Function at 0x4a7e00
Capabilities:
Check for vm using instruction vpcext

Disassembly:
jb fcn.004a7e00
insd dword es:[edi], dx
mov edi, 0x3fa5a5a5
insd dword es:[edi], dx
mov eax, dword [0x1840bf6e]
inc esi
add byte [ecx + 0x3f018065], ah
insd dword es:[edi], dx
aas
insd dword es:[edi], dx
add ah, cl
mov cl, 0xe8
add al, byte [eax]
invalid
and eax, 0x3410260
jne 0x4a7e2c
mov ah, 0x48
pushal
add dh, byte [eax]
pushal
add byte [ecx + 0x3802e1b6], ah
add esp, dword [eax + 1]
inc ecx
add byte [ebp + 0x69], dh
pop edi
je 0x4a7e82
js 0x4a7dbf
add byte [ebx + 0x600c0004], ch
inc eax
add dword [eax], esp
mov edi, 0xdfff0303
std
fistp word [edi]
push edx
push eax
dec esp
jo 0x4a7e51
invalid
add edx, dword [esi + 0x51]
mov es, word [ecx]
nop
cmp ecx, esi
sbb al, 0x51
dec esi
add al, byte [eax]
pop es
push ebp
push ecx
cli
nop
xor byte [ecx - 0x60], dh
xor dword [edx - 0xf], esi
add eax, esi
push 0x72310b20
xchg edx, eax
and byte [ebx], cl
xor dword [edx - 0x6e], esi
in al, 0x70
add esp, esp
mov al, byte [0x7085092]
jo 0x4a7e65
ljmp 0x7434:0xe45550e4
in al, 0x34
je 0x4a7e71
lock add byte [edi], bh
je 0x4a7ead
je 0x4a7e5f
mov al, 0xd
in eax, 0x71
aas
je 0x4a7eb6
or eax, 0x743f71e5
aas
je 0x4a7eba
aas
je 0x4a7ebb
aas
je 0x4a7eaf
je 0x4a7e7b
adc dword [0x67981], edx
push es
cmp dword [ecx + 6], 0x15130600
popal
push es
jns 0x4a7e8b
add byte [esi], al
adc edx, dword [0xc00661]
xchg edx, eax
rol byte [eax], 0x92
jne 0x4a7ecf
fild word [ecx]
aad 1
pop edi
inc eax
xor byte [ebx], al
push dword [esi + 0x30]
and edi, esi
dec edi
xchg ecx, eax
sbb edi, edi
jbe 0x4a7eb7
sbb edi, edi
jbe 0x4a7ea8
add bh, bh
jbe 0x4a7e83
inc edx
daa
push dword [esi - 1]
jbe 0x4a7eb0
push dword [esi - 1]
jbe 0x4a7eb2
push dword [esi + 0x72]
jbe 0x4a7f27
insd dword es:[edi], dx
push dword [esi]
jbe 0x4a7eb9
add bh, bh
invalid
push dword [esi + 0x3f]
xchg ebx, eax
lahf
pop esp
cmp dword [ebx + 0x3bc0405f], edx
push dword [esi - 0x1f]
adc al, 0xdf
xor al, 0
pop edi
inc eax
push dword [esi - 0x6b]
and eax, 0x900076ff
aas
int1
add ah, bh
push dword [esi - 1]
jbe 0x4a7e80
lodsd eax, dword [esi]
add byte [eax], al
lahf
lodsd eax, dword [esi]
push edx
sub dword [edx + 0x42], edx
jnp 0x4a7e8b
lodsd eax, dword [esi]
lahf
lodsd eax, dword [esi]
in al, 0x9f
lodsd eax, dword [esi]
push edx
inc ecx
push ecx
aas
lahf
lodsd eax, dword [esi]
add al, 0xb6
add byte [edi + 0x22510ad], bl
jo 0x4a7f0f
xchg esi, eax
lodsd eax, dword [esi]
call 0x5fbd907a
inc eax
push eax
add eax, 0x27d1ffff
daa
pop edi
inc eax
and ch, byte [eax + 0x405fcf00]
pop edi
inc eax
pop edi
mov al, 0x5f
mov al, 0x72
and byte [ebx - 0x50], bl
mov cl, 0x17
push dword [eax]
adc dword [eax + 0x39], edx
fistp qword [esi]
sar dword [esi], cl
push eax
cmp edi, ebx
sar dword ds:[esi], cl
pause
pushal
or ebx, edi
adc ch, al
call dword [eax - 0x2dc127ac]
aas
sar byte [esi], cl
pop edi
mov dl, 0xf8
daa
sub dword [ebp - 0x3e08ef8f], 0x5fb25f35
mov dl, 0xff
inc ecx
add bl, byte [edi]
pop ds
pop ds
jg 0x4a7f89
push ebx
xor eax, 0x31b3b13c
push ss
rol dword [edi + edi*8], 1
aas
sbb eax, 0xa19ff03e
add bl, byte [edi]
nop
sbb bl, byte [edi]
pop ds
mov ch, 0
add byte [edi], bl
mov ch, 0xe4
add byte [eax], al
pop ds
mov ch, 0
add byte [edi], bl
pop ds
pop ds
notrack call ds:[edi]
add dword ds:[0x3e1f3e1f], edx
pop ds
pop ds
pop ds
pop ds
adc byte ds:[ebx], ch
pop ds
mov ch, 0xf3
invalid