Function at 0x7fe396
Capabilities:
Execute anti-debugging instructions

Disassembly:
add eax, 0x9102bcba
jmp 0x7fe592
add eax, 0x18e29f1e
jmp 0x7fe646
jmp 0x7fe48b
neg dx
jo 0x7fe374
pop word [esp + 5]
jmp 0x7fe490
adc al, 0x9c
jmp 0x7fe45d
not dx
mov eax, esi
sub eax, esi
jmp 0x7fe3c5
mov ax, word [esp]
sub esp, 6
stc
jmp 0x7fe3f2
lea esp, [esp + 2]
jmp 0x7fe427
jmp 0x7fe3e4
rdtsc
bswap edx
btr edx, esp
rdtsc
neg dx
mov eax, ecx
sub esp, 0xb
jmp 0x7fe4d1
lea esp, [esp + 4]
not bl
neg dh
jae 0x7fe40b
jb 0x7fe43b
xor al, 0xb5
and eax, 0x2478bf4c
push edi
rdtsc
bswap edx
btr edx, esp
jmp 0x7fe4b1
not dx
mov eax, esi
sub eax, esi
adc al, 0x9c
lea esp, [esp + 8]
neg bl
ror al, 4
js 0x7fe409
mov ax, word [esp]
sub esp, 6
stc
lea esp, [esp + 2]
jmp 0x7fe427
pop word [esp + 5]
rol bl, 0
jno 0x7fe454
jo 0x7fe3db
lea esp, [esp + 3]
jmp 0x7fe4bb
rdtsc
neg dx
jmp 0x7fe417
lea esp, [esp + 8]
not bl
bswap edx
bsr edx, esp
jmp 0x7fe548
jo 0x7fe49b
lea esp, [esp + 3]
jmp 0x7fe4bb
sub esp, 0x11
mov ah, 0x9c
lea esp, [esp + 1]
jmp 0x7fe509
pushal
mov cl, ch
mov dword [esp + 0x1c], ebx
popal
mov dh, al
jmp 0x7fe525
lea esp, [esp + 1]
jmp 0x7fe509
bswap edx
btr dx, cx
jmp 0x7fe5cf
shl eax, 2
ror edx, cl
je 0x7fe567
jne 0x7fe551
mov cl, 0x3d
lodsd eax, dword [esi]
mov ah, 0x47
cmc
or dword [esi], reloc.oleaut32.dll_SysFreeString
pop ds
jno 0x7fe4d9
jno 0x7fe4d9
sub esp, 0x11
mov ah, 0x9c
jmp 0x7fe51f
lea edx, reloc.oleaut32.dll_SysFreeString
bts edx, esp
sub dh, 0xbc
jmp 0x7fc888
lea edx, reloc.oleaut32.dll_SysFreeString
bts edx, esp
sub dh, 0xbc
jmp 0x7fc888
push eax
mov dl, byte [esp + 3]
pop word [esp + 0x12]
lea esp, [esp + 3]
jmp 0x7fe5f1
sub esp, 0x15
jmp 0x7fe5b1
pop word [esp + 0x12]
lea esp, [esp + 3]
jmp 0x7fe5f1
ja 0x7fe578
push eax
mov dl, byte [esp + 3]
jmp 0x7fe597
jo 0x7fe531
jno 0x7fe531
mov dx, 0xd125
jmp 0x7fe607
mov eax, dword [eax + reloc.oleaut32.dll_SysFreeString]
btr edx, esp
jne 0x7fe5db
mov dx, 0xd125
jmp 0x7fe67f
rcl dx, 0xd
mov dx, bp
jmp 0x7fc8c9
btc edx, esp
stc
jmp 0x7fe65e
sbb dl, dh
jle 0x7fe630
jg 0x7fe654
mov esi, 0xc64b2c
setbe byte [edi]
mov ebx, 0x4ebf9e2
add eax, eax
cmp dword [edx], reloc.oleaut32.dll_SysFreeString
out 0xd2, eax
ljmp 0x1e37
btc edx, esp
stc
jmp 0x7fe65e
mov esp, edi
shr dl, cl
jmp 0x7fe6c0
mov edx, 0x59e5c203
sub esp, 8
lea esp, [esp + 6]
lea esp, [esp + 2]
jmp 0x7fe8eb
rcl dx, 0xd
mov dx, bp
jmp 0x7fc8c9
ja 0x7fe668
mov edx, 0x59e5c203
sub esp, 8
call fcn.007fe68b
sahf
bts dx, bx
lea ebx, [ebx - 0x2e]
mov edx, esp
jmp 0x7fe712
lea edx, [ebx*4]
mov dl, al
bsf edx, edi
mov dh, bl
xchg dword [esp], ebx
call fcn.007fe6fc
mov al, byte [esp]
clc
jae 0x7fe75f
mov dl, byte [esp]
jmp 0x7fe749
bsr edx, edi
mov edx, dword [esp]
mov ax, 0xf72f
call fcn.007fe785
stc
imul edi, ecx, 0x8af6b98
mov dl, byte [esp]
bsr edx, edi
mov edx, dword [esp]
mov ax, 0xf72f
sub esp, 0xc
jmp 0x7fe895
push eax
ret
rol bl, 0
jnp 0x7fe81c
jp 0x7fe81c
add edx, 0x18e29f1e
jmp 0x7ff6ca
jmp 0x7fe804
call 0x7fe867
add eax, 0x5b1fe3c9
jmp 0x7fff38
mov dh, al
mov ax, 0xfbd6
mov ax, word [esp]
btr dx, si
jnp 0x7fe81a
jp 0x7fe81a
mov dword [esp], eax
lea eax, reloc.oleaut32.dll_SysFreeString
bswap edx
jmp 0x7fe86c
add eax, 0x18e29f1e
jmp 0x7fffb5
lea esp, [esp + 8]
neg bl
mov dl, 0x74
mov edx, 0xb5ca239d
rdtsc
jmp 0x7fe8bd
mov edx, esi
mov dx, 0xf417
jmp 0x7fe8a7
lea esp, [esp + 0xc]
xor bl, 0x24
rdtsc
mov dh, cl
mov edx, 0x94e303e4
jmp 0x7fe835
neg edx
neg dx
jmp 0x7fe8d3
adc dx, cx
je 0x7fe87d
mov edx, esi
mov dx, 0xf417
neg edx
neg dx
jmp 0x7fe8d3
rol bl, 0
bswap eax
mov edx, dword [esp]
jmp 0x7fef97
stc
jle 0x7fe783
jg 0x7fe783
call fcn.007fe920
sub bl, 0x61
call 0x7fea76
sub esp, 9
jne 0x7fefde
lea esp, [esp + 2]
lea esp, [esp + 3]
jmp 0x7fefc1
sub eax, edx
call fcn.007ff010
lea esp, [esp + 2]
jmp 0x7fefe8
lea esp, [esp + 2]
lea esp, [esp + 3]
jmp 0x7fefc1
mov esp, eax
pushfd
lea edi, [eax + edx - 0x40]
jmp 0x7feff5
push esi
push edi
push ecx
jmp 0x7ff039
jmp 0x7ff01d
mov dword [esp], eax
clc
call fcn.007ff089
out 0x7f, al
out dx, eax
mov bh, byte [ecx + 0x45]
int3
mov esi, ebx
pushal
bt si, bx
jae 0x7feffa
mov dword [esp], eax
clc
jmp 0x7ff021
bswap eax
mov eax, dword [esp]
jmp 0x7ff714
push edx
ret
mov esp, edi
lea eax, [ebx*4]
lea eax, [eax - 0xdc]
mov al, 0x49
jmp 0x7ff6d1
lea edx, reloc.oleaut32.dll_SysFreeString
mov edx, eax
jmp 0x7fff86
mov edx, dword [esp]
rcl dl, 3
bsr dx, si
jmp 0x7fe854
mov edx, dword [esp]
rcl dl, 3
bsr dx, si
jmp 0x7fe854
mov dh, ch
mov eax, dword [eax - reloc.oleaut32.dll_SysFreeString]
bsr edx, edx
jns 0x7fff42
js 0x7fff6d
lea edx, [esp + ebp]
sub esp, 0x18
jmp 0x7fffb8
bsr dx, bx
jmp 0x7fffdc
clc
jmp 0x7fffd2
mov esp, edi
lea edx, [ecx + ebx]
stc
jge 0x7fff9d
bsr dx, bx
call fcn.008000b6
pop es
adc byte [esi], 0x71
xor byte [ebx], 0xbd
mov word [edi], ds
jae 0x7fff95
lea edx, [esp + ebp]
sub esp, 0x18
jmp 0x7fff9b
dec dx
jno 0x800016
jo 0x800089
pushal
in al, 0x7a
sbb eax, 0x10915cec
xchg ebx, eax
or ah, byte [ebp + 0xfd38bd4]
xchg esi, eax
invalid
jmp 0x800089
push eax
ret