Function at 0xe901c5
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov dword [esp + 0x24], eax
jmp 0xe9005d
call 0xe8fbdc
jmp 0xe901ee
mov dword [esp + 0x24], eax
jmp 0xe90201
pop ecx
sub ecx, 0x10018795
jmp 0xe900c0
mov dword [ecx + reloc.kernel32.dll_WriteFile], eax
movzx ebx, byte [eax]
jmp 0xe90168
add ebx, 0x1f2632d7
cmp ebx, 0x1f2633a3
je 0xe901d2
jne 0xe8fb71
call dword [eax + 0x7e915d06]
jmp 0xe901b0
call 0xe901c5
push ecx
jne 0xe9021d
jb 0xe90233
inc esp
outsd dx, dword [esi]
jae 0xe90202
jbe 0xe9022a
arpl word [ebp + 0x57], sp
add bl, ch
shr eax, cl
add byte [eax], al
add byte [eax], al
jmp 0xe91096
pushfd
call 0xe9009f
inc dword [esp + 8]
jmp 0xe90217
mov dword [esp + 0x24], eax
jmp 0xe910fa
pop ecx
sub ecx, 0x100187e8
mov dword [ecx + reloc.kernel32.dll_WriteFile], eax
jmp 0xe9023b
popal
jmp 0xe90219
popfd
ret
inc dword [esp + 8]
call fcn.00e90251
call 0xe90227
jmp 0xe91161
add byte [eax], al
jg 0xe90274
int1
call fcn.00e7b065
jmp 0xe8fbd7
scasb al, byte es:[edi]
invalid
movzx ebx, byte [eax]
jmp 0xe9026d
mov dword [esp + 0x24], eax
jmp 0xe91280
cmp ebx, 0x3a182a61
jmp 0xe91297
xor eax, 0xe8000010
add byte [eax], al
add byte [eax], al
call 0xe90267
jmp 0xe91329
add ebx, 0x3a182995
jmp 0xe90257
loop 0xe9025e
add byte [eax], al
add byte [eax], al
jmp 0xe913b5
setbe bh
mov bl, dl
push edi
mov ebx, esi
mov bh, 0x98
call fcn.00e902d2
ret 0xc353
cmpsb byte [esi], byte es:[edi]
push ebp
xchg edi, eax
push esi
lea esp, [esp + 2]
mov dword [esp], ebx
mov bh, byte [esp]
mov bx, bp
not bl
mov bl, 0x69
jmp 0xe902a9
pop ecx
jmp 0xe910e8
sub ecx, 0x10018dd8
mov dword [ecx + reloc.kernel32.dll_WriteFile], eax
jmp 0xe91101
popal
inc dword [esp + 8]
popfd
ret
movzx ebx, byte [eax]
add ebx, 0xf9207445
cmp ebx, 0xf9207511
jmp 0xe9125e
mov ecx, 0x536f6bfc
mov ecx, dword [esp]
lea esp, [esp + 4]
jmp 0xe91185
push ss
push eax
invalid
sub ecx, 0x10018e33
jmp 0xe91225
mov edx, esp
rdtsc
mov dword [esp], ecx
popal
lea edi, reloc.kernel32.dll_WriteFile
mov dword [edi], eax
jmp 0xe91244
push edi
pushal
rdtsc
lea ebx, [ebx + ebx]
jmp 0xe9120f
pop edi
movzx ebx, byte [eax]
jmp 0xe9186c
je 0xe9116e
jne 0xe901de
popfd
ret
popal
inc dword [esp + 8]
jmp 0xe9126a
je 0xe902bb
jne 0xe8fc07
rdtsc
lea eax, reloc.kernel32.dll_WriteFile
mov ecx, edx
lea edx, [ecx + esi]
pop eax
pushal
jmp 0xe912ee
lea esp, [esp + 3]
mov ecx, dword [esp + 0x38]
mov dh, 0xfe
mov dh, byte [esp]
bswap edx
jmp 0xe91367
pushal
mov cl, bh
mov edx, 0x3818d051
pop edx
push word [esp + 0x33]
lea esp, [esp + 3]
jmp 0xe912d8
pop eax
sub eax, 0x5b591576
jmp 0xe9134b
jne 0xe914ed
pushal
jmp 0xe90262
call 0xe9135b
push ebp
push ebx
inc ebp
push edx
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add bl, ch
xor ebx, ecx
push edi
invalid
mov dh, 0x60
mov edx, esp
mov edx, dword [esp + 0x3e]
lea esp, [esp + 0x44]
cmp dword [esp + 4], 0
jmp 0xe9133f
lea ecx, [ebx*4]
mov cl, 0x36
mov ecx, dword [esp]
lea esp, [esp + 4]
jmp 0xe913d5
sub ecx, 0x10018e86
jmp 0xe91423
pop esi
movzx ebx, byte [eax]
add ebx, 0x30bb16a6
jmp 0xe9140b
cmp ebx, 0x30bb1772
jmp 0xe91509
push esi
mov esi, ecx
lea esi, reloc.kernel32.dll_WriteFile
mov dword [esi], eax
jmp 0xe913fb
daa
dec esi
fnstcw word [eax]
mov ebp, edx
lea ebp, [edx*4]
push edx
bswap ebp
mov ebp, 0xd8b4d27f
bswap ebp
jmp 0xe9145d
inc dword [esp + 8]
popfd
ret
je 0xe9146f
jne 0xe90307
pushfd
cmp dword [esp + 4], 0
jne 0xe91538
je 0xe91564
inc dword [esp + 8]
jmp 0xe915d4
pushal
popfd
ret
add ebx, 0x4eb7f09c
cmp ebx, 0x4eb7f168
je 0xe918d6
jne 0xe90240
jne 0xe9193c
xchg edi, eax
popfd
ret
dec dword [edi]
lahf
ror dword [edx - reloc.kernel32.dll_WriteFile], 0x56