Function at 0x611c32
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov cl, 0x22
mov ebx, dword [esp + 0x24]
pop word [esp + 0x15]
not cx
bswap edx
push edx
jmp 0x611bfd
cpuid
pop dword [esp + 0xe]
add esp, 0x21
mov bl, bh
xchg ch, dl
lea eax, [edi*4]
jmp 0x611e5e
lea ebx, [ecx*4]
sub esp, 0x1c
mov dl, 4
call 0x611c32
loope 0x611c52
mov dword [esp + 9], ecx
rdtsc
xchg bp, di
jmp 0x611c93
xchg word [esp + 3], si
bsr bp, bp
popal
bswap edi
mov edi, 0x2d27de06
mov bl, bh
jmp 0x611c1f
btr esi, edx
mov word [esp + 8], dx
cpuid
xchg esi, eax
xchg bp, di
jmp 0x611d5d
bswap ebp
mov ebx, esi
pop word [esp + 0xb]
mov cx, 0x229
xchg word [esp + 0xd], cx
neg dh
jmp 0x611c5e
lea eax, reloc.RASAPI32.dll_RasHangUpA
rcr ch, 5
mov edx, dword [esp + 0xb]
setp ch
add esp, 0xd
lea esi, [ebp*4]
jmp 0x611c76
inc cl
inc bp
lea esi, [eax*4]
mov dx, bx
xchg byte [esp + 0x1d], bl
shl si, cl
jmp 0x611c49
mov dword [esp + 1], ecx
bsr di, cx
lea esi, [edx + edx]
mov dword [esp + 8], esi
jmp 0x611d3e
pop word [esp + 0xa]
bswap edx
mov dword [esp + 3], eax
mov cl, ch
rdtsc
mov al, ah
jmp 0x611ccf
lea ebx, [ebp - 0xf]
bswap ebx
setbe dh
add esp, 0
mov word [esp], di
btc eax, ebx
jmp 0x611ce5
sub bl, ah
setns ah
mov edx, ecx
push dword [esp + 2]
setae dh
mov bh, byte [esp + 7]
jmp 0x611d8f
xchg byte [esp], al
clc
bsf cx, ax
xchg dword [esp], edi
push word [esp + 5]
jmp 0x611d71
xchg dword [esp + 5], edi
pop word [esp]
lea ebp, [esp + edx]
xchg ah, bl
xchg bp, cx
pop dword [esp]
jmp 0x611d13
mov dword [esp + 0xc], ebp
cpuid
xchg dword [esp + 0xa], ebx
setg ch
pop eax
xchg dword [esp + 4], edi
jmp 0x611cff
push word [esp + 1]
mov dl, dh
mov edi, 0xd9bf46fc
add esp, 7
mov bl, bh
lea eax, [ebp - 0xf7]
jmp 0x611de5
bswap esi
neg ch
not dh
mov cx, dx
not esi
pop dword [esp]
jmp 0x611d27
lea ecx, [ebx*4]
pushal
pop ebp
not dx
push esp
xchg si, ax
jmp 0x611cb5
lea ebp, [esi - 0x75]
bsf bp, si
bsf dx, si
xchg bh, cl
shr ebp, 1
cld
jmp 0x611e36
neg bh
pop edi
bswap ebp
xchg ah, bl
neg ch
lea eax, [ebx + edi]
jmp 0x611dc0
add eax, ebp
cpuid
shl cx, cl
mov ebp, 0x2c25145c
call 0x611e0b
mov dword [esp + 1], ebp
not di
lea eax, [ebp + 0x8f]
bsr bp, cx
jmp 0x611f11
setge bh
lea esp, [esp + 1]
push word [esp + 1]
pop ebp
add esp, 1
pop word [esp]
jmp 0x611dac
popal
and cl, bh
stc
bswap edx
xchg ebp, eax
mov esi, dword [esp + 1]
jmp 0x611edf
btr edx, esp
mov ecx, dword [esp + 5]
stc
push dword [esp + 4]
pushal
mov bl, pe_nt_image_headers32
jmp 0x611e77
mov cl, ch
lea eax, [ebx + edi]
mov dword [esp + 0xf], esi
xchg di, si
inc di
mov al, 0xb6
jmp 0x611ef3
xchg bh, cl
sub esp, 0xa
pop dword [esp + 4]
sub esp, 0x1c
rol bx, cl
rdtsc
jmp 0x611ea0
setns dh
btc edx, ebx
push edx
xchg dword [esp + 8], edx
push dword [esp + 0xe]
sub esp, 8
jmp 0x611eb8
xchg dword [esp + 0x20], ecx
xchg dword [esp + 4], ecx
pop word [esp + 0x2f]
mov bl, bh
rdtsc
add ebx, ebp
call fcn.00611fbb
insb byte es:[edi], dx
jg 0x611f54
int1
not esi
not esi
mov eax, 0x216352c2
mov edx, 0xd0936fd0
mov ch, byte [esp + 5]
mov al, 0xae
lea edx, [ebx*4]
jmp 0x611e8f
pushal
bswap esi
xchg dword [esp + 0x1b], ebp
sub esp, 4
lea esp, [esp + 0x41]
setg dh
jmp 0x611f93
mov bl, 0x67
pop dword [esp + 0xf]
jmp 0x611f2f
xchg dh, al
bswap edi
sub di, 0x7eb8
xchg di, si
shr edx, 0x15
mov al, byte [esp]
jmp 0x611fa3
mov eax, dword [esp]
mov bl, 0xd0
stc
setns bh
neg edx
xchg dx, cx
jmp 0x611f7b
not bh
bswap ebp
lea ebp, reloc.RASAPI32.dll_RasHangUpA
cmc
lea ebp, [esp + esi]
sub esp, 8
jmp 0x611fe4
rdtsc
push word [esp + 5]
lea eax, [edx*4]
pushal
btr edi, esp
popal
jmp 0x612122
push dword [esp + 2]
lea esp, [esp + 3]
setl dh
not esi
lea ebp, [ebp + 0xf]
mov edi, ecx
jmp 0x611fbd
mov byte [esp + 7], bh
mov esi, dword [esp + 9]
neg bp
rdtsc
call fcn.006120b1
lea esi, [eax + 0xa9]
cld
mov edi, 0xefd0086e
lea ebx, reloc.RASAPI32.dll_RasHangUpA
mov edx, dword [esp]
lea edi, [ebp + 0x17]
jmp 0x612165
mov ebx, ecx
setl ah
mov bx, word [esp + 3]
mov ebp, dword [esp + 0xa]
mov edi, 0x647c4140
jmp 0x612199
mov bp, 0x7995
mov ebx, esi
mov si, 0x8465
rdtsc
bswap ecx
xchg ecx, esi
jmp 0x61233d
mov bl, 0x50
mov esi, eax
not bh
xchg ecx, eax
call fcn.006121f9
push edx
popal
jae 0x61221e
popal
outsb dx, byte [esi]
push ebp
jo 0x61221d
add byte [edi + ebp*2 + 0x63], cl
imul eax, dword [esi + 0x69], 0x6c
add byte gs:[ebp - 0x7899ce98], cl
sub al, 0x24
lea ebp, [eax + 0x31]
xchg word [esp], bp
xchg byte [esp], al
btc edx, edi
cld
lea ecx, [esp + edx]
jmp 0x6121c6
jae 0x612265
inc esi
jb 0x612286
add byte gs:[ebx + 0x66032454], cl
sub esi, 0x76bebed8
or dl, byte [eax]
cmpsb byte [esi], byte es:[edi]
mov edx, dword [esp + 3]
sub si, 0xbed8
mov esi, 0xa6100a76
xchg cx, ax
xchg ch, dl
lea esi, [eax + edi]
jmp 0x6121e6
sar bh, cl
invalid
pop edi
add bp, 0x54ce
mov al, ah
btc esi, edi
mov edi, dword [esp + 4]
btc edx, edi
jmp 0x612223
lea ebp, [edi*4]
ror ebx, 0x15
pop word [esp + 2]
lea esp, [esp + 2]
jmp 0x61227e