Function at 0x4a0c75
Capabilities:
Execute anti-debugging instructions

Disassembly:
add eax, 0xf071bda1
jmp 0x4a104f
add eax, 0x3378ed29
jmp 0x4a10e2
cpuid
mov dword [esp + 0x1c], edi
jmp 0x4a052f
and esi, ecx
jo 0x4a04de
cpuid
mov dword [esp + 0x1c], edi
lea edx, [edx + esi]
popal
jmp 0x4a0533
pushal
mov cx, bp
jmp 0x4a04f4
movzx ecx, byte [eax]
lea edx, reloc.mscoree.dll__CorExeMain
mov al, ch
mov edx, dword [esp]
dec dl
jmp 0x4a057a
lea edx, [edx + esi]
popal
add eax, reloc.mscoree.dll__CorExeMain
jmp 0x4a056d
mov al, ch
mov edx, dword [esp]
dec dl
jmp 0x4a057a
ja 0x4a0519
movzx ecx, byte [eax]
lea edx, reloc.mscoree.dll__CorExeMain
jmp 0x4a0557
bswap eax
pushfd
lea esp, [esp + 1]
mov edx, dword [esp]
setnp al
lea esp, [esp + 3]
jmp 0x4a05e3
pop dword [esp + 2]
push word [esp + 8]
xchg byte [esp + 1], ah
jmp 0x4a0603
mov ax, 0xa210
add esp, 0x12
jb 0x4a05ad
pop dword [esp + 2]
jmp 0x4a0681
sub cl, bl
mov dl, dh
mov dl, cl
pushal
jmp 0x4a05c3
inc dl
lea eax, [esi*4]
mov eax, edi
push dx
lea esp, [esp + 2]
jmp 0x4a0627
mov dword [esp + 5], edx
mov eax, dword [esp + 9]
lea esp, [esp + 0xc]
jmp 0x4a05ec
lea eax, [esi + ebp]
ror ah, 3
or ah, bh
lea eax, [eax + ebp]
mov eax, esp
clc
jmp 0x4a0635
ror dl, 0
je 0x4a0611
lea eax, [esi + ebp]
jmp 0x4a0653
ror dl, 0
bsf ax, bp
jb 0x4a0af1
mov al, byte [esp]
mov ax, bp
call fcn.004a0af6
test al, 0xcb
bound ebx, qword [ebp - 0x333f0014]
add ecx, dword [eax]
cld
ror ah, 3
or ah, bh
lea eax, [eax + ebp]
call fcn.004a0661
invalid
push word [esp + 8]
xchg byte [esp + 1], ah
mov dword [esp + 5], edx
mov eax, dword [esp + 9]
jmp 0x4a060b
mov ax, bp
lea eax, [edi*4]
bswap eax
shl ax, 0xb
jmp 0x4a0b79
mov al, byte [esp]
jmp 0x4a0adb
ror dl, 0
mov eax, 0x46ac03be
lea eax, [esi + edi]
mov al, byte [esp]
sub esp, 6
jmp 0x4a0ba2
jo 0x4a0bcc
lea esp, [esp]
btc eax, esi
call fcn.004a0bf2
invalid
lea esp, [esp]
btc eax, esi
lea esp, [esp + 2]
jmp 0x4a0c50
rol dl, 0
lea eax, [edx - 0x81]
neg eax
js 0x4a0cd2
jns 0x4a0c8b
cmpsb byte [esi], byte es:[edi]
xor ah, byte [eax - 0x5b08cd39]
aaa
cmpsd dword [esi], dword es:[edi]
ret 0x8e31
xchg word [esp + 1], ax
jmp 0x4a0ca8
mov ax, si
mov al, dh
jmp 0x4a0cd7
jmp 0x4a0ef2
sub bl, dl
lea edx, [ecx + ebx]
mov ax, 0xa818
bsr eax, edi
jnp 0x4a0c92
mov eax, 0xbd18418e
jmp 0x4a0ef7
mov ax, si
mov al, dh
call 0x4a0c75
lea eax, [esi + edi]
bsr edx, ecx
jae 0x4a0d05
jb 0x4a0d05
push ss
mov bl, byte [eax]
jg 0x4a0c75
dec ecx
stosd dword es:[edi], eax
ret 0x4c7d
lea eax, reloc.mscoree.dll__CorExeMain
mov ax, 0xaf80
mov dx, 0xfbdc
jmp 0x4a0e55
neg cl
mov ax, word [esp]
jmp 0x4a0d49
jo 0x4a0e3e
lea eax, [esi*4]
rdtsc
jmp 0x4a0cf2
mov ax, word [esp]
neg dx
jmp 0x4a0db8
inc dl
jae 0x4a0d31
mov ax, word [esp]
neg dx
bswap eax
jmp 0x4a0dba
jne 0x4a0d7b
lea eax, [esp - 0x93]
neg dh
jmp 0x4a0d91
neg dx
rdtsc
xchg dh, al
rdtsc
jmp 0x4a0d9f
lea eax, [esp - 0x93]
neg dh
lea edx, [edx*4]
jmp 0x4a0d65
lea edx, [edx*4]
neg dx
rdtsc
jmp 0x4a0d6a
neg cl
mov dx, 0xe799
sub esp, 0x15
jae 0x4a0dd8
jb 0x4a0dc2
ficomp word [eax - 0x32]
test eax, 0x2435ea58
push edi
mov esi, 0xc80f2889
bswap eax
inc cl
mov edx, eax
neg edx
jmp 0x4a0d58
mov eax, dword [esp + 3]
mov byte [esp + 0xa], al
cmp ax, si
jmp 0x4a0e08
mov eax, dword [esp + 3]
mov byte [esp + 0xa], al
cmp ax, si
xchg word [esp + 3], dx
lea esp, [esp + 1]
ror cl, 0
stc
jmp 0x4a0ecd
xchg word [esp + 3], dx
lea esp, [esp + 1]
call 0x4a0e17
call fcn.004a0e85
mov dword [esp], edi
xchg dword [esp + 4], ebp
shl dh, cl
mov dl, al
mov ah, 0x1f
mov dx, sp
jmp 0x4a0e5c
lea eax, [esi*4]
rdtsc
lea eax, reloc.mscoree.dll__CorExeMain
mov ax, 0xaf80
mov dx, 0xfbdc
mov ah, 0x3d
jmp 0x4a0cdc
lea ebp, [ebp - 0x2a]
xor dx, 0x5aac
rcl dl, 1
mov ah, byte [esp]
xchg dword [esp + 4], ebp
neg dl
jmp 0x4a0ea7
pushfd
add esp, 2
mov ah, 0x1c
pop ax
lea edx, reloc.mscoree.dll__CorExeMain
mov ax, word [esp]
jmp 0x4a0ed5
bswap edx
dec dl
mov edx, 0x130efe3
push dword [esp + 4]
ret 8
mov ah, 0x1c
pop ax
lea edx, reloc.mscoree.dll__CorExeMain
jmp 0x4a0e9b
jae 0x4a0e8c
pushfd
add esp, 2
jmp 0x4a0eb7
mov edx, dword [esp]
pushal
lea esp, [esp + 0x34]
not cl
lea eax, [ebp*4]
jmp 0x4a0f87
mov eax, 0xbd18418e
dec edi
mov edx, 0x621ea376
neg al
jmp 0x4a0d20
sub esp, 0x1b
bswap eax
call fcn.004a0f04
cmp ecx, dword [ebp - reloc.mscoree.dll__CorExeMain]
lea ecx, [ecx - 0x44]
rcl eax, 0x15
jle 0x4a0f54
sub esp, 0x1b
bswap eax
jmp 0x4a1016
shl eax, 2
btc dx, cx
jle 0x4a0ff6
mov dl, byte [esp]
jmp 0x4a1113
mov eax, ecx
bswap edx
mov dx, cx
not edx
jmp 0x4a0fd5
mov dl, byte [esp]
mov dx, cx
jmp 0x49f91b
lea esp, [esp + 3]
jmp 0x4a0feb
lea edx, [ebx*4]
lea edx, reloc.mscoree.dll__CorExeMain
pushal
jmp 0x4a107b
setle dh
mov eax, dword [eax + reloc.mscoree.dll__CorExeMain]
mov edx, ebx
neg dx
js 0x4a10be
lea edx, [eax + 0x45]
mov dl, ch
jmp 0x49f999
lea edx, [eax + 0x45]
mov dl, ch
jmp 0x49f999
jmp 0x4a10a8
mov edx, dword [esp + 6]
lea esp, [esp + 2]
jmp 0x4a10f8
pushfd
call fcn.004a10c0
jg 0x4a10ca
mov edx, dword [esp + 6]
lea esp, [esp + 2]
jmp 0x4a10f8
mov esp, esi
neg dl
js 0x4a1131
not dx
mov dh, dl
mov edx, ecx
call 0x4a1136
push es
lcall 0x527b, 0x599a6f08
int 0x66
mov edx, ecx
mov dx, cx
call fcn.004a109a
mov dh, dl
mov edx, ecx
jmp 0x4a114c
not dx
jmp 0x4a111b
adc dh, 0x8d
jg 0x4a11ae
mov dh, dl
jmp 0x4a11b6
mov dh, dl
jmp 0x4a11b6
push eax
ret
lea esp, [esp + 3]
jmp 0x4a246c
lea esi, [esi*4]
mov dword [esp], ecx
sub esp, 0xf
jmp 0x4a2189
pop edi
jmp 0x4a241d
cld
rep movsb byte es:[edi], byte [esi]
pop ecx
jmp 0x4a21ae
pop esi
popfd
jmp 0x4a0513
bsf ax, di
lea esi, [esi*4]
mov dword [esp], ecx
sub esp, 0xf
lea esp, [esp + 3]
lea esp, [esp + 0xc]
popal
mov ecx, edx
jmp 0x4a21c4
pushal
cmc
ja 0x4a2457
bsf ax, di
jmp 0x4a219f
push edi
push ecx
mov esi, eax
jmp 0x4a2802
bsf dx, bx
jno 0x4a364b
mov esp, 0xf63c71d3
aad 0xeb
and dl, byte [edi - 0x37]
pop ecx
cmp bl, cl
or ch, al
or esp, dword [edx - reloc.mscoree.dll__CorExeMain]
and al, 2
not ch
jmp 0x4a3635
call fcn.004a3f01
and eax, 0xb65b3cae
add dword [reloc.mscoree.dll__CorExeMain], esi
jo 0x4a363b
mov edx, esp
jmp 0x4a364f
sbb bh, byte [ebp - 0x74]
dec edi
xchg ecx, eax
xor dword [ecx - reloc.mscoree.dll__CorExeMain], esp
mov bl, 0xaa
lds esi, [edi - 0xa]
aad 0x8b
aam 0x8d
inc ebp
push eax
not ch
mov edx, esp
lea eax, [ebp + 0x50]
rcr ecx, 0x1d
jp 0x4a37ab
jnp 0x4a373c
mov cs, word [edx + eax*4]
in eax, 0x14
movsb byte es:[edi], byte [esi]
sbb byte [ecx + 0x5c9b6809], bl
js 0x4a360b
lea esi, [ecx + edx - 0x40]
push esi
jmp 0x4a2cf2
jbe 0x4a36d0
mov cx, 0x2757
cmp esi, eax
jmp 0x4a36d6
mov cx, 0x2757
cmp esi, eax
call fcn.004a36ac
popfd
sbb al, 0xb2
aad 0x24
lcall 0xdb6b, 0x98f969ed
or byte [ebx + 0x664c7dc2], ch
xchg ecx, edx
xchg cx, ax
xchg dword [esp + 4], esi
pushal
xchg cx, ax
pop ax
jmp 0x4a371b
xchg cl, al
lea esp, [esp + 2]
push dword [esp + 0x20]
ret 0x24
lea ecx, [edx + 0x8e]
not dl
jmp 0x4a37b3
lea ecx, [edx + 0x8e]
not dl
mov cx, 0x1f46
shl dx, cl
jmp 0x4a36a2