Function at 0xefe397
Capabilities:
Execute anti-debugging instructions

Disassembly:
pushal
sub esp, 0x1e
jnp 0xefe36c
pushal
jmp 0xefe2ef
movzx ebx, byte [ebp - 1]
mov dh, 0x20
jmp 0xefe2a3
not dh
jmp 0xefe377
lea eax, [eax + esi]
bswap edx
ror ah, 6
jmp 0xefe2d9
mov al, bl
mov dx, 0xd36b
lea edx, [eax + esi]
sete dl
cmc
jmp 0xefe349
pushfd
lea eax, [ebx*4]
lea eax, [eax + eax]
jmp 0xefe347
mov dx, word [esp]
add al, 0x11
btr edx, esi
jmp 0xefe3af
pushfd
lea eax, [ebx*4]
lea eax, [eax + eax]
jmp 0xefe2f9
jo 0xefe31c
mov dx, word [esp]
jmp 0xefe320
stc
call 0xefe397
loopne 0xefe3ba
int1
nop
arpl word [edx - 0x5da8cf5e], sp
adc ah, byte [eax - 0x19]
ja 0xefe379
loope 0xefe397
lcall 0x3004, 0x8d60e4f5
pushal
lea eax, [eax + esi]
bswap edx
ror ah, 6
not dh
lea esp, [esp + 2]
and al, 2
sub bl, cl
js 0xefe33c
jns 0xefe30f
jmp 0xefe3fb
rol edx, 0x18
jns 0xefe381
js 0xefe381
movsd dword es:[edi], dword [esi]
and byte [esi - 0x2a6fdf2f], dh
pop ebp
int 0x94
mov eax, dword [reloc.WINMM.dll_PlaySoundA]
push es
mov cl, 0xb0
je 0xefe351
stc
jmp 0xefe352
mov edx, esi
ror dl, 3
jmp 0xefe3cf
adc al, 0xba
aaa
cmpsd dword [esi], dword es:[edi]
ret 0xfc31
mov edx, esi
ror dl, 3
rol al, 0
adc dx, di
jmp 0xefe421
mov edx, esi
bsf edx, eax
pushfd
mov dx, 0x2faf
jmp 0xefe861
lea esp, [esp + 4]
dec al
not dx
bts edx, esi
jge 0xefe3ca
jl 0xefe3b4
pushfd
mov dx, 0x2faf
neg dl
jmp 0xefe863
jg 0xefe3db
mov edx, esi
bsf edx, eax
call 0xefe42e
sahf
lea edx, [edx*4]
bswap edx
lea edx, [ebp*4]
lea edx, [ebx*4]
jmp 0xefea63
neg dx
jg 0xefe8ce
lea edx, [eax*4]
jmp 0xefe8a1
neg dl
xchg dl, dh
lea esp, [esp + 4]
inc al
jmp 0xefe84b
sub esp, 0xa
jmp 0xefe8e3
lea edx, reloc.WINMM.dll_PlaySoundA
sub esp, 0xc
rol dl, cl
jmp 0xefe887
bswap edx
mov edx, 0x7d9f49c
bt edx, ecx
js 0xefe907
setle dh
setp dl
jmp 0xefe90c
lea edx, [eax*4]
lea edx, reloc.WINMM.dll_PlaySoundA
sub esp, 0xc
rol dl, cl
sub esp, 0xa
neg dl
lea esp, [esp + 2]
lea esp, [esp + 0x14]
add al, 0x11
jmp 0xefe8ae
setp dl
jmp 0xefe90c
setle dh
jmp 0xefe8f1
sub cl, al
bswap eax
btr edx, ebx
js 0xefe946
jns 0xefe946
xor esp, dword [esi + reloc.WINMM.dll_PlaySoundA]
dec edi
fisttp dword [ebx + 0x2e]
fstp qword [0x662889be]
bsr edx, ecx
bsr dx, cx
pushal
call fcn.00efe87c
dec ebp
not ax
not dx
xchg al, dh
cmp ah, dl
jmp 0xefe948
jmp 0xefe930
jbe 0xefe95e
not ah
cmc
jmp 0xefe969
not ah
cmc
mov edx, ecx
jmp 0xefe9f2
mov edx, ecx
mov ax, sp
mov dh, ah
jmp 0xefe9f7
lea ecx, [ecx - 0x22]
mov dx, 0x924c
bsf edx, esp
mov edx, dword [esp]
mov dx, 0x99f8
xchg dword [esp], ecx
jmp 0xefe926
mov dx, word [esp]
jmp 0xefe9d3
sub esp, 0x19
lea esp, [esp + 1]
jmp 0xefe9da
sets dh
mov eax, ebx
rol ah, cl
jge 0xefe9a2
mov dx, word [esp]
jmp 0xefe9a8
sub esp, 0x19
lea esp, [esp + 1]
lea esp, [esp + 0x18]
inc bl
jmp 0xefea12
mov ax, sp
mov dh, ah
xor bl, 0x9f
jmp 0xefe9c0
bt eax, esp
jb 0xefea38
rdtsc
mov dx, word [esp]
neg edx
jmp 0xefea40
lea eax, reloc.WINMM.dll_PlaySoundA
not eax
rdtsc
rdtsc
not bl
jmp 0xefe9fc
neg edx
jmp 0xefea40
xchg ecx, eax
adc byte [edi], cl
xor dword [esi - 0x75], esp
adc al, 0x24
rdtsc
mov dx, word [esp]
jmp 0xefea22
xor bl, 0x2c
xchg dx, ax
rcl ax, 0xe
jge 0xeff440
jl 0xefeadb
xchg esi, eax
pop ss
xchg edx, esp
adc dword [eax + reloc.WINMM.dll_PlaySoundA], esp
mov byte [ebp - 0x5b], cl
aam 0x8d
adc al, 0xbd
add byte [eax], al
add byte [eax], al
lea edx, [edi*4]
xchg dword [esp], ecx
lea edx, [esi + ebp]
mov dx, 0xb645
mov edx, 0x7a91f14b
mov dx, 0x8577
jmp 0xefe989
bswap eax
call fcn.00efeac4
sbb edx, dword [eax + 0x53906106]
xchg dword [0xab17e49d], ecx
sbb al, 0x6f
jbe 0xefea36
ret 0x248a
mov edx, 0x6027f55a
not eax
mov dl, 0x5a
jmp 0xefea98
mov edx, 0x6027f55a
not eax
mov dl, 0x5a
bswap eax
call fcn.00efea82