Function at 0x1e9c254
Capabilities:
Execute anti-debugging instructions

Disassembly:
add eax, 0x139360c6
jmp 0x1e9c515
add eax, 0xd15cd783
jmp 0x1e9c5d3
sub esp, 0x1e
pop ax
pop eax
mov eax, dword [esp + 0x13]
bswap eax
call fcn.01e9bda5
jg 0x1e9bd78
pushal
pop es
xor al, 0x73
push 0xffffffffffffff85
xor al, 0x27
neg bl
jmp 0x1e9bdf1
mov ax, word [esp]
mov dl, byte [esp]
jmp 0x1e9be03
bsr eax, esi
ja 0x1e9bdda
mov ax, word [esp]
mov dl, byte [esp]
jmp 0x1e9beba
mov eax, 0x632fe266
xchg edx, eax
bt ax, cx
bswap edx
jmp 0x1e9be81
xchg ah, dh
mov dh, bh
btc edx, ebp
jmp 0x1e9be62
add eax, eax
jmp 0x1e9be92
mov edx, 0xf6c7a854
rdtsc
setl dl
not bl
rdtsc
jmp 0x1e9be2f
ja 0x1e9be3c
add eax, eax
jmp 0x1e9be92
mov al, cl
mov dl, al
mov dl, 0x4f
bsf edx, edi
jmp 0x1e9bf9d
rol bl, 0
mov al, ah
mov edx, 0x1235532f
not dh
mov eax, dword [esp]
jmp 0x1e9be52
xor bl, 0x6a
mov eax, ebp
stc
jo 0x1e9be68
jno 0x1e9bea4
push ecx
leave
pop ecx
cmp bl, cl
jge 0x1e9be8b
or ecx, dword [edx - reloc.KERNEL32.dll_FreeEnvironmentStringsA]
dec edi
mov al, cl
mov dl, al
mov dl, 0x4f
jmp 0x1e9bec9
mov eax, 0x632fe266
xchg edx, eax
bt ax, cx
jmp 0x1e9be0d
bsf edx, edi
jmp 0x1e9bf9d
and ebx, 0x3c
stc
jmp 0x1e9bf6e
sub dx, ax
bsr ax, sp
jmp 0x1e9bf1b
sub ebp, 4
call 0x1e9bf05
jmp 0x1e9bf52
mov eax, dword [esp]
mov dword [ebp], edx
bts dx, dx
jp 0x1e9bf7d
xchg ah, al
lea edx, [ebp*4]
cmc
jmp 0x1e9bf7f
jnp 0x1e9bedb
sub dx, ax
bsr ax, sp
jmp 0x1e9bf1b
jmp 0x1e9bfad
jmp 0x1e9bfbd
rdtsc
lea ebx, [esi + 0x50]
jmp 0x1e9c81d
sub bl, 0x8f
mov dx, cx
sets ah
mov dh, al
jmp 0x1e9bed1
xchg ah, al
lea edx, [ebp*4]
cmc
jmp 0x1e9bf7f
neg edx
jg 0x1e9bf81
rdtsc
jmp 0x1e9bf83
mov dh, byte [esp]
call 0x1e9c046
add al, 0xad
setne dl
setno dl
not dx
shr dx, 7
jmp 0x1e9c1ae
jno 0x1e9c1c4
jo 0x1e9c1c4
rcl byte [esi - 0x3c], 0xa3
pop esi
cwde
push edx
retf
rol al, 0
bswap edx
lea edx, reloc.KERNEL32.dll_FreeEnvironmentStringsA
mov dx, word [esp]
jmp 0x1e9c1d9
push ecx
push dword [esp + 3]
jle 0x1e9c224
xchg dword [esp], edx
jmp 0x1e9c227
ror al, 0
lea edx, [ebx + esi]
dec dx
jmp 0x1e9c23f
bsf edx, esp
mov edx, esi
bts dx, sp
setb dl
jmp 0x1e9c248
xchg dword [esp], edx
jmp 0x1e9c1ff
bts dx, sp
setb dl
jmp 0x1e9c248
jle 0x1e9c20d
bsf edx, esp
mov edx, esi
jmp 0x1e9c229
lea esp, [esp + 8]
neg al
call 0x1e9c254
xor bh, dh
ror byte [ebp + 0x158d2e14], cl
adc eax, dword [edx - 0x59]
dec edi
jmp 0x1e9c2a0
sub cl, al
mov dx, sp
jmp 0x1e9c2bf
setl dh
inc dx
jb 0x1e9c28a
jae 0x1e9c28a
inc dh
jmp 0x1e9c398
bswap eax
bts ax, dx
jo 0x1e9c2a9
inc dh
jmp 0x1e9c398
jmp 0x1e9c174
mov eax, 0xefcbc30a
mov dh, bl
jmp 0x1e9c353
mov eax, esp
mov ax, 0x717a
mov eax, dword [esp]
jmp 0x1e9c2e7
inc bl
lea eax, reloc.KERNEL32.dll_FreeEnvironmentStringsA
mov edx, 0xe58be431
call fcn.01e9c308
scasb al, byte es:[edi]
and al, 0xba
invalid
mov eax, esp
mov ax, 0x717a
mov eax, dword [esp]
mov eax, 0xefcbc30a
mov dh, bl
shl dh, 1
lea eax, [ebx*4]
mov dx, sp
jmp 0x1e9c31e
inc edi
bswap eax
bsr eax, eax
jge 0x1e9c343
jl 0x1e9c2fd
jnp 0x1e9c3bc
bsf eax, esp
lea eax, reloc.KERNEL32.dll_FreeEnvironmentStringsA
jmp 0x1e9c447
bsf eax, esp
lea eax, reloc.KERNEL32.dll_FreeEnvironmentStringsA
mov dl, 0x24
mov al, bh
mov eax, 0x66c87551
lea eax, [ecx + esi]
jmp 0x1e9c412
movzx ebx, byte [edi]
xchg al, ah
mov al, byte [esp]
mov ax, 0xbadb
cmc
jne 0x1e9c2e2
mov dh, byte [esp]
jmp 0x1e9c177
sub dx, 0xb169
ja 0x1e9c426
neg ax
xchg dx, ax
xchg dx, ax
xchg edx, eax
jmp 0x1e9c4a4
lea edx, [ebx + esi]
mov edx, 0x3d9e6cf8
mov edx, dword [esp]
lea esp, [esp + 8]
add bl, 0xd0
jmp 0x1e9c3fc
neg ax
xchg dx, ax
jmp 0x1e9c431
xchg dx, ax
xchg edx, eax
clc
and ax, ax
jmp 0x1e9c46b
mov dl, 0x24
mov al, bh
mov eax, 0x66c87551
jmp 0x1e9c3cf
bswap edx
mov dl, bl
bswap edx
rdtsc
jmp 0x1e9c47a
inc bl
mov ax, word [esp]
rdtsc
mov eax, dword [esp]
mov ah, 0x33
jmp 0x1e9c455
sub bl, 0x99
dec eax
jmp 0x1e9c4f9
mov dl, 0xba
mov eax, ebx
neg edx
jmp 0x1e9c4a7
mov edx, dword [esp]
shl eax, 2
jae 0x1e9c4dd
lea edx, reloc.KERNEL32.dll_FreeEnvironmentStringsA
jmp 0x1e9c4c7
clc
jmp 0x1e9c436
jg 0x1e9c4bd
mov dx, word [esp]
mov dx, word [esp]
jmp 0x1e9c4c5
mov dx, word [esp]
mov dx, word [esp]
jmp 0x1e9c48c
sub esp, 8
setae dl
add dl, 0x93
jmp 0x1e9a948
lea edx, reloc.KERNEL32.dll_FreeEnvironmentStringsA
sub esp, 8
setae dl
add dl, 0x93
jmp 0x1e9a948
je 0x1e9c484
mov dl, 0xba
jmp 0x1e9c486
sete dh
neg edx
jge 0x1e9c51b
jl 0x1e9c51b
sub bh, byte [ebp + 0x70c7342d]
adc al, 0x8e
sbb al, 0x7b
xchg esi, eax
and bl, byte [edi + 0x24148b66]
mov dx, word [esp]
jmp 0x1e9c4ff
mov eax, dword [eax - reloc.KERNEL32.dll_FreeEnvironmentStringsA]
lea edx, reloc.KERNEL32.dll_FreeEnvironmentStringsA
jmp 0x1e9c52d
mov edx, dword [esp]
lea edx, [ecx + ebp]
jmp 0x1e9a979
jmp 0x1e9c3e1
mov esp, esi
pushal
call 0x1e9c552
mov ebx, 0x49e8
add byte [edi - 0x15], dh
ja 0x1e9c544
neg edx
js 0x1e9c588
mov ah, 0xb1
mov ax, cx
jmp 0x1e9c5a7
jmp 0x1e9c549
mov ax, cx
jmp 0x1e9c5a7
mov ah, 0xb1
jmp 0x1e9c572
pushal
xor ch, 0x5f
jmp 0x1e9c6b9
neg bx
mov dword [esp + 0x10], esi
mov ah, 0x14
inc dx
setp ah
popal
jmp 0x1e9c615
mov edx, dword [esp]
setb dl
rcr dx, cl
jp 0x1e9c570
jnp 0x1e9c549
rdtsc
lea esp, [esp + 2]
jmp 0x1e9c642
bswap eax
sub esp, 0xe
jmp 0x1e9c5e4
bt dx, cx
jb 0x1e9c5fa
bswap eax
sub esp, 0xe
rdtsc
lea esp, [esp + 2]
jmp 0x1e9c642
mov eax, esp
jmp 0x1e9c668
lea edx, [esi + 0x40]
shl eax, 0x15
jb 0x1e9c628
mov eax, esp
lea eax, [edi + ebp]
jmp 0x1e9c66b
lea eax, [edi + ebp]
call fcn.01e9c62c
mov esi, 0x3dceab3b
clc
xchg esp, eax
sbb al, 0xb2
aad 0x24
out 0xe2, al
imul edi, ecx, 0x8dc6b98
mov ah, 0x14
inc dx
setp ah
jmp 0x1e9c5bf
jge 0x1e9c5b1
neg bx
mov dword [esp + 0x10], esi
jmp 0x1e9c683
lea edx, [eax*4]
mov eax, ecx
pushal
cmp ebp, ebx
jmp 0x1e9c557