Function at 0x4e3830
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ebp
mov ebp, esp
push ecx
call fcn.004e3d90
push eax
mov dword [ebp - 4], eax
call fcn.006de95e
add esp, 4
test eax, eax
jne 0x4e3b78
cmp byte [0x8354c4], al
je 0x4e3b69
push ebx
push esi
mov esi, dword [0x8354c0]
push edi
push 0x166ed0
push eax
push esi
mov byte [0x8354c4], al
call fcn.006f4b50
add esp, 0xc
lea eax, [esi + 0x89da4]
mov ecx, 0x166ed0
xchg dword [eax], ecx
mov ecx, dword [0x8354c0]
mov edx, 0x30
lea eax, [ecx + 0x738]
mov byte [eax], 0
lea eax, [eax + 0x5c]
sub edx, 1
jne 0x4e3894
lea eax, [ecx + 0x2f8]
mov edx, 0x10
nop word [eax + eax]
mov byte [eax - 0x40], 0
lea eax, [eax + 0x48]
mov dword [eax - 0x48], 0
mov dword [eax - 0x44], 0
sub edx, 1
jne 0x4e38b0
mov dword [ecx + 0x2b8], 0x61666564
lea eax, [ecx + 0x1888]
mov dword [ecx + 0x2bc], 0x746c75
mov edx, 0x400
mov dword [ecx + 8], 1
mov byte [eax], 0
lea eax, [eax + 0x60]
sub edx, 1
jne 0x4e38f0
mov dword [ecx + 4], edx
xor esi, esi
rdtsc
mov dword [ecx + 0x20], eax
mov dword [ecx + 0x24], edx
mov dword [ecx + 0x2c], 0x16
mov dword [ecx + 0x30], 0
mov dword [ecx + 0x34], 0
mov dword [ecx + 0x38], 0
mov dword [ecx + 0x48], 0
mov dword [ecx + 0x4c], 0
mov dword [ecx + 0x50], 0
mov dword [ecx + 0x54], 0
mov dword [ecx + 0x68], 0
mov dword [ecx + 0x60], 0
mov dword [ecx + 0x64], 0
mov dword [ecx + 0x6c], 1
mov dword [ecx + 0x10], 0x3c
mov dword [ecx], 0
mov dword [ecx + 0x88978], 0xffffffff
mov dword [ecx + 0x88d80], 0xffffffff
mov dword [ecx + 0x89188], 0xffffffff
mov dword [ecx + 0x89590], 0xffffffff
mov dword [ecx + 0x89998], 0xffffffff
rdtsc
mov dword [ecx + 0x88], 1
mov edi, eax
mov dword [ecx + 0x2b0], 0x420551ec
mov ebx, edx
mov dword [ecx + 0x2b4], 0x3cf5c8d9
nop
mov dword [esi + ecx + 0x89dc0], 0
mov dword [esi + ecx + 0x89dc4], 0
mov dword [esi + ecx + 0x89dc8], 0
mov dword [esi + ecx + 0x89dcc], 0
mov dword [esi + ecx + 0x89dd0], 0
mov dword [esi + ecx + 0x89dd4], 0
mov dword [esi + ecx + 0x89dd8], edi
mov dword [esi + ecx + 0x89ddc], ebx
mov dword [esi + ecx + 0x89de0], 0
mov dword [esi + ecx + 0x89de4], 0
mov dword [esi + ecx + 0x89de8], 0xffffffff
mov word [esi + ecx + 0x8a030], 0
mov dword [esi + ecx + 0x89fec], 0
mov dword [esi + ecx + 0x89ff4], 0
mov dword [esi + ecx + 0x89ff0], 0
cmp byte [0xa82632], 0
je 0x4e3a83
cmp byte [0x835598], 0
je 0x4e3a83
add ecx, 0x8a008
add ecx, esi
call fcn.00515120
mov ecx, dword [0x8354c0]
jmp 0x4e3aaf
mov dword [esi + ecx + 0x89ff8], 0
mov dword [esi + ecx + 0x89ffc], 0
mov dword [esi + ecx + 0x8a000], 0
mov dword [esi + ecx + 0x8a004], 0
add esi, 0x278
cmp esi, 0x4f000
jl 0x4e39c0
pop edi
pop esi
mov dword [ecx + 0xe4e80], 0
lea eax, [ecx + 0x164e88]
mov edx, 0x200
pop ebx
nop dword [eax]
mov dword [eax + 0x1000], 0xffffffff
lea eax, [eax + 8]
mov dword [eax + 0xffc], 0x7fffffff
mov dword [eax - 8], 0
mov dword [eax - 4], 0x80000000
sub edx, 1
jne 0x4e3ae0
push 2
push 0x755fc0
mov dword [ecx + 0x166e88], 0xffffffff
call fcn.004daea0
mov dword [0x8f7c74], eax
add esp, 8
mov dword [eax + 0x20], 1
mov dword [eax + 0x24], 0
mov eax, dword [0x8354c0]
mov byte [eax + 0x166ec4], 0
mov dword [eax + 0x166ec8], 0
mov dword [eax + 0x9c], 0
mov byte [eax + 0x166ecc], 0
mov byte [eax + 0xdce58], 0
call fcn.004ef4f0
push dword [ebp - 4]
call fcn.006de9b9
add esp, 4
mov esp, ebp
pop ebp
ret
push eax
call fcn.006ded1a
int3