Function at 0xe89138
Capabilities:
Execute anti-debugging instructions

Disassembly:
add edx, 0x281e14b3
jmp 0xe898d1
add edx, 0xf9fd37d3
jmp 0xe89970
or bx, 0x3c03
jmp 0xe89144
lea ebx, reloc.kernel32.dll_WriteFile
rcl ebx, cl
ja 0xe89122
jbe 0xe89162
sub eax, edx
mov ebx, dword [esp]
mov ebx, eax
lea ebx, [ebp - 0x80]
jmp 0xe89286
or bx, 0x3c03
jmp 0xe89144
and bl, 0xfc
cmc
jno 0xe89213
jo 0xe89213
lds ecx, [esi - 0x24]
mov ebx, 0xe355e256
jae 0xe891ba
in eax, 0x20
cmpsb byte [esi], byte es:[edi]
shl dword [esi + 0x52], 1
push dx
lea esp, [esp + 2]
jmp 0xe89192
mov esp, ebx
jmp 0xe891eb
fist word [edi - 0x39]
mov byte [0xe54aed51], al
adc al, 0x87
cmp dword cs:[eax + reloc.kernel32.dll_WriteFile], ecx
and al, 2
mov byte [esp], ah
lea esp, [esp + 2]
jmp 0xe891b0
sub esp, 2
jno 0xe891c6
mov byte [esp], ah
lea esp, [esp + 2]
jmp 0xe891b0
pushfd
lea esi, [eax + ebx - 0x40]
push esi
jmp 0xe891f7
push edi
push ecx
mov esi, edx
jmp 0xe89247
rep movsb byte es:[edi], byte [esi]
jmp 0xe8922d
sub ebx, eax
jmp 0xe891dd
clc
jbe 0xe89264
lea esp, [esp + 4]
jmp 0xe89268
pop ecx
pop edi
mov esi, dword [esp]
jmp 0xe89217
mov edi, ebx
mov ecx, eax
cld
jmp 0xe891fd
lea esp, [esp + 4]
popfd
call fcn.00e89d1a
mov edx, edi
movzx ebx, byte [edx]
not edx
bsf ax, bx
jmp 0xe893dc
cmc
ja 0xe891a8
push dx
lea esp, [esp + 2]
jmp 0xe89192
stc
jmp 0xe892dc
mov eax, dword [esp]
neg ax
je 0xe89298
stc
jmp 0xe892dc
inc dx
jmp 0xe892ff
inc dx
btc ax, si
jmp 0xe89303
add bl, cl
xchg al, dl
ror dl, cl
ja 0xe892b9
jbe 0xe892c1
mov edx, 0xacb19788
mov dx, si
lea edx, reloc.kernel32.dll_WriteFile
clc
jmp 0xe893ac
btc ax, si
mov al, bl
xchg dl, dh
lea edx, [ebx*4]
jmp 0xe892e6
mov edx, ebx
inc edx
jmp 0xe8935a
mov dx, cx
jmp 0xe89344
mov dx, cx
mov edx, eax
jmp 0xe8937c
mov edx, ebp
mov dh, byte [esp]
mov dx, di
jmp 0xe8948f
mov edx, eax
jmp 0xe8937c
xor al, 0x8f
bswap edx
mov edx, ecx
neg dl
je 0xe89315
jne 0xe8931e
mov dl, byte [esp]
jmp 0xe8938a
neg al
stc
js 0xe89366
mov dl, byte [esp]
call fcn.00e89418
cmc
lea edx, [eax + ebp]
btc edx, ecx
jmp 0xe89396
sub esp, 2
mov dx, bx
mov dh, 0xdb
lea esp, [esp + 2]
jmp 0xe89459
jp 0xe89310
mov edx, ebx
inc edx
jmp 0xe89313
je 0xe8947c
lea eax, [edx*4]
bsf ax, si
jmp 0xe89337
inc al
bswap edx
mov edx, dword [esp]
neg dx
jno 0xe894c4
mov dh, 0x1a
mov edx, 0x1040316
jmp 0xe89497
lea eax, [edx*4]
bsf ax, si
mov edx, ebp
mov dh, byte [esp]
mov dx, di
bt eax, esi
jmp 0xe892ae
dec al
mov dx, word [esp]
neg edx
jbe 0xe89579
ja 0xe8951e
add al, 0xb7
sahf
jmp 0x1b9f3fb7
mov dh, 0x1a
mov edx, 0x1040316
jmp 0xe89497
jmp 0xe894ad
ror dx, 0xc
jp 0xe894fe
lea edx, [edx*4]
jmp 0xe894e8
mov edx, 0x9b9dcf07
mov dh, 0x93
jmp 0xe89587
btr dx, cx
sub esp, 7
dec dh
jmp 0xe8954c
lea edx, [edx*4]
btr dx, cx
sub esp, 7
dec dh
not dx
xchg dword [esp], edx
lea esp, [esp + 3]
jmp 0xe89527
not dh
mov edx, esp
mov dh, byte [esp]
jmp 0xe894dc
add cl, al
jmp 0xe89551
rdtsc
xchg dx, ax
mov dh, byte [esp]
setl dh
jmp 0xe895a7
not dx
jmp 0xe89511
je 0xe8952f
rdtsc
xchg dx, ax
jmp 0xe8955d
mov dh, byte [esp]
setl dh
jmp 0xe895a7
not dh
mov edx, esp
mov dh, byte [esp]
mov edx, 0x9b9dcf07
mov dh, 0x93
dec al
lea edx, [ebx + esi]
jmp 0xe894c6
mov edx, ecx
sub esp, 0x1d
jg 0xe895b4
xchg byte [esp + 0x16], dl
call fcn.00e895de
inc esi
int1
ljmp 0xc68b
inc edi
rdtsc
mov eax, esi
mov al, 0x9e
mov ax, 0xbabb
jmp 0xe89591
xchg byte [esp + 0x16], dl
push dword [esp + 0x13]
mov edx, ebx
shl dl, cl
lea esp, [esp + 1]
jmp 0xe89601
lea esp, [esp + 0x20]
sub bl, 8
bt edx, eax
ja 0xe8963a
jbe 0xe89644
fcom dword [ebx - 0x3d]
cmpsb byte [esi], byte es:[edi]
push ebp
xchg edx, eax
push esi
rol dword [eax - reloc.kernel32.dll_WriteFile], 0x64
and al, 1
jmp 0xe89601
mov dx, word [esp]
call fcn.00e89673
dec eax
mov dx, word [esp]
lea eax, [eax*4]
bsf ax, bx
xchg dh, al
mov dx, cx
jmp 0xe896fd
lea eax, reloc.kernel32.dll_WriteFile
not eax
rol bl, 0
mov eax, dword [esp]
lea edx, reloc.kernel32.dll_WriteFile
jmp 0xe89776
seto dl
call fcn.00e89755
mov eax, dword [reloc.kernel32.dll_WriteFile]
xchg edi, eax
loope 0xe897b4
not dword [edx + reloc.kernel32.dll_WriteFile]
jmp 0xe8973d
mov al, 0xf
mov dx, word [esp]
rol bl, 0
ror dl, 6
jb 0xe89753
seto dl
jmp 0xe89740
add byte [eax], al
add byte [eax], al
add byte [edx + 0x303eebd4], cl
xor ebp, dword [edx]
inc ebp
mov dl, ah
bsr edx, ebx
lea edx, reloc.kernel32.dll_WriteFile
jmp 0xe8981e
mov dl, ah
jmp 0xe897f5
aam 0xeb
xor byte ds:[ebx], dh
sub al, byte [ebp - 0x76]
aam 0xf
mov ebp, 0x68928dd3
fcmovnbe st(0), st(1)
je 0xe897b2
push esi
int1
jbe 0xe897af
cmp dword [esi - 0x3f], reloc.kernel32.dll_WriteFile
imul edi, ebx, 0xffffff9e
insd dword es:[edi], dx
fmul dword [esi]
cdq
clc
bsr edx, ebx
lea edx, reloc.kernel32.dll_WriteFile
jmp 0xe8981e
lea esp, [esp + 4]
inc bl
bswap edx
adc eax, 0x1222d6b3
jle 0xe8986e
jg 0xe89858
xor eax, 0xc64b2cbe
jb 0xe8983b
xchg ebx, eax
add esp, dword [esi - 0x6b]
push eax
popfd
adc al, 0x8a
in eax, dx
sbb al, 0xad
add eax, eax
pushal
stc
jnp 0xe89886
lea esi, [ebx + esi]
mov dword [esp + 0x14], ebx
mov al, 0xe1
push esp
jmp 0xe89991
jmp 0xe89858
mov dword [esp + 0x14], ebx
mov al, 0xe1
push esp
jmp 0xe8988b
lea esi, [ebx + esi]
jmp 0xe89870
lea esp, [esp + 4]
popal
mov ah, byte [esp]
bsr ax, cx
jns 0xe89947
js 0xe89947
pushfd
jmp 0xe87b74
pushfd
jmp 0xe87b74
bts ax, bp
jmp 0xe89923
xchg al, ah
bswap eax
adc al, 0xde
mov eax, edx
lea eax, reloc.kernel32.dll_WriteFile
mov edx, dword [eax]
jmp 0xe8992b
shl edx, 2
mov eax, 0x1648876b
mov ax, 0x874a
bsr eax, esp
jo 0xe898cb
jno 0xe898b3
adc al, 0xde
jmp 0xe898e1
jns 0xe898db
xchg al, ah
bswap eax
jmp 0xe8990d
pushfd
add esp, 2
jge 0xe89960
lea eax, reloc.kernel32.dll_WriteFile
jmp 0xe89949
jmp 0xe898fa
push word [esp + 1]
jmp 0xe87b92
lea eax, reloc.kernel32.dll_WriteFile
push word [esp + 1]
jmp 0xe87b92
mov eax, ebx
not eax
mov esp, esi
bts ax, sp
jmp 0xe8999a
lea esp, [esp + 4]
jmp 0xe8988f
js 0xe899b0
inc al
not eax
jmp 0xe899b4
inc al
not eax
jmp 0xe8ae21
push edx
ret