Function at 0x7897d8
Capabilities:
Execute anti-debugging instructions

Disassembly:
push eax
push edx
pushal
push ebx
pop ebx
push eax
push edx
rdtsc
pop edx
pop eax
jg 0x6a4824
popal
rdtsc
pushal
jmp 0x6a4833
push eax
push edx
rdtsc
pop edx
pop eax
popal
je 0x6a4848
push ecx
pop ecx
jns 0x6a4848
pop edx
pop eax
pushal
push ecx
push ebx
pop ebx
pushal
popal
pop ecx
push ebx
jmp 0x6a4865
pop ebx
jmp 0x6a4873
jmp 0x6a4882
popal
push eax
mov dword [esp], ebp
push esp
mov ebp, dword [esp]
add esp, 4
push esi
mov esi, 0x6fdbe4d7
dec esi
or esi, 0x7f5df649
or esi, 0x3969c439
shr esi, 3
or esi, 0x3ed7f473
push ecx
mov ecx, 0xc0000105
add esi, ecx
pop ecx
add ebp, esi
mov esi, dword [esp]
add esp, 4
push 0x35046d1d
mov dword [esp], esi
mov esi, 4
sub ebp, esi
mov esi, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
mov ecx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
pop dword [esp]
pop esp
push ebp
push dword [esp + 4]
mov ebp, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], edi
mov dword [esp], eax
push eax
mov dword [esp], 0x5a8e41c1
mov dword [esp], edx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebp
mov dword [esp], 0x21a250b2
mov dword [esp], ebp
push edi
mov dword [esp], 0x15a707ef
mov ebp, dword [esp]
push eax
mov eax, esp
add eax, 4
push ecx
mov dword [esp], ebx
mov ebx, 4
add eax, ebx
pop ebx
xchg dword [esp], eax
pop esp
mov dword [esp + 4], ebp
mov ebp, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
mov dword [esp], edi
mov dword [esp], ecx
push 0x2ae3a7c
mov dword [esp], ecx
push esp
pop ecx
push edx
mov dword [esp], 0x57859c84
mov dword [esp], ecx
mov dword [esp], ebx
mov ebx, 4
sub ecx, 0x77be70a2
add ecx, ebx
push eax
mov eax, 0x77be70a2
add ecx, 0x4afb5816
add ecx, eax
sub ecx, 0x4afb5816
pop eax
pop ebx
push ebx
mov ebx, 0x7fde6bd1
not ebx
dec ebx
xor ebx, 0x6bfbe25a
not ebx
sub ebx, 0x14258984
sub ecx, ebx
mov ebx, dword [esp]
add esp, 4
push 0x4b8f0712
mov dword [esp], ecx
push dword [esp + 4]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], eax
mov dword [esp], 0x7feb6900
mov dword [esp], edx
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebx
push esp
pop ebx
push ecx
mov ecx, 0x7cbf6aa7
shl ecx, 8
and ecx, 0x5fdb2ce6
shl ecx, 5
dec ecx
push ebx
mov dword [esp], 0x770c7cf9
mov dword [esp], ebp
mov ebp, 0xe9447ffb
sub ecx, ebp
pop ebp
add ebx, 0x3bf6e8ca
add ebx, ecx
sub ebx, 0x3bf6e8ca
pop ecx
push edx
mov dword [esp], esi
mov esi, 4
sub ebx, 0x78fd76e6
sub ebx, esi
add ebx, 0x78fd76e6
mov esi, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebx
push dword [esp + 4]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push 0x26feec02
mov dword [esp], eax
mov dword [esp], 0x3604cbbb
mov dword [esp], esi
mov dword [esp], 0x7bbf0ec2
sub dword [esp], 0xcbfa983
add dword [esp], 0x79df9062
push 0x2d69b0c8
mov dword [esp], ebp
push ecx
mov dword [esp], edx
mov edx, 0x7e0ecb00
mov ebp, 0x1b55eb62
xor ebp, edx
mov edx, dword [esp]
add esp, 4
xor dword [esp + 4], ebp
push dword [esp]
pop ebp
add esp, 4
shl dword [esp], 1
push edx
mov edx, 0x7eff269b
and dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edi
mov dword [esp], eax
mov eax, 0x2d779e8b
add dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edx
push edi
mov edi, 0x59bcbf9c
mov dword [esp + 4], edi
pop edi
sub dword [esp], 0x6062e4e1
shr dword [esp], 3
xchg dword [esp], ecx
dec ecx
xchg dword [esp], ecx
not dword [esp]
inc dword [esp]
and dword [esp], 0x56ab266b
add dword [esp], 0x38025b49
sub esp, 4
mov dword [esp], ebp
push 0x5e61c1a9
mov dword [esp], edi
sub esp, 4
mov dword [esp], eax
mov dword [esp], 0x7532fc7e
add dword [esp], 1
xor dword [esp], 0x2a56dd1
pop edi
push eax
mov eax, 0x666851e
xor edi, eax
pop eax
mov ebp, edi
pop edi
xor dword [esp + 4], ebp
push dword [esp]
pop ebp
add esp, 4
mov dword [esp], eax
mov dword [esp], ebp
push eax
push edx
push 0x3e933517
mov dword [esp], ecx
mov ecx, 0x375f6a0e
push ebx
push edi
mov dword [esp], edx
mov dword [esp], ecx
pop ebx
mov edx, ebx
pop ebx
pop ecx
shr edx, 4
push 0x2c121d41
mov dword [esp], eax
mov dword [esp], esi
push 0x10af13be
mov dword [esp], edi
push 0x7ebf40a1
pop edi
and edi, 0x77cd482e
shl edi, 6
inc edi
sub edi, 0x2e25963b
mov esi, edi
mov edi, dword [esp]
add esp, 4
push eax
mov eax, 0x77f7079a
add edx, eax
pop eax
add edx, esi
sub edx, 0x77f7079a
pop esi
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], esi
push ebp
mov ebp, esp
push edx
sub esp, 4
mov dword [esp], ebp
push ecx
push ebp
mov ebp, 4
mov ecx, ebp
pop ebp
push ecx
mov ebp, dword [esp]
add esp, 4
pop ecx
mov edx, ebp
mov ebp, dword [esp]
add esp, 4
sub ebp, 0x3df68061
add ebp, edx
push eax
mov eax, 0x7bb7584c
push ecx
mov ecx, 0x6ff754a7
dec ecx
push ecx
not dword [esp]
pop ecx
xor ecx, 0x3fe7a425
shr ecx, 7
sub esp, 4
mov dword [esp], esi
mov esi, 0x6ddf4154
add ecx, 0x1ffb8773
add ecx, esi
sub ecx, 0x1ffb8773
pop esi
or eax, ecx
mov ecx, dword [esp]
add esp, 4
not eax
add eax, 0xbdb5dfe0
add ebp, eax
pop eax
mov edx, dword [esp]
add esp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edi
call fcn.006a4c9d
rdtsc
push ebx
push eax
push edx
rdtsc
pop edx
pop eax
push edi
pop edi
pop ebx
pop edx
pop eax
pushfd
push edx
mov dword [esp], ecx
mov dword [esp], 0x7d5746c1
add dword [esp], 0x7bb78729
xor dword [esp], 0x32fd8fe7
dec dword [esp]
xor dword [esp], 0x946e7d1f
sub dword [esp], 0x68fc4180
neg dword [esp]
push eax
mov eax, 0x77fbe363
sub dword [esp + 4], eax
pop eax
add dword [esp], 0x6e9ce2e3
push ebp
push 0x4c0721c2
mov dword [esp], edi
mov edi, 0x387244
mov dword [esp + 4], edi
mov edi, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push esi
mov dword [esp], eax
mov dword [esp], 0x7df74602
jge 0x7896db
xor al, 0x24
inc ebx
add eax, 0xc813148
and al, 0x57
pop ss
mov cl, 0x33
jge 0x7896db
xor al, 0x24
inc ebx
add eax, 0xc813148
and al, 0x57
pop ss
mov cl, 0x33
add dword [esp], 0x98e7b630
mov dword [esp], eax
push 0x2aabda38
mov dword [esp], edi
mov edi, esp
add edi, 4
push ebx
mov ebx, 4
sub edi, ebx
mov ebx, dword [esp]
add esp, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
push dword [esp + 0x10]
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push dword [esp + 8]
push dword [esp]
pop ebx
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
push ebp
mov dword [esp], eax
mov eax, 4
add ebp, eax
pop eax
xchg dword [esp], ebp
pop esp
jmp 0x6a4813