Function at 0x789799
Capabilities:
Execute anti-debugging instructions

Disassembly:
push eax
push edx
push ebx
jmp 0x69d63f
pop ebx
push eax
push edx
js 0x69d648
rdtsc
pushal
popal
push ecx
pop ecx
pop edx
pop eax
rdtsc
jo 0x69d65a
push ecx
pop ecx
pop edx
pop eax
js 0x69d670
jl 0x69d670
push eax
push edx
rdtsc
pop edx
pop eax
push ebx
pop ebx
push ebx
push esp
mov ebx, dword [esp]
push edx
push esp
mov edx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edi
mov edi, 0x66321425
xor edi, 0x6797896a
xor edi, 0x6efbc64a
or edi, 0x627a3853
xor edi, 0x6f7e7b53
add edx, edi
pop edi
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
add ebx, 4
push edi
mov edi, 0x7fd1bfc1
and edi, 0x47e97f00
or edi, 0x6ff7ade7
shl edi, 8
sub edi, 0x5fbf5abc
dec edi
push eax
mov eax, 0x72612e7e
shr eax, 3
not eax
add eax, 0x2eed7874
add eax, 0x79dcde3f
sub eax, 0x7e9f96b8
xor eax, 0xdcd60a90
xor edi, eax
mov eax, dword [esp]
add esp, 4
dec edi
inc edi
push ebp
mov ebp, 0x7def2733
shr ebp, 1
inc ebp
or ebp, 0x7d57c1b1
add ebp, 0x7bb554c2
xor ebp, 0xe55aa5fb
add edi, ebp
pop ebp
dec edi
xor edi, 0x7dffaa79
sub ebx, edi
pop edi
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebp
mov dword [esp], 0x2edd88da
inc dword [esp]
shr dword [esp], 7
neg dword [esp]
sub dword [esp], 1
inc dword [esp]
sub dword [esp], 0x9ba50ced
sub dword [esp], 0xffffffff
push edx
push ecx
mov dword [esp], eax
mov dword [esp], ecx
sub esp, 4
mov dword [esp], edi
mov edi, 0x15efb000
mov ecx, edi
pop edi
mov edx, 0x8dad0b92
sub edx, 0x7fbb34ef
push ebx
mov ebx, 0x5f7ff968
add edx, ebx
pop ebx
sub edx, 0x36f73f36
sub edx, ecx
add edx, 0x36f73f36
sub edx, 0x5f7ff968
add edx, 0x7fbb34ef
pop ecx
or dword [esp + 4], edx
push dword [esp]
pop edx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
sub dword [esp], 0x7b49cebe
and dword [esp], 0x5e7ba77f
add dword [esp], 0xbee14ffd
mov dword [esp], ecx
push ebp
mov dword [esp], ebx
mov dword [esp], ecx
push edi
push esp
mov edi, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], esp
push 0x61eb3a4a
mov dword [esp], eax
mov eax, 4
push ecx
mov ecx, 0x3edbfdcc
sub dword [esp + 8], ecx
pop ecx
sub dword [esp + 4], 0x6bdb9f08
add dword [esp + 4], eax
add dword [esp + 4], 0x6bdb9f08
push eax
mov eax, 0x3edbfdcc
add dword [esp + 8], eax
pop eax
mov eax, dword [esp]
add esp, 4
pop ecx
add ecx, 4
push esi
push 0x27da2a00
pop esi
xor esi, 0x27da2a04
sub ecx, esi
pop esi
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], edx
push edx
mov dword [esp], 0x7df72d8f
sub dword [esp], 0xfdf75946
push edi
push edx
mov edx, 1
mov edi, edx
pop edx
sub dword [esp + 4], edi
pop edi
xchg dword [esp], edx
xor edx, ecx
xor ecx, edx
xor edx, ecx
not ecx
xor edx, ecx
xor ecx, edx
xor edx, ecx
xchg dword [esp], edx
push ecx
mov ecx, 0x7fe42185
or dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
shl dword [esp], 5
push esi
push ecx
mov ecx, 0x6f37b9d8
push ebp
mov dword [esp], ecx
pop esi
mov ecx, dword [esp]
add esp, 4
sub dword [esp + 4], 0x7ffe7397
add dword [esp + 4], esi
add dword [esp + 4], 0x7ffe7397
mov esi, dword [esp]
add esp, 4
mov dword [esp], ebx
push ebp
push 0x48cb58b
mov dword [esp], esp
add dword [esp], 4
mov ebp, dword [esp]
add esp, 4
push ecx
mov ecx, 0x5ffb80ff
shl ecx, 5
sub ecx, 0xff701fdc
add ebp, ecx
mov ecx, dword [esp]
add esp, 4
push eax
mov dword [esp], 0x1f7f53c1
mov dword [esp], eax
sub esp, 4
mov dword [esp], ecx
push edx
mov dword [esp], 0x77cd8d41
pop ecx
xor ecx, 0x77cd8d45
mov eax, ecx
push dword [esp]
pop ecx
add esp, 4
sub ebp, 0x52dee361
sub ebp, eax
add ebp, 0x52dee361
pop eax
push ebp
push dword [esp + 4]
mov ebp, dword [esp]
add esp, 4
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ebp
mov dword [esp], ebx
push 0x56253521
mov dword [esp], ebx
push ecx
mov dword [esp], edi
mov dword [esp], esp
push 0x6cbf57d4
mov dword [esp], ecx
mov ecx, 4
add dword [esp + 4], ecx
pop ecx
mov ebx, dword [esp]
push ebx
push esp
mov ebx, dword [esp]
add esp, 4
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
push ecx
push eax
push ecx
mov dword [esp], 0x7a9e0d00
pop eax
push ebx
mov ebx, 0x7a9e0cfc
sub eax, ebx
pop ebx
mov ecx, eax
pop eax
sub ebx, ecx
mov ecx, dword [esp]
add esp, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], ebp
push 0x1bc7fb21
mov dword [esp], ebp
mov ebp, esp
push ecx
mov ecx, 0x6eea825b
push esi
mov esi, 0x6eea8257
sub ecx, 0x47ff5bc7
sub ecx, esi
add ecx, 0x47ff5bc7
pop esi
add ebp, ecx
pop ecx
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
mov ebx, esp
push eax
mov dword [esp], esi
push ebp
mov dword [esp], edx
mov edx, 0x7eb5daf9
or edx, 0x7b7f7d36
sub edx, 0x7ffffffb
push edi
mov edi, edx
mov esi, edi
pop edi
pop edx
add ebx, 0x7f579bd5
add ebx, esi
push eax
mov eax, 0x7ff97452
and eax, 0x5b739e3b
neg eax
shr eax, 3
shl eax, 1
neg eax
add eax, 0xa87b56cf
sub ebx, eax
pop eax
pop esi
push ebp
mov ebp, 4
sub ebx, ebp
pop ebp
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], edx
mov dword [esp], esi
push eax
push ecx
mov dword [esp], ebp
mov dword [esp], 0x4dfb2441
neg dword [esp]
xor dword [esp], 0x5fedb89c
add dword [esp], 0x2ac69252
mov dword [esp], esp
push ebx
mov ebx, 4
add dword [esp + 4], ebx
pop ebx
pop eax
push esi
push ebx
mov dword [esp], 0x43e181b
mov dword [esp], eax
mov dword [esp], 0x77ff8311
inc dword [esp]
and dword [esp], 0x6fad144f
add dword [esp], 0x98530002
pop esi
sub eax, 0x3b5cf789
add eax, esi
add eax, 0x3b5cf789
pop esi
push edi
mov edi, 0x66ef8123
neg edi
add edi, 0x7fefe800
or edi, 0x577d8dd1
push ecx
push 0x5ebd8ddf
pop ecx
not ecx
push edx
mov edx, 0x54274a62
add ecx, edx
pop edx
add ecx, 0x7ffbc24a
sub ecx, 0x7f6d758e
sub ecx, 0x967a1965
sub edi, ecx
pop ecx
sub eax, edi
pop edi
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], edi
call fcn.0069db25
add al, 0x24
add dword [edi + 0x48910c8], esp
and al, 0x56
mov esi, esp
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], ebx
push dword [esp + 0x10]
mov eax, dword [esp]
push esi
push esp
pop esi
add esi, 4
add esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
push dword [esp + 8]
push dword [esp]
pop ebx
push ebp
mov ebp, esp
push edx
mov edx, 4
add ebp, edx
pop edx
add ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov eax, dword [esp]
push ebx
mov ebx, esp
push esi
mov esi, 4
add ebx, esi
pop esi
push edi
mov dword [esp], esi
mov esi, 4
add ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
jmp 0x69d62b