Function at 0xe2baa4
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov word [esp + 8], bp
call fcn.00e2ab20
mov dword [esp + 4], eax
sub esp, 0xb
push ebp
bsf eax, ebx
inc al
jmp 0xe2abac
pushfd
clc
sub esp, 0xd
mov byte [esp + 5], al
pushfd
pop word [esp + 0xb]
jmp 0xe2ab46
mov al, byte [esp]
bswap edx
xchg dl, dh
rol si, cl
sbb dh, 0xab
setl al
jmp 0xe2abbf
mov dword [esp + 0xa], ebx
bswap eax
cld
mov al, ah
lea esp, [esp + 3]
mov dword [esp + 0xa], edx
jmp 0xe2ab96
mov al, byte [esp]
lea eax, [esi - 0xfe]
bt ax, si
mov ax, 0x8b1a
sub esp, 0x1d
jmp 0xe2abf9
inc dword [eax + 0xb71013]
jmp 0xe2ab85
push word [esp + 4]
xchg si, dx
std
push bx
xchg byte [esp + 0xe], dh
not dl
call fcn.00e2abe3
xchg dword [esp + 0x15], eax
bsr si, ax
lea esi, [esi + ebp]
mov esi, eax
dec dx
jmp 0xe2ac4c
sub esp, 0x19
pop word [esp + 0x1c]
stc
lea edx, [ebp*4]
lea eax, [esi + edi]
bt si, sp
jmp 0xe2af63
push word [esp + 5]
mov si, 0xe7ff
call fcn.00e2ac93
pushal
mov ah, 0x50
mov dx, 0x8d7a
sets dl
xchg byte [esp + 0x1a], ah
jmp 0xe2afd1
pop word [esp + 0x19]
lea eax, [ebp*4]
and ah, 0x57
pushfd
jmp 0xe2afe5
bts eax, edi
mov dl, 0xfe
setb al
bswap esi
pop word [esp + 0x14]
cmp dx, bp
jmp 0xe2af98
mov ax, 0xf7e7
lea edx, [edi + edi]
mov ax, sp
not si
push dword [esp + 0x1e]
xchg esi, eax
jmp 0xe2afae
rol al, 6
mov dword [esp + 0x14], edx
rcr ax, cl
mov dword [esp + 5], edx
rdtsc
jmp 0xe2c0e0
lea eax, reloc.kernel32.dll_WriteFile
pop word [esp + 0xf]
not eax
add esp, 8
xchg si, ax
mov dl, 0x36
call fcn.00e2b226
mov eax, 0x960be7f3
mov byte [esp + 0x17], bh
mov si, 0xd01a
mov al, byte [esp + 1]
mov dword [esp + 2], edx
mov dl, bl
jmp 0xe2b38d
mov si, word [esp + 0x11]
neg edx
dec eax
add esp, 0xb
lea eax, reloc.kernel32.dll_WriteFile
pop eax
jmp 0xe2b2a5
add esp, 7
mov dx, word [esp + 0xd]
std
call fcn.00e2b36e
inc edi
je 0xe2b384
jb 0xe2b3a5
imul bp, word [ebp + 0x53], 0x7274
imul ebp, dword [esi + 0x67], 0x9eb70041
jmp 0x67d87b58
bswap eax
cmc
mov dx, word [esp + 5]
xchg al, dh
rdtsc
push word [esp + 0x1b]
jmp 0xe2b322
pop eax
jmp 0xe2b3ac
xchg word [esp + 0x12], si
mov dword [esp + 0xc], edx
pop word [esp + 0x13]
lea esi, reloc.kernel32.dll_WriteFile
push word [esp + 0x18]
mov dword [esp + 8], edx
jmp 0xe2b345
sbb byte [ecx - 0x14f7dbac], cl
cdq
btr dx, ax
pop dx
mov dl, byte [esp + 0xa]
pop dword [esp + 1]
bswap edx
mov ah, byte [esp + 7]
jmp 0xe2b5b9
lea eax, [esp + esi]
xchg byte [esp + 6], ah
sete al
pop ax
mov al, 0x18
push word [esp + 0x25]
jmp 0xe2b30e
mov eax, 0x91a1b69
mov dl, byte [esp + 2]
not edx
mov word [esp + 0xc], ax
inc al
lea esi, [esi*4]
jmp 0xe2b4ab
std
push esi
push word [esp + 8]
mov esi, 0x5a868c6e
mov ax, word [esp + 8]
push dword [esp + 3]
jmp 0xe2b3ef
add esp, 0xa
mov dh, byte [esp + 2]
setb ah
xchg dh, al
push dword [esp + 2]
jmp 0xe2b45d
adc esi, 0x60051227
rol dl, 4
mov dword [esp + 9], edi
adc dx, 0xcad7
push dword [esp + 8]
pop dword [esp + 5]
jmp 0xe2b42b
push word [esp + 3]
xchg si, dx
mov edx, esp
xchg al, dh
neg dh
cld
jmp 0xe2b491
neg edx
mov si, 0xffd4
mov dl, dh
pop dword [esp]
std
xchg word [esp], ax
jmp 0xe2b441
xchg word [esp + 5], ax
mov si, 0xd867
mov al, dh
call 0xe2b4e4
push edx
je 0xe2b510
push ebp
outsb dx, byte [esi]
ja 0xe2b511
outsb dx, byte [esi]
add byte fs:[edi], cl
lahf
les ecx, [edi - 0x99dbfc]
je 0xe2b4d9
setg ah
pop dword [esp]
push word [esp + 1]
push dword [esp + 9]
mov ah, dl
neg ah
jmp 0xe2b47f
add edi, edi
je 0xe2b4dd
or dword [edx - reloc.kernel32.dll_WriteFile], ecx
mov edi, 0xff1bb78d
invalid
lea esi, [edi - 0xe5]
neg al
mov word [esp + 4], si
pushal
bswap eax
xchg dl, al
jmp 0xe2b504
insb byte es:[edi], dx
inc esi
insb byte es:[edi], dx
popal
jae 0xe2b4e0
xchg esp, eax
pop es
scasb al, byte es:[edi]
sete dl
clc
mov al, byte [esp + 3]
jmp 0xe2b4c0
clc
call 0xe2b51c
push ebx
je 0xe2b53d
jb 0xe2b56c
outsd dx, dword [esi]
jb 0xe2b54a
outsd dx, dword [esi]
add byte gs:[ecx - 0x3b7c0468], bh
add ah, byte [esi - 0x75]
hlt
add esp, 2
mov si, sp
lea esi, [edx + edx]
lea edx, [ebp*4]
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [esi - 0x5cf09920], al
out 0xeb, al
shl byte [esi - 0x75], cl
ror byte [ebp - 0x72a7e6cc], 1
xchg ebp, eax
invalid
xchg al, ah
bt si, sp
jmp 0xe2b4ee
imul ebp, dword [edi + 0x6e], reloc.kernel32.dll_WriteFile
add al, 0x24
pop dword [esp]
lea esi, [eax*4]
xchg dl, ah
mov ax, 0x6f4e
add byte [eax], al
add byte [esi + 0x4eb866e2], al
outsd dx, dword [esi]
bsf edx, esp
xchg dword [esp], eax
jmp 0xe2b414
and al, 0x1c
pop si
jmp 0xe2b599
xchg byte [esp + 0x1f], dh
mov esi, dword [esp + 0x11]
add esp, 0x20
mov dh, dl
mov dx, bp
bts edx, ebx
jmp 0xe2b6e3
xchg byte [esp + 2], ah
push word [esp + 5]
mov dh, 0x1b
rdtsc
add eax, ebp
lea esi, reloc.kernel32.dll_WriteFile
jmp 0xe2b543
xchg byte [esp + 4], dh
mov word [esp + 5], cx
lea esi, [esi + esi]
xchg dword [esp + 3], edx
lea esi, [eax + esi]
bsr eax, esp
jmp 0xe2b65d
xchg dword [esp + 4], eax
mov dx, sp
bsr dx, si
inc edx
setb dh
mov edx, edi
call fcn.00e2b5d3
push dword [esp + 0xf]
cmc
pop dword [esp + 5]
mov edx, ecx
xchg edx, eax
lea esp, [esp + 0x10]
jmp 0xe2b5d5
mov ax, word [esp + 0xb]
xchg word [esp], si
pop dword [esp + 7]
push esp
mov word [esp + 0xb], dx
cmc
jmp 0xe2b5f3
sub esp, 0x13
dec edx
rdtsc
mov si, 0x85fe
mov dx, word [esp + 0x17]
xchg word [esp + 0x15], dx
jmp 0xe2b693
rcl al, 1
push eax
lea edx, [ecx + esi]
stc
pop dx
add esp, 6
jmp 0xe2b63b
neg esi
cmp ax, 0x3864
xchg dword [esp + 1], esi
setl dl
btc edx, ecx
mov word [esp + 6], di
jmp 0xe2b6bf
not eax
rdtsc
lea eax, reloc.kernel32.dll_WriteFile
dec eax
mov esi, 0x7450307d
pop dword [esp + 3]
jmp 0xe2b66b
lea esp, [esp]
xchg al, ah
btc si, di
mov esi, 0x25269331
jmp 0xe2b8d0
xchg esi, eax
lea esi, [ecx*4]
rdtsc
add esp, 0xc
bsr dx, si
pop word [esp + 1]
jmp 0xe2b6a9
pop eax
pop edx
mov dl, 0x21
sub esp, 0x12
push dword [esp]
mov byte [esp + 4], ch
jmp 0xe2b625
btr si, bp
mov esi, 0x8bd2ea38
mov byte [esp + 0x13], ah
jmp 0xe2b736
mov al, dl
setl ah
push dword [esp + 0x11]
neg ah
pop dword [esp + 0x13]
xchg si, ax
jmp 0xe2b6f6
bsr edx, esi
pop ax
mov byte [esp + 1], dh
mov byte [esp], dl
rdtsc
pop ax
jmp 0xe2b7d6
mov al, byte [esp + 0x10]
bsr dx, cx
lea esp, [esp + 0xc]
mov byte [esp + 0xa], ah
pushfd
not edx
jmp 0xe2b720
sub esp, 0x12
lea edx, [ebp + ebp]
xchg ah, dh
bsf dx, bp
lea edx, [edx - 0xaa]
not dl
jmp 0xe2b70c
push dword [esp + 5]
push word [esp + 6]
mov ax, 0xa209
std
not dh
jmp 0xe2b7bd
rdtsc
mov dh, 0xd4
mov si, 0x5e31
xchg dword [esp], esi
mov esi, 0xca20e84e
mov ax, 0xd38e
jmp 0xe2b76c
lea esi, [ecx*4]
lea esi, reloc.kernel32.dll_WriteFile
xchg edx, eax
lea esp, [esp + 3]
bt edx, ecx
xchg esi, edx
jmp 0xe2b782
xchg dword [esp + 5], eax
lea esi, [edi - 0x85]
mov si, word [esp + 8]
lea esp, [esp + 1]
jmp 0xe2b829
bt edx, edx
pushfd
pop dword [esp + 5]
shl dl, 1
mov ah, byte [esp + 3]
pop esi
jmp 0xe2b7a3
lea eax, [ebx*4]
lea edx, [eax + edx]
rdtsc
mov dh, ch
rdtsc
jmp 0xe2b813
ror eax, 0x14
pop dword [esp]
xchg byte [esp + 1], dl
lea edx, [ebx + ebx]
mov al, dh
add si, 0xc5fe
jmp 0xe2b7e7
rdtsc
sbb ah, dh
xchg esi, eax
mov byte [esp + 5], bl
mov ax, 0xa9a
jmp 0xe2b8a0
lea edx, reloc.kernel32.dll_WriteFile
lea eax, [edx + edi]
push word [esp + 2]
pop si
bswap edx
mov dword [esp + 1], edx
jmp 0xe2b7fd
rcr si, 3
pop si
bswap edx
mov si, word [esp + 3]
call fcn.00e2b858
mov si, 0xc90f
pop dword [esp + 4]
mov byte [esp + 5], al
dec si
xchg byte [esp + 5], al
std
jmp 0xe2bbb5
btr si, bx
xchg si, ax
lea edx, [ecx*4]
not eax
xchg byte [esp + 4], al
lea eax, [ecx*4]
jmp 0xe2b755
lea esp, [esp + 0x22]
rdtsc
lea eax, [ecx*4]
add esp, 0
jmp 0xe2b92e
mov dx, 0x8d97
rcr edx, cl
rdtsc
mov word [esp + 6], bx
push bp
cld
jmp 0xe2b8f0
sub esp, 4
std
clc
bswap esi
mov ax, 0x62d6
bsr dx, bx
jmp 0xe2b940
neg ax
mov dl, cl
mov edx, esp
cld
xor edx, 0x35c266e7
mov dh, 0x3e
jmp 0xe2b918
mov si, word [esp + 2]
lea edx, [esp + edi]
lea esi, [edi - 0xdf]
bswap esi
bswap edx
xchg word [esp + 2], ax
jmp 0xe2bb3b
cld
xchg dl, dh
xchg byte [esp + 4], ah
sub esp, 0x13
dec dx
lea eax, reloc.kernel32.dll_WriteFile
jmp 0xe2b906
mov dl, byte [esp + 0xa]
jmp 0xe2bad5
add esp, 3
sub esp, 0
rdtsc
dec dx
add esp, 4
jmp 0xe2bb1c
pop word [esp + 4]
mov word [esp + 1], sp
rdtsc
push dword [esp]
add esp, 4
jmp 0xe2babf
lea eax, [ebx*4]
lea eax, reloc.kernel32.dll_WriteFile
or ah, bh
jmp 0xe2bb61
lea esp, [esp + 3]
mov esi, 0x5f97d1ee
mov ax, dx
btc eax, edi
xchg edx, eax
mov edx, dword [esp + 0xa]
jmp 0xe2bb06
mov dl, byte [esp + 3]
pop si
mov ax, word [esp + 2]
call fcn.00e2b9f7
mov eax, dword [esp + 0x14]
clc
mov esi, eax
neg si
lea esi, [esi + ebp]
jmp 0xe2bb7e
xchg al, ah
call 0xe2bb4b
pop eax
jmp 0xe2bb93
push si
lea esp, [esp + 2]
mov esi, dword [esp + 0x20]
lea esp, [esp + 0x24]
popfd
jmp 0xe2bbe2
sub eax, 0xe2b06f
cmp dword [eax + reloc.kernel32.dll_WriteFile], 0
je 0xe2abdb
jne 0xe2bc17
push esi
imul esi, dword [edx + 0x74], 0x466c6175
jb 0xe2bc16
add byte gs:[eax + 0x2444862b], cl
add dword [ecx - reloc.kernel32.dll_WriteFile], ecx
les ecx, [ebx + 0x2474ffc3]
add esi, esi
salc
xchg byte [esp + 1], al
mov dword [esp], esi
setle ah
mov eax, ebx
push dword [esp + 1]
not dh
jmp 0xe2b95e
push 0x5e1b4c62
add dword [esp], reloc.kernel32.dll_WriteFile
push di
mov byte [esp], dl
mov word [esp], ax
call fcn.00e2bbcc
push dword [esp]
pushfd
lea esp, [esp + 0xc]
lea esp, [esp + 1]
call 0xe2bc3f
push edx
popal
inc esi
imul ebp, dword [ebp], reloc.kernel32.dll_WriteFile
or byte [ecx - 0x17], ah
xor ebx, dword [edi + reloc.kernel32.dll_WriteFile]
int3
lea esp, [esp + 8]
popal
jmp 0x4c5b54
push ax
pop word [esp + 2]
call fcn.00e2bc5f
dec esp
inc ebx
dec ebp
popal
jo 0xe2bc86
je 0xe2bca7
imul ebp, dword [esi + 0x67], reloc.kernel32.dll_WriteFile
rcl dword [eax - 0x2d]
pop word [esp]
push word [esp]
jmp 0xe2bc21
mov byte [esp + 1], al
pop word [esp]
mov byte [esp], cl
push word [esp]
jmp 0xe2bf5b
cmp dword [eax + reloc.kernel32.dll_WriteFile], ecx
mov dword [esp + 2], edx
pop word [esp]
mov byte [esp + 1], dh
mov word [esp + 1], cx
jmp 0xe2bc71
setge dh
sub esp, 0x1a
rdtsc
bts eax, esi
cld
lea eax, [ebp*4]
jmp 0xe2b3d7
popfd
mov byte [ebx + 0x310f1aec], 0xf
stosd dword es:[edi], eax
invalid
lea esi, [eax*4]
rdtsc
add esp, 0x10
xchg si, dx
pop eax
mov dl, 0x95
jmp 0xe2bca6