Function at 0x1e00ed00
Capabilities:
Check for vm using instruction vpcext

Disassembly:
mov eax, dword [esp + 4]
sub esp, 0xc
push ebx
push ebp
mov ebp, dword [eax + 8]
push esi
push edi
mov edi, dword [esp + 0x28]
test ebp, ebp
je 0x1e00ee53
cmp dword [ebp + 0x18], edi
jne 0x1e00ee53
mov eax, dword [ebp + 0x14]
inc dword [eax]
mov dword [esp + 0x10], eax
mov ebx, dword [esp + 0x24]
mov esi, dword [ebx + 0x44]
test esi, esi
je 0x1e00edc3
xor ecx, ecx
mov dword [ebx + 0x44], ecx
mov dword [esi], 1
mov edx, dword [esi + 0x20]
mov dword [esi + 0x24], edx
mov dword [esi + 0x14], eax
cmp ebp, ecx
je 0x1e00ed56
inc dword [ebp]
mov dword [esi + 0xc], ebp
inc dword [ebx]
inc dword [edi]
mov dword [esi + 0x18], edi
mov eax, dword [ebx + 0x18]
mov edx, eax
and edx, 3
cmp dl, 3
jne 0x1e00eed4
mov edx, dword [esp + 0x20]
mov dword [esi + 0x38], edx
mov dword [esi + 0x3c], 0xffffffff
mov eax, dword [ebx + 0x3c]
lea edi, [esi - 0x10]
mov dword [esi + 0x40], eax
mov dword [esi + 0x44], ecx
cmp dword [edi + 8], 0xfffffffe
jne 0x1e041dca
mov dword [edi + 8], 0xfffffffd
mov dword [edi], 0x1e1e89e0
mov ecx, dword [0x1e1e89e4]
mov dword [edi + 4], ecx
mov edx, dword [0x1e1e89e4]
mov dword [edx], edi
mov dword [0x1e1e89e4], edi
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret
mov ecx, dword [ebx + 0x30]
mov edx, dword [ecx + 8]
mov ecx, dword [ebx + 0x2c]
mov esi, dword [ecx + 8]
mov ecx, dword [ebx + 0x14]
add ecx, dword [ebx + 0x10]
mov dword [esp + 0x14], esi
add ecx, esi
mov esi, dword [0x1e2002e0]
add ecx, edx
mov dword [esp + 0x18], edx
test esi, esi
je 0x1e00eeef
dec dword [0x1e2002e4]
cmp dword [esi + 8], ecx
mov edx, dword [esi + 0xc]
mov dword [0x1e2002e0], edx
jl 0x1e00ef22
mov dword [esi], 1
mov dword [esi + 0x10], ebx
mov ecx, dword [ebx + 0x10]
add ecx, dword [esp + 0x14]
add ecx, dword [esp + 0x18]
lea edx, [esi + ecx*4 + 0x138]
mov dword [esi + 0x20], edx
xor edx, edx
cmp ecx, edx
jle 0x1e00ee3d
xor eax, eax
lea edi, [esi + 0x138]
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x28]
mov eax, dword [esp + 0x10]
mov dword [esi + 0x1c], edx
mov dword [esi + 0x28], edx
mov dword [esi + 0x34], edx
mov dword [esi + 0x30], edx
mov dword [esi + 0x2c], edx
xor ecx, ecx
jmp 0x1e00ed46
mov ecx, dword [0x1e1f9d88]
push ecx
push edi
call sym.python31.dll_PyDict_GetItem
add esp, 8
test eax, eax
je 0x1e041d4b
mov ebx, dword [eax + 4]
cmp ebx, sym.python31.dll_PyModule_Type
je 0x1e00ef3f
mov ecx, ebx
mov esi, dword [ecx + 0xac]
mov dword [esp + 0x10], eax
test esi, esi
je 0x1e041d1f
mov edx, dword [esi + 8]
test edx, edx
jle 0x1e00eeb4
xor ecx, ecx
add esi, 0xc
lea ebx, [ebx]
cmp dword [esi], sym.python31.dll_PyModule_Type
je 0x1e00ef3f
inc ecx
add esi, 4
cmp ecx, edx
jl 0x1e00eea0
test dword [ebx + 0x54], 0x20000000
je 0x1e041d4b
test eax, eax
je 0x1e041d4b
inc dword [eax]
mov eax, dword [esp + 0x10]
jmp 0x1e00ed2c
test al, 2
je 0x1e00ef10
call sym.python31.dll_PyDict_New
test eax, eax
je 0x1e041db2
xor ecx, ecx
mov dword [esi + 0x1c], eax
jmp 0x1e00ed71
push ecx
push sym.python31.dll_PyFrame_Type
call sym.python31.dll__PyObject_GC_NewVar
add esp, 8
test eax, eax
je 0x1e041d7a
mov esi, eax
mov eax, dword [esp + 0x10]
jmp 0x1e00ee0d
mov eax, dword [esp + 0x2c]
cmp eax, ecx
je 0x1e00ef51
inc dword [eax]
mov dword [esi + 0x1c], eax
jmp 0x1e00ed71
push ecx
push esi
call sym.python31.dll__PyObject_GC_Resize
add esp, 8
test eax, eax
je 0x1e041d96
mov esi, eax
mov eax, dword [esp + 0x10]
jmp 0x1e00ee07
push eax
call sym.python31.dll_PyModule_GetDict
add esp, 4
mov dword [esp + 0x10], eax
jmp 0x1e00eec1
inc dword [edi]
mov dword [esi + 0x1c], edi
jmp 0x1e00ed71
fdivp st(3)
add eax, 0x4c0cf005
dec ecx
cmp edx, dword [ecx + 0x50]
inc ebp
in eax, dx
or al, 5
add eax, 0x3e3d0505
push ebp
dec edx
cmp al, 0x48
mov cl, cl
or dword [ebp - 0x70], ebx
xchg edx, eax
loope 0x1e041d3f
inc dword [esp + eax]
add al, 4
nop
push ss
mov ds, word [edx + 0x404ffe1]
nop
mov ah, cl
inc dword [esp + eax]
inc eax
mov dl, ch
test dword [esp + eax], 0x92901579
loope 0x1e041d5b
inc dword [esp + eax]
add al, 4
mov byte [esi + 0x35], bh
add eax, 0x2d08a14
add al, 4
int3
or byte [ecx], bh
dec ecx
dec ebp
xchg dh, ah
cmp dword [esi + 5], ebx
add eax, 0x8858585e
leave
or ebp, ebp
adc byte [0x46050505], al
aaa
inc ebp
cmp al, byte [ecx + 0x3a]
push edx
push eax
cmp eax, 0x9c9883a
xchg al, cl
invalid
jo 0x1e041db9
add eax, 0x9a8e6b05
and eax, 0xbd0404ee
push 5
add eax, 0x8a8e6b05
daa
out dx, al
add al, 4
mov esi, 0x5050577
imul ecx, dword [esi + 0x4ee2992], 4
ja 0x1e041dd1
add eax, 0x928e6b05
sub esi, ebp
add al, 4
mov edi, 0x5050573
imul ecx, dword [esi + 0x4ee2b9a], 4
mov ebp, 0x505056a
imul ecx, dword [esi + 0x4ee2d8a], 4
mov esi, 0x5050571
imul ecx, dword [esi + 0x4ee2f92], 4