Function at 0x7f6e1f
Capabilities:
Execute anti-debugging instructions

Disassembly:
bsr edx, ebp
mov dh, byte [esp]
mov dh, bh
mov edx, esi
xchg dword [esp], edi
jmp 0x7f6e32
mov dx, 0x5aae
neg dx
call fcn.007f6e8a
mov dh, 0x14
mov ch, ch
sbb al, 0x9b
add eax, eax
cmp dword [edx], 0x15
test byte [esi + 0x648d2434], al
and al, 2
jmp 0x7f6e71
sub ax, 0x807a
mov dx, di
mov edx, 0x1ddcec68
mov dx, word [esp]
shr dl, 0
jmp 0x7f6e9a
jo 0x7f6eb0
lea edx, [edi*4]
jmp 0x7f6eb7
lea edx, [edi*4]
add ax, 0x4617
btr dx, di
jmp 0x7f7218
and dh, bh
lea edx, reloc.KERNEL32.dll_VirtualQuery
not edx
jmp 0x7f6f73
not edx
jmp 0x7f6f73
sub esp, 6
jmp 0x7f6f45
add bx, ax
neg edx
jne 0x7f6f56
rdtsc
bsf dx, bx
mov eax, dword [esp]
jmp 0x7f6fac
lea edx, reloc.KERNEL32.dll_VirtualQuery
mov dl, byte [esp + 0x18]
lea esp, [esp + 2]
jmp 0x7f6f2f
rdtsc
jmp 0x7f6fa5
shr edx, cl
jnp 0x7f6f8f
mov eax, dword [esp]
shl edx, 0x18
neg eax
lea eax, reloc.KERNEL32.dll_VirtualQuery
jmp 0x7f7082
not ax
sub esp, 0x1c
jo 0x7f6efc
sub esp, 6
lea edx, reloc.KERNEL32.dll_VirtualQuery
mov dl, byte [esp + 0x18]
lea esp, [esp + 2]
jmp 0x7f6f2f
mov eax, dword [esp]
shl edx, 0x18
jmp 0x7f70de
bsf dx, bx
mov eax, dword [esp]
sub esi, 2
jmp 0x7f6f5a
lea esp, [esp + 4]
xor cx, 0x2d9f
mov ax, word [esp]
sub esp, 4
jmp 0x7f6fd0
pop dword [esp]
cmc
lea edx, [eax + edx]
jmp 0x7f700c
je 0x7f6fe6
mov dx, di
xor edx, eax
jmp 0x7f7048
mov dx, di
xor edx, eax
mov eax, esi
lea eax, [edx*4]
lea eax, [ecx + edx]
jmp 0x7f7024
pop dword [esp]
cmc
lea edx, [eax + edx]
jmp 0x7f6fb1
mov dh, al
push dx
cmp eax, ebp
rdtsc
lea esp, [esp + 2]
call fcn.007f709d
salc
inc ecx
ret
lea esp, [esp + 4]
dec cx
dec ah
jge 0x7f700e
jl 0x7f7056
rdtsc
lea esp, [esp + 2]
jmp 0x7f705e
mov eax, esi
lea eax, [edx*4]
lea eax, [ecx + edx]
jmp 0x7f7024
mov dh, al
push dx
cmp eax, ebp
jmp 0x7f7030
ror cx, 0
lea eax, [esi + edi]
jmp 0x7f706b
bswap edx
mov dh, ch
mov eax, 0xe864a813
bswap edx
lea edx, [edi + ebp]
add edx, edi
jmp 0x7f716e
mov al, byte [esp]
jmp 0x7f70e9
neg eax
lea eax, reloc.KERNEL32.dll_VirtualQuery
mov al, byte [esp]
pushfd
mov dx, ax
push dword [esp + 2]
je 0x7f7005
jne 0x7f6fc7
mov dh, byte [esp]
jmp 0x7f713b
xor cx, 0x2656
call fcn.007f7125
not eax
jmp 0x7f718b
rdtsc
lea eax, [edx + edx]
mov edx, 0xd45f70d7
rcr dh, cl
jmp 0x7f7392
jl 0x7f70fd
mov dh, byte [esp]
jmp 0x7f713b
rol cx, 0
jb 0x7f7151
rdtsc
call fcn.007f71af
mov esp, 0x224648d
xchg dword [esp], edi
not dh
btr edx, esp
mov dl, al
not eax
jmp 0x7f71d6
lea edx, [edx*4]
lea edi, [edi - 0x23]
call fcn.007f71c0
mov edx, 0xd45f70d7
rcr dh, cl
jmp 0x7f7392
jne 0x7f6ee8
and dh, bh
lea edx, reloc.KERNEL32.dll_VirtualQuery
jmp 0x7f6ef8
pushal
setbe dh
jmp 0x7f727d
lea edx, reloc.KERNEL32.dll_VirtualQuery
lea esp, [esp]
lea esp, [esp + 1]
jmp 0x7f728b
lea edx, [ecx + edx]
lea edx, [ebp - 0x41]
jmp 0x7f72e8
lea esp, [esp]
lea esp, [esp + 1]
call fcn.007f72c5
jmp 0x7f7293
xchg ecx, eax
sub esp, 1
jbe 0x7f7231
lea edx, reloc.KERNEL32.dll_VirtualQuery
jmp 0x7f725b
mov dword [ebp], ecx
jmp fcn.007f4542
mov ecx, esi
bswap edx
xchg ecx, eax
mov eax, ebp
lea ecx, [ebx*4]
jmp 0x7f736c
jb 0x7f722b
pushal
setbe dh
jmp 0x7f722f
lea edx, [ecx + edx]
lea edx, [ebp - 0x41]
cwde
neg dx
jmp 0x7f72b6
lea edx, [edx*4]
call 0x7f7650
push es
test dword [reloc.KERNEL32.dll_VirtualQuery], edx
cmpsd dword [esi], dword es:[edi]
into
pop ecx
xchg edx, ecx
mov dl, byte [esp]
lea ecx, reloc.KERNEL32.dll_VirtualQuery
sub ebp, 4
mov dl, byte [esp]
jmp 0x7f7356
xchg ecx, eax
mov dh, al
bts edx, eax
jns 0x7f72e2
js 0x7f7250
sub esi, 2
sete ah
xchg cx, ax
bswap edx
jmp 0x7f73d8
xchg dh, dl
bswap edx
sets dh
mov ch, byte [esp]
lea ecx, [eax - 8]
jmp 0x7f743a
mov al, byte [edi - 1]
not dx
mov edx, dword [esp]
xchg dx, cx
and dh, 0x7a
jmp 0x7f741c
sets dh
mov ch, byte [esp]
lea ecx, [eax - 8]
jmp 0x7f743a
jg 0x7f73c2
xchg dh, dl
bswap edx
jmp 0x7f73fa
lea ecx, [edx*4]
push ecx
add al, bl
lea ecx, [eax + esi]
call fcn.007f7424
and cl, dh
lea ecx, [eax + ebx]
lea ecx, [ecx + ebp]
mov ch, bl
jmp 0x7f74b2
ror dl, 0
mov cl, byte [esp]
mov ecx, dword [esp]
lea ecx, reloc.KERNEL32.dll_VirtualQuery
cmc
jmp 0x7f7508
neg ch
ror dl, 0
bsf cx, cx
jmp 0x7f7545
sub esp, 0x1f
clc
mov dword [esp + 9], esp
call fcn.007f752f
mov al, 0x22
mov al, 0xd7
and ah, ah
jecxz 0x7f7506
jne 0x7f7552
lea ecx, [ecx + ebx]
mov cx, dx
mov ch, byte [esp]
lea esi, [esi - 0x47]
stc
mov ecx, 0x443ba904
call fcn.007f7485
invalid
jo 0x7f74cc
neg ch
jmp 0x7f74ce
mov cl, 0x47
mov ch, byte [esp]
sub esp, 0x1f
clc
mov dword [esp + 9], esp
lea esp, [esp + 3]
jmp 0x7f75e0
not dh
cmc
jmp 0x7f28cb
jno 0x7f750e
mov cl, 0x47
mov ch, byte [esp]
jmp 0x7f74d7
xchg ch, cl
mov ecx, 0x2d8ec518
mov cl, 0xe0
mov cx, word [esp]
lds ecx, [esi + 0x66e0b12d]
mov ecx, dword [esp]
call 0x7f75fa
mov edi, 0x8b303186
or al, 0x24
lea ecx, [edi*4]
mov ch, dl
neg ecx
rcl ecx, 0x1f
xchg dword [esp], edi
jmp 0x7f754e
not dh
cmc
jmp 0x7f28cb
lea ecx, [eax + edi]
bswap ecx
lea esp, [esp + 2]
push dword [esp + 4]
ret 8
mov cx, 0xb5b7
xchg cl, ch
dec cx
xchg dword [esp + 4], edi
bswap ecx
push bx
jmp 0x7f7595
mov ecx, dword [esp]
mov cl, 0x3b
mov ecx, ebx
mov cx, word [esp]
mov cx, word [esp]
jmp 0x7f7637
lea esp, [esp + 0x1c]
xor dl, 0x26
neg cx
jle 0x7f75ca
jg 0x7f7618
mov word [edx + ecx*4], ss
in eax, dx
sbb al, 0xa3
add eax, eax
cmp dword [edx], 0x15
test byte [ebp - 0x44f0c881], cl
leave
jmp 0x7f75b8
mov cx, word [esp]
mov cx, word [esp]
jmp 0x7f7637
mov ecx, dword [esp]
mov cl, 0x3b
mov ecx, ebx
jmp 0x7f7602
rol dl, 0
mov ch, byte [esp]
jmp 0x7f7747
lea ecx, [eax - 0x17]
ror ch, 4
jbe 0x7f7621
ja 0x7f7621
push edi
enter 0x395e, 0xffffffffffffffc8
pop esi
cmp eax, ecx
jl 0x7f7643
cmc
pushfd
outsd dx, dword [esi]
fist dword [edi + eax*4]
mov dword cs:[ebp], eax
shr dx, cl
jae 0x7f758d
jb 0x7f7527
clc
mov cx, dx
lea ecx, [edi + edi]
sets ch
neg cx
bswap ecx
call fcn.007f7900
cmp dword [eax], ebx
lea ecx, [edx*4]
rol dl, 0
jge 0x7f7662
jl 0x7f7708
sets ch
jmp 0x7f772a
setle ch
mov cx, 0xc8d0
jmp 0x7f7678
clc
mov cx, dx
lea ecx, [edi + edi]
call fcn.007f76c3
add bl, dl
jmp 0x7f7793
neg cx
jmp 0x7f766f
neg ecx
jge 0x7f76a1
setle ch
mov cx, 0xc8d0
lea ecx, [edx*4]
jmp 0x7f767f
dec edi
jmp 0x7f779c
bswap ecx
bswap ecx
cmc
jnp 0x7f777d
jp 0x7f777d
mov ch, 0x4b
lea edx, reloc.KERNEL32.dll_VirtualQuery
mov cx, 0xa7e3
mov cx, 0x9d2f
call 0x7f77d1
jp 0x7f7808
mov cx, si
call fcn.007f7778
call fcn.007f7887
int 0x46
aam 0xb3
dec esi
mov bl, 0x4e
int1
jge 0x7f77c3
imul ecx, dword [esi], reloc.KERNEL32.dll_VirtualQuery
cmp eax, 0x6bc8a95e
cmp bh, 0x74
and al, 2
jb 0x7f77bb
xchg byte [esp + 3], dh
jmp 0x7f7895
iretd
mov edx, 0xcf26b648
lea ecx, reloc.KERNEL32.dll_VirtualQuery
pop edx
call fcn.007f78c3
int1
popal
int1
nop
arpl word [edi + 0x5730a231], sp
mov byte [0x148d6361], al
mov ebp, 0
clc
clc
push dword [esp + 0x18]
ret 0x1c