Function at 0xe384ae
Capabilities:
Execute anti-debugging instructions

Disassembly:
clc
call fcn.00e3b27e
push ebp
pushal
pushfd
mov edx, dword [ecx]
jmp 0xe38660
lea ecx, [ecx + 0x735fa99a]
seto ch
pushal
mov eax, dword [ebp - 0x124]
not ecx
call fcn.00e384e6
sub dx, cx
mov edx, dword [ebp - 0xac]
push ebx
add edx, 0x100022cb
mov word [esp], cx
mov dword [esp], edx
pushfd
call fcn.00e330fe
btc dx, dx
mov dx, word [ecx + 2]
bt bx, 9
cmp edx, 0x74
jmp 0xe3a94c
jmp 0xe333ba
pushfd
cmp edx, dword [ebp - 0xc]
mov word [esp], dx
jmp 0xe39ddd
cmp dword [ebp - 0xfc], edx
push 0xfcbf2bbf
pushfd
lea esp, [esp + 0xc]
je 0xe359a6
ror al, 5
btr ax, 5
movsx ax, cl
mov eax, dword [ebp - 0xfc]
ror cl, 1
mov dword [ebp - 0x104], eax
sbb dx, bx
cmp eax, ebx
not ch
btc dx, 8
mov ecx, dword [ebp - 0x104]
cmp al, bl
mov edx, dword [ecx + 0x34]
stc
pushfd
test dh, 0x38
and edx, 4
cmp cl, dh
call fcn.00e36e09
clc
mov dword [ebp - 0xbc], eax
cdq
shrd bx, di, 9
mov edx, dword [ebp - 0xac]
bswap bx
dec ah
rcl bx, cl
add edx, 0x10002253
btr bx, bx
dec bx
cmp ch, 0x5a
rcl ecx, cl
add edx, 1
call fcn.00e331f9
pushal
call fcn.00e35a39
jmp 0xe3b89e
sbb bl, 0xac
rcr bl, cl
mov bl, byte [eax + 8]
pushfd
stc
mov word [esp], cx
cmp bl, 0x6c
push 0x61f6bae4
mov byte [esp], al
lea esp, [esp + 8]
je 0xe34d80
pushfd
call fcn.00e33bc1
mov byte [esp], dh
push dword [ebp - 0x24]
pop dword [esp + 0x30]
mov word [esp + 4], 0xd847
push 0x9a2fc5de
push dword [esp + 0x34]
ret 0x38
sets cl
movsx cx, al
mov ecx, dword [ebp - 0x9c]
call fcn.00e3b341
call fcn.00e36f1b
push esi
push 0x9b45d0b4
mov dword [esp + 0xc], edx
push esp
pushal
mov dword [esp + 0x2c], 0xe38a30
pushfd
mov byte [esp + 4], 3
pushfd
jmp 0xe33d9e
push dword [ebp - 0x110]
pop dword [esp + 0x30]
pushfd
mov byte [esp], cl
push dword [esp + 0x34]
ret 0x38
add ecx, 1
bswap edx
inc dh
sar dx, cl
inc dx
mov dword [ebp - 0x124], ecx
add esp, 4
rcr dh, 3
mov edx, dword [ebp - 0x124]
stc
jmp 0xe32df3
add edx, 0x100022e0
call fcn.00e36b56
pop eax
bswap ax
lahf
mov dword [ebp - 0x98], edx
xchg cx, ax
mov eax, dword [ebp - 0x98]
pop ecx
mov dword [esp + 0x3c], eax
not cl
not cx
mov ecx, dword [ebp - 0xb4]
pushfd
jmp 0xe3b185
push ebx
push dword [esp]
mov dword [ebp - 0x124], 0
pushfd
pushal
lea esp, [esp + 0x2c]
jmp 0xe341d5
cmp ch, cl
mov bl, byte [eax + 2]
call fcn.00e32082
adc ch, 0x1b
call fcn.00e3c215
mov edx, dword [ebp - 0xac]
cmc
push esp
push dword [esp]
jmp 0xe3455b
neg bl
mov bl, byte [eax + 9]
call fcn.00e3958c
shl cl, cl
mov eax, dword [ebp - 0x104]
movsx ecx, cl
add ch, 0x61
btr cx, cx
sub cl, ch
mov ecx, dword [eax + 0x30]
pushfd
bt sp, 2
sub edx, edx
sub dh, 0x93
mov dx, word [ecx + 0x14]
cmc
cmc
push dword [esp]
cmc
cmp edx, 0x6c
call fcn.00e3296f
btr eax, esi
bsf ax, ax
push 0x487ba206
mov edx, dword [ebp - 0xa0]
rcl al, 1
dec al
add edx, 1
das
sar ah, 3
sbb al, 0x65
mov dword [ebp - 0xa0], edx
add esp, 4
bt bx, 0xc
jne 0xe35e44
mov eax, dword [ebp - 0xa0]
call fcn.00e3addb
sar ah, 7
not ax
mov eax, dword [ebp - 0xa4]
call fcn.00e390b8
lea esp, [esp + 0x10]
je 0xe35cc8
aaa
shld eax, ebx, 0xb
mov eax, dword [ebp - 0x104]
push 0xa79a2000
mov ecx, dword [eax + 0x30]
stc
test eax, 0x810d97a
pushfd
stc
sub edx, edx
bsf dx, sp
movsx dx, cl
rol dx, cl
mov dx, word [ecx + 6]
cmc
bt ebx, esi
pushfd
cmp edx, 0x4e
pushal
call fcn.00e35cb4
lea esp, [esp + 0x10]
je 0xe38c4d
sar ch, cl
mov eax, dword [ebp - 0x104]
shl cx, 0xf
mov ecx, dword [eax + 0x30]
pushal
pushfd
mov dword [esp], 0x3a64535b
xor edx, edx
movzx dx, bl
setns dl
mov dx, word [ecx + 0xa]
pushfd
pushfd
mov byte [esp + 0x14], cl
lea esp, [esp + 0x2c]
jmp 0xe366cc
call fcn.00e3a632
call fcn.00e3742f
pushal
test eax, eax
push 0x7a958c59
lea esp, [esp + 0x24]
je 0xe34636
jmp 0xe3ab91
movzx ax, dl
mov eax, dword [ebp - 0xa0]
cmp al, bl
cmp si, 0x3b28
cmp eax, dword [ebp - 0x88]
js 0xe330f9
jae 0xe3932e
mov dl, bl
test esp, esi
btc cx, bp
mov ecx, dword [ebp - 0xa0]
shr dh, 4
cmp al, bh
cmp bh, 0x74
sal dh, cl
mov edx, dword [ebp - 0xd8]
call fcn.00e3541b
lahf
mov ah, cl
xchg ah, cl
mov eax, dword [ebp - 0xc0]
push eax
movsx cx, al
mov dword [edx], eax
lahf
xchg edx, eax
lea ecx, [ebp - 0xc4]
cdq
not ax
mov dword [esp], ecx
mov dh, dh
cwde
mov edx, dword [ebp - 0xc4]
pushal
cwde
mov dword [esp + 0x1c], edx
call fcn.00e3be7b
mov word [esp], di
lea esp, [esp + 0x20]
je 0xe38c4d
bsr cx, sp
mov eax, dword [ebp - 0x104]
adc ch, 0x8a
btr cx, 0xe
dec ch
mov ecx, dword [eax + 0x30]
push edx
test al, ch
cmp bh, al
sub edx, edx
btc dx, 2
shl dx, 0xb
bt esi, 0x10
mov dx, word [ecx + 0xa]
sub esp, 0xfffffffc
call fcn.00e38c38
pushfd
pushfd
lea esp, [esp + 0x10]
je 0xe32d92
pushfd
cmc
cmp bl, 0x4c
mov byte [esp], 0x29
jmp 0xe38c6d
mov byte [esp + 4], 0x15
push 0xbb7f89cd
lea esp, [esp + 0x28]
call fcn.00686480
sal si, cl
mov dword [ebp - 0x20], eax
xchg si, ax
dec si
bt sp, 2
aad 0xd2
mov eax, dword [ebp - 0xac]
sbb si, 0x87ec
and esi, 0xff57d5c4
ror esi, cl
cmp eax, 0xed85e649
add eax, 0x100022ba
movzx esi, al
mov esi, dword [ebp - 0x3c]
push 0xe016afb9
pushfd
pushfd
jmp 0xe3c6e3
push 0xc9ce7e0
or cx, 0x2f38
shl ch, cl
mov ecx, dword [ebp - 0x124]
jmp 0xe341bf
xor ecx, ecx
sar cl, 1
cmc
mov cl, byte [eax + 7]
cmp sp, 0xd83
pushfd
cmp ecx, 0x44
mov word [esp], bx
jmp 0xe372ef
bsf ax, cx
mov eax, dword [ebp - 0x124]
shl cl, cl
cmc
neg cl
lea ecx, [ebx - 0x64d6bfd2]
mov ecx, dword [ebp - 0x9c]
pushfd
cmc
push 0x4f84654c
test al, cl
sub edx, edx
btc dx, dx
setne dl
bts dx, dx
bsr dx, si
mov dx, word [ecx + eax*2]
clc
pushal
pushfd
cmp edx, 0x20
pushfd
lea esp, [esp + 0x30]
jne 0xe3b34b
jbe 0xe328ab
lahf
movzx ax, cl
cwde
mov eax, dword [ebp - 0x124]
jmp 0xe334d9
call fcn.00e38c33
test edx, edx
call fcn.00e32ec7
movzx cx, bl
shl cl, 1
bt di, di
mov ecx, dword [eax + 0x30]
bt esi, 0x1a
cmc
push esp
push dword [esp]
xor edx, edx
push 0x5f5839df
mov byte [esp], ah
not dl
not dh
mov dx, word [ecx + 0xa]
push dword [esp + 4]
pushfd
lea esp, [esp + 0x14]
jmp 0xe366cc
push dword [esp + 4]
call fcn.00e3a7d9
je 0xe34a2e
cmp edx, 0x3c913174
call fcn.00e3ae01
mov dword [esp], edx
cmp edx, 0x2c
mov byte [esp], 0xcd
lea esp, [esp + 4]
je 0xe36e5a
lea eax, [esp + 0x3c07921b]
bts eax, 0xc
jmp 0xe36e10
mov byte [esp], 0x41
lea esp, [esp + 0x30]
je 0xe354d2
not ch
shl ch, 4
ror ah, cl
inc cx
mov eax, dword [ebp - 0x104]
bsr cx, di
and cl, 0x68
lea ecx, [ebx*8 - 0x2abc5fa5]
mov ecx, dword [eax + 0x30]
test dh, 0x27
stc
jmp 0xe3adbd
mov dword [ebp - 0xfc], edx
pushfd
push dword [esp + 4]
push dword [esp]
push eax
lea esp, [esp + 0x38]
jmp 0xe38d82
stc
pushfd
cmp esi, ebp
mov word [esp], 0xbe2f
sub eax, eax
sal ah, cl
rcr al, cl
rcr al, cl
clc
mov ax, word [edx + ecx*2]
cmp dh, 0x95
cmc
movzx cx, cl
pushal
and eax, 0xf000
adc ch, dh
xadd dx, cx
sbb dh, ch
bsf dx, di
mov word [ebp - 0x5c], ax
aad 0xc3
btc cx, cx
mov ecx, dword [ebp - 0x130]
cmc
mov edx, dword [ebp - 0xbc]
pushfd
aaa
or ah, al
add edx, dword [ecx]
shld ecx, edi, 0xf
xor ah, al
stc
dec ah
mov eax, dword [ebp - 0xa0]
rcl ch, 3
btc cx, sp
pop ecx
bsr cx, bp
mov ecx, dword [ebp - 0xd8]
bt dx, 3
pushal
mov byte [esp], 0x65
call fcn.00e37f82
rol ah, cl
setbe al
aad 0xa3
sets cl
mov eax, dword [ebp - 0x104]
rcr cx, cl
mov ecx, dword [eax + 0x30]
pushfd
push ecx
clc
xor edx, edx
call fcn.00e353b6
push eax
lea esp, [esp + 8]
jne 0xe321d4
mov bl, 0x1a
sub bl, al
inc bl
mov bl, byte [eax + 8]
pushal
cmc
mov byte [esp + 4], cl
cmp bl, 0x6c
call fcn.00e3b173
inc dh
mov edx, dword [ebp - 0xf4]
stc
add edx, 0xc
push 0xb908476b
jmp 0xe32fca
rdtsc
and al, 0x57
cmc
mov edx, dword [ebp - 0x130]
sar ax, cl
mov eax, dword [ebp - 0x130]
clc
call fcn.00e34bd0
push dword [ebp - 0xc8]
pop dword [esp + 0x4c]
push dword [esp]
mov dword [esp], ecx
mov word [esp], 0xc9cb
push dword [esp + 0x50]
ret 0x54
push 0x208cfc93
mov byte [esp + 4], cl
lea esp, [esp + 8]
jae 0xe3b96e
stc
lahf
inc al
mov eax, dword [ebp - 0x124]
push edi
add cx, si
mov ecx, dword [ebp - 0x9c]
stc
clc
clc
xor edx, edx
movsx dx, dl
btc dx, bp
mov dx, word [ecx + eax*2]
jmp 0xe3bb13
call fcn.00e370df
pushal
mov esi, dword [ebp - 0x3c]
mov word [esp], 0xd420
jmp 0xe36801
pushfd
call fcn.00e3a255
pushal
mov dword [ebp - 0x70], 1
push 0x33e69022
pushfd
jmp 0xe39e6d
dec cl
sal cx, 0xb
mov eax, dword [ebp - 0x104]
bts cx, 0xd
bsf cx, cx
mov ecx, dword [eax + 0x30]
pushal
sub edx, edx
ror dh, cl
add dh, ah
mov dx, word [ecx + 0xa]
bt cx, 0xe
test cl, 0xa1
cmp edx, 0x6c
jmp 0xe3668c
cmc
sub edx, edx
rcl dx, 0xa
ror dl, 5
neg dl
mov dx, word [ecx + 0x12]
cmc
test al, cl
clc
cmp bh, ah
cmp edx, 0x44
call fcn.00e354c6
mov dword [esp + 0x3c], ecx
mov byte [esp + 4], 0x16
mov dword [esp + 0x38], 0xe3489a
jmp 0xe36e71
je 0xe32c7d
rol bl, 7
test al, 0x27
add eax, edx
cmp dh, 0x3e
not bl
mov bl, byte [eax]
bt cx, ax
test bh, dh
cmp bl, 0x6e
pushfd
mov byte [esp], 0x64
call fcn.00e351dc
push 0xbdb0d77d
lea esp, [esp + 4]
jmp 0xe36922
mov edx, 0xd2b6bd75
mov ecx, dword [ebp - 0xfc]
jmp 0xe3226f
pushal
lea esp, [esp + 0x20]
jae 0xe3932e
shld dx, si, 0xb
mov ecx, dword [ebp - 0xa0]
stc
shr dx, 4
shld dx, bx, 0xc
mov edx, dword [ebp - 0xd8]
jl 0xe3898c
sub eax, eax
shl al, cl
mov ax, word [edx + ecx*2]
movsx cx, al
call fcn.00e322fe
cmp ch, cl
pushfd
sub edx, edx
xor dh, ah
sub dh, 0x57
shl dh, cl
movzx dx, bl
mov dx, word [ecx + 8]
cmp dl, 0xde
cmp ebx, 0x35665839
pushfd
cmc
cmp edx, 0x65
mov byte [esp], 0xa9
push dword [esp + 4]
lea esp, [esp + 0x34]
je 0xe3acd3
xchg al, cl
mov eax, dword [ebp - 0x104]
cmp cl, 6
mov ecx, dword [eax + 0x30]
pushfd
clc
xor edx, edx
bt cx, si
movzx dx, bl
movzx dx, dl
mov dx, word [ecx + 8]
cmp al, 0x1d
stc
cmp edx, 0x45
jmp 0xe3b9cf
lea edx, [0xead1137c]
bswap edx
call fcn.00e3c79c
pushal
lea esp, [esp + 0x20]
je fcn.00e3373a
and al, 0x26
shld eax, edx, 0x10
mov eax, dword [ebp - 0x44]
push 0x4e4e3784
clc
test eax, eax
jmp 0xe36ca1
lea esp, [esp + 4]
jne 0xe3b389
pushal
mov ax, word [esp]
call fcn.00e3305b
jmp 0xe3841d
lea esp, [esp + 0xc]
call fcn.00686480
and cl, ah
mov dword [ebp - 0xb8], eax
daa
mov edx, dword [ebp - 0x3c]
movzx eax, dl
pushfd
pop ecx
mov ecx, dword [edx + 0x3c]
lahf
cwde
sbb al, 0xbc
add ecx, edx
lea eax, [ebp*2 + 0x286fce92]
mov ecx, dword [ecx + 0x80]
aaa
rol ax, 4
add ecx, edx
not eax
not al
mov eax, dword [ecx + 0xc]
bt ecx, edi
test eax, eax
jmp 0xe3b19b