Function at 0x6a2337
Capabilities:
Execute anti-debugging instructions

Disassembly:
push eax
jmp 0x69e003
call fcn.0069e008
call fcn.006a203d
movzx ebx, word [eax + 0x3c]
jmp 0x6a2a69
mov word [esp + 1], cx
stc
mov ax, 0xe0c9
jmp 0x6a236f
mov word [esp], ax
bsr ebx, ebx
pop ax
pushfd
pop ax
dec ax
jmp 0x6a24bd
pop dword [esp + 2]
xchg dword [esp + 2], ebx
xchg dx, ax
mov bl, byte [esp + 8]
lea esp, [esp + 8]
jmp 0x6a2343
bt ebx, ecx
xchg bx, ax
std
add esp, 0
mov dh, bh
ror eax, 0xd
jmp 0x6a23e9
lea esp, [esp]
xor bh, 0x8f
mov eax, edi
mov byte [esp], dh
lea edx, [edx + ebp]
add esp, 0
jmp 0x6a23aa
mov bx, bp
pop bx
rdtsc
mov ah, dh
bt bx, dx
jmp 0x6a2432
mov ebx, ebp
mov bx, word [esp]
lea esp, [esp]
push edx
mov eax, edx
mov al, bh
jmp 0x6a23d3
bswap edx
mov edx, 0x7868e6e0
not ax
xchg byte [esp], dl
setg ah
mov ax, sp
jmp 0x6a23c0
xchg byte [esp], ah
stc
sub esp, 8
mov ebx, 0x1af79b6
mov dword [esp], ecx
jmp 0x6a2447
mov dh, byte [esp + 1]
not dx
bsr ebx, edi
mov dl, byte [esp + 1]
pop dx
lea ebx, [esp + ebp]
jmp 0x6a241c
push word [esp + 7]
cld
sub al, dh
xchg dword [esp + 4], edx
push dword [esp + 8]
neg al
jmp 0x6a248a
bsr ebx, eax
not ebx
xchg byte [esp], bh
btc ebx, esi
cld
stc
jmp 0x6a2407
rdtsc
sub esp, 4
mov byte [esp + 0x10], al
xchg byte [esp + 0xd], ah
stc
mov ax, 0x98ff
call fcn.006a2474
mov dword [esp + 6], ebx
mov bh, 0xa7
mov byte [esp + 0x10], bl
mov al, 0xc9
lea eax, reloc.KERNEL32.dll_TerminateProcess
not ah
jmp 0x6a2dad
mov dh, ch
xchg edx, eax
pop dx
add esp, 0
lea ebx, reloc.KERNEL32.dll_TerminateProcess
setle bh
jmp 0x6a2465
lea eax, [esi + edi]
call fcn.006a24e8
setle dh
not edx
mov byte [esp + 1], ch
lea eax, [esp + ebp]
bswap edx
jmp 0x6a2b01
xchg edx, ebx
pop eax
xchg dword [esp + 5], eax
add al, dl
clc
mov al, byte [esp + 4]
jmp 0x6a253d
push word [esp + 1]
xchg edx, ebx
mov bh, cl
xchg byte [esp + 1], al
call fcn.006a2629
lea esp, [esp + 4]
clc
pop ax
bsr eax, edi
xchg byte [esp + 2], dh
xchg word [esp + 8], ax
jmp 0x6a2879
mov word [esp], bp
call fcn.006a2843
lea esp, [esp + 0x30]
popfd
jmp 0x6a28e3
cld
mov edx, 0x8055c8dd
setb dl
std
pushal
mov edx, dword [esp + 0x2c]
jmp 0x6a2882
mov dh, 0x30
mov dx, word [esp]
mov dx, word [esp]
shr ebx, 0x19
rol bl, 1
mov ebx, dword [esp + 8]
jmp 0x6a2898
push di
push edx
push word [esp + 4]
pop dword [esp]
mov dword [esp + 0x1c], ecx
pushal
jmp 0x6a28f2
lea esp, [esp + 4]
pushal
mov byte [esp + 1], dl
mov dword [esp + 0x1c], eax
jmp 0x6a28cd
push word [esp + 6]
pop word [esp + 0xa]
push word [esp + 0x11]
lea esp, [esp + 2]
mov dword [esp + 0x38], edx
pushfd
jmp 0x6a2944
mov edx, dword [esp + 3]
std
mov eax, dword [esp + 4]
mov edx, 0x7c97bbee
rcl edx, 9
bsr bx, dx
jmp 0x6a28b8
push dword [esp + 1]
call 0x6a292a
mov word [esp + 2], bx
mov word [esp + 0x19], dx
lea esp, [esp + 2]
jmp 0x6a2984
mov dword [esp + 0x5c], esp
mov dword [esp + 0x58], ebp
call fcn.006a296e
loopne 0x6a2a02
call [edx - 0x42fd6797]
mov word [edi], ds
lea ax, [eax - 0x72]
bswap eax
push edx
not eax
cmp eax, 0x3f6f1ee9
mov dword [esp], ebx
jmp 0x6a2913
popfd
in al, 0x17
cld
sbb al, 0xff
je 0x6a2a2e
add cl, byte [ebp - 0x76fddb9c]
je 0x6a2a36
call fcn.006a29c7
pop eax
jmp 0x6a2ab9
cmc
push esp
hlt
push eax
jmp 0x6a2038
or al, 0xff
dec eax
jno 0x6a2a22
je 0x6a2a51
out dx, al
inc edi
sbb dword [ebx], 0xaf1dee8b
dec cl
push 0x8b1c408b
add byte [ebx - 0x2414f7c0], cl
jmp 0x6a2a2e
sub eax, 0x10000
jmp 0x6a2abc
add ebx, eax
cmp word [ebx], 0x4550
je 0x69dc1e
jne 0x6a2a53
lahf
add al, 0x9a
std
or al, 0xa5
sub esi, dword [ecx + reloc.KERNEL32.dll_TerminateProcess]
sub esi, dword [edx + reloc.KERNEL32.dll_TerminateProcess]
das
mov bh, 0x27
inc edx
mov cl, 0x38
sub ch, byte [eax + 0x7ca8593e]
inc esp
lds edx, [ebp + 0x3c]
iretd
xor ax, ax
cmp word [eax], 0x5a4d
je 0x6a2061
jne 0x6a2a53
or dword [ebx + reloc.KERNEL32.dll_TerminateProcess], edx
xchg ecx, eax
adc al, 0x8a
in eax, dx
sbb al, 0xf5
or dword [ecx + reloc.KERNEL32.dll_TerminateProcess], eax
leave
inc edx
sal byte [edi + 0x789e542], 1
xchg edi, eax
add ebx, ebx
xor dword [eax + reloc.KERNEL32.dll_TerminateProcess], edi
sbb dword [ebp + 0x739f6c05], edx
mov dword [esi], eax
xchg esp, eax
push cs
in al, dx
cmp dword [ebx + reloc.KERNEL32.dll_TerminateProcess], edi
push ds
imul ecx, dword [eax - reloc.KERNEL32.dll_TerminateProcess], 0xf032474
mov esp, 0x246488db
add esp, dword [esi - 0x75]
invalid
mov byte [esp + 2], al
mov byte [esp + 3], dh
bsf ebx, ebx
mov byte [esp + 3], ah
mov ax, si
sets bh
jmp 0x6a2770
mov ax, cx
mov ax, di
xchg dx, ax
pop edx
std
shr bx, cl
jmp 0x6a2579