Function at 0x6424f1
Capabilities:
Execute anti-debugging instructions

Disassembly:
push 0xf06311f8
jmp 0x6423cf
add eax, 0x9b615b24
jmp 0x642a2d
add eax, 0x388d19ab
jmp 0x642a93
push word [esp + 1]
jmp 0x642768
push dword [esp + 4]
lea esp, [esp + 2]
mov dword [esp + 0x24], edi
lea esp, [esp + 0x24]
jmp 0x6424a1
lea esi, [ecx + ebx]
neg cx
jmp 0x6423af
lea esi, [ecx + ebx]
neg cx
mov ebp, dword [esp + 0x2c]
mov eax, ebp
jmp 0x642406
not bh
sub esp, 0xc0
jmp 0x6423ef
mov eax, dword [esp]
neg si
jno 0x6423a9
jo 0x642393
lea edx, [edx + ebp]
rdtsc
mov dx, 0xdb66
lea ecx, [ebx + edi]
mov ax, bx
jmp 0x64246e
mov edi, esp
mov bx, 0x480
lea ebx, [esi*4]
xchg dx, ax
mov ebx, ebp
jmp 0x6423d9
rdtsc
xchg edi, ebx
lea esi, [esp]
not cl
xchg edi, ebx
jmp 0x6423b7
inc ebp
rdtsc
mov dl, cl
bswap edx
jmp 0x642448
setl cl
jmp 0x642413
lea ecx, reloc.mscoree.dll__CorExeMain
jmp 0x642483
sub ebp, 0x181e584f
inc dl
js 0x642432
lea ecx, reloc.mscoree.dll__CorExeMain
inc cx
bsf eax, eax
jmp 0x642488
mov cx, 0x9417
lea edx, reloc.mscoree.dll__CorExeMain
rcr ax, 9
jnp 0x64242d
setl cl
jmp 0x642413
inc cx
bsf eax, eax
sub ebp, 0x1d273daa
jmp 0x64250a
pushfd
jmp 0x6418ca
xchg cx, ax
call fcn.006424de
cwde
push es
xchg esp, eax
push cs
push cs
mov cl, 0x2a
mov ebx, 0xfbd4e2b
push ds
imul ecx, dword [eax - reloc.mscoree.dll__CorExeMain], 0xae444d80
ja 0x6424b2
lea eax, reloc.mscoree.dll__CorExeMain
jmp 0x6424a7
ffreep st(1)
lds eax, [eax]
jmp 0x6424e5
mov ah, byte [esp]
setg cl
call 0x6424f1
in eax, 0xf8
jp 0x642562
cmc
jmp 0x642535
mov dx, 0xdaf1
mov ecx, dword [esp]
neg ch
je 0x6424c0
lea eax, reloc.mscoree.dll__CorExeMain
xchg cx, ax
jmp 0x6424a9
lea esp, [esp + 8]
add ebp, 0x43c171ea
call fcn.0064251f
add ebp, dword [esi]
clc
jnp 0x642565
xchg cl, ch
lea ecx, reloc.mscoree.dll__CorExeMain
jmp 0x64272e
cmc
jmp 0x642535
xchg cl, ch
jmp 0x64256d
lea ecx, reloc.mscoree.dll__CorExeMain
jmp 0x64272e
mov dword [esp + 0x24], edi
lea esp, [esp + 0x24]
jmp 0x6424a1
mov dl, cl
jmp 0x6425b7
setg al
mov dl, cl
call 0x6425d3
adc dl, bl
jbe 0x642630
mov dh, byte [esp]
pushal
jmp 0x642613
mov ax, bp
inc eax
je 0x6425b2
setg al
jmp 0x64259c
lea esp, [esp + 4]
dec al
neg dh
jge 0x6426d9
jl 0x64265d
dec edi
salc
inc ecx
ret
mov al, cl
mov dx, ax
push dx
pop dx
push edi
jmp 0x6425fd
mov dh, byte [esp]
pushal
jmp 0x642613
ror al, 0
ja 0x642682
mov dx, word [esp]
pushfd
jmp 0x64266c
rol edx, cl
mov dword [esp], ecx
mov dh, ch
jmp 0x6426a5
mov dx, word [esp]
lea edx, [ebx*4]
not edx
jmp 0x6426e6
rol edx, cl
mov dword [esp], ecx
mov dh, ch
jmp 0x6426a5
mov dx, word [esp]
pushfd
jmp 0x642646
mov edx, dword [esp]
sub dx, 0x2978
mov dl, 0xa9
sub esp, 0x1b
lea esp, [esp + 0x16]
lea esp, [esp + 1]
jmp 0x6426eb
lea esp, [esp + 4]
inc al
neg edx
jp 0x642689
jnp 0x6426b9
sbb eax, 0x97641d8d
pushfd
out dx, eax
mov edx, dword [esp]
sub dx, 0x2978
mov dl, 0xa9
jmp 0x642701
mov dx, word [esp]
lea edx, [ebx*4]
not edx
jmp 0x642636
rol al, 0
jl 0x64270a
cmc
jmp 0x642712
sub esp, 0x1b
lea esp, [esp + 0x16]
jmp 0x64269a
cmc
cmc
jmp 0x64273c
cmc
bt dx, bx
mov dx, word [esp]
jmp 0x642744
movzx ecx, byte [ebp - 1]
setns dh
mov dh, ah
jmp 0x6425f2
bt dx, bx
mov dx, word [esp]
lea esp, [esp + 4]
jmp 0x64274e
sub al, 0x19
lea edx, [eax + 0x36]
ror dx, cl
ja 0x64302c
inc dl
mov dh, byte [esp]
jmp 0x64294b
jle 0x641f74
push dword [esp + 4]
lea esp, [esp + 2]
jmp 0x64258f
dec ebp
cmc
je 0x6427b6
jne 0x6427b6
bswap eax
lea edx, [ebp*4]
xchg dl, ah
cmp eax, 0x4b2c5adc
jmp 0x6427fd
not edx
neg edx
inc dx
jmp 0x64277b
call 0x6427a0
call 0x6427e7
jmp 0x642881
mov ax, cx
mov dl, byte [esp]
setg ah
lea esp, [esp + 4]
sub cl, 0x1e
neg eax
jo 0x642806
mov ah, 0x58
bsr dx, bp
jmp 0x64280b
jmp 0x642798
ja 0x6427bb
jbe 0x6427bb
setg ah
jmp 0x6427ce
call fcn.0064282e
pushfd
sub esp, 6
mov dl, byte [esp + 2]
jmp 0x6428d5
jae 0x6427c5
mov ax, cx
mov dl, byte [esp]
jmp 0x642801
mov al, 8
rol cl, 0
mov edx, 0x2213196c
and ax, 0x8bd4
jmp 0x642824
jmp 0x642918
lea esp, [esp + 2]
lea esp, [esp + 8]
neg cl
neg dx
jnp 0x6428bf
xchg edx, eax
mov edx, 0xb3db3a2a
xchg al, ah
mov dh, byte [esp]
mov dx, 0xdd73
jmp 0x6429b0
xchg edx, eax
mov edx, 0xb3db3a2a
xchg al, ah
call 0x642926
xchg dx, ax
lea edx, reloc.mscoree.dll__CorExeMain
mov eax, 0x34245a80
bswap edx
xchg dword [esp], edi
jmp 0x642985
setg dl
lea edx, reloc.mscoree.dll__CorExeMain
jmp 0x642a80
xchg ah, dh
mov dx, bp
xchg dword [esp + 0x20], edi
lea edx, [eax + ecx]
bsr ax, bp
rdtsc
jmp 0x6429f4
mov ax, 0x75f1
bsr edx, esp
pushal
rdtsc
adc dh, 0x70
lea edi, [edi - 0x23]
jmp 0x642959
pushal
mov dword [esp + 0x1c], ecx
mov edx, dword [esp]
popal
jmp 0x6429c1
lea edx, [ecx + ebx]
add cl, 0x2a
mov eax, 0xbc3c6cd8
not eax
rcr al, cl
jmp 0x6429db
bswap edx
neg dh
jo 0x642a43
push ax
jmp 0x642a16
jp 0x64299a
jnp 0x64299a
mov ch, 0x3d
lodsd eax, dword [esi]
mov ah, 0x47
hlt
mov dx, bp
mov ah, al
push dword [esp + 0x20]
ret 0x24
xor edx, ebx
mov dx, bx
jmp 0x6418e2
adc dx, 0x4296
lea esp, [esp + 2]
jmp 0x642a4e
jo 0x642a00
xor edx, ebx
mov dx, bx
jmp 0x6418e2
cmc
jmp 0x642fd7
push ax
adc dx, 0x4296
lea esp, [esp + 2]
shl eax, 2
bsf dx, bp
jmp 0x642a21
call fcn.00642ef1
rcl dh, 7
jnp 0x642e25
sub esp, 0x12
mov dx, sp
jmp 0x642aa9
mov dh, byte [esp]
setg dl
lea edx, reloc.mscoree.dll__CorExeMain
add bl, al
js 0x6427e5
not edx
neg edx
inc dx
jmp 0x64277b
clc
jg 0x642b12
inc edx
jmp 0x642ac8
lea esp, [esp + 2]
jmp 0x641922
mov dx, 0x8f23
mov dl, byte [esp]
jmp 0x642acf
sub dh, 0xea
inc dx
jmp 0x642b18
push eax
ret
jp 0x642ab2
mov dx, 0x8f23
mov dl, byte [esp]
jmp 0x642acf
inc edx
sub dh, 0xea
inc dx
mov esp, edi
bsf dx, bp
jmp 0x642ae5
lea esp, [esp + 2]
jmp 0x641922
sub esp, 0x12
mov dx, sp
jmp 0x642b62
jge 0x642a57
jl 0x642a57
mov ecx, ecx
jmp 0x643000
cld
rep movsb byte es:[edi], byte [esi]
mov cx, word [esp]
jmp 0x64300d
mov ecx, dword [esp]
lea esp, [esp + 4]
pop edi
pop esi
jmp 0x6431ad
inc dl
jmp 0x642a74
popfd
jmp 0x64272e