Function at 0x6e0497
Capabilities:
Execute anti-debugging instructions

Disassembly:
lea esi, [edi + ebp]
bsf esi, esi
rdtsc
clc
mov word [esp], bp
jmp 0x6e04b4
mov ebx, 0x831f1959
jmp 0x6e0481
mov ch, 0x77
lea edx, [edi + edi]
inc edi
bsf ecx, edx
xchg bx, cx
lea esp, [esp + 3]
jmp 0x6e0522
lea edx, [eax*4]
bsf dx, si
mov al, byte [esp + 3]
btr edx, ebx
mov byte [esp + 2], ch
push dword [esp + 2]
jmp 0x6e049e
push word [esp + 3]
push word [esp + 4]
lea esi, [edx + esi]
lea ecx, [esi*4]
sub esp, 0x1c
pop dword [esp + 0x15]
jmp 0x6e0536
mov byte [esp + 1], dh
neg bp
bswap ecx
mov dx, ax
xchg di, bx
setle ch
jmp 0x6e04f7
xchg si, bp
lea edx, reloc.mscoree.dll__CorExeMain
ror cx, cl
cld
mov ecx, eax
mov bp, 0xc5d5
jmp 0x6e058c
mov byte [esp + 6], bl
not cl
rcl eax, cl
pop dx
and si, sp
neg si
jmp 0x6e05a7
sub esp, 7
xchg ah, bl
pop dword [esp + 4]
lea esi, [ebx*4]
lea ebp, [ebp*4]
bswap edx
jmp 0x6e0576
mov bx, 0xd8d9
rcl bh, cl
xchg byte [esp + 0x19], dl
cmc
mov ebp, 0x8c3db268
mov si, dx
jmp 0x6e0952
mov cl, byte [esp + 4]
xchg word [esp + 2], di
xchg byte [esp + 2], ah
pop edx
rdtsc
jmp 0x6e06c5
lea eax, [eax*4]
mov ecx, 0x1eea534a
mov cl, byte [esp]
lea edx, [ecx*4]
xchg edi, eax
push edx
jmp 0x6e05db
xchg byte [esp], ch
neg ah
xchg si, ax
mov ecx, edi
lea edi, [ebx + ebp]
mov ch, bh
jmp 0x6e05f1
lea edi, [edi - 0x6b]
mov dx, word [esp]
mov dh, cl
lea esp, [esp]
lea esp, [esp]
mov byte [esp], dh
jmp 0x6e0670
xchg ch, bl
stc
mov byte [esp], bh
lea edi, [eax + edi]
lea ebx, reloc.mscoree.dll__CorExeMain
bswap edi
jmp 0x6e062f
mov cx, ax
mov ax, 0x356
lea ebp, reloc.mscoree.dll__CorExeMain
jmp 0x6e067e
rdtsc
std
cpuid
xchg al, cl
mov al, bl
add cl, 0x52
jmp 0x6e065a
lea ebp, [esp + 0xce]
mov bx, 0xec8e
lea eax, [edx + edx]
jmp 0x6e06ac
mov al, cl
shr edi, cl
mov byte [esp], bh
mov esi, 0x894ef3e2
adc di, 0xda15
bsr dx, bp
jmp 0x6e0647
mov di, 0xa097
xchg ah, bl
lea esp, [esp]
mov cl, 0xe1
xchg ecx, ebp
lea ebx, reloc.mscoree.dll__CorExeMain
jmp 0x6e06d8
dec si
sub bx, 0xe97c
mov al, 0x4c
shr eax, 0x16
not bl
rcl al, 6
jmp 0x6e0695
mov eax, 0x587c45db
bts ax, ax
bsr ax, bp
pushfd
pop dx
xchg esi, ebx
jmp 0x6e0726
xchg ecx, eax
popal
mov dx, word [esp]
xchg cl, ah
std
cpuid
jmp 0x6e061e
bswap ecx
shr dl, cl
mov edx, edi
mov bx, 0xff9d
xchg dx, cx
jmp 0x6e074b
not ah
cld
cpuid
cpuid
xchg dl, ah
xchg byte [esp + 1], al
jmp 0x6e0710
push word [esp]
xchg bl, al
mov ax, 0xb902
dec bx
mov bl, 0xde
jmp 0x6e0761
mov di, 0x9539
mov cx, 0xac3d
lea ebx, [edi - 0x57]
lea esi, [ecx + ebx]
xchg dx, di
lea ebx, [edi + ebp]
jmp 0x6e0735
lea ebp, [ecx + ebx]
xchg ebp, eax
std
mov dh, bh
not ax
xchg ah, bh
jmp 0x6e07a9
mov esi, edx
rdtsc
mov ebp, esp
mov bl, 0x36
add esp, 5
mov cx, 0xaa0c
jmp 0x6e06ff
mov dx, 0xf10a
shr ecx, 0xd
bts ebx, edi
mov ebx, dword [esp + 1]
mov bl, dh
mov cx, si
jmp 0x6e081d
lea ecx, [eax + esi]
cld
mov dword [esp], ecx
push word [esp + 1]
mov ebx, dword [esp + 6]
stc
jmp 0x6e078d
push word [esp + 3]
cpuid
mov bp, word [esp + 0x1a]
jmp 0x6e07fe
mov ch, ah
mov dword [esp + 1], edi
lea edx, [ecx + edx]
xchg word [esp + 2], ax
std
sub esp, 0x19
jmp 0x6e07bc
neg eax
call fcn.006e087a
pop edi
rol byte [eax + 0x27], cl
sal byte [ecx], cl
ret
lea ebx, [esi*4]
or ax, 0xc464
mov ecx, dword [esp + 0xf]
cmp bl, 0x53
push edi
pop dword [esp + 5]
jmp 0x6e07e8
xchg al, ah
push dword [esp + 5]
xchg bx, si
mov ecx, 0xf4a1c18b
cpuid
std
jmp 0x6e07d4
push dword [esp + 0x12]
mov eax, dword [esp + 0xf]
xchg byte [esp + 0x12], bl
lea edx, [edx*4]
rdtsc
bt bx, cx
jmp 0x6e0779