Function at 0x1e9b5e8
Capabilities:
Execute anti-debugging instructions

Disassembly:
add edx, 0x2c2d1d07
jmp 0x1e9ba46
add edx, 0x4d281352
jmp 0x1e9bb2a
mov edx, 0xd7af9228
push dword [esp + 2]
js 0x1e9b602
dec dh
jmp 0x1e9b60a
dec dh
jmp 0x1e9b60a
lea esp, [esp + 8]
neg al
mov dx, word [esp]
mov dh, ch
sub esp, 5
jmp 0x1e9b683
mov dx, word [esp]
mov dh, 0xa0
lea edx, [ebx + 0xe2]
mov edx, dword [esp]
inc dx
jmp 0x1e9b6da
sub esp, 0
lea esp, [esp + 1]
jmp 0x1e9b71e
mov dx, word [esp]
not al
lea edx, [edx + ebx]
jmp 0x1e9b667
mov dl, bl
shr dl, 6
jbe 0x1e9b74d
mov edx, 0xd0e053a2
jmp 0x1e9b729
shr cl, 1
lodsd eax, dword [esi]
add byte [eax], al
add byte [edi], dh
cmpsb byte [esi], byte es:[edi]
xor al, 0x53
scasb al, byte es:[edi]
sbb eax, 0x86840f57
add byte [eax], al
add byte [esi + 0xf], ah
mov ebp, 0x24748ad4
add al, 0xeb
mov ecx, 0x63b6ba66
je 0x1e9b70f
bsr dx, sp
mov dh, byte [esp + 4]
jmp 0x1e9b64c
rcr edx, 0xa
xchg dword [esp], ecx
bswap edx
mov edx, 0x96147d21
not dx
jmp 0x1e9b6b3
rol dx, 3
lea ecx, [ecx - 0x8d]
mov edx, 0xfa8446ea
mov edx, ecx
xchg dword [esp], ecx
mov dx, word [esp]
jmp 0x1e9b6ea
jnp 0x1e9b658
mov dx, word [esp]
call fcn.01e9b6ad
jg 0x1e9b676
mov edx, edi
xlatb
sbb dx, 0xaef6
mov dx, word [esp]
push dword [esp]
ret 4
bsr dx, sp
mov dh, byte [esp + 4]
sub esp, 0
lea esp, [esp + 1]
lea esp, [esp + 4]
not al
jmp 0x1e9b630
sub esp, 6
lea esp, [esp + 2]
jmp 0x1e9b759
pushfd
sub dx, sp
jbe 0x1e9b77b
inc edx
jmp 0x1e9b761
mov edx, 0xd0e053a2
sub esp, 6
lea esp, [esp + 2]
rol al, 0
setnp dh
jmp 0x1e9b732
lea edx, [edx + edi]
neg edx
shl dh, 5
jmp 0x1e9b784
inc edx
lea edx, [edx + edi]
neg edx
shl dh, 5
jmp 0x1e9b79a
sub bl, al
js 0x1e9b848
lea eax, reloc.KERNEL32.dll_HeapDestroy
bswap eax
neg dh
jmp 0x1e9b7e9
jmp 0x1e9b810
neg dh
inc edi
bsr dx, di
js 0x1e9b7d1
bts dx, ax
stc
bsr ax, dx
bswap eax
mov edx, dword [esp]
jmp 0x1e9b824
bts dx, ax
stc
bsr ax, dx
jmp 0x1e9b81f
bswap eax
mov edx, dword [esp]
bts dx, di
jmp 0x1e9b8f9
mov edx, dword [esp]
jmp 0x1e9b8b5
lea eax, reloc.KERNEL32.dll_HeapDestroy
bswap eax
jmp 0x1e9b7e7
neg dx
xchg dl, dh
sub esp, 2
call fcn.01e9b868
xor ecx, ebp
jmp 0x1e9ba27
cmp al, 0xb2
and byte [edi - 0x4e], al
ja 0x1e9b90d
mov bh, 0x27
inc edx
mov cl, 8
sub al, byte [ebp - 0xc]
out 0xe, eax
dec cl
rdtsc
neg al
jle 0x1e9b82d
mov edx, dword [esp]
neg dx
xchg dl, dh
sub esp, 2
lea edx, [eax + ecx]
jmp 0x1e9b935
mov al, cl
rdtsc
sub esp, 0x1e
lea esp, [esp + 2]
jmp 0x1e9b969
lea esp, [esp + 2]
ror cl, 0
lea eax, [esi*4]
add al, 0xb5
add byte [eax], al
add byte [eax], al
mov al, 0x41
rol dl, 2
jmp 0x1e9b9ee
call fcn.01e9b997
xchg edx, eax
cmc
jmp 0x1e9b99c
lea esp, [esp + 0x1c]
add cl, 0xae
and eax, 0xeb50e2d0
jg 0x1e9b94d
jle 0x1e9b94d
jne 0x1e9b952
xchg edx, eax
cmc
jmp 0x1e9b99c
lea edx, [edi*4]
mov dl, byte [esp]
lea eax, reloc.KERNEL32.dll_HeapDestroy
bswap eax
jmp 0x1e9ba10
lea esp, [esp + 4]
add cl, 0x5b
bts dx, di
rcr dword [ebx + 0x66], 0xf
stosd dword es:[edi], eax
cli
js 0x1e9b97f
jns 0x1e9b9d7
push esp
rcl byte [esi + 0x31], 0xc0
add ch, dl
jge 0x1e9b9a1
je 0x1e9b93d
xor ah, cl
sub esp, 0x1e
lea esp, [esp + 2]
jmp 0x1e9b969
bswap eax
jmp 0x1e9ba10
lea edx, [edi*4]
mov dl, byte [esp]
lea eax, reloc.KERNEL32.dll_HeapDestroy
jmp 0x1e9b9c1
jne 0x1e9b915
mov al, cl
rdtsc
jmp 0x1e9b9b8
jmp 0x1e9baeb
sub cl, 0xdd
rdtsc
mov edx, dword [esp]
bt eax, edx
jns 0x1e9b9fa
js 0x1e9baeb
and ebx, dword [edx - 0x4b]
movsb byte es:[edi], byte [esi]
mov dx, word [esp]
not edx
push sp
lea esp, [esp + 2]
push dword [esp + 8]
ret 0xc
lea eax, [edi*4]
call 0x1e9ba84
bt ax, bx
jp 0x1e9ba6e
jnp 0x1e9babb
mov edx, dword [edx - reloc.KERNEL32.dll_HeapDestroy]
jmp 0x1e9bb46
lea eax, [esi + 0x24]
bswap eax
shl edx, 2
jmp 0x1e9ba3a
mov eax, ebp
bsf ax, sp
call fcn.01e9baa5
sbb byte [0xe327d48d], 0xec
inc esi
jno 0x1e9baf4
pop ax
lea esp, [esp + 2]
jmp 0x1e99c9a
mov ax, word [esp]
jmp 0x1e9ba64
mov eax, ebp
bsf ax, sp
jmp 0x1e9ba4e
mov edx, ecx
cmc
jae 0x1e9ba9f
mov ax, word [esp]
lea eax, [esi + 0x24]
bswap eax
jmp 0x1e9ba69
mov ax, 0x6e01
mov al, dl
mov ah, 0xfc
jmp 0x1e9bb6b
push ebx
xchg word [esp], ax
mov eax, 0xe00f3e66
jmp 0x1e99cbf
jmp 0x1e9bca4
mov ax, bp
mov esp, esi
mov ax, word [esp]
btc ax, ax
je 0x1e9bb55
lea eax, [ecx + ebp]
jmp 0x1e9bca7
lea eax, [ecx + ebp]
push edx
ret