Function at 0x48f63
Capabilities:
Execute anti-debugging instructions

Disassembly:
cmp dword [ebp - 0x34], 0
push 0x3358e2e2
lea esp, [esp + 0x50]
je 0x47857
cmp bl, 0x66
test cl, 0xfe
cmp dword [ebp - 4], 0
call fcn.0003b2be
pushal
mov dword [esp + 0x1c], eax
pushal
push 0xc74f8d01
push esi
lea esp, [esp + 0x44]
call fcn.00017cd0
mov cx, 0x2871
adc dl, al
pushfd
or dh, 0x33
mov dword [ebp - 0x14], eax
shl ah, 7
bt edx, 0x15
mov ecx, dword [ebp - 0x14]
aaa
mov dword [ebp - 0x44], ecx
stc
pushfd
inc dl
mov edx, dword [ebp - 0x44]
sub cl, 0x69
sub cx, dx
xadd cl, al
bt bp, 2
mov eax, dword [edx + 0x3c]
mov cl, 0x45
pushal
sbb ch, 0x24
add eax, dword [ebp - 0x44]
test al, 0xf1
neg ch
mov dword [ebp - 0xc], eax
cwde
mov ecx, dword [ebp - 0xc]
call fcn.0004d3fb
shr eax, 3
mov byte [esp], 0x86
push dword [esp]
push esp
pushal
mov dword [ebp - 0x2c], eax
call fcn.00050f7d
lea ecx, [eax*4 + 4]
bswap ax
movsx dx, al
cdq
mov eax, esi
movzx dx, cl
lea edx, [eax*4 - 0x30967ea7]
mov edx, edi
push 0x8282c5da
push 0x3f118bc5
lea esp, [esp + 0x28]
call sub.ntoskrnl.exe__allshl
bts di, 4
mov esi, eax
clc
mov edi, edx
bt esi, 0x18
aam 0xb7
mov dh, 0x6a
mov edx, dword [ebp - 0x28]
rol bh, 4
rcl cl, cl
xor ax, dx
mov eax, dword [ebp - 0x14]
rcr ecx, 0x13
mov ecx, dword [ebp - 0x1c]
shl bl, 6
movsx bx, al
clc
bts bx, 1
mov ebx, dword [eax + edx*8]
pushal
pushal
cmp ecx, eax
xor ebx, dword [ecx]
test dl, 0xd3
push ebp
mov dword [esp], ebx
mov eax, dword [eax + edx*8 + 4]
push 0xb6405150
call fcn.00041b74
push ecx
inc eax
mov dh, 0xe8
mov dl, 0x7a
add byte [eax], al
pushfd
mov dword [esp], 0x87e25e0c
call fcn.00044af4
lea esp, [esp + 4]
je 0x4138e
mov dl, bh
setns dh
mov dx, cx
pushfd
mov ecx, dword [ebp + 8]
bswap edx
mov dh, byte [esp]
mov byte [esp], 0x64
call fcn.00041b03
xchg esp, eax
sub dword [edx + 0x5c], esi
or eax, 0xe693b69c
test dword [edx], eax
push ecx
cmpsd dword [esi], dword es:[edi]
pushal
cmp dword [eax], esi
imul esp, esp, 0x42bdd34
test eax, edi
add cl, ah
ficom word [ecx]
jbe 0x3a11a
mov fs, ebp
mov byte [0xbe6ce8c1], al
pushfd
mov al, byte [0x2e05b595]
adc al, 0x3a
xchg ebp, eax
mov ch, 5
adc al, 0x3a
jl 0x3a0ba
xor esp, eax
outsd dx, dword [esi]
push ss
push eax
and eax, 0xe915c63c
add byte [edx], al
aad 0x29
hlt
mov edx, dword [ebp - 0x44]
neg cl
mov eax, dword [edx + 0x3c]
rcr dx, 5
neg dl
bsf dx, si
test ax, cx
add eax, dword [ebp - 0x44]
sbb dl, cl
shl dh, 1
mov dword [ebp - 0xc], eax
pushal
mov ecx, dword [ebp - 0xc]
bswap dx
add ecx, 0x18
movzx ax, bl
xchg dx, ax
sbb dh, 0x85
mov dword [ebp - 0x40], ecx
rol ch, cl
aas
mov edx, dword [ebp - 0x40]
aam 0xc4
sal eax, cl
shld ecx, edi, cl
shrd ax, cx, 6
mov eax, dword [edx + 0x10]
lea ecx, [ebx - 0x56cd9218]
shrd cx, cx, cl
dec cx
add ch, 0x2f
add eax, dword [ebp + 0xc]
shl ch, cl
rcr ch, 6
pushal
mov dword [ebp - 8], eax
xadd ch, dl
not dx
rdtsc
mov ecx, dword [ebp - 0xc]
lea edx, [edi*4 - 0x731ec0e2]
das
btr dx, 0xc
mov edx, dword [ecx + 0x98]
neg ah
ror ecx, cl
not ecx
or ch, 0xcf
mov dword [ebp - 0x34], edx
setno ch
btc cx, 1
stc
pushfd
mov eax, dword [ebp - 0xc]
shrd cx, si, 1
inc cx
clc
mov ecx, dword [eax + 0x9c]
stc
cmp dh, 0x9a
mov dword [ebp - 4], ecx
pushfd
jmp 0x396bf
push 0xb2bc4d0f
mov dword [esp], 0x1000
push esp
pushal
mov dword [esp + 0x20], 0
call fcn.0003a8c3
lea esp, [esp + 8]
js 0x39fca
push eax
pushfd
mov byte [esp], 2
lea esp, [esp + 4]
call fcn.00017cd0
sub cl, 0xa8
bsr dx, bp
jmp 0x50c93
mov dword [ebp - 0x14], eax
rdtsc
pushfd
mov ecx, dword [ebp - 0x14]
rdtsc
cmp dh, al
mov dword [ebp - 0x44], ecx
jmp 0x3ac83