Function at 0x1efb61b
Capabilities:
Execute anti-debugging instructions

Disassembly:
add eax, 0x37d88f10
jmp 0x1efba92
add eax, 0xe8030406
jmp 0x1efbad9
dec dx
push word [esp + 1]
lea esp, [esp + 2]
xchg dword [esp + 4], ebx
pushfd
call fcn.01efb4e0
neg ax
mov ax, word [esp]
bswap eax
jmp 0x1efb569
lea edx, [edx*4]
bsr eax, esi
bsr edx, ecx
dec edx
lea ebx, [ebx + 9]
push ecx
jmp 0x1efb4f6
sub bl, cl
rdtsc
mov eax, 0x6107bda0
jmp 0x1efb579
mov edx, ebp
jmp 0x1efb5ff
mov dl, bl
bswap eax
rcl ah, cl
jne 0x1efb642
je 0x1efb62c
jb 0x1efb60e
xchg ebx, eax
test byte [0x5ac448b4], 0x3d
mov ah, 0x48
les ebx, [edx + 0x3d]
int3
xchg ah, dh
rdtsc
rdtsc
mov dx, ax
xchg dword [esp], ebx
jmp 0x1efb53f
rol al, cl
shr ax, cl
jmp 0x1efb647
rol al, cl
shr ax, cl
ror dl, 0
bt ax, bp
jmp 0x1efb75b
xchg ah, al
mov ax, sp
mov eax, dword [esp]
jmp 0x1efb6f7
mov eax, dword [esp]
jmp 0x1efb6f7
setbe al
jmp 0x1efb6d6
mov al, 0x78
cmc
jmp 0x1efb6c0
cmc
mov ax, word [esp]
jmp 0x1efb6df
mov ax, dx
neg ax
jl 0x1efb68a
setbe al
jmp 0x1efb68d
mov ax, word [esp]
jmp 0x1efb6df
not dl
stc
ja 0x1efb68f
mov al, 0x78
jmp 0x1efb698
not dl
lea eax, [edx + ebp]
bswap eax
mov ax, word [esp]
mov ax, 0xf5b3
jmp 0x1efb729
xor dl, 0x3f
lea eax, [ebx*4]
lea eax, [esi*4]
lea eax, [edx*4]
mov ah, dl
jmp 0x1efb6b3
dec dl
adc ax, 0x7aa9
jmp 0x1efb7f1
mov ah, bh
bsf eax, ebp
jae 0x1efb713
jb 0x1efb713
clc
mov ah, byte [esp]
mov ax, bp
call fcn.01efb78b
cmp esp, dword [esi - 0x75]
lds esi, [edx + ebp + 0xf5e9]
add byte [ecx], cl
nop
push es
popal
nop
push edx
xchg ecx, eax
or eax, 0xa717e49d
sbb al, 0x6f
jbe 0x1efb7ba
mov ax, bp
mov ah, 0x2a
jmp 0x1efb83e
mov al, byte [0xf3830fe3]
invalid
jae 0x1efb654
xchg ah, al
mov ax, sp
jmp 0x1efb662
mov ah, 0x2a
mov al, 0xf2
jmp 0x1efb816
jl 0x1efb732
clc
mov ah, byte [esp]
jmp 0x1efb73f
inc ebp
clc
jb 0x1efb825
push edx
jmp 0x1efb858
sub cl, dl
mov al, 0xeb
not eax
lea eax, [ebx*4]
jmp 0x1efb800
push edx
mov dh, ch
inc eax
lea eax, [ecx + edx]
bt dx, si
xchg edx, eax
mov al, dh
mov ax, sp
xchg dx, ax
jmp 0x1efb876
mov al, 0xf2
jmp 0x1efb816
bt dx, si
jmp 0x1efb830
mov dh, ch
inc eax
lea eax, [ecx + edx]
jmp 0x1efb842
mov al, byte [esp]
jmp 0x1efbc31
sub bl, 0xa5
btc dx, di
jg 0x1efb860
mov al, byte [esp]
btr ax, sp
rcr dl, cl
mov eax, 0xefaaefb
lea eax, reloc.KERNEL32.dll_RtlUnwind
jmp 0x1efbaf8
mov dh, 0x66
jmp 0x1efb925
xor bl, 0x5b
not dh
ror dl, 1
jae 0x1efb8aa
mov dh, 0x66
mov edx, dword [esp]
jmp 0x1efb928
jmp 0x1efb8c0
mov edx, dword [esp]
call fcn.01efb8f7
lea edx, [esi + ebp]
rol dx, cl
jmp 0x1efba69
xor dword [edi + reloc.KERNEL32.dll_RtlUnwind], esp
pop edx
mov ch, 0xa4
xlatb
jle 0x1efba5d
setae al
setg al
jmp 0x1efb92d
lea edx, [ecx - 0xab]
jmp 0x1efb997
mov ax, word [esp]
lea eax, reloc.KERNEL32.dll_RtlUnwind
setge ah
mov eax, ebx
mov edx, 0x57c2f715
jmp 0x1efb951
lea edx, [ebx*4]
lea edx, [ebp*4]
bts dx, cx
jmp 0x1efb9bb
bsf dx, bx
jb 0x1efb97d
lea edx, [ebx*4]
call fcn.01efba1f
jae 0x1efb938
adc al, 0xad
add byte [eax], al
add byte [eax], al
bts dx, cx
jmp 0x1efba3e
shl eax, 2
mov dx, di
clc
dec edx
jle 0x1efbabd
mov edx, dword [esp]
jmp 0x1efba73
mov dh, byte [esp]
mov dx, si
not dx
ror bl, 0
mov eax, 0x7cfeeed4
jmp 0x1efb967
shl eax, 2
mov dx, di
jmp 0x1efb9c1
setae al
setg al
lea edx, [esi + ebp]
rol dx, cl
sub bl, 0x43
mov edx, esp
jmp 0x1efb9d2
cmc
jmp 0x1efae0b
mov edx, dword [esp]
cmc
jmp 0x1efae0b
sub esp, 8
jmp 0x1efbad5
mov edx, eax
lea edx, reloc.KERNEL32.dll_RtlUnwind
mov eax, dword [edx]
jmp 0x1efbabf
mov dx, si
jmp 0x1efae39
jmp 0x1efba89
bsr dx, cx
ja 0x1efbaa7
mov dx, si
jmp 0x1efae39
jbe 0x1efba9b
ja 0x1efba9b
lea edx, [ebp*4]
push di
jmp 0x1efbb28
lea eax, reloc.KERNEL32.dll_RtlUnwind
mov eax, edi
bsf eax, esp
jne 0x1efb8df
je 0x1efb8df
mov dh, 0xeb
mov edx, 0xfd0e8af4
lea edx, [eax + ecx]
jmp 0x1efbb7e
lea edx, reloc.KERNEL32.dll_RtlUnwind
lea edx, [ebx + esi]
lea esp, [esp + 2]
mov esp, edi
bsf dx, cx
jmp 0x1efbb5d
lea edx, [eax + ecx]
jmp 0x1efbb7e
jg 0x1efbb09
mov dh, 0xeb
mov edx, 0xfd0e8af4
jmp 0x1efbb3d
push eax
ret
btr ax, sp
rcr dl, cl
mov eax, 0xefaaefb
jmp 0x1efbaf2