Function at 0x1e940d1
Capabilities:
Execute anti-debugging instructions

Disassembly:
add eax, 0x9ca9b2c3
jmp 0x1e944ff
mov eax, esi
movzx edx, byte [eax]
lea ecx, [ecx + esi]
neg al
jmp 0x1e93f9b
jmp 0x1e93f81
jle 0x1e93fb1
jg 0x1e93fb1
mov ah, 0x3f
scasd eax, dword es:[edi]
retf 0x8139
call 0x1e93fe1
xchg ecx, eax
mov ch, byte [esp]
mov cx, word [esp]
sub esp, 0x1a
xchg cx, ax
mov byte [esp + 0xb], dl
lea esp, [esp + 2]
jmp 0x1e94014
sub dl, bl
setge al
mov cx, word [esp]
inc ax
jmp 0x1e9409c
mov cl, dl
lea eax, [edx - 0x23]
add eax, esp
jg 0x1e94070
mov ax, word [esp]
lea eax, reloc.KERNEL32.dll_HeapDestroy
jmp 0x1e94072
mov ax, word [esp]
lea eax, reloc.KERNEL32.dll_HeapDestroy
inc ax
jmp 0x1e940bd
jmp 0x1e9405a
inc ax
mov ax, 0x430f
mov ax, word [esp]
jmp 0x1e940c5
inc cl
lea eax, [esp + ecx]
mov eax, dword [esp]
mov eax, dword [esp]
push cx
mov word [esp], cx
jmp 0x1e940a0
jge 0x1e94036
jl 0x1e94036
mov word [esp], cx
lea esp, [esp + 2]
jmp 0x1e940c9
mov ax, 0x430f
mov ax, word [esp]
mov eax, ecx
jmp 0x1e9407e
neg cl
call 0x1e940d1
sahf
sub esp, 0x12
js 0x1e941f5
mov ah, 0x64
add esp, 0xd
mov al, bh
setbe al
mov ax, cx
jmp 0x1e941c4
lea esp, [esp + 8]
neg cl
lea eax, [ebx*4]
dec eax
jnp 0x1e941ce
bswap eax
mov ax, 0x4d43
mov ax, sp
jmp 0x1e941d0
xchg dword [esp + 4], eax
lea esp, [esp + 1]
jmp 0x1e9419e
jmp 0x1e9423e
dec cl
mov ax, 0xfb3c
lea eax, reloc.KERNEL32.dll_HeapDestroy
xor ax, ax
jbe 0x1e94212
inc ax
mov ax, 0x359f
mov ah, byte [esp]
jmp 0x1e94214
mov ah, 0x64
call fcn.01e9411b
inc ax
mov ax, 0x359f
mov ah, byte [esp]
jmp 0x1e94214
jmp 0x1e941fc
neg cl
mov eax, dword [esp]
not al
dec ax
jmp 0x1e94249
sets ah
xchg ah, al
mov ah, byte [esp]
mov al, cl
jmp 0x1e94255
bswap eax
mov ax, 0x4d43
mov ax, sp
jmp 0x1e941d0
jo 0x1e94223
sets ah
xchg ah, al
jmp 0x1e94659
sub bl, cl
setnp ch
mov cx, ax
mov cl, byte [esp]
jmp 0x1e9433d
jae 0x1e942ea
cmp ax, si
jmp 0x1e942ed
cmp ax, si
call 0x1e94270
lea esp, [esp + 0x10]
xor dl, 0x64
jmp 0x1e94311
not ecx
mov ah, byte [esp]
lea eax, [ebx*4]
rcr al, 3
jmp 0x1e94570
bswap eax
clc
bswap ecx
jmp 0x1e943b8
inc esi
mov ch, 0x66
xchg cx, ax
mov ah, al
bsf cx, si
jmp 0x1e94286
push edx
jmp 0x1e943c5
not dl
neg ecx
jno 0x1e943a2
push edx
jmp 0x1e94437
pop word [esp]
lea esp, [esp + 1]
lea esp, [esp + 1]
jmp 0x1e94403
mov ax, 0x3636
jmp 0x1e94412
not dl
mov cl, 0x95
mov ax, dx
mov cx, sp
mov ax, bx
jmp 0x1e943eb
add dl, 0xa7
mov ch, ah
neg cx
jmp 0x1e94445
neg eax
jmp 0x1e9444f
pop word [esp]
lea esp, [esp + 1]
lea esp, [esp + 1]
jmp 0x1e94403
jb 0x1e94420
neg eax
jmp 0x1e9444f
mov eax, edx
mov ch, byte [esp]
lea ecx, [ecx*4]
btr cx, sp
jmp 0x1e944bf
mov ch, bl
bsf ecx, esp
jno 0x1e944a9
jo 0x1e944f5
push ds
pushfd
xor dl, byte [ebp - 0x5c]
push 0xeb1879e9
pop edi
mov cl, byte [edx]
cwde
dec dword [edx]
iretd
mov cl, ah
shl eax, 2
mov ecx, dword [esp]
mov cx, word [esp]
mov ecx, esp
mov ch, dh
jmp 0x1e944c3
jae 0x1e94484
jb 0x1e94484
stc
jne 0x1e94515
bt cx, dx
jmp 0x1e93c18
mov cx, word [esp]
mov ecx, esp
jmp 0x1e944b7
mov cl, ah
shl eax, 2
mov ecx, dword [esp]
jmp 0x1e944d9
lea ecx, [ebx + ebp]
ror ch, 5
jmp 0x1e9451e
bt cx, dx
jmp 0x1e93c18
jno 0x1e94534
cmc
jmp 0x1e94535
cmc
mov eax, dword [eax + reloc.KERNEL32.dll_HeapDestroy]
mov cx, word [esp]
jmp 0x1e94545
mov ecx, dword [esp]
lea ecx, [edx*4]
jmp fcn.01e93c65
adc edi, esi
invalid
jae 0x1e94326
bswap eax
clc
call fcn.01e94390
setne ch
mov ch, dh
and ch, cl
jge 0x1e945bd
jl 0x1e945a7
loope 0x1e945f9
cld
wait
jbe 0x1e94550
inc esi
jno 0x1e94603
jae 0x1e94520
in eax, 0x8b
or al, 0x24
setb ch
mov cx, 0xe5c0
mov ecx, 0xec6bb684
jmp 0x1e9457e
sub esp, 0x1f
lea esp, [esp + 3]
mov dword [esp + 0x18], eax
jmp 0x1e94603
sub esp, 0x1f
lea esp, [esp + 3]
mov dword [esp + 0x18], eax
pushal
sub cx, bx
xchg dword [esp + 2], ecx
mov dword [esp + 0x10], edx
lea esp, [esp + 0x38]
ret
inc edx
and eax, 0x38d912d4
sbb esi, dword [edx + 0x6d]
jl 0x1e94664
pushal
sub cx, bx
jmp 0x1e945cc
mov ah, byte [esp]
mov al, cl
jmp 0x1e94255
les eax, [ecx]
lea esp, [esp + 1]
jmp 0x1e9470b
inc dl
bsr eax, ebp
jmp 0x1e94758
xchg ch, al
neg dl
pushal
jmp 0x1e94742
mov eax, esi
mov ah, byte [esp + 0x1a]
neg ecx
jne 0x1e9475e
pop eax
setnp ch
dec cx
jmp 0x1e94810
jae 0x1e94716
xchg ch, al
jmp 0x1e94718
pop eax
jmp 0x1e94765
setnp ch
dec cx
jmp 0x1e94810
push dword [esp + 0x38]
ret 0x3c
lea eax, [esi*4]
bsr ax, di
lea esp, [esp + 0x20]
sub dl, 0x47
call fcn.01e94863
mov bl, 0
add byte [eax], al
js 0x1e947ac
push 0x5b39fa0f
mov dl, 0xad
mov esp, 0x8b663ceb
jmp 0x1e947f8
mov cx, word [esp]
mov eax, ebp
lea esi, [esi - 0x8a]
bt cx, di
clc
bts cx, bp
jmp 0x1e947e2
jmp 0x1e94799
mov cl, byte [esp]
xchg ecx, eax
xchg dword [esp + 8], esi
pushfd
mov al, 0x47
lea ecx, [eax + edx]
jmp 0x1e948a4
ror dl, 0
push edx
mov ecx, dword [esp + 1]
bt ax, bx
jne 0x1e947e0
lea eax, [esi*4]
bsr ax, di
call fcn.01e94783
btr cx, si
jmp 0x1e94869
sub edi, 4
mov eax, edi
mov cx, 0x415b
jmp 0x1e94887
mov eax, dword [edx + ebp]
sete cl
mov edx, dword [esp]
neg cx
jae 0x1e948c2
rol edx, 6
jmp 0x1e948c4
pop eax
push dword [esp + 8]
ret 0xc
rol edx, 6
jmp 0x1e948c4
jmp 0x1e948ac
mov dword [edi], eax
mov cx, si
inc eax
jb 0x1e948fb
jae 0x1e94906
or byte [ecx], 0x99
clc
or edi, dword [esp - reloc.KERNEL32.dll_HeapDestroy]
outsd dx, dword [esi]
dec ebx
loop 0x1e948fa
insb byte es:[edi], dx
xchg dword [esp + 0x38], ebp
lea eax, reloc.KERNEL32.dll_HeapDestroy
neg cx
mov eax, 0x6d0aad20
mov al, 0x83
bt ax, cx
jmp 0x1e9477c
jmp dword [esi - 0x46]
mov dx, 0xd4d3
jmp 0x1e94f89
mov dx, 0xd4d3
mov cx, sp
jmp fcn.01e94ad6
mov cx, sp
jmp fcn.01e94ad6
not ecx
jmp 0x1ea8e6e
lea esp, [esp + 0x1c]
neg dl
lea eax, [ecx*4]
mov ah, 0xd8
jmp 0x1ea8d9a
lea eax, [ebp*4]
xchg word [esp + 0x19], cx
jmp 0x1ea8df0
mov cl, 0x82
pushal
mov cx, word [esp + 5]
jmp 0x1ea8d56
lea eax, [ebx + ebp]
bswap eax
xchg cl, al
jmp 0x1ea8da9
lea ecx, reloc.KERNEL32.dll_HeapDestroy
shl eax, cl
jp 0x1ea8d84
lea eax, [ebx + ebp]
jmp 0x1ea8dc3
ror dl, 0
mov ecx, dword [esp]
cmc
jne 0x1ea8e23
je 0x1ea8dfb
push ds
pushfd
xor dl, byte [ebp - 0x5c]
push 0xeb1879e9
pop edi
mov byte [ebx], ch
inc edx
bswap eax
xchg cl, al
jmp 0x1ea8da9
mov cl, 0x82
pushal
mov cx, word [esp + 5]
lea eax, [ebp*4]
xchg word [esp + 0x19], cx
pop cx
lea esp, [esp + 2]
jmp 0x1ea8d40
bswap eax
push ebp
not ecx
jmp 0x1ea8e28
lea esp, [esp + 4]
sub dl, 0x47
xchg cx, ax
setno al
bsf cx, dx
jnp 0x1ea8e40
mov ch, byte [esp]
jmp 0x1ea8e42
bswap eax
push ebp
not ecx
jmp 0x1ea8e02
mov ch, byte [esp]
jmp 0x1ea8e42
jmp 0x1ea8e2a
xchg edx, eax
bswap ecx
mov cx, word [esp]
lea ecx, reloc.KERNEL32.dll_HeapDestroy
clc
jmp 0x1ea8efd
cbw
mov ecx, dword [esp]
mov ecx, 0x82779cc1
bsf ecx, ebx
jmp 0x1ea8e84
inc dl
lea eax, [eax + ebx]
cmp cx, 0xda5
jge 0x1ea8ddc
jl 0x1ea8d7a
jg 0x1ea8ea3
jle 0x1ea8ea3
xchg edx, eax
pushal
pop cx
dec ecx
jmp 0x1ea8ee0
cwde
mov ecx, edx
bswap ecx
dec ch
jmp 0x1ea8ec6
and cx, bp
lea esp, [esp + 2]
jmp 0x1ea8eca
jns 0x1ea8e88
js 0x1ea8e88
mov dword [edi], edx
lea ecx, reloc.KERNEL32.dll_HeapDestroy
lea ecx, [ecx*4]
jmp 0x1ea8f28
jnp 0x1ea8eac
and cx, bp
lea esp, [esp + 2]
jmp 0x1ea8eca
jae 0x1ea8e56
jb 0x1ea8e56
bts edx, ebx
jmp 0x1ea8f54
xchg dh, cl
cmc
setb ch
jmp 0x1ea8f71
mov cl, 0xe5
jmp fcn.01ea8f09
setb ch
jmp 0x1ea8f71
je 0x1ea8f12
xchg dh, cl
cmc
jmp 0x1ea8f3e
jmp 0x1ea8fef
lea ecx, [ebp + 0x50]
not dh
mov dx, 0x89fc
neg al
jbe 0x1ea8f5b
ja 0x1ea8fef
inc eax
fimul dword [eax + 0x2f]
fisubr dword [esi - 0x45]
xchg edx, eax
lea esp, [esp + 4]
xor dl, 1
lea ecx, [ebx*4]
lea ecx, [esi*4]
mov ax, word [esp]
jmp 0x1ea8d23
lea eax, [ebp + 0x40]
mov edx, eax
shl dx, cl
jae 0x1ea8fc7
mov dx, bx
lea edx, [ebx + esi]
call fcn.01ea9014
or eax, 0x148bcd8b
and al, 0xb4
inc esi
mov ecx, ebp
mov edx, dword [esp]
mov ah, 0x46
bswap eax
jmp 0x1ea8fa6
mov dx, bx
jmp 0x1ea8fd0
lea edx, [ebx + esi]
sub eax, ecx
jmp 0x1ea9056
lea edx, [edi - 0x80]
sub esp, 5
jmp 0x1ea90cb
cmp edi, ecx
ja 0x1e93f99
mov dx, di
mov edx, ecx
jmp 0x1ea8fbc
mov dl, byte [esp]
xor dx, 0x16b1
jno 0x1ea8fd7
jo 0x1ea8fd7
mov cl, 0xb0
bts dx, dx
mov edx, dword [esp]
lea edx, [ebx*4]
lea edx, reloc.KERNEL32.dll_HeapDestroy
push dword [esp + 4]
ret 8
jbe 0x1ea909d
add esp, 0
push word [esp + 0xe]
call fcn.01ea90f0
test al, 0x37
cmpsd dword [esi], dword es:[edi]
ret 0xfd31
add esp, 0
push word [esp + 0xe]
lea esp, [esp + 1]
jmp 0x1ea9117
pushfd
jmp 0x1ea9101
jl 0x1ea9164
lea esp, [esp + 1]
jmp 0x1ea9168
lea ebp, [eax + edx - 0x40]
jmp 0x1ea9146
sub edx, eax
pushal
mov word [esp + 0x1a], cx
mov esp, edx
jmp 0x1ea90b5
push esi
push edi
push ecx
jmp 0x1ea9189
cld
rep movsb byte es:[edi], byte [esi]
pop ecx
jmp 0x1ea9173
lea esp, [esp + 1]
and dl, 0xfc
sub esp, 0x17
jmp 0x1ea9087
pop edi
jmp 0x1ea91a7
mov esi, ecx
mov edi, edx
mov ecx, eax
jmp 0x1ea914b
pop esi
popfd
jmp 0x1e9493c