Function at 0x7fe8cc
Capabilities:
Execute anti-debugging instructions

Disassembly:
call fcn.007fd6f0
jmp 0x7fdabd
bt ecx, esp
mov eax, 0x7195025e
jmp 0x7fdd39
mov eax, 0x7195025e
jmp 0x7fdd39
mov ax, word [esp]
cmc
jno 0x7fda8c
bt ecx, esp
jmp 0x7fda9b
mov eax, ebp
mov ecx, ebp
btr ecx, edi
jae 0x7fdcfa
bsf ax, si
xchg ah, ch
push esp
setb cl
xchg dword [esp], eax
jmp 0x7fdd22
sub esp, 0x14
pop dword [esp]
mov edx, dword [esi]
jmp 0x7fdcd4
bsf ax, si
jmp 0x7fdd04
xchg ah, ch
push esp
setb cl
call fcn.007fdd7b
rol byte [ecx - 0x2f], cl
mov al, 0x43
mov al, 0x80
inc ebx
cli
aad 0x44
test dword [edi], reloc.kernel32.dll_GetCurrentProcessId
add al, 0x24
rdtsc
jmp 0x7fdcf0
mov eax, edx
mov cl, ch
mov cx, dx
jmp 0x7fdfd7
sub ebp, 4
and eax, ecx
jp 0x7fdd1b
rdtsc
sub esp, 0x14
pop dword [esp]
jmp 0x7fdcf6
add al, ch
jo 0x7fe60e
lea ecx, [edx*4]
jmp 0x7fe615
lea ecx, [edx*4]
add esi, 4
call fcn.007fe030
dec esp
xor dword [ecx + reloc.kernel32.dll_GetCurrentProcessId], esi
neg ebx
xchg ebp, ebx
rdtsc
neg bx
jmp 0x7fe697
call 0x7fe64d
jmp 0x7ff9f2
lea edi, [eax + ebx]
mov byte [esp], dh
lea edx, [ecx*4]
mov cl, ch
rol bx, cl
setno bh
jmp 0x7fe6fb
bsr bx, cx
xchg byte [esp], bl
mov ax, 0xfbb9
cpuid
xchg byte [esp], dl
cpuid
jmp 0x7fe74b
mov dl, dh
mov al, 6
mov di, 0x3f5b
mov dl, 0xbc
mov bl, bh
xchg ebx, esi
jmp 0x7fe6e0
bswap eax
mov si, 0x5729
lea esp, [esp]
call fcn.007fe71d
insd dword es:[edi], dx
mul byte [ebx + eax - 2]
push edi
mov ds, word [bx + di]
add esp, 0
lea ebx, [edx + esi]
lea edi, reloc.kernel32.dll_GetCurrentProcessId
xchg byte [esp], al
lea eax, [eax*4]
xchg bx, si
jmp 0x7fe734
mov dword [esp], eax
push dword [esp]
pop word [esp + 1]
lea esp, [esp + 5]
call fcn.007fe800
mov ch, byte [esp + 7]
mov ebp, esi
pop word [esp]
bsr cx, bp
jmp 0x7fe8a4
mov word [esp + 0x1a], dx
rdtsc
xchg dword [esp + 0xf], ebp
stc
inc cl
rol cx, cl
jmp 0x7fe8eb
mov al, ah
jmp 0x7fe8d4
btc ecx, ebx
cld
inc bl
pop dword [esp + 0x10]
inc bp
push dword [esp + 0xa]
jmp 0x7fea75
bswap ecx
bsr dx, cx
mov edx, 0x4d5bc76a
add esi, ebp
xchg bh, cl
call fcn.007fe8cc
dec esi
iretd
inc dword [eax + 0x720037]
pushfd
clc
clc
sub esp, 6
jmp 0x7fe871
xchg ah, bl
mov ah, byte [esp + 7]
pop ebp
lea ecx, [esi*4]
jmp 0x7fe967
rdtsc
inc bx
lea eax, [edi*4]
mov bl, 0xd8
push word [esp + 5]
xchg si, bx
jmp 0x7fe91b
add esp, 0x11
mov bp, di
xchg bh, cl
cld
push word [esp + 2]
xchg cx, ax
jmp 0x7fe933
mov di, word [esp + 2]
mov ebp, dword [esp + 2]
lea eax, [edx + ebx]
pop ax
pushal
xchg ah, bl
jmp 0x7fe9ca
add esi, ebp
sub esp, 6
xchg word [esp + 0x18], dx
xchg dword [esp + 0x19], ecx
xchg edx, ebp
jmp 0x7fe9a3
popal
sub esp, 0x18
mov esi, ecx
push dword [esp + 0xc]
xchg edx, ecx
pop word [esp + 0x13]
jmp 0x7fe955
mov ah, byte [esp + 0x10]
mov dword [esp + 0x1d], ebp
lea eax, [ebp - 0x9f]
pop word [esp + 0x1a]
popal
mov byte [esp + 9], ch
jmp 0x7fe9f3
mov ecx, dword [esp + 0x26]
mov cl, ch
cpuid
xchg ch, dl
mov ah, byte [esp + 0x23]
mov bp, di
jmp 0x7fe97a
mov al, ah
shr ah, 1
not bh
mov dword [esp + 0x14], esi
pop word [esp + 0x14]
jmp 0x7fea36
mov eax, dword [esp + 7]
mov bx, 0x16e1
pop bp
pushal
inc edi
mov byte [esp + 0x1f], ch
jmp 0x7fe9dd
mov ebx, 0xc501a3fa
lea ecx, [ebx*4]
bswap ebp
jmp 0x7feaa7
pop ax
mov di, 0x257f
inc bx
push dword [esp + 2]
xchg ebp, edx
add esi, ebp
jmp 0x7fea05
mov esi, dword [esp + 0xa]
mov ebp, dword [esp + 4]
mov cx, 0x92b9
mov ebp, 0xf7c3add2
popal
btc edx, ebx
jmp 0x7fea1e
mov cl, ch
lea esp, [esp + 0x17]
stc
sub esp, 0xc
lea ebp, [ebx + esi]
mov di, word [esp + 0xa]
jmp 0x7fe990
rdtsc
mov al, ah
neg ecx
bswap ebp
mov bp, bx
push word [esp + 0x1b]
jmp 0x7fea5a
xchg dword [esp], esi
mov esi, ebp
xchg word [esp + 2], cx
xchg dword [esp], ebp
cpuid
xchg word [esp + 1], bx
jmp 0x7feb32
mov edx, 0x45d1d1d4
cpuid
clc
pop dword [esp]
xchg dx, si
mov byte [esp + 3], ch
jmp 0x7fea87
mov al, 0x2e
bswap esi
mov al, ah
mov di, word [esp]
xchg esi, ecx
call fcn.007feae7
lea esp, [esp + 4]
mov cx, dx
call fcn.007feb91
les ecx, [ecx - 0x27]
mov eax, 0xea66ab4b
js 0x7feb48
ljmp 0x9fa:0x9f0f8401
pop word [esp]
mov byte [esp + 1], bh
cmc
inc bp
pop si
lea edi, [ecx + edi]
jmp 0x7feb02
out 7, eax
mov ebp, 0x36dbbc2e
fild qword [ebp + 0x45b6d343]
in al, 0x86
push eax
jmp 0x7fe648
je 0x7fe90a
lea esp, [esp + 8]
popal
jmp 0x7fda85
pop eax
sub eax, 0x7fe64d
cmp dword [eax + reloc.kernel32.dll_GetCurrentProcessId], 0
jmp 0x7ff9ce