Function at 0x494d74
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc
cmp dword [0x4e5480], 0
push ebx
push esi
mov esi, ecx
mov dword [ebp - 0xc], edx
push edi
mov dword [ebp - 8], esi
je 0x494dd9
cmp dword [0x4e52b8], 0
je 0x494dd9
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x494dbe
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0x916
push 0x4aa04c
push ecx
push 0x4a9642
call fcn.0048dfa4
mov esi, dword [ebp - 8]
add esp, 0x10
movzx ecx, byte [0x4e7b54]
movzx eax, byte [0x4e7b57]
and ecx, 0x7f
mov edi, dword [0x4e7b3c]
and eax, 0xf
shl ecx, 8
or ecx, eax
push ecx
lea eax, [edi + 0x10]
push eax
call dword [0x4e5470]
xor ebx, ebx
push dword [esi]
lea ecx, [edi + 8]
push ecx
call dword [0x4e5470]
push dword [esi + 4]
lea eax, [edi + 0xc]
push eax
call dword [0x4e5470]
movzx eax, byte [0x4e7b58]
shl eax, 8
or eax, 0xe1
push eax
lea eax, [edi + 4]
push eax
call dword [0x4e5470]
push edi
call dword [0x4e5464]
cmp eax, 0xffffffff
je 0x49537a
mov ecx, dword [ebp - 0xc]
and eax, 0xfffefff0
and ecx, 0xf
or eax, ecx
or eax, 0x30
push eax
push edi
call dword [0x4e5470]
cmp dword [0x4e5480], 0
je 0x494f02
cmp dword [0x4e52b8], 0
je 0x494eb3
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x494e9b
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0x943
push 0x4aa04c
push ecx
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
cmp dword [0x4e5480], 0
je 0x494f02
cmp dword [0x4e52b8], 0
je 0x494f02
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x494eea
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0x94a
push 0x4aa04c
push ecx
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
mov esi, dword [0x4e52b4]
push edi
call dword [0x4e5464]
mov dword [ebp - 4], eax
cmp eax, 0xffffffff
je 0x4952e6
test eax, 0x10000
jne 0x494f45
mov eax, dword [0x4e52b4]
sub eax, esi
cmp eax, 0x7a120
ja 0x495051
push 5
call dword [0x4e5420]
add dword [0x4e52b4], 5
jmp 0x494f08
cmp dword [0x4e5480], 0
je 0x494f97
cmp dword [0x4e52b8], 0
je 0x494f97
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x494f7c
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0x95c
push 0x4aa04c
push ecx
push 0x4a9642
call fcn.0048dfa4
mov eax, dword [ebp - 4]
add esp, 0x10
push eax
push edi
call dword [0x4e5470]
test byte [ebp - 4], 0x40
je 0x494ffe
cmp dword [0x4e5480], 0
je 0x49503f
cmp dword [0x4e52b8], 0
je 0x49503f
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x494fe4
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0x979
push 0x4aa04c
push ecx
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
jmp 0x49503f
lea eax, [edi + 4]
push eax
call dword [0x4e5464]
cmp eax, 0xffffffff
je 0x495252
shr eax, 0x10
movzx eax, al
cmp eax, 0x5a
je 0x4951fb
cmp eax, 0x1e
je 0x4951b2
cmp eax, 0xd2
je 0x495147
cmp eax, 0x96
je 0x495147
inc ebx
cmp ebx, 3
jae 0x4950f3
mov esi, dword [ebp - 8]
jmp 0x494e05
cmp dword [0x4e5480], 0
je 0x495414
cmp dword [0x4e52b8], 0
je 0x4950a4
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x49508c
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0x967
push 0x4aa04c
push ecx
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
cmp dword [0x4e5480], 0
je 0x495414
cmp dword [0x4e52b8], 0
je 0x495414
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x4950e3
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0x968
push 0x4aa04c
push ecx
jmp 0x495407
cmp dword [0x4e5480], 0
je 0x495414
cmp dword [0x4e52b8], 0
je 0x495414
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x495132
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0x9a8
push 0x4aa04c
push ecx
push 0x4a9642
jmp 0x49540c
cmp byte [0x4e7b58], 0xc3
setne al
dec al
and al, 0x88
add al, 0xc3
cmp dword [0x4e5480], 0
mov byte [0x4e7b58], al
je 0x4951ab
cmp dword [0x4e52b8], 0
je 0x4951ab
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x495193
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0x9a3
push 0x4aa04c
push ecx
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
xor eax, eax
jmp 0x495417
cmp dword [0x4e5480], 0
je 0x495414
cmp dword [0x4e52b8], 0
je 0x495414
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x4951f1
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0x991
jmp 0x495137
cmp dword [0x4e5480], 0
je 0x49524a
cmp dword [0x4e52b8], 0
je 0x49524a
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x495232
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0x98b
push 0x4aa04c
push ecx
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
xor eax, eax
inc eax
jmp 0x495417
cmp dword [0x4e5480], 0
je 0x495414
cmp dword [0x4e52b8], 0
je 0x4952a1
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x495289
xor edx, edx
div ecx
push 0x984
push 0x4aa04c
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
cmp dword [0x4e5480], 0
je 0x495414
cmp dword [0x4e52b8], 0
je 0x495414
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x4952dc
xor edx, edx
div ecx
push 0x985
jmp 0x495401
cmp dword [0x4e5480], 0
je 0x495414
cmp dword [0x4e52b8], 0
je 0x495335
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x49531d
xor edx, edx
div ecx
push 0x952
push 0x4aa04c
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
cmp dword [0x4e5480], 0
je 0x495414
cmp dword [0x4e52b8], 0
je 0x495414
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x495370
xor edx, edx
div ecx
push 0x953
jmp 0x495401
cmp dword [0x4e5480], 0
je 0x495414
cmp dword [0x4e52b8], 0
je 0x4953c9
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x4953b1
xor edx, edx
div ecx
push 0x938
push 0x4aa04c
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
cmp dword [0x4e5480], 0
je 0x495414
cmp dword [0x4e52b8], 0
je 0x495414
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x4953fc
xor edx, edx
div ecx
push 0x939
push 0x4aa04c
push eax
push 0x4a9654
call fcn.0048dfa4
add esp, 0x10
push 2
pop eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret