Function at 0x6c9fd1
Capabilities:
Execute anti-debugging instructions

Disassembly:
lea esp, [esp + 0x10]
mov ecx, 0x71cb6ccd
push dword [esp + 0x17]
jmp 0x6ca055
pop eax
add esp, 6
lea eax, reloc.KERNEL32.dll_FreeLibrary
xchg dx, di
neg si
jmp 0x6ca09c
push dword [esp + 0xf]
mov ecx, ebx
add esp, 6
rdtsc
mov word [esp + 8], cx
push word [esp + 0x14]
jmp 0x6ca018
pop dword [esp + 0xe]
xchg byte [esp + 4], dl
neg esi
mov dh, al
lea esi, reloc.KERNEL32.dll_FreeLibrary
pop word [esp + 1]
jmp 0x6ca02e
mov word [esp + 5], bx
mov byte [esp + 0xa], al
push edi
sub esp, 0x12
jmp 0x6ca11d
mov ebx, dword [esp + 3]
shl esi, cl
cmc
mov bp, word [esp + 3]
btr di, bp
jmp 0x6ca06e
mov word [esp + 9], dx
xchg dh, dl
mov dl, byte [esp + 4]
xchg dx, ax
xchg byte [esp + 4], bl
mov word [esp + 9], sp
jmp 0x6ca084
rcr si, 2
push ebx
std
dec ebp
xchg dword [esp], esi
pop word [esp + 3]
jmp 0x6ca0fe
xchg dword [esp + 5], eax
xchg edi, ebp
mov eax, 0xe7bcefe4
push word [esp + 0xb]
pop word [esp + 0xd]
mov byte [esp + 5], bl
jmp 0x6ca0b4
xchg al, cl
mov cl, 0xf3
mov cx, bx
and cl, 0xc4
bswap esi
not ebp
jmp 0x6ca148
mov bx, 0x4635
xchg dword [esp + 3], edx
pop edi
mov dh, bl
lea esp, [esp + 0xc]
lea ecx, [ecx + esi]
jmp 0x6ca0e8
push dword [esp + 0x1d]
mov ax, 0xdb25
lea esp, [esp + 0x18]
sbb cl, 0xe
cpuid
cpuid
jmp 0x6ca0cd
xchg ecx, ebx
lea esi, [eax + esi]
mov ch, dh
bswap edi
setae ah
jmp 0x6ca15c
pushfd
mov bl, byte [esp + 3]
mov ax, word [esp + 5]
add esp, 5
sets ah
mov edx, ebx
jmp 0x6ca132
mov bp, 0x1f59
cld
neg esi
mov bh, byte [esp]
mov dh, byte [esp]
add cl, 0x28
jmp 0x6ca1e6
mov bp, ax
lea esp, [esp + 6]
xchg edx, eax
mov ecx, esi
bswap ebp
lea eax, [ebp - 0xcc]
jmp 0x6ca1ba
mov eax, 0x565f3c82
xchg dword [esp], edx
cld
push di
mov ax, dx
ror dl, 0
jmp 0x6ca18a
cld
bt edx, eax
neg eax
lea eax, [ecx*4]
mov byte [esp], bh
xor al, al
jmp 0x6ca1f8
bts cx, bx
neg edi
lea esp, [esp]
lea esp, [esp]
lea ebx, [edi - 0xb1]
jmp 0x6ca208
push eax
setg bl
bsf cx, cx
mov al, dh
mov dword [esp], edi
not bp
jmp 0x6ca1a7
mov bp, cx
mov al, 0x5b
std
mov bl, 0x1e
setb cl
mov edx, dword [esp]
jmp 0x6ca1ce
std
cmc
cmc
mov di, word [esp]
xchg esi, ebp
xor ax, di
jmp 0x6ca330
mov dword [esp + 1], edi
sub cl, 0xeb
push dword [esp + 5]
call fcn.006ca23c
lea esp, [esp + 4]
sub esp, 0x1c
mov bl, 0xfb
setbe bh
mov byte [esp + 9], al
xchg di, bp
jmp 0x6ca2af
push dword [esp + 4]
rdtsc
pop word [esp + 3]
push ecx
lea edi, [esi + 0x64]
mov cl, byte [esp + 7]
jmp 0x6ca252
push word [esp + 0x25]
inc edx
lea ecx, [eax + edi]
mov bl, byte [esp + 0x10]
jmp 0x6ca2ed
xchg dword [esp + 0xd], ecx
lea ebx, [ebx*4]
mov di, 0xfcff
xchg esi, edi
dec di
jmp 0x6ca299
not bl
cpuid
xchg edx, eax
lea ebp, [ecx + 0x71]
mov dh, cl
push ebx
jmp 0x6ca284
bswap eax
mov ecx, 0xe9b6ec12
xchg dword [esp + 7], eax
push word [esp + 8]
jmp 0x6ca308
lea esp, [esp + 0x1c]
btr ecx, ebx
pop word [esp + 3]
btc si, bp
cpuid
lea ebp, [esi*4]
jmp 0x6ca2d7
mov byte [esp + 3], al
setl ah
sub esp, 0x1c
add esp, 3
pop dword [esp + 9]
lea edi, [esp + esi]
jmp 0x6ca403
btc bp, sp
not ebx
bsf edi, eax
mov bx, 0x90c2
xchg cx, si
lea ebx, [edi*4]
jmp 0x6ca2c9
mov dx, word [esp + 5]
not di
mov byte [esp + 4], ah
dec al
add esp, 3
xchg byte [esp + 2], ch
jmp 0x6ca3c9
mov edx, dword [esp + 2]
mov word [esp + 2], ax
push word [esp + 3]
rcl dh, 7
mov di, word [esp + 2]
mov ch, 0x9d
jmp 0x6ca349
mov dl, cl
pop dword [esp]
shl ax, 7
xchg bp, di
pushfd
mov ecx, dword [esp + 2]
jmp 0x6ca371
mov dword [esp + 0x17], ebp
xchg word [esp + 0xa], ax
mov dh, byte [esp + 4]
jmp 0x6ca3d9
bswap edx
pop esi
xchg si, bp
mov ch, byte [esp + 1]
xchg byte [esp], dl
pushal
jmp 0x6ca3b3
btr bx, ax
dec bx
xchg word [esp + 0x19], bx
pop bp
add esp, 4
cpuid
jmp 0x6ca417
mov ebp, dword [esp + 0x11]
lea esi, [ecx - 0x5f]
pushal
not di
mov eax, ebp
jmp 0x6cae63
pop ebx
lea esp, [esp + 0x1c]
lea edi, [eax + ebp]
mov eax, 0x6d62b0b5
std
push word [esp]
jmp 0x6ca3a0
mov cl, bh
mov dword [esp + 0x14], ebp
pop ecx
mov ax, word [esp + 5]
xchg ecx, edx
cld
jmp 0x6ca3ed
mov word [esp + 0x14], ax
call fcn.006ca448
btr cx, ax
mov si, word [esp + 3]
setl dl
xchg word [esp + 0x11], si
cpuid
not ch
jmp 0x6ca665
pop dword [esp + 4]
mov bp, word [esp + 5]
mov dh, bh
shl edx, 9
xchg dword [esp + 3], ebp
pop ebp
jmp 0x6ca45e
mov dx, 0x4cf5
pop dword [esp + 1]
rdtsc
rcr cx, cl
lea edi, [edx + edi]
call fcn.006ca4dd
invalid
lea ebp, [esp + ebp]
seto cl
mov dword [esp + 0x10], edx
sbb bl, dh
rdtsc
pop eax
jmp 0x6ca49d
mov dword [esp + 0x15], esi
push word [esp + 0xe]
xchg word [esp + 0x18], bp
xchg edi, edx
push dword [esp + 0x1b]
pop word [esp + 0x11]
jmp 0x6ca4b3
mov byte [esp], ah
bts eax, esp
mov cx, si
add esp, 0xd
pushal
mov cl, 0xbc
jmp 0x6ca488
pop word [esp + 0xa]
rdtsc
lea eax, [esi - 0xad]
lea esp, [esp + 0x28]
mov ecx, dword [esp + 0xc]
std
jmp 0x6ca726