Function at 0x86026d
Capabilities:
Check for peb beingdebugged flag
Parse pe header

Disassembly:
inc esp
pop es
les edi, [esi]
outsd dx, dword [esi]
insd dword es:[edi], dx
aas
cmp al, 0x46
xchg edi, eax
invalid
inc dword [eax + 0x5e5013]
pushfd
push esp
call 0x85a8cd
mov edx, 0xb444d964
xchg ecx, edx
mov ecx, dword [esp + 0x13]
xchg esi, ecx
add esp, 0xa
jmp 0x85ac3f
pop ebp
xchg ecx, ebx
mov ebx, 0x86a11e5a
lea esp, [esp + 7]
mov word [esp], bx
jmp 0x85ad4c
xchg byte [esp + 2], dl
mov cx, 0x1937
push dword [esp + 0xb]
xchg word [esp + 9], cx
mov al, ah
mov cl, 0x4a
jmp 0x85ac28
push eax
jmp 0x85b0c9
lea ecx, reloc.KERNEL32.dll_GetFileAttributesA
not ax
xchg edx, ecx
mov edx, esi
neg ah
mov cx, word [esp]
jmp 0x85ad27
mov word [esp], bx
pop ebp
pop ecx
mov edx, ecx
xchg ch, dl
lea edx, [esi*4]
jmp 0x85aca9
push edx
neg eax
xchg di, si
mov dl, 0x54
lea edi, [ebx*4]
shr ch, 5
jmp 0x85acc7
mov bp, 0x7891
pushal
inc ax
xchg bh, cl
push word [esp + 0x17]
jmp 0x85ae84
xchg bp, ax
mov bp, 0xc3ed
xchg bh, cl
mov dl, byte [esp]
mov bp, 0x9f29
btc edx, edi
jmp 0x85acf8
lea ecx, [esp + ebx]
xchg dx, si
mov dl, byte [esp]
clc
bswap edx
bsf ax, ax
jmp 0x85ad0f
xchg bh, cl
xchg dword [esp], ebx
cpuid
clc
pop di
lea edx, [esp + esi]
jmp 0x85ace4
mov eax, esi
mov cl, ch
pop ebx
not bx
mov si, word [esp + 2]
lea esp, [esp + 7]
call fcn.0085ad5b
jns 0x85adea
mov ebx, 0xc4830d92
add eax, 0x95048d
add byte [eax], al
add byte [ebp + 0x3607d190], cl
mov edi, 0x124648d
add esp, 5
lea eax, [edx*4]
lea edx, reloc.KERNEL32.dll_GetFileAttributesA
lea esp, [esp + 1]
bsr dx, bp
cld
jmp 0x85ad7a
rdtsc
jmp 0x85ae30
xor edx, esi
setns ch
mov dh, byte [esp]
add esp, 1
add esp, 1
mov bp, 0xb16f
jmp 0x85ae5d
neg dh
mov al, ah
xchg dword [esp + 0xc], edi
pop dword [esp + 6]
mov ebp, 0x9ed8ee56
lea esp, [esp + 0x12]
jmp 0x85ae09
push esp
xor edx, esi
mov cl, ch
xchg dh, al
push word [esp]
mov dx, 0xb6e5
jmp 0x85ae6a
mov byte [esp], ah
clc
cpuid
stc
lea ebp, [esp + eax]
stc
jmp 0x85ae47
lea eax, [edx + ebx]
mov ah, byte [esp + 3]
pop ax
shl bx, cl
mov dl, 0xec
setle ah
jmp 0x85afa8
xchg byte [esp + 0x11], al
lea eax, reloc.KERNEL32.dll_GetFileAttributesA
not ah
xchg word [esp + 0xd], bx
push word [esp + 0x1f]
pop word [esp + 1]
jmp 0x85ad95
bsf cx, si
mov esi, dword [esp + 1]
mov al, ah
mov ax, di
mov si, word [esp + 4]
call fcn.0085aefd
lea edi, [esp + ebx]
push esp
pop dx
xchg ah, bl
lea esp, [esp + 9]
mov dl, dh
jmp 0x85ba97
call 0x85b0ce
jmp 0x85b9db
pop eax
sub eax, 0x85b0ce
jmp 0x85ba5d
xor ebp, esi
call fcn.0085b402
popal
jmp 0x71248f
cmp dword [eax + reloc.KERNEL32.dll_GetFileAttributesA], 0
je 0x85abeb
lea esp, [esp + 8]
jmp 0x85ba46
xchg ah, bl
xchg bh, cl
mov dx, word [esp]
lea ebx, [eax*4]
mov ebx, 0xa3262fbe
cld
jmp 0x85ba3f
call 0x85f015
jmp 0x86031b
movzx ebx, word [eax + 0x3c]
jmp 0x8602ff
lea esp, [esp + 0xb]
mov word [esp], bx
push dword [esp + 2]
jmp 0x860858
or ebx, dword [edi - 0x17]
and edi, edi
invalid
je 0x85aca2
jne 0x8602ee
xchg ebp, eax
sbb dword [ecx - 0xa08e418], ecx
jp 0x8602c9
invalid
je 0x85f07e
sub eax, 0x10000
jmp 0x86031f
add ebx, eax
cmp word [ebx], 0x4550
jmp 0x8602d0
pop eax
xor ax, ax
cmp word [eax], 0x5a4d
jmp 0x8602e8
mov eax, dword [eax + 8]
push eax
jmp 0x85f010
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax]
jmp 0x860335
lea esp, [esp + 2]
mov dword [esp + 0x78], edi
lea esp, [esp + 0x78]
mov eax, dword fs:[0x30]
jmp 0x86039e
pushal
mov byte [esp + 0xb], bh
pop word [esp + 0x15]
mov word [esp + 0x10], bx
mov word [esp + 0x10], bx
push dword [esp + 0xc]
jmp 0x86067b