Function at 0x9ee3f0
Capabilities:
Execute anti-debugging instructions

Disassembly:
bswap edi
xchg byte [esp + 8], bl
jmp 0x9eee41
shr bp, 8
setle dh
mov edi, ebp
sub esp, 0xa
pop cx
pop ecx
jmp 0x9ee5aa
mov ah, ch
lea edx, [edi*4]
xchg bl, ah
setp cl
sub esp, 0xc
jmp 0x9ee429
bts edi, esi
mov edi, dword [esp]
shr dl, 2
lea edx, [edx*4]
xchg bx, ax
xchg cl, ch
jmp 0x9ee43f
mov al, ch
xchg dword [esp + 0xf], edx
lea edi, [edx*4]
pop bp
xchg dword [esp + 6], edi
push edi
jmp 0x9ee54f
pop dx
mov cx, word [esp + 9]
lea esi, [edi*4]
bsr dx, bp
bswap edi
push dword [esp + 6]
jmp 0x9ee46f
inc esi
xchg bl, ah
push dx
lea edx, [eax*4]
call fcn.009ee4a8
add esp, 0x1b
xchg byte [esp + 6], ah
neg si
xchg byte [esp], dl
neg edi
pop dword [esp]
jmp 0x9ee516
lea esi, [ebx*4]
push dword [esp]
setno ch
neg ecx
jmp 0x9ee52f
mov eax, dword [esp + 2]
push word [esp]
xchg si, bp
bsf di, di
pop word [esp]
mov eax, dword [esp + 1]
jmp 0x9ee500
push si
not di
btr ecx, edi
mov cx, word [esp + 2]
pop dx
pushal
jmp 0x9ee580
cpuid
xchg dword [esp + 0xf], ebp
not dx
lea edx, reloc.MSVCRT.dll___dllonexit
rdtsc
push word [esp + 6]
jmp 0x9ee4be
lea esp, [esp]
dec si
bts di, bx
mov edx, 0x849874ae
cpuid
jmp 0x9ee591
mov cx, 0x94eb
not edi
pushal
lea esp, [esp + 0x48]
std
sub esp, 2
jmp 0x9ee56a
xchg edi, eax
cpuid
mov byte [esp], dh
cmc
lea esi, reloc.MSVCRT.dll___dllonexit
sub edi, esi
jmp 0x9ee601
mov bl, 0x27
mov bp, 0xcec7
push dword [esp + 0xc]
mov ah, byte [esp + 0x11]
mov cx, word [esp + 0xe]
mov edx, esi
jmp 0x9ee48e
mov ax, 0x3d0f
xchg di, ax
mov word [esp], cx
mov ch, 0xde
bswap esi
jmp 0x9ee61c
xchg di, ax
mov ah, 0x57
lea eax, [ebp*4]
shl ebx, cl
stc
mov cl, byte [esp]
jmp 0x9ee5c4
not ax
lea edi, [esi + ebp]
mov cx, word [esp]
mov dh, ah
lea ebp, [ebp*4]
lea edi, reloc.MSVCRT.dll___dllonexit
jmp 0x9ee5da
mov esi, dword [esp]
lea esp, [esp]
not ah
xchg edi, ecx
btc ax, bp
bt edx, esp
jmp 0x9ee6ea
mov esi, dword [esp + 1]
seto bl
lea esp, [esp + 4]
xchg di, ax
mov byte [esp + 1], ah
lea esp, [esp + 5]
jmp 0x9ee459
mov eax, 0xd66e9339
mov cl, ch
mov bx, word [esp + 0x13]
sub esp, 0x17
jmp 0x9ee6b2
push dword [esp + 5]
mov si, bp
push dword [esp + 4]
setle ch
sub esp, 0x13
bswap esi
jmp 0x9ee651
mov bx, cx
mov bl, 0x9b
mov bl, 0xf0
mov bx, word [esp + 0xb]
mov al, byte [esp + 0xa]
mov edi, 0x862a25b7
jmp 0x9ee667
xchg al, cl
mov ch, cl
xchg ebp, ebx
cpuid
popal
lea esp, [esp + 1]
jmp 0x9ee6c8
mov dword [esp + 0x23], edx
mov eax, dword [esp + 0x26]
xchg byte [esp + 0xc], ah
mov byte [esp + 7], bl
shl dl, cl
xchg dh, bl
jmp 0x9ee69c
std
and ecx, ebp
sub esp, 7
mov esi, dword [esp + 0x1e]
dec cl
pop dword [esp + 0xa]
jmp 0x9ee703
mov ecx, 0xbde2f20c
lea esp, [esp + 1]
mov cl, byte [esp]
mov si, word [esp]
sub esp, 0xc
xchg byte [esp + 6], ah
jmp 0x9ee685
mov ebp, dword [esp + 0xd]
lea esp, [esp + 4]
push dword [esp + 4]
bswap ebx
ror ebp, 9
xchg bx, cx
jmp 0x9ee750
clc
btc cx, bp
clc
xchg byte [esp + 2], ah
mov byte [esp + 3], bl
not edi
jmp 0x9ee637
mov bx, cx
not ax
mov bl, 0xb7
lea ebp, reloc.MSVCRT.dll___dllonexit
bswap esi
jmp 0x9eea85
pop word [esp + 0x19]
mov bx, word [esp + 0x1a]
mov cl, 0xd5
push word [esp + 0xe]
rdtsc
mov ax, 0xa1ec
jmp 0x9ee73a
neg di
cld
xchg ah, al
mov ch, al
neg esi
pop dword [esp + 2]
jmp 0x9ee725
mov ch, 0xb0
neg cl
xchg word [esp + 0x17], ax
not ebp
cmc
bswap ebp
jmp 0x9ee818
mov dl, ah
mov si, 0x5b7c
mov byte [esp + 0x1c], dh
lea esp, [esp + 3]
mov edi, dword [esp + 1]
pop dword [esp + 0x14]
jmp 0x9ee789
mov byte [esp + 6], dh
push dword [esp + 0xa]
btr bx, cx
dec edx
jmp 0x9ee7f0
lea ebp, [eax*4]
mov si, word [esp]
push word [esp]
rdtsc
mov edx, dword [esp + 5]
mov bx, 0x54ec
jmp 0x9ee7bf
mov byte [esp + 1], bh
pop si
mov dword [esp + 7], edi
xchg byte [esp + 7], bh
mov byte [esp + 0xb], dh
xchg bx, dx
jmp 0x9ee82a
lea esp, [esp + 0x15]
pushfd
lea edi, [esp + esi]
mov cl, dl
xchg byte [esp], dl
mov byte [esp], ah
jmp 0x9ee7d5
mov edi, dword [esp + 3]
not cl
mov ebp, esp
lea esp, [esp + 9]
push dword [esp + 3]
xchg dword [esp + 1], esi
jmp 0x9ee90c
xchg dh, al
lea ebx, [esi + 0x16]
not ebp
mov dword [esp + 0xe], eax
bsf bp, di
cpuid
jmp 0x9ee7a7
and ebp, 0xd37adf8f
cld
pop word [esp + 0x11]
pop ebx
jmp 0x9ee891
pop word [esp + 9]
bswap ebx
xchg edx, ecx
push edx
and di, si
bswap ebp
jmp 0x9ee86a
mov byte [esp + 4], al
sub esp, 0x1e
cmc
bswap esi
lea eax, [ebp*4]
mov byte [esp + 0x16], ch
jmp 0x9ee8dc
sub esp, 0x13
xchg dword [esp + 0x10], edi
xchg byte [esp + 0x12], ch
mov esi, dword [esp + 0xc]
lea edx, [ebp + 0x19]
xchg ch, dh
jmp 0x9ee880
pop edi
pushfd
xchg esi, ebx
xchg word [esp + 2], dx
pop word [esp + 0x18]
pushfd
jmp 0x9ee8ed
bts ebx, edx
push bx
mov dword [esp + 0x28], ebx
std
xchg dword [esp + 0x27], esi
std
jmp 0x9ee8c6
lea esp, [esp + 1]
lea esp, [esp + 0x34]
popal
push esi
std
add esp, 1
jmp 0x9ee922
mov word [esp + 5], cx
mov ch, 0xa
lea edx, [ecx + edi]
pop esi
lea esi, [edi + ebp]
lea ebp, reloc.MSVCRT.dll___dllonexit
jmp 0x9ee8b0
mov byte [esp], cl
pushal
mov word [esp + 0xb], bp
lea esp, [esp + 3]
lea esp, [esp + 0x20]
popfd
jmp 0x9ee96f
lea esi, reloc.MSVCRT.dll___dllonexit
mov dl, 0x72
mov byte [esp], dh
mov word [esp + 0xd], di
xchg word [esp + 4], dx
mov dx, word [esp + 0xf]
jmp 0x9ee854
push 0x955f1242
add dword [esp], reloc.MSVCRT.dll___dllonexit
call fcn.009ee959
invalid
invalid
invalid
pop word [esp + 2]
mov byte [esp + 1], dh
lea esp, [esp + 5]
lea esp, [esp]
jmp 0x9ee9be
mov byte [esp], bh
call fcn.009eea4b
adc eax, 0xa66b0c9e
dec edi
arpl word gs:[esi], ax
cmc
je 0x9eea50
hlt
mov word [esp], bp
push si
pop word [esp]
call fcn.009ee9e9
mov byte [esp], dh
lea esp, [esp + 1]
push si
mov byte [esp], al
pushal
jmp 0x9eea5d
or byte [ebp - 0x72f6db9c], cl
and al, 0x24
mov byte [esp], dh
jmp 0x9ee9ff
mov byte [esp + 3], bh
push dword [esp + 9]
call 0x9eea6b
mov edi, 0xa247c88
mov word [esp + 0x20], sp
push dword [esp + 0x1b]
mov byte [esp + 0xb], al
jmp 0x9eeb29
mov edi, dword [esp + 7]
std
mov edx, 0xd4e6dda8
rcl ecx, cl
push ecx
lea esp, [esp + 4]
jmp 0x9ee93a
pop dword [esp + 0x32]
push word [esp + 0x25]
push word [esp + 0x25]
lea esp, [esp + 1]
jmp 0x9eeaf7
mov byte [esp + 0x32], cl
mov dword [esp + 0x1e], esp
pop dword [esp + 0xa]
push dword [esp + 0xb]
mov dword [esp + 6], edx
pushfd
jmp 0x9eea9b
pop dword [esp]
pop word [esp + 0xf]
push word [esp]
pushfd
push esi
pop dword [esp + 0x12]
jmp 0x9eeb08
mov word [esp + 0x1d], si
mov byte [esp + 0x2f], bh
mov dword [esp + 0x12], edx
call fcn.009eec2a
hlt
lea esp, [esp + 0x3c]
push 0
pushal
pop dword [esp + 0xa]
pop dword [esp + 0xb]
jmp 0x9eeacd
lea esp, [esp + 0xf]
pushal
pop dword [esp + 0x14]
push dword [esp + 0x11]
pushfd
push dword [esp + 0x10]
jmp 0x9eeae1
push dword [esp + 0x27]
pop dword [esp + 0xa]
push dword [esp + 0x1c]
push word [esp + 3]
mov word [esp + 0x20], sp
pushfd
jmp 0x9eeab6
not edx
neg edx
rdtsc
mov edx, dword [esp]
mov word [esp + 1], sp
xchg dh, al
jmp 0x9ee779