Function at 0x48db46
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3c
mov eax, dword [0x4c0548]
xor eax, esp
mov dword [esp + 0x38], eax
cmp dword [0x4e5480], 0
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov edi, edx
mov dword [esp + 0x18], eax
mov ebx, ecx
mov esi, 0x4a9672
je 0x48dbbb
cmp dword [0x4e52b8], 0
je 0x48dbbb
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48dba2
xor edx, edx
div ecx
push ebx
push 0x228
push esi
push eax
push 0x4a9626
call fcn.0048dfa4
mov eax, dword [esp + 0x2c]
add esp, 0x14
cmp byte [0x4e7b28], 0
jne 0x48dc0a
cmp dword [0x4e5480], 0
je 0x48df21
cmp dword [0x4e52b8], 0
je 0x48df21
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48dbff
xor edx, edx
div ecx
push 0x22a
push esi
jmp 0x48df13
xor ecx, ecx
test eax, eax
je 0x48dc2b
movzx ecx, word [eax]
mov dword [esp + 0x10], ecx
mov edx, ecx
mov ecx, dword [eax + 4]
call fcn.004730d4
mov dword [esp + 0x14], eax
mov dword [esp + 0x28], eax
jmp 0x48dc37
mov dword [esp + 0x10], ecx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x14], ecx
movzx esi, word [edi]
mov ecx, dword [edi + 4]
mov edx, esi
call fcn.004730d4
add eax, dword [esp + 0x14]
xor edx, edx
mov ecx, dword [esp + 0x10]
inc edx
mov dword [esp + 0x28], eax
mov dword [esp + 0x1c], 0x30303030
mov word [esp + 0x20], bx
lea eax, [esi + ecx]
mov esi, dword [esp + 0x18]
mov word [esp + 0x22], ax
mov eax, dword [0x4c0640]
mov dword [0x4c0644], eax
cmp dword [0x4c0644], 0
jne 0x48dde8
cmp ebx, 3
jne 0x48dcf6
mov eax, dword [edi + 4]
cmp dword [eax], 0x3230
jne 0x48dde8
cmp dword [0x4e5480], 0
mov dword [0x4ebc4c], edx
mov dword [0x4e52b0], 0x80800800
mov dword [0x4e52ac], 0x80800000
je 0x48df21
cmp dword [0x4e52b8], 0
je 0x48df21
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48dcec
xor edx, edx
div ecx
push 0x258
jmp 0x48df0e
cmp ebx, 7
jne 0x48dd69
mov eax, dword [edi + 4]
cmp dword [eax], 0x3031
jne 0x48dde8
cmp dword [0x4e5480], 0
mov dword [0x4ebc4c], edx
mov dword [0x4e52b0], 0x80800800
mov dword [0x4e52ac], 0x80800000
je 0x48df21
cmp dword [0x4e52b8], 0
je 0x48df21
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48dd5f
xor edx, edx
div ecx
push 0x269
jmp 0x48df0e
cmp ebx, 0xb
jne 0x48ddd8
mov eax, dword [edi + 4]
cmp dword [eax], 0x3430
jne 0x48dde8
cmp dword [0x4e5480], 0
mov dword [0x4ebc4c], edx
mov dword [0x4e52b0], 0x80800800
mov dword [0x4e52ac], 0x80800000
je 0x48df21
cmp dword [0x4e52b8], 0
je 0x48df21
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48ddce
xor edx, edx
div ecx
push 0x27a
jmp 0x48df0e
cmp ebx, 9
jne 0x48dde8
mov eax, dword [edi + 4]
cmp dword [eax], 0x3330
je 0x48de60
mov eax, dword [0x4e52b0]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x2c], eax
mov eax, dword [edi + 4]
mov dword [esp + 0x34], eax
movzx eax, word [edi]
mov dword [esp + 0x38], eax
mov dword [esp + 0x30], 0x10
push 2
pop eax
test ecx, ecx
je 0x48de27
mov eax, dword [esi + 4]
mov dword [esp + 0x3c], eax
movzx eax, word [esi]
push 3
mov dword [esp + 0x44], eax
pop eax
push eax
lea eax, [esp + 0x30]
push eax
call dword [0x4e548c]
push 0x4c05d8
push 0
push 0
push 4
xor edx, edx
pop ecx
call fcn.0048cda2
xor edx, edx
inc edx
cmp eax, edx
jne 0x48de53
dec dword [0x4c0644]
test eax, eax
je 0x48debc
mov ecx, dword [esp + 0x10]
jmp 0x48dc76
cmp dword [0x4e5480], 0
mov dword [0x4ebc4c], edx
mov dword [0x4e52b0], 0x80800800
mov dword [0x4e52ac], 0x80800000
je 0x48df21
cmp dword [0x4e52b8], 0
je 0x48df21
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48deb5
xor edx, edx
div ecx
push 0x28b
jmp 0x48df0e
inc dword [0x4e5490]
and dword [0x4e52b0], 0xfffff7ff
cmp dword [0x4e5480], 0
mov eax, dword [0x4c05d8]
mov dword [0x4c0640], eax
je 0x48df21
cmp dword [0x4e52b8], 0
je 0x48df21
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48df09
xor edx, edx
div ecx
push 0x2d9
push 0x4a9672
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
mov ecx, dword [esp + 0x44]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004055b8
mov esp, ebp
pop ebp
ret 8