Function at 0x61724c
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov cl, byte [esp + 3]
xchg dx, cx
clc
sub esp, 0x1e
push edx
bsf dx, si
jmp 0x617253
btr ecx, edx
rdtsc
jmp 0x617231
mov ah, byte [esp + 0xd]
cmc
setg dh
xchg edx, ecx
mov cx, word [esp + 0x10]
jmp 0x6172cf
mov dl, dh
rdtsc
mov dx, word [esp]
mov cx, word [esp + 0xd]
pop ax
xchg dword [esp + 4], edx
jmp 0x6172b2
bsr ax, cx
mov word [esp + 0xc], di
push edx
mov ecx, esp
mov dword [esp + 0x15], eax
add esp, 0xb
jmp 0x617284
bsf cx, si
push esp
rdtsc
pop ecx
lea ecx, [eax + edi]
pop cx
jmp 0x617376
lea edx, [esi + 0x7d]
mov dh, byte [esp + 9]
xchg ch, dl
mov ah, byte [esp + 7]
mov byte [esp + 6], bh
lea ecx, [ebx*4]
jmp 0x61729d
btr ecx, esp
lea eax, [esi*4]
stc
xchg word [esp + 0x1c], dx
jmp 0x617343
mov dx, word [esp + 7]
push word [esp + 0x1b]
bsr cx, bp
xchg byte [esp + 0xa], ch
jmp 0x6172e9
bsr cx, bp
neg edx
not ax
mov eax, esi
push dword [esp + 4]
clc
jmp 0x6172ff
mov dl, dh
call fcn.00617354
inc esi
insb byte es:[edi], dx
jne 0x6173a7
push 0x656c6946
inc edx
jne 0x6173a2
jb 0x6173b3
add dh, bl
sub dword [edi], ecx
enter 0xffffffffffffd586, 0x66
pop eax
bswap eax
xchg ch, dl
pop ax
xchg byte [esp + 0x12], ch
mov cx, bx
mov cl, 0xca
jmp 0x617329
lea ecx, [eax*4]
push edx
pop dword [esp + 7]
xchg ah, ch
lea ecx, [ebp - 0x87]
mov ecx, 0xeb156f52
jmp 0x617317
not dx
setp ch
add ax, 0x4296
xor dl, ch
rcl ax, cl
rdtsc
jmp 0x6173d9
inc ebp
jbe 0x61740f
outsb dx, byte [esi]
je 0x6173ad
lea esp, [esp + 7]
rdtsc
xchg cx, ax
mov eax, esi
setne dh
mov cl, byte [esp]
jmp 0x617391
xchg ch, dl
mov dl, 0x7c
mov al, 0x5e
mov ch, bh
lea eax, reloc.RASAPI32.dll_RasHangUpA
lea edx, [esi - 0x25]
jmp 0x617443
bsr dx, bp
btr eax, esp
add esp, 0
setl ah
bsf ax, si
lea esp, [esp]
jmp 0x6173bf
and al, 0x11
add esp, 1
xchg byte [esp], ch
lea eax, [esp + ebp]
sub esp, 0x10
push dword [esp + 0xc]
jmp 0x6179b5
xchg byte [esp], al
mov byte [esp], dh
call 0x617428
push ebx
je 0x617498
imul ebp, dword [ebp + 0x50], reloc.RASAPI32.dll_RasHangUpA
jb 0x61745d
movsd dword es:[edi], dword [esi]
aam 0x47
out dx, al
ror cx, cl
stc
call fcn.00617475
invalid
mov cx, word [esp + 1]
pop edx
lea edx, reloc.RASAPI32.dll_RasHangUpA
mov cx, 0x5faf
add esp, 0
jmp 0x617885
lea ecx, [edx*4]
rdtsc
neg dh
bswap edx
xchg edx, eax
stc
jmp 0x617491
sub esp, 6
mov ecx, 0x387b8bea
pop word [esp + 3]
mov ch, bh
mov cx, sp
lea esp, [esp + 8]
jmp 0x6174b3
lea esp, [esp + 6]
xor eax, esi
mov dh, byte [esp]
push edx
xchg cx, ax
setl ah
jmp 0x617688
not cx
push word [esp + 0x10]
shr ecx, 3
add esp, 0x18
bsf ax, ax
lea eax, reloc.RASAPI32.dll_RasHangUpA
jmp 0x6174e8
mov dl, 0x2c
mov edx, dword [esp + 0x17]
mov ch, 0x40
mov ax, 0xa395
push word [esp + 0x15]
neg cl
jmp 0x617508
mov ch, 0x30
xchg ah, ch
xchg word [esp + 1], dx
call fcn.00617576
lea ecx, [ecx + 0xb]
bsr dx, cx
pop dx
xchg byte [esp + 2], dl
mov ch, 0x40
mov ecx, dword [esp + 1]
jmp 0x6176a0
neg ecx
setp cl
mov eax, 0xf4937164
mov eax, dword [esp + 4]
mov dword [esp], ecx
xchg word [esp + 2], ax
jmp 0x617655
inc dx
xchg word [esp + 1], cx
mov word [esp], bx
mov ch, byte [esp + 1]
bts ecx, ebx
mov dx, word [esp]
jmp 0x6177d9
neg cx
mov dword [esp + 8], ebp
xchg dword [esp + 0x13], ecx
not ax
lea eax, [esp + ebp]
pop ax
jmp 0x617534
add esp, 3
call 0x617772
xchg dword [esp + 8], edx
xchg cx, dx
lea edx, [eax - 0x69]
bswap eax
lea edx, [ebp + 0x87]
mov dword [esp + 0xa], ecx
call fcn.0061783f
dec ecx
jae 0x617841
popal
inc ebx
outsd dx, dword [esi]
push eax
je 0x61787a
add byte [ebx + 0x5260fc3a], al
mov ch, byte [esp + 3]
mov al, 0x86
mov eax, edi
jmp 0x6177e1
xchg dx, ax
bswap eax
mov byte [esp + 0xf], ch
add esp, 0x19
xchg byte [esp + 0xa], ch
push esp
jmp 0x617981
invalid
not ecx
push edx
pop dx
xchg word [esp], cx
sub esp, 0x1a
mov dx, sp
jmp 0x6176c5
mov edx, dword [esp + 4]
sub esp, 0x14
rdtsc
lea esp, [esp + 0x12]
call 0x6178dd
stc
mov eax, ebp
push esp
push word [esp + 1]
lea eax, [ecx*4]
setae ch
jmp 0x617945
mov edx, eax
pushal
not ch
pop dword [esp + 4]
rdtsc
lea esp, [esp + 9]
jmp 0x617990
xchg dword [esp], ecx
xchg word [esp + 2], dx
lea ecx, [ecx - 0x43]
push word [esp + 2]
jmp 0x6178fe
neg eax
cld
setle cl
btr edx, ebx
add esp, 0xc
cld
jmp 0x617969
not ax
lea eax, reloc.RASAPI32.dll_RasHangUpA
push edx
mov word [esp + 0xc], di
shl edx, 0x11
mov dl, 0xb4
jmp 0x617a2d
lea edx, [ebp + 7]
xchg byte [esp + 2], dl
mov dl, 0x24
cld
push word [esp + 8]
add esp, 0x14
jmp 0x6174d0
xchg dword [esp + 0x17], edx
xchg edx, ecx
xchg cl, ch
pushal
lea esp, [esp + 0x59]
mov edx, 0xabab4750
jmp 0x617a0b
mov cl, ch
bswap eax
mov ecx, 0x5977606e
pushal
push dword [esp + 0x1c]
jmp 0x617a71
pushal
mov cx, 0xe86f
lea edx, [ebx*4]
neg ax
ror cx, cl
pop eax
jmp 0x6179cc
lea edx, [esp + esi]
lea edx, [edx*4]
clc
lea edx, [eax - 0x71]
bswap eax
clc
jmp 0x6179e0
bsr dx, cx
xchg ah, ch
clc
xchg cl, ch
mov byte [esp + 9], dh
rcl cx, cl
jmp 0x6179f6
mov edx, 0xbe44b3da
mov cl, byte [esp + 6]
rdtsc
mov edx, dword [esp + 5]
push dword [esp + 6]
jmp 0x617f12
bt edx, edx
mov edx, ebp
lea eax, reloc.RASAPI32.dll_RasHangUpA
bt edx, esp
jmp 0x617a3f
ror dx, cl
mov word [esp + 0x1a], bx
bsr cx, bp
rdtsc
lea esp, [esp + 0x11]
mov dh, byte [esp]
jmp 0x617a58
push dword [esp + 0x17]
inc eax
pop dword [esp + 8]
inc ax
xchg word [esp + 0x12], cx
mov cx, ax
jmp 0x617af6
mov dl, 0xd4
xchg byte [esp], cl
pop dword [esp + 0xc]
setge dh
mov ecx, edi
mov dl, dh
jmp 0x617ae0
bsf dx, si
sub esp, 0xc
ror edx, 5
mov eax, esi
shr eax, 1
add dx, 0xb704
jmp 0x617aa0
push edx
pop word [esp]
mov ax, 0x1401
lea edx, [edx + edi]
mov ch, 0x88
pop ecx
jmp 0x617bee
mov dword [esp + 0xb], ecx
lea ecx, [esi + 5]
xchg word [esp + 8], dx
push word [esp + 5]
jmp 0x617ab5
mov eax, dword [esp + 0xb]
lea ecx, [ebx + edi]
xor ax, 0x9054
rcl cl, 3
pop dword [esp + 1]
pop ax
jmp 0x617acb
push dword [esp + 0x14]
mov eax, 0x175d168e
shr ax, cl
push word [esp + 0x13]
lea eax, [edi*4]
mov dword [esp + 0xd], ecx
jmp 0x617b57
xchg dh, al
clc
mov edx, dword [esp + 0x13]
pop ax
mov ax, word [esp + 0x11]
xchg edx, ecx
jmp 0x617b23
mov dl, dh
pop cx
xchg ecx, edx
mov word [esp + 5], bx
mov dx, word [esp + 1]
lea eax, [ebx + esi]
jmp 0x617bbd
neg ah
bt edx, esp
push edx
not ecx
mov edx, eax
xchg cl, ch
jmp 0x617b45
pop eax
inc ecx
pop dword [esp + 0xa]
lea edx, [ebp + 0xd7]
pop dword [esp + 3]
jmp 0x617bcf
cmc
xchg byte [esp + 0x16], dl
mov cx, bx
xor ax, 0x3c3a
bt ecx, edx
lea ecx, [eax - 0xd1]
jmp 0x617b84
bswap eax
xor dl, ch
clc
mov edx, 0x298e6476
not cx
rcl ecx, 9
jmp 0x617b9a
clc
bswap edx
mov cl, byte [esp + 7]
xchg dword [esp], eax
cld
mov cl, ch
jmp 0x617c09
mov dh, byte [esp + 4]
mov dx, bx
mov eax, dword [esp + 0xc]
xchg ecx, eax
mov ecx, dword [esp + 7]
pop word [esp + 0xb]
jmp 0x617b76
pop cx
stc
lea ecx, [ebx*4]
mov byte [esp + 3], ah
not cx
xchg cl, ch
jmp 0x617ccb
push dword [esp + 6]
dec eax
not cl
pop word [esp + 0xc]
mov word [esp + 0xe], bx
mov byte [esp + 7], bh
jmp 0x617b0d
lea eax, [ebp*4]
rdtsc
and ecx, ecx
neg cl
call fcn.00617c4d
mov dx, 0xef0f
sub esp, 0x1e
pop cx
lea ecx, [ecx + ebx]
pushal
mov eax, 0x5bca1514
jmp 0x617d14
mov dl, 0x6c
btc eax, esp
setge cl
bts eax, ebx
ror ecx, 0x1f
cld
jmp 0x617c64
lea esp, [esp + 0x4d]
bswap ecx
bsr cx, bp
inc dx
xor dl, ch
mov edx, dword [esp]
jmp 0x617c90
sub esp, 0x1e
mov ecx, 0x974f1ba2
push dword [esp + 0x17]
rdtsc
xchg dx, cx
pushal
jmp 0x617cae
lea eax, [edi + ebp]
push word [esp + 0x23]
lea esp, [esp + 0x41]
lea eax, [edx + ebx]
call fcn.00617cf8
pop word [esp + 1]
mov ecx, eax
rol dx, cl
setne dh
mov ax, 0x2a0b
pop edx
jmp 0x617d76
lea eax, [eax - 0xd1]
mov ch, 0x18
mov dl, dh
inc ch
mov byte [esp + 7], ch
mov word [esp], bx
jmp 0x617c33
mov ch, bh
cld
rdtsc
mov al, byte [esp]
mov ch, byte [esp]
call fcn.00617d5b
inc edi
insb byte es:[edi], dx
outsd dx, dword [esi]
bound esp, qword [ecx + 0x6c]
dec esp
outsd dx, dword [esi]
arpl word [ebx], bp
pop dword [esp + 9]
mov dl, 0xf4
neg ecx
or ecx, eax
sbb cx, 0xd1e
mov cl, ch
jmp 0x617d42
xchg word [esp + 2], ax
bsr dx, cx
lea ecx, [ecx - 0xe3]
push dword [esp + 6]
mov ax, word [esp + 0xb]
neg eax
jmp 0x617d91
mov byte [esp + 5], ah
mov word [esp + 0x11], sp
pop dword [esp + 6]
pop cx
xchg cx, dx
rcl dx, cl
jmp 0x617e40