Function at 0x49ac8b
Capabilities:
Execute anti-debugging instructions

Disassembly:
bsf ebx, eax
jg 0x49ac6f
mov dword [esp], ebx
jmp 0x49ac27
mov bh, byte [esp]
not ax
jmp 0x49ac47
mov dword [esp], ebx
lea esp, [esp + 4]
neg dl
bswap eax
jmp 0x49ac0e
sub ebp, 4
mov ebx, edi
setp bl
mov eax, dword [esp]
jmp 0x49ac71
and edx, 0x3c
mov ebx, 0xde81b030
mov bx, 0x74be
lea eax, reloc.KERNEL32.dll_RtlUnwind
stc
jmp 0x49ac87
jmp 0x49ac24
mov eax, dword [edx + esi]
call 0x49ac8b
inc ebx
salc
inc esp
and ebx, esi
sbb bh, bl
dec ebx
fstp xword [esi + 0x796ef84d]
jno 0x49ac31
jo 0x49ac31
pop dx
lea esp, [esp + 2]
mov dword [ebp], eax
jmp 0x49ac9a
bsr edx, eax
jns 0x49b2fe
xchg al, ah
mov bx, di
jmp 0x49b237
setno bl
mov ebx, dword [esp]
lea esp, [esp + 0x20]
jmp 0x49b364
mov bl, byte [esp]
xchg ebx, eax
pushal
pushal
cmp ebp, edx
jmp 0x49ad0a
push bx
lea esp, [esp + 2]
jmp 0x49ad2c
lea esp, [esp + 0x20]
jmp 0x49b364
jge 0x49acba
setno bl
mov ebx, dword [esp]
jmp 0x49acf4
rdtsc
push bx
lea esp, [esp + 2]
lea edx, [esi + 0x50]
mov ax, word [esp]
jmp 0x49acd0
mov al, 0x13
rol ah, cl
jle 0x49ad24
rdtsc
jmp 0x49acec
jmp 0x49ae39
xchg al, ah
mov bx, di
jmp 0x49b237
ja 0x49ad85
xchg dh, bh
xor eax, eax
jle 0x49b396
jg 0x49b39e
xchg esp, eax
adc byte [esi + 0xaa510e1], al
lea ebx, reloc.KERNEL32.dll_RtlUnwind
push ds
mov ebx, gs
in eax, 0xef
shr al, 1
push dword [esp + 1]
bswap eax
push dword [esp + 8]
ret 0xc
adc edx, edi
jmp 0x49b50a
adc edx, edi
dec dx
jmp 0x49b50c
lea edx, [esi + 0x40]
setb ah
setp al
rol al, 1
jmp 0x49b3f0
dec ax
lea eax, [ebp*4]
mov edx, 0x11fcfa34
jmp 0x49b3ba
popal
rol dx, cl
jmp 0x49b3d0
jl 0x49b406
jge 0x49b406
mov esp, 0x33c0a131
cmp byte [esi + 0x32c7a032], 0x85
mov bl, 0xaa
lds esi, [edi - 0x72]
sub edx, ebx
mov ax, 0x3b00
mov eax, dword [esp]
mov eax, dword [esp]
jmp 0x49b4d6
neg ax
jl 0x49b3ea
popal
rol dx, cl
dec ax
lea eax, [ebp*4]
mov edx, 0x11fcfa34
jmp 0x49b3ba
and al, 0xfc
sub esp, 0xd
jge 0x49b4b2
pop word [esp + 2]
pop dword [esp]
jmp 0x49b691
add cl, byte [edi + 0x3be92404]
add al, byte [eax]
add byte [edi + ecx*4 - 0x17ff137d], bh
pop ds
add byte [eax], al
add byte [esi], dl
sub esp, 0
call 0x49b47f
push ss
lea esp, [esp + 1]
lea ebx, [ebx - 0x1e]
stc
clc
pushal
call fcn.0049b4a2
nop
add dword [ecx + reloc.KERNEL32.dll_RtlUnwind], edx
add edi, dword [edx - reloc.KERNEL32.dll_RtlUnwind]
cmc
xchg dword [esp], ebx
sub esp, 0x11
pop dword [esp]
jmp 0x49b461
pop word [esp + 2]
call fcn.0049b4e8
jge 0x49b44d
add al, 0x24
jmp 0x49b544
lea eax, [ebp - 0x80]
cmc
jp 0x49b458
sub esp, 0
jmp 0x49b442
dec dx
pushal
mov dword [esp + 0x10], esi
lea edx, reloc.KERNEL32.dll_RtlUnwind
jmp 0x49b426
lea esp, [esp + 3]
jmp 0x49b5a9
push word [esp + 4]
jmp 0x49b592
lea esp, [esp + 1]
jmp 0x49b60d
sub eax, edx
sub esp, 0xb
jo 0x49b587
push word [esp + 4]
lea esp, [esp + 1]
jmp 0x49b60d
mov esi, ebx
pushal
bsr edx, ebx
jno 0x49b5f0
stc
bsf bp, bx
mov dword [esp], eax
popal
jmp 0x49b6b0
push esi
push edi
push ecx
jmp 0x49b5bb
stc
bsf bp, bx
mov dword [esp], eax
call fcn.0049b642
mov eax, 0x3acfa83a
invalid
jmp 0x49b5da
mov esp, eax
pushfd
lea esi, [eax + edx - 0x40]
jmp 0x49b5d5
lea esp, [esp + 3]
jmp 0x49b5a9
rep movsb byte es:[edi], byte [esi]
jmp 0x49b6d9
pushal
mov dword [esp + 0x18], edx
popal
cld
jmp 0x49b69a
popfd
jmp 0x49a47e
pop ecx
pop edi
pop esi
jmp 0x49b6b9