Function at 0xec49d4
Capabilities:
Execute anti-debugging instructions

Disassembly:
jne 0xcfacac
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], edx
jmp 0xf433c1
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
movsx ecx, di
btc edx, 0xe9
mov ecx, dword [ebp - 0x2c]
add dx, di
mov edx, dword [ecx + 8]
cmp ax, 0xb7
mov dword [ebp - 0x38], edx
test edi, 0x48dc068d
jmp 0xa88019
ja 0x75043e
cmp dword [ebp - 0x38], 0x80000201
jmp 0x8ee38d
mov dword [ebp - 0x1c], eax
jmp 0xcf7a05
mov ecx, dword [ebp - 0x34]
jmp 0x944852
je 0xd813a2
jmp 0x9930bc
je 0xee4523
jmp 0x9930bc
cmp dword [ebp - 0x38], 0x80000401
je 0xee4523
cmp dword [ebp - 0x38], 0x80000601
jmp 0x7335e7
call dword [ebp - 4]
pop edi
sal si, 0xb4
pop esi
stc
mov dword [ebp - 0x10], ebx
mov dword [ebp - 8], eax
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x34]
clc
mov dword [eax + 0x1e4], 0
jmp 0xe9e697
je 0xee4523
cmp dword [ebp - 0x38], 0x80000101
jmp 0x724b46
jmp 0xe95033
jmp 0xe95033
jmp 0xe95033
mov cl, byte [eax]
mov dword [ebp - 0x20], ecx
jmp 0x847d91
mov dword [ebp - 0x20], edx
jmp 0xe65ab9
je 0x100f22a
cmp dword [ebp - 0x38], reloc.WS2_32.dll_closesocket
jmp 0xda2a39
call fcn.0048dfb0
mov dword [ebp - 4], eax
test si, 0x4511
cmp dword [ebp - 4], 0
jmp 0xf9126b
push eax
rdtsc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp + 8]
movsx cx, al
movsx ecx, bx
mov ecx, dword [eax]
jmp 0xdaf31e
mov ecx, dword [ebp - 0x2c]
or dl, ch
cmove edx, ecx
mov edx, dword [ecx]
jmp 0xe95030
jmp 0xc32cbb
mov ecx, dword [ebp - 0x2c]
bts dx, ax
clc
neg dh
mov dword [ebp - 0x44], ecx
bts ecx, edi
mov edx, dword [ebp - 0x44]
btc ax, 0xfe
mov dword [ebp - 0x40], edx
not dh
sar eax, cl
cwde
mov eax, dword [ebp - 0x40]
inc cl
mov dword [ebp - 0x3c], eax
and ax, 0x3150
mov ecx, dword [ebp - 0x3c]
rol edx, cl
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
xor ecx, esi
mov eax, dword [edx]
mov dword [ebp - 0x20], eax
adc ah, 0x1d
sar cl, 0xf4
shl dx, cl
mov ecx, dword [ebp - 0xc]
dec dl
add ecx, 4
rdtsc
not al
movsx edx, dx
mov dword [ebp - 0xc], ecx
not ax
movsx edx, si
mov edx, dword [ebp - 0xc]
movzx eax, sp
mov eax, dword [edx]
jmp 0xbf30ae
cmp dword [ebp - 0x38], 0x80000201
jmp 0x6748a0
je 0x10cbeb2
push dword [ebp - 0x14]
jmp 0x10cbeb2
je 0x1030254
mov ecx, dword [ebp - 0x28]
cmovno dx, si
mov edx, dword [ecx]
jmp 0x8e54a0
jne 0xea4672
mov ecx, dword [ebp - 0x2c]
jmp 0xc0b01c
mov dword [ebp - 0x44], eax
jmp 0xfd609b
mov ecx, dword [eax + 0xc]
mov al, ah
push ecx
mov edx, dword [ebp + 8]
mov cl, 0xa2
mov cl, ch
mov eax, dword [edx + 8]
jmp 0x9714fa
mov dword [ebp - 0x14], eax
jmp 0x8157cc
mov dword [ebp - 0x40], ecx
jmp 0xf09dfb
mov ecx, dword [ebp - 0x1c]
cmp bl, 0x2d
stc
cmp bl, al
lea ecx, [ecx - 1]
test si, 0x3059
cmp edx, 0x2dfd2bb9
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 0
jmp 0xfb05f7
push esi
cmc
push edi
cmovbe ax, bx
test al, bh
ror dl, 0xbf
mov edx, dword [ebp + 8]
test esp, 0x2109222a
mov eax, dword [edx + 0xc]
clc
cmp ah, 0x7e
sub eax, 1
jmp 0x6bd721
ret 4
jmp 0xc32cd5
mov eax, dword [ebp - 0x2c]
cmp dword [eax + 8], 0x80000601
jmp 0xb270ea
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
setb cl
xchg cl, cl
jmp 0x8beac9
je 0xee4523
cmp dword [ebp - 0x38], reloc.OLEAUT32.dll_VariantClear
jmp 0x7d4c85
push ecx
mov cx, di
jmp 0x70b0d1
mov eax, dword [ebp + 8]
jmp 0xbd65fb
jne 0xe39e90
mov edx, dword [ebp - 0x28]
cmp ax, bp
cmp dl, 0x32
cmp dword [edx + 8], 0x10003
jne 0x656b69
mov dword [ebp - 0x18], 1
xadd al, ah
btc cx, 0x11
bt dx, ax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xc], eax
shld ecx, eax, 0xf4
mov ecx, dword [ebp - 0xc]
rol al, 0x2a
cmovg edx, eax
shl dl, cl
mov edx, dword [ecx]
mov dword [ebp - 0x20], edx
cwd
shl al, 0x77
mov eax, dword [ebp - 0xc]
sal dh, cl
sal dl, 0xbb
add eax, 4
not dl
xchg dx, cx
mov dword [ebp - 0xc], eax
cdq
mov ecx, dword [ebp - 0xc]
movsx edx, si
mov edx, dword [ecx]
jmp 0xeb62cb
jmp 0xe95033
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x18], 0
jmp 0xada2e0
cmp dword [ebp - 0x10], 0
je 0xe9e702
mov ecx, dword [ebp + 8]
neg al
mov dword [ecx + 0xd0], 1
bt dx, 0xdd
sar cx, 1
xchg si, si
mov edx, dword [ebp + 8]
rcl cl, cl
lea edx, [edx + 0xd4]
mov dword [ebp - 0x30], edx
bts edx, ebx
mov eax, dword [ebp - 0x30]
xchg di, cx
rol bh, cl
sal ch, 0xfb
mov ecx, dword [ebp - 8]
mov dword [eax], ecx
xor ax, si
sub dl, cl
test esp, esi
mov edx, dword [ebp - 0x30]
xchg ecx, eax
movsx ebx, ax
add edx, 4
mov dword [ebp - 0x30], edx
bswap esi
mov eax, dword [ebp - 0x30]
not esi
movzx edi, sp
mov ecx, dword [ebp - 0x24]
not bh
mov dword [eax], ecx
cwde
mov eax, 1
pop edi
movzx ebx, di
pop esi
pop ebx
mov esp, ebp
mov ebp, esp
cmovl bp, bp
pop ebp
jmp 0xcbf4f1
mov edx, dword [ebp - 0x2c]
test ebp, 0x1ca70085
test esi, edi
cmp dword [edx + 8], 0x80000008
jmp 0xf335b8
mov dword [ebp - 0x14], edx
jmp 0x814fac
push ebp
mov ebp, esp
rol ah, cl
adc dx, dx
sub esp, 0x44
movzx dx, al
mov edx, esp
cwde
push ebx
jmp 0xfcc106
mov dword [ebp - 0x18], 1
inc cx
mov ecx, dword [ebp - 0x2c]
cmp sp, sp
cmp dword [ecx + 8], 0x80000401
jmp 0x610d75
jmp 0xa7201b
jne 0xa71ffb
mov eax, dword [ebp - 0x2c]
jmp 0xb6cac6
jmp 0xa72027
jne 0xc7bf54
sub eax, eax
jmp 0x10416dd
jl 0x7c7b63
mov edx, dword [ebp - 0x1c]
sub ah, 0xb9
ror cl, 0xd1
shl edx, 4
mov eax, dword [ebp + 8]
or cx, bp
lea ecx, [eax + edx + 0x10]
mov dword [ebp - 0x28], ecx
or ah, 0xfb
neg al
mov dword [ebp - 0x18], 0
mov edx, dword [ebp - 0x28]
shr ax, 0xf
mov eax, dword [edx + 0xc]
and eax, 1
test eax, eax
jmp 0xb1bd21
push esi
setae dh
xchg dh, ah
push edi
mov dword [ebp - 0x34], ecx
movsx ecx, si
not dx
jmp 0xdb56f3
jmp 0xa7200b
mov edx, dword [ebp - 0x2c]
lahf
movsx eax, word [edx]
mov dword [ebp - 0x20], eax
jmp 0xe95033
mov eax, dword [ebp - 0x28]
rcr cl, 0xce
mov ecx, dword [eax + 0xc]
and ecx, 2
test ecx, ecx
jmp 0xe39e74
jmp 0xe9e707
push dword [ebp - 0x20]
jmp 0xa3a76a