Function at 0x4f569d
Capabilities:
Execute anti-debugging instructions

Disassembly:
cpuid
mov si, cx
jmp 0x4f56f6
setl ch
push word [esp + 6]
pop edi
xchg ah, ch
mov dl, ch
xchg byte [esp + 7], bh
jmp 0x4f570f
bts cx, si
setl dh
mov dword [esp + 6], ebp
xchg word [esp + 0xa], dx
jmp 0x4f57c2
not ch
xchg dword [esp + 5], eax
lea esi, [ebx - 0xfa]
pop dword [esp + 9]
setp dh
mov byte [esp + 8], bl
jmp 0x4f56cc
mov eax, 0xc24b6633
neg esi
neg bh
xchg dword [esp + 7], edx
mov bp, 0x6f3f
jmp 0x4f56df
pop ax
push esi
lea ebx, [eax*4]
push edi
jmp 0x4f578f
xchg ah, dh
lea esp, [esp]
lea edi, [ecx + ecx]
pop dx
mov ch, 0x15
bswap ecx
jmp 0x4f5749
lea ebp, [esp + esi]
mov dh, ch
xchg word [esp + 7], di
cmc
inc bh
xchg cx, bp
jmp 0x4f57aa
mov ebp, 0xa9ac8572
rcl ecx, 0x15
mov bx, word [esp + 4]
lea esi, reloc.mscoree.dll__CorExeMain
setp ch
push dword [esp]
jmp 0x4f576f
setge ah
xchg word [esp + 2], bx
neg si
cpuid
xchg bh, cl
mov ebp, esi
jmp 0x4f57d2
mov byte [esp + 0xc], bh
mov bl, 0xc2
inc eax
pop bx
mov esi, eax
add esp, 9
jmp 0x4f575f
mov bx, di
xchg bl, ah
neg cl
pop ax
xor dx, si
sub esp, 0x16
jmp 0x4f58e0
rdtsc
pop ecx
bsr dx, cx
lea ecx, reloc.mscoree.dll__CorExeMain
mov ebp, edx
jmp 0x4f5848
sub esp, 0x1e
clc
mov dl, 0x10
xchg word [esp + 0x1d], bx
cpuid
inc di
jmp 0x4f580b
lea ecx, [esi*4]
xchg byte [esp + 8], cl
xchg ebp, esi
xchg cl, bh
inc esi
jmp 0x4f5890
mov bp, 0x7eb8
mov esi, 0x8b110d02
mov ebx, 0xe4a793e0
mov byte [esp + 0x1b], dh
pop word [esp + 7]
stc
jmp 0x4f5832
xchg ebx, edi
cpuid
mov eax, 0x66c0e3d
rdtsc
mov al, 0x89
push esi
jmp 0x4f5821
mov edi, dword [esp]
dec di
sub esp, 0x1c
xchg dword [esp + 0x1a], ebx
not si
jmp 0x4f58c2
pop word [esp + 3]
rdtsc
mov word [esp + 7], cx
mov bp, word [esp + 0x15]
mov ebx, 0x38ae57ea
mov bp, 0x35ab
jmp 0x4f587a
xchg dword [esp + 0xa], edi
bswap edi
lea ecx, [ebx*4]
xchg bx, si
jmp 0x4f590e
rdtsc
rdtsc
push dword [esp + 0x35]
lea edx, reloc.mscoree.dll__CorExeMain
lea esp, [esp + 0x11]
sub esp, 0x17
jmp 0x4f58ac
push dword [esp + 0x17]
lea esi, [ebp + ebp]
pushal
lea esp, [esp + 0x46]
mov esi, dword [esp]
setg bh
jmp 0x4f586a
mov ax, word [esp + 0x1f]
mov si, word [esp + 0x37]
mov dx, 0xbf4e
jmp 0x4f5c04
xchg dword [esp + 1], ebx
mov di, 0x910
pop word [esp + 1]
mov bl, 0x92
pop dx
mov ebx, dword [esp + 6]
jmp 0x4f58f8
xchg edx, ebx
sub dx, di
mov edi, 0x449e9013
mov eax, dword [esp]
lea edi, [ebp - 0xac]
mov si, ax
call fcn.004f5942
btc edx, ebx
sub esp, 0xa
xchg di, bp
pop dx
pop dword [esp + 3]
jmp 0x4f59b4
pop bp
mov cx, word [esp + 3]
cpuid
mov ax, word [esp + 9]
pop edi
xchg byte [esp + 2], ah
jmp 0x4f5b01
lea edi, [esp + ecx]
xchg bl, ah
inc edx
lea ebx, [esi + ebp]
lea ebp, [eax*4]
bsr ax, cx
jmp 0x4f5958
mov esi, dword [esp]
mov ebx, dword [esp]
setl ch
mov byte [esp], bl
xchg si, bx
push word [esp]
jmp 0x4f5a5d
xchg edi, ecx
pop dx
rcl edi, 0x13
mov dx, word [esp + 3]
pop word [esp]
xchg si, dx
jmp 0x4f59ec
mov bx, cx
call fcn.004f5aa9
into
inc ebp
aad 0xbc
dec edi
mov byte [0x364f678], al
invalid
xchg edx, eax
mov bx, 0x123d
mov bx, di
inc bl
mov eax, 0xdfae49cf
or bl, dl
jmp 0x4f5a2a
rdtsc
mov eax, dword [esp + 3]
neg ebx
dec bl
mov ah, 0x6e
rcl bl, cl
jmp 0x4f5a40
mov esi, dword [esp + 4]
mov al, byte [esp + 4]
inc cx
mov word [esp + 3], cx
clc
sbb dx, bp
jmp 0x4f5a15
sub esp, 0x15
lea esp, [esp + 0x51]
mov di, dx
cpuid
lea ebp, [eax + esi]
clc
jmp 0x4f59d3