Function at 0x4b4faf
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov al, ah
inc ecx
jbe 0x4b513b
mov byte [esp], ch
xchg word [esp + 1], ax
jmp 0x4b503c
mov ecx, dword [esp]
bswap eax
jmp 0x4b5010
bswap eax
sub ecx, eax
jmp 0x4b5012
dec dl
neg ecx
jb 0x4b4fe2
mov ecx, dword [esp]
jmp 0x4b4fed
sub ecx, eax
xchg edx, eax
pushal
sub esp, 0x1c
jmp 0x4b5074
lea ecx, [ebx*4]
pop word [esp + 0x29]
lea esp, [esp + 2]
jmp 0x4b5292
mov ax, word [esp]
add esp, 3
lea esp, [esp + 1]
jmp 0x4b50c7
call fcn.004b51af
jmp 0x4b5162
jnp 0x4b501d
lea ecx, [ebx*4]
pop word [esp + 0x29]
call 0x4b5088
push ecx
mov ch, 0x34
lea ecx, [ebx + ebp]
bswap ecx
not cx
lea ecx, [ecx - 0xb3]
jmp 0x4b509e
xchg dword [esp], ecx
push edx
lea esp, [esp + 1]
push word [esp + 2]
jmp 0x4b5110
mov byte [esp], ch
xchg word [esp + 1], ax
mov ax, word [esp]
add esp, 3
lea esp, [esp + 1]
jmp 0x4b5005
sub esp, 0x1e
lea esp, [esp + 0x5e]
call fcn.004b50cc
loop 0x4b5172
pop ss
loop 0x4b5162
cmpsb byte [esi], byte es:[edi]
daa
mov bh, 0xd2
and dword [ecx + reloc.KERNEL32.dll_LeaveCriticalSection], ebx
mov esi, 0x2474ff66
add cl, byte [ebp - 0x72fcdb9c]
dec ecx
ret 0x6660
push word [esp + 2]
lea esp, [esp + 3]
lea ecx, [ecx - 0x3e]
pushal
mov word [esp + 0x1c], dx
pushal
jmp 0x4b50f3
jmp 0x4b50b4
lea esp, [esp + 3]
lea esp, [esp + 1]
cwde
call fcn.004b505c
shr eax, 1
add byte [eax], al
add bl, dh
push word [esp + 1]
or eax, 0xab17e49d
setle byte [ebx + ebp*2]
cmpsb byte [esi], byte es:[edi]
outsd dx, dword [si]
jbe 0x4b52f9
cbw
cwde
inc cl
jnp 0x4b5052
jp 0x4b5052
jne 0x4b5285
jno 0x4b52b6
jecxz 0x4b52ff
mov ch, 0x22
mov al, 0xd7
and dl, byte [ebp - 0x554fe51d]
push ds
invalid
mov eax, 0xee832e99
add al, 0x66
neg edx
neg dx
jne 0x4b5382
mov dl, byte [esp]
inc dx
jmp 0x4b5322
mov ax, 0xa59d
jmp 0x4b5343
mov dl, byte [esp]
inc dx
mov ax, 0xa59d
push edx
pushal
bsf bp, si
jmp 0x4b534f
jb 0x4b536a
jae 0x4b536a
pop edx
bswap edx
xchg dh, al
lea edx, [esi - 0x95]
inc ax
jmp 0x4b5384
call fcn.004b53cd
lahf
pop es
xchg edi, eax
add dword [edx + reloc.KERNEL32.dll_LeaveCriticalSection], edi
mov eax, 0x5950b7c
insb byte es:[edi], dx
lahf
pop edi
test bl, ch
mov dh, 0x73
and cl, byte [edi]
sbb cl, 0x79
std
dec dword [ebp - reloc.KERNEL32.dll_LeaveCriticalSection]
dec dword [edi]
lcall 0x11, 0xe8ec86c5
add byte [eax], al
jmp 0x4b533a
jae 0x4b53a8
jb fcn.0048cd65
lea ecx, [eax - 0x89]
setp ch
xchg ah, ch
call 0x4b53ad
sub byte [ebx + 0x7dbd4e2b], bh
push ds
imul ecx, dword [eax - reloc.KERNEL32.dll_LeaveCriticalSection], 0xfffd79b8
mov ecx, dword [esi]
jmp 0x4b53b5
jmp fcn.0048cd65
sbb eax, ebp
jae 0x4b5889
mov dx, 0x747
inc dh
xchg dh, al
jmp 0x4b5443
xchg dh, al
add dword [esi + 4], ecx
call fcn.004b541c
mov cx, 0xd067
xchg dx, ax
jmp 0x4b5676
xchg ch, cl
mov ch, byte [esp]
mov ecx, dword [esp]
push eax
call 0x4b54a1
test byte [ebx + 0x34857613], 0xcc
inc esp
fidivr dword [ebp + 0x7071f24c]
jae 0x4b550a
test dword [eax + 0x66], esp
mov dword [esp + 0xa], edx
mov byte [esp + 0x17], ch
mov ch, bh
lea ecx, [esp + esi]
jmp 0x4b55b8
lea edx, [esp + ecx]
mov ecx, 0x6ab0c146
jmp 0x4b54e8
lea edx, [esp + ecx]
mov ecx, 0x6ab0c146
mov edx, dword ss:[eax]
setnp ch
jmp 0x4b5482
lea esp, [esp + 3]
push dword [esp + 0x44]
ret 0x48
jp 0x4b5561
les ecx, [ebp - 0x23257678]
arpl word [ecx - 0x751e848], di
mov ch, 0x56
add esp, 1
jmp 0x4b54f0
xchg dword [esp + 0x44], edx
call 0x4b550d
lea edx, [edx - 0x26]
bsr cx, cx
setle ch
mov ecx, 0x2032f874
pushal
lea ecx, [esp + ebx]
jmp 0x4b5525
pop dword [esp]
xchg dword [esp + 0x20], edx
lea ecx, [edx + edx]
lea ecx, [ebx*4]
setbe ch
push edx
mov ch, byte [esp + 1]
jmp 0x4b5549
mov eax, dword [esi]
lea edx, [ebx*4]
btr edx, edx
ja 0x4b54e0
jbe 0x4b54c8
mov ecx, dword [eax]
not dx
lea edx, [ebp + 0x5f]
lea edx, [edx + edi]
mov dx, word [esp]
jmp 0x4b56c2
mov dword [esi], ecx
sub esp, 0xc
jg 0x4b57d8
rcl dh, 3
neg dh
push esp
jmp fcn.0048cd65
neg dh
push esp
jmp fcn.0048cd65
rcl dh, 3
jmp 0x4b5776
mov dx, 0x747
inc dh
jmp 0x4b5441