Function at 0xe0e5d4
Capabilities:
Execute anti-debugging instructions

Disassembly:
cmp esi, 8
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x3d]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
jle 0x118e2d4
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, dword [ebx + 0x3a]
xchg dword [esp], esi
xchg ecx, eax
mov ecx, dword [ebx + 0x36]
push eax
xchg ecx, eax
pop ecx
add eax, ecx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x68]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ebx, eax
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, eax
mov eax, dword [esp]
xchg ebx, eax
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, eax
mov eax, dword [esp]
lea eax, [ebx + 0x72]
pushfd
add ebp, 0x3c
popfd
lea ebp, [ebp - 0x3c]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
pushfd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x6b]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
call 0x779718
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x26]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
add dword [esp], 0xa0f0f1
xchg dword [esp], edx
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x7a]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], edx
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 1]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], edx
push ebp
mov ebp, esp
leave
popfd
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 8]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
jmp fcn.00e14ec4
pushfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x10]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg edi, edx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, edx
mov edx, dword [esp]
rdtsc
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x67]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
and eax, 1
pushfd
add ebp, 0x5c
popfd
lea ebp, [ebp - 0x5c]
xchg ebx, edx
xchg dword [esp], ebx
xchg ebx, edx
lea esp, [esp + 4]
xchg ecx, eax
xchg dword [esp], ecx
xchg ecx, eax
lea esp, [esp + 4]
je 0x7fdf9c
jne 0xe188a8
jmp 0x7fdf9a
sub eax, 0x458b9152
or al, 0x51
xchg ecx, eax
mov eax, dword [ebp + 0xc]
push ecx
xchg ecx, eax
pop eax
add ecx, 2
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x79]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
add eax, ecx
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x7d]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
jmp 0x118fff4
add byte ss:[ebp + 0x245c8b53], bl
add al, 0x8d
pop ebx
pop es
popfd
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 7]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
je 0x118fff4
jne 0x118fff4
jmp 0x118fff2
jle 0xe096b8
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, eax
mov eax, dword [esp]
xchg esi, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, esi
mov esi, dword [esp]
pushfd
pushfd
add ebp, 0x58
popfd
lea ebp, [ebp - 0x58]
call 0xe096e0
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x35]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
add dword [esp], 0x37f0de
xchg dword [esp], ecx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x45]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], ecx
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0xe]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], ecx
lea edi, [edi]
popfd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x52]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
jmp dword [0x11d7788]
add byte [eax], al
xchg ecx, eax
mov eax, dword [ebp + 0xc]
push ecx
xchg ecx, eax
pop eax
add ecx, 2
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x11]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
add eax, ecx
pushfd
add ebp, 0x45
popfd
lea ebp, [ebp - 0x45]
jmp 0x118fff4
jmp 0x1193744
xchg edx, eax
mov eax, dword [ebp - 4]
push edx
xchg edx, eax
pop eax
xchg ecx, edi
mov edi, dword [ebp + 0xc]
push ecx
xchg ecx, edi
pop edi
add edx, 0x14
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x5e]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [ebp - 4], eax
mov eax, edx
push dword [ebp - 4]
xchg dword [ebp - 4], eax
pop eax
xchg esi, eax
mov esi, dword [edx]
push eax
xchg esi, eax
pop esi
test eax, eax
pushfd
add ebp, 0x6f
popfd
lea ebp, [ebp - 0x6f]
jne 0x1189d14
xchg ebx, esi
mov esi, dword [ebp + 8]
push ebx
xchg ebx, esi
pop esi
xchg esi, eax
mov eax, dword [ebx]
push esi
xchg esi, eax
pop eax
jmp 0x77967c
popfd
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x12]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
je 0xe096b8
jne 0xe096b8
jmp 0xe096b6
add byte [eax], al
popfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x39]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
je 0xe0aea4
jne 0xe0aea4
jmp 0xe0aea2
xchg ebx, ecx
mov ecx, dword [edx + 0x10]
push ebx
xchg ebx, ecx
pop ecx
xchg edi, eax
mov eax, dword [edx + 0xc]
push edi
xchg edi, eax
pop eax
add ebx, ecx
push ebp
mov ebp, esp
leave
add edi, ecx
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x2a]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg dword [ebp - 8], eax
mov eax, ebx
push dword [ebp - 8]
xchg dword [ebp - 8], eax
pop eax
lea ebx, [eax + ecx]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x31]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ecx, edi
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edi
mov edi, dword [esp]
xchg dword [ebp - 0xc], ecx
mov ecx, ebx
push dword [ebp - 0xc]
xchg dword [ebp - 0xc], ecx
pop ecx
pushfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x76]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
call 0x1189da0
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x48]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
add dword [esp], 0xffffe9e6
xchg dword [esp], eax
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 5]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], eax
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x54]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], eax
push edi
mov edi, ebx
pop edi
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x4f]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
jmp dword [0x11d7780]
pushfd
pushfd
add ebp, 0x61
popfd
lea ebp, [ebp - 0x61]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, eax
mov eax, dword [esp]
xchg ecx, edx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edx
mov edx, dword [esp]
rdtsc
lea edx, [edx]
and eax, 1
push edi
mov edi, esi
pop edi
xchg edx, eax
xchg dword [esp], eax
xchg edx, eax
lea esp, [esp + 4]
xchg ecx, eax
xchg dword [esp], ecx
xchg ecx, eax
lea esp, [esp + 4]
je 0xe1afd4
jne 0x11945ec
jmp 0xe1afd2
xchg ecx, edi
xchg dword [esp], ecx
xchg ecx, edi
lea esp, [esp + 4]
xchg edx, esi
xchg dword [esp], edx
xchg edx, esi
lea esp, [esp + 4]
xor eax, eax
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 5]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ecx, ebx
xchg dword [esp], ecx
xchg ecx, ebx
lea esp, [esp + 4]
mov esp, ebp
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x4d]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg esi, ebp
xchg dword [esp], esi
xchg esi, ebp
lea esp, [esp + 4]
ret
iretd
xchg edi, eax
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, eax
mov eax, dword [esp]
xchg edi, esi
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, esi
mov esi, dword [esp]
pushfd
pushfd
add ebp, 0x63
popfd
lea ebp, [ebp - 0x63]
call 0x119001d
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x1a]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
add dword [esp], 0xffff87a1
xchg dword [esp], ecx
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x2e]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], ecx
push ebx
mov ebx, eax
pop ebx
xchg dword [esp], ecx
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x59]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
jmp dword [0x11d7788]
add al, 0x8b
adc al, 0x24
lea esp, [esp + 4]
into
xchg esp, eax
add byte [eax], al
add al, ch
cmpsd dword [esi], dword es:[edi]
invalid
call 0x7d35f0
mov eax, 0xfe219dae
mov cl, 5
mov bl, 0xb9
clc
jbe 0x1193752
nop
dec edi
jo 0x1193737
mov ebx, 0x8b974e86
cmp edx, dword [eax - 0x69]
pop edi
xor edi, edi
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x2b]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
test eax, eax
lea eax, [eax]
je 0xe124c8
xor ebx, ebx
mov ecx, ecx
test eax, eax
pushfd
add ebp, 0x1f
popfd
lea ebp, [ebp - 0x1f]
jmp 0x11d38d8
popfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x72]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
je 0x7d7298
jne 0x7d7298
jmp 0x7d7296
jns 0x118d39c
movzx eax, ax
mov ecx, ecx
jmp 0x7d0b80