Function at 0x3d2f7f
Capabilities:
Execute anti-debugging instructions

Disassembly:
pushal
jle 0x334ec5
jbe 0x334ec5
pushal
push ebx
pop ebx
push eax
pop eax
jmp 0x334ed5
pushal
popal
popal
push eax
push edx
jmp 0x334ef3
push eax
push edx
rdtsc
pop edx
pop eax
rdtsc
jg 0x334f01
jmp 0x334f19
pop edx
pop eax
popal
jmp 0x334f34
push ebp
mov dword [esp], esi
push 0x55335d3c
mov dword [esp], esp
add dword [esp], 4
pop esi
sub esp, 4
mov dword [esp], edi
push 0x7238ddde
mov dword [esp], eax
push ebx
mov ebx, 0x7bde71c7
mov eax, ebx
pop ebx
push eax
xor dword [esp], 0x7bbf43a3
pop edi
xor edi, 0x7bbf43a3
pop eax
or edi, 0x7f570e51
push ebp
push 0x11f5f482
mov dword [esp], ebx
push ebp
mov ebp, 0x7f6f8107
mov ebx, ebp
pop ebp
shr ebx, 6
add ebx, 0x7e22c229
mov ebp, ebx
pop ebx
sub edi, 0x5ebf3109
push ebp
mov ebp, 0x2ffe7448
shl ebp, 5
add ebp, 0x7f7f63c5
sub ebp, 0xd502d94
not ebp
add ebp, 0xedfd4392
add edi, ebp
pop ebp
add edi, ebp
sub edi, 0x7bff8460
add edi, 0x5ebf3109
mov ebp, dword [esp]
add esp, 4
add esi, edi
pop edi
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
mov dword [esp], eax
push 0x55c7dae1
mov dword [esp], edi
mov dword [esp], ebp
mov dword [esp], 0x5a7ac12a
shl dword [esp], 1
sub dword [esp], 0x4fff5201
push ecx
mov ecx, 0x7ff5c446
xor dword [esp + 4], ecx
pop ecx
add dword [esp], 0x7eff6c16
or dword [esp], 0x79bdbf7c
xor dword [esp], 0x8410a497
xor dword [esp], 0x79cb22f2
dec dword [esp]
and dword [esp], 0x6ff3e6be
dec dword [esp]
add dword [esp], 0x36773810
shl dword [esp], 6
shl dword [esp], 4
xor dword [esp], 0x1ed76bd4
push 0x675ca36c
mov dword [esp], edx
mov edx, 0x7e772004
and dword [esp + 4], edx
pop edx
xchg dword [esp], ebx
xchg ebx, esi
not esi
push ebx
push esi
pop ebx
pop esi
xchg dword [esp], ebx
inc dword [esp]
push eax
mov eax, 0x494ab0a5
sub dword [esp + 4], eax
pop eax
xor dword [esp], edx
xor edx, dword [esp]
xor dword [esp], edx
not edx
xchg dword [esp], edx
push ecx
mov ecx, 0x5def77d1
or dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
sub dword [esp], 0x7e7d1f5e
sub dword [esp], 0x33475867
mov dword [esp], ecx
push 0x3aad3749
mov dword [esp], esi
mov dword [esp], edi
push esp
pop edi
add edi, 4
push eax
mov dword [esp], edx
mov edx, 4
push ecx
mov dword [esp], eax
push ecx
push eax
mov eax, 0x7fb17200
and eax, 0x1f8ff7d8
push ebp
mov ebp, 0xb609d33a
sub eax, ebp
pop ebp
mov ecx, eax
pop eax
sub ecx, 0x31ca41f2
mov eax, ecx
mov ecx, dword [esp]
add esp, 4
sub edi, eax
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add edi, 0x6ff5b025
sub edi, edx
sub edi, 0x6ff5b025
add edi, 0x37ad5cd4
mov edx, dword [esp]
add esp, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
sub esp, 4
mov dword [esp], edx
mov dword [esp], 0x6359fdbb
or dword [esp], 0x7beffae4
inc dword [esp]
shr dword [esp], 5
push eax
mov dword [esp], 0x1ecb6778
mov dword [esp], ebp
mov ebp, 0x7ae56078
xor dword [esp + 4], ebp
pop ebp
and dword [esp], 0x6f6d4d00
push eax
push ebx
mov ebx, 0x7f8625ee
and ebx, 0x7fc76f10
push ebp
mov dword [esp], ecx
mov ecx, 0x45d75a45
dec ecx
sub ecx, 0xae641219
xor ebx, ecx
push dword [esp]
pop ecx
add esp, 4
sub esp, 4
mov dword [esp], ecx
mov ecx, ebx
mov eax, ecx
pop ecx
pop ebx
sub esp, 4
mov dword [esp], edi
mov edi, 0x7bfbf300
sub dword [esp + 8], edi
pop edi
add dword [esp + 4], eax
push eax
push ecx
mov ecx, 0x7bfbf300
mov eax, ecx
pop ecx
add dword [esp + 8], eax
pop eax
pop eax
mov dword [esp], ebx
push 0x692ec123
mov dword [esp], ecx
mov dword [esp], 0x77fbdfb0
dec dword [esp]
inc dword [esp]
neg dword [esp]
xor dword [esp], 0x5faba130
sub dword [esp], 0x7fb7cf00
sub dword [esp], 0x326a46ec
mov dword [esp], ebp
sub esp, 4
mov dword [esp], ebx
push ecx
mov ecx, 0x4d6e24b0
mov ebx, ecx
pop ecx
mov dword [esp + 4], ebx
push dword [esp]
pop ebx
add esp, 4
xchg dword [esp], esi
not esi
xchg dword [esp], esi
push esi
mov esi, 0xcdda2e4f
xor dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
shl dword [esp], 8
sub dword [esp], 0x5def7642
push ebp
push edx
mov edx, 0x7fd3ee39
mov ebp, 0xe7d7e0c
sub ebp, 0x62f74b63
add ebp, edx
add ebp, 0x62f74b63
mov edx, dword [esp]
add esp, 4
xor dword [esp + 4], ebp
pop ebp
mov dword [esp], ebx
push edx
mov dword [esp], ebx
push 0x62477452
mov dword [esp], ebx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
mov ebx, dword [esp]
add esp, 4
add ebx, 4
push eax
mov eax, 0x6edb8242
sub eax, 0x7b5f3112
xor eax, 0xd8033b4c
inc eax
sub eax, 0x2b7f6a79
add ebx, 0x1b7f455d
sub ebx, eax
sub ebx, 0x1b7f455d
pop eax
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
push edx
mov edx, 0x782a2fba
mov eax, edx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], edx
mov dword [esp], 0x7b5356c1
add dword [esp], 0xadaf9b59
mov dword [esp], ebp
push 0x820d120
mov dword [esp], esi
push esp
mov esi, dword [esp]
add esp, 4
push edi
push ecx
push 0x7ca7a961
pop ecx
add ecx, 1
push eax
mov eax, 0x5bfbc123
sub ecx, eax
pop eax
sub ecx, 0x20abe83b
mov edi, ecx
pop ecx
push ebx
mov ebx, 0x7f8f1b05
sub ebx, 0x267643a
sub esi, ebx
pop ebx
sub esi, 0x7fbd5a75
add esi, edi
add esi, 0x7fbd5a75
add esi, 0x7d27b6cb
pop edi
push 0x795c2633
mov dword [esp], ecx
mov ecx, 4
sub esi, ecx
pop ecx
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
mov dword [esp], eax
mov dword [esp], ebp
mov dword [esp], ecx
mov dword [esp], ebp
mov dword [esp], esi
push ecx
mov ecx, esp
push ebx
sub esp, 4
mov dword [esp], edx
mov edx, 4
mov ebx, edx
mov edx, dword [esp]
add esp, 4
add ecx, ebx
mov ebx, dword [esp]
push ecx
mov ecx, esp
push edi
mov edi, 0x4bf79df8
push esi
push eax
push 0x3feedc5c
pop eax
push esi
mov esi, 0x5fd65624
dec esi
add esi, 0x1442eb7d
xor eax, esi
mov esi, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov esi, eax
pop eax
xor edi, esi
pop esi
add ecx, edi
pop edi
add ecx, 4
xchg dword [esp], ecx
pop esp
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x37275a69
add ebp, 0xc8d8a59b
sub ecx, ebp
mov ebp, dword [esp]
add esp, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], edi
call fcn.00335404
pop eax
pushal
push eax
push edx
rdtsc
pop edx
pop eax
jmp 0x3d2e36
push eax
push edx
rdtsc
pop edx
pop eax
jne 0x3d2e42
popal
pop edx
pop eax
pushfd
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], esi
mov dword [esp], 0x7ff6a55
sub dword [esp], 0x8824215d
xor dword [esp], 0x37ab9442
shr dword [esp], 1
add dword [esp], 0x5f9f3ae0
sub dword [esp], 0x83d7a916
push 0x60145ce7
mov dword [esp], edi
mov dword [esp], 0x1dfb44dd
shr dword [esp], 3
and dword [esp], 0x7bcdec91
or dword [esp], 0x7af73984
shl dword [esp], 2
neg dword [esp]
xor dword [esp], 0x6ffd4ad7
shr dword [esp], 6
push esi
mov esi, 0x3ffa1e2d
add dword [esp + 4], esi
pop esi
shr dword [esp], 6
sub dword [esp], 0xdfe469
push 0x666ca9e3
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], esi
mov dword [esp], eax
push 0x1428056b
mov dword [esp], ebp
push edi
mov edi, 0x4fe72c10
mov dword [esp + 4], edi
pop edi
xor dword [esp], 0x705a64b6
mov dword [esp], ebx
push dword [esp + 0x10]
mov eax, dword [esp]
push 0x1baaf402
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push dword [esp + 8]
push dword [esp]
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
push dword [esp]
pop ebx
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 4
add edi, 0x51c73ab9
add edi, edx
sub edi, 0x51c73ab9
pop edx
xchg dword [esp], edi
pop esp
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebp
mov ebp, esp
push edx
mov edx, 0x1ebf99bd
sub edx, 0x1ebf99b9
add ebp, edx
pop edx
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x334eb8