Function at 0x635ae3
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov ah, byte [esp + 5]
not al
lea edi, [eax + ebp]
add dl, 0x8d
mov edx, ebx
inc esi
jmp 0x635a2f
push word [esp + 3]
rdtsc
mov esi, esp
mov dword [esp], edi
clc
btr edx, eax
jmp 0x6359e2
rol cl, 1
setb bh
std
mov bp, word [esp + 5]
lea esi, [ebx + ebp]
mov eax, esp
jmp 0x635a48
not bp
sub edi, edx
and bx, si
btc bp, si
stc
bsf cx, dx
jmp 0x635a19
jmp 0x635a07
lea ebp, [ebx + ebp]
not bh
sete cl
mov eax, 0xbcdd17b5
mov ch, byte [esp + 2]
pop edi
jmp 0x635aa3
add esp, 0
neg edx
mov dl, 0x79
call fcn.00635a5c
pushfd
mov eax, dword [esp + 7]
lea esi, [ebx + ebx]
sub esp, 0xd
xor edx, eax
lea eax, [ecx - 0x34]
jmp 0x635ad8
pop edx
lea esp, [esp + 1]
call 0x635ae3
test dword [edx + reloc.MSVFW32.dll_DrawDibDraw], ecx
sbb byte [esi + 0xf], ah
mov esp, 0x1c483f1
jmp 0x635f78
cpuid
mov byte [esp], dl
lea ebp, [edi*4]
push dword [esp + 1]
push dword [esp + 4]
lea ebp, [ecx + 0xf5]
call fcn.00635b95
sub esp, 0x1c
pop word [esp + 8]
cld
popal
mov dword [esp], ecx
mov edx, 0xc492601c
jmp 0x635ce7
mov dl, 0x2b
pop word [esp + 1]
not eax
pop dx
mov eax, dword [esp]
pop dx
jmp 0x635cfa
std
mov dword [esp], eax
bsr edi, edi
cld
xchg bh, ch
lea ebp, [edi*4]
jmp 0x635cc6
mov ecx, ebp
mov edi, 0xde1f2316
bsf edx, ebp
cld
mov al, 0xb8
xchg bp, ax
jmp 0x635dc7
pop ecx
mov eax, 0x284a8ef6
setne dl
xchg cx, bx
lea ebx, [ecx + 0x73]
jmp 0x635d97
mov dx, word [esp]
setg cl
bswap ecx
call fcn.00635d5f
push dword [esp + 4]
mov cl, 0x11
bt edi, ebp
push dword [esp + 7]
dec dl
stc
jmp 0x635df2
mov ecx, esi
xchg bx, cx
cld
sub esp, 7
mov dword [esp], esi
xchg byte [esp + 2], al
jmp 0x635d0f
not edi
seto dh
xchg dword [esp + 1], ecx
neg cx
mov word [esp], bp
jmp 0x635e08
mov bp, bx
not dh
add esp, 6
push word [esp]
btr di, ax
xchg byte [esp + 3], ah
jmp 0x635ddc
xchg word [esp + 5], ax
mov esi, dword [esp]
adc si, si
call fcn.00635ee8
push ss
cdq
or dword [eax - 0x65], ebp
jp 0x635e97
mov ebx, 0x5cbcf408
lea esi, [esi + ebp]
call fcn.00635d25
mov cx, word [esp + 1]
mov byte [esp], bl
call fcn.00635e86
dec ebx
fisttp word [edi + 0x2a]
fld dword [0x83bcadb2]
les ecx, [ebx]
setle ah
sbb eax, 0xeda30de9
cmp bp, 0xa7a0
mov di, 0x30d7
cpuid
jmp 0x635e2c
je 0x635ebd
add dword [esi - 9], esp
fisub word [esi + 0xf]
mov esp, 0x241c87de
jmp 0x635f0e
jmp dword [esi - 0x42]
stc
pop bx
not di
mov bx, 0xe00
mov al, 0x6a
mov ah, al
jmp 0x635f4c
mov dh, byte [esp + 2]
or dh, 0xdd
mov cl, byte [esp + 2]
mov bp, word [esp + 3]
mov eax, 0x8b3e3356
mov dword [esp], ebp
jmp 0x635ef8
setae ah
mov dword [esp + 4], eax
lea eax, [edi*4]
bsf bx, sp
xchg di, bp
lea esp, [esp + 3]
jmp 0x635c78
mov word [esp], si
xor ebp, 0xae6726c3
mov di, word [esp + 1]
mov bh, byte [esp + 1]
mov ebx, 0x8fdaf434
bswap edx
jmp 0x635fb2
add esp, 0
rdtsc
pushfd
push dword [esp + 4]
rdtsc
not edx
jmp 0x635f2e
mov edx, 0xcc870f13
std
mov dword [esp], esp
mov dword [esp], edi
cld
lea edx, reloc.MSVFW32.dll_DrawDibDraw
jmp 0x635fd9
push esp
rcr bl, cl
mov ecx, edx
btc edi, esi
mov dx, word [esp + 4]
bswap ecx
jmp 0x635f88
lea esp, [esp + 1]
bsr bx, bp
cld
mov cx, 0xa3f1
jmp 0x636a78
mov ebp, dword [esp + 5]
mov byte [esp + 1], bh
add esp, 4
mov byte [esp], bl
lea esp, [esp]
mov ax, 0x54eb
jmp 0x635fc3
not bh
mov dword [esp + 3], ebx
mov dword [esp + 4], ebx
mov ch, 8
call fcn.00636006
mov word [esp + 3], ax
mov esi, 0xa367d82a
neg ebx
mov di, word [esp]
jmp 0x6360c7
mov cx, si
lea esp, [esp]
lea eax, [ecx + esi]
inc cx
xchg byte [esp], bh
sub esp, 0xc
jmp 0x63605e
xchg dl, dh
ror bx, 8
lea edi, [edi + 0x62]
call fcn.006360b1
lea esp, [esp + 1]
pop edi
mov ebp, 0x107585f3
lea ebx, [esp + eax]
cmp bx, 0x3feb
mov byte [esp], dh
jmp 0x636782
mov di, word [esp]
add esp, 0
mov cx, 0xf8a4
mov byte [esp], bl
lea edi, [esi + ebp]
rol dh, cl
jmp 0x63609e
shl dh, cl
cpuid
pop di
xchg byte [esp], ch
cmc
not dh
neg cl
mov eax, 0x2041da84
mov eax, edi
mov bx, word [esp]
mov byte [esp], al
jmp 0x6360fb
bsr di, bx
lea eax, [ecx + esi]
btc ecx, ebx
rdtsc
lea edx, [esi*4]
cpuid
jmp 0x6368ab
mov edx, 0x9ea238c9
mov ebx, dword [esp]
xchg edx, esi
lea esp, [esp]
inc bl
lea esi, [ebx + ebp]
jmp 0x636955