Function at 0x398634
Capabilities:
Execute anti-debugging instructions

Disassembly:
pushal
pushal
push ebx
pop ebx
push eax
push edx
rdtsc
pop edx
pop eax
pushal
popal
popal
push eax
push edx
push eax
push edx
rdtsc
pop edx
pop eax
pushal
popal
rdtsc
jmp 0x2d04e1
pop edx
pop eax
push ebx
jmp 0x2d04f2
push esi
pop esi
pop ebx
push edx
jg 0x2d04fc
pop edx
popal
sub esp, 4
mov dword [esp], esi
push esi
mov esi, esp
push edi
push edx
push 0x3e7f0a04
pop edx
dec edx
xor edx, 0x7fdc5769
inc edx
add edx, 0xbe5ca299
mov edi, edx
pop edx
add esi, edi
pop edi
sub esi, 4
xchg dword [esp], esi
pop esp
push esp
pop dword [esp]
add dword [esp], 4
mov esi, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push eax
mov eax, 0x76af4a98
and eax, 0x79b9bbd0
push esi
mov esi, 0x3dd9d121
neg esi
push eax
mov eax, 0x1ebf133f
or esi, eax
mov eax, dword [esp]
add esp, 4
xor esi, 0x6ffb4ca1
sub esi, 0x3cf26a75
neg esi
push edi
mov edi, 0x35b39094
neg edi
sub edi, 0x3defeda6
not edi
and edi, 0x473e544e
and edi, 0x7ea9db92
push ecx
mov ecx, 0xd8e49c83
add edi, ecx
pop ecx
sub esi, edi
pop edi
xor eax, esi
pop esi
add esi, eax
pop eax
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
push edx
push ecx
mov ecx, 0x561eea75
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], edi
mov dword [esp], 0x7db276c4
push eax
mov eax, 0x57ff7de2
add dword [esp + 4], eax
pop eax
push edi
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], esp
add dword [esp], 4
pop edi
push eax
push edi
mov edi, 0x3fff7ec2
mov eax, 0x494af006
xor eax, edi
pop edi
or eax, 0x6ebebcc7
shl eax, 8
shr eax, 3
add eax, 0x5fa963e1
shr eax, 2
push ecx
mov ecx, 0x3dddddbe
and eax, ecx
pop ecx
add eax, 0xe237b2d4
add edi, eax
pop eax
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
mov dword [esp], ebx
mov ebx, 0x91d04c4c
add dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], ecx
push 0x3324d640
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push 0x4412c8e0
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push edi
mov edi, esp
push edx
mov edx, 4
add edi, edx
pop edx
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
mov dword [esp], eax
mov eax, 0x7efc690e
shr eax, 2
xor eax, 0x1fbf1a47
sub ecx, eax
mov eax, dword [esp]
add esp, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], esi
push 4
push dword [esp]
pop esi
add esp, 4
add ebx, 0x56fb513b
sub ebx, esi
sub ebx, 0x56fb513b
pop esi
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], edx
push 0x70f75207
mov dword [esp], ebp
push eax
mov eax, 0x77402ef5
mov dword [esp + 4], eax
pop eax
mov dword [esp], ebx
mov dword [esp], 0x3cbf78a1
inc dword [esp]
add dword [esp], 0x474e1398
push 0x581e4a97
mov dword [esp], esi
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
push ecx
mov dword [esp], 0x5fdc15ef
mov dword [esp], esi
mov esi, 0x2ff5c4a6
add esi, 0x96d772a
push esi
add dword [esp], 0x5c7f6f60
pop eax
sub eax, 0x5c7f6f60
pop esi
push ecx
mov dword [esp], edi
mov edi, eax
mov esi, edi
pop edi
mov eax, dword [esp]
add esp, 4
or dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
add dword [esp], 0x599326cb
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ecx
sub esp, 4
mov dword [esp], edx
mov edx, 0x1fdd1ca6
mov dword [esp + 4], edx
pop edx
shr dword [esp], 6
and dword [esp], 0x17fe0bf5
add dword [esp], 0x2ddd9769
add dword [esp], 0x7e6f1a00
xchg dword [esp], esi
not esi
xchg dword [esp], esi
inc dword [esp]
shr dword [esp], 7
neg dword [esp]
push ecx
push esi
mov esi, 0x77bfa901
mov ecx, 0x9873c99b
add ecx, esi
pop esi
add dword [esp + 4], ecx
pop ecx
mov dword [esp], edx
mov dword [esp], ebp
mov dword [esp], eax
mov dword [esp], 0x57a17bef
push ebp
mov ebp, 0xad4cb8e4
add dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
mov dword [esp], ebx
mov dword [esp], eax
mov dword [esp], ebx
push 0x32b0e4ea
mov dword [esp], edx
mov dword [esp], 0x75ce9019
sub dword [esp], 0x7f735361
shl dword [esp], 5
neg dword [esp]
xor dword [esp], 0x2f22b045
mov dword [esp], ebp
mov dword [esp], 0x7ff7e666
add dword [esp], 0x2f375c8e
shr dword [esp], 1
not dword [esp]
xor dword [esp], 0xcf970bd7
not dword [esp]
inc dword [esp]
shr dword [esp], 2
sub dword [esp], 0xb608c0a5
xchg dword [esp], esi
not esi
xor dword [esp], esi
xor esi, dword [esp]
xor dword [esp], esi
push ebx
mov dword [esp], eax
mov eax, 0x677fb1fd
sub dword [esp + 4], 0x37dc8119
add dword [esp + 4], 0x75422700
sub dword [esp + 4], eax
sub dword [esp + 4], 0x75422700
push ebx
mov ebx, 0x37dc8119
add dword [esp + 8], ebx
pop ebx
pop eax
add dword [esp], 0x5feb9a47
push edx
mov edx, 0x7edb9686
add dword [esp + 4], 0x379f6fe3
sub dword [esp + 4], edx
push eax
mov eax, 0x379f6fe3
sub dword [esp + 8], eax
pop eax
pop edx
sub dword [esp], 0xd98dedbc
mov dword [esp], ebp
push ecx
mov dword [esp], eax
mov dword [esp], ecx
mov dword [esp], 0x7dbf77df
inc dword [esp]
push edx
push ebp
push edx
mov edx, 0x7ffd62b4
mov ebp, edx
pop edx
push ecx
push eax
mov eax, 0x4befa224
xor eax, 0x1b7f08a1
sub eax, 0x7abfc635
push ebx
mov dword [esp], edx
mov edx, 0x4f571cca
shl edx, 8
push ecx
mov ecx, 0x7bff8b90
shl ecx, 8
add ecx, 0x6bedf443
inc ecx
xor ecx, 0x8c643856
sub edx, ecx
mov ecx, dword [esp]
add esp, 4
and eax, edx
pop edx
add eax, 0xdadf4d1
mov ecx, eax
pop eax
sub ebp, 0x73f63a5b
sub ebp, ecx
add ebp, 0x73f63a5b
pop ecx
shr ebp, 6
sub ebp, 0x815ba166
mov edx, ebp
mov ebp, dword [esp]
add esp, 4
and dword [esp + 4], edx
pop edx
shl dword [esp], 6
push eax
mov eax, 0xd331d831
add dword [esp + 4], eax
pop eax
mov dword [esp], ebx
mov dword [esp], esi
sub esp, 4
mov dword [esp], edx
push eax
mov dword [esp], 0x5cc87a47
mov dword [esp], edx
mov dword [esp], eax
push ebx
push edi
mov dword [esp], 0x7fff34d0
pop ebx
add ebx, 0xff7fce30
push esi
push ebx
pop esi
mov eax, esi
pop esi
pop ebx
mov dword [esp + 4], eax
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push eax
mov dword [esp], 0x7f0bb425
mov dword [esp], ecx
mov ecx, 0x7779cd0a
xor dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], eax
mov dword [esp], edi
call fcn.002d09b2
push 0x172deacf
mov dword [esp], edx
mov dword [esp], eax
mov eax, 0x75ff6266
shr eax, 7
xor eax, 0x545f035b
inc eax
sub eax, 0x548c1e36
mov dword [esp + 4], eax
pop eax
push eax
mov dword [esp], 0x6fd9db70
xor dword [esp], 0x1ffb2d21
and dword [esp], 0x4fb76a17
push ebp
mov ebp, 0xc132b7fa
sub dword [esp + 4], ebp
pop ebp
shl dword [esp], 1
xor dword [esp], 0x7b573a00
add dword [esp], 0xe422ef75
mov dword [esp], eax
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], esi
mov dword [esp], 0x5f7bb86e
xor dword [esp], 0x439a243f
mov dword [esp], ebx
push dword [esp + 0x10]
push dword [esp]
pop eax
push edx
mov edx, esp
push ecx
mov ecx, 0x3d7b164b
dec ecx
add ecx, 0x5fdf4321
shl ecx, 2
or ecx, 0x7ec16c9f
xor ecx, 0x7fe96dbb
add edx, ecx
pop ecx
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp + 8]
mov ebx, dword [esp]
push edx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
mov ebx, dword [esp]
push esi
mov esi, esp
push ecx
mov ecx, 0x3de383d2
and ecx, 0x61df8f06
sub ecx, 0x21c382fe
add esi, ecx
mov ecx, dword [esp]
add esp, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push esi
mov dword [esp], edx
push ebx
push 0x7dfb6109
pop ebx
and ebx, 0x7dff1f13
neg ebx
neg ebx
xor ebx, 0x7dfb0105
mov edx, ebx
pop ebx
add ecx, edx
pop edx
xchg dword [esp], ecx
pop esp
jmp 0x2d04bd