Function at 0x61b971
Capabilities:
Execute anti-debugging instructions

Disassembly:
lea esp, [esp + 0x4a]
cld
not edi
add al, dh
inc edi
mov al, byte [esp]
jmp 0x61b97c
pop ebx
sub esp, 0x16
push dword [esp + 0x12]
pushal
jmp 0x61b92f
lea ebp, [ebp*4]
mov esi, 0xb218d828
mov al, 0x46
rdtsc
jmp 0x61b9fa
neg cx
rdtsc
mov dl, dh
lea edx, [edx + ebp]
rdtsc
call fcn.0061b9c1
and dx, 0xf39a
bsf bx, si
cld
mov di, word [esp + 0x10]
add esp, 0x17
cpuid
jmp 0x61bb1b
pop word [esp]
xchg dword [esp], esi
xchg byte [esp + 2], al
rdtsc
xchg dword [esp], ebx
bsr si, bp
jmp 0x61baf9
xchg edi, ecx
lea ecx, [esi - 0xed]
lea ebx, [eax + edi]
xchg word [esp + 9], dx
add esp, 0xb
jmp 0x61ba7d
pop si
neg ebp
cld
mov word [esp + 6], di
xchg dh, al
cpuid
jmp 0x61ba9f
lea edi, [ebp*4]
mov cl, 0x52
xchg ch, dl
not di
jmp 0x61bb4a
mov eax, 0x5e3b7e96
stc
lea esi, [ebx*4]
xchg word [esp + 1], di
jmp 0x61bac8
bsr cx, cx
lea edx, [edi + edi]
setnp bh
mov dl, dh
mov byte [esp + 5], ah
mov ch, byte [esp]
jmp 0x61bade
pop di
mov cx, 0x9595
push dword [esp + 2]
sub esp, 0xc
inc cx
mov dl, dh
jmp 0x61bab8
lea esi, [edx + edx]
mov dword [esp], eax
push word [esp]
cpuid
rdtsc
mov word [esp + 5], di
jmp 0x61ccd3
lea eax, [esi + 0x9d]
mov dl, 0x34
and ebx, ecx
xchg word [esp + 3], dx
mov si, 0x2c3
xchg ch, dl
jmp 0x61bb2e
cpuid
lea esi, [eax + ebx]
xchg ah, bl
mov ch, byte [esp + 1]
mov ax, bx
mov ax, 0xcd93
jmp 0x61bbb0
mov word [esp + 3], dx
rdtsc
lea esp, [esp + 6]
bsr ax, cx
rdtsc
mov ebx, dword [esp]
jmp 0x61bb81
bswap ebx
pop di
mov ebp, dword [esp]
lea esp, [esp]
xchg byte [esp], cl
neg dh
jmp 0x61bc23
cpuid
pop bp
cpuid
inc esi
bswap edi
mov al, 0x36
jmp 0x61bb9a
lea esp, [esp]
cmc
add esp, 1
xchg byte [esp + 1], dl
mov dword [esp], eax
mov cx, word [esp + 2]
jmp 0x61bcce
xchg bp, dx
cld
xchg dh, al
lea ebp, [esi*4]
lea ebx, [esp + ebp]
mov esi, 0x29f97ea8
jmp 0x61bbd3
sub esp, 0xa
mov bx, 0xc3db
add esp, 4
lea edx, [ebp*4]
btr ebx, esp
mov esi, dword [esp + 5]
jmp 0x61bbfe
btr esi, esp
neg dh
rdtsc
mov ah, byte [esp + 0xd]
inc eax
mov ebx, 0x3b4622ce
jmp 0x61bcad
ror edi, 1
mov bl, 8
mov esi, ecx
pop ax
pop si
lea ecx, [ecx + edx]
jmp 0x61bc3d
sub esp, 0x1a
lea ebx, [edi*4]
mov ax, word [esp + 0x17]
push word [esp + 0xb]
mov ah, byte [esp + 4]
mov byte [esp + 0x19], bh
jmp 0x61bc5b
setge ch
xchg byte [esp + 6], cl
mov byte [esp + 0x15], bh
mov dl, dh
xchg edx, ebx
jmp 0x61bd48
mov ecx, dword [esp + 0x18]
setne bh
push word [esp + 0x18]
cpuid
ror ebp, 0x1f
xchg byte [esp + 8], bl
jmp 0x61bc96
neg edx
xchg ebx, ebp
lea esp, [esp + 5]
rdtsc
mov di, 0x5a0d
lea ecx, [eax + ebx]
jmp 0x61bc78
push dword [esp + 0x11]
mov ebx, 0xb8ef2530
add esp, 0
xchg byte [esp + 0xa], cl
lea ecx, [ebx + esi]
btc ecx, edi
call fcn.0061bd12
setl bh
and si, 0x2be2
xchg dword [esp], ebp
mov si, 0xc905
btc edi, ebx
jmp 0x61bdd4
xchg dword [esp + 2], ebx
lea edx, [eax + edx]
rcr esi, 3
lea esp, [esp + 5]
jmp 0x61c820
lea esp, [esp]
mov bp, bx
cmc
sub esp, 8
lea ebx, [esi - 0x5d]
add esp, 0
jmp 0x61bda7
lea esp, [esp]
xchg ecx, ebp
lea esp, [esp + 4]
mov di, 0x2d1f
mov bl, 0x10
xchg byte [esp], cl
jmp 0x61bdbd
push dword [esp + 2]
lea edi, [ebx*4]
lea esp, [esp + 1]
mov bl, bh
lea ebp, [esp + edx]
push edx
jmp 0x61bbc6
lea esp, [esp]
mov byte [esp], ch
call fcn.0061be77
not di
btc eax, ebx
inc esi
stc
mov cx, 0xa6b3
mov dl, 0x74
jmp 0x61bf42
popal
add esp, 3
stc
lea edx, reloc.RASAPI32.dll_RasHangUpA
mov byte [esp], ch
lea esp, [esp]
jmp 0x61bff3
cpuid
btr esi, esp
mov ebx, eax
inc cl
pushal
mov si, dx
jmp 0x61c0ec
lea ebp, [eax*4]
inc bl
mov al, 0x2e
mov word [esp], dx
mov dword [esp], esi
xchg edx, ebx
jmp 0x61c7a1
rdtsc
lea esp, [esp + 1]
mov byte [esp + 3], ah
xchg di, ax
pop dword [esp]
mov ax, 0xa3b1
jmp 0x61bdf0