Function at 0x48cda2
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x24
mov eax, dword [0x4c0548]
xor eax, esp
mov dword [esp + 0x20], eax
cmp dword [0x4e5480], 0
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov esi, edx
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 0x10]
mov ebx, ecx
mov ecx, dword [ebp + 8]
push edi
mov dword [esp + 0x10], esi
mov edi, 0x4a9612
mov dword [esp + 0xc], ecx
mov dword [esp + 0x18], eax
je 0x48ce31
cmp dword [0x4e52b8], 0
je 0x48ce31
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x48ce14
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push ebx
push 0xc5
push edi
push ecx
push 0x4a9626
call fcn.0048dfa4
mov esi, dword [esp + 0x24]
add esp, 0x14
mov ecx, dword [esp + 0xc]
cmp byte [0x4e7b28], 0
jne 0x48ce85
cmp dword [0x4e5480], 0
je 0x48db2f
cmp dword [0x4e52b8], 0
je 0x48db2f
mov esi, dword [0x4e5488]
rdtsc
mov ecx, eax
mov eax, dword [0x4e547c]
sub ecx, eax
add eax, ecx
mov dword [0x4e547c], eax
cmp esi, 1
jbe 0x48ce79
mov eax, ecx
xor edx, edx
div esi
mov ecx, eax
push 0xc7
push edi
push ecx
jmp 0x48db22
xor eax, eax
lea edi, [esp + 0x1c]
stosd dword es:[edi], eax
push ecx
push esi
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [esp + 0x24]
push eax
push ebx
call dword [0x4e5484]
mov esi, eax
test esi, esi
jne 0x48ceaf
and dword [0x4ebc4c], eax
inc dword [0x4e5494]
cmp ebx, 8
je 0x48da93
cmp esi, 1
je 0x48cf12
cmp dword [0x4e5480], 0
je 0x48cf08
cmp dword [0x4e52b8], 0
je 0x48cf08
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48cef0
xor edx, edx
div ecx
push 0xf4
push 0x4a9612
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
mov eax, dword [0x4c0640]
mov dword [0x4c0644], eax
test esi, esi
jne 0x48d9df
cmp dword [esp + 0x1c], 0x69696969
jne 0x48d167
push 5
pop eax
cmp word [esp + 0x20], ax
je 0x48d852
push 4
pop edx
cmp word [esp + 0x20], dx
jne 0x48d0b9
mov ecx, dword [0x4e52b0]
mov eax, ecx
and eax, 0xfffff7ff
cmp dword [esp + 0x24], eax
je 0x48d011
cmp dword [0x4e5480], esi
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
je 0x48ce85
cmp dword [0x4e52b8], 0
je 0x48cfb1
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48cf99
xor edx, edx
div ecx
push 0x128
push 0x4a9612
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
cmp dword [0x4e5480], 0
mov ecx, dword [esp + 0xc]
je 0x48ce85
cmp dword [0x4e52b8], 0
je 0x48ce85
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48cff0
xor edx, edx
div ecx
push 0x129
push 0x4a9612
push eax
push 0x4a9654
call fcn.0048dfa4
mov ecx, dword [esp + 0x1c]
add esp, 0x10
jmp 0x48ce85
cmp ebx, edx
je 0x48d75c
cmp dword [0x4e5480], 0
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
je 0x48ce85
cmp dword [0x4e52b8], 0
je 0x48d070
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d058
xor edx, edx
div ecx
push 0x137
push 0x4a9612
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
cmp dword [0x4e5480], 0
mov ecx, dword [esp + 0xc]
je 0x48ce85
cmp dword [0x4e52b8], 0
je 0x48ce85
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d0af
xor edx, edx
div ecx
push 0x138
jmp 0x48cff5
push 6
pop esi
cmp word [esp + 0x20], si
je 0x48d7aa
cmp dword [0x4e5480], 0
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
je 0x48ce85
cmp dword [0x4e52b8], 0
je 0x48d11e
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d106
xor edx, edx
div ecx
push 0x159
push 0x4a9612
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
cmp dword [0x4e5480], 0
mov ecx, dword [esp + 0xc]
je 0x48ce85
cmp dword [0x4e52b8], 0
je 0x48ce85
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d15d
xor edx, edx
div ecx
push 0x15a
jmp 0x48cff5
push 4
pop esi
cmp ebx, esi
jne 0x48d278
mov edx, dword [esp + 0x24]
cmp edx, dword [0x4e52ac]
je 0x48d897
cmp dword [0x4e5480], 0
je 0x48d1d1
cmp dword [0x4e52b8], 0
je 0x48d1d1
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d1b5
xor edx, edx
div ecx
push 0x17a
push 0x4a9612
push eax
push 0x4a9642
call fcn.0048dfa4
mov edx, dword [esp + 0x34]
add esp, 0x10
mov ecx, esi
call fcn.0048cd52
cmp dword [0x4e5480], 0
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
je 0x48ce85
cmp dword [0x4e52b8], 0
je 0x48d22f
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d217
xor edx, edx
div ecx
push 0x17f
push 0x4a9612
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
cmp dword [0x4e5480], 0
mov ecx, dword [esp + 0xc]
je 0x48ce85
cmp dword [0x4e52b8], 0
je 0x48ce85
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d26e
xor edx, edx
div ecx
push 0x180
jmp 0x48cff5
cmp dword [0x4e5480], 0
je 0x48d2c6
cmp dword [0x4e52b8], 0
je 0x48d2c6
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d2ab
xor edx, edx
div ecx
push 0x186
mov edi, 0x4a9612
push edi
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
jmp 0x48d2cb
mov edi, 0x4a9612
mov esi, dword [esp + 0x10]
mov edx, 0xfa0
mov ax, word [esp + 0x22]
movzx ecx, word [esi + 2]
cmp ax, dx
ja 0x48d61a
cmp ax, cx
jb 0x48d61a
mov edx, dword [esp + 0x14]
movzx eax, ax
sub eax, ecx
mov dword [edx], eax
mov word [esi], cx
mov ecx, dword [esp + 0xc]
mov ax, word [edx]
mov word [ecx], ax
movzx eax, word [esp + 0x20]
cmp ebx, eax
je 0x48d400
cmp dword [0x4e5480], 0
je 0x48d35b
cmp dword [0x4e52b8], 0
je 0x48d35b
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d347
xor edx, edx
div ecx
push 0x1a7
push edi
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
mov edx, dword [esp + 0x24]
push 4
pop ecx
call fcn.0048cd52
cmp dword [0x4e5480], 0
mov ecx, dword [esp + 0xc]
je 0x48ce85
cmp dword [0x4e52b8], 0
je 0x48d3b6
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d3a2
xor edx, edx
div ecx
push 0x1ac
push edi
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
cmp dword [0x4e5480], 0
mov ecx, dword [esp + 0xc]
je 0x48ce85
cmp dword [0x4e52b8], 0
je 0x48ce85
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d3f5
xor edx, edx
div ecx
push 0x1ad
push edi
jmp 0x48cffa
cmp dword [0x4e5480], 0
je 0x48d447
cmp dword [0x4e52b8], 0
je 0x48d447
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d433
xor edx, edx
div ecx
push 0x1b2
push edi
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
mov edi, dword [esp + 0x24]
cmp edi, 0x80800000
je 0x48d45f
cmp edi, 0x80800001
jne 0x48d665
cmp edi, dword [0x4e52ac]
je 0x48d560
cmp dword [0x4e5480], 0
je 0x48d4ba
cmp dword [0x4e52b8], 0
je 0x48d4ba
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d49e
xor edx, edx
div ecx
push 0x1bd
push 0x4a9612
push eax
push 0x4a9642
call fcn.0048dfa4
mov edi, dword [esp + 0x34]
add esp, 0x10
push 4
mov edx, edi
pop ecx
call fcn.0048cd52
cmp dword [0x4e5480], 0
mov ecx, dword [esp + 0xc]
je 0x48ce85
cmp dword [0x4e52b8], 0
je 0x48d517
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d4ff
xor edx, edx
div ecx
push 0x1c2
push 0x4a9612
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
cmp dword [0x4e5480], 0
mov ecx, dword [esp + 0xc]
je 0x48ce85
cmp dword [0x4e52b8], 0
je 0x48ce85
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d556
xor edx, edx
div ecx
push 0x1c3
jmp 0x48cff5
cmp dword [0x4e5480], 0
je 0x48d5af
cmp dword [0x4e52b8], 0
je 0x48d5af
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d593
xor edx, edx
div ecx
push 0x1cd
push 0x4a9612
push eax
push 0x4a9642
call fcn.0048dfa4
mov edi, dword [esp + 0x34]
add esp, 0x10
movzx edx, word [esi]
mov ecx, dword [esi + 4]
call fcn.004730d4
mov esi, eax
mov eax, dword [esp + 0xc]
movzx edx, word [eax]
mov ecx, dword [eax + 4]
call fcn.004730d4
add eax, esi
cmp eax, dword [esp + 0x28]
je 0x48d93a
cmp dword [0x4e5480], 0
je 0x48d6b0
cmp dword [0x4e52b8], 0
je 0x48d665
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d60e
xor edx, edx
div ecx
push 0x1db
push 0x4a9612
jmp 0x48d657
cmp dword [0x4e5480], 0
je 0x48d6b0
cmp dword [0x4e52b8], 0
je 0x48d665
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d651
xor edx, edx
div ecx
push 0x196
push edi
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
cmp dword [0x4e5480], 0
je 0x48d6b0
cmp dword [0x4e52b8], 0
je 0x48d6b0
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d698
xor edx, edx
div ecx
push 0x1f4
push 0x4a9612
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
push 5
pop eax
xor edx, edx
mov ecx, eax
call fcn.0048cd52
cmp dword [0x4e5480], 0
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
je 0x48ce85
cmp dword [0x4e52b8], 0
je 0x48d713
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d6fb
xor edx, edx
div ecx
push 0x1f8
push 0x4a9612
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
cmp dword [0x4e5480], 0
mov ecx, dword [esp + 0xc]
je 0x48ce85
cmp dword [0x4e52b8], 0
je 0x48ce85
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d752
xor edx, edx
div ecx
push 0x1f9
jmp 0x48cff5
xor ecx, 1
cmp dword [0x4e5480], 0
mov dword [0x4e52b0], ecx
je 0x48dae0
cmp dword [0x4e52b8], 0
je 0x48dae0
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d7a0
xor edx, edx
div ecx
push 0x131
jmp 0x48dacd
cmp dword [0x4e5480], 0
mov eax, 0x80800000
mov dword [0x4e52b0], eax
mov dword [0x4e52ac], eax
je 0x48d804
cmp dword [0x4e52b8], 0
je 0x48d804
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d7ec
xor edx, edx
div ecx
push 0x146
push 0x4a9612
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
xor edx, edx
mov ecx, esi
call fcn.0048cd52
cmp dword [0x4e5480], 0
je 0x48da39
cmp dword [0x4e52b8], 0
je 0x48da39
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d848
xor edx, edx
div ecx
push 0x14a
jmp 0x48da26
cmp dword [0x4e5480], 0
je 0x48da39
cmp dword [0x4e52b8], 0
je 0x48da39
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d88d
xor edx, edx
div ecx
push 0x111
jmp 0x48da26
cmp dword [0x4e5480], 0
je 0x48d8e2
cmp dword [0x4e52b8], 0
je 0x48d8e2
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d8ca
xor edx, edx
div ecx
push 0x16e
push 0x4a9612
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
push 5
pop eax
xor edx, edx
mov ecx, eax
call fcn.0048cd52
xor dword [0x4e52b0], 1
cmp dword [0x4e5480], 0
je 0x48dae0
cmp dword [0x4e52b8], 0
je 0x48dae0
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d930
xor edx, edx
div ecx
push 0x174
jmp 0x48dacd
cmp dword [0x4e5480], 0
je 0x48d989
cmp dword [0x4e52b8], 0
je 0x48d989
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d96d
xor edx, edx
div ecx
push 0x1e0
push 0x4a9612
push eax
push 0x4a9642
call fcn.0048dfa4
mov edi, dword [esp + 0x34]
add esp, 0x10
push 4
mov edx, edi
pop ecx
call fcn.0048cd52
xor dword [0x4e52ac], 1
cmp dword [0x4e5480], 0
je 0x48dae0
cmp dword [0x4e52b8], 0
je 0x48dae0
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48d9d5
xor edx, edx
div ecx
push 0x1ef
jmp 0x48dacd
cmp byte [esp + 0x1c], 0x62
jne 0x48da41
cmp dword [0x4e5480], 0
mov eax, dword [esp + 0x18]
mov byte [eax + 4], 1
je 0x48da39
cmp dword [0x4e52b8], 0
je 0x48da39
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48da21
xor edx, edx
div ecx
push pe_nt_image_headers32
push 0x4a9612
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
push 2
pop eax
jmp 0x48db32
cmp dword [0x4e5480], 0
je 0x48da8c
cmp dword [0x4e52b8], 0
je 0x48da8c
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48da74
xor edx, edx
div ecx
push 0x105
push 0x4a9612
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
mov eax, esi
jmp 0x48db32
test esi, esi
jne 0x48dae4
cmp dword [0x4e5480], esi
je 0x48dae0
cmp dword [0x4e52b8], esi
je 0x48dae0
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48dac8
xor edx, edx
div ecx
push 0xe2
push 0x4a9612
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
xor eax, eax
jmp 0x48db32
cmp dword [0x4e5480], 0
je 0x48db2f
cmp dword [0x4e52b8], 0
je 0x48db2f
mov ecx, dword [0x4e547c]
rdtsc
sub eax, ecx
add ecx, eax
mov dword [0x4e547c], ecx
mov ecx, dword [0x4e5488]
cmp ecx, 1
jbe 0x48db17
xor edx, edx
div ecx
push 0xe8
push 0x4a9612
push eax
push 0x4a9642
call fcn.0048dfa4
add esp, 0x10
xor eax, eax
inc eax
mov ecx, dword [esp + 0x2c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004055b8
mov esp, ebp
pop ebp
ret 0xc