Function at 0xa7f6bc
Capabilities:
Execute anti-debugging instructions

Disassembly:
pop edi
not edx
shl edx, 6
sub edx, 0x4dbbce3b
neg edx
add edx, 0x697670c3
sub edi, edx
pop edx
push edi
mov ebx, dword [esp]
add esp, 4
mov edi, dword [esp]
add esp, 4
jmp 0xa7d513
push ebp
mov ebp, esp
push esi
mov esi, 0x6e3f5dbd
sub esi, 0x6e3f5db9
add ebp, esi
pop esi
jmp 0xa7d280
push dword [esp]
push dword [esp]
jmp 0xa7ce76
pop dword [esp]
mov esp, dword [esp]
jmp 0xa7d6f2
neg ecx
jmp 0xa7cf48
pop edx
push edx
mov edx, esp
push eax
mov eax, 4
add edx, 0x7daf2cbc
add edx, eax
sub edx, 0xb19524bc
add byte [ecx + 0x4c2], al
add byte [edx - 1], dl
je 0xa7cebd
add al, 0x5a
pop dword [esp]
pop esp
sub esp, 4
jmp 0xa7cf55
pop edi
pop dword [esp]
pop esp
add esp, 4
shl edi, 4
not edi
xchg edi, esi
not esi
xchg edi, esi
push edx
push edi
mov edi, 0x77756f92
and edi, 0x5ffd1b97
neg edi
not edi
jmp 0xa7d2df
sub ecx, 0x7076ff55
add edi, ecx
jmp 0xa7cfb2
mov dword [esp], ecx
jmp 0xa7d43e
mov dword [esp], eax
mov eax, 4
add ecx, eax
pop eax
push ebx
jmp 0xa7d706
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], ecx
jmp 0xa7d41b
pop ecx
jmp 0xa7cfd5
push edi
push dword [esp + 4]
pop edi
jmp 0xa7cf17
xor dword [esp], ecx
jmp 0xa7d446
add ebp, 4
xchg dword [esp], ebp
pop esp
sub ebx, edi
sub ebx, 0x7fda6907
push eax
jmp 0xa7d35e
xor edi, 0x7288282f
mov edx, edi
jmp 0xa7cd23
mov dword [esp], esi
mov esi, 0x3dfdfe00
add ebx, esi
pop esi
mov edi, dword [esp]
jmp 0xa7d44e
mov ecx, esp
add ecx, 4
jmp 0xa7d695
mov ecx, esp
push esi
jmp 0xa7cf78
xor ecx, dword [esp]
jmp 0xa7d5ed
push edx
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
jmp 0xa7d648
jmp 0xa7d7e1
mov esp, dword [esp]
push 0x52f578c2
mov dword [esp], edi
push 0x4d89d70c
mov dword [esp], ecx
mov dword [esp], reloc.ws2_32.dll_WSASetLastError
xor dword [esp], reloc.ws2_32.dll_WSASetLastError
push dword [esp]
mov edi, dword [esp]
push edi
push esi
mov dword [esp], esp
add dword [esp], 4
pop edi
add edi, 4
push ecx
mov ecx, 0x777d0b0c
sub ecx, 0x7d63da07
shr ecx, 4
add ecx, 0x7fe76d97
jmp 0xa7ce5d
xchg dword [esp], ecx
pop esp
dec edi
jne 0xa7d0a0
sti
sub esp, 4
mov dword [esp], edx
push esp
pop edx
push ebp
push esi
mov esi, 4
mov ebp, esi
pop esi
add edx, ebp
pop ebp
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ecx
mov ecx, 0x7fde1fb
jmp 0xa7d685
push esi
mov esi, 0xf9fdb37b
push esi
pop ebx
pop esi
add ebx, ecx
jmp 0xa7cf89
push ebp
mov ebp, 4
add ecx, ebp
pop ebp
push 0x57af109f
mov dword [esp], ebp
jmp 0xa7d6b2
mov dword [esp], reloc.ws2_32.dll_WSASetLastError
and dword [esp], reloc.ws2_32.dll_WSASetLastError
xor dword [esp], reloc.ws2_32.dll_WSASetLastError
mov dword [esp], ecx
push dword [esp + 4]
pop ecx
jmp 0xa7cdf9
push 0x2184314c
mov dword [esp], ecx
mov dword [esp], reloc.ws2_32.dll_WSASetLastError
jmp 0xa7cde0
push edx
mov edx, 4
jmp 0xa7d711
mov ebx, edx
pop edx
add ecx, 0x7bf7f4ee
add ecx, ebx
sub ecx, 0x7bf7f4ee
pop ebx
xor ecx, dword [esp]
jmp 0xa7d0f6
jmp 0xa7d843
jmp 0xa7f2b4
mov eax, ebx
jmp 0xa7f521
lea eax, reloc.ws2_32.dll_WSASetLastError
mov dword [ebp + reloc.ws2_32.dll_WSASetLastError], eax
lea eax, reloc.ws2_32.dll_WSASetLastError
mov dword [ebp + reloc.ws2_32.dll_WSASetLastError], eax
lea eax, reloc.ws2_32.dll_WSASetLastError
mov dword [ebp + reloc.ws2_32.dll_WSASetLastError], eax
jmp 0xa7f686
cmp dword [ebp + reloc.ws2_32.dll_WSASetLastError], 1
je 0xa7fb84
cld
mov byte [ebp + 0x1ba11acf], 0x43
jb 0xa7f6b3
jmp 0xa7f6b3
call 0xa7f6bc
cmc
shl byte [ebp + 0x5e9ec], 1
add byte [eax], al
pop edx
andnps xmm3, xmmword [esi + 0x52505001]
ja 0xa7f6d1
pushal
popal
rdtsc
jge 0xa7f6df
push eax
push edx
rdtsc
pop edx
pop eax
pop edx
pop eax
mov eax, dword [esp + 4]
pushal
jo 0xa7f6ee
pushal
popal
push eax
push edi
pop edi
pop eax
popal
mov eax, dword [eax]
push eax
push edx
push edi
pushal
popal
pop edi
rdtsc
jo 0xa7f709
push eax
push edx
rdtsc
pop edx
pop eax
pop edx
pop eax
mov dword [esp + 4], eax
pushal
push eax
push edx
push esi
pop esi
rdtsc
push eax
push edx
rdtsc
pop edx
pop eax
pop edx
pop eax
jno 0xa7f73c
jmp 0xa7f73c
popal
pop eax
clc
push dword [ebp + 0x1ba11395]
push 0
push edi
call 0xa7f750
and byte [edi - 0x3d], bl
pop edi
mov dword [esp + 4], edi
add dword [esp + 4], 0x1b
inc edi
push edi
ret
mov edx, edx
push ecx
jmp 0xa7fb8c
mov ecx, 0x7e730feb
inc ecx
sub esp, 4
mov dword [esp], eax
push ebx
push edi
push 0x1b7a4694
mov dword [esp], edx
mov edx, 0x7eef93a5
mov edi, edx
pop edx
jmp 0xa7fbb2
and edi, 0x7bea0a62
shl edi, 5
shl edi, 2
jmp 0xa7fbf4
mov edx, ebx
push ecx
push eax
mov eax, edx
mov ecx, eax
mov eax, dword [esp]
add esp, 4
mov eax, ecx
mov ecx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0xa7fc34
xor edi, 0x3b8e27b1
mov ebx, edi
pop edi
xor ebx, 0x30fd9d90
jmp 0xa7fc08
push edx
jmp 0xa7fbc3
push eax
mov eax, 4
sub esi, eax
pop eax
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], eax
jmp 0xa7fcec
mov edx, dword [esp]
add esp, 4
pop ebx
push eax
mov eax, 0x3ff74ee8
sub ecx, eax
pop eax
sub ecx, eax
jmp 0xa7fc4e
add ecx, 0x3ff74ee8
pop eax
push 0x2738d466
mov dword [esp], ecx
sub dword [esp], reloc.ws2_32.dll_WSASetLastError
jmp 0xa7fc69
pop eax
add eax, 0x7dd0f1c9
mov ecx, dword [esp]
add esp, 4
push esi
push esi
mov dword [esp], esp
add dword [esp], 4
pop esi
sub esp, 4
mov dword [esp], edx
mov edx, 4
sub esi, 0x39ed63a6
add esi, 0x6fbfa5bf
push 0x31dfc5ed
mov dword [esp], edi
push ecx
mov ecx, 0x36d66f8b
mov edi, 0x1926f4a3
add edi, ecx
pop ecx
add esi, edi
pop edi
add esi, edx
sub esi, 0x4ffd642e
push ebx
mov ebx, 0x6eef53d1
shl ebx, 7
shl ebx, 1
not ebx
xor ebx, 0x7f138b40
add esi, 0x6cfbc856
sub esi, ebx
sub esi, 0x6cfbc856
pop ebx
add esi, 0x39ed63a6
pop edx
jmp 0xa7fc0e
call 0xa7fcf1
push dword [esp]
push dword [esp]
pop eax
jmp 0xa80081
push ecx
jmp 0xa7fd6d
sub ecx, 0x7cfd4b62
jmp 0xa7ff18
mov ecx, 0x5ecdda90
jmp 0xa80173
push edx
mov edx, 0x7783a828
or ebp, edx
pop edx
jmp 0xa8006b
push ebp
not dword [esp]
pop ebp
xor edx, ebp
xor ebp, edx
xor edx, ebp
not edx
jmp 0xa80197
mov ebp, dword [esp]
add esp, 4
jmp 0xa8030b
push dword [esp]
pop esi
add esp, 4
jmp 0xa7ff8e
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
push dword [eax]
push dword [esp]
push dword [esp]
jmp 0xa7fde4
add ecx, ebx
pop ebx
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
push ecx
jmp 0xa80028
push ecx
jmp 0xa803c8
dec eax
dec eax
jmp 0xa802b3
xor edi, dword [esp]
pop esp
mov dword [esp], ecx
push esp
mov ecx, dword [esp]
push edx
mov edx, esp
jmp 0xa802ba
xor ebx, 0x7c80358c
sub eax, ebx
pop ebx
add eax, 0x3eff294e
push 0x7a3fc564
jmp 0xa7ff55
push 0x1c31aec8
mov dword [esp], ebx
push eax
jmp 0xa8057c
sub ecx, edx
add ecx, 0x7cfd4b62
jmp 0xa7ff75
add esp, 4
push ebx
mov ebx, 0x7def8d49
add esi, ebx
mov ebx, dword [esp]
add esp, 4
add esi, ebx
sub esi, 0x7def8d49
jmp 0xa80518
mov dword [esp], edi
mov edi, 4
add ecx, edi
jmp 0xa803f7
mov dword [esp], eax
push esp
jmp 0xa7ffa3
xchg dword [esp], ebx
pop esp
mov dword [esp], ebp
mov ebp, 0x7bdf1497
jmp 0xa7fd77
sub ecx, 0x7fff9300
pop edx
sub edx, ecx
mov ecx, dword [esp]
jmp 0xa7ffae
push 0x68a1e48d
mov dword [esp], ebp
mov dword [esp], edi
mov dword [esp], ecx
push esp
pop ecx
jmp 0xa8008c
mov eax, dword [esp]
push ebp
mov ebp, esp
jmp 0xa802a0
push ebp
push esp
pop ebp
add ebp, 4
jmp 0xa7fe36
xchg dword [esp], eax
mov esp, dword [esp]
push ebx
mov dword [esp], ecx
mov dword [esp], edx
jmp 0xa80493
xor eax, 0x3bff76fa
xor eax, 0x3fda18d0
jmp 0xa807ec
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
add ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
push ebp
mov dword [esp], eax
mov dword [esp], ebx
push esi
jmp 0xa804c0
xor dword [esp + 4], ebp
push dword [esp]
pop ebp
add esp, 4
mov edx, dword [esp]
push esi
mov esi, esp
push eax
mov eax, 4
add esi, eax
jmp 0xa80634
not ebp
push edx
mov edx, 0x5dbf729e
and ebp, edx
pop edx
jmp 0xa803ec
add esp, 4
jmp 0xa80097
sub esp, 4
jmp 0xa7ff46
push 0x2a5709b6
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
jmp 0xa7fed7
mov edi, dword [esp]
add esp, 4
add ebp, ecx
pop ecx
push esi
mov esi, ebp
mov eax, esi
jmp 0xa80314
push ebx
mov ebx, esp
add ebx, 4
sub esp, 4
mov dword [esp], ecx
mov ecx, 4
sub ebx, ecx
pop ecx
jmp 0xa7ff64
xor edx, 0x58927b16
add ecx, 0x7fff9300
jmp 0xa7fd62
push edx
mov dword [esp], eax
jmp 0xa80344
xor edi, 0x6bbf9170
pop esi
add ebx, edi
pop edi
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push eax
jmp 0xa7fd35
push ebp
mov ebp, eax
mov edi, ebp
pop ebp
mov eax, dword [esp]
add esp, 4
add eax, edi
pop edi
push ecx
push ebp
jmp 0xa802df
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
jmp 0xa7fdcc
not eax
jmp 0xa8053e
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add ecx, 4
jmp 0xa803c0
push ebx
jmp 0xa80591
mov ebp, 4
mov ecx, ebp
pop ebp
add eax, 0x74f78655
sub eax, 0x75efa166
add eax, ecx
add eax, 0x75efa166
sub eax, 0x74f78655
mov ecx, dword [esp]
add esp, 4
jmp 0xa7ffbc
pop dword [esp]
pop esp
jmp 0xa7fe9d
pop esi
pop ebp
push ebp
mov ebp, 0x7f7f77f2
add eax, ebp
pop ebp
sub eax, ecx
push ebx
mov ebx, 0x7f7f77f2
sub eax, ebx
jmp 0xa80647
xor dword [esp], esi
jmp 0xa80653
push edx
mov dword [esp], ebp
jmp 0xa805ad
push ebx
mov ebx, esp
jmp 0xa805c7
mov dword [esp], edi
push eax
push 0x5e738e68
pop eax
jmp 0xa7fed0
sub eax, 0x6f764000
pop edx
mov ebx, 0x16fd15f7
xor ebx, eax
mov eax, dword [esp]
jmp 0xa7ff25
not ebp
shr ebp, 6
push ecx
jmp 0xa8040c
push dword [esp]
pop edi
add esp, 4
push ebx
mov ebx, 4
jmp 0xa7fe5c
mov ecx, 0x7f9f0a02
shr ecx, 1
push edi
mov edi, 0x7fcf808a
inc edi
shr edi, 5
inc edi
shl edi, 8
jmp 0xa804dd
push ebp
not dword [esp]
jmp 0xa80987
mov dword [esp], eax
mov eax, 0x784b9b38
jmp 0xa80202
push esi
mov esi, 0x7dbf8da5
xor esi, 0x7dbf8da1
push esi
xor dword [esp], reloc.ws2_32.dll_WSASetLastError
pop edi
jmp 0xa8020b
mov dword [esp], eax
push edx
mov edx, 0x79721bc2
sub edx, 0xf9c3a9ee
push edx
add dword [esp], reloc.ws2_32.dll_WSASetLastError
pop eax
jmp 0xa803d7
push ebp
mov ebp, 0xaa859023
xor edi, ebp
pop ebp
add ecx, edi
jmp 0xa8014c
push dword [esp]
mov ebx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
jmp 0xa80556
push ebx
mov ebx, 0xa18c719d
xor eax, ebx
pop ebx
jmp 0xa8028a
xchg dword [esp], eax
pop esp
jmp 0xa802d2
mov eax, 0x37652ba
mov ebx, 0x1f421e7a
jmp 0xa8098d
mov ebx, esp
add ebx, 4
push edi
jmp 0xa804a6
push edx
mov edx, 0x7fd61476
mov ebp, edx
pop edx
jmp 0xa8004a
neg eax
sub eax, 0x5bb77631
jmp 0xa8094b
add ebx, 4
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
mov dword [esp], edx
push ecx
mov ecx, 0x7b7da6e0
shl ecx, 3
xor ecx, 0xdbed3704
mov edx, ecx
pop ecx
sub ecx, 0x5fae2d61
add ecx, edx
push eax
mov eax, 0x7fc5e938
jmp 0xa80019
pop eax
add esi, 4
xor esi, dword [esp]
jmp 0xa8033c
pop ebx
pop ecx
sub eax, 0xec9dc2d7
jmp 0xa7fd4e
xor esi, dword [esp]
pop esp
xor edx, 0x7fd61476
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
jmp 0xa8067c
add esp, 4
push 0x69c7d732
mov dword [esp], ecx
jmp 0xa806d5
push 0x7b4057b6
mov dword [esp], eax
push ebx
jmp 0xa806e3
mov dword [esp], reloc.ws2_32.dll_WSASetLastError
pop eax
sub eax, 0x766efcbd
push ecx
jmp 0xa80798
mov ecx, 0x7d9d1578
xor eax, ecx
pop ecx
jmp 0xa808ea
or eax, 0x6fbb56e0
dec eax
sub eax, 0x204daa90
add ecx, eax
pop eax
pop edx
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
sti
push esi
mov dword [esp], ecx
push esi
jmp 0xa80921
xor eax, 0x3ed7b9fc
sub eax, 0xf051266d
mov ecx, eax
pop eax
xchg ecx, ebp
jmp 0xa80479
mov esi, 0x77f62041
not esi
add esi, 0x3fdd1485
sub esi, 0x7002950c
mov ecx, esi
pop esi
push eax
push ecx
mov ecx, 0x5fb62f2b
push ebp
mov dword [esp], ecx
pop eax
pop ecx
not eax
jmp 0xa805bb
shl eax, 1
xor eax, 0x380b985c
xor ecx, eax
jmp 0xa8095a
pop eax
neg ecx
push esi
mov esi, 0x3d4acd4e
xchg esi, edi
inc edi
xchg esi, edi
xor esi, 0x9458ad62
xor ecx, esi
mov esi, dword [esp]
add esp, 4
sub eax, ecx
push dword [esp]
pop ecx
add esp, 4
jmp 0xa7ff0a
pop ebp
jmp 0xa809d2
sub ebx, eax
pop eax
xor ebx, 0x53e1b85a
xor ebx, 0x1684474c
sub eax, 0x3f9f29b3
add eax, ebx
add eax, 0x3f9f29b3
mov ebx, dword [esp]
add esp, 4
add eax, dword [esp]
push ebx
jmp 0xa809ba
mov ebx, 0x56ff389f
not ebx
add ebx, 0x79ade9fb
and ebx, 0x6b7f4dfe
jmp 0xa7feea
xchg ecx, ebp
push edx
push ecx
mov ecx, 0x5f7dad2f
inc ecx
inc ecx
dec ecx
xor ecx, 0x7a7ce842
xor ecx, 0x50b8ab45
mov edx, ecx
pop ecx
xor edx, ebp
xor ebp, edx
xor edx, ebp
jmp 0xa7fda1