Function at 0x790de167
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x7916e170
push ecx
pushal
mov dword [esp + 0x3c], eax
pushfd
call fcn.790e1ee1
pushal
mov dword [esp + 0x1c], 0xd2f5aa57
mov byte [esp + 8], al
pushfd
lea esp, [esp + 0x20]
jmp loc.79005580
mov dword [ebp - 0x508], edx
lea eax, [edx*4 - 0x9a8c6f]
pushal
mov dword [ebp - 4], 2
movzx ax, cl
pop eax
bswap ax
cwde
mov eax, dword [ebp - 0x508]
jmp 0x7917271b
mov byte [esp], 0x15
lea esp, [esp + 0x30]
call fcn.7901aae0
btc cx, si
add esp, 8
seto cl
bswap cx
mov dword [ebp - 4], 0xffffffff
not ecx
lea ecx, [ebp - 0x4ac]
call fcn.79134d5f
mov dword [ebp - 8], eax
push 0x853e01dc
cmp dword [ebp - 8], 0
mov word [esp], si
push 0x526c4e1b
jmp 0x7908c9a7
mov byte [0x7906f474], 1
bswap cx
movzx cx, bl
sets ch
pushal
mov dword [esp + 0x1c], 4
lea ecx, [edi*8 + 0x3d3eea46]
jmp 0x7915b81c
pushal
pushfd
push 0xa0fc2179
lea esp, [esp + 0x28]
pushal
push 0xd1c6dbb1
push dword [esp]
mov dword [0x7906f334], esi
mov byte [esp], 0xaa
jmp 0x7914e081
lea esp, [esp + 8]
jne 0x790d507a
clc
pushfd
sub eax, eax
push 0x92171912
lea esp, [esp + 8]
jmp 0x7913cdff
jmp 0x791629be
mov ecx, dword [ebp - 0x30]
push 0x9c0aa7f1
mov byte [esp + 4], dh
mov word [esp + 4], 0xf256
lea esp, [esp + 0x30]
call fcn.790237d0
not edx
mov edx, dword [eax]
lea eax, [0xe436aa09]
pushfd
pushfd
mov al, ah
mov dword [esp + 4], edx
mov al, ah
lahf
push dword [esp]
jmp 0x79163d2e
pushfd
mov dword [esp + 0x10], eax
pushal
push dword [esp + 0xc]
mov byte [esp], 0xed
mov dword [esp + 0x30], 0x79059650
mov byte [esp], dh
jmp 0x79085b36
pushfd
dec ah
sub dl, 0x2e
mov eax, dword [ebp + 0x10]
mov dl, byte [esp]
bsr edx, edx
cdq
call fcn.790bdca6
jge 0x7910f6c3
pushfd
pushfd
lea esp, [esp + 8]
call fcn.7911083f
pushal
bswap cx
pop ecx
mov dword [0x7906f470], eax
lea esp, [esp + 0x1c]
jo 0x79123018
movsx cx, cl
movzx cx, al
mov cl, ch
mov byte [0x7906f474], 1
movzx ecx, al
jmp 0x79027b54
push 0xb633dc4e
lea esp, [esp + 4]
call fcn.790cc774
call fcn.7910d036
mov word [esp], si
rdtsc
mov edx, dword [ebp - 0x504]
push 0xf4a9714e
seta ah
push ebp
push 0xe8739e9d
mov dword [ebp - 0x508], edx
lahf
mov dword [ebp - 4], 7
cwde
setg al
mov eax, dword [ebp - 0x508]
jmp 0x790d3d80
push 0x131e1e16
push dword [esp]
mov word [esp], sp
call fcn.7909b271
push dword [esp + 0x10]
lea esp, [esp + 0x48]
call fcn.79003fc0
not edx
pushfd
mov dword [ebp - 0x504], eax
cdq
cwde
pop edx
mov edx, dword [ebp - 0x504]
not ah
seto al
jmp 0x79084735
call fcn.791173f1
push ecx
fstp qword [edx - 0x74f163f4]
call 0xdf576dc9
push ds
movsb byte es:[edi], byte [esi]
invalid
lea esp, [esp + 4]
jne 0x7911d7bd
pushfd
push dword [esp]
lea esp, [esp + 8]
call fcn.790cc774
bt ax, 0xd
mov byte [0x790703ce], 1
test sp, dx
call fcn.790975cb
push 0x5550ec9f
call fcn.790cb2f7
jmp 0x79087ee4
jmp 0x790870fe
sub di, 0xba75
pop edi
sal cx, cl
movsx ebx, bl
cmc
pop esi
clc
shld cx, ax, 5
pop ebx
clc
cmc
not cl
shrd cx, dx, cl
mov ecx, dword [ebp - 4]
stc
xor ecx, ebp
jmp 0x791162d4
lea ecx, [0x1ada3729]
lea ecx, [ebp - 8]
push 0xad2ad4ac
lea esp, [esp + 4]
call fcn.790bc382
lea ecx, [edx*2 + 0x59062b0f]
movsx cx, bl
push edi
pop ecx
mov dword [ebp + 0x18], eax
mov ecx, 0x522ced93
lea ecx, [ebp - 8]
pushal
push edx
pushfd
call fcn.790889d9
adc ax, dx
rcr ax, cl
lahf
lahf
push ebp
setbe al
mov ebp, esp
bt ax, bx
mov eax, 0x8da79f7e
sub esp, 0x44
rol ah, 2
push ebx
shl al, 5
shl ah, 1
rol eax, cl
shld eax, esp, 0xc
push esi
sub eax, 0x4a6e6c8
pushfd
sub esp, 0xfffffffc
jo 0x7915aff1
add ah, 0xd6
push edi
pushfd
movzx eax, byte [0x790703ce]
cmp sp, ax
test eax, eax
jmp 0x7911d79a
call fcn.7910161d
lea ecx, [ebp - 8]
push 0x28923dcc
lea esp, [esp + 4]
call fcn.790bc382
lea ecx, [ecx + 0x4fbd322]
call fcn.790c5cf9
rol al, cl
push edi
daa
rcr ah, cl
lea eax, [ecx*2 + 0x5d1c2ff0]
movzx eax, byte [0x790703ce]
cmp al, 0x26
jmp 0x7915da92
push dword [esp + 4]
not ch
lea ecx, [ebp - 8]
mov byte [esp + 8], 0x27
lea esp, [esp + 0x20]
call fcn.7900bad0
lahf
rdtsc
lea eax, [0x55808578]
mov dl, 0x6e
mov eax, dword [0x7906f2d4]
push edx
movzx dx, al
not cl
not dx
mov ecx, dword [eax]
pushfd
mov edx, dword [ecx]
jmp 0x7907cfbb
test eax, eax
pushal
pushal
push 0xde2d6ab
pushfd
lea esp, [esp + 0x48]
jne 0x7911d7bd
jl 0x790d7449
call fcn.790cc774
cmc
mov byte [0x790703ce], 1
cmp cx, di
stc
cmp dword [0x790703d8], 0
call fcn.79172085
push esp
pushal
xchg dword [esp + 0x24], ecx
push esi
pushfd
jmp 0x790abd92
pushfd
mov byte [esp], bh
push dword [esp]
lea esp, [esp + 8]
call fcn.79014430
mov cx, 0x7fda
jmp 0x7915591a
lea eax, [ebp - 0x60]
call fcn.79132eaf
movsx cx, dl
mov dword [esp + 4], edx
setbe ch
pushal
not cx
lea ecx, [ebp - 8]
lea esp, [esp + 0x24]
jnp 0x7909bd7f
pushal
lea esp, [esp + 0x20]
call fcn.79014430
bswap cx
jmp 0x79149e0b
jmp 0x7907d97a