Function at 0xd7ba75
Capabilities:
Execute anti-debugging instructions

Disassembly:
pop dword [esp + 3]
xchg dx, ax
mov ah, byte [esp + 4]
xchg word [esp + 4], dx
mov word [esp + 3], di
jmp 0xd7b98e
mov dh, byte [esp + 0x12]
xchg word [esp + 5], bx
xchg word [esp + 9], bx
push word [esp + 0xf]
rdtsc
pop dword [esp + 0xc]
jmp 0xd7b919
pop bx
cmc
lea edx, reloc.kernel32.dll_LoadLibraryA
xchg edx, ebx
mov dx, 0xc486
jmp 0xd7b9b9
btr edx, eax
cld
add esp, 6
bswap edx
mov eax, 0xdb3d9577
mov word [esp], bp
jmp 0xd7b94f
mov dh, bl
mov bx, 0xff14
bsr eax, edi
mov dl, 0x94
pop dword [esp + 4]
mov dh, byte [esp + 3]
jmp 0xd7b965
pushal
mov dx, bx
mov ebx, esp
mov bl, 0xd3
lea edx, reloc.kernel32.dll_LoadLibraryA
jmp 0xd7b9d9
mov bx, 0x83ab
sub esp, 0xc
lea edx, reloc.kernel32.dll_LoadLibraryA
lea eax, [esi - 0x9f]
lea ebx, [ebp + 0xec]
mov ax, 0x1d79
jmp 0xd7b9a3
mov bx, word [esp + 0x10]
mov dword [esp + 0x1f], ecx
rcl dx, 8
mov bl, byte [esp + 0xc]
pop dword [esp + 0x16]
jmp 0xd7bab7
bsf ebx, edx
lea ebx, [eax + esi]
push dword [esp + 0xa]
mov bh, 0x50
setnp dl
dec ax
jmp 0xd7b934
xchg word [esp + 0x12], dx
mov word [esp + 8], bp
mov dx, bp
btc ebx, ecx
call 0xd7ba75
sbb byte [ebp + 0x45a7540d], bl
push 0xffffffffffffffee
jl 0xd7ba44
neg byte [eax]
jg 0xd7ba73
int1
rol ebx, 0
mov ax, 0x1444
lea ebx, [ebx + ebp]
lea esp, [esp + 0x14]
btr bx, ax
neg bl
jmp 0xd7ba0a
sete dh
ror dx, 3
mov al, byte [esp + 8]
xchg dword [esp + 3], edx
inc edx
jmp 0xd7ba91
mov eax, 0x8bc38b9b
fsubr st(3)
fild word [edi - 0x72f4dbbc]
sbb al, 0x30
xchg dword [esp + 0xb], eax
lea ebx, [eax + esi]
lea edx, [esi*4]
jmp 0xd7bb08
lea esp, [esp + 0xa]
mov ah, 0x8c
xchg dword [esp + 7], eax
push dword [esp + 8]
mov dword [esp + 0xc], ecx
mov ebx, 0x660f2dd7
jmp 0xd7ba7b
mov ax, 0x3bd1
bswap edx
shl bl, cl
mov al, dl
xchg bx, ax
push word [esp + 0x20]
jmp 0xd7ba2e
xchg bx, ax
add esp, 0x12
push word [esp + 8]
xchg ebx, eax
jmp 0xd7bb1b
rcr dl, 3
pushfd
pushfd
xchg bl, ah
mov eax, 0x709c35c4
mov bl, byte [esp + 0xe]
jmp 0xd7bace
lea edx, [ebx - 4]
pop word [esp + 2]
rdtsc
not edx
push eax
mov ax, 0x6b16
jmp 0xd7bae4
mov eax, 0xb2f3ffd3
cmc
mov ebx, dword [esp + 0xe]
push dword [esp + 0xd]
add esp, 0
add edx, 0xc1d9a563
jmp 0xd7bc87
pop eax
lea eax, [ebx + esi]
xchg ebx, eax
pop eax
mov ax, 0x59c6
btc ebx, edi
jmp 0xd7b9f4
lea esp, [esp + 9]
mov ax, 0xa744
pop word [esp + 2]
jmp 0xd7bc25
add esp, 1
mov ax, bx
mov eax, dword [esp + 4]
mov ax, word [esp + 5]
std
pop dword [esp + 0xb]
jmp 0xd7bb4c
bsr edx, edi
push dword [esp + 2]
mov dh, byte [esp + 3]
lea ebx, [ebx*4]
lea edx, [edx*4]
lea eax, [esi + esi]
jmp 0xd7bb62
mov dx, si
push word [esp + 0xe]
mov word [esp], dx
std
xchg byte [esp + 0xf], dl
mov bh, al
jmp 0xd7bb7f
xchg byte [esp], al
mov byte [esp], bl
mov ebx, dword [esp]
lea eax, reloc.kernel32.dll_LoadLibraryA
jmp 0xd7bc0a
lea esp, [esp + 3]
mov byte [esp], dh
rdtsc
mov ax, word [esp]
mov word [esp], dx
mov ax, 0x3487
jmp 0xd7bbc7
shr ax, cl
mov eax, 0x1a9ad94c
lea esp, [esp + 1]
call fcn.00d7bc56
sbb dh, byte [ebp + 0x64]
xchg edi, eax
invalid
neg bx
bsf dx, si
mov eax, ebx
bswap eax
sub esp, 0
mov eax, 0x12db05d6
jmp 0xd7bbf4
lea ebx, [esi*4]
xchg byte [esp + 3], dl
rcl ax, 4
lea ebx, [esi*4]
neg dh
inc eax
jmp 0xd7bbdd
mov ah, byte [esp + 0xc]
neg ebx
pop dword [esp]
mov ax, 0x9c4b
rcl bx, 3
xchg ebx, eax
jmp 0xd7bbb2
dec ah
xchg byte [esp + 5], ah
jmp 0xd7bb3a