Function at 0x61372c
Capabilities:
Execute anti-debugging instructions

Disassembly:
lea eax, [ebp*4]
mov si, word [esp + 0x14]
mov ecx, eax
sub esp, 0xa
jmp 0x613788
sub esp, 0x10
sub esp, 0xe
mov esi, dword [esp + 0x14]
btr edx, edx
pop edx
pop ebp
jmp 0x613801
ror edx, 7
mov esi, 0x5097d376
mov ch, byte [esp + 0x26]
xchg word [esp + 0xc], bp
lea esp, [esp + 0x1b]
add esp, 0x11
jmp 0x613762
mov word [esp + 0xa], di
xchg bh, cl
bsr bx, cx
not si
lea edi, [edx + ebx]
pop dword [esp + 0xc]
jmp 0x613b98
lea esi, reloc.WSOCK32.dll___WSAFDIsSet
push dword [esp + 9]
btc ebx, ebx
not si
btc ecx, ebx
jmp 0x6137c2
mov word [esp + 0xb], sp
mov ax, di
xchg word [esp + 0xe], cx
xchg dx, di
mov dword [esp + 7], ebp
lea ebp, [ecx*4]
jmp 0x6137e7
mov dh, byte [esp + 3]
mov edx, 0x6e0cddfc
mov edi, ebp
mov byte [esp + 3], ah
not edi
mov esi, 0xf3e1ce66
jmp 0x613850
xchg dx, bp
add esp, 0x18
btr ecx, esp
bsr bp, cx
mov ecx, ebp
shr ebx, 0x13
jmp 0x61381e
mov bl, bh
xchg dword [esp + 8], ecx
not edi
push esp
pop word [esp + 6]
pop edx
jmp 0x6139c1
inc cl
mov bl, 0x40
not esi
rdtsc
mov edx, dword [esp]
mov byte [esp + 5], bh
jmp 0x61383c
sub esp, 0x1c
pop bx
sub esp, 2
xchg word [esp + 2], cx
cld
bsr bx, cx
jmp 0x6138c5
mov ebp, dword [esp]
xchg si, di
xor dl, ch
mov bh, byte [esp]
bswap esi
inc edi
jmp 0x613882
mov dh, byte [esp + 4]
call 0x6138ae
dec ecx
outsb dx, byte [esi]
je 0x613937
jb 0x613942
je 0x613929
popal
inc esi
imul ebp, dword [ebp], reloc.WSOCK32.dll___WSAFDIsSet
cld
xchg bh, cl
pop ax
rcr ch, 5
mov ah, byte [esp]
lea edi, [ebp + 0x27]
jmp 0x61389e
mov eax, esi
xchg dword [esp], esi
and edx, ecx
bswap edi
pop bp
rdtsc
jmp 0x6138e0
cmp al, 0x24
neg dh
push edx
jmp 0x61394e
arpl word [ebp + 0x73], sp
jae 0x61393c
lea eax, [edx*4]
rol bx, cl
btr ebx, edx
call fcn.00613911
add byte [esi - 0x2d], ah
ret
cpuid
lea ebx, [edi*4]
lea edi, [eax + edx]
setg ch
xchg dword [esp], ecx
and edi, ecx
jmp 0x61397a
sub esp, 0x1e
inc edi
sub dx, 0xf138
pop bp
mov dword [esp + 0x15], ebp
cpuid
jmp 0x613ae1
mov edx, esi
pop bx
pop eax
mov ebx, esi
mov dword [esp], ebp
mov bl, 0xc0
jmp 0x613902
pop ebx
bsf ax, si
call fcn.006139ef
mov edi, esi
xchg edi, ebx
bswap edi
shr ebx, 9
push word [esp + 0xc]
jmp 0x613aa5
lea esp, [esp + 0x12]
mov edx, dword [esp]
xchg byte [esp], cl
add ax, 0x114e
clc
btr ebp, esp
jmp 0x613abb
mov eax, dword [esp + 4]
xchg byte [esp + 0xa], dl
setle ch
cld
mov word [esp + 9], dx
setle ch
jmp 0x613a7e
mov byte [esp], bh
xchg bp, dx
cpuid
lea ecx, [eax + edi]
lea esp, [esp]
lea edx, [eax*4]
jmp 0x613b3a
pop bp
pushal
pop word [esp]
bsr cx, bp
mov esi, ecx
mov bx, sp
jmp 0x613a1c
clc
pop ax
not cx
mov bx, di
call fcn.00613af6
push word [esp + 1]
mov cl, 0xda
mov byte [esp + 3], ah
xor ebx, esi
mov byte [esp + 3], ah
not ch
jmp 0x613b6c
xchg ch, dl
lea esi, [esp + esi]
clc
push edx
xchg dword [esp], edx
pop word [esp]
jmp 0x613b0d
sub esp, 6
inc dl
cmc
xchg ah, bl
not si
rdtsc
jmp 0x613b80
xchg word [esp + 2], bx
bswap ebp
mov dl, 0x44
mov di, 0x6929
pushal
pop dword [esp + 0x15]
jmp 0x613b4a
popal
lea ecx, [ebp - 0xbf]
mov edi, ebp
mov edi, 0x897728f8
jmp 0x613c7a
mov al, 0xf6
mov ebp, dword [esp + 0x10]
pop si
sub esp, 0x10
btc ebx, edi
xchg byte [esp + 0x20], al
jmp 0x613871
neg bh
xchg word [esp + 3], di
mov ah, byte [esp + 5]
lea ebp, [ecx + edi]
xchg edi, ecx
add esp, 6
jmp 0x613c22
mov byte [esp + 5], ch
mov bx, word [esp + 1]
mov edi, dword [esp + 5]
btr edi, esp
neg cx
btr esi, esp
jmp 0x613baf
add esp, 0
xchg dword [esp], edx
push esp
pop edi
cpuid
bswap ecx
jmp 0x613bcc
cmc
lea ecx, [eax - 0x89]
call fcn.00613c09
invalid
xchg byte [esp], cl
xchg bh, cl
neg ebx
mov ebp, 0xd9af51d0
mov ebx, esi
mov bx, 0x76fb
jmp 0x613bfc
mov dl, 0x14
btr edi, esp
mov word [esp + 2], bx
lea eax, [eax + edi]
mov byte [esp + 3], dh
jmp 0x613bee
lea edx, [edx*4]
xchg dword [esp], eax
xchg byte [esp + 4], bl
mov dl, 0xcc
mov ah, byte [esp + 4]
cmc
jmp 0x613c62