Function at 0x64620e
Capabilities:
Execute anti-debugging instructions

Disassembly:
push 0xf06311f8
jmp 0x6461ab
mov dword [esp + 0x20], edi
lea esp, [esp + 0x20]
jmp 0x6461c2
jmp 0x64618f
bt edx, eax
jbe 0x6461de
rdtsc
mov ah, byte [esp]
jmp 0x6461e2
pushfd
jmp 0x645863
mov ah, byte [esp]
jmp 0x6461e2
rdtsc
jmp 0x6461c8
mov esi, dword [esp + 0x2c]
cmc
jmp 0x64621e
lea ecx, reloc.mscoree.dll__CorExeMain
pushfd
jmp 0x646229
sub esp, 0xbc
jmp 0x646454
push dword [esp + 2]
jnp 0x6461a9
mov dword [esp + 0x20], edi
lea esp, [esp + 0x20]
jmp 0x6461c2
js 0x6461ed
lea ecx, reloc.mscoree.dll__CorExeMain
pushfd
jmp 0x6461f4
lea ebp, [esp + 4]
xchg cl, bh
mov ebx, 0x93888e9
jmp 0x6461f6
jno 0x646271
clc
mov cl, bh
jmp 0x6462b2
clc
mov cl, bh
mov edx, ebx
mov ax, 0x85cc
rol esi, 0
mov dl, 0xf0
jmp 0x646286
bsr dx, dx
jo 0x64629c
lea edx, reloc.mscoree.dll__CorExeMain
xchg ecx, edx
push eax
pop edx
jmp 0x6462da
lea edx, reloc.mscoree.dll__CorExeMain
xchg ecx, edx
jmp 0x6462d8
mov edx, ebx
mov ax, 0x85cc
jmp 0x64627a
lea eax, [edx*4]
lea eax, [ebp*4]
mov eax, dword [esp]
not al
xchg dx, ax
jmp 0x6462f3
push eax
pop edx
inc esi
jmp 0x6462ba
pop eax
mov ax, cx
xchg cl, al
jmp 0x6463b5
add esi, 0x3a5883c2
mov al, dh
push ebx
push ebx
push dword [esp + 5]
jmp 0x646332
lea edx, [edx*4]
jmp 0x64638f
js 0x6462dd
pop eax
mov ax, cx
call fcn.00646354
xor edi, esi
ror byte [edi], cl
xor dword [edi], ecx
leave
inc edx
lea edi, [edi - 0x21]
mov eax, dword [esp]
jmp 0x646363
mov dh, byte [esp]
mov ecx, dword [esp]
mov dh, byte [esp]
xchg dword [esp], edi
bswap ecx
mov ch, byte [esp]
jmp 0x6463e1
lea edx, [edx*4]
mov ebx, esi
mov ah, ch
mov dx, di
bswap edx
dec dl
jmp 0x64625b
bsr eax, ecx
mov eax, dword [esp]
cmc
lea edx, [ebx*4]
jmp 0x6463ee
lea esp, [esp + 8]
neg esi
neg ch
jg 0x64639f
jle 0x6463c9
sub dword [eax + reloc.mscoree.dll__CorExeMain], edi
adc eax, 0xc1bd0f84
bsr eax, ecx
mov eax, dword [esp]
cmc
jmp 0x64640d
mov eax, dword [esp]
mov ch, cl
xchg cl, ah
push dword [esp]
ret 4
rcl ecx, 8
sub esi, 0x7f66dd39
mov cx, word [esp]
push esi
jmp 0x64642f
lea edx, [ebx*4]
rcl ecx, 8
jmp 0x6463f1
mov ch, bl
jmp 0x64643a
add esi, dword [ebp]
mov al, byte [esp]
cmc
jnp 0x646419
jp 0x64647c
movzx edx, byte [esi]
mov cl, 0x92
dec al
jae 0x646466
dec cx
mov cx, 0x46f4
jmp 0x6464f0
mov edi, esp
mov ah, 0x3d
shr ecx, cl
ja 0x646388
jbe 0x646313
jmp 0x6464ea
mov ch, bl
jmp 0x64643a
dec cx
mov cx, 0x46f4
call fcn.006464c2
rcl ecx, cl
jmp 0x64687b
jns 0x646547
sub esp, 0x12
rol ecx, cl
jmp 0x64656b
sub esp, 0x12
rol ecx, cl
lea ecx, [ecx + edx]
push esp
mov ecx, esp
mov cx, word [esp + 7]
jmp 0x646573
lea ecx, [ecx + edx]
push esp
mov ecx, esp
jmp 0x646552
setae cl
lea esp, [esp + 2]
lea esp, [esp + 0x14]
not al
push ax
jmp 0x6465b1
add al, 0xdf
clc
jmp 0x64652d
mov ecx, 0xf1870e2e
mov ch, 0xf4
mov cx, word [esp + 1]
lea esp, [esp + 2]
jmp 0x646660
setb ch
bts cx, cx
jb 0x646599
mov ecx, 0xf1870e2e
jmp 0x6465c6
mov ch, 0xf4
mov cx, word [esp + 1]
lea esp, [esp + 2]
jmp 0x646660
setb cl
cmp cx, 0x826
jne 0x646594
je 0x646594
mov cx, 0x46db
bt cx, cx
jmp 0x64660b
mov cx, 0x46db
bt cx, cx
neg al
xchg cl, ch
jmp 0x64662b
mov cx, si
mov cl, 0xe7
push bx
mov cl, 0xf5
shl cl, 0
jae 0x64663f
pushfd
lea esp, [esp + 2]
jmp 0x646686
mov ecx, edx
mov cx, dx
mov ecx, dword [esp]
lea ecx, [ebp*4]
rol al, 0
jmp 0x646611
jmp 0x646681
bswap ecx
neg ax
jae 0x64666b
sub esp, 0xf
call fcn.00646745
mov ebp, 0x31c2a737
mov byte [ebp + 0x28d9be28], ah
wait
lds esi, [edi - 0x72]
not al
bswap ecx
xor cx, bp
jnp 0x646603
jp 0x6465ed
sub esp, 0xf
lea eax, [eax*4]
lea esp, [esp + 3]
jmp 0x646696
pushfd
lea esp, [esp + 2]
add bl, al
jmp 0x646641
inc esi
xchg ecx, eax
mov cx, di
mov al, ah
mov eax, ebx
jmp 0x646756
mov al, dl
not ch
mov ch, byte [esp]
not ch
mov cx, 0x3460
jmp 0x6465e1
lea eax, reloc.mscoree.dll__CorExeMain
stc
je 0x64679d
jne 0x64679d
fimul word [eax - 0x22]
mov ecx, 0xe5708e48
jne 0x646787
out dx, eax
pop ecx
xchg esp, eax
pop es
scasb al, byte es:[edi]
mov ecx, 0xd5f6fb98
not ch
sete ch
not ax
push dword [esp]
ret 4
lea eax, [eax + ebp]
xchg byte [esp + 3], ch
bt ax, cx
jmp 0x6467c9
add esp, dword [esi + 0xf]
mov dword [reloc.mscoree.dll__CorExeMain], eax
push eax
invalid
not dl
sub esp, 8
jmp 0x6467be
bt ax, cx
jmp 0x6467c9
jnp 0x646781
lea eax, [eax + ebp]
xchg byte [esp + 3], ch
jmp 0x6467a4
lea esp, [esp + 8]
sub dl, 0x69
or ecx, 0xaafb99f6
jbe 0x646848
ja 0x646813
aas
cmpsb byte [esi], byte es:[edi]
xor al, 0x53
scasb al, byte es:[edi]
sbb eax, 0x2e4bdb4b
frstor dword [esi + edi*4 - 0x77]
mov ah, 0x39
mov ecx, dword [esp]
sub esp, 2
pop ax
xchg dword [esp], esi
bts ecx, eax
jmp 0x646773
mov ax, dx
xchg ecx, eax
call fcn.0064681e
xor eax, 0xaa5f38aa
push ds
push ebp
iretd
inc al
bsf cx, cx
setne ah
jmp 0x6467fd
inc al
bsf cx, cx
setne ah
mov ax, dx
xchg ecx, eax
mov cx, ax
jmp 0x646887
xchg cx, ax
xchg cx, ax
mov eax, dword [esp]
jmp 0x6466ac
pushfd
mov ah, byte [esp + 1]
jmp 0x6468cb
lea esp, [esp + 4]
add dl, 0x31
mov ecx, dword [esp]
or cx, si
jmp 0x646ea8
mov ax, word [esp]
mov cl, 0x65
call fcn.00646df1
rcl byte [ebp - 0x3b]
lodsb al, byte [esi]
pop edi
pushfd
inc esp
neg esi
sub dword [eax + 0x7f], ecx
pop si
sar byte [ecx], 1
pop esi
stosd dword es:[edi], eax
mov bh, 0x6b
pop esi
invalid
inc dl
call fcn.00646d25
xchg ch, cl
mov cl, dh
jmp 0x646e84
mov esp, edi
sub esp, 0x17
jmp 0x6473fe
mov byte [esp], bh
setg cl
pop ecx
lea esp, [esp + 3]
jmp 0x646eb6
jle 0x6468de
mov ax, word [esp]
mov cl, 0x65
jmp 0x646e62
push eax
ret
pop ecx
lea esp, [esp + 3]
jmp 0x646eb6
jne 0x646e8f
mov byte [esp], bh
setg cl
jmp 0x646ee1