Function at 0x49384e
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ecx
cmp dword [0x4e5480], 0
push ebx
push esi
push edi
mov edi, edx
mov ebx, 0x4a9ff6
je 0x4938a9
cmp dword [0x4e52b8], 0
je 0x4938a9
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x493895
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0x53c
push ebx
push ecx
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
mov esi, dword [0x4e7b3c]
push dword [edi]
lea eax, [esi + 8]
push eax
call dword [0x4e5470]
push dword [edi + 4]
lea eax, [esi + 0xc]
push eax
call dword [0x4e5470]
lea eax, [esi + 4]
push 0xc32d
push eax
call dword [0x4e5470]
xor edi, edi
lea eax, [esi + 0x10]
push edi
push eax
call dword [0x4e5470]
push esi
call dword [0x4e5464]
cmp eax, 0xffffffff
jne 0x49398a
cmp dword [0x4e5480], edi
je 0x493a44
cmp dword [0x4e52b8], edi
je 0x493941
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x49392d
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0x557
push ebx
push ecx
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
cmp dword [0x4e5480], edi
je 0x493a44
cmp dword [0x4e52b8], edi
je 0x493a44
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x49397e
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0x558
push ebx
push ecx
jmp 0x493a37
and eax, 0xfffefff8
or eax, 0x38
push eax
push esi
call dword [0x4e5470]
jmp 0x4939a7
test eax, 0x10000
jne 0x493a4f
push esi
call dword [0x4e5464]
mov dword [ebp - 4], eax
cmp eax, 0xffffffff
jne 0x49399c
cmp dword [0x4e5480], edi
je 0x493a44
cmp dword [0x4e52b8], edi
je 0x4939ff
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x4939eb
xor edx, edx
div ecx
push 0x56b
push ebx
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
cmp dword [0x4e5480], edi
je 0x493a44
cmp dword [0x4e52b8], edi
je 0x493a44
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x493a30
xor edx, edx
div ecx
push 0x56c
push ebx
push eax
push 0x4a9654
call fcn.0048dfa4
add esp, 0x10
xor al, al
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push eax
push esi
call dword [0x4e5470]
mov ebx, edi
cmp edi, 3
jae 0x493aef
push 0x69
lea eax, [esi + 4]
push eax
call dword [0x4e5470]
mov eax, dword [ebp - 4]
and eax, 0xfffeffef
or eax, 0x20
push eax
push esi
call dword [0x4e5470]
push esi
call dword [0x4e5464]
mov dword [ebp - 4], eax
cmp eax, 0xffffffff
je 0x493f22
test eax, 0x10000
je 0x493a81
push eax
push esi
call dword [0x4e5470]
test byte [ebp - 4], 0x40
je 0x493aac
inc edi
jmp 0x493adf
lea eax, [esi + 4]
push eax
call dword [0x4e5464]
cmp eax, 0xffffffff
je 0x493e89
shr eax, 0x10
movzx eax, al
cmp eax, 0x5a
je 0x493adf
cmp eax, 0xc3
je 0x493adf
cmp eax, 0x1e
je 0x493e39
cmp eax, 0x4b
je 0x493b3a
inc ebx
cmp ebx, 0x3e8
jb 0x493a59
cmp edi, 3
jne 0x493fb6
cmp dword [0x4e5480], 0
je 0x493a44
cmp dword [0x4e52b8], 0
je 0x493a44
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x493b30
xor edx, edx
div ecx
push 0x5dd
jmp 0x493e79
push esi
call dword [0x4e5464]
mov dword [ebp - 4], eax
cmp eax, 0xffffffff
jne 0x493bee
cmp dword [0x4e5480], 0
je 0x493a44
cmp dword [0x4e52b8], 0
je 0x493ba0
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x493b88
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0x5eb
push 0x4a9ff6
push ecx
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
cmp dword [0x4e5480], 0
je 0x493a44
cmp dword [0x4e52b8], 0
je 0x493a44
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x493bdf
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0x5ec
push 0x4a9ff6
jmp 0x493984
mov edi, dword [ebp + 0xc]
and eax, 0xf
cmp eax, dword [edi]
jae 0x493bfa
mov dword [edi], eax
lea eax, [esi + 8]
push eax
call dword [0x4e5464]
mov dword [ebp + 0xc], eax
lea eax, [esi + 0xc]
push eax
call dword [0x4e5464]
mov ecx, dword [edi]
dec ecx
cmp ecx, 7
ja case.default.0x493c1c
mov edx, dword [ebp + 8]
jmp dword [ecx*4 + 0x493ffe]
mov ecx, eax
shr ecx, 0x18
mov byte [edx + 7], cl
mov ecx, eax
shr ecx, 0x10
mov byte [edx + 6], cl
mov ecx, eax
shr ecx, 8
mov byte [edx + 5], cl
mov byte [edx + 4], al
mov eax, dword [ebp + 0xc]
mov ecx, eax
shr ecx, 0x18
mov byte [edx + 3], cl
jmp 0x493c4e
mov eax, dword [ebp + 0xc]
mov ecx, eax
shr ecx, 0x10
mov byte [edx + 2], cl
jmp 0x493c5b
mov eax, dword [ebp + 0xc]
mov ecx, eax
shr ecx, 8
mov byte [edx + 1], cl
jmp 0x493c68
mov eax, dword [ebp + 0xc]
mov byte [edx], al
xor ebx, ebx
mov edi, ebx
cmp edi, 3
jae 0x493cfa
push 0x4be1
lea eax, [esi + 4]
push eax
call dword [0x4e5470]
mov eax, dword [ebp - 4]
and eax, 0xfffefff0
or eax, 0x30
push eax
push esi
call dword [0x4e5470]
push esi
call dword [0x4e5464]
mov dword [ebp - 4], eax
cmp eax, 0xffffffff
je 0x493d9d
test eax, 0x10000
je 0x493c99
push eax
push esi
call dword [0x4e5470]
mov eax, dword [ebp - 4]
test al, 0x40
je 0x493cc5
inc edi
jmp 0x493ced
lea eax, [esi + 4]
push eax
call dword [0x4e5464]
cmp eax, 0xffffffff
je 0x493d01
shr eax, 0x10
movzx eax, al
cmp eax, 0x5a
je 0x493ced
cmp eax, 0xd2
je 0x493cfa
cmp eax, 0x96
je 0x493cfa
inc ebx
cmp ebx, 0x3e8
jb 0x493c6e
mov al, 1
jmp 0x493a46
cmp dword [0x4e5480], 0
je 0x493a44
cmp dword [0x4e52b8], 0
je 0x493d54
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x493d3c
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0x64d
push 0x4a9ff6
push ecx
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
cmp dword [0x4e5480], 0
je 0x493a44
cmp dword [0x4e52b8], 0
je 0x493a44
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x493d93
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0x64e
jmp 0x493be4
cmp dword [0x4e5480], 0
je 0x493a44
cmp dword [0x4e52b8], 0
je 0x493df0
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x493dd8
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0x62d
push 0x4a9ff6
push ecx
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
cmp dword [0x4e5480], 0
je 0x493a44
cmp dword [0x4e52b8], 0
je 0x493a44
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x493e2f
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0x62e
jmp 0x493be4
cmp dword [0x4e5480], 0
je 0x493a44
cmp dword [0x4e52b8], 0
je 0x493a44
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x493e74
xor edx, edx
div ecx
push 0x5ce
push 0x4a9ff6
push eax
push 0x4a9642
jmp 0x493a3c
cmp dword [0x4e5480], 0
je 0x493a44
cmp dword [0x4e52b8], 0
je 0x493ed8
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x493ec0
xor edx, edx
div ecx
push 0x5c1
push 0x4a9ff6
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
cmp dword [0x4e5480], 0
je 0x493a44
cmp dword [0x4e52b8], 0
je 0x493a44
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x493f13
xor edx, edx
div ecx
push 0x5c2
push 0x4a9ff6
jmp 0x493a36
cmp dword [0x4e5480], 0
je 0x493a44
cmp dword [0x4e52b8], 0
je 0x493f71
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x493f59
xor edx, edx
div ecx
push 0x5a1
push 0x4a9ff6
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
cmp dword [0x4e5480], 0
je 0x493a44
cmp dword [0x4e52b8], 0
je 0x493a44
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x493fac
xor edx, edx
div ecx
push 0x5a2
jmp 0x493f18
cmp dword [0x4e5480], 0
je 0x493a44
cmp dword [0x4e52b8], 0
je 0x493a44
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x493ff1
xor edx, edx
div ecx
push 0x5e2
jmp 0x493e79