Function at 0x4ca5e4
Capabilities:
Execute anti-debugging instructions

Disassembly:
pushfd
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x45]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, eax
mov eax, dword [esp]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edx
mov edx, dword [esp]
rdtsc
lea eax, [eax]
and eax, 1
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x19]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg edi, edx
xchg dword [esp], edi
xchg edi, edx
lea esp, [esp + 4]
xchg ecx, eax
xchg dword [esp], ecx
xchg ecx, eax
lea esp, [esp + 4]
je 0x4f3cb4
jne 0x4efae0
jmp 0x4f3cb2
jmp 0x50f928
add byte [eax], al
xchg ebx, edi
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, edi
mov edi, dword [esp]
pushfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x13]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
call 0x4d5003
lea eax, [eax]
add dword [esp], 0xfffc85fe
xchg dword [esp], ecx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x7e]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], ecx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x3f]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], ecx
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x45]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
popfd
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x45]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
jmp 0x4e8a08
add byte [eax], al
popfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x39]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
je 0x4ebf60
jne 0x4ebf60
jmp 0x4ebf5e
and al, 4
mov ecx, dword [esp]
lea esp, [esp + 4]
jmp fcn.004f3488
call fcn.004cb500
mov dl, 0x37
scasd eax, dword es:[edi]
outsd dx, dword [esi]
rcl dword [esi + 0x11]
jnp 0x4e8a84
jle 0x4e89f8
cmp al, 0xe8
outsb dx, byte [esi]
into
std
invalid
lea esp, [esp + 4]
pushfd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x62]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
add esi, 1
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x26]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
jmp fcn.004c6b4c
nop
add byte [edi - 0x3db9b73], dl
xchg edi, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, edi
mov edi, dword [esp]
pushfd
lea esi, [esi]
call 0x4ebf75
mov edx, edx
add dword [esp], 0xfffb168c
xchg dword [esp], ecx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 2]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], ecx
mov eax, eax
xchg dword [esp], ecx
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x47]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
popfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 8]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
jmp 0x4e8a08
popfd
mov edx, edx
je 0xb5c9d0
jne 0xb5c9d0
jmp fcn.00b5c9ce
add byte [eax], al
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 7]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
je 0xb1b414
jne 0xb1b414
jmp 0xb1b412
mov esp, ebp
pop ebp
ret
pushfd
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x79]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg edx, eax
lea esp, [esp - 4]
mov dword [esp], edx
mov edx, eax
mov eax, dword [esp]
xchg esi, edx
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, edx
mov edx, dword [esp]
rdtsc
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x13]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
and eax, 1
pushfd
add ebp, 9
popfd
lea ebp, [ebp - 9]
xchg edx, eax
xchg dword [esp], eax
xchg edx, eax
lea esp, [esp + 4]
xchg edx, eax
xchg dword [esp], edx
xchg edx, eax
lea esp, [esp + 4]
je 0x4dc5dc
jne 0x5159ec
jmp 0x4dc5da
mov edi, edi
xchg dword [esp + 4], ecx
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x2c]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], ecx
push ebp
mov ebp, esp
leave
popfd
pushfd
add ebp, 0xa
popfd
lea ebp, [ebp - 0xa]
ret
call fcn.004e9ee4
mov word [edi - 0x7b5c2663], ss
push cs
jnp 0x50f8ee
jb 0x50f98b
aad 0xa4
pop ebp
mov ebx, 0x8327e919
les eax, [eax + edx*2]
mov eax, dword [esp + 4]
lea eax, [eax + 0x24]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg ebx, eax
mov ebx, dword [ebp - 0x18]
push eax
xchg ebx, eax
pop ebx
jmp 0x50a972
push es
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
jne 0x50b9c0
xor esi, esi
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x49]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp]
pushfd
add ebp, 0x23
popfd
lea ebp, [ebp - 0x23]
jmp 0x49ede0
popfd
pushfd
add ebp, 0x7b
popfd
lea ebp, [ebp - 0x7b]
je 0x4d4fd8
jne 0x4d4fd8
jmp 0x4d4fd6
add byte [eax], al
mov eax, dword [esi + 0xb64b94]
inc eax
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x1e]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
pushfd
push eax
mov eax, dword [esp + 9]
pop eax
call 0xb1b44b
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x78]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
add dword [esp], 0xff9820ce
xchg dword [esp], ecx
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x37]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], ecx
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x1c]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], ecx
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x5e]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x51]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
jmp fcn.004c7d08