Function at 0x7eb4e4
Capabilities:
Execute anti-debugging instructions

Disassembly:
push eax
push edx
ja 0x6bbb61
jae 0x6bbb61
push eax
push edx
push ebx
pop ebx
rdtsc
push edi
pop edi
js 0x6bbb6f
pop edx
pop eax
rdtsc
push eax
push edx
jb 0x6bbb7b
jmp 0x6bbb85
rdtsc
jmp 0x6bbb95
pop edx
pop eax
pushal
jno 0x6bbb9e
pushal
popal
popal
pop edx
pop eax
push esi
mov dword [esp], ebx
push ebp
mov dword [esp], esp
add dword [esp], 4
push dword [esp]
mov ebx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], eax
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push edi
mov edi, 4
add ebp, edi
pop edi
xchg dword [esp], ebp
pop esp
push esi
mov esi, 0x5756b5f3
add esi, 0xffffffff
sub esi, 0x5756b5ee
add ebx, esi
push dword [esp]
pop esi
push 0x226ae902
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push edx
push 0x5a7d6ded
mov dword [esp], eax
push esp
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], esp
add dword [esp], 4
pop edx
push eax
mov dword [esp], 0x1a399c7c
mov dword [esp], ecx
mov ecx, 0x3ffee8a2
not ecx
xor ecx, 0xc0011759
add edx, 0x6ddafc17
add edx, ecx
sub edx, 0x6ddafc17
mov ecx, dword [esp]
add esp, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], ecx
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x25212c96
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], ecx
sub esp, 4
mov dword [esp], edi
mov dword [esp], 0x371c9ba9
dec dword [esp]
and dword [esp], 0x77fb5923
add dword [esp], 0x6ff3efb1
add dword [esp], 0x3fa08900
push ecx
mov ecx, 0x9724b700
sub dword [esp + 4], ecx
pop ecx
dec dword [esp]
xor dword [esp], 0x7a7960c3
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x57fcbfb1
shl ebp, 1
shl ebp, 8
sub ebp, 0x4f1d34c4
or ebp, 0x75f5ae22
neg ebp
sub ebp, 0xb14c7678
and dword [esp + 4], ebp
pop ebp
sub esp, 4
mov dword [esp], edx
mov edx, 0x5feecd08
sub dword [esp + 4], 0x1ec38c8c
push ebx
mov ebx, 0x39b3c0db
add dword [esp + 8], ebx
pop ebx
add dword [esp + 4], edx
sub dword [esp + 4], 0x39b3c0db
push ecx
mov ecx, 0x1ec38c8c
add dword [esp + 8], ecx
pop ecx
mov edx, dword [esp]
add esp, 4
push ecx
mov dword [esp], esi
mov esi, 0x727a5d88
xor dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
mov dword [esp], edx
push esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov dword [esp], ebx
push edx
mov dword [esp], ecx
sub esp, 4
mov dword [esp], eax
push ebp
mov ebp, 0x57dfa39f
not ebp
neg ebp
push esi
push ebp
mov ebp, 0x7faf5bcc
xor ebp, 0x61d72e74
dec ebp
neg ebp
add ebp, 0x36bf2acf
sub ebp, 0xa04992c1
mov esi, ebp
pop ebp
xor esi, 0x4d934e41
xor ebp, esi
pop esi
mov eax, ebp
push dword [esp]
pop ebp
add esp, 4
shr eax, 2
push esi
push eax
mov eax, 0x7f9ea784
mov esi, eax
pop eax
sub eax, esi
pop esi
and eax, 0x7fd76947
shr eax, 5
sub eax, 0x3befdddb
add eax, 0xa9019799
mov ecx, eax
pop eax
mov dword [esp + 4], ecx
pop ecx
push 0x4a581b31
mov dword [esp], ecx
mov ecx, 0x5a77dc14
xor dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], ebx
push 0x318a1641
mov dword [esp], ebp
mov dword [esp], 0x3fbc2e87
dec dword [esp]
push edx
mov dword [esp], edi
mov edi, esp
push ebp
mov ebp, 0x2ffe3360
push ebx
mov ebx, 0x5faf5781
add ebx, 0x18106600
sub ebp, ebx
pop ebx
sub ebp, 0x7f7da705
inc ebp
push edx
mov edx, 0x3cb1d7b1
add edx, 0x7fbff3fd
and edx, 0x775e7593
dec edx
dec edx
or edx, 0x7724cd65
add edx, 0xa48a5fa1
sub ebp, edx
pop edx
sub ebp, 0x1cc1a151
add edi, ebp
pop ebp
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
mov eax, 0x3fb88331
add dword [esp + 4], 0x2faff242
push ebp
mov ebp, 0x7ef68a0a
sub dword [esp + 8], ebp
pop ebp
add dword [esp + 4], 0x3bf76753
sub dword [esp + 4], eax
sub dword [esp + 4], 0x3bf76753
add dword [esp + 4], 0x7ef68a0a
sub dword [esp + 4], 0x2faff242
mov eax, dword [esp]
push edi
mov edi, esp
push ecx
mov ecx, 0x7ee37c86
push 0x4bfe234e
mov dword [esp], ecx
inc dword [esp]
pop ecx
or ecx, 0x7cf452e6
and ecx, 0x5bfd3964
shr ecx, 2
add ecx, 0xe942b1eb
add edi, ecx
pop ecx
add edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
push eax
push esp
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push ebp
mov dword [esp], edx
push eax
sub esp, 4
mov dword [esp], eax
mov dword [esp], 0x7fbfda4c
mov eax, dword [esp]
add esp, 4
push edi
mov edi, 0x7373eab2
xor eax, edi
pop edi
shl eax, 7
xor eax, 0x19e78117
mov edx, eax
pop eax
sub edx, 0xffffffff
xor edx, 0x7f7d1e9d
sub edx, 0x82e081
add eax, edx
pop edx
push 0x49b744b3
mov dword [esp], esi
push ecx
push 0x76ff8828
pop ecx
xor ecx, 0x2bfbcef1
push ebx
mov dword [esp], esi
mov esi, 0x5d0446dd
xor ecx, esi
pop esi
mov esi, ecx
pop ecx
sub eax, esi
mov esi, dword [esp]
add esp, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebp
push 0x1d317eed
mov dword [esp], edi
mov edi, esp
push edx
mov edx, 0x3e3fb4d0
shr edx, 3
and edx, 0x6fe691aa
xor edx, 0x7c6908e
add edi, edx
pop edx
push ecx
push 0x2d3ff2f0
pop ecx
shr ecx, 6
shr ecx, 1
push edi
mov edi, 0x3e75a6a6
dec edi
not edi
neg edi
shr edi, 4
push eax
push ecx
mov dword [esp], ebx
push esi
mov esi, 0x5c1a6a91
mov ebx, 0xdf53c76f
add ebx, esi
pop esi
push edx
mov edx, 0x41f5ef61
mov eax, edx
pop edx
xor eax, ebx
pop ebx
sub eax, 0xfbfaceb0
or edi, eax
pop eax
not edi
push eax
mov eax, 0x8f069150
xor edi, eax
mov eax, dword [esp]
add esp, 4
add ecx, edi
pop edi
inc ecx
sub ecx, 0xf78b036
sub edi, ecx
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], edx
mov dword [esp], esi
push 0x6a5057b9
mov dword [esp], esi
mov dword [esp], 0x7fc57732
push ecx
mov ecx, 0x6bf57e91
push eax
mov eax, 0x7ef7ba14
sub dword [esp + 8], eax
pop eax
add dword [esp + 4], ecx
add dword [esp + 4], 0x7ef7ba14
mov ecx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
shr dword [esp], 7
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x197903b3
xor dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
push 0x27651efa
mov dword [esp], edi
push esi
mov esi, 0x769fa300
push ecx
mov ecx, 0x36fe2935
shl ecx, 8
add ecx, 0xb1fa5dc1
mov edi, ecx
pop ecx
sub edi, esi
push dword [esp]
mov esi, dword [esp]
add esp, 4
add esp, 4
add dword [esp + 4], edi
pop edi
mov dword [esp], edx
mov dword [esp], edi
call fcn.006bc097
or al, dl
sub eax, 0x4c775b00
add byte [0x39003500], ch
add byte [0x10001000], ch
add byte [ecx], bh
add byte [eax], al
add byte [eax + eax + 0x35], cl
add byte [eax], al
add dl, dh
xchg ebx, eax
dec esp
add byte [esi - 0x77], ch
or al, 0
add byte [eax], al
cmp dword [eax], eax
adc byte [eax], al
dec esp
add byte [0x4c002d00], dh
add byte [0x48000000], dh
sbb dword [eax], edx
add byte [ecx], bh
add byte [0x1e000000], ch
add byte [eax + eax + 0x35], cl
add byte [0x35004c00], ch
add byte [eax], al
add byte [eax + 0x19], cl
adc byte [eax], al
cmp dword [eax], eax
sub eax, 0x1e000000
add eax, dword [eax]
add byte [esi], al
add eax, dword [eax]
cmp byte [ebp - 0x3f], 0x29
add byte [edx + 0x50ebb65], dl
sub eax, 0x31003100
add byte [ecx + 0x40], cl
sub dword [eax], eax
sub dword [eax], eax
dec esp
add byte [eax + ebp*2 - 0x5a12ffc7], bl
add byte [eax], al
xchg ebp, eax
sub al, 0x29
add bl, dh
shr al, 1
jnp 0x7eb359
inc esp
jg 0x7eb3db
sub dword [eax], eax
mov bl, 0x73
outsb dx, byte [esi]
in al, dx
loop 0x7eb3c7
sub dword [eax], eax
cmp dword [eax], eax
mov dword [0x83003968], eax
jb 0x7eb3e4
add byte [edi + 0x6600297f], cl
popfd
lds edi, [ecx + 0xe]
jl 0x7eb3ec
add byte [ecx], bh
add byte [edi], bh
imul eax, dword [eax], 0
out 0x8b, eax
xor eax, 0x29578600
add byte [ebx - 0x5d6f14a], ah
xor al, 0x35
add byte [0x2d003900], dh
add byte [ecx], bh
add byte [eax], dl
add byte [ecx], bh
add byte [0x10003900], ch
add byte [eax], al
add byte [eax + eax + 0x2d], cl
add byte [eax], dl
add byte [eax], al
add byte [eax], al
dec esp
add byte [0x1000], ch
add byte [eax], al
test dword [ebp + 0x4c], 0x88341900
add bh, dh
dec ebp
dec esp
add byte [ecx], bl
xor al, 0x88
mov eax, 0x20059b
call eax
push edx
pushal
jge 0x7eb404
pushal
popal
pushal
popal
popal
pop edx
pushfd
push eax
mov dword [esp], edi
mov dword [esp], 0x3fbf4edd
or dword [esp], 0x36fb0bc9
shl dword [esp], 8
or dword [esp], 0x66cde272
inc dword [esp]
shr dword [esp], 7
sub dword [esp], 0x83a15384
xor dword [esp], 0x6fb7de85
or dword [esp], 0x17fbf701
dec dword [esp]
dec dword [esp]
neg dword [esp]
push edi
mov edi, 0xe8040cb3
xor dword [esp + 4], edi
pop edi
push ebx
mov dword [esp], 0x3588e70d
mov dword [esp], ebx
mov dword [esp], edx
mov dword [esp], 0x5f192400
dec dword [esp]
and dword [esp], 0x5d776cf9
and dword [esp], 0x7fff2557
shr dword [esp], 2
shl dword [esp], 8
xor dword [esp], 0x4476a5a6
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
push esi
mov esi, 0x7fff9673
add esi, 0x80006991
sub eax, esi
pop esi
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], eax
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], ecx
mov dword [esp], 0x4419a460
mov dword [esp], ebx
push dword [esp + 0x10]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push dword [esp + 8]
mov ebx, dword [esp]
push eax
mov eax, esp
push edi
mov edi, 0x41cf37c3
sub edi, 0x69f87622
add edi, 0x29ee6caa
or edi, 0x53b1023a
or edi, 0x37ffd846
neg edi
add edi, 0x77fffe83
add eax, 0x7ddf4c96
add eax, edi
sub eax, 0x7ddf4c96
pop edi
add eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
push ecx
mov ecx, 4
add edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
push dword [esp]
push dword [esp]
pop eax
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x6bbb53