Function at 0x6e41d1
Capabilities:
Execute anti-debugging instructions

Disassembly:
neg al
mov ecx, eax
sub esp, 0x12
lea esp, [esp + 2]
push dword [esp + 0x10]
ret 0x14
add byte [eax], al
jmp 0x6e4196
xchg byte [esp + 2], cl
call fcn.006e41e2
in al, dx
cmp eax, 0x3fb30b2e
cdq
ja 0x6e413e
sub al, byte [ebx]
add byte [ebx - 6], 0xd5
lea eax, reloc.MSVCRT.dll___dllonexit
mov ecx, edx
mov ecx, esp
neg ecx
xchg dword [esp], eax
mov ecx, 0x83a0029c
jmp 0x6e40db
stc
clc
call fcn.006e4173
add al, 0xc4
sub esp, 0xb
jno 0x6e4142
xchg byte [esp + 2], cl
jmp 0x6e4234
mov cx, 0x5fb1
mov ch, 0xa7
mov ecx, dword [esp]
mov cl, byte [esp]
xchg dword [esp], ecx
jmp 0x6e418f
mov ecx, 0xbc73cb2b
mov cl, 0xfd
lea esp, [esp + 3]
jmp 0x6e4279
not ch
mov cx, 0x5662
rol cl, 5
js 0x6e4288
not cx
jmp 0x6e4291
lea esp, [esp + 8]
dec al
mov cl, byte [esp]
bswap ecx
not cl
jmp 0x6e4263
not cx
jmp 0x6e4291
inc al
lea ecx, [ebx - 4]
rol cl, cl
jno 0x6e42e3
jo 0x6e42c4
inc ebp
hlt
sub esp, 0x10
lea ecx, [eax + edi]
mov word [esp + 9], ax
jmp 0x6e4311
sub esp, 0x10
lea ecx, [eax + edi]
mov word [esp + 9], ax
lea ecx, [esi*4]
mov cx, sp
lea esp, [esp + 0x10]
not al
jmp 0x6e431d
lea ecx, [esi*4]
mov cx, sp
jmp 0x6e42f8
mov cx, ax
lea ecx, [ebp*4]
setl ch
bswap ecx
inc ecx
jno 0x6e4414
mov cx, bp
mov ecx, edx
jmp 0x6e43df
jp 0x6e436d
lea eax, [ebx*4]
clc
jmp 0x6e43ad
lea eax, [ebx*4]
clc
not ax
bsf cx, sp
bt eax, esi
lea ecx, [eax + ebp]
call fcn.006e43b9
in eax, 0xf6
sal dh, 1
shr bl, 1
add al, 0x14
xchg dword [esi], ebp
cmp dword [ebp + 0xf], eax
wait
lds esi, [edx + ebx*4 + 0x53d1f766]
jmp 0x6e4416
not ax
bsf cx, sp
bt eax, esi
jmp 0x6e437f
mov cx, bp
mov ecx, edx
add bl, al
jmp 0x6e4357
jmp 0x6e43da
mov ecx, dword [esp + 3]
mov dword [esp], ecx
mov ecx, ebp
bt ecx, esp
jmp 0x6e445e
jg 0x6e4474
mov eax, edi
xchg ah, ch
jmp 0x6e4497
mov eax, edi
xchg ah, ch
bsf eax, ecx
lea ecx, [esi*4]
jmp 0x6e44d0
bsf eax, ecx
lea ecx, [esi*4]
jmp 0x6e44d0
cmc
not ax
sub esp, 8
jmp 0x6e44f1
neg dl
mov eax, 0xa1dc3a65
inc ecx
jae 0x6e44ba
jb 0x6e44e4
test byte [eax], al
xchg esi, eax
int1
add byte [edx + 0x66f50c3d], dh
not eax
cmc
not ax
sub esp, 8
jmp 0x6e44f1
lea esp, [esp + 8]
not dl
lea ecx, [eax + ebp]
pushfd
mov eax, dword [esp]
jmp 0x6e55f7
call 0x6e4736
rdtsc
jmp 0x6e4f74
pop edx
inc bx
jo 0x6e4f91
neg ebx
cmp cx, 0x4114
mov si, bx
jmp 0x6e4fd7
neg ebx
jmp 0x6e4f99
cmp cx, 0x4114
mov si, bx
bswap eax
mov ebx, dword [esp]
jmp 0x6e4fba
add esp, 4
jp 0x6e4fde
jnp 0x6e4fde
clc
jmp 0x6e501e
bswap eax
mov ebx, dword [esp]
jmp 0x6e4fba
pop esi
jmp 0x618093
neg ecx
mov ecx, dword [esp]
mov al, ah
stc
ror ah, 0
mov cl, dh
jmp 0x6e52cd
jge 0x6e4fe4
neg ecx
mov ecx, dword [esp]
jmp 0x6e502b
mov al, ah
stc
ror ah, 0
jmp 0x6e4fef
mov edi, dword [eax]
mov dl, byte [esp]
bt edx, ebp
jmp 0x6e5098
btc cx, si
mov ax, 0x54c8
lea ecx, [ecx*4]
pushal
mov cx, word [esp + 0x19]
jmp 0x6e50a4
mov dword [esp + 0x1c], esi
mov dx, bx
not dl
jmp 0x6e5177
lea ecx, [ecx*4]
pushal
mov cx, word [esp + 0x19]
jmp 0x6e50a4
jns 0x6e5059
btc cx, si
mov ax, 0x54c8
jmp 0x6e5082
add esi, 4
mov ah, bl
lea edx, [eax + esi]
mov cx, ax
lea edx, [edi + 0x65]
jmp 0x6e5119
rdtsc
lea ecx, [ecx + 0x9d]
jmp 0x6e50f0
jo 0x6e5168
adc ah, bl
mov ax, 0x9414
jmp 0x6e5074
bt ecx, edx
mov dword [esp], esp
lea ecx, [ebp*4]
jmp 0x6e5128
push ebp
pushfd
mov ax, word [esp + 3]
bswap eax
stc
jmp 0x6e5100
jbe 0x6e50da
bt ecx, edx
mov dword [esp], esp
jmp 0x6e513e
ror edx, 3
jns 0x6e50b4
rdtsc
lea ecx, [ecx + 0x9d]
jmp 0x6e50f0
xchg word [esp], ax
jmp 0x6e514f
lea ecx, [ebp*4]
xchg word [esp], ax
jmp 0x6e514f
push edi
mov cl, 0x6a
lea edx, [esp + edi]
sub esp, 9
js 0x6e5247
mov dl, ch
jmp 0x6e5193
adc ah, bl
mov ax, 0x9414
mov dword [esp + 0x1c], esi
mov dx, bx
not dl
popal
jmp 0x6e504b
xchg dword [esp + 3], edi
setge cl
lea esp, [esp + 1]
jmp 0x6e51dd
mov dl, ch
xchg dword [esp + 3], edi
setge cl
lea esp, [esp + 1]
call fcn.006e517d
jmp 0x6e51d0
pushfd
pushal
mov ch, dl
shl edx, cl
jmp 0x6e50cc
xchg word [esp + 1], cx
xchg cx, ax
not cx
dec ax
jo 0x6e4ee8
jno 0x6e4ee8
lea esp, [esp + 4]
lea esp, [esp]
lea esp, [esp]
jmp 0x6e5688
mov esp, ecx
jmp 0x6e5665
call fcn.006e5691
mov dword [esp + 0x10], esi
call fcn.006e56b1
pushal
call fcn.006e5740
pushfd
sub esp, 0x13
add esp, 0x13
lea esi, [esi - 0x3c]
sub esp, 0x16
jmp 0x6e5726
pushfd
lea esi, [eax + ecx - 0x40]
sub esp, 0x18
jb 0x6e563b
pushfd
add esp, 5
lea esp, [esp + 3]
mov dword [esp + 0x10], esi
call 0x6e5649
cmpsb byte [esi], byte es:[edi]
and eax, 0x982fdcb5
aam 0x47
mov byte [esp], ah
lea esp, [esp + 1]
jmp 0x6e5637
lea esp, [esp + 2]
xchg dword [esp + 0x40], esi
clc
pushal
cmc
push dword [esp + 0x60]
ret 0x64