Function at 0x6682cd
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov ah, al
sub bl, 0xfb
xchg ah, cl
jmp 0x6682fd
shr cl, 6
mov word [esp + 1], sp
not eax
lea esp, [esp + 2]
xchg ebx, eax
not ch
jmp 0x6684f0
cpuid
bswap eax
mov dword [esp + 1], esi
cmc
cmc
mov dh, al
jmp 0x668370
bsr ecx, ecx
mov bl, bh
xchg ah, bh
lea ecx, [edi + ebp]
xchg word [esp + 3], si
xchg al, bh
jmp 0x668325
mov word [esp + 1], si
mov ecx, dword [esp + 5]
push word [esp + 3]
jmp 0x668407
bswap ebx
pop bx
std
xchg dword [esp], eax
setbe ch
mov ebp, edi
jmp 0x66835a
xchg di, ax
sub esp, 2
mov bx, si
btc ebp, edi
mov ax, word [esp + 7]
jmp 0x6683e3
push word [esp + 3]
push word [esp + 5]
not si
xchg dword [esp + 2], eax
lea edi, [eax + ebx]
bsr ax, cx
jmp 0x66837f
mov dx, di
xchg byte [esp + 4], bl
pop edi
mov cl, byte [esp]
mov bp, 0xbc77
neg ebx
jmp 0x668395
push dword [esp + 2]
lea esi, [edi*4]
setne al
jmp 0x6684c4
bswap ebx
mov byte [esp + 8], dh
mov di, word [esp + 8]
lea edx, [ebp*4]
pop word [esp]
sub esp, 0x15
jmp 0x6683cd
mov byte [esp + 4], dh
rdtsc
mov bx, 0x2d7f
rdtsc
xchg byte [esp + 4], al
xchg word [esp + 2], bp
jmp 0x6683ba
btc si, dx
setbe bl
mov ax, cx
mov bl, 0xe
xchg di, si
call fcn.00668484
mov di, 0x1df5
setp ch
lea esi, reloc.KERNEL32.dll_DuplicateHandle
xchg byte [esp + 4], al
jmp 0x6685fc
setnp cl
xchg cl, dl
push word [esp + 1]
push dword [esp + 1]
mov si, 0x5842
lea esi, [eax + edi]
jmp 0x668347
pop edi
add esp, 3
mov si, 0x7c6c
mov dl, dh
mov word [esp], dx
shl eax, cl
jmp 0x6685bd
mov bx, word [esp + 0xc]
bsf cx, bx
xchg byte [esp + 9], cl
xchg esi, edi
pop word [esp]
mov esi, dword [esp + 3]
jmp 0x66850a
mov edi, eax
mov al, 0x80
dec eax
lea ebp, [eax + ebx]
neg bp
mov byte [esp + 7], al
jmp 0x668520
rdtsc
setge cl
mov ch, byte [esp + 1]
cpuid
mov byte [esp + 2], cl
jmp 0x66859c
mov dx, bx
not edx
mov word [esp], bp
mov dh, 0xc8
neg bl
lea esp, [esp]
jmp 0x66855e
push dword [esp + 1]
sub bp, ax
pop word [esp]
pop word [esp + 1]
jmp 0x6685d4
mov esi, dword [esp + 2]
mov eax, dword [esp]
add ecx, 0x90c892a3
btc ecx, ecx
mov dh, 0x2c
bsr ebx, edi
jmp 0x668586
xchg bl, ah
mov edi, 0x798bf7f3
xchg bl, ch
mov dh, byte [esp]
setl ch
lea edi, reloc.KERNEL32.dll_DuplicateHandle
jmp 0x668574
std
mov ebp, 0xd982c466
xchg bx, si
rol ebp, 9
bsf eax, esi
mov byte [esp + 1], bl
jmp 0x66863f
btr ax, dx
mov ch, 0x80
mov ebx, dword [esp]
pop word [esp + 3]
not ah
mov word [esp + 2], sp
jmp 0x66854d
setno bh
call fcn.00668666
xchg cx, si
xchg byte [esp + 1], ah
pop word [esp + 2]
mov edx, 0x29c849e4
xchg word [esp + 2], di
xchg ebp, eax
jmp 0x668650
lea esp, [esp + 1]
cpuid
shr edi, cl
mov ah, byte [esp]
cmc
xchg di, si
jmp 0x668616
pushfd
xchg byte [esp + 2], dh
lea ebx, [ebx - 0xde]
shr edi, 8
jmp 0x6686b5
neg ebx
call fcn.00668678
xchg dl, dh
setle cl
xchg ebp, eax
xchg word [esp + 1], di
xchg di, si
mov ax, 0xe5e6
jmp 0x6686c6
mov ebx, dword [esp + 7]
pop ecx
mov al, 0xa8
mov al, byte [esp + 2]
xchg al, ch
pop si
jmp 0x66868e
xchg byte [esp], ch
mov ebp, dword [esp]
setge bh
mov bp, word [esp]
xchg word [esp], si
mov byte [esp + 5], cl
jmp 0x668dd7
cpuid
cmp al, 0xaa
mov edx, dword [esp]
lea esp, [esp]
call fcn.006686fc
cwde
push ss
test bl, ah
push ds
invalid
lea ebx, [ecx + esi]
mov esi, dword [esp]
mov esi, esp
bts cx, sp
cld
mov dx, si
jmp 0x668712
std
mov edi, 0x2acb39f8
not bp
add esp, 0
mov ax, cx
bts si, cx
jmp 0x66872b
xchg bl, ah
bt bp, di
xchg esi, edx
mov di, bx
std
setno bh
jmp 0x66876a
xchg dl, ah
mov di, word [esp]
mov cx, word [esp]
xchg ecx, ebp
mov edi, 0x8c1abad7
mov edi, 0x253c3456
jmp 0x668927
xchg cx, dx
add esp, 1
sub esp, 0
mov edi, edx
bts bx, si
neg esi
jmp 0x668a62
push word [esp + 0x19]
add esp, 0x1e
mov byte [esp], dh
lea ecx, [ebp*4]
mov word [esp], cx
rdtsc
jmp 0x668ac9
mov byte [esp], bh
cmc
lea esp, [esp + 4]
mov esi, dword [esp + 4]
sub esp, 0x19
bsf bp, bp
jmp 0x668b47
xchg ah, al
xchg byte [esp + 2], ch
xchg byte [esp + 5], bl
xchg dword [esp], edi
push word [esp + 2]
lea ebx, reloc.KERNEL32.dll_DuplicateHandle
jmp 0x668d73