Function at 0x6e3865
Capabilities:
Encode data using base64
Execute anti-debugging instructions
Packed with generic packer

Disassembly:
push dword [ebp + 8]
call fcn.00411eb4
mov dword [ebp - 0x1c], eax
sub ax, sp
adc bh, 0x91
cmp esi, 0x1ce83ee7
mov eax, dword [ebp - 0x1c]
bswap bx
push eax
mov ebx, dword [ebp - 4]
jmp 0x73760b
lea eax, [ebp - 0xc]
jmp 0x7f93aa
cmp ecx, 0x80000201
jmp 0x8803ba
fstp qword [ebp - 0x34]
fild dword [ebp - 0x1c]
jmp 0x70b6ad
jne 0x64bb49
and eax, 0xff
jmp 0x91186d
push reloc.WS2_32.dll_getpeername
rol al, cl
sbb eax, esp
push 0
cmovp ax, di
rol ah, 0xfe
btc eax, 0x96
push 0x53066a
sal ax, 0x2d
mov al, 0x60
push reloc.WS2_32.dll_getpeername
movzx ax, bh
btr eax, esp
push 0
and eax, esi
sar ax, 0xa
sbb ah, ah
mov eax, dword [ebp - 8]
test eax, eax
jmp 0x931b1a
jmp 0x79e02c
fstp qword [ebp - 0x28]
jmp 0xa15630
mov ebx, 0x465200
call fcn.00464ca3
add esp, 0x10
mov bl, al
movzx ebx, di
mov dword [ebp - 0x24], eax
mov bl, 0
fild dword [ebp - 0x24]
fstp qword [ebp - 0x24]
setae bl
mov bl, 0xb4
fld qword [ebp - 0x24]
fadd qword [0x530188]
fstp qword [ebp - 0x2c]
bswap bx
movsx ebx, cx
not bh
push 0x80000601
movzx bx, ah
jmp 0x7d63eb
je 0x994b5c
push 0x462
jmp 0x896c66
je 0x7495d7
fild dword [ebp - 0x10]
fstp qword [ebp - 0x20]
jmp 0x9e3585
push ebp
and ebp, esi
test ax, bx
mov ebp, esp
cmc
clc
sub esp, 0x48
jmp 0xa54002
mov eax, dword [eax]
jmp 0x7e78df
test ebx, ebx
jmp 0x9807a8
call dword [eax + 0x20]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x621fea
mov eax, 0x52fe24
jmp 0xa27ab8
mov eax, dword [eax]
jmp 0x7f7c65
jne 0x70a277
mov eax, 0x52fe24
movzx ebx, si
push eax
push 1
not bx
mov ebx, 0x465200
jmp 0x93eff1
fstp qword [ebp - 0x3c]
jmp 0x42bb20
jmp 0x79e031
push eax
jmp 0xa10268
test ebx, ebx
jmp 0x9f45fa
cmp dword [ebp + 0x14], 0
jmp 0x8447ee
jne 0x74f514
mov eax, 0x52fe24
push eax
bswap bx
push 3
mov ebx, 0x4668e0
call fcn.00464ca3
lea esp, [esp + 0x28]
clc
stc
cmc
mov dword [ebp - 0x2c], eax
push 0
push 0
shl al, 0xc6
cbw
or ah, dl
push 0
xor ax, di
lahf
push 0x80000301
shrd ax, bp, 0xb3
push 0
sar ax, 0xe5
sub al, 0x14
push 3
btr ax, 0x31
push reloc.WS2_32.dll_getpeername
or ax, bx
push 0
rcr eax, cl
btr ax, 0xc2
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x8992d6
mov eax, 0x52fe24
mov bx, 0x4807
jmp 0x8992d6
mov eax, dword [eax]
jmp 0xa46f6d
jne 0x769dbd
mov eax, 0x52fe24
cmovs bx, cx
push eax
movzx ebx, sp
push 1
jmp 0x6bf038
call fcn.00401e07
mov dword [ebp - 0x14], eax
bts ax, ax
btr eax, 0xea
sub dword [ebp - 0x14], 0xa
push reloc.WS2_32.dll_getpeername
cmp ah, 0x3a
btr eax, 0xf
push 0
add ax, bp
sar eax, cl
bswap ax
mov eax, dword [ebp - 8]
test esi, edx
test eax, eax
jmp 0x70a269
mov eax, dword [eax]
call dword [eax + 8]
lea eax, [ebp - 8]
jmp 0x723a40
push eax
movsx ebx, di
and ebx, edx
mov ebx, dword [ebp - 8]
test ebx, ebx
jmp 0x9296f5
call fcn.00464c9d
lea esp, [esp + 4]
sar bx, cl
sbb bh, ch
mov ebx, dword [ebp - 0x18]
cmp edi, 0x3a8d5025
clc
test ebx, ebx
jmp 0x96a734
je 0x7b313e
push ebx
jmp 0x7b3130
jne 0x621fea
push dword [0x59b4a4]
setl al
xchg ah, ah
push 0x59b4a0
lahf
not eax
push 0x59b49c
setp al
mov eax, dword [esp]
jmp 0x6e4e88
call dword [eax + 0xc]
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
stc
jmp 0x6e6a71
push dword [ebp - 0x28]
movzx bx, bh
jmp 0x9ffdfa
call fcn.00464c9d
add esp, 4
pop eax
cmp bp, sp
mov dword [ebp - 8], eax
push reloc.WS2_32.dll_getpeername
shl eax, cl
bsr eax, esp
push 0
bsr eax, eax
mov eax, dword [ebp - 8]
cmp ax, 0x68e1
test eax, esp
test eax, eax
jmp 0x9f4405
mov eax, dword [eax]
jmp 0x6ea59b
mov eax, 2
mov esi, esi
lahf
mov eax, 5
movsx ax, ah
mov eax, 6
lahf
rdtsc
popal
jmp 0x85e7f4
call fcn.00464ca3
add esp, 0x10
movsx cx, cl
mov dword [ebp - 0x34], eax
jmp 0x8fea0e
mov eax, dword [eax]
jmp 0x907014
mov eax, dword [eax]
jmp 0x7b2114
push eax
push 1
movsx ax, ah
mov eax, ebp
setle ah
push 0x186a0
push 0x59b49c
cmova ax, di
mov eax, dword [esp]
jmp 0x6edf41
je 0x79e031
mov dword [ebp - 0x40], eax
cmp esi, 0x572d1a3e
stc
cmp ecx, 0x80000501
jmp 0x843d3a
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
jmp 0x7d52be
call fcn.00464ca3
add esp, 0x10
xchg ebx, ebx
movzx bx, cl
setp bh
push 0x80000301
xchg bx, bx
mov ebx, eax
movsx ebx, si
push 0
push eax
setge bh
push 1
mov bl, 0x95
jmp 0xa0a34b
call fcn.00464c9d
lea esp, [esp + 4]
cbw
xchg edx, eax
mov ecx, dword [ebp - 0x30]
rcr eax, 0x3a
test eax, 0x118b799a
mov edx, dword [ebp - 0x34]
setg al
ror ah, 0xd7
cbw
mov eax, dword [ebp - 0x38]
cmp ecx, 0x80000101
jmp 0x6982d8
pushal
rdtsc
mov eax, 1
movsx eax, ax
mov eax, 2
mov eax, 4
mov eax, 2
mov eax, 5
movsx esi, cx
cwd
mov eax, 4
jmp 0x7ef548
je 0x860c52
cmp ecx, 0x80000601
jmp 0x6c720d
jne 0x7b2119
push 0x59b49c
mov ah, 0xcc
mov eax, dword [esp]
jmp 0x7f88ce
mov dword [ebp - 0xc], 0
jmp 0x90ca15
push 4
jmp 0x8681b8
push edx
mov ax, dx
mov edx, 1
cbw
cmovne dx, sp
mov edx, 2
cdq
mov edx, 0x576e4179
movzx eax, ax
mov edx, 4
cwd
bswap edx
xchg edx, eax
mov edx, 2
cdq
sets dh
mov edx, 5
cdq
mov edx, 4
lahf
cbw
cmovne edx, esp
mov edx, 2
cwde
mov edx, 5
movzx edx, sp
cbw
mov edx, 5
movzx eax, di
pop edx
lahf
bswap eax
setle al
push 0x59b49c
bswap ax
cbw
mov eax, dword [esp]
jmp 0x75ac79
call fcn.00464c9d
add esp, 4
lahf
mov ax, di
lea eax, [ebp - 0x38]
push eax
cmovnp eax, eax
cwde
push 0x59b49c
jmp 0x823bc1
fld dword [ebp - 0x40]
jmp 0x6bd1e7
je 0x7495d7
push 0
push 0
push 0
jmp 0x6bc458
fld qword [ebp - 0x28]
call fcn.00401e07
push 0x80000301
jmp 0x96ce4a
jne 0x8a6ba6
cwde
jmp 0x712645
push 0x4084831
push 2
jmp 0x8b6cfd
push eax
movsx ebx, ax
push 3
setb bh
movzx bx, bl
mov ebx, 0x4666e0
jmp 0x8f20fc
fld qword [ebp - 0x2c]
jmp 0x9627fc
cmp ecx, 0x80000301
je 0x79e031
cmp ecx, 0x80000401
jmp 0x807e8e
fild dword [ebp - 0x10]
jmp 0x95367d
mov esp, ebp
cmovl bp, dx
pop ebp
jmp 0x8f7839
call fcn.00464ca9
add esp, 0xc
jmp 0x860c52
je 0x7495d7
push 1
jmp 0x6439ad
call fcn.00464ca3
lea esp, [esp + 0x28]
rcl bh, cl
or bx, dx
btc bx, 0x6c
mov dword [ebp - 0x38], eax
mov bx, sp
seto bh
neg bh
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], ecx
neg ebx
or bh, 0x8f
mov ebx, dword [ebp - 0x2c]
stc
cmc
test ebx, ebx
jmp 0x9cf12a
push 1
setne bh
mov ebx, 0x465200
jmp 0x9944d9
ret 0x14
push dword [ebp - 4]
push dword [ebp - 0x34]
mov cx, di
movsx cx, cl
push 0x53066a
mov ecx, 3
jmp 0x92ae21
call dword [eax + 0x10]
mov dword [ebp - 0x1c], eax
shrd ebx, ecx, 0x3f
test di, sp
mov eax, dword [ebp - 0x1c]
jmp 0x7b2158
mov dword [ebp - 0x10], 0
jmp 0x9f34d4
jmp 0x79e031
je 0x7e55a3
push ebx
jmp 0x7e559b
call fcn.00405e55
add esp, 0xc
or ebx, 0x76f648f6
mov dword [ebp - 0x38], eax
stc
setns bh
mov ebx, dword [ebp - 0x34]
cmp ebp, esp
test ebx, ebx
je 0x85fa76
push ebx
jmp 0x85fa6a
mov ebx, 0x466a50
jmp 0xa44274
jne 0x931b2e
mov eax, 0x52fe24
setle bh
movzx bx, cl
mov bl, cl
push eax
push 3
jmp 0x92e0f2
call fcn.00464ca3
add esp, 0x10
mov dword [ebp - 0x1c], eax
jmp 0x8af14e
fstp qword [ebp - 0x24]
jmp 0x9b8622
fsub qword [0x530085]
jmp 0x66e2a6
push 1
setb bl
cmovg ebx, edx
movsx ebx, dx
mov ebx, 0x465b80
jmp 0x82dede
je 0xa17c2b
push ebx
call fcn.00464c9d
add esp, 4
bswap ax
jmp 0xa17c2b
push 0
cmp di, 0x6be6
cmc
push eax
test ax, si
xor ax, si
push reloc.WS2_32.dll_getpeername
mov eax, esp
xor eax, 0x29b82edf
push 0
mov eax, dword [ebp - 8]
test bl, al
test si, 0x1583
test eax, eax
jmp 0x74f509
je 0xa57b04
push ebx
jmp 0xa57afb
call fcn.00464ca3
lea esp, [esp + 0x10]
stc
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jmp 0x863a2a
mov dword [ebp - 0x3c], edx
jmp 0x9f5da9
je 0x9a81e2
push ebx
call fcn.00464c9d
lea esp, [esp + 4]
bsr ebx, edi
bt bx, cx
mov ebx, dword [ebp - 8]
test di, di
cmp di, 0x3d8
test ebx, ebx
jmp 0x7b82ba
fld qword [ebp - 0x24]
jmp 0x9f8b2a
je 0x8318ed
push ebx
jmp 0x8318e1
fld qword [ebp - 0x20]
fadd qword [0x530678]
jmp 0x6bd277
call dword [eax + 0x18]
mov dword [ebp - 0x20], eax
cmp si, 0xe2d
clc
stc
cmp dword [ebp - 0x20], 0
jmp 0x7d090a
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
jmp 0x836db2
jne 0x9f4410
mov eax, 0x52fe24
push eax
jmp 0x8f2777
je 0xa21230
push ebx
jmp 0xa21225
fld qword [ebp - 0x40]
jmp 0x79e02c
fadd qword [0x530188]
fstp qword [ebp - 0x2c]
jmp 0x8998c9
push dword [ebp - 0x2c]
jmp 0x967d7f
mov ebx, 0x4665a0
jmp 0x7f5821
call fcn.004129d4
mov dword [ebp - 0x1c], eax
adc eax, esi
bts ebx, esp
rcr ebx, cl
mov eax, dword [ebp - 0x1c]
adc bh, ah
nop
nop
nop
nop
nop
rcl bl, 0xa0
or bh, 0x4d
setno bh
nop
and bl, al
neg bh
nop
not ebx
xchg bl, bh
nop
add bh, 0x87
sub ebx, esi
movzx ebx, di
nop
shld ebx, esp, 0xaa
nop
cmp eax, esi
shld bx, cx, 0x8d
nop
xor bh, 0xfa
ror bh, 0xf4
nop
movzx bx, ch
nop
rol bh, 0xf1
nop
dec bx
or bh, cl
nop
btr bx, 0xf8
btr ebx, eax
nop
nop
and bx, bp
nop
nop
rol ebx, 0x21
sub bh, ch
nop
btr bx, 0x9c
bt bx, 0xc4
mov bh, 0x10
nop
xchg bx, bx
shld bx, di, 0x13
nop
cmp ebx, 0x59165f7a
xor bl, ah
bt ebx, 0x99
nop
shld bx, bp, 0x8d
nop
xchg bl, bl
not bx
nop
not bh
nop
nop
nop
clc
rol ebx, 0xee
nop
bswap ebx
nop
btc ebx, ecx
btr bx, di
nop
nop
nop
btc ebx, ebp
bswap bx
shld bx, bx, 0x49
nop
nop
test bp, si
mov bx, 0x48d7
nop
nop
nop
nop
mov bh, 0x73
nop
nop
rol bx, 0x21
test sp, 0x4b04
nop
inc ebx
sub bx, 0x2836
shld bx, ax, 0xc
nop
nop
or bh, 0xd
cmp dx, ax
adc ebx, 0x52e847f2
nop
clc
mov bl, 0x3b
rol ebx, cl
nop
dec ebx
test ecx, 0x733a5010
push eax
xor ebx, 0x32886f29
adc bx, 0x615e
bswap ebx
mov ebx, dword [ebp - 4]
test ebx, ebx
jmp 0x9a81cb
push 0x80000301
push 0
jmp 0x85b75c
pop eax
jmp 0x8b587d
call fcn.00464c9d
lea esp, [esp + 4]
inc ah
pop eax
clc
mov dword [ebp - 4], eax
movsx eax, bx
push reloc.WS2_32.dll_getpeername
btc eax, eax
shr al, cl
cmc
push 0
btc eax, 0xc1
mov eax, dword [ebp - 4]
cmp bx, di
stc
test eax, eax
jmp 0x769dae
jmp 0xa1036b
call fcn.00464ca3
lea esp, [esp + 0x28]
mov dword [ebp - 0x10], eax
clc
cmc
cmp dword [ebp - 0x10], 0xffffffff
jmp 0x6cdfe6
mov eax, dword [eax]
jmp 0x9e42ab
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
jmp 0x856296
call fcn.00464c9d
lea esp, [esp + 4]
cmp dword [ebp - 0x3c], 0
jmp 0x8c8383