925ee
mov edi, eax
pop eax
add dword [esp + 4], 0x7adf8371
sub dword [esp + 4], edi
sub dword [esp + 4], 0x7adf8371
mov edi, dword [esp]
add esp, 4
mov dword [esp], edi
call fcn.005748f0
jnp 0x6273c0
inc dword [esp]
add al, 0x24
not dword [esp]
inc dword [esp]
sub dword [esp], 0x7fff86d0
shl dword [esp], 7
add dword [esp], 0x677a9f46
sub dword [esp], 0xc1ea0714
mov dword [esp], ebx
push dword [esp + 0x10]
mov eax, dword [esp]
push edi
push esp
mov edi, dword [esp]
add esp, 4
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp + 8]
push dword [esp]
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0x5743e1