Function at 0x7e617c
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov esi, 0xb46330ca
neg cx
pop edi
pop bp
bswap ecx
jmp 0x7e6162
btc esi, edi
mov bp, word [esp + 7]
btc esi, edi
neg ah
jmp 0x7e611b
xchg word [esp + 0xb], si
push dword [esp + 4]
mov cx, word [esp + 4]
add esp, 1
mov bp, sp
xchg byte [esp + 8], al
jmp 0x7e6131
pop dword [esp + 1]
lea edi, [ebx + ebp]
lea ecx, [edx + ebx]
shl bx, cl
btc ebp, ebx
xchg dword [esp + 2], ebx
jmp 0x7e675c
push dword [esp + 8]
mov bx, 0xfbb
pop dx
push dword [esp + 6]
jmp 0x7e6148
lea edi, [edi*4]
pop dx
xchg word [esp + 7], si
jmp 0x7e62b6
sub esp, 0xc
mov cl, ch
setns ch
cpuid
mov byte [esp + 0xd], ah
jmp 0x7e61bc
bswap edi
pop esi
btr esi, edx
lea esp, [esp + 0xa]
xchg edi, edx
pop word [esp]
jmp 0x7e61d2
mov al, 0x2e
lea edx, [ecx + ebx]
xchg ecx, esi
lea ecx, [edi*4]
shl ax, cl
bswap edx
jmp 0x7e61e9
lea ebx, [esp + ebp]
mov bx, di
clc
setge ch
bsf ax, ax
xchg byte [esp + 0x10], cl
jmp 0x7e6210
push dword [esp + 3]
pop di
mov ebp, dword [esp + 1]
mov ecx, 0x8ebedf10
xchg dword [esp], esi
pop cx
jmp 0x7e62f8
mov cx, word [esp + 5]
ror edi, 0x1f
pop word [esp]
mov dx, 0xe559
rdtsc
xor dx, 0xcfc
jmp 0x7e6243
btc ecx, ebx
mov dword [esp], eax
mov edx, eax
mov dword [esp], ecx
xchg ebp, edi
sub ebx, eax
jmp 0x7e626f
pop word [esp + 1]
mov edi, dword [esp + 1]
lea ebp, [esi + edi]
pop dword [esp]
bsf dx, ax
mov word [esp + 3], di
jmp 0x7e6299
add al, dh
setl dh
cpuid
clc
inc cl
inc edi
jmp 0x7e62e1
push word [esp + 2]
add esp, 4
pushal
inc cx
push esp
xchg dword [esp + 0x17], edi
jmp 0x7e63e5
xchg word [esp + 1], si
mov dl, dh
shr esi, 0x17
mov di, 0x958b
cmc
btc ebx, ebx
jmp 0x7e62d0
setae ah
btc ebx, ebx
sub esp, 0x10
xchg edx, edi
setge dh
mov ebp, ecx
jmp 0x7e622f
push dword [esp + 4]
cmc
mov cl, 0xba
not si
push edx
xchg dword [esp + 5], eax
jmp 0x7e6398
xchg word [esp + 4], dx
setae bh
pop dx
xchg bh, cl
mov ax, 0x2c3f
lea esi, [edx + edx]
jmp 0x7e6331
pop word [esp + 0x19]
mov esi, eax
mov dword [esp + 0x21], ebp
mov edx, dword [esp + 0x22]
lea esi, reloc.RASAPI32.dll_RasHangUpA
popal
jmp 0x7e6347
xchg word [esp + 1], cx
cpuid
push dword [esp + 2]
xchg ah, bl
sub esp, 0x1c
btc ebx, ebx
jmp 0x7e63cc
push dword [esp + 9]
mov ax, 0x5807
xchg bh, cl
lea esp, [esp + 0xb]
not esi
inc cx
jmp 0x7e637b
setae bh
not bh
setg bh
xchg dword [esp + 6], eax
mov dword [esp + 0x13], eax
neg eax
jmp 0x7e64cb
pop word [esp + 0x19]
mov cx, di
mov bl, 0x10
bsf si, si
mov edx, dword [esp + 1]
jmp 0x7e63ac
xchg bh, cl
xchg dword [esp + 0x1c], ecx
lea ebp, [eax*4]
lea esi, [ecx + edi]
mov di, bx
push word [esp + 0xf]
jmp 0x7e6363
xor ebx, esi
lea eax, [esp + ecx]
lea eax, [ecx + ebx]
inc cl
xchg dh, al
pop edx
jmp 0x7e6434
rdtsc
lea edi, reloc.RASAPI32.dll_RasHangUpA
mov dword [esp + 3], ecx
pop ecx
pop word [esp + 0xb]
push word [esp + 3]
jmp 0x7e6402
xchg ebx, edi
neg dh
xchg dword [esp + 1], edx
setno bh
add esp, 8
mov word [esp + 3], bx
jmp 0x7e6469
xchg ebx, edi
rdtsc
lea ecx, [edx + edi]
push esp
add esp, 0xd
mov word [esp + 0xe], dx
jmp 0x7e641b
xchg bh, cl
cpuid
neg bp
inc dl
mov ebp, dword [esp + 3]
sub esp, 0x14
jmp 0x7e64a3
shr ch, 5
pop cx
sub esp, 4
ror ah, 1
add esp, 9
pop word [esp + 7]
jmp 0x7e665e
mov bx, dx
xchg ebx, esi
cpuid
cmc
rdtsc
xchg byte [esp + 3], dl
jmp 0x7e6457
mov byte [esp + 5], dh
pop edx
mov si, 0xb729
mov cx, di
pop eax
mov word [esp + 0xf], bx
jmp 0x7e647b
inc al
xchg edx, ebx
pop si
xchg word [esp + 0xb], cx
xchg byte [esp + 0x18], cl
pop bp
jmp 0x7e6493
not edx
mov cl, 0x62
rdtsc
neg esi
lea edx, [ebp - 0x4f]
lea esi, [esi + edi]
jmp 0x7e64f2
mov eax, 0xd09ab05e
add esp, 0
mov eax, ebp
mov edi, dword [esp]
cpuid
jmp 0x7e659d
mov ebp, dword [esp + 0xa]
btc esi, ebx
add esp, 0xc
lea esp, [esp]
mov esi, 0x61339db6
add esp, 0
jmp 0x7e64de
bsr ax, cx
mov ecx, dword [esp + 0x15]
lea edx, [esi*4]
setns bh
cpuid
shr ah, 1
jmp 0x7e6552
cmc
mov edx, dword [esp + 0xd]
mov si, dx
push word [esp + 0x16]
pop ecx
pop eax
jmp 0x7e6520
xchg byte [esp + 4], cl
mov cx, 0xfba5
xchg ah, bl
xchg byte [esp + 0x18], cl
push dword [esp + 0xc]
clc
jmp 0x7e663d
mov bl, 0x78
not di
pushal
lea edx, reloc.RASAPI32.dll_RasHangUpA
mov bh, byte [esp]
lea ecx, [esp + ecx]
jmp 0x7e6541
lea ebx, [esp + ebx]
mov byte [esp], bh
lea esi, [ecx*4]
lea esi, [edx + ebx]
bswap ebx
xchg ebx, eax
jmp 0x7e6575
pop dword [esp + 8]
lea esi, [ebx + edi]
mov al, 0x86
call fcn.007e6605
aad 0x42
sal byte [edi + 0x795eb42], 1
xchg edi, eax
add dword [ecx + reloc.RASAPI32.dll_RasHangUpA], edi
mov eax, 0xf661511
mov esp, 0xf58766f0
bsf si, ax
xchg bp, si
push esp
xchg bx, cx
lea ebp, [esi + 0x15]
lea esp, [esp + 1]
jmp 0x7e6509
pop word [esp + 5]
add edi, ebp
pop bx
btr ebx, edx
pop edx
pop word [esp]
jmp 0x7e631c