Function at 0x6ff498
Capabilities:
Execute anti-debugging instructions
Resolve function by parsing pe exports

Disassembly:
mov dword [ebp + edx - 0x1798b2], ecx
add eax, 0xe69d98ad
movsx ecx, al
cdq
jbe fcn.006d770b
pop es
mov ebx, 0x8f14f6e3
add ch, cl
or byte [edx + 0xb], cl
or esi, dword [esi - 0x16]
adc al, 0xb9
out dx, al
bound ecx, qword [ecx]
xor eax, 0x6a16195
call 0x3d44ce39
sbb byte [ecx - 0x56], 0x67
xor dword [ebp - 0x67], esi
sbb bh, dh
sbb al, 0x6e
or edi, 0xffffffc6
sbb edx, dword [eax]
or dl, bl
adc dword [ebp - 0x1d67f7a7], 0x33
xor al, byte [edi - 0x20]
mov bl, 0xfe
mov esp, 0x41c09bc8
sbb byte [ecx], 0x93
sub dl, ch
mov al, byte [0xdb5f96b7]
dec ebx
sub byte [eax + 0x7bf5ca37], ch
in al, 0x18
cmp eax, 0x16981124
push es
dec eax
and al, 0xf5
aaa
push cs
sub dword [edi + 0x39d2b367], edx
cwde
hlt
push edx
jmp 0x668935
jne 0x686568
xor edi, edi
jmp 0x5becbb
call fcn.004128d0
test eax, eax
jmp 0x5a7d85
call fcn.00417e10
mov eax, dword [esi + 4]
not di
mov dword [ebp - 0xa4], eax
mov edi, dword [ebp - 0x80]
cmp ebp, ebx
cmc
jmp 0x7493b3
je 0x67ca3b
lea edx, [ebp - 0x2c]
lahf
not ax
push edx
mov eax, dword [ebp - 0x34]
push eax
lahf
mov edx, dword [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x38]
xchg esi, esi
bswap esi
push eax
bswap esi
push ecx
movsx esi, si
mov esi, dword [ebp - 0x1c]
call fcn.004347c0
mov esi, eax
cmovnp ecx, edi
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x48]
jmp 0x5c9de1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
jmp 0x753aa9
xchg dl, cl
jmp 0x6c0494
jmp fcn.0068657e
push ecx
jmp 0x70fbeb
lea ebx, [ebp - 0xb4]
xchg ah, al
mov ah, 0xba
cwde
lea eax, [ebp - 0x80]
jmp 0x5b4bc1
test edi, edi
jne 0x5d1a9d
call fcn.0043b6ab
cmp ebx, dword [edi + 4]
jmp 0x5eaa94
xor edx, ecx
xor eax, ebx
sub eax, 0x2c9516ad
jmp 0x61c024
jnp 0x5d2fb0
mov ecx, 0x251af09d
or ecx, ecx
mov edx, dword [esi + ecx*2 - 0x4a35e13a]
rol ecx, 0x2d
lea esi, [esi + ecx - 0x5e13a49f]
btr cx, cx
xor edx, ebx
shl ecx, cl
jns 0x68e711
lea eax, [ecx + ecx*2 + 0x2f140f9e]
lea edx, [ecx + edx - 0x3f01446a]
btc eax, ecx
dec cl
bt ecx, eax
not edx
rol edx, 1
bswap ecx
dec ecx
lea edx, [edx + ecx*4 + 0x6a8c2dde]
shr cx, cl
sbb eax, eax
lea eax, [eax + ecx*2 + 0x603fd920]
xor ebx, edx
bt eax, eax
adc ebp, edx
mul ecx
mov ax, word [edi + ecx - 0x17250001]
sal dx, 9
mov dx, word [edi + ecx - 0x1724ffff]
mov cl, byte [edi + ecx*2 - 0x2e49fffe]
adc edi, 4
shrd ax, dx, cl
mov word [edi], ax
jmp fcn.005a91c1
or esi, 1
jmp 0x74f077
je 0x5e7967
cmp edi, esi
je 0x5e796c
call fcn.0043b6ab
mov ebx, dword [ebp - 0x7c]
clc
jmp 0x63afac
jne 0x5eaa9f
call fcn.0043b6ab
mov esi, dword [ebp - 0x90]
jmp 0x67beb1
jne 0x5b3a7e
call fcn.004128d0
test eax, eax
jmp loc.00404f65
push edi
jmp 0x620012
jne 0x60fee8
mov ecx, dword [ebp - 0x3c]
cbw
mov dword [ebp - 0x60], ecx
xchg bh, bh
lea ebx, [ebp - 0x60]
cmovnp ax, sp
mov eax, 0xfb0704a1
mov eax, esi
jmp 0x73d552
mov dword [ebp - 0x90], esi
test di, cx
mov dword [ecx + 0xd0], eax
cmp byte [ebp - 0x4d], 0
jmp 0x5b87af
add eax, esi
jmp loc.00434695
not eax
dec cl
dec eax
bts edx, 0x33
jae 0x686b4d
bswap eax
shr edx, 0xb4
imul dx, dx
xor ebx, eax
add edi, eax
sar ecx, cl
jne 0x7379b9
push esi
push edi
jmp 0x6a6cee
cmp ebx, dword [ebp - 0xa4]
jmp 0x70146d
lea esi, [esi + edx*4 - 0x174]
jns 0x5d3a58
mov eax, 0x5737ac02
call fcn.00659cf6
mov ecx, dword [esi]
mov eax, 0xc72b971e
add esi, 4
xor ecx, ebx
lea edx, [eax*8 - 0x55f81bf3]
xor ecx, 0xec85b188
sar edx, 0xe1
neg ecx
bswap ecx
neg edx
cdq
xchg edx, eax
xor ecx, eax
xor ebx, ecx
bts edx, edx
add edi, ecx
movzx eax, byte [esi]
or edx, edx
mov ecx, edx
jae 0x701423
push edi
call fcn.00439fc3
add esp, 0x14
jmp 0x5f4637
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [ebp - 0x44], 0
dec bh
mov ebx, dword [ebp - 0x28]
ror edi, 0x14
xor si, bp
mov edi, dword [ebp - 0x38]
mov esi, dword [ebp - 0x20]
and esi, 6
jmp 0x5dd413
mov edi, dword [ebx + 0x36c]
mov ecx, dword [edi + 0x3c]
xor bh, 0xaf
shr bl, 0x84
bts ebx, esi
lea ecx, [ecx + edi]
mov ebx, esi
cmp word [ecx + 0x18], 0x20b
jmp 0x5f0f3e
xor esi, dword [ebx + 0xc]
clc
cmp ebx, dword [edi + 4]
jne 0x67bec3
call fcn.0043b6ab
mov eax, dword [ebp - 0x54]
xor eax, dword [ebx + 0xc]
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x28]
jmp 0x6e308a
mov byte [ebp - 4], 4
cdq
mov edx, dword [ebp - 0x48]
jmp 0x5a5d1d
je 0x66fbac
mov eax, dword [ebx + 0x36c]
stc
jmp 0x615e41
call fcn.0043aa75
mov ecx, dword [ebx + 8]
add esp, 0x10
jmp 0x43469d
mov ecx, dword [eax + 0xc]
shrd bx, bx, 0xbc
and ebx, ebx
sub ecx, dword [eax + 0x14]
sub edi, ecx
add edi, esi
shrd ax, ax, 0x82
ja 0x721c3c
lea ecx, [edx + edx*2 + 0xa176297]
mov ecx, dword [edx + esi - 0x5159fb1]
lea esi, [edx + esi - 0x5159fad]
call fcn.006d66cd
xor ebx, eax
jmp 0x5bcec3
add byte [eax], al
add al, ch
dec edi
aas
or byte [eax], al
call fcn.00712665
mov edx, 0x2c88ee28
movsx ecx, dx
or cl, dh
movzx ecx, byte [ebp + edx - 0x2c88ee28]
lea ebp, [ebp + edx - 0x2c88ee27]
mov eax, 0xfa3b40ac
xor cl, bl
not eax
not eax
inc cl
dec dx
ror cl, 1
dec cl
call fcn.005ee9a3
sub ecx, ebx
imul eax, dword [esi + ecx*2 + 0x6d], 0xffffffd9
xchg ecx, eax
fld xword [edi - 0x2c3c4ec8]
lodsd eax, dword [esi]
pushfd
bound ecx, qword [eax]
xchg edi, eax
mov cl, 0x28
or esi, edx
jnp 0x68e7b0
jo 0x68e74f
out 0xb5, eax
scasd eax, dword es:[edi]
ja 0x68e70e
shl ebp, 0xaf
scasd eax, dword es:[edi]
adc byte [esi + 0x47bdb3a1], bh
or ebx, dword [esi - 0x4c3c16b1]
les eax, [ebp - 0x28e97c1e]
pop esp
xchg ebp, eax
jge 0x68e76c
movsb byte es:[edi], byte [esi]
mov byte [esi - 0x704c1583], ch
add al, 0x7f
lodsd eax, dword [esi]
push es
wait
fldenv [0x94d05b93]
hlt
push es
sbb cl, bl
fisubr dword [esi]
mov bl, byte [edi - 0xe]
dec edx
rol dword [ebx + 0x24], 1
std
and ecx, edx
xchg edi, eax
mov al, byte [0xba0e2ea8]
popfd
lodsb al, byte [esi]
fadd qword cs:[esi + 0x2b]
sar dword [edi], 1
cdq
inc ebp
inc eax
mov al, byte [0xb96aef87]
mov cl, 0xfd
int1
nop
push eax
adc byte [ecx - 0x5badd13e], bl
pop edx
or dword [edx + 0x4e], ebp
dec eax
sbb edi, edx
xchg byte [eax + 0x48e6f074], dh
push eax
imul edi, dword [edx + 0x535018c0], 0x2c
mov edi, 0xd4694c5c
push ss
ja 0x68e7b1
lahf
dec ebx
invalid
je 0x60fee8
cmp dword [ebp - 0x70], 0
jmp 0x6031e0
jmp fcn.006d770b
push eax
jmp 0x6f636d
add esi, eax
mov edx, dword [ebp]
lea eax, [ecx - 0x1f0dcd8]
not ecx
ror al, 2
mov al, byte [ebp + ecx - 0x55fb]
xor ecx, ecx
adc ecx, ecx
lea ebp, [ebp + ecx*2 + 6]
bts cx, 0xaa
btc ecx, 0x27
mov byte ss:[edx + ecx - 0x480], al
setb cl
jmp esi
jmp 0x5cf561
xor esi, dword [ecx + 0x15c]
cmc
jmp 0x60934b
mov dword [ebx + 8], eax
jmp 0x6852af
xor eax, ebx
call fcn.007563ea
xor cl, 0x96
mov eax, dword [esi]
movsx edx, cl
ja 0x6572a3
sub edi, 4
mov ecx, 0xe3058826
sar ecx, cl
mov eax, dword [edi]
lea edx, [ecx - 0x17eeb953]
adc cx, 0x1808
dec ecx
xor eax, ebx
rol ecx, 0xd0
xor eax, 0x559b44bf
lea eax, [ecx + eax + 0x79fa7915]
shr cx, 0x4f
add dl, cl
bswap eax
call fcn.005cdc55
movzx ecx, ax
add ax, ax
not edx
sar ecx, cl
neg ax
mov dword [esp + eax - 0x122ab9e8], 0xc101bb22
rol edx, 2
rol eax, 0x4e
cwde
dec edx
and cx, 0x8192
ror edx, 3
jmp 0x71d1c5
adc esi, 1
xor al, bl
dec dl
rol ecx, cl
neg al
ror edx, cl
xor al, 0x24
bts dx, dx
sar cx, cl
sbb al, 0x32
not al
lea edx, [edx + edx + 0x45a8d009]
imul dx, dx
btr edx, edx
neg al
xor bl, al
add eax, esp
shr edx, cl
mov ecx, dword [eax + edx*8 - 0xbcc590]
lea ebp, [ebp + edx - 0x1798b6]
movsx eax, dl
jne 0x437c6c
jne 0x5d1a90
cmp dword [ebp - 0x4c], 0
jmp 0x6a1985
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [ebp - 0x44], 0
jmp 0x5bc943
xor edx, 0xf0334dbc
ror dword [esp + eax - 0x486], 0x5d
pop eax
call fcn.0067e9af
mov edx, dword [esi + ecx - 0x300000ff]
lea esi, [esi + ecx - 0x300000fb]
xor edx, ebx
sar ecx, 0xdc
not edx
shl cl, 0xa7
ror edx, 1
lea edx, [ecx + edx + 0x1d11b8b2]
xor ax, 0xa1be
btc ecx, eax
neg edx
lea edx, [edx + ecx - 0x45881e1f]
inc ecx
ror cx, 0x4f
neg edx
and eax, 0x549145bb
not edx
shr cl, cl
xor edx, 0xc186c7b6
rol ax, 0xa1
xor ebx, edx
add edi, edx
mov edx, eax
jmp 0x6a6156
xor esi, dword [ebp - 0x90]
jmp 0x72af7d
cmp dword [ebx + 0x360], 0
jmp 0x67eac0
and esi, 0x7ffffff
cmc
mov dword [ebp - 0x68], 0
jmp 0x729051
jmp edi
call fcn.00417d70
mov dword [eax], 1
jmp 0x6dea77
test edi, edi
jmp 0x5e7959
shl esi, 0x1c
cmp dx, 0x9e90
add esi, dword [ebp - 0x3c]
cmp bl, bh
mov dword [ebp - 0x24], esi
xchg si, si
or esi, 0x20a0292c
mov esi, dword [ebp - 0x54]
jmp 0x72324e
call fcn.00402e30