Function at 0x9e7c25
Capabilities:
Execute anti-debugging instructions

Disassembly:
add edx, 0x12ce9cc3
jmp 0x9e7d3a
add edx, 0x9cf3d09a
jmp 0x9e7dc3
mov bl, byte [esp]
mov ebx, 0xfb23e074
dec dh
jne 0x9e7441
mov ch, byte [esp]
jmp 0x9e7449
mov eax, ebp
mov bl, byte [esp]
mov edx, dword [esp]
jmp 0x9e741d
mov ch, byte [esp]
jmp 0x9e74c6
sub esp, 1
dec dx
lea esp, [esp + 1]
jmp 0x9e74cf
bsr dx, ax
inc bx
mov ecx, esi
mov dx, 0xbd23
jmp 0x9e74e7
rol ebp, 0
xchg cx, dx
mov dh, byte [esp]
rcr ebx, cl
jne 0x9e7469
je 0x9e74ac
mov dx, 0xbd23
jmp 0x9e74e7
xchg ecx, ebx
pushfd
mov bl, byte [esp + 3]
xchg word [esp + 1], cx
mov cx, 0xa967
jmp 0x9e74f5
bsr dx, ax
inc bx
mov ecx, esi
jmp 0x9e748e
sub esp, 1
dec dx
lea esp, [esp + 1]
jmp 0x9e747f
xchg ecx, ebx
pushfd
mov bl, byte [esp + 3]
jmp 0x9e750b
xor ebp, 0x4b0fc216
setg dl
inc ebx
jge 0x9e7494
jl 0x9e74d1
lea esp, [esp + 4]
dec ebp
lea ebx, [edi - 0xd858]
bts cx, si
jmp 0x9e75a6
xchg word [esp + 1], cx
mov cx, 0xa967
jmp 0x9e74f5
mov bl, dh
sub esp, 4
mov bh, bl
jmp 0x9e7551
jmp 0x9e7539
mov byte [esp], ch
lea edx, [ebx + esi]
lea edx, [ecx + edx]
lea esp, [esp + 2]
jmp 0x9e7585
mov cx, ax
jmp 0x9e75ee
inc cl
xchg bh, ch
jmp 0x9e75af
lea esp, [esp + 4]
add ebp, 0x17a800b9
neg bh
jno 0x9e756f
jo 0x9e75c5
test dword [ecx], ecx
cdq
clc
or ecx, ebp
and eax, 0xaa5f38aa
sbb cl, byte [ebx - 0x1e]
sbb eax, 0x3e787f6c
js 0x9e75e6
xchg bx, cx
dec dl
jmp 0x9e7567
add ebp, dword [edi]
bsf cx, cx
ja 0x9e75cb
rol ebx, cl
jmp 0x9e7628
inc cl
xchg bh, ch
jmp 0x9e75af
rol ebx, cl
jmp 0x9e7628
xchg bx, cx
dec dl
mov cx, ax
neg ebp
lea edx, [edx*4]
sub esp, 2
jg 0x9e754f
mov bl, dh
sub esp, 4
mov bh, bl
mov byte [esp], ch
lea edx, [ebx + esi]
jmp 0x9e7557
movzx ecx, byte [ebp]
bswap ebx
bsf edx, esi
jae 0x9e7640
jb 0x9e762a
test al, 0x2b
mov ebx, 0xce9b2dde
pop ecx
mov eax, 0x1c8de8eb
mov ch, 0
add byte [eax], al
add byte [esi + 0x11], ah
bts edx, esp
jmp 0x9e7612
lea ebx, [esi*4]
adc bx, si
bts edx, esp
jmp 0x9e7684
lea ebx, [esi*4]
adc bx, si
bts edx, esp
shr bx, cl
jmp 0x9e7669
add cl, al
mov bh, dh
mov dx, 0x7a78
mov bl, byte [esp]
jmp 0x9e76fc
shr bx, cl
call fcn.009e76b0
invalid
push ecx
lea ebx, [edx - 0x4f1e]
mov bl, 0x50
call fcn.009e7732
mov ebp, 0x8750b38c
pop esp
and al, 1
mov bl, 0x50
xchg dword [esp + 1], ebx
jmp 0x9e7851
mov bl, 0xf9
mov dl, cl
push ecx
mov bh, 0xfa
push dword [esp + 1]
jmp 0x9e770d
jg 0x9e76d2
push ecx
lea ebx, [edx - 0x4f1e]
jmp 0x9e76e2
call 0x9e77df
add byte [ecx + 0x42837011], al
ret 0xd042
lea esp, [esp + 0xc]
dec dl
mov ebx, ecx
adc ebx, ebx
jle 0x9e780f
btc bx, si
jmp 0x9e789e
mov bl, byte [esp]
jmp 0x9e78a4
cmc
mov ebx, edi
clc
jmp 0x9e7888
neg dl
dec bx
jns 0x9e79c5
mov bl, 0x21
stc
jmp 0x9e7979
stc
call fcn.009e7907
mov bl, ah
mov bl, dl
sbb bl, ah
js 0x9e799c
mov bl, byte [esp]
lea ebx, [eax + ebx]
jmp 0x9e79ed
mov bl, byte [esp]
jmp 0x9e79a5
lea ebx, [eax + ebx]
sets bh
add al, dl
bswap ebx
bswap ebx
inc edx
jmp 0x9e7ab5
mov bl, 0x21
jmp 0x9e7978
inc ebp
mov dh, 0x7a
neg dl
jmp 0x9e7a38
mov ebx, esi
inc bx
setns dl
lea edx, [eax - 0xbb]
mov edx, 0x92908ad
jmp 0x9e79f2
sets bh
jmp 0x9e79ab
dec dx
lea ebx, [ecx - 0x7e26]
neg ebx
jnp 0x9e7a18
sete bh
stc
jmp 0x9e7a22
setns dl
lea edx, [eax - 0xbb]
mov edx, 0x92908ad
jmp 0x9e79f2
sete bh
call fcn.009e7a56
arpl cx, di
add cl, 0x21
jmp 0x9e7ac1
jne 0x9e79d4
mov ebx, esi
inc bx
jmp 0x9e7a08
jae 0x9e79c9
jb 0x9e79c9
sbb dx, si
jne 0x9e7ba9
push si
mov word [esp], sp
bsr edx, edx
rcl bx, cl
lea esp, [esp + 2]
jmp 0x9e7b09
jmp 0x9e7b21
xor cl, 0xe9
mov bx, cx
mov ebx, dword [esp]
sub esp, 0xc
jno 0x9e7af3
xchg dword [esp + 7], edx
call fcn.009e7b6e
add dword [edi - 0x77f8dbac], 0xe904246c
and al, 2
add byte [eax], al
inc eax
mov byte [esp + 4], ch
jmp 0x9e7d52
xchg dword [esp + 7], edx
mov byte [esp + 4], ch
jmp 0x9e7d52
bsr edx, edx
rcl bx, cl
lea esp, [esp + 2]
jmp 0x9e7b09
push si
mov word [esp], sp
jmp 0x9e7b4c
bsf bx, sp
call 0x9e7c25
mov al, byte [0x21d2b727]
sahf
ficomp word [eax - 0x32]
test eax, 0x8d35ea58
and al, 0x18
lea esp, [esp + 0x18]
neg cl
mov dl, byte [esp]
dec bx
jne 0x9e7c00
je 0x9e7c44
sub esp, 9
jmp 0x9e7c60
lea esp, [esp + 1]
call 0x9e7c9d
sub eax, 0xaa5f38aa
sbb ecx, dword [ebp - 0x31]
pop edi
cmp cl, cl
imul esp, edx, 0xdcbc0f66
bsf bx, sp
jmp 0x9e7c04
rol cl, 0
mov edx, ecx
jmp 0x9e7d26
jg 0x9e7c2e
lea esp, [esp + 1]
jmp 0x9e7c4a
xchg bx, dx
pop edx
lea esp, [esp + 2]
jmp 0x9e7ce1
xchg bx, dx
pop edx
lea esp, [esp + 2]
jmp 0x9e7c16
mov bl, 0x2f
mov bh, byte [esp]
jmp 0x9e7d01
mov bl, 0x2f
mov bh, byte [esp]
shl edx, 2
mov bx, word [esp]
jmp 0x9e7d0e
xchg bl, bh
or bx, 0x567
jno 0x9e7d31
mov bx, 0xab7a
jmp 0x9e69da
mov bl, 0x46
mov edx, ecx
shl ebx, 0x16
jp 0x9e7cfc
jnp 0x9e7ce6
mov bx, 0xab7a
jmp 0x9e69da
bt bx, di
jmp 0x9e7d67
lea esp, [esp + 0xc]
not cl
sub esp, 0x1e
jl 0x9e7cd9
jge 0x9e7c7d
js 0x9e7d7d
mov bx, cx
mov bh, ah
jmp 0x9e7d8b
mov bx, cx
mov bh, ah
not bx
jmp 0x9e7de1
not bx
jmp 0x9e7de1
mov bx, 0x51f4
mov bl, byte [esp]
jmp 0x9e6a55
pushfd
mov dword [esp], ecx
mov dword [esp], esp
call fcn.009e76cd
mov bh, 0x1c
bsr ebx, ebx
jg 0x9e7e05
jle 0x9e7def
lahf
setg dl
or dword [eax + 0x5136a037], ebp
mov al, byte [0x4ddd4b12]
adc al, 0xe7
push eax
lodsb al, byte [esi]
mov edi, 0x8dda8b86
wait
loope 0x9e7db7
mov ebx, edx
lea ebx, [ebx - 0x12301e0d]
in eax, dx
mov edx, dword [ebx]
mov bl, 0xaa
jmp 0x9e7d90
sub esp, 0xf
inc ebx
lea esp, [esp + 3]
jmp 0x9e7e0d
sub esp, 0xf
inc ebx
lea esp, [esp + 3]
jmp 0x9e7e59
mov esp, esi
mov bh, 3
call 0x9e7e0f
lea esp, [esp + 4]
neg cl
lea ebx, [esi*4]
lea edx, [edx + ebp]
jmp 0x9e7e96
stc
sbb bx, 0x9f26
jmp 0x9e8437
or dx, di
jns 0x9e7e80
stc
sbb bx, 0x9f26
rcl dh, cl
jmp 0x9e8439
rcl dh, cl
add cl, 0xd1
lea ebx, [edi*4]
mov ebx, dword [esp]
call fcn.009e8331
mov cx, bx
jmp 0x9e846b
stc
jb 0x9e8497
neg dl
jmp 0x9e8499
neg dl
lea ecx, [esi + 0x50]
jmp 0x9e84a2
dec bh
jae 0x9e8518
bsr ebx, ebp
jmp 0x9e851b
movzx ecx, byte [ebp]
xchg bl, dh
lea edx, [ebx*4]
dec ebp
add byte [esi - 0x62eb720d], al
add byte [eax], al
add byte [eax], al
not dx
call fcn.009e84f2
loope 0x9e84c6
jmp 0x9e84c4
call 0x24a31446
mov bx, bp
push word [esp]
jmp 0x9e8667
add esp, 2
btc ebx, eax
lea esp, [esp + 2]
jmp 0x9e8586
bsr ebx, ebp
cmp edi, ecx
jmp 0x9e8c48
add cl, al
shr edx, cl
jle 0x9e8607
mov dl, 0xe
jmp 0x9e85d5
lea esp, [esp + 2]
call fcn.009e857a
not dl
neg edx
sbb dx, ax
jmp 0x9e862c
rol dh, 6
mov dx, di
jmp 0x9e860f
jb 0x9e85bf
not dl
neg edx
jmp 0x9e85e9
sbb dx, ax
jmp 0x9e862c
mov dl, 0xe
rol dh, 6
mov dx, di
mov bl, cl
sub esp, 8
jmp 0x9e85dd
lea esp, [esp + 8]
dec bl
call fcn.009e85ee
jl 0x9e84f8
add esp, 2
btc ebx, eax
jmp 0x9e85b6
ja 0x9e84da
mov cx, sp
xchg dl, dh
jmp 0x9e8c78
rcl dh, 6
jmp 0x9e8c89
mov ecx, esi
bsf dx, si
je 0x9e8c62
rcl dh, 6
jmp 0x9e8cd8
add bx, si
lea edx, [esi + 0x40]
setae bl
lea ebx, [ecx + edx]
ror bx, cl
jmp 0x9e8cf3
ror ebx, cl
clc
jmp 0x9e8cdd
lea ebx, [esi + ebp]
sub edx, ecx
setae bl
mov ebx, 0x343499ba
setg bh
jmp 0x9e8d22
add bx, si
jmp 0x9e8c8c
jno 0x9e8cc2
lea ebx, [esi + ebp]
sub edx, ecx
jmp 0x9e8cf9
jo 0x9e8cb9
ror ebx, cl
jmp 0x9e8cbb
setae bl
mov ebx, 0x343499ba
setg bh
jmp 0x9e8d22
push word [esp + 1]
mov byte [esp + 3], al
lea esp, [esp + 1]
jmp 0x9e8de4
lea ebx, [esi*4]
setb bl
mov bx, di
lea ebx, [edi - 0x80]
sub esp, 0xb
jmp 0x9ea5ea
sub ebx, edx
call fcn.009e8d76
and bl, 0xfc
cmc
jbe 0x9e8db5
ja 0x9e8db5
jg 0x9e8d06
push word [esp + 1]
mov byte [esp + 3], al
call 0x9ea0f4
not al
bswap edx
mov edx, dword [esp]
mov dh, dl
shr dh, cl
jmp 0x9ea618
jns 0x9ea62e
ror dl, cl
call 0x9ea646
mov eax, dword [0x30c1a630]
int1
mov ecx, 0x37c4bd2d
mov bh, byte [edx + edx*8 + 0xc8c0ca]
ror dl, cl
ror al, 0
je 0x9ea6b9
jne 0x9ea6a3
lcall 0x16a1, 0x15e68313
add dword [eax + 3], 0x896660ba
insb byte es:[edi], dx
and al, 2
jmp 0x9ea68e
sub esp, 0x1c
cmc
pop dx
lea esp, [esp + 2]
lea ecx, [ecx + 0xf]
xchg dh, dl
jmp 0x9ea678
mov dx, si
bswap edx
bsf dx, ax
xchg dl, dh
xchg dword [esp + 0x38], ecx
inc edx
jmp 0x9ea6d4
mov dh, 0xe4
bts dx, di
mov dx, bx
xchg dword [esp + 0x20], ecx
mov dx, bp
mov dh, byte [esp]
jmp 0x9ea64e
mov dx, word [esp]
mov dl, bl
not edx
jmp 0x9ea6de
mov dx, word [esp]
mov dl, bl
not edx
clc
setae dh
jmp 0x9ea6e8
mov dh, dl
clc
push dword [esp + 0x38]
ret 0x3c
clc
setae dh
jmp 0x9ea6e8
add cl, al
bswap edx
bswap eax
mov edx, esi
mov edx, dword [esp]
jmp 0x9ea727
lea eax, [esp + 0x790c]
jmp 0x9ea751
inc edi
btc ax, bx
js 0x9ea711
lea eax, [esp + 0x790c]
not dh
mov ah, byte [esp]
adc dx, 0x21d9
cmc
jmp 0x9ea762
not dh
mov ah, byte [esp]
adc dx, 0x21d9
jmp 0x9ea761
cmc
mov al, 0xfa
mov edx, dword [esp]
lea edx, [eax - 0x2777]
jmp 0x9ea86f
add bl, 0x2e
bsr dx, di
jae 0x9ea7bf
bsr eax, edx
jmp 0x9ea7a9
mov eax, dword [esp]
dec edx
rdtsc
jmp 0x9ea7dc
bswap edx
bt eax, ebx
sub esp, 9
jmp 0x9ea7f4
bsr eax, edx
bswap edx
bt eax, ebx
sub esp, 9
lea esp, [esp + 5]
jmp 0x9ea7de
mov eax, dword [esp]
dec edx
rdtsc
jmp 0x9ea788
mov eax, 0xab5e1171
rcr edx, cl
jp 0x9ea835
jnp 0x9ea835
add byte [edx], 0x90
test dword [edx], 0xd5fa43c3
inc esp
test dword [ebp - 0x14fadb9c], 0x66c3fee4
mov eax, ecx
lea esp, [esp + 5]
jmp 0x9ea7de
inc bl
mov ax, cx
lea edx, [esi + esi]
mov dh, byte [esp]
lea eax, [esi + edi]
jmp 0x9ea81f
xchg al, ah
xchg dh, dl
bswap edx
mov ax, di
lea esp, [esp + 4]
jmp 0x9ea7fa
mov edx, dword [esp]
jmp 0x9ea853
rol bl, 0
mov dl, byte [esp]
jmp 0x9ea810
neg bl
call fcn.009ea83d
fstp qword [edx - 0x38]
scasd eax, dword es:[edi]
pop edx
jmp 0x9ea89e
ror bl, 0
mov dh, byte [esp]
bt edx, ecx
ja 0x9ea7d6
jbe 0x9ea7a1
pushal
mov dword [esp + 0x14], ebx
mov ax, dx
popal
mov eax, 0xf95cf562
jmp 0x9eb932
pop ss
add edx, 0x1cd6c487
jmp 0x9ea941
call 0x9ea8af
lea eax, [ebp + ebp]
not al
not ah
jmp 0x9ea8f2
lea eax, [ebp + ebp]
not al
not ah
jmp 0x9ea92a
lea esp, [esp + 2]
mov esp, ebp
or eax, ecx
js 0x9ea8ea
jns 0x9ea8d4
seto ah
setbe al
lea eax, [edi - 0xf1b6]
jmp 0x9ea9a0
push edx
ret
mov al, byte [esp]
mov ah, byte [esp]
push bp
jmp 0x9ea908
mov edx, ebp
mov ax, di
mov ax, dx
call fcn.009ea96e
sub ebx, edx
add ah, 0x58
jmp 0x9ea9fc
mov al, 0xaf
mov al, 0xc6
mov eax, edi
lea eax, [esi - 0x80]
sub esp, 0x15
je 0x9eaa1c
jne 0x9eaa04
call 0x9ea9cd
jmp 0x9eb5dc
mov eax, edi
jmp 0x9ea9be
mov dword [esp + 0x28], eax
jmp 0x9eb67d
jnp 0x9ea9b8
mov al, 0xaf
mov al, 0xc6
jmp 0x9ea9e6
clc
lea esp, [esp + 4]
lea esp, [esp + 1]
jmp 0x9eaa25
call 0x9eaa14
jmp 0x9eb77a
clc
lea esp, [esp + 4]
lea esp, [esp + 1]
jmp 0x9eaa3b
and al, 0xfc
push esi
push dword [esp + 2]
je 0x9eaa5f
jne 0x9eaa5f
sub eax, ebx
jmp 0x9eaa67
sub esp, 0x10
jp 0x9eaaa6
pop word [esp]
lea esp, [esp + 2]
jmp 0x9eaa90
add edx, 0xed67df13
jmp 0x9ea8cf
mov esp, eax
jmp 0x9eaab0
pop word [esp]
lea esp, [esp + 2]
jmp 0x9eaa90
pushfd
lea ebp, [eax + ebx - 0x40]
call fcn.009eaae8
call 0x9eaabf
jmp 0x9eba9d
bsf ax, dx
btc eax, ebp
jmp 0x9eaa85
jmp 0x9eaac9
pop ecx
jmp 0x9eb60c
sub ecx, 0x1001670d
jmp 0x9eb75d
popal
call fcn.009eb667
cmp ebx, 0x16879ed2
jmp 0x9eb6a8
mov ebp, eax
movzx ebx, byte [ebp]
pop ebp
add ebx, 0x16879e06
jmp 0x9eb683
je 0x9eb6e7
jne 0x9ea9ea
adc ecx, dword [edi]
into
pushfd
mov esi, eax
push dword [esp + 1]
mov dword [esp + 4], ebp
mov bp, sp
jmp 0x9eb706
xchg esi, ebp
not bp
lea esi, [edi + ebp]
mov dword [esp], ecx
mov si, 0xee25
push esp
jmp 0x9eb747
lea esp, [esp + 2]
pop ecx
mov bp, 0xb93c
mov bp, word [esp]
lea esi, [eax - 0x3b]
jmp 0x9eb794
inc dword [esp + 8]
jmp 0x9eb828
mov esi, 0x97d3dc3
not cl
mov ebp, edx
pop bp
mov esi, dword [esp]
jmp 0x9eb718
mov dword [ecx + 0x10017294], eax
push ebp
jmp 0x9eb699
mov esi, dword [esp + 1]
lea esp, [esp + 8]
cmp dword [esp + 4], 0
jne 0x9eb731
je 0x9eb7c0
pop eax
sub eax, 0x3db66e62
jmp 0x9eb7aa
lea esi, [ecx*4]
pop ebp
lea esi, [0x8beec663]
mov esi, ecx
bswap esi
not esi
jmp 0x9eb769
call 0x9eb7ba
dec ebp
push ebx
push esi
inc ebx
push edx
push esp
insb byte es:[edi], dx
insb byte es:[edi], dx
add bl, ch
or ah, byte [edx + 0x603f2cdd]
pushal
jmp 0x9eaa0f
popfd
ret 4
mov ax, 0x3c6c
lea eax, [ecx + ebx]
shl edx, 2
xor ax, 0x2884
jb 0x9eab97
bsf ax, dx
btc eax, ebp
jmp 0x9eaa85
jmp 0x9ebac0
pop eax
sub eax, 0xcf3994f6
jmp 0x9ebaaa
call 0x9ebaba
dec ebp
push ebx
push esi
inc ebx
push edx
push esp
insb byte es:[edi], dx
insb byte es:[edi], dx
add bl, ch
push cs
lea ebx, [edi + ebp*2]
jbe 0x9eba4e
lea esp, [esp + 0x14]
and al, 0x14
popfd
lea esp, [esp + 4]
ret