Function at 0x47e884
Capabilities:
Execute anti-debugging instructions

Disassembly:
call fcn.0047e772
add esp, 8
sub eax, dword [esp]
je 0x47e78c
jne 0x47e78c
jmp 0x47e78e
jmp 0x47e78f
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47e7a6
add esp, 4
call 0x47e7a1
call 0x47f487
call 0x47e797
call 0x47e798
add esp, 8
cmp eax, 0xfff
jmp 0x47e7b1
jmp 0x47e7b5
jmp 0x47e7b8
jbe 0x47e7d5
jmp 0x47e7bd
jmp 0x47e7c1
jmp 0x47e7c4
int3
je 0x47e7db
jne 0x47e7db
jmp 0x47e7dd
jmp 0x47e7de
sub eax, 0xa
call 0x47e7ed
call 0x47f4d3
call 0x47e7e3
call 0x47e7e4
add esp, 8
je 0x47e7fb
jne 0x47e7fb
jmp 0x47e7fd
jmp 0x47e7fe
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47e812
call 0x47f4f8
call 0x47e808
call 0x47e809
add esp, 8
sub eax, dword [esp]
je 0x47e823
jne 0x47e823
jmp 0x47e825
jmp 0x47e826
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47e83d
add esp, 4
call 0x47e838
call 0x47f51e
call 0x47e82e
call 0x47e82f
add esp, 8
cmp eax, 0xfff
jmp 0x47e848
jmp 0x47e84c
jmp 0x47e84f
jbe 0x47e86c
jmp 0x47e854
jmp 0x47e858
jmp 0x47e85b
int3
je 0x47e872
jne 0x47e872
jmp 0x47e874
jmp 0x47e875
sub eax, 0xa
call 0x47e884
call 0x47f56a
call 0x47e87a
call 0x47e87b
add esp, 8
je 0x47e892
jne 0x47e892
jmp 0x47e894
jmp 0x47e895
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47e8a9
call fcn.0047f58f
call 0x47e89f
call 0x47e8a0
add esp, 8
sub eax, dword [esp]
je 0x47e8ba
jne 0x47e8ba
jmp 0x47e8bc
jmp 0x47e8bd
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47e8d4
add esp, 4
call 0x47e8cf
call 0x47f5b5
call 0x47e8c5
call 0x47e8c6
add esp, 8
cmp eax, 0xfff
jmp 0x47e8df
jmp 0x47e8e3
jmp 0x47e8e6
jbe 0x47e903
jmp 0x47e8eb
jmp 0x47e8ef
jmp 0x47e8f2
int3
je 0x47e909
jne 0x47e909
jmp 0x47e90b
jmp 0x47e90c
sub eax, 0xa
call 0x47e91b
call 0x47f601
call 0x47e911
call 0x47e912
add esp, 8
je 0x47e929
jne 0x47e929
jmp 0x47e92b
jmp 0x47e92c
or dword [edi], 0x310f5031
rdtsc
push eax
rdtsc
call 0x47e940
call fcn.0047f626
call 0x47e936
call 0x47e937
add esp, 8
sub eax, dword [esp]
je 0x47e951
jne 0x47e951
jmp 0x47e953
jmp 0x47e954
add dword [ebx + 0xae804c4], 0xe8000000
jmp 0x47e96b
add esp, 4
call 0x47e966
call 0x47f64c
call 0x47e95c
call 0x47e95d
add esp, 8
cmp eax, 0xfff
jmp 0x47e976
jmp 0x47e97a
jmp 0x47e97d
jbe 0x47e99a
jmp 0x47e982
jmp 0x47e986
jmp 0x47e989
int3
mov ebx, dword [esp + 0x20]
mov bx, 0
cmp word [ebx], 0x5a4d
je 0x47e9b1
sub ebx, 0x10000
jmp 0x47e9a2
mov edi, ebx
add edi, dword [ebx + 0x3c]
add edi, 0x78
mov edi, dword [edi]
add edi, ebx
push edi
add edi, 0x20
mov edi, dword [edi]
add edi, ebx
xor eax, eax
inc eax
mov ecx, dword [edi]
add ecx, ebx
add edi, 4
cmp dword [ecx], 0x50746547
jne 0x47e9c7
cmp dword [ecx + 4], 0x41636f72
jne 0x47e9c7
imul eax, eax, 2
pop edi
push edi
add edi, 0x24
mov edi, dword [edi]
add edi, ebx
add edi, eax
mov ax, word [edi]
imul eax, eax, 4
pop edi
add edi, 0x1c
mov edi, dword [edi]
add edi, ebx
add edi, eax
mov edi, dword [edi - 4]
add edi, ebx
jmp 0x47ea18
call 0x47ea1d
sub dword [esp], 0x18
push ebx
call edi
jmp 0x47ea2b
call 0x47ea30
sub dword [esp], 0xa
call eax
jmp 0x47ea49
call 0x47ea4e
sub dword [esp], 0x16
push ebx
call edi
push eax
jmp 0x47ea69
call 0x47ea6e
sub dword [esp], 0x16
push ebx
call edi
sub dword [esp], eax
pop eax
imul eax, ebx
imul eax, edi
push eax
add dword [esp], 0xe
call 0x47ea89
pop eax
add dword [esp], eax
jmp dword [esp]