Function at 0x7fc559
Capabilities:
Execute anti-debugging instructions

Disassembly:
and dword [ebp - 4], 0
jmp 0x786376
mov edx, dword [ebp - 4]
jmp 0x7863c7
push sp
mov word [esp], bx
lea esp, [esp + 2]
jmp 0x7fc8dd
test edx, edx
jmp 0x7fc165
jmp 0x7fc29b
mov ebx, dword [edx + 0x10]
call 0x7fc1f9
lea esp, [esp + 4]
test ebx, ebx
jmp 0x7fc2e4
mov ebx, esi
lea ebx, reloc.IPHLPAPI.DLL_GetInterfaceInfo
call fcn.007fbd6e
push di
lea esp, [esp + 1]
lea esp, [esp + 1]
lea esp, [esp + 0x1c]
call fcn.007936c9
call 0x7fc8c9
sub dword [ebx + reloc.IPHLPAPI.DLL_GetInterfaceInfo], esi
xor dword [edx + ebp + reloc.IPHLPAPI.DLL_GetInterfaceInfo], esi
mov eax, dword [reloc.IPHLPAPI.DLL_GetInterfaceInfo]
pushal
mov ecx, dword [esp]
not cl
xchg ch, bl
xchg ch, bh
xchg dword [esp], edx
jmp 0x7fbed5
add edx, 0x14
jmp 0x7fc888
jmp 0x7fc4e3
lea esp, [esp + 0x1c]
mov cl, byte [eax]
add cl, 3
cmc
jmp 0x7fbf62
xor cl, 0x3f
jmp 0x7fc550
jmp 0x7fc56f
mov esi, dword [ebp - 0xc]
jmp 0x7fbfab
lea edx, [ebp*4]
rdtsc
jmp 0x7fc82e
add dword [ebp - 4], 0x14
jmp 0x7fbf93
jmp 0x7fc79c
jmp 0x7fc71f
mov ecx, dword [ebp - 0xc]
stc
not edi
jmp 0x7fc7c3
push ebp
mov word [esp + 1], sp
jmp 0x7fc872
call 0x7fc5c2
pop edi
bswap ecx
lea ecx, [eax*4]
mov cx, 0x3f11
jmp 0x7fc603
bswap ebx
jmp 0x7fc1bf
lea esp, [esp + 3]
lea esp, [esp + 8]
jmp 0x7fc15e
test ecx, ecx
call fcn.007fc146
je 0x7863a2
sub esp, 0x1f
lea esp, [esp + 3]
jmp 0x7fc187
lea esp, [esp + 0x1c]
push ebx
push edi
jmp 0x7fc076
cmp ebx, dword [eax + 0x54]
jmp 0x7fc1cb
mov ebx, dword [edx]
test ebx, ebx
je 0x7863f3
jne 0x7fc1a9
jb 0x7863f3
jae 0x7fc20f
ror dword [edi - 0x21], 0xba
dec ecx
out 0x69, al
loopne 0x7fc252
adc eax, esp
push eax
popfd
in al, dx
inc esi
jno 0x7fc172
and al, 4
je 0x78636c
not dx
lea edx, [ecx + esi]
call fcn.007fc1a7
jmp 0x7863fb
cmp ebx, dword [eax + 0x50]
jb 0x7863dd
jae 0x7863f3
xlatb
pop ecx
leave
test al, 0x5b
wait
aaa
mov edx, 0x7bba4f28
or ebx, dword [edi + reloc.IPHLPAPI.DLL_GetInterfaceInfo]
jb 0x7fc29f
salc
inc ecx
ret
jae 0x7fbf37
btc di, si
mov edi, eax
bt di, di
mov di, cx
jmp 0x7fc23f
mov ecx, dword [edx + 0xc]
add ebx, esi
cmp ecx, dword [eax + 0x50]
fidivr word [ebx]
dec eax
push eax
jmp 0x7fc255
je 0x7fbef5
cmp dword [ebp + 0xc], 0
je 0x7fbf37
jne 0x7863dd
mov ecx, dword [esp]
mov ah, 0xe3
jmp 0x7fc335
neg ah
jmp 0x7fc342
mov ecx, dword [ebp - 4]
xchg al, ah
add ax, bx
mov ecx, dword [ecx + 0xc]
jmp 0x7fc31f
mov eax, dword [0x78f590]
stc
mov eax, dword [eax + 0x10]
jmp 0x7fc4ff
mov ax, word [esp]
lea eax, [ebp + esi - 0x24]
sub esp, 0x1e
lea esp, [esp + 2]
jmp 0x7fbf52
push 0
call fcn.007fc4a7
mov byte [eax], cl
jmp 0x7fc527
jl 0x7fbf4d
lea eax, [ebp - 0x24]
push sp
lea esp, [esp + 2]
jmp 0x7fc5b5
mov edi, ebp
lea edi, [edi - 8]
mov dword [edi], eax
pop edi
jmp 0x7fbf78
inc esi
cmp esi, 0xf
call fcn.007fc51d
pushfd
jmp 0x7fc593
mov eax, dword [ebp - 4]
lea esi, [edx + esi]
mov esi, dword [eax + 0x10]
call 0x7fc559
je 0x7fbf8e
clc
cmc
jmp 0x7fc59f
lea esp, [esp + 8]
add esi, dword [ebp - 0xc]
cmp dword [esi], 0
jmp 0x7fc57d
cmp dword [ebx], 0
jmp 0x7fc5e1
push eax
call dword [0x78f578]
push edi
jmp 0x7fc538
je 0x7fbf8e
jne 0x7fc01f
jmp 0x7fc76d
push ebp
pushal
push eax
mov dword [esp + 0xc], eax
call 0x7fc5ed
push esi
retf 0x3f58
je 0x7fbff3
jne 0x7fc66e
in al, 0x7a
sbb eax, 0x11902eec
and eax, 0x9310a413
or ah, byte [ebp + 0x548847d4]
and al, 0x1c
mov byte [esp + 0x1c], dl
add esp, 0x19
lea esp, [esp + 3]
lea esp, [esp + 4]
test eax, eax
jmp 0x7fc641
mov eax, dword [ebx]
test eax, eax
pushfd
mov byte [esp + 2], dh
jmp 0x7fc67d
lea esp, [esp + 4]
jns 0x7fbfd7
mov cx, 0x7359
xchg cl, ch
jmp 0x7fc6b3
push esi
call eax
pushal
mov byte [esp + 4], cl
jmp 0x7fc65b
mov ecx, dword [ecx + 0x20]
jmp 0x7fc6d2
mov cl, al
mov ecx, dword [0x78f590]
jmp 0x7fc69d
push ecx
push 0x40
push 4
jmp 0x7fc693
and eax, 0xffff
sub esp, 0x13
lea esp, [esp + 1]
lea esp, [esp + 2]
jmp 0x7fc738
mov eax, dword [ebp]
pop ebp
mov cx, dx
lea esp, [esp + 4]
lea ecx, [ebp - 0x10]
jmp 0x7fc6cb
push ecx
mov ecx, 0x78f590
mov eax, dword [ecx]
pop ecx
clc
call fcn.007fbfdc
in al, dx
imul edi, ebx, 0xffffff9e
insd dword es:[edi], dx
fisttp dword [esi]
cdq
clc
fisttp dword [ecx - reloc.IPHLPAPI.DLL_GetInterfaceInfo]
and al, 0xc
mov dword [esp + 0xc], eax
lea esp, [esp + 0xc]
push dword [ebp - 8]
call ecx
jmp 0x7fbfc1
mov word [esp + 1], dx
mov byte [esp + 1], dl
lea esp, [esp + 8]
popal
lea ebp, [ebp + 0x18]
jmp 0x7fc6f9
push eax
mov eax, edx
adc ax, 0x7070
neg ax
jmp 0x7fc821
mov dword [esi], eax
clc
lea eax, [ebp - 0x10]
jmp 0x7fc783
mov edi, ebx
add ebx, 4
mov eax, dword [ebx]
mov di, 0xd00b
jmp 0x7fc806
lea edi, [eax + ecx]
test eax, eax
push bx
lea esp, [esp + 2]
jmp 0x7fc7f0
pop edi
call fcn.007fc7ba
jne 0x7fc01f
lea esi, [edx*4]
jmp 0x7fc844
bswap edi
add esi, 4
stc
jmp 0x7fc7d0
push dword [ebp - 0x10]
push edi
mov edi, 0x78f590
mov eax, dword [edi]
jmp 0x7fc7ea
push ecx
jmp 0x7fc84b
mov esi, ecx
jmp 0x7fbfab
pushal
rdtsc
mov dword [esp + 0x18], ebp
call fcn.007fc990
push cs
xchg esi, eax
add al, 0x63
sahf
pop ebp
pushfd
or ebx, dword [ebx + reloc.IPHLPAPI.DLL_GetInterfaceInfo]
cmp dword [eax], ebx
jnp 0x7fc8bf
push dword [ebp - 8]
call eax
jmp 0x7fbfc1
lea esp, [esp + 4]
test edx, edx
pushal
jmp 0x7fc890
mov dword [ebp - 4], edx
jmp 0x7fc009
lea esp, [esp + 0x20]
jne 0x7fc076
je 0x7fbef5
mov cl, 0x33
mov dword [reloc.IPHLPAPI.DLL_GetInterfaceInfo], eax
mov eax, dword [reloc.IPHLPAPI.DLL_GetInterfaceInfo]
jmp 0x7fc009
mov edi, dword [esp]
mov ebx, 0xe3a2686c
jmp 0x7fc8d3
mov eax, dword [reloc.IPHLPAPI.DLL_GetInterfaceInfo]
sub eax, ebx
pop edi
mov ch, 0xa4
pop word [esp]
lea esp, [esp + 2]
jmp 0x7fc8b1
lea esp, [esp + 4]
pop ebx
jmp 0x7863a2
xor eax, eax
inc eax
not si
lea esi, [esi + edi]
call fcn.007fc95e
xlatb
pop ebx
retf