Function at 0x1e98ea9
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x1e98df3
push 0xf1e8a278
jmp 0x1e98e55
add eax, 0x5db7ef40
jmp 0x1e99b72
mov dword [esp], edx
pushal
mov dword [esp + 0x58], ebx
pushal
mov dword [esp + 0x74], esp
call fcn.01e98dc2
pushfd
jmp 0x1e98d81
push bx
jmp 0x1e98e78
bt edx, ebx
jl 0x1e98e3f
push bx
cpuid
lea esp, [esp + 2]
jmp 0x1e98e7e
cpuid
lea esp, [esp + 2]
mov ebp, dword [esp + 0x2c]
jmp 0x1e98ec4
mov bx, word [esp]
jmp 0x1e98ea0
xchg bl, dl
mov ch, 0xf
jmp 0x1e98e84
lea esi, [esp]
call 0x1e98ea9
adc byte [esi + 0xf], ah
mov bl, 0xfa
je 0x1e98f37
cmc
jmp 0x1e98f70
bsf esi, ecx
jl 0x1e98e9a
xchg bl, dl
mov ch, 0xf
mov bx, word [esp]
call 0x1e98ed7
stc
mov bl, 0x52
cpuid
bts ecx, esp
lea edx, [edx*4]
xchg edi, eax
jmp 0x1e98f26
xchg dword [esp], esi
mov al, byte [esp]
xor edx, ebp
rdtsc
rcr ah, 3
neg dl
jmp 0x1e98efd
cmc
jmp 0x1e98f70
jmp 0x1e98fcc
mov ecx, ebp
mov ah, byte [esp]
lea edx, [edi*4]
btr edx, esp
jmp 0x1e99077
sub esp, 0xbc
mov edi, esp
and ebx, 0xe5e2f8c4
jbe 0x1e98f54
not cx
lea ecx, [ebx + ebp]
xor bh, cl
jmp 0x1e98f56
mov bh, byte [esp]
xchg dx, bx
lea edx, [eax + edx]
mov bx, sp
inc edx
jmp 0x1e98fec
not cx
lea ecx, [ebx + ebp]
xor bh, cl
jmp 0x1e98f56
dec ah
sub esp, 0x12
lea esp, [esp + 0xf]
sub esp, 0x14
lea esp, [esp + 3]
jmp 0x1e990cb
not ebp
mov bx, word [esp]
mov al, byte [esp]
rdtsc
stc
jmp 0x1e98ffe
jg 0x1e98fd6
dec ah
sub esp, 0x12
call fcn.01e99044
clc
lea esp, [esp + 0xf]
sub esp, 0x14
lea esp, [esp + 3]
jmp 0x1e990cb
lea edx, [eax + edx]
mov bx, sp
inc edx
jmp 0x1e98fec
jge 0x1e98fb6
mov bh, byte [esp]
xchg dx, bx
jmp 0x1e99025
bsr bx, cx
bsr eax, edx
xchg bh, ah
setle bh
jmp 0x1e9a7b8
rol ebp, 0
jl 0x1e990b5
bsr bx, cx
jmp 0x1e9a9fb
neg eax
call fcn.01e99531
rdtsc
mov ax, 0x980b
jmp 0x1e99642
mov al, bl
lea edx, [edx + esi]
lea edx, reloc.KERNEL32.dll_FreeEnvironmentStringsA
pushal
mov word [esp + 6], si
jmp 0x1e996c5
lea esp, [esp + 0x20]
not al
mov dh, dl
lea edx, [edi*4]
call fcn.01e9969a
xor al, 0xb6
mov dx, word [esp]
bswap edx
lea edx, reloc.KERNEL32.dll_FreeEnvironmentStringsA
push eax
lea esp, [esp + 3]
jmp 0x1e99725
dec al
mov dx, 0x6787
mov dh, ah
lea edx, reloc.KERNEL32.dll_FreeEnvironmentStringsA
jmp 0x1e9975a
mov edx, dword [esp]
lea esp, [esp + 1]
jmp 0x1e9970f
mov dl, byte [esp]
call fcn.01e99744
jmp 0x1e9979b
sub esp, 0x17
jne 0x1e997ae
mov dl, cl
mov edx, dword [esp + 0x12]
mov byte [esp + 0x10], dh
bswap edx
lea esp, [esp + 3]
jmp 0x1e997d8
mov dx, ax
mov dx, word [esp]
lea edx, [edx + ebx]
bswap edx
rol al, 0
not dl
jmp 0x1e9976b
mov dl, cl
mov edx, dword [esp + 0x12]
jmp 0x1e997ee
sub cl, al
jne 0x1e99810
mov ax, di
jmp 0x1e997fa
mov byte [esp + 0x10], dh
bswap edx
lea esp, [esp + 3]
jmp 0x1e997d8
neg edx
mov edx, ebx
jmp 0x1e99817
mov ax, di
neg edx
mov edx, ebx
dec ebp
mov ax, di
jmp 0x1e99821
rdtsc
mov eax, dword [esp]
dec al
ja 0x1e99cef
mov dh, byte [esp]
rdtsc
jmp 0x1e998d0
cmp eax, 0xca3cc21d
jne 0x1e99595
neg eax
jmp 0x1e99597
setle dh
mov eax, esi
jmp 0x1e9992f
not edx
sub esp, 0x19
jae 0x1e9984b
setle dh
call fcn.01e99898
xchg esp, eax
inc al
mov ax, 0x5d14
lea edi, [edi - 0x2b]
not edx
xchg dx, ax
jmp 0x1e998ac
btr eax, ecx
not ax
xchg dword [esp], edi
rcl ah, 1
neg ax
xchg dx, ax
jmp 0x1e999c4
shr dl, 3
pushfd
jmp 0x1e99b2e
mov eax, 0x2ec642e7
bsf ax, di
pop dx
mov al, byte [esp + 1]
stc
jmp 0x1e99984
lea esp, [esp + 1]
lea esp, [esp + 0x18]
sub bl, 0x59
push eax
rol dx, 5
jmp 0x1e99907
jns 0x1e998d9
mov eax, 0x2ec642e7
bsf ax, di
jmp 0x1e99918
pop dx
mov al, byte [esp + 1]
stc
call fcn.01e9994f
pop ecx
iretd
dec eax
mov dh, byte [esp + 0x14]
not ax
jmp 0x1e998f1
lea esp, [esp + 2]
jmp 0x1e999e2
rdtsc
push dword [esp]
ret 4
xchg ah, al
jmp 0x1e99a1f
ror bl, 0
add al, 0xf0
jb 0x1e999cc
xchg ah, al
dec ah
not dx
setb dh
dec dl
jmp 0x1e99a0b
dec dl
not ah
jmp 0x1e99a3f
dec ah
not dx
setb dh
jmp 0x1e99a09
sub esp, 0x1c
mov eax, 0x34b92385
jmp 0x1e99a4a
sub bl, 0x1e
not dh
add edx, esi
jne 0x1e99a29
je 0x1e99a98
lea esp, [esp + 0x1c]
neg bl
setge dl
not dx
mov edx, dword [esp]
jmp 0x1e99a81
mov eax, ebx
neg edx
jae 0x1e99aa2
bsf edx, ecx
mov dh, ch
pushal
jmp 0x1e99b50
mov ax, bx
jmp 0x1e99a6b
sub esp, 0x1c
mov eax, 0x34b92385
jmp 0x1e99a4a
bsf edx, ecx
call fcn.01e99afb
clc
mov dh, ch
jmp 0x1e99b4f
pushfd
push dword [esp + 3]
jmp 0x1e98de4
rdtsc
shr dl, 3
pushfd
lea esp, [esp + 4]
inc bl
jmp 0x1e99872
js 0x1e99ab2
pushfd
push dword [esp + 3]
jmp 0x1e98de4
pushal
shl eax, 2
mov edx, dword [esp]
bt edx, esi
jmp 0x1e99b39
pushal
call fcn.01e99b76
lds ecx, [esi - 0x24]
mov ebx, 0xe3559556
jae 0x1e99b81
in eax, 0x21
cmpsb byte [esi], byte es:[edi]
rcl dword [eax - 0x2d]
dec edx
mov dh, 0x4d
jmp 0x1e99b5b
xchg dword [esi], ebp
mov dh, byte [esp]
sub esp, 0x1c
call fcn.01e99bb3
xor bh, byte [ecx + 0xcbb4829]
adc al, 0x9a
or byte [edi - 0x66], ch
pop edi
jnp 0x1e99bee
int 0x5c
scasd eax, dword es:[edi]
mov dh, 0x10
adc dl, dl
btr dx, sp
mov dx, si
jmp 0x1e99c05
jmp 0x1e99c58
push eax
ret
mov dh, byte [esp]
jmp 0x1e99b28
lea esp, [esp + 0x14]
inc ebp
mov bh, 0xa6
mov ebx, edi
mov dx, 0x3ea0
jmp 0x1e99839
ror ebp, 0
lea eax, [ecx + edi]
mov ax, si
lea ebx, [ebx + ebx]
mov bx, 0xdc11
jmp 0x1e9a417
bsr eax, edx
xchg bh, ah
setle bh
jmp 0x1e9a7b8