Function at 0x49d9a8
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x4d8620
add byte [eax], al
popfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x1c]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
je 0x4d29e0
jne 0x4d29e0
jmp 0x4d29de
push cs
lea edx, [ebp - 4]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x46]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ecx, edx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edx
mov edx, dword [esp]
push 2
push ebp
mov ebp, esp
leave
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, dword [eax + 0x24]
xchg dword [esp], ecx
xchg ebx, ecx
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, ecx
mov ecx, dword [esp]
pushfd
lea esi, [esi]
call 0x4d2a31
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x3c]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
add dword [esp], 0x36114
xchg dword [esp], edx
push ebp
mov ebp, esp
leave
xchg dword [esp + 4], edx
pushfd
add ebp, 0x5b
popfd
lea ebp, [ebp - 0x5b]
xchg dword [esp], edx
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x32]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 7]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
jmp dword [0xb6df88]
call fcn.004c1310
mov bl, byte [esi - 0xb]
xor byte gs:[ecx + 0x12ae597a], al
arpl sp, di
xlatb
xor byte [ebx], cl
mov cl, 6
clc
outsb dx, byte [esi]
xchg edi, eax
mov eax, dword [ecx + 0x3c]
push edi
xchg edi, eax
pop eax
xor edx, edx
mov edi, edi
add edi, ecx
mov ebx, ebx
movzx eax, word [edi + 0x14]
pushfd
add ebp, 0x75
popfd
lea ebp, [ebp - 0x75]
add eax, edi
mov eax, eax
xchg dword [ebp + 8], ecx
mov ecx, eax
push dword [ebp + 8]
xchg dword [ebp + 8], ecx
pop ecx
cmp dx, word [edi + 6]
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x4d]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
jae 0x5179bc
lea esi, [eax + 0x20]
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x5b]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
jmp 0x4dea48
pushfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x19]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, eax
mov eax, dword [esp]
xchg ecx, edx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edx
mov edx, dword [esp]
rdtsc
lea eax, [eax]
and eax, 1
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x45]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg ebx, edx
xchg dword [esp], ebx
xchg ebx, edx
lea esp, [esp + 4]
xchg ebx, eax
xchg dword [esp], ebx
xchg ebx, eax
lea esp, [esp + 4]
je 0x4df2ec
jne 0x50b44c
jmp 0x4df2ea
mov ah, 0x36
popfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x67]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
je 0x4e0bc4
jne 0x4e0bc4
jmp 0x4e0bc2
add byte [eax], al
lea eax, [ebp - 4]
pushfd
add ebp, 0x3e
popfd
lea ebp, [ebp - 0x3e]
xchg esi, eax
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, eax
mov eax, dword [esp]
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, dword [esi + 0x1c]
xchg dword [esp], ecx
pushfd
pushfd
add ebp, 0x16
popfd
lea ebp, [ebp - 0x16]
call 0x4e0bf7
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x74]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
add dword [esp], 0x27f1a
xchg dword [esp], ecx
lea ebx, [ebx]
xchg dword [esp + 4], ecx
push ebx
mov ebx, eax
pop ebx
xchg dword [esp], ecx
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x7c]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
popfd
push ebx
mov ebx, esi
pop ebx
jmp 0x4fcc00
cmp eax, 0xfc458dba
lea eax, [ebp - 4]
push ebx
mov ebx, ecx
pop ebx
xchg edi, eax
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, eax
mov eax, dword [esp]
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, dword [esi + 0x1c]
xchg dword [esp], edi
pushfd
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x41]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
call 0x4e3372
pushfd
add ebp, 0x6e
popfd
lea ebp, [ebp - 0x6e]
add dword [esp], 0x2579f
xchg dword [esp], ecx
push ecx
mov ecx, dword [esp + 8]
pop ecx
xchg dword [esp + 4], ecx
pushfd
add ebp, 0x76
popfd
lea ebp, [ebp - 0x76]
xchg dword [esp], ecx
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x7a]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
popfd
push ebp
mov ebp, esp
leave
jmp 0x4fcc00
add byte [edx + 1], ch
push 0
push 0x4fcba8
push 0
push 0x1388
call dword [0xb62bd4]
mov dword [0xb648b0], eax
mov esp, ebp
pop ebp
ret 0x14
call 0x4d3744
fcomp qword [edi]
adc eax, 0x6d447ea9
je 0x4fcbdb
xor byte [esi + 0x3d], 0x74
jp 0x4fcc5b
call fcn.00514d94
mov al, 0x14
sahf
in eax, 0x43
cwde
pop ss
adc eax, 0xe665e870
invalid
and al, 4
lea ecx, [ecx + 0x3f]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
pushfd
pushfd
add ebp, 0x2d
popfd
lea ebp, [ebp - 0x2d]
call 0x4fcc7d
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x1a]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
add dword [esp], 0xfffd961f
xchg dword [esp], ebx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 2]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], ebx
mov ebx, ebx
xchg dword [esp], ebx
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x22]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
popfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x2b]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
ret
popfd
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x62]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
je 0x500b74
jne 0x500b74
jmp 0x500b72
add byte [eax], al
lea edx, [ebp - 4]
lea ecx, [ecx]
xchg esi, edx
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, edx
mov edx, dword [esp]
push 2
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x45]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, dword [eax + 0x24]
xchg dword [esp], ecx
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, ecx
mov ecx, dword [esp]
pushfd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0xd]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
call 0x500bd7
pushfd
add ebp, 0x12
popfd
lea ebp, [ebp - 0x12]
add dword [esp], 0x7f6e
xchg dword [esp], edx
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x1d]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], edx
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x2d]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], edx
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x60]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
popfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 5]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
jmp dword [0xb6df88]
popfd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x15]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
je 0x4e3334
jne 0x4e3334
jmp 0x4e3332
pushfd
pushfd
add ebp, 0x2c
popfd
lea ebp, [ebp - 0x2c]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg edi, edx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, edx
mov edx, dword [esp]
rdtsc
push ebp
mov ebp, esp
leave
and eax, 1
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x44]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg edi, edx
xchg dword [esp], edi
xchg edi, edx
lea esp, [esp + 4]
xchg ecx, eax
xchg dword [esp], ecx
xchg ecx, eax
lea esp, [esp + 4]
je 0x4cdbe8
jne 0x5003a8
jmp 0x4cdbe6