Function at 0x6befab
Capabilities:
Execute anti-debugging instructions

Disassembly:
push 0xf06aded0
jmp 0x6befb7
push eax
push sp
mov byte [esp + 7], dl
pop dword [esp]
jmp 0x6beff7
jmp 0x6befd9
stc
je 0x6bf020
xchg ebx, edi
jmp 0x6bf022
lea ecx, [esp - 0x80]
mov cx, dx
jmp 0x6bf00a
pushfd
lea esp, [esp + 2]
mov dword [esp + 4], edi
lea esp, [esp + 4]
pushfd
jmp 0x6be9ec
lea esi, [esp]
mov edi, 0xbdddb57c
mov di, 0x747b
rdtsc
jmp 0x6bf0aa
xchg ebx, edi
mov ebp, dword [esp + 0x2c]
jmp 0x6befe0
sub esp, 0
lea ebx, [esi*4]
not ebx
jmp 0x6bf0cf
jmp 0x6bf04a
mov ecx, ebp
lea ebx, [ebx*4]
mov ax, bx
mov ebx, edx
rcr ax, cl
jge 0x6bf060
sub esp, 0
lea ebx, [esi*4]
not ebx
sub esp, 0x1c
bt dx, cx
jmp 0x6bf0d6
sub esp, 0xc0
mov edi, esp
setle dh
mov ah, 0xe2
jmp 0x6bf077
xchg word [esp + 0x14], bx
jmp 0x6bf0dc
sub esp, 0x1c
bt dx, cx
mov bx, di
clc
jmp 0x6bf0f6
lea esp, [esp + 0x1c]
not ebp
inc eax
jp 0x6bf11e
jnp 0x6bf0ff
loop 0x6bf149
not byte [ecx - 0x62e328a0]
or eax, 0x6c66a754
jg 0x6bf13c
js 0x6bf0b9
xchg word [esp + 0x14], bx
jmp 0x6bf0dc
mov al, 0xb0
jmp 0x6bf120
jmp 0x6bf137
mov al, byte [esp + 3]
neg al
mov dx, 0x7f32
jmp 0x6bf17b
mov al, 0xb0
xor ebp, 0x39022995
rdtsc
sub esp, 0x13
jg 0x6bf103
mov dl, byte [esp + 0xa]
jmp 0x6bf105
mov dl, byte [esp + 0xa]
mov al, byte [esp + 3]
inc esp
and al, 3
neg al
mov dx, 0x7f32
mov bh, byte [esp + 9]
mov eax, dword [esp + 0xc]
jmp 0x6bf165
lea esp, [esp + 3]
jmp 0x6bf181
mov bh, byte [esp + 9]
jmp 0x6bf149
lea esp, [esp + 0x10]
dec ebp
bswap eax
sbb ebx, ebp
jnp 0x6bf598
jp 0x6c001f
cli
aad 0x23
rol byte [eax + 0x7f15541d], 1
sbb eax, 0x1d8647d9
std
inc ebx
jg 0x6bf1c5
xchg ebp, eax
and al, byte [esi - 0x7c4bd2e3]
sbb eax, 0x1d865d57
mov esi, 0xb81d7f20
or al, 0x80
sbb eax, 0x1d824c80
mov esi, 0xce1d7f20
rol dword [ebx - reloc.PSAPI.DLL_GetMappedFileNameW], cl
sbb eax, 0x1d7f1554
sub esp, dword [esi]
sbb byte [0x1d84273e], 0xae
dec edi
test byte [0x1d80c415], bl
mov esi, 0x631d7f20
adc al, byte [ecx - 0x7dfdf3e3]
sbb eax, 0x1d815f00
in eax, 0x77
sbb dword [0x1d7f1554], 0x1d816e5c
das
dec ebx
test byte [0x1d871764], bl
js 0x6bf271
test byte [0x1d7ff529], bl
cmp byte fs:[eax + 0x7f681c1d], al
sbb eax, 0x1d867dc8
or esi, dword [esi - reloc.PSAPI.DLL_GetMappedFileNameW]
sbb dword [0x1d7f1554], 0xffffffa8
mov ebx, 0xf021d7f
test byte [0x1d7f1554], bl
inc ebx
idiv dword [edi + 0x1d]
xchg edx, eax
mov dword [edi + 0x1d], edi
push esp
adc eax, 0xe5e71d7f
test dword [reloc.PSAPI.DLL_GetMappedFileNameW], ebx
mov esi, 0x2a1d7f20
and bh, byte [edi + 0x1d]
movsb byte es:[edi], byte [esi]
push 0x15541d7f
jg 0x6bf271
mov esi, 0xe81d7f20
push 0x1c931d7f
sbb dword [0x1d816bdd], 0xffffffe4
cmc
sbb dword [0x1d843107], 0x30
and al, 0x84
sbb eax, 0x1d7f20be
and byte [edi + 0x1d], bh
call 0x378973da
push eax
test byte [0x1d862af2], bl
push edx
rol byte [ebx + 0x7f15541d], 1
sbb eax, 0x1d7f7957
mov bl, 0xec
sbb dword [0x1d7f8f9a], 0x1d8074cf
push eax
mov eax, dword [ebx - reloc.PSAPI.DLL_GetMappedFileNameW]
sbb eax, 0x1d7f20be
retf 0x8265
jmp 0x6c0520
lea ebx, [ecx + ebp]
xor ax, ax
jmp 0x6bf7d4
not bx
lea ebx, [ecx + ebp]
xor ax, ax
inc ebp
lea ebx, [ecx + ebx]
lea edx, [edx + ebp]
rcr bh, 4
jg 0x6bf7cb
not bx
jmp 0x6bf789
setp al
mov ah, dl
jmp 0x6c0525
setp al
mov ah, dl
ror ebp, 0
not dx
jmp 0x6bfed8