Function at 0x6f67cb
Capabilities:
Execute anti-debugging instructions

Disassembly:
pop dword [esp + 0xc]
mov byte [esp + 0xf], ch
jmp 0x6f6825
mov dword [esp], eax
push word [esp + 3]
mov word [esp + 3], di
push esp
lea esp, [esp + 0xa]
pushal
jmp 0x6f692b
mov byte [esp + 5], bh
push dword [esp + 5]
lea esp, [esp + 0x17]
lea esp, [esp + 3]
push word [esp + 1]
jmp 0x6f6803
mov ebp, dword [esp]
lea edi, [eax + 0x91]
xchg si, ax
mov ax, word [esp]
mov bx, 0x10e3
xchg bx, ax
jmp 0x6f68ac
lea eax, [esi - 0x35]
mov cx, sp
xchg ch, dl
mov dx, 0xaced
mov al, 0x56
mov bx, sp
jmp 0x6f685d
mov bp, 0xbf69
mov edx, dword [esp]
mov bl, 0x18
cpuid
xchg ecx, edi
cpuid
jmp 0x6f68ef
mov bp, di
mov edx, dword [esp]
mov ax, word [esp]
mov ebx, ebp
mov bp, word [esp]
mov si, di
jmp 0x6f6890
lea esp, [esp + 0x1c]
push 0
pushal
lea ebx, [edx + ebp]
mov ebp, eax
jmp 0x6f687d
pushal
mov dx, bx
mov dword [esp + 0x17], eax
lea eax, [eax*4]
mov cx, word [esp + 0xe]
jmp 0x6f6903
mov edx, 0x5283893e
bswap ebp
rdtsc
mov edi, dword [esp]
rdtsc
mov ax, 0x7c1b
jmp 0x6f68d5
push word [esp + 0x1b]
not esi
pop di
lea esp, [esp + 0xb]
xchg byte [esp + 4], cl
push dword [esp + 2]
jmp 0x6f6996
push word [esp + 7]
push word [esp + 0x11]
pop word [esp + 0x12]
pop word [esp + 0xe]
pop word [esp + 0x13]
lea esp, [esp + 3]
jmp 0x6f68c7
push dword [esp + 0x17]
mov bp, word [esp + 0x13]
mov al, ah
lea ebp, reloc.RASAPI32.dll_RasDialA
lea edi, [ebx*4]
setne bh
jmp 0x6f69cb
setae ah
lea edx, [edx + ebp]
cpuid
setno bh
mov word [esp + 0xc], sp
xchg word [esp + 0x11], di
jmp 0x6f694d
pop dword [esp + 3]
push dword [esp + 0xb]
xchg dword [esp + 4], edi
mov bx, dx
mov di, word [esp + 4]
cpuid
jmp 0x6f6977
push dword [esp + 9]
xchg word [esp + 0x1a], ax
xchg ebp, eax
mov ax, di
lea esp, [esp + 0xf]
jmp 0x6f69e0
mov dl, dh
not dh
push word [esp + 0x13]
push word [esp + 9]
mov cl, ch
mov di, bx
jmp 0x6f69ae
lea esi, reloc.RASAPI32.dll_RasDialA
mov bl, bh
push dword [esp + 6]
mov cl, 0x3a
lea esp, [esp + 0xd]
pop ebx
jmp 0x6f6bb7
not dx
mov si, word [esp + 5]
xchg word [esp + 0xf], cx
call 0x6f6a8f
inc edi
je 0x6f6b3e
outsb dx, byte [esi]
jbe 0x6f6b65
jb 0x6f6b6d
outsb dx, byte [esi]
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x6f6b5a
popal
jb 0x6f6b70
popal
bound ebp, qword [ebp + 0x41]
add byte [edi + ebp*2 + 0x63], cl
popal
insb byte es:[edi], dx
push edx
inc ecx
insb byte es:[edi], dx
insb byte es:[edi], dx
outsd dx, dword [esi]
arpl word [eax], ax
fadd dword [esi - 0x75efdbbc]
les ecx, [ebx - 0x765df010]
xor al, 0x24
xchg byte [esp + 0x10], al
mov al, ah
mov esi, eax
cpuid
mov dword [esp], esi
cpuid
jmp 0x6f6ae3
imul ebp, dword [esi + 0x67], reloc.RASAPI32.dll_RasDialA
mov edi, 0x77b94a2f
adc al, byte [edi + 0x65]
je 0x6f6b94
outsb dx, byte [esi]
jbe 0x6f6bbb
jb 0x6f6bc3
outsb dx, byte [esi]
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x6f6bad
je 0x6f6bce
imul ebp, dword [esi + 0x67], reloc.RASAPI32.dll_RasDialA
inc edi
je 0x6f6bac
je 0x6f6bac
outsb dx, byte [esi]
jbe 0x6f6bd3
jb 0x6f6bdb
outsb dx, byte [esi]
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x6f6bc5
je 0x6f6be6
imul ebp, dword [esi + 0x67], reloc.RASAPI32.dll_RasDialA
jb 0x6f6be2
inc ebp
outsb dx, byte [esi]
jbe 0x6f6beb
jb 0x6f6bf3
outsb dx, byte [esi]
insd dword es:[edi], dx
outsb dx, byte gs:[esi]
je 0x6f6bdd
je 0x6f6bfe
imul ebp, dword [esi + 0x67], reloc.RASAPI32.dll_RasDialA
outsb dx, byte [esi]
push eax
popal
add byte gs:[bp - 0x71], ah
inc esp
pop word [esp + 0x11]
and al, 0x11
push esp
lea edx, [ebp - 0x27]
lea ecx, [esi*4]
mov edx, 0xd95da17c
mov eax, dword [reloc.RASAPI32.dll_RasDialA]
invalid
pop ebp
fldl2t
jmp 0x6f6b1b
invalid
pushal
mov bp, bx
xchg ah, bl
xchg dx, ax
pop dword [esp + 0xf]
not bh
psadbw mm2, mm7
xlatb
jmp 0x6f6b9a
inc ebx
jb 0x6f6c3a
je 0x6f6c3c
arpl word [ecx + 0x6c], sp
push ebx
arpl word gs:[ecx + ebp*2 + 0x6f], si
outsd dx, dword [esi]
outsb dx, byte [esi]
add byte [esp + ebp*2 + 0x73], dl
push ebx
je 0x6f6c3b
popal
insb byte es:[edi], dx
jne 0x6f6c4e
add byte [eax + 0x61686e55], ah
outsb dx, byte [esi]
insb byte es:[edi], dx
push ebp
outsb dx, byte [esi]
push 0x6c646e61
inc ebp
inc ebp
js 0x6f6c5a
jo 0x6f6c6e
imul ebp, dword [edi + 0x6e], reloc.RASAPI32.dll_RasDialA
jb 0x6f6c04
imul ebp, dword [esp + esi*2 + 0x65], reloc.RASAPI32.dll_RasDialA
imul esi, dword [ebp + 0x50], 0x61766972
push edi
jb 0x6f6c70
je 0x6f6c6e
push eax
jb 0x6f6c75
jbe 0x6f6c6f
je 0x6f6c75
push eax
jb 0x6f6c82
imul bp, word [ebp + 0x53], 0x7274
imul ebp, dword [esi + 0x67], 0x65470041
je 0x6f6c69
outsd dx, dword [esi]
arpl word [ebp + 0x73], si
add byte [ecx + 0x6e], cl
imul esi, dword [ecx + ebp*2 + 0x61], 0x657a696c
inc ebx
jb 0x6f6c9e
je 0x6f6ca0
arpl word [ecx + 0x6c], sp
push ebx
arpl word gs:[ecx + ebp*2 + 0x6f], si
arpl word [ecx + ebp*2 + 0x6f], si
je 0x6f6ca8
outsd dx, dword [esi]
outsb dx, byte [esi]
add byte [ebx + esi*2 + 0x74], ch
jb 0x6f6caa
insd dword es:[edi], dx
jo 0x6f6cb3
inc ecx
add bl, ah
cdq
sbb al, byte [0x75101f4e]
in eax, dx
mov dl, 0x76
mov dword [ecx], ebp
dec ebp
std
mov ah, 0x2b
enter 0xfffffffffffff2ef, 0x4b
jle 0x6f6c9a
cwde
xlatb
je 0x6f6c3d
cmp dword [ecx + 3], 0x77
out 0x29, eax
xchg esi, eax
add esi, dword [edi - 0x19]
sub dword [esi + reloc.RASAPI32.dll_RasDialA], edx
and ebx, eax
sal dword [ecx + reloc.RASAPI32.dll_RasDialA], 0
add byte [eax], al
pop eax
mov dh, 0xa
pcmpgtw mm1, mm4
xor dl, byte [edx + 0x432fd132]
test al, 0x8e
lds edx, [ecx - 0x2c30cdb7]
sbb eax, 0x6ed14ae6
jo 0x6f6cc6
push esi
std
bound esp, qword [ebx]
fadd st(1)
mov cl, 0xff
xor byte [ebx], bh
add byte [eax], al
add byte [eax - 0x4a], bl
or cl, byte [edi]
int3
int3
mov es, ebp
xchg ecx, eax
dec ecx
xor cl, bh
rcr dword [reloc.RASAPI32.dll_RasDialA], cl
enter 0x4640, 0xffffffffffffffdb
pop ecx
cli
fistp dword [ecx - 6]
or ebp, dword [eax + ecx + reloc.RASAPI32.dll_RasDialA]
lodsb al, byte [esi]
or dh, cl
into
mov dword [esi + 0x67], edi
insd dword es:[edi], dx
cmp dword [ecx + 0x27], ebx
imul esi, dword [edx - 0x3c], reloc.RASAPI32.dll_RasDialA
pop eax
inc esi
stosb byte es:[edi], al
lds eax, [ebp + 0x58]
les edx, [esi - 0x3a55b9a8]
inc ebp
pop eax
rcr dword [ebx - 0x12], 1
pop ebx
out dx, al
jge 0x6f6cf7
inc edi
push edx
invalid
nop
les eax, [edi - 0x57bba35]
aas
scasd eax, dword es:[edi]
je 0x6f6c7a
outsb dx, byte [esi]
inc ecx
jp 0x6f6c8b
dec ebp
cmp al, 0xca
enter 0x520, 0x4e
and dword [edi + reloc.RASAPI32.dll_RasDialA], edi
imul ebp, dword [ecx], 0x6a
dec esp
mov gs, word [ebx]
push edi
cmp al, 0x19
dec esp
xchg esp, ebp
mov edx, 0xa58c96d7
jns 0x6f6d50
invalid
sal esi, cl
rol dword [ecx + reloc.RASAPI32.dll_RasDialA], 6
test cl, 0x81
cmpsb byte [esi], byte es:[edi]
push esi
jnp 0x6f6d5f
push es
and al, 0xf
lodsd eax, dword [esi]
fnsave dword [edx]
xchg esp, eax
loop 0x6f6d39
shr dword [edi], 1
jbe 0x6f6cbe
mov es, ebp
ror dword [ecx + 0x32], 1
iretd
ficomp word [ecx - 6]
dec ebx
lodsb al, byte [esi]
or dh, cl
les edi, [ecx + 0x67]
insd dword es:[edi], dx
jns 0x6f6d80
daa
imul ecx, eax, 0xffffffd3
xchg esi, eax
pop eax
xchg byte [edx - 0x302dba3b], ch
pop ebx
out dx, al
mov ebp, 0x7e524740
xor ebx, esp
cmp dword [esi - 0x70], 0x3d3a87c4
test dl, bh
jle 0x6f6d6c
jecxz 0x6f6cbe
jle 0x6f6ccf
nop
les eax, [edi - 0x57bc2c6]
jg 0x6f6cf6
je 0x6f6cfa
mov ebp, ebx
inc ecx
jp 0x6f6dcb
dec ebp
cmp al, 0xca
jne 0x6f6d73
retf 0x2075
add eax, 0x5bbee14e
in eax, dx
invalid
mov gs, word [ebx]
inc edx
aaa
sbb dword [edi + eax*2 - 0x14], ecx
mov edx, 0xa59095d7
jns 0x6f6d10
vpsubusb xmm6, xmm2, xmmword [edi]
aaa
jne 0x6f6d72
outsd dx, dword [esi]
sal esi, cl
sar edx, 0xd6
push esi
jnp 0x6f6d1f
push es
and al, 0xf
out dx, eax
les esi, [edx]
xchg esp, eax
mov byte [0xd22fd132], al
pxor mm0, mm4
xor dl, byte [edx - 0x2dd02ece]
loopne 0x6f6d1a
lds edx, [ecx]
dec edx
xor cl, bh
loopne 0x6f6dbb
out 0x4a, al
push ecx
imul ecx, eax, 0x40
lcall 0x8ad, 0x8bfa59e5
into
int3
jecxz 0x6f6d3e
xchg ecx, eax
les eax, [edi - 0x57bd492]
mov edi, 0xb2b174ad
fiadd dword [ecx + 0x7a]
cmp eax, 0xe9ca3c4d
pop ds
add eax, 0x5bbea14e
in eax, dx
add al, 0x1f
imul ebp, dword [ecx], reloc.RASAPI32.dll_RasDialA
dec edi
mov gs, word [ebx]
stosd dword es:[edi], eax
inc edi
sbb dword [edi + eax - 0x17], ecx
mov edx, 0xa593bbd7
jns 0x6f6dd0
sub eax, dword [edx + edi*8 - reloc.RASAPI32.dll_RasDialA]
mov dl, 0xda
inc ecx
jp 0x6f6e0b
dec ebp
cmp al, 0xca
jmp 0xa1bd72f5
retf 0x1fe9
mov ecx, 0x75333229
std
das
sal dh, 1
rol dword [ebx - reloc.RASAPI32.dll_RasDialA], 9
and al, 0xf
pop es
enter 0xffffffffffff9432, 0x62
xor edx, ecx
das
jmp 0x6f6dc2
mov es, ebp
push ecx
dec esp
xor cl, bh
movsb byte es:[edi], byte [esi]
sbb ah, dh
dec edx
adc dword [ebx - 0x38], ebp
inc eax
pushfd
out 0x59, al
cli
retf