Function at 0x7863c5
Capabilities:
Execute anti-debugging instructions

Disassembly:
invalid
mov ebx, ebp
bsf ax, dx
js 0x78638d
mov ecx, eax
jmp 0x786372
bt edx, edi
add eax, eax
clc
jmp 0x78639e
mov ecx, eax
bt edx, edi
add eax, eax
clc
sets dh
jmp 0x786414
sets dh
jmp 0x786414
jmp 0x7863db
lea esp, [esp + 6]
call 0x7863c5
xchg esi, eax
sbb ecx, dword [ebx - 0x351e212]
jl 0x7863c9
jne 0x78633d
cmp cl, cl
push 0xf5d228b
mov byte [0x8aebd8f7], al
push dword [esp + 3]
jno 0x7863fa
lea esp, [esp + 3]
jmp 0x7863e4
rdtsc
adc dh, cl
sub esp, 0x11
jmp 0x7863a5
lea esp, [esp + 0x10]
xor ebp, 0x637bceb4
not dx
bsf ecx, esp
jmp 0x786468
lea esp, [esp + 3]
jmp 0x7863e4
mov cl, 0x7c
rdtsc
xor ebp, 0x69211329
neg dx
jo 0x7863a3
rdtsc
adc dh, cl
sub esp, 0x11
lea esp, [esp + 6]
jmp 0x7863a9
neg ecx
bswap edx
lea edx, [ebx*4]
jmp 0x78660c
jp 0x7865fc
sub esp, 0xf
mov ch, 0x3c
jmp 0x786452
push edx
xchg cl, dh
not dx
jmp 0x7864b0
push edx
xchg cl, dh
not dx
sub esp, 0xc
mov word [esp + 8], ax
lea esp, [esp + 0x1c]
neg ebp
jmp 0x7864ba
sub esp, 0xc
mov word [esp + 8], ax
jmp 0x786499
bswap edx
rdtsc
mov cl, ah
mov cx, di
bswap eax
mov cl, 0x74
jmp 0x78650e
lea esp, [esp + 3]
ror ebp, 0
inc cx
je 0x78648b
jne 0x786475
rdtsc
mov dh, byte [esp]
jmp 0x78659d
rdtsc
mov dh, byte [esp]
jmp 0x78659d
xor ebp, 0x5c3230d5
mov ah, bl
inc ax
jne 0x7864f4
je 0x7864de
mov eax, ebp
movzx edx, byte [eax]
mov eax, edx
bswap eax
not cl
jmp 0x786566
jmp 0x78651c
lea ecx, reloc.IPHLPAPI.DLL_GetInterfaceInfo
call 0x78654c
lea esp, [esp + 2]
add dl, bl
mov eax, esi
jmp 0x7865c6
mov eax, 0xf1a9c58a
push bx
pop ax
lea eax, [esp + esi]
mov eax, 0x2c491998
lea eax, [ecx*4]
call fcn.007865da
inc esi
jno 0x78660c
jae 0x7865a1
add ebp, dword [esi]
lea eax, [ebp*4]
lea eax, cs:[ebp*4]
lodsd eax, dword [esi]
add byte [eax], al
add byte [eax], al
rdtsc
rdtsc
jmp 0x786534
push bx
pop ax
lea eax, [esp + esi]
jmp 0x7865d3
mov cl, dl
neg ah
jns 0x78657b
mov eax, 0xf1a9c58a
jmp 0x7865b0
mov eax, 0x2c491998
jmp 0x78658c
sub esp, 0xf
mov ch, 0x3c
neg ecx
bswap edx
lea edx, [ebx*4]
xchg byte [esp + 0xc], ch
jmp 0x7864d1
rol ecx, 3
jmp 0x796dbe
push eax
jmp 0x796eaf
xchg dword [esp + 4], edi
push eax
call 0x796dd4
xchg dh, bh
lea edi, [edi + 0x37]
dec ecx
mov cl, 0x2a
sub esp, 0x15
lea esp, [esp + 1]
jmp 0x796e27
xchg dword [esp + 0x20], edi
ror ebx, 0x12
not edx
mov cx, 0x7109
push dword [esp + 0x20]
ret 0x24
adc esi, esi
call fcn.00796e75
loopne 0x796ed9
jmp 0x796dee
push esi
cmc
jmp 0x796e8f
jge 0x796e55
adc esi, esi
jmp 0x796e57
mov ah, bh
bts edx, edx
jbe 0x796e71
ja 0x796e71
rdtsc
mov ah, 0x22
jmp 0x796f14
sub byte [edi], cl
xor dword [edx - reloc.IPHLPAPI.DLL_GetInterfaceInfo], esi
add al, 0x71
dec esi
jo 0x796f33
adc edx, dword [eax + reloc.IPHLPAPI.DLL_GetInterfaceInfo]
invalid
pop esi
lea ebx, [ebx + ebp]
call fcn.00796ef6
lea eax, [eax + ebx]
rdtsc
bswap ebx
jmp 0x796f75
pop ebp
mov ax, 0x3e82
call fcn.00796f5c
leave
push 0x24748758
pop eax
xchg dword [esp + 4], esi
jmp 0x796f91
neg ch
rdtsc
cpuid
neg dl
xchg dword [esp + 4], esi
bswap ecx
jmp 0x796f66
xchg ebx, edi
bswap ebx
mov dx, word [esp]
push dword [esp + 4]
ret 8
pop ebx
mov eax, dword [esp]
lea eax, [esi + ebp]
adc di, bx
jo 0x7972be
jno 0x797153
xor dword [eax], esi
xor ebp, dword [edx]
inc ebp
hlt
pop edi
jmp 0x78634f
jmp 0x797153