Function at 0x430d61
Capabilities:
Execute anti-debugging instructions

Disassembly:
add eax, 0x81baa9a6
jmp 0x431051
add eax, 0x381de393
jmp 0x4310ed
sub cl, dl
jmp 0x430d49
sub esp, 7
jns 0x430d6c
mov ax, 0x9ab0
mov edx, 0x6942b12a
jmp 0x430d7a
mov eax, 0x5a7e2fe7
ror al, 1
jle 0x430d41
jg 0x430d41
mov ax, 0x9ab0
mov edx, 0x6942b12a
jmp 0x430f34
push word [esp + 5]
lea esp, [esp + 1]
jmp 0x430f3d
push eax
bsf dx, di
lea esp, [esp + 1]
jmp 0x430dea
mov ax, word [esp]
mov ax, word [esp]
sub esp, 0x11
jmp 0x430d9d
lea edx, [edi*4]
push dword [esp + 1]
add ah, 3
jmp 0x430dfd
add ah, 3
xor al, ah
lea esp, [esp + 3]
jmp 0x430e54
lea esp, [esp + 0x14]
not bl
mov ax, 0x27a2
mov ax, word [esp]
sub esp, 0xb
jmp 0x430e17
xor al, ah
lea esp, [esp + 3]
jmp 0x430e54
jns 0x430dc0
lea edx, [edi*4]
push dword [esp + 1]
jmp 0x430dd4
xchg dx, ax
jmp 0x430db3
mov ah, pe_nt_image_headers32
xchg al, ah
call 0x430e76
loop 0x430ec7
in al, dx
mov eax, dword [esi - reloc.mscoree.dll__CorExeMain]
cmpsb byte [esi], byte es:[edi]
push ebp
xchg ebp, eax
push esi
lea esp, [esp + 0xc]
neg bl
or al, 0x1a
jl 0x430e3e
jge 0x430e8e
rdtsc
xchg dl, al
sub al, 0x6a
jmp 0x430eae
mov ah, pe_nt_image_headers32
xchg al, ah
call 0x430e60
dec eax
neg ax
mov ax, 0x27c4
xchg dword [esp], ecx
mov al, dl
rol edx, 4
jmp 0x430f01
mov al, 0x23
xchg dword [esp], ecx
xchg dl, al
xchg al, ah
xchg dl, ah
lea ecx, [ecx - 0x55]
jmp 0x430e98
mov dx, 0x9aa9
rdtsc
clc
jbe 0x430e36
xchg dx, ax
mov ax, word [esp]
mov ax, word [esp]
sub esp, 0x11
push eax
jmp 0x430d9e
sub esp, 2
call fcn.00430ee8
xor bl, 0xcc
mov ax, 0x5187
inc ah
jmp 0x430fc7
lea eax, reloc.mscoree.dll__CorExeMain
bsr edx, ecx
seto ah
mov edx, 0x1fec3976
sbb dx, bx
jmp 0x430f42
push word [esp + 5]
lea esp, [esp + 1]
inc esi
xchg al, dh
jmp 0x430ec7
mov eax, dword [esp]
lea eax, [edi*4]
rol bl, 0
shr eax, 0x1a
jl 0x430f8f
lea edx, [eax - 0xd7]
cmc
mov ah, byte [esp]
not eax
jmp 0x430fa9
seto ah
mov edx, 0x1fec3976
sbb dx, bx
jmp 0x430f42
lea edx, [eax - 0xd7]
cmc
mov ah, byte [esp]
jmp 0x430fa7
jmp 0x430f79
mov ah, byte [esp]
xchg edx, eax
jmp 0x43103e
not eax
add bl, 0x6a
mov edx, dword [esp]
mov ah, 0x71
jmp 0x430f91
jno 0x430f18
lea eax, reloc.mscoree.dll__CorExeMain
bsr edx, ecx
jmp 0x430f6c
mov dl, 0x78
xchg dl, dh
mov edx, 0x8ba713ef
popal
mov edx, 0x348103c9
jmp 0x430ff9
mov ch, dh
mov dword [esp + 0x1c], ebx
setp dl
jmp 0x430fd8
mov edx, esi
mov edx, ebx
mov dx, word [esp]
jmp 0x431016
xchg al, ch
jmp 0x430fee
shl eax, 2
cmc
jmp 0x43109e
mov dh, byte [esp]
mov edx, ebp
setne dl
jmp 0x42fd8c
pushal
stc
jb 0x431012
xchg al, ch
mov ch, dh
mov dword [esp + 0x1c], ebx
setp dl
mov dl, 0x78
jmp 0x430fda
pushal
pop word [esp + 6]
bswap edx
push word [esp + 0xb]
jmp 0x43106f
setne dl
jmp 0x42fd8c
jp 0x431085
jnp 0x431085
and al, 0xaf
aas
pop edx
test eax, 0x56c05273
xor eax, eax
je 0x43107d
sal byte [ebp + edi*8 - 0x34], 0x5f
cmpsb byte [esi], byte es:[edi]
rcl dword [eax - 0x75]
or byte [ecx + 0x5e], 0x88
jle 0x431019
int3
mov eax, dword [eax + reloc.mscoree.dll__CorExeMain]
lea edx, reloc.mscoree.dll__CorExeMain
dec dh
nop
mov ebp, 0xfe0000cf
into
jmp 0x4310bd
jno 0x431020
mov dh, byte [esp]
mov edx, ebp
jmp 0x431067
lea esp, [esp + 2]
jmp 0x42fdaf
je 0x43113d
push si
xchg word [esp], dx
jmp 0x4310a7
lea edx, reloc.mscoree.dll__CorExeMain
call 0x4310f7
sbb byte [ebp + 0x9fb2494], cl
invalid
lea edx, reloc.mscoree.dll__CorExeMain
call 0x4315d7
outsd dx, dword [esi]
jmp [edi + 0xa]
mov edx, ebp
not edx
rcl edx, cl
jbe 0x4310c7
ja 0x4310d4
neg dh
mov dh, byte [esp]
pushfd
mov dword [esp], eax
push dword [esp + 1]
jmp 0x431123
xchg dword [esp + 8], edi
mov dh, 0x99
bsf edx, esi
bswap edx
mov dx, word [esp]
bswap edx
jmp 0x43114c
push si
xchg word [esp], dx
lea esp, [esp + 2]
jmp 0x42fdaf
lea edi, [edi + 0x3a]
mov edx, 0x2546305a
inc dl
dec edx
neg dl
xchg dword [esp + 8], edi
jmp 0x43118d
invalid
mov dx, cx
bswap edx
call 0x431177
xchg dword [0x9227d48d], ebx
imul dword [esi - 4]
wait
jbe 0x431163
inc esi
jno 0x43120d
mov eax, ebx
jmp 0x43123b
add bl, 0xb7
lea eax, [esi*4]
sub esp, 0xc
jmp 0x43126d
or al, 0xeb
pop ebp
jae 0x4311ff
jge 0x431218
test dword [edi + 0x7c], reloc.mscoree.dll__CorExeMain
add dl, byte [eax - 0x3d]
lea esp, [esp + 2]
push eax
ret
setle ah
mov dh, 0xab
mov ah, bh
inc ax
jmp 0x431276
bts ax, di
lea eax, [ecx + edx]
jmp 0x431201
mov ah, bh
inc ax
jmp 0x431276
jno 0x43121e
setle ah
mov dh, 0xab
jmp 0x431257
ror bl, 0
ja 0x4312ad
bswap edx
jmp 0x431297
push dword [esp + 4]
ret 8
neg ax
mov al, 2
jmp 0x4312b4
bswap edx
neg ax
mov al, 2
lea esp, [esp + 0xc]
sub bl, 0x14
jmp 0x431357
mov dx, si
jmp 0x4312f7
jmp 0x4312c0
not edx
jmp 0x4312e0
lea eax, [ebx - 0x6f]
not dh
mov dx, bx
jmp 0x431325
add bl, 0xd6
shl ax, cl
ja 0x4312d8
not edx
lea eax, [ebx - 0x6f]
not dh
mov dx, bx
jmp 0x431325
and ebx, 0x3c
mov ax, 0x6b13
stc
jbe 0x431335
lea eax, [edi + ebp]
xchg dx, ax
jmp 0x431341
sub bl, 0x90
push ecx
mov eax, 0xc1ec33ce
mov eax, 0x997e6264
jmp 0x43130b
lea eax, [edi + ebp]
jmp 0x43133e
xchg dx, ax
sub ebp, 4
xchg edx, eax
sub esp, 0x1f
jmp 0x4313c5
mov dx, bx
mov edx, 0x99dc4fe
lea edx, [ebx + ebp]
lea edx, [edx*4]
bt eax, esi
jo 0x4312d6
mov dx, si
jmp 0x4312f7
call fcn.004313a6
lea esp, [esp + 1]
jmp 0x4313df
add dh, al
pushfd
xchg dword [esp + 4], esi
mov dx, di
sub edx, ebx
mov dx, bp
jmp 0x431290
js 0x431377
jns 0x431377
dec bl
jmp 0x431434
mov edx, dword [ebx + edi]
clc
jno 0x4313c9
dec bl
jmp 0x431434
clc
jmp 0x43141d
lea eax, [ebp*4]
bsf ebx, ecx
jo 0x431459
jno 0x431443
pop eax
into
pop esp
cmp edx, esi
fbld tbyte gs:[esi]
mov dx, word [esp]
mov dx, 0xe0b1
sub edx, 0x6c43e2de
lea esi, [esi + 0x2d]
inc edx
bt dx, dx
jmp 0x431392
pushal
jmp 0x4313ec
mov dword [ebp], edx
or edx, ebx
jno 0x4313e9
clc
pushal
call fcn.0043235c
retf 0xe386
xchg bl, ah
shr ax, 4
jmp 0x43145f
xchg bl, ah
shr ax, 4
lea ebx, [edi + 0x50]
mov ah, 0x3b
jmp 0x4314ab
bswap edx
xchg dx, ax
xchg edx, eax
cmp ebp, ebx
jmp 0x431a88
ja fcn.00431493
xchg dl, ah
mov bh, 0xfa
ror ax, 3
jmp 0x431ad6
mov edx, 0x2904af9d
mov ebx, edi
lea eax, [edx + esi]
jmp 0x431ab6
mov al, byte [esp]
lea edx, reloc.mscoree.dll__CorExeMain
jmp 0x431adf
jae 0x431aa6
mov edx, 0x2904af9d
jmp 0x431aab
lea eax, [edi + 0x40]
neg dh
js 0x431b16
lea edx, [edx + ebx]
cmc
bt dx, si
jmp 0x431b1b
cmc
bt dx, si
jmp 0x431b1b
lea edx, [edx + ebx]
jmp 0x431b00
sub eax, ebx
je 0x431b6d
push esi
jmp 0x431b54
mov edx, esp
dec edx
lea esp, [esp + 4]
jmp 0x431c30
push esi
mov edx, esp
dec edx
lea esp, [esp + 4]
mov dh, dl
neg dx
mov dx, cx
lea edx, [ebp - 0x80]
sub esp, 0x1a
jmp 0x431ba8
jae 0x431bf9
mov byte [esp + 1], cl
lea esp, [esp + 2]
jmp 0x431c01
mov byte [esp + 1], cl
lea esp, [esp + 2]
call fcn.00431bca
loop 0x431c68
not byte [ecx - 0x62e35ca0]
or eax, 0x6c15a754
jg 0x431c5b
int1
invalid
mov dh, dl
jmp 0x431b77
dec dword [ebp - reloc.mscoree.dll__CorExeMain]
aad 0x7d
fdivr qword [edx + ebx*8 - 0x64]
lea edi, [eax + edx - 0x40]
push esi
jmp 0x431d9e
jl 0x431c7a
rcl byte [esi - 0x17], 0x2d
add dword [eax], eax
add byte [ebx], ah
cld
jmp 0x431c90
in al, 0xe9
xlatb
add eax, 0x51d80000
shl dword [eax - reloc.mscoree.dll__CorExeMain], 0x8b
mov edi, edx
mov ecx, eax
jmp 0x431c72
rep movsb byte es:[edi], byte [esi]
pop ecx
pop edi
jmp 0x431d04
lea esp, [esp + 1]
mov esi, dword [esp + 0x20]
lea esp, [esp + 0x24]
call fcn.00431cce
cmp dword cs:[eax], ebx
jnp fcn.00431d1d
pushal
jmp 0x431cb5
popfd
jmp 0x431ceb
pushfd
add esp, 3
jno 0x431ccb
pushal
lea esp, [esp + 1]
mov esi, dword [esp + 0x20]
lea esp, [esp + 0x24]
jmp 0x431ce4
call fcn.00431d47
cmc
mov dh, byte [esp]
jmp 0x431eb6
push dword [esp + 9]
jmp 0x431e25
push dword [esp + 9]
mov dx, si
sub esp, 0x13
cmc
lea esp, [esp + 3]
jmp 0x431e03
clc
ror al, 0
sub esp, 0xc
jle 0x431dd0
jg 0x431dda
lea esp, [esp + 3]
lea esp, [esp + 0x20]
neg al
lea edx, [edx + ebp]
jmp 0x431e4d
call fcn.00431e2e
xchg edx, eax
add byte [esi + 0x2cb400f1], dl
mov ebp, 0x75c7342d
or al, 0x9f
out 0x11, al
nop
adc esp, dword [esi - 0x75]
salc
mov dx, si
sub esp, 0x13
cmc
jmp 0x431dff
neg edx
js 0x431e0e
jns 0x431e0e
mov dx, word [esp]
sub esp, 1
xchg byte [esp], dl
jmp 0x431e9e
lea esp, [esp + 1]
jmp 0x431fb8
mov dx, word [esp]
lea edx, [edx*4]
mov dh, bh
jmp 0x431df4
mov edx, esp
mov dl, 0xbf
dec al
lea edx, reloc.mscoree.dll__CorExeMain
not edx
jmp 0x431f54
mov edx, dword [esp]
mov dx, 0x909e
neg edx
jge 0x431f8e
bts dx, sp
mov dl, ch
bsr dx, ax
jmp 0x431f94
bsf dx, sp
jmp 0x431ef4
mov dl, ch
bsr dx, ax
jmp 0x431f94
bts dx, sp
jmp 0x431f78
sub cl, al
jmp 0x43200e
call 0x431fe3
jmp 0x431fcd
sub al, 0x73
bsr dx, ax
jge 0x431f6f
bsf dx, sp
mov edx, esp
mov dl, 0xbf
call fcn.00431ec8
inc esi
pushal
inc eax
jb 0x431fef
mov ax, word [esp + 0x13]
mov edx, ecx
jmp 0x432065
mov ax, word [esp + 0x13]
call fcn.00432050
add byte [eax], al
mov eax, 0x3bc8a939
mov dword [edx + reloc.mscoree.dll__CorExeMain], ebx
fdivr st(0)
jg 0x431ff7
mov bh, byte [ecx + 0x43]
ror byte [ebp - 0x24], cl
jne 0x431f9c
je 0x431f9c
mov ah, byte [esp]
ror edx, 0xd
xchg dword [esp + 4], ebx
lea edx, reloc.mscoree.dll__CorExeMain
jmp 0x43207c
xchg edx, eax
inc dl
lea edx, [edi + ebp]
jmp 0x4320dd
not ax
rdtsc
setle al
push dword [esp + 4]
ret 8
clc
jmp 0x4320af
bswap eax
btr edx, ebp
ja 0x43208b
clc
jmp 0x4320af
not bl
setle dl
mov dh, ah
btr edx, ebp
jae 0x4320e5
clc
not dx
not ax
jmp 0x4320ea
lea edx, reloc.mscoree.dll__CorExeMain
jmp 0x4320a1
jmp 0x4321c1
neg bl
mov edx, 0x6e274908
call fcn.00432193
mov dh, 0x3a
test al, 0xcf
cmp cl, byte [edx - 0x3120d65]
iretd
clc
not dx
not ax
jmp 0x4320ea