Function at 0x4bddfb
Capabilities:
Execute anti-debugging instructions

Disassembly:
lea ebx, [ebx*4]
mov si, word [esp + 3]
cpuid
jmp 0x4bde2e
not ebp
add esp, 0x2a
cld
lea ebx, reloc.mscoree.dll__CorExeMain
jmp 0x4bdde5
shr ah, 6
rdtsc
mov di, 0x20db
mov cx, 0x8fce
setg dh
jmp 0x4bde78
std
xchg word [esp + 4], ax
stc
lea eax, reloc.mscoree.dll__CorExeMain
jmp 0x4bdea0
setno cl
cpuid
inc ch
push dword [esp + 0x10]
seto cl
not edi
jmp 0x4bde62
xchg si, ax
std
xchg dword [esp + 0xa], edi
lea ecx, [esp + edx]
mov al, byte [esp + 2]
jmp 0x4bdf7a
btc di, si
mov ah, byte [esp + 4]
mov bp, 0xb890
mov bx, 0xb047
jmp 0x4bde8a
rdtsc
pushfd
push dword [esp + 0xb]
mov ch, 0xad
mov ecx, 0xc342c6d7
call fcn.004bdf49
pop word [esp + 7]
mov edx, dword [esp + 6]
pop esi
jmp 0x4bdfb7
lea eax, [ebx*4]
push dword [esp + 2]
lea ecx, [ecx + 0x44]
lea esp, [esp + 2]
jmp 0x4bf72c
mov ebp, edi
neg dx
mov edx, 0xcdcd7973
mov dword [esp], edx
jmp 0x4be01c
push word [esp]
mov ah, 0x6f
lea esp, [esp + 3]
mov bp, word [esp + 6]
mov ebx, dword [esp + 3]
mov si, 0x6169
jmp 0x4bdfed
lea esp, [esp + 6]
pushal
mov bp, 0xf02d
xchg byte [esp + 0x10], cl
popal
jmp 0x4be063
push dword [esp + 2]
push dword [esp + 4]
bsf bx, si
xchg ebx, ecx
pop word [esp + 4]
adc di, 0x691c
jmp 0x4be003
xchg dx, cx
rol bp, cl
mov ax, sp
pop word [esp + 1]
jmp 0x4be0aa
xchg byte [esp + 4], ah
mov ecx, 0x2969a87a
lea esp, [esp]
mov ecx, dword [esp + 1]
btr edi, eax
jmp 0x4be04d
mov cx, 0x4e55
xchg dx, ax
push word [esp + 4]
mov edx, 0x6571b8c2
std
mov word [esp + 3], dx
jmp 0x4be033
rdtsc
neg ax
mov cx, bp
xchg byte [esp + 2], al
cpuid
jmp 0x4be0d3
mov cx, 0x66bb
mov word [esp], cx
rdtsc
mov byte [esp], ah
mov cl, ah
rdtsc
jmp 0x4be094
lea eax, [edx + edi]
pop ax
xchg byte [esp], cl
adc edi, 0x6d89d92a
jmp 0x4be1c6
push word [esp + 1]
lea esi, [edx + esi]
pop word [esp]
mov ah, byte [esp + 2]
shr dl, cl
push word [esp + 1]
jmp 0x4be0bd
xchg dword [esp], edx
bswap ebp
pop word [esp]
rdtsc
rdtsc
mov ebp, dword [esp + 2]
jmp 0x4be07c
xchg di, ax
mov bx, si
mov ax, word [esp]
lea ebx, [eax + ebp]
sub esp, 0x1b
cmp di, 0x87b4
jmp 0x4be13d
mov byte [esp], cl
xchg ebp, edi
mov ax, 0x5c1
add esp, 1
xchg ebx, ecx
cld
jmp 0x4be10d
mov ebx, dword [esp + 7]
mov ecx, esp
mov dh, bl
pop ax
cmp dx, ax
mov dl, bl
jmp 0x4be17e
bswap edx
sub esp, 0x15
lea esp, [esp + 0x2d]
pushfd
mov edi, esp
pop di
jmp 0x4be39a
mov dl, ch
not cx
mov word [esp], dx
not si
lea ebx, [ebp + 0x93]
bsf ebx, ebx
jmp 0x4be12c
neg bh
bswap ebx
xchg dword [esp + 0x15], eax
bsf edx, esi
lea ecx, [edx + edi]
xchg dword [esp + 0xb], edi
jmp 0x4be14e
lea eax, [ebp*4]
mov si, dx
mov di, ax
mov edi, 0x2fc64a44
std
mov word [esp], bp
jmp 0x4be167
mov bp, 0xfdfb
mov edi, 0xb20a80a6
pop word [esp]
lea edx, reloc.mscoree.dll__CorExeMain
mov bp, 0x296f
mov dh, byte [esp + 1]
jmp 0x4be198
dec si
pop word [esp + 6]
call fcn.004be1e3
pop edi
inc ebx
outsd dx, dword [esi]
jb 0x4be24f
js 0x4be271
dec ebp
popal
imul ebp, dword [esi], reloc.mscoree.dll__CorExeMain
ror dword [edx - 0x43], cl
pushfd
jmp 0x754b65ba
mov ebp, 0x839ce99c
push dword [esp + 0xf]
lea esp, [esp + 5]
xchg ebp, eax
not edi
shr al, 0
jmp 0x4be1f9
bsr di, si
xchg byte [esp], bl
mov al, ch
mov word [esp], ax
lds esp, [esi - 0x77]
add al, 0x24
mov bh, 0x10
sub esp, 0xe
jmp 0x4be217
jmp dword [ebp - 0xb]
dec bl
std
mov cl, byte [esp + 1]
cmp bl, cl
xchg ebx, esi
lea esp, [esp + 2]
jmp 0x4be247
dec ah
lea edi, [esi*4]
mov esi, dword [esp]
mov ecx, dword [esp]
neg cx
bsf eax, ebp
jmp 0x4be2d5
not cx
cmc
mov edi, dword [esp]
xchg dx, ax
lea ebx, [ebp - 0x2c]
sub esp, 7
jmp 0x4be0f7
mov byte [esp], ch
sub esp, 0x1c
xchg dword [esp + 0x1d], ecx
mov word [esp + 0x14], di
sub esp, 0x1d
lea esp, [esp + 0x41]
jmp 0x4bf051