Function at 0x3065a1
Capabilities:
Execute anti-debugging instructions

Disassembly:
pushal
push eax
push edx
push eax
push edx
rdtsc
pop edx
pop eax
rdtsc
pushal
popal
push ebx
pop ebx
pop edx
pop eax
pushal
jno 0x25549d
jmp 0x2554ae
popal
popal
push ebx
push esi
mov dword [esp], esp
push ecx
mov ecx, 4
add dword [esp + 4], ecx
pop ecx
pop ebx
sub esp, 4
mov dword [esp], edx
mov edx, 4
add ebx, edx
pop edx
sub ebx, 4
push ebx
push dword [esp + 4]
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push ebx
mov ebx, esp
push edx
mov edx, 4
add ebx, 0x7afc551f
add ebx, edx
sub ebx, 0x7afc551f
pop edx
push esi
mov esi, 4
add ebx, esi
mov esi, dword [esp]
add esp, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ebp
push 0x130ce1b5
mov dword [esp], ecx
push edi
mov edi, 0x5eff8ea9
mov ecx, 0xd6bd512
add ecx, edi
pop edi
add ecx, 0x3dbd38b0
sub ecx, 0xffffffff
xor ecx, 0x7ffd9bf3
add ecx, 0x5b7dde50
add ecx, 0x651bd19a
sub ecx, 0x27381066
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
shr dword [esp], 2
add dword [esp], 0x4ff7b408
dec dword [esp]
inc dword [esp]
push ebp
mov ebp, 0xffcd90e1
sub dword [esp + 4], ebp
pop ebp
not dword [esp]
xchg dword [esp], edx
dec edx
xor dword [esp], edx
xor edx, dword [esp]
xor dword [esp], edx
push edx
push 0x63bff20b
pop edx
push ecx
mov ecx, 0x6a3e58f0
and ecx, 0x7ffd8d04
or ecx, 0x76f76cb2
xor ecx, 0x7fcb4073
sub ecx, 0x94657560
sub edx, ecx
pop ecx
neg edx
add edx, 0xb8f7df08
xor dword [esp + 4], edx
pop edx
mov dword [esp], ecx
push eax
mov eax, esp
add eax, 4
sub eax, 4
push eax
push dword [esp + 4]
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], esi
mov dword [esp], 0x571fab11
not dword [esp]
inc dword [esp]
push 0x74dd03e5
mov dword [esp], ebx
push edx
mov dword [esp], ebp
mov ebp, 0x76dff32a
xor ebp, 0xba5b02a
mov ebx, ebp
pop ebp
sub dword [esp + 4], ebx
pop ebx
shr dword [esp], 5
push edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
mov eax, 0x5ecb328e
add dword [esp + 4], eax
mov eax, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
push edi
push esp
pop edi
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
mov eax, esp
add eax, 4
push ebx
push 0x21943559
mov dword [esp], esi
mov esi, 0x3e364d00
mov ebx, esi
pop esi
xor ebx, 0x3e364d04
add eax, 0x774f6cbb
push ecx
mov ecx, 0x6979d05c
and ecx, 0x1f6bc712
shr ecx, 6
neg ecx
push edi
mov edi, 0x77dfd452
add ecx, edi
pop edi
add ecx, 0xc0313d6b
add eax, ecx
pop ecx
sub eax, ebx
sub eax, 0x37eb6abd
push esi
mov dword [esp], ecx
mov ecx, 0x7c692343
push ebx
mov dword [esp], eax
mov eax, 0x5bffe799
shl eax, 3
shr eax, 3
not eax
and eax, 0x71e16fe
inc eax
add eax, 0x6bda23a9
and ecx, eax
pop eax
dec ecx
sub ecx, 0x779fa7e8
add ecx, 0x5bdb168a
push ebp
mov ebp, 0x77ef1653
neg ebp
add ebp, 0x9fbbf86d
xor ecx, ebp
pop ebp
sub eax, ecx
pop ecx
pop ebx
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], eax
mov dword [esp], ebx
push esi
mov esi, esp
add esi, 4
push eax
mov eax, 0x5befc554
or eax, 0x1d3b5a9c
sub eax, 0xea024ed5
shr eax, 2
and eax, 0x5feff771
inc eax
shl eax, 8
sub eax, 0x6f6441fc
sub esi, 0x3fff0eba
sub esi, eax
add esi, 0x3fff0eba
pop eax
xchg dword [esp], esi
pop esp
mov dword [esp], edx
mov dword [esp], ebp
mov dword [esp], ebx
mov ebx, esp
push ecx
mov ecx, 4
add ebx, ecx
pop ecx
push edi
push esi
mov dword [esp], edi
mov dword [esp], edx
mov edx, 4
mov edi, edx
pop edx
push esi
mov esi, 0x3e871c3d
push eax
mov eax, 0x3fd79a24
sub ebx, eax
pop eax
add ebx, esi
add ebx, 0x3fd79a24
pop esi
sub ebx, edi
sub ebx, 0x3e871c3d
pop edi
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ebx
push edx
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edi
mov dword [esp], 0x748f3ae4
push esp
pop dword [esp]
push edx
mov edx, 4
sub dword [esp + 4], 0x6d984c1d
add dword [esp + 4], edx
add dword [esp + 4], 0x6d984c1d
pop edx
mov ebx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], esi
mov esi, 4
add ebx, esi
pop esi
push ebx
mov dword [esp], eax
push ecx
mov ecx, 4
mov eax, ecx
pop ecx
sub ebx, eax
pop eax
push edx
mov dword [esp], ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], ebp
push esi
push esp
pop esi
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edi
push esp
pop edi
push ecx
mov ecx, 0x37f78e9b
sub ecx, 0x37f78e97
add edi, ecx
mov ecx, dword [esp]
add esp, 4
push ebp
push edi
mov edi, 0x3fbffe46
or edi, 0x3eff3e51
push eax
mov eax, 0x64f2b5c4
shr eax, 1
dec eax
shl eax, 5
add eax, 0x77fd287c
xor eax, 0xf1c1672e
sub edi, eax
pop eax
shl edi, 6
push eax
mov eax, 0x7b4fd177
sub eax, 0xc0d67ab3
add edi, eax
pop eax
mov ebp, edi
pop edi
add edi, 0x6effa063
sub edi, ebp
push ebp
mov ebp, 0x5a5f7756
sub ebp, 0xeb5fd6f3
sub edi, ebp
pop ebp
mov ebp, dword [esp]
add esp, 4
push ebx
mov dword [esp], 0x1e031188
mov dword [esp], edi
push dword [esp + 4]
mov edi, dword [esp]
add esp, 4
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], esi
sub esp, 4
mov dword [esp], edi
mov dword [esp], 0x7ef74532
push ecx
mov dword [esp], 0x220aa425
mov dword [esp], edx
push ebp
push 0x3fdb1b42
pop ebp
and ebp, 0x7dbad87a
sub ebp, 1
and ebp, 0x3fe56ad3
add ebp, 0xc27ff7c0
push esi
mov esi, ebp
mov edx, esi
pop esi
pop ebp
add dword [esp + 4], edx
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push ebx
mov ebx, 0x7bb1bc0f
add dword [esp + 4], ebx
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
push edx
mov dword [esp], eax
mov eax, 0xcb47b672
xor dword [esp + 4], eax
pop eax
mov dword [esp], edi
call fcn.00255963
add byte [eax], al
add byte [esi + 0x22], bl
mov al, byte [eax - 0x3fb9c02c]
sbb al, byte [ecx + 0x6f]
push esi
movsb byte es:[edi], byte [esi]
stosb byte es:[edi], al
add bl, ch
popal
push edx
pushal
pushal
popal
push edx
pop edx
jmp 0x3064cc
popal
jno 0x3064d9
jle 0x3064d9
pop edx
pushfd
push eax
mov dword [esp], ecx
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x57f1e370
inc ebp
shl ebp, 8
neg ebp
add ebp, 0xf1e371a9
mov dword [esp + 4], ebp
pop ebp
push eax
mov dword [esp], 0x3ff76a41
sub dword [esp], 0xbff9e659
sub dword [esp], 0x23be4f3b
not dword [esp]
inc dword [esp]
push edx
mov edx, 0x6fdd343a
sub dword [esp + 4], edx
pop edx
neg dword [esp]
sub dword [esp], 0xcbf35a04
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ebp
mov dword [esp], 0x559677bb
mov dword [esp], ebp
mov dword [esp], eax
push eax
mov dword [esp], edx
mov dword [esp], 0x7b318f8
and dword [esp], 0x7ef6ae11
shl dword [esp], 1
sub dword [esp], 0x6ffff2e3
push ebp
mov ebp, 0x72c31cf2
sub dword [esp + 4], ebp
pop ebp
mov dword [esp], ebx
push dword [esp + 0x10]
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [esp + 8]
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
push esi
mov esi, 4
add ebx, esi
pop esi
add ebx, 4
xchg dword [esp], ebx
pop esp
mov eax, dword [esp]
push ecx
push esp
pop ecx
push edi
mov edi, 4
add ecx, edi
pop edi
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0x255485