Function at 0x4f6440
Capabilities:
Execute anti-debugging instructions

Disassembly:
add byte [eax], al
popfd
pushfd
add ebp, 0x6b
popfd
lea ebp, [ebp - 0x6b]
je 0x4c358c
jne 0x4c358c
jmp 0x4c358a
pushfd
push ebp
mov ebp, esp
leave
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg edi, edx
lea esp, [esp - 4]
mov dword [esp], edi
mov edi, edx
mov edx, dword [esp]
rdtsc
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 1]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
and eax, 1
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x2c]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
xchg edx, eax
xchg dword [esp], eax
xchg edx, eax
lea esp, [esp + 4]
xchg ecx, eax
xchg dword [esp], ecx
xchg ecx, eax
lea esp, [esp + 4]
je 0x51863c
jne 0x4d0228
jmp 0x51863a
xchg byte [ecx - 0x73], bh
and al, 0xfc
lea esp, [esp - 4]
mov dword [esp], eax
mov eax, dword [edi - 4]
xchg dword [esp], eax
xchg ecx, eax
mov ecx, dword [edi]
push eax
xchg ecx, eax
pop ecx
add eax, dword [ebp + 0xc]
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x73]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg ebx, eax
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, eax
mov eax, dword [esp]
xchg ecx, eax
mov ecx, dword [edi - 8]
push eax
xchg ecx, eax
pop ecx
add eax, esi
pushfd
add ebp, 0x30
popfd
lea ebp, [ebp - 0x30]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
pushfd
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 8]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
call 0x4c3601
mov ecx, ecx
add dword [esp], 0x5b47b
xchg dword [esp], ebx
push edx
mov edx, dword [esp + 4]
lea edx, [edx + 0x68]
xchg dword [esp + 4], edx
mov dword [esp + 4], edx
mov edx, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], ebx
mov edi, edi
xchg dword [esp], ebx
push ebx
mov ebx, dword [esp + 4]
lea ebx, [ebx + 0x29]
xchg dword [esp + 4], ebx
mov dword [esp + 4], ebx
mov ebx, dword [esp]
lea esp, [esp + 4]
popfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x21]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
jmp fcn.004e7968
cmpsb byte [esi], byte es:[edi]
rol dword [edi + 0x241c87fb], 0x87
sti
xchg ebx, edi
xchg dword [esp], ebx
xchg ebx, edi
lea esp, [esp + 4]
xchg ecx, eax
mov ecx, esi
push eax
xchg ecx, eax
pop ecx
xchg ecx, esi
xchg dword [esp], ecx
xchg ecx, esi
lea esp, [esp + 4]
xchg edi, ebx
xchg dword [esp], edi
xchg edi, ebx
lea esp, [esp + 4]
xchg ebp, eax
xchg dword [esp], eax
xchg ebp, eax
lea esp, [esp + 4]
ret
popfd
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 0x3e]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
je 0x4c7478
jne 0x4c7478
jmp 0x4c7476
aaa
xchg ecx, edi
xchg dword [esp], ecx
xchg ecx, edi
popfd
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x38]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
je 0xb5a994
jne 0xb5a994
jmp 0xb5a992
jmp 0x51ec28
pushfd
pushfd
add ebp, 0x20
popfd
lea ebp, [ebp - 0x20]
xchg ecx, eax
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, eax
mov eax, dword [esp]
xchg ecx, edx
lea esp, [esp - 4]
mov dword [esp], ecx
mov ecx, edx
mov edx, dword [esp]
rdtsc
push ecx
mov ecx, eax
pop ecx
and eax, 1
push esi
mov esi, dword [esp + 4]
lea esi, [esi + 2]
xchg dword [esp + 4], esi
mov dword [esp + 4], esi
mov esi, dword [esp]
lea esp, [esp + 4]
xchg edx, eax
xchg dword [esp], eax
xchg edx, eax
lea esp, [esp + 4]
xchg ecx, eax
xchg dword [esp], ecx
xchg ecx, eax
lea esp, [esp + 4]
je 0x49ec00
jne 0x4e383c
jmp 0x49ebfe
add byte [eax], al
popfd
push ebp
mov ebp, esp
leave
je 0x4dfb38
jne 0x4dfb38
jmp 0x4dfb36
and al, 4
cmp cx, word [eax + 6]
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x78]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
cmp al, 0x24
lea esp, [esp + 4]
jae 0x49fae8
add edi, eax
pushfd
add ebp, 3
popfd
lea ebp, [ebp - 3]
jmp 0x515750
call fcn.004eb958
jne 0x51ec6a
sub ecx, ebp
cld
push dword [ebp + 0x3b]
pushfd
dec edi
pop esp
clc
ja 0x51ebd8
movsd dword es:[edi], dword [esi]
inc esi
jns 0x51ec29
jo 0x51ebf0
jl 0x51ec54
lea ebp, [0x8df98714]
and al, 0xfc
mov dword [esp], ecx
mov ecx, edi
mov edi, dword [esp]
xchg edi, eax
mov eax, dword [esp + 4]
push edi
xchg edi, eax
pop eax
lea edi, [edi]
pushfd
add ebp, 0x72
popfd
lea ebp, [ebp - 0x72]
mov dword [esp + 4], edi
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x5d]
inc eax
pop ebp
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
lea edi, [0xb632b4]
mov edi, dword [edi + 0x14]
pushfd
add ebp, 0x47
popfd
lea ebp, [ebp - 0x47]
xchg dword [esp], edi
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x1e]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
ret
add byte [eax], al
lea esp, [esp - 4]
mov dword [esp], ebx
mov ebx, dword [edi - 4]
xchg dword [esp], ebx
xchg ecx, eax
mov ecx, dword [edi]
push eax
xchg ecx, eax
pop ecx
add eax, dword [ebp + 0xc]
push ecx
mov ecx, dword [esp + 4]
lea ecx, [ecx + 0x41]
xchg dword [esp + 4], ecx
mov dword [esp + 4], ecx
mov ecx, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, eax
mov eax, dword [esp]
xchg ecx, eax
mov ecx, dword [edi - 8]
push eax
xchg ecx, eax
pop ecx
add eax, esi
push edi
mov edi, dword [esp + 4]
lea edi, [edi + 0x73]
xchg dword [esp + 4], edi
mov dword [esp + 4], edi
mov edi, dword [esp]
lea esp, [esp + 4]
xchg esi, eax
lea esp, [esp - 4]
mov dword [esp], esi
mov esi, eax
mov eax, dword [esp]
pushfd
lea ecx, [ecx]
call 0xb5aa03
pushfd
add ebp, 0x23
popfd
lea ebp, [ebp - 0x23]
add dword [esp], 0xff9c4079
xchg dword [esp], ebx
push eax
mov eax, dword [esp + 4]
lea eax, [eax + 0x37]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg dword [esp + 4], ebx
push eax
mov eax, dword [esp + 4]
lea eax, [eax]
xchg dword [esp + 4], eax
mov dword [esp + 4], eax
mov eax, dword [esp]
lea esp, [esp + 4]
xchg dword [esp], ebx
pushfd
add ebp, 0x5a
popfd
lea ebp, [ebp - 0x5a]
popfd
lea eax, [eax]
jmp fcn.004e7968