Function at 0x42a930
Capabilities:
Execute anti-debugging instructions

Disassembly:
pop word [esp]
jmp 0x45e8e0
add eax, 0x40d990f0
jmp 0x42a1d4
add eax, 0x4754147
jmp 0x42a0d8
bt edx, edi
neg al
jmp 0x429833
bsf edx, ecx
jne 0x4297f7
bt edx, edi
neg al
clc
not dx
jmp 0x429837
rdtsc
cmc
je 0x42983b
bsf dx, bp
jmp 0x42983f
clc
not dx
add bl, cl
jmp 0x42981d
bsf dx, bp
jmp 0x42988b
not dl
jmp 0x429868
movzx ebx, byte [ebp]
mov dh, byte [esp]
lea edx, [esp + 4]
not edx
jmp 0x42980d
push di
lea esp, [esp + 1]
setae dh
jmp 0x4299d8
mov al, bl
setg dh
neg edx
jl 0x429841
not dl
push di
lea esp, [esp + 1]
setae dh
not dh
jmp 0x4299da
push ebx
mov edx, dword [esp + 3]
jmp 0x4298c8
lea edx, [esi*4]
push ebx
mov edx, dword [esp + 3]
lea esp, [esp + 4]
dec al
jmp 0x4299ab
lea edx, reloc.mscoree.dll__CorExeMain
inc edx
jge 0x4298bc
lea edx, [esi*4]
jmp 0x4298a6
not dx
xor al, 0xc4
bsf edx, ebx
jl 0x429941
inc dx
pushfd
neg dx
mov dl, 0x41
adc dh, dh
jmp 0x42992c
mov dh, byte [esp]
setbe dh
jmp 0x4298f3
inc dx
pushfd
neg dx
jmp 0x429928
mov dl, 0x41
adc dh, dh
mov word [esp + 1], sp
jmp 0x429959
jmp 0x42991c
call 0x429973
arpl bp, bp
jge 0x429950
test dword [edx + 0x73], reloc.mscoree.dll__CorExeMain
insb byte es:[edi], dx
or eax, dword [esi]
mov ecx, 0xc341d64f
jp 0x4298e7
lea esp, [esp + 4]
and al, 4
xor al, 0xa4
mov edx, 0x80f3aaa8
btc edx, ebp
jle 0x429943
jg 0x4299e8
inc ebp
aad 0x45
sub al, 0xdf
sbb esp, eax
ja 0x429983
wait
ret 0x148d
jb 0x42999a
in al, 0x5b
test eax, 0xb7ba66c8
pop edi
mov edx, dword [esp]
mov dx, word [esp]
mov dh, al
mov dl, byte [esp]
jmp 0x429a31
xchg ebx, eax
add byte [eax], al
add byte [ecx - 0x11], bh
jg 0x4299bc
jmp 0x96432adc
neg dx
jg 0x429914
mov dh, byte [esp]
setbe dh
not dx
jmp 0x4298f6
shr cl, cl
xor al, 0xff
invalid
not dh
lea esp, [esp]
lea esp, [esp + 1]
add al, 0x1f
jmp 0x4298e1
mov dx, 0x5fb7
mov edx, dword [esp]
mov dx, word [esp]
jmp 0x4299f9
mov dh, al
mov dl, byte [esp]
jmp 0x429a31
lea esp, [esp + 0x1b]
jmp 0x429a6c
ror al, 0
sub esp, 0x1c
jne 0x429a1b
lea esp, [esp + 0x1b]
neg dh
mov edx, ebx
bsf dx, di
lea esp, [esp]
jmp 0x429a7d
neg dh
mov edx, ebx
bsf dx, di
jmp 0x429a7a
lea esp, [esp]
sub esp, 0xa
lea esp, [esp + 3]
jmp 0x429aac
add cl, al
jmp 0x429f53
xchg edx, eax
inc dx
bswap edx
inc ebp
mov eax, dword [esp]
mov edx, 0xf1c07987
mov dh, ah
jmp 0x429ee8
mov eax, esi
sub esp, 0xe
lea esp, [esp + 2]
jmp 0x429f02
not al
stc
jp 0x429ecf
mov eax, esi
jmp 0x429ef5
sub esp, 0xe
lea esp, [esp + 2]
jmp 0x429f02
lea esp, [esp + 0xc]
dec bl
mov dx, bx
mov eax, 0x44f56149
sbb dx, ax
jmp 0x429f21
bswap edx
jmp 0x429ab9
jae 0x429f37
jb 0x429f37
mov byte [0xa81fec85], dl
sbb al, byte [esi + 0x3f8e7314]
mov bh, 0x9e
jmp 0xe9054a40
call fcn.00429f74
ror bl, 0
jmp 0x429f5e
jle 0x429ab4
xchg edx, eax
inc dx
jmp 0x429f1a
not dx
mov dh, byte [esp]
xchg dx, ax
mov edx, 0x72110f38
setns al
jmp 0x42a03d
sete dh
bt ax, si
mov dx, 0x1552
jmp 0x429fe9
sete dh
bt ax, si
mov dx, 0x1552
inc edx
rdtsc
sub bl, 0xb5
mov ax, word [esp]
jmp 0x429fc5
not al
mov al, ch
mov edx, edi
lea eax, [ebx*4]
call 0x429fd1
cdq
sbb cl, byte [eax - 0x456e511]
shl byte [esi - 9], cl
ror byte [edi], 1
mov ebp, 0xf6de7ed5
shr bl, 1
xor esp, dword [esi - 0x46]
retf 0xebdb
not ax
bsr edx, ebp
jle 0x429fab
not al
jmp 0x42a004
inc edx
rdtsc
jmp 0x429fa2
mov al, ch
mov edx, edi
lea eax, [ebx*4]
jmp 0x429fb8
lea esp, [esp + 4]
sub bl, 0xfc
bsf dx, cx
jne 0x429f94
je 0x429f7e
pushal
lea esp, [esp + 3]
jmp 0x42ade5
sub esp, 0xa
jmp 0x42a138
jmp 0x42a0f4
lea esp, [esp + 2]
jmp 0x428e91
push ax
shr edx, cl
jns 0x42a0ad
sub esp, 0xa
jmp 0x42a0b0
mov dx, bx
mov edx, 0xa3b04884
mov dl, byte [esp]
mov edx, 0xc448de75
jmp 0x42a117
mov byte [esp + 2], ah
sub esp, 0xd
push dword [esp + 8]
jmp 0x42a0b7
sub esp, 7
jae 0x42a17a
jb 0x42a17a
cmp dword [ecx + reloc.mscoree.dll__CorExeMain], ebp
pop ecx
retf 0x3f58
mov esp, edi
mov dx, word [esp]
push cx
lea esp, [esp + 2]
jmp 0x42a101
mov edx, eax
lea edx, reloc.mscoree.dll__CorExeMain
mov eax, dword [edx]
sub esp, 0xd
jp 0x42a0b5
mov byte [esp + 2], ah
sub esp, 0xd
push dword [esp + 8]
lea esp, [esp + 2]
jmp 0x428e91
call fcn.0042a15f
neg dl
jnp 0x42a1ad
mov dx, 0x3987
mov edx, ebp
xchg edx, eax
dec dh
bts edx, ebx
jmp 0x42a1b5
xchg edx, eax
dec dh
bts edx, ebx
jmp 0x42a1b5
mov dx, 0x3987
mov edx, ebp
jmp 0x42a197
not eax
lea eax, [ebp*4]
setnp ah
mov al, 0x99
jmp 0x42a216
mov edx, ebx
jmp 0x42a0cd
neg dl
mov dx, sp
lea edx, reloc.mscoree.dll__CorExeMain
jmp 0x42a254
neg dl
mov dx, sp
lea edx, reloc.mscoree.dll__CorExeMain
not ax
xor bl, 0x72
mov dh, dl
neg eax
jle 0x42a23d
inc dx
lea eax, [esp + ebp]
jmp 0x42a26f
neg bl
lea edx, [esi*4]
shr dx, 6
jns 0x42a1f1
js 0x42a1db
inc dx
lea eax, [esp + ebp]
lea eax, reloc.mscoree.dll__CorExeMain
rdtsc
jmp 0x42a259
jmp 0x42a227
not ax
jmp 0x42a1ff
rol bl, 0
sub esp, 0xd
jp 0x42a2ba
lea edx, [ecx + edi]
pop word [esp + 3]
call fcn.0042a29f
xor ecx, dword [ebp + reloc.mscoree.dll__CorExeMain]
add byte [edi], cl
xor ebx, ebp
loopne 0x42a2e0
lea eax, reloc.mscoree.dll__CorExeMain
rdtsc
jmp 0x42a259
xchg dword [esp + 5], edx
bswap edx
lea esp, [esp + 3]
jmp 0x42a87b
pop word [esp + 3]
xchg word [esp + 5], dx
jmp 0x42a875
lea edx, [ecx + edi]
jmp 0x42a28f
push dword [esp + 2]
mov eax, edx
lea esp, [esp + 1]
xchg dword [esp + 0x14], ebx
jmp 0x42ace7
xchg dx, ax
jmp 0x42a2bf
jmp 0x428e49
jne 0x42a3aa
inc edx
call fcn.0042a2fb
ror dword [edi], cl
retf 0x49e8
mov al, pe_nt_image_headers32
btr edx, esp
jo 0x42a391
mov dh, 0xb5
call fcn.0042a3b0
retf 0xdd4d
mov dh, 0xb5
mov eax, 0x9dc99a63
jmp 0x42a3f2
inc edx
and ebx, 0x3c
jmp 0x42a36a
mov dh, byte [esp]
jmp 0x42a3d6
lea eax, [eax + eax]
bts dx, ax
jmp 0x42a40e
clc
jmp 0x42a700
sub esi, 4
or ah, 0xe9
jbe 0x42a3cd
mov dh, byte [esp]
lea eax, [eax + eax]
jmp 0x42a424
mov edx, dword [ebx + edi]
pushal
mov bl, ch
mov ah, dh
push word [esp + 0x1d]
jmp 0x42a452
bts dx, ax
jmp 0x42a40e
lea esp, [esp + 2]
jmp 0x42a5c2
js 0x42a42a
lea esp, [esp + 2]
jmp 0x42a5c2
mov al, byte [esp]
call fcn.0042b4dd
mov esp, 0x3051c150
ret
mov al, byte [esp]
jmp fcn.0042a4f4
mov dword [esi], edx
mov ax, word [esp]
neg dl
jo 0x42a45d
jno 0x42a56a
push ax
dec al
lea eax, [eax + ecx]
lea esp, [esp + 1]
push dword [esp + 0x18]
ret 0x1c
clc
dec bl
mov dh, 0x7c
mov al, bl
neg edx
jmp 0x42a323
not bl
mov eax, dword [esp]
lea edx, [esi*4]
shl eax, cl
jbe 0x42a6ff
ja 0x42a3ec
mov eax, 0x4e6f197f
lea esp, [esp + 2]
jmp 0x42a838
lea esp, [esp + 0x18]
xor dl, 0xc4
mov ah, byte [esp]
mov ax, 0x3dc9
jmp 0x42a855
cmp ah, 0xf7
ja 0x42ac78
jbe 0x42ac78
adc dword [ecx], reloc.mscoree.dll__CorExeMain
loopne 0x42a87c
rol dword [ebx], cl
xchg edx, eax
add byte [edi - 0x6e], ah
push ebx
xchg ebx, eax
or ah, byte [ebp - 0x35f0b82c]
bswap edx
lea esp, [esp + 3]
lea esp, [esp + 8]
and al, 8
jmp 0x42a7e3
bswap eax
mov eax, dword [esp]
jmp 0x42a8a8
mov eax, ebp
bswap eax
mov eax, dword [esp]
call fcn.0042a8cb
mov ah, 0x40
call 0x42a930
inc ebp
rdtsc
bts edx, esp
jg 0x42a8dc
rdtsc
bsf eax, ebp
bt dx, sp
jmp 0x42a920
jmp 0x42a917
ja 0x42a8b4
jbe 0x42a8b4
rdtsc
bsf eax, ebp
bt dx, sp
call fcn.0042a8de
mov dh, 0x2e
mov esp, 0xbf8236db
xchg byte [ecx], dh
xor byte [ebx], dh
bsf dx, bx
jmp 0x42a8fd
ror dl, 0
jae 0x42a8a1
mov eax, ebp
jmp 0x42a884
bswap eax
bswap eax
mov ax, 0x3add
jmp 0x42a989
jmp 0x42aa80
xor dl, 0xa4
sub esp, 0
jns 0x42aab0
bswap eax
bswap eax
mov ax, 0x3add
jmp 0x42a989
mov dh, byte [esp]
mov ax, 0x25a0
lea edx, [edi*4]
xchg dx, ax
push dword [esp + 0x14]
ret 0x18
shl eax, 2
lea edx, [eax + ebx]
shr dx, 5
jae 0x42a2f6
jb 0x428e49
lea eax, [edi*4]
mov ax, word [esp]
push ebx
mov ah, dh
push dword [esp + 4]
ret 8
bswap ebx
mov bx, 0x4701
lea ebx, reloc.mscoree.dll__CorExeMain
jmp 0x44c30b
mov ebx, dword [esp + 6]
lea esp, [esp + 3]
jmp 0x44c336
or eax, edi
jmp 0x44c357
mov bx, 0xa070
sub esp, 0
push ax
lea esp, [esp + 2]
jmp 0x44c362
mov ebx, dword [esp + 6]
lea esp, [esp + 3]
mov dword [esi], edx
lea ebx, [eax*4]
jmp 0x44c2eb
push ax
lea esp, [esp + 2]
jmp 0x44c362
jl 0x44c313
mov bx, 0xa070
sub esp, 0
jmp 0x44c341
lea ebx, [edi + 0x50]
neg edx
ja 0x44c3da
jbe 0x44c3da
rcl byte [ecx - 0x3f], 0xa0
push ebx
out dx, al
inc edx
rol byte [eax + 0x27], cl
rcl byte [eax], cl
ror dword [edx - 0x6e], cl
mov bh, 0x43
sub esp, 0xb
jae 0x44c32e
jb 0x44c301
mov eax, 0x668db20
jmp 0x44c3b9
mov eax, 0x668db20
bt bx, bx
lea esp, [esp + 3]
jmp 0x44c3c1
ja 0x429859
mov bl, al
sub esp, 0x17
jl 0x44c387
jge 0x44c393
bt bx, bx
lea esp, [esp + 3]
pushal
jmp 0x44c498
cmp esi, ebx
jmp 0x44c3aa
neg dx
mov bx, word [esp]
cmc
mov bx, 0x7bfe
jmp 0x44c404
mov dx, word [esp]
lea edx, [ebx + ebp]
popal
jmp 0x44c3de
mov bx, word [esp]
jmp 0x44c3e5
lea ebx, [edi + 0x40]
mov dl, 0xed
bsr dx, cx
jne 0x44c464
je 0x44c43b
inc edx
fmul dword [esi + 0x29]
fcomp dword [ebx]
lodsb al, byte [esi]
xor eax, 0x8c3fcca5
movsb byte es:[edi], byte [esi]
xlatb
or dword ds:[eax + reloc.mscoree.dll__CorExeMain], ebp
mov edx, dword [esp]
jmp 0x44c3f4
mov dx, word [esp]
jmp 0x44c43e
inc edx
jmp 0x44c465
lea edx, [esi - 0x80]
clc
jmp 0x44c476
sub esp, 4
call fcn.0044c481
sub byte [esi + 0x1be4324], dh
cmp ch, byte [ebx + 0x1ead5e3b]
push eax
int3
inc edx
sub ebx, eax
mov dx, word [esp]
lea edx, [eax*4]
bswap edx
jmp 0x44c425
jb 0x44c448
sub esp, 4
jmp 0x44c44b
mov ecx, dword [esp]
mov dl, byte [esp]
mov dword [esp + 0x1c], edi
mov dx, word [esp]
btc dx, bp
jo 0x44c423
mov dx, word [esp]
lea edx, [ebx + ebp]
popal
neg dx
jmp 0x44c3fe
lea esp, [esp + 2]
push ecx
jmp 0x45e960
cmc
jp 0x41a2e7
pop word [esp]
lea esp, [esp + 2]
call fcn.0045e8c7
inc edi
push word [esp]
xchg dword [esp + 0x28], ecx
call fcn.0045e959
mov ah, 0x2b
dec ecx
test eax, 0x5364eb94
sal edi, 1
dec esp
out dx, al
stc
fdivr dword [ebx]
mov ecx, esi
mov dword [ecx], ebx
pop ecx
mov bx, word [esp]
pushal
jmp 0x45f76f
mov bx, 0x3acb
jmp 0x44c30b
mov bx, 0x3acb
jmp 0x44c30b
mov dword [esi + 4], eax
xchg al, bl
ror bl, 2
jae 0x45f14b
jb 0x45ec05
cmp byte [ebx], bl
jb 0x45f7f4
dec ebx
dec ecx
mov edx, 0x670e47c8
ficom word [eax]
clc
rol byte [edi], 1
mov dword [reloc.mscoree.dll__CorExeMain], eax
sub ah, byte [edx - 0x3f]
into
jp 0x45f799
invalid
inc esi
test dl, 0x41
pop ebx
pop es
in al, dx
or eax, dword [esi + edi]
and eax, 0x3a789e7c
xchg esi, eax
shl dword [edi], cl
xsavec [edi + 0x16]
sbb al, 0x2a
int 0x76
in al, dx
in eax, 0x91
inc ebx
imul esp, edx, 0x67
mov esi, esp
test eax, 0x4b0eb25d
lahf
int 0xe2
xor byte [ecx], 0x63
jecxz 0x45f7e6
xchg ecx, eax
add byte [edi], 0
lodsb al, byte [esi]
pop edi
in eax, 0x49
mov byte [0x7560b7ff], al
imul ebx, dword [esi], reloc.mscoree.dll__CorExeMain
add ah, byte [edx + 0x609caa51]
stosb byte es:[edi], al
pushfd
pushal
mov cl, 0xb8
mov dl, 0x8f
cdq
sbb al, 0x5a
inc edx
nop
pop ds
inc ecx
sbb ebx, ebp
jmp 0xe6169a49