Function at 0x61491a
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov eax, 0x9312a676
xchg byte [esp + 6], dl
xchg bh, cl
lea edi, [edi*4]
inc ecx
jmp 0x61482e
pop ebp
pop si
add esp, 0x29
not si
push edx
xchg dword [esp + 3], ebp
jmp 0x6147e5
pop di
bswap edx
xchg byte [esp + 0x24], dl
mov edx, 0xb633fae0
not ch
mov esi, 0xcbabbd3e
jmp 0x61488f
mov di, word [esp + 3]
sub esp, 0x1c
mov bl, bh
push esp
mov ebx, dword [esp + 7]
lea ebx, [esi + edi]
jmp 0x61480e
mov word [esp + 8], bx
xchg word [esp + 7], bp
lea edx, [edx + ebp]
sub esp, 0x1c
pop si
lea ebx, [ecx + 0x43]
jmp 0x6147fe
bswap ebx
mov di, word [esp + 6]
mov bx, 0x67
mov bl, 0x78
xchg byte [esp + 5], dl
jmp 0x6148b9
btc ebp, edi
push esp
mov ax, bx
lea esp, [esp + 0x19]
mov ch, byte [esp + 5]
pop ax
jmp 0x61485d
pop ecx
pop edi
mov ecx, dword [esp + 0x16]
mov eax, 0xd034ced6
cpuid
add cx, 0x795e
jmp 0x614877
bsr si, bp
stc
xchg edi, esi
lea esp, [esp + 1]
xchg dx, bx
jmp 0x614903
mov dword [esp + 3], eax
pop dword [esp]
pop dx
bswap eax
mov edx, 0xb3f9adca
jmp 0x6148a3
mov dword [esp + 3], esi
bswap edi
cpuid
pop dword [esp + 0x16]
lea edx, [ecx - 0xa3]
pop word [esp + 0x17]
jmp 0x614846
bswap ebx
mov byte [esp + 0x11], bh
rcl ax, cl
pop dword [esp + 6]
mov bp, dx
jmp 0x614b8d
mov esi, dword [esp]
clc
mov ch, byte [esp]
sub esp, 0x1e
mov bp, word [esp + 0xd]
cpuid
jmp 0x6148ed
rdtsc
pop ecx
pushal
jmp 0x6148d1
xchg edx, ebp
mov bh, byte [esp + 0xd]
mov dword [esp + 0x11], ecx
cmc
mov bl, 0x50
call fcn.006149bb
xchg byte [esp + 0x20], cl
mov bx, di
xchg di, si
lea eax, reloc.WINMM.dll_waveOutUnprepareHeader
pop ebx
jmp 0x614abd
lea edi, [ecx*4]
push dword [esp + 7]
and cl, bh
push dword [esp + 0x21]
pop bp
xchg edx, ecx
jmp 0x614b07
xchg dx, di
xchg edx, ebp
add esp, 0
lea esp, [esp + 4]
mov word [esp + 1], dx
jmp 0x614b54
pop ebp
mov dword [esp + 0x1e], esi
mov dh, byte [esp + 0x22]
rdtsc
popal
xchg word [esp + 2], di
jmp 0x614af0
setnp bh
mov bl, bh
lea ebx, [esi + 0x3d]
mov esi, eax
mov edi, dword [esp]
mov edi, dword [esp]
jmp 0x614d89
clc
bsf cx, si
pop ecx
neg di
xchg edx, eax
neg ah
jmp 0x614b35
xchg dword [esp + 0xd], ebp
mov edi, 0x2ac8c468
and dx, 0xdc2a
rdtsc
xchg byte [esp + 0x14], al
pop dword [esp + 4]
jmp 0x614a7c
setno ch
lea esi, [ebx*4]
btr eax, esp
bswap ebp
sub esp, 4
shr ah, 1
jmp 0x614c0e
lea ecx, [ecx + edx]
mov dx, bx
mov ah, byte [esp]
pushal
setns ch
add esp, 0x17
jmp 0x614baa
xchg edi, ebp
not dx
clc
shr bh, 3
xchg byte [esp + 4], dl
sub esp, 0
jmp 0x614c53
clc
mov word [esp], sp
xchg dh, al
and cl, bh
lea eax, [ebx + ebp]
shl cx, cl
jmp 0x614bd7
mov word [esp + 4], di
rol di, cl
mov si, 0x7a8d
push dword [esp + 8]
pop ax
inc ax
jmp 0x614bf1
xchg byte [esp + 0xf], cl
pop cx
xchg dword [esp + 0x16], edi
sub esp, 0xc
xchg dh, al
mov esi, ecx
jmp 0x614c6c
xchg si, bx
mov bx, word [esp + 0xe]
sub esp, 0xc
btc ebx, ebx
xor ebx, esi
push edx
jmp 0x614c24
push dword [esp + 0xa]
neg bx
xchg word [esp + 5], dx
mov bx, 0x8c85
pop dword [esp + 0xa]
lea esi, [ecx + 0x1b]
jmp 0x614c3b
mov dl, 0x74
mov cl, ch
lea ebx, [esi*4]
inc ecx
bswap edi
jmp 0x614cf7
not ebx
lea edi, [edi + edi]
lea esp, [esp]
add esp, 0
bsr cx, cx
xchg di, ax
jmp 0x614bc5
mov al, 0x26
inc di
cpuid
btc esi, edi
shr eax, 0x1d
lea esp, [esp + 0x13]
call 0x614cde
stc
mov cl, ch
cpuid
inc cl
mov eax, 0x8a6ac5e6
mov word [esp + 0xe], dx
jmp 0x614d6c
bsf bx, ax
lea esp, [esp]
mov word [esp], sp
push edx
xchg dword [esp + 0xc], edx
jmp 0x614d4e
inc al
mov dx, bx
mov ah, byte [esp + 0x11]
inc ax
mov ebp, 0xaf164c36
and cl, bh
jmp 0x614dc2
bswap edx
xchg bp, ax
mov bx, word [esp + 3]
mov word [esp + 0xa], bx
clc
setae ch
jmp 0x614d1f
bsf dx, ax
add al, dh
not ah
xchg byte [esp], cl
add esp, 0
lea eax, [ecx*4]
jmp 0x614c82
mov word [esp + 8], bx
sub esp, 0x1e
popal
mov dx, sp
xchg dword [esp + 6], edx
push dword [esp + 7]
jmp 0x614df2
pop di
bsr bp, bp
rdtsc
lea ecx, [eax*4]
pop dword [esp + 3]
mov byte [esp + 3], ch
jmp 0x614da3
mov bx, dx
lea eax, [ecx*4]
mov si, dx
mov ch, byte [esp + 0xc]
jmp 0x614efe
rcl dx, cl
mov di, 0xcf6f
xchg dword [esp + 5], edi
bswap ebp
shr esi, 0xb
mov dl, dh
jmp 0x614ddb
mov eax, 0x46018ed0
cpuid
xchg ebp, esi
neg ah
setg bh
xchg bp, cx
jmp 0x614e73
cpuid
mov dh, byte [esp + 6]
pop dword [esp + 2]
mov cl, 0xc2
xchg dword [esp + 4], edx
jmp 0x614e25
pop si
mov esi, dword [esp + 2]
mov ebx, esi
mov esi, 0xfa63c706
lea ebx, [eax*4]
push esp
jmp 0x614e41
mov cx, dx
mov si, 0x10f1
neg ebx
sub esp, 0x12
push dword [esp + 5]
inc ecx
jmp 0x614e9c
lea eax, [eax + edi]
popal
mov dh, byte [esp + 4]
xchg ah, bl
mov eax, dword [esp + 0xa]
inc ebx
jmp 0x614e5c
inc cl
mov ax, di
cpuid
pop dword [esp + 4]
rol di, cl
pop dword [esp + 0xc]
jmp 0x614ee6
mov dx, sp
mov dh, byte [esp + 0x19]
mov eax, 0x7fa6a0ec
mov word [esp + 0x18], bx
shr ch, 5
mov ax, 0xe0d9
jmp 0x614e8b
bsf cx, si
xchg byte [esp + 0xc], cl
call fcn.00614f0d
cmp dword [ecx + reloc.WINMM.dll_waveOutUnprepareHeader], esp
pushal
mov dword [reloc.WINMM.dll_waveOutUnprepareHeader], eax
xchg dword [esp + 5], edi
xchg word [esp + 5], di
mov byte [esp + 9], ch
pop eax
inc dl
sete ah
jmp 0x614ece
pop bx
pushal
pop ebp
mov bl, bh
btr esi, esp
mov bp, 0x7d7b
jmp 0x614eb4