Function at 0x7df9ee
Capabilities:
Execute anti-debugging instructions

Disassembly:
pop ax
mov eax, dword [esp]
lea esp, [esp + 2]
jmp 0x7df870
btc eax, edx
jmp 0x7df848
lea esp, [esp + 2]
jmp 0x7df870
jns 0x7df813
pop ax
mov eax, dword [esp]
jmp 0x7df82e
call 0x7df87f
bts ax, dx
lea esp, [esp + 4]
not dl
jmp 0x7df8c7
not dl
stc
jo 0x7df851
jno 0x7df851
pop edx
rcl byte [esi + 0x31], 0xc0
add eax, 0x9e0fccfd
rol cl, 0xd8
sbb ecx, ebp
cdq
add byte [eax], al
add byte [esi - 0x1d], al
jae 0x7df8a4
in eax, 0x5d
mov esp, 0x2cddba24
pushfd
retf 0xc151
bt eax, eax
btr ax, ax
pushfd
jmp 0x7df8ee
btc ax, di
jne 0x7df8b1
btr ax, ax
pushfd
mov byte [esp + 1], bh
mov ax, word [esp + 3]
push dword [esp]
jmp 0x7df900
mov byte [esp + 1], bh
mov ax, word [esp + 3]
push dword [esp]
jmp 0x7df900
mov ah, 0x43
rol dl, 0
jmp 0x7dfa1d
mov eax, 0x8920a1e8
call 0x7df97a
and dword [ecx], reloc.KERNEL32.dll_FreeLibrary
loopne 0x7df97f
invalid
xchg dword [esp], eax
jmp 0x7df960
jmp 0x7df932
inc ebp
not al
neg al
jge 0x7df99f
jl 0x7df989
popal
loopne 0x7df9cc
adc eax, esp
pop edi
cdq
sbb eax, 0xe427d48d
in al, dx
add bl, dl
mov ah, 0x62
lea eax, [eax + edi]
mov ah, byte [esp]
mov al, ch
jmp 0x7df94a
btr eax, esi
jle 0x7df948
xchg dword [esp], eax
jmp 0x7df960
mov edx, ebp
neg dx
mov dl, cl
jmp 0x7df9d8
shr ebx, 1
inc esi
xor dh, byte [esi + 0xbe4324]
and byte [ebx + 0x1cad5e3b], ch
dec esi
mov edx, ebp
neg dx
mov dl, cl
mov dh, 0x55
call 0x7df9af
fnstcw word [eax]
sub esp, 0x13
jmp 0x7dfa53
neg dl
xchg byte [esp + 0x12], dl
lea esp, [esp + 3]
lea esp, [esp + 0x14]
xor cl, 0xd9
shr edx, cl
jnp 0x7e1126
mov edx, dword [ebp + 0x17]
add byte [eax], al
jp 0x7dfee5
jb 0x7df98f
mov dh, 0x55
push ebp
call 0x7dfa04
in eax, dx
jge 0x7df9e7
div dword [ecx]
jne 0x7df9e5
insb byte es:[edi], dx
or eax, dword [esi]
mov eax, 0x8a41d64f
xor al, 0x24
xchg dword [esp + 4], ebp
bsr eax, ebx
call fcn.007dfa51
leave
inc edi
xlatb
mov dl, 0x41
sti
jp 0x7df992
adc al, 0x9d
add byte [eax], al
add byte [eax], al
mov ax, word [esp]
call 0x7df9ee
pop esi
aad 0x45
sub al, 0xdf
sbb eax, esp
ja 0x7dfa7b
jge 0x7df90b
mov eax, 0x8920a1e8
jmp 0x7df910
je 0x7df9b8
neg dl
xchg byte [esp + 0x12], dl
jmp 0x7dfaa0
lcall 0x34b6, 0x8f99e08
movsd dword es:[edi], dword [esi]
xor eax, 0x5419af5c
invalid
lea esp, [esp + 3]
jmp 0x7df9c2
rdtsc
jmp 0x7dfb1e
pushal
mov ah, 0xc
mov ax, 0xa9c7
jmp 0x7dfe1a
jns 0x7dfe0f
rdtsc
mov ah, ch
jmp 0x7dfad8
ror cl, 0
mov ah, byte [esp]
mov ax, word [esp]
shl dh, 1
jns 0x7dfd12
js 0x7dfb48
push 0xfffffffffffffff8
lahf
push 0xffffffffffffffda
or ecx, dword [ebp - reloc.KERNEL32.dll_FreeLibrary]
int1
mov edx, 0x1aaabb90
lea esp, [esp + 0x20]
xor cl, 0x64
mov edx, 0x1aaabb90
mov dx, sp
sets al
jmp 0x7dfb03
mov edx, dword [esp]
jmp 0x7dfbb0
lea eax, [edx*4]
rcl dh, 0
setno dh
jmp 0x7dfb32
lea eax, [edx*4]
rcl dh, 0
setno dh
mov edx, dword [esp]
call fcn.007dfb6d
lea edi, [edi + 1]
mov edx, 0x5348f6bd
lea edx, [edx + 0x31]
mov dl, byte [esp]
btr dx, si
mov ax, bp
jmp 0x7dfbff
lea esp, [esp + 2]
push dword [esp + 0xc]
ret 0x10
xchg dword [esp], edi
setns dl
sub eax, ebp
sub esp, 0x12
sub dl, 0xc8
add esp, 4
jmp 0x7dfbe9
jmp 0x7dfba0
rdtsc
mov ah, ch
pushal
mov ah, 0xc
mov ax, 0xa9c7
mov eax, esi
jmp 0x7dfac2
lea edx, [ecx + ebp]
mov al, bh
jmp 0x7e0218
lea eax, [ebp*4]
xchg ah, al
neg dx
jmp 0x7dfeaf
lea eax, [ebp*4]
xchg ah, al
neg dx
lea edx, [ecx + ebp]
mov al, bh
add cl, 0xa1
rcl al, cl
jmp 0x7dfaf7
jmp 0x7e0207