Function at 0x641a6d
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x6419e0
add esp, 3
jnp 0x6419f6
lea eax, [esi*4]
mov ah, 0xba
jmp 0x641a23
lea eax, [esi*4]
mov ah, 0xba
jmp 0x642448
mov ax, word [esp]
lea eax, [edx + edi]
rol ah, 1
jnp 0x641ad6
lea eax, reloc.KERNEL32.dll_GetFileAttributesA
jmp 0x641a5e
mov ah, byte [esp]
lea esp, [esp + 1]
jmp 0x64244f
mov ax, word [esp]
mov ax, 0x88a4
jmp 0x641a66
stc
js 0x641a2f
mov ax, word [esp]
mov ax, 0x88a4
jmp 0x641a66
mov eax, 0x84952823
stc
jmp 0x641a98
dec edi
call 0x641a6d
xor al, cl
rcr byte [esi], cl
jmp 0x641ab5
push esp
lea edx, [edi*4]
mov dx, 0x7a1
mov dx, word [esp]
mov eax, 0x81be7acd
jmp 0x641cd8
mov eax, 0x84952823
stc
sub cl, dl
mov dl, byte [esp]
jmp 0x641a45
mov dx, 0x7a1
mov dx, word [esp]
mov eax, 0x81be7acd
jmp 0x641cd8
jae 0x641a76
push esp
lea edx, [edi*4]
jmp 0x641a9f
lea eax, reloc.KERNEL32.dll_GetFileAttributesA
jmp 0x641a92
dec bl
pushal
pop word [esp + 5]
mov al, dl
mov al, byte [esp + 0x13]
jmp 0x641b02
rol bl, 0
setg dh
mov edx, esp
mov dl, 0x58
mov eax, ebp
jmp 0x641ade
and ax, dx
je 0x641b2f
lea esp, [esp + 2]
jmp 0x641b33
xor bl, 0x80
mov edx, dword [esp]
rdtsc
lea eax, [esp + ebp]
mov dx, word [esp]
inc dh
jmp 0x641c67
jle 0x641b5b
xchg al, dl
bswap edx
jmp 0x641b5f
lea esp, [esp + 2]
lea esp, [esp + 0x1c]
jmp 0x641b0d
dec bl
stc
jmp 0x641b8b
rdtsc
bswap edx
jmp 0x641b61
xchg al, dl
bswap edx
jmp 0x641af4
mov edx, ebx
cmp ah, ch
jmp 0x641ba9
mov ax, si
mov eax, ebp
lea eax, [eax - 0x72]
shl edx, 2
call fcn.00641c31
add ecx, 0xb4d3b627
jmp 0x6436ca
jge 0x641b42
rdtsc
bswap edx
jmp 0x641b61
lea eax, [eax - 0x72]
jmp 0x641b73
add ecx, 0xbe11c086
jmp 0x6434b1
jl 0x641b6b
mov ax, si
mov eax, ebp
jmp 0x641b93
je 0x641b39
jne 0x641b39
lea edx, [eax + eax]
add bl, 0x56
bswap eax
xchg dh, dl
btr edx, ebp
jmp 0x641b27
mov ah, byte [esp]
lea esp, [esp + 1]
lea esp, [esp + 8]
xor dl, 0xf0
jmp 0x641a06
shr eax, cl
jmp 0x6434ff
call 0x6434d6
jl 0x6434bb
add byte [eax], al
add byte [ebx + edi*8 + 0x6b], bh
push cs
std
imul ecx, dword [esi], reloc.KERNEL32.dll_GetFileAttributesA
cmp eax, 0x1572dc52
in al, 0x54
movsb byte es:[edi], byte [esi]
sub dword [ecx - reloc.KERNEL32.dll_GetFileAttributesA], edi
jmp 0x641b98
je 0x6434b9
jne 0x6434b9
clc
jmp 0x64351a
push ecx
ret
mov ah, byte [esp]
stc
jle 0x6434d1
jg 0x641b98
dec eax
jno 0x6435d7
lea eax, [ebx*4]
inc ch
mov al, 0xca
jmp 0x6435f8
mov al, 0xca
jmp 0x6435f8
lea eax, [ebx*4]
inc ch
jmp 0x6435c1
mov cx, 0x3c1
setnp cl
lea esp, [esp + 0xb]
add esp, 2
jmp 0x64362e
not dl
mov cx, 0xb29c
mov cx, word [esp]
not cl
sub esp, 0xf
jmp 0x643623
lea esp, [esp + 0xb]
add esp, 2
lea esp, [esp + 2]
jmp 0x643632
js 0x6435e2
mov cx, 0x3c1
setnp cl
jmp 0x643609
lea esp, [esp + 2]
xor dl, 0x28
lea ecx, [esp + 0x2b]
lea ecx, [ebx*4]
jmp 0x64368c
mov al, 0x78
mov eax, ecx
lea eax, reloc.KERNEL32.dll_GetFileAttributesA
mov ecx, dword [eax]
jmp 0x64358c
and edx, 0x3c
inc ax
jmp 0x64371e
xor ax, 0x6a32
mov ax, 0x6599
call fcn.006436d6
mov edx, dword [reloc.KERNEL32.dll_GetFileAttributesA]
sbb eax, dword [esi + 0x318e7314]
mov bh, 0x9e
jmp 0x101431d
lea ecx, [ebx*4]
mov al, 0xd0
sub dl, 0xd1
xchg ah, cl
lea eax, [eax*4]
call fcn.00643663
xchg cx, ax
lea esp, [esp + 4]
dec dl
mov al, byte [esp]
not ax
jmp 0x643665
mov ax, word [esp]
mov eax, dword [esp]
jmp 0x643652
jae 0x643670
xor ax, 0x6a32
mov ax, 0x6599
call 0x643749
mov ecx, 0x24648d98
add dword [edi + reloc.KERNEL32.dll_GetFileAttributesA], eax
cwde
shl dword [esi + 0x54], 0x83
les eax, [eax]
jmp 0x6437db
add esp, 1
dec cl
lea esp, [esp + 1]
lea eax, [eax - 0x45]
mov ecx, dword [esp]
lea ecx, [eax*4]
call fcn.00643794
mov dword [esi], eax
bsf eax, edi
jnp 0x643820
bswap edx
mov dl, byte [esp]
neg cx
jmp 0x643877
bswap edx
jmp 0x643828
mov dl, byte [esp]
neg cx
jmp 0x643877