Function at 0x6e017f
Capabilities:
Execute anti-debugging instructions

Disassembly:
call 0x6e017f
push ebx
popal
outsb dx, byte gs:[esi]
imul ebp, dword [bp + 0x65], 0x6f725020
je 0x6e01d6
arpl word [edi + ebp*2 + 0x72], si
and byte [esi + 0x32], dh
xor ebp, dword cs:[esi]
xor byte cs:[eax], al
pushfd
clc
jmp 0x6e01ac
sub esp, 0xd
pop dword [esp + 3]
pushfd
lea esp, [esp + 1]
mov dword [esp + 7], edi
jmp 0x6e01d4
clc
cmc
sub esp, 5
lea esp, [esp]
lea esp, [esp + 1]
lea esp, [esp + 4]
jmp 0x6e0196
mov di, ax
lea esp, [esp + 2]
mov dword [esp + 1], eax
xchg di, ax
jmp 0x6e01fc
cld
bsr di, ax
bsr edi, eax
std
lea edi, [eax + ebp]
mov edi, 0x9be4ad09
push si
jmp 0x6e01be
mov ax, sp
dec eax
mov edi, dword [esp]
mov dx, word [esp]
rcl ax, cl
jmp 0x6e0233
lea edi, [eax + edx]
mov edi, dword [esp]
mov di, word [esp]
neg edi
push edx
mov ah, byte [esp]
jmp 0x6e01e6
xchg al, dh
bsf eax, ebx
mov di, word [esp]
lea edi, reloc.WSOCK32.dll___WSAFDIsSet
rdtsc
rdtsc
jmp 0x6e0245
setge dh
xchg dl, dh
rdtsc
mov ax, word [esp]
mov ax, word [esp]
xchg edi, eax
jmp 0x6e020e
mov edi, ebp
std
add al, bl
sub esp, 0
bsf edx, eax
mov dh, byte [esp]
call fcn.006e0371
pop ecx
jecxz 0x6e02ce
push ss
in eax, 0x64
mov eax, dword [reloc.WSOCK32.dll___WSAFDIsSet]
stosd dword es:[edi], eax
rcl dword [ecx - 0x3f]
mov al, byte [0x4350b253]
outsd dx, dword [esi]
inc ebx
jb 0x6e02d5
popal
je 0x6e02d8
dec ecx
outsb dx, byte [esi]
jae 0x6e02eb
popal
outsb dx, byte [esi]
arpl word [ebp + 0x45], sp
js 0x6e027e
rdtsc
xchg dx, ax
bsf eax, edx
not eax
push cx
clc
jmp 0x6e02c5
xchg word [esp], ax
add esp, 1
not dh
xchg dx, ax
xchg byte [esp], al
jmp 0x6e02f1
mov ax, 0x158
mov dx, 0x289e
adc dh, al
add esp, 0
not di
mov byte [ebx - 0x899ff3c], 0xd7
mov ax, word [esp]
jmp 0x6e02af
and al, 0xeb
aam 0xf
stosd dword es:[edi], eax
retf 0xdef6
bts edx, ecx
neg dh
setbe dh
lea edx, [edi + ebp]
jmp 0x6e0338
and eax, edx
and al, 0xcd
pop esp
scasd eax, dword es:[edi]
bswap eax
mov edi, edx
mov ax, 0xcc1a
rdtsc
mov di, bp
xchg di, ax
jmp 0x6e02db
inc di
std
mov dx, word [esp]
mov edx, eax
setge dh
neg edi
jmp 0x6e034b
mov edi, 0xdea94d60
mov ax, di
mov dl, cl
mov eax, dword [esp]
mov dh, cl
mov al, dh
jmp 0x6e0322
mov edi, 0x35c57c2f
btc eax, edi
or dh, ch
lea esp, [esp]
lea eax, [edx + ebx]
lea edx, reloc.WSOCK32.dll___WSAFDIsSet
jmp 0x6e03b9
lea esp, [esp]
sbb edx, 0xd42fb96f
lea eax, [edx + edi]
add esp, 0
call fcn.006e0389
mov eax, 0xe5b51773
lea eax, [ebp*4]
sub esp, 0xb
std
jmp 0x6e03fa
pop word [esp + 0x11]
cld
mov dl, bl
xchg dword [esp + 0xb], eax
lea edx, [edi + ebp]
mov edi, eax
jmp 0x6e044d
mov edx, 0x5a0c0273
mov word [esp + 3], bp
xchg edi, eax
mov edx, ebx
pop ax
jmp 0x6e0478
lea edi, [eax + edx]
mov edx, ebp
mov di, cx
bsf edi, ebp
mov ah, byte [esp + 0x17]
lea esp, [esp + 2]
jmp 0x6e0437
lea eax, reloc.WSOCK32.dll___WSAFDIsSet
mov word [esp + 9], bx
setae ah
neg al
jmp 0x6e04a4
and eax, 0x93d9be40
pop dword [esp + 6]
mov byte [esp + 2], dh
neg edx
pop word [esp + 7]
jmp 0x6e0462
lea edx, reloc.WSOCK32.dll___WSAFDIsSet
xchg word [esp + 7], dx
ror dx, 0xd
cmp al, ah
xchg byte [esp + 4], dh
adc dx, 0xfef3
jmp 0x6e04f0
inc di
not edx
mov ah, byte [esp + 4]
mov dword [esp + 9], ecx
lea esp, [esp + 5]
jmp 0x6e051a
rdtsc
mov dl, ah
mov ax, 0xfa9e
xchg dword [esp + 7], eax
bswap edi
mov dx, 0xf9d7
jmp 0x6e04da
pushfd
pop word [esp + 8]
bt dx, ax
xchg word [esp + 8], di
jmp 0x6e0589
push dword [esp + 8]
xchg al, dl
pop di
adc ah, bh
pop dx
xchg ah, dh
jmp 0x6e0504
mov dx, word [esp]
neg edx
cmc
mov word [esp], bp
mov dx, sp
jmp 0x6e0568
mov byte [esp], cl
rdtsc
xchg dword [esp], edi
pop dx
xchg word [esp], dx
mov dl, 0x1c
jmp 0x6e052a
sub esp, 0x15
pushal
mov di, cx
add esp, 0x2b
xchg word [esp + 5], ax
jmp 0x6e05b8
sbb ax, sp
neg edx
lea esp, [esp + 1]
mov ah, 0x4f
mov eax, edx
pop dx
jmp 0x6e0552
mov byte [esp + 2], dl
mov edi, 0xff9a8fa6
pop dword [esp]
pop ax
mov edx, 0x7cd6b01e
mov edi, dword [esp + 4]
jmp 0x6e0540
pop eax
not eax
setp ah
mov eax, dword [esp]
push word [esp + 1]
jmp 0x6e0640
xchg dword [esp], edi
mov byte [esp + 1], ch
setbe al
inc di
pop edx
shr ax, cl
jmp 0x6e05a2
mov eax, 0xb4e93a9e
mov di, dx
clc
xchg dword [esp], eax
lea eax, reloc.WSOCK32.dll___WSAFDIsSet
call fcn.006e0604
pop di
push word [esp]
push dword [esp + 2]
inc dh
mov edi, 0xf49e4a18
lea esp, [esp + 3]
jmp 0x6e06af
mov byte [esp + 3], dh
shl dx, cl
cmc
neg di
mov di, word [esp + 2]
jmp 0x6e06d6
not dh
pop eax
bsr ax, bp
push esi
mov dh, byte [esp]
lea edi, [esp - 0x2f]
jmp 0x6e0699
push esp
add esp, 5
not dl
mov al, 0xb2
mov byte [esp], ah
mov eax, ebp
jmp 0x6e070a
lea esp, [esp + 1]
dec edi
cld
inc ax
mov dword [esp], esp
cld
jmp 0x6e06c0
mov eax, dword [esp + 0x13]
mov edx, ecx
mov di, 0x5590
mov ax, sp
setae ah
cmc
jmp 0x6e071d
mov ah, byte [esp + 2]
mov dl, 2
sub esp, 0x16
xchg dword [esp + 2], eax
bswap edi
xchg dl, ah
jmp 0x6e06e4
push dword [esp + 0xf]
xchg dx, ax
bsf eax, eax
add esp, 0x12
mov ax, 0x1b90
pop edi
jmp 0x6e1fa4
mov word [esp], di
mov word [esp], cx
lea esp, [esp + 1]
mov dh, bh
jmp 0x6e079b
xchg edx, eax
lea edi, [edi*4]
xchg edi, edx
mov edi, dword [esp]
mov ax, word [esp + 1]
mov dx, word [esp + 2]
jmp 0x6e0755
mov al, 0x42
sub dx, bx
lea edi, [ecx + edi]
push word [esp + 1]
xchg al, dl
jmp 0x6e07b1
mov eax, 0xdc1d003e
neg ah
setle dl
mov edi, 0x8ae49630
neg eax
mov edx, dword [esp]
jmp 0x6e0785
mov di, 0x3466
pop edi
xchg di, dx
dec dh
mov dl, cl
inc di
jmp 0x6e0854
xchg word [esp], di
bswap edi
shl edx, 0x13
inc dx
inc edi
mov byte [esp], dh
jmp 0x6e076b
xchg dword [esp + 0x2a], edx
sub esp, 0xd
lea esp, [esp + 0x47]
stc
xchg al, ah
mov di, sp
jmp 0x6e082f
lea eax, [edx*4]
sub esp, 0x15
sub esp, 0xd
mov word [esp + 0xc], bp
pushfd
xchg dword [esp + 0x28], eax
jmp 0x6e07e4
lea edi, [eax*4]
mov di, bp
mov edx, ecx
setno dl
jmp 0x6e0881
mov ax, word [esp]
std
mov al, byte [esp]
rdtsc
not eax
lea edx, [ecx*4]
jmp 0x6e0819
sub esp, 0x12
mov dl, 0xd9
push word [esp + 0x11]
xchg di, ax
sub eax, 0x99fbd8c
mov dx, si
jmp 0x6e0800
rdtsc
mov dh, 0x26
xchg edx, eax
bt edi, eax
xchg edx, edi
bswap eax
jmp 0x6e0890
neg edi
bswap edi
rdtsc
mov dh, 0xbc
mov di, bp
neg edi
jmp 0x6e086b
mov dh, 0xb8
mov edi, dword [esp]
inc edx
bswap edx
mov edi, dword [esp]
neg edi
jmp 0x6e093c
mov eax, dword [esp]
rdtsc
mov byte [esp], dh
mov ax, bx
xchg ah, dl
mov edx, ecx
jmp 0x6e07d3
sub esp, 0x19
adc ax, 0xfd5f
lea eax, [ebp*4]
lea edi, [ecx*4]
and ah, 0x35
rdtsc
jmp 0x6e091c
pop word [esp]
clc
sub eax, 0xc87a48d5
mov edi, 0xd3306bca
lea eax, reloc.WSOCK32.dll___WSAFDIsSet
neg eax
jmp 0x6e08c8
xchg byte [esp + 0x14], ah
add esp, 0x12
neg dl
pop word [esp + 0xd]
cmc
jmp 0x6e09ca
xchg byte [esp + 0x14], al
mov edx, dword [esp + 0x17]
lea eax, [edi - 0xa8]
neg ax
mov ax, 0x3a65
sub esp, 0x12
jmp 0x6e0906
lea eax, [eax*4]
rol di, cl
dec edi
pushfd
mov dx, bx
dec ah
jmp 0x6e08ed
mov di, word [esp + 0xe]
mov dword [esp + 5], edx
add esp, 0xb
mov ax, di
call fcn.006e0987
not ax
mov dx, bx
pop word [esp + 6]
pop dword [esp + 0xb]
rdtsc
pop dword [esp]
jmp 0x6e0cc2
xchg dl, ah
mov dx, 0xc91d
lea eax, [edi*4]
sub esp, 1
mov eax, 0x23221583
mov edi, 0x13d7558f
jmp 0x6e08b4
lea edi, [ebx - 0x75]
xchg edi, eax
rcl di, cl
lea edi, [ecx*4]
bsf edi, ebp
rdtsc
jmp 0x6e09fb
dec ax
mov edx, 0x2b36bba5
xchg edi, edx
xchg byte [esp + 4], ah
pop dx
jmp 0x6e0a6c
pop di
add esp, 1
sub eax, 0x4d43530b
xchg dl, al
sub esp, 3
dec ax
jmp 0x6e0a43
lea edx, reloc.WSOCK32.dll___WSAFDIsSet
mov byte [esp + 1], ch
lea eax, [esp + ecx]
lea eax, [edx + edi]
pop edi
mov dl, byte [esp + 1]
jmp 0x6e0ac3
pop ax
mov dh, 0x4e
rdtsc
btc edi, esp
mov dx, 0x885f
and edi, 0x54399280
jmp 0x6e0a59
lea edi, [esi + esi]
mov di, dx
mov dh, ch
mov dl, 0xdb
xchg ah, dh
mov al, byte [esp]
jmp 0x6e0b04
mov byte [esp], ah
pop ax
lea eax, reloc.WSOCK32.dll___WSAFDIsSet
rdtsc
mov ax, word [esp]
jmp 0x6e0aad
setg ah
mov dx, cx
bswap edi
lea esp, [esp]
mov edx, 0x42bbc211
std
jmp 0x6e0a98
mov dh, byte [esp]
mov al, 0xdf
xchg di, ax
shr eax, 0x1b
mov dl, 0x80
mov ax, di
jmp 0x6e0b14
btc eax, ebp
lea eax, [eax + edi]
not edx
xchg dx, ax
bswap edx
rdtsc
jmp 0x6e0aee
mov dx, word [esp]
adc edi, 0x8b6ab3ce
btc dx, bp
mov dx, 0x87f8
adc edi, edi
jmp 0x6e0b5b
xchg byte [esp + 6], dl
setle al
lea esp, [esp + 4]
mov di, word [esp + 7]
push sp
inc eax
jmp 0x6e0adb
mov edx, 0xf8e6cb43
mov dx, word [esp]
mov di, word [esp]
jmp 0x6e0c0a
mov al, 0xa7
rdtsc
mov di, word [esp]
setg al
not ah
mov dl, byte [esp]
jmp 0x6e0b45
clc
mov dh, 0xe6
lea edx, [ecx + ecx]
clc
xchg dh, al
call fcn.006e0b6d
mov di, si
pop di
bswap edx
dec di
xchg edx, eax
dec edi
jmp 0x6e0bd4
pop edx
rol ah, 3
lea eax, reloc.WSOCK32.dll___WSAFDIsSet
rol edx, cl
rcr dl, 5
mov di, word [esp]
jmp 0x6e0be4
push ecx
bts eax, ebp
setae dh
rdtsc
std
mov byte [esp + 1], cl
jmp 0x6e0bbb
mov ax, 0x2785
ror dh, 5
cmc
inc edi
xchg edi, edx
bts edx, eax
jmp 0x6e0c38
pushfd
mov word [esp + 1], ax
pop edi
xchg edi, edx
dec eax
inc al
jmp 0x6e0c22
lea edx, [esp - 0xd8]
btc eax, edx
btc edx, edx
mov edx, dword [esp]
std
not ah
jmp 0x6e0b83
sub esp, 5
neg edx
push dword [esp + 3]
push dword [esp + 5]
jmp 0x6e0c68
lea edi, [ecx*4]
mov dx, word [esp]
mov edx, 0x5a42d227
rcr dh, cl
inc ax
mov ax, 0xedc0
jmp 0x6e0bf4
mov dl, byte [esp + 7]
call fcn.006e0c97
loop 0x6e0cbf
invalid
lea eax, reloc.WSOCK32.dll___WSAFDIsSet
lea edx, [edx + esi]
mov al, 0x8d
bt edi, ebp
mov al, byte [esp + 9]
push word [esp + 6]
jmp 0x6e0c52
popfd
in al, dx
jmp dword [esi - 9]
not ax
dec dh
neg dh
pop di
neg di
push word [esp + 1]
jmp 0x6e0b30
mov ax, word [esp]
add esp, 1
clc
cld
adc edi, ecx
setae dh
jmp 0x6e0a2d
mov byte [esp + 3], al
mov di, word [esp + 4]
mov byte [esp], dh
pop di
xchg word [esp], dx
mov byte [esp + 1], bl
jmp 0x6e0e9a
mov edi, ecx
lea edx, [eax + edi]
mov byte [esp + 1], bh
pop dx
mov dh, 0xba
xchg ah, dh
jmp 0x6e1c6f
mov di, word [esp]
cld
not dl
bts ax, di
bswap edx
btr di, sp
jmp 0x6e1cc1