Function at 0x4e8795
Capabilities:
Execute anti-debugging instructions

Disassembly:
push 0xf04d6eb0
jmp 0x4e8830
lea esp, [esp + 3]
mov byte [esp], dh
call 0x4e8795
pop esp
jmp 0x4e88a4
not ebx
xchg dword [esp + 0xc], ecx
shr cx, cl
cmc
bts cx, cx
lea ebx, reloc.KERNEL32.dll_LockFile
jmp 0x4e85a0
mov dword [esp], esi
call fcn.004e87c5
mov dword [esp + 8], edi
lea esp, [esp + 8]
jmp 0x4e882a
push ebx
mov dword [esp], edi
mov dword [esp], esp
pushfd
pushfd
mov dword [esp + 4], ebp
jmp 0x4e87e6
pushfd
jmp 0x4e7a87
mov si, word [esp]
setae dh
rdtsc
jmp 0x4e886c
lea esp, [esp + 2]
push ecx
pushfd
mov dword [esp], edx
push esi
mov dword [esp], ebx
jmp 0x4e881b
neg bx
jmp 0x4e88cf
mov edi, dword [esp + 0x2c]
mov ah, byte [esp]
bsf bx, ax
jl 0x4e8856
jge 0x4e8883
pop ecx
fdiv qword [edx + 0x15]
in al, 0x5b
test eax, 0xdbf766c8
neg bx
jmp 0x4e88cf
lea edx, [ebp + 0x9e]
rcl ebp, cl
lea esp, [esp + 2]
jmp 0x4e8961
lea esp, [esp + 1]
mov dword [esp], eax
push ax
push si
pop word [esp]
mov word [esp], dx
jmp 0x4e8847
lea edx, [ebp + 0x9e]
rcl ebp, cl
lea esp, [esp + 2]
jmp 0x4e8961
lea esi, [esp]
mov ecx, ebp
sub esp, 0x1e
jp 0x4e8888
jnp 0x4e88b9
pop ebp
salc
inc esp
and ebx, esi
popal
int 0x4b
fstp xword [esi + 0x796e884d]
pop eax
mov ebx, 0x8a7eb792
std
lea ecx, reloc.KERNEL32.dll_LockFile
mov bx, 0xe3c2
lea ebx, reloc.KERNEL32.dll_LockFile
lea ebx, [eax + ebx]
jmp 0x4e87ac
ja 0x4e891e
jbe 0x4e891e
push es
lea ebx, reloc.KERNEL32.dll_LockFile
push ds
mov ebx, gs
nop
out dx, eax
mul cl
and byte [ebx - 0x66], ah
mov ecx, edi
lea ebx, reloc.KERNEL32.dll_LockFile
lea edx, [esi + esi]
sub esp, 4
jp 0x4e8948
add esp, 3
lea esp, [esp + 1]
mov bx, di
bswap ebx
mov bx, word [esp]
jmp 0x4e899b
jmp 0x4e89ed
sub esp, 0xa4
mov ebp, esp
lea ebx, reloc.KERNEL32.dll_LockFile
inc edx
jmp 0x4e8908
xor edi, 0x66d54d3e
lea edx, [esi + ebp]
not bx
setl dl
jmp 0x4e89a2
bswap ebx
mov bx, word [esp]
not dh
neg dx
jmp 0x4e89bc
bt ax, di
jo 0x4e89d6
rdtsc
lea edx, [esi + edi]
rcr ah, 1
jmp 0x4e8a0f
jge 0x4e8972
jl 0x4e8972
rcr ah, 1
jmp 0x4e8a0f
rdtsc
lea edx, [esi + edi]
jmp 0x4e89c0
add esp, 3
lea esp, [esp + 1]
mov bx, di
jmp 0x4e8995
mov dh, al
jmp 0x4e8a23
inc edi
mov ebx, 0xda265368
lea eax, reloc.KERNEL32.dll_LockFile
lea ebx, [eax + 0x7e]
lea edx, [ecx + ebx]
jmp 0x4e89f9
inc edi
rol al, 5
jle 0x4e8afa
mov dh, 0x18
mov edx, eax
xchg edx, eax
setne dl
jmp 0x4e8a8f
rdtsc
sub esp, 0x16
lea esp, [esp + 2]
jmp 0x4e8a74
mov edx, eax
xchg edx, eax
setne dl
jmp 0x4e8a55
lea esp, [esp + 0x14]
sub edi, 0x4b70b9dd
sub eax, edi
ja 0x4e8ab3
jbe 0x4e8a93
loopne 0x4e8b05
out dx, eax
mov bh, byte [ecx + 0x45]
ror byte [ebp - 0x24], cl
das
rdtsc
rdtsc
jmp 0x4e8a57
mov dl, byte [esp]
lea ebx, [eax + ebx]
lea edx, reloc.KERNEL32.dll_LockFile
jmp 0x4e8ade
mov dl, byte [esp]
lea ebx, [eax + ebx]
lea edx, reloc.KERNEL32.dll_LockFile
bsr edx, edx
call 0x4e8ac8
mov dword [ebp + reloc.KERNEL32.dll_LockFile], ecx
lea ebx, [edx + ebp]
xchg ebx, edx
jmp 0x4e8ae3
bsr edx, edx
jmp 0x4e8ac2
add edi, dword [esi]
bt edx, edi
jo 0x4e8b2b
stc
lea ebx, [ebx*4]
jmp 0x4e8b46
mov dh, 0x18
jmp 0x4e8a6b
lea ebx, [ebx*4]
jmp 0x4e8b46
add byte [eax], al
add bl, ch
cmp al, 0x66
xchg edx, eax
mov al, dh
jmp 0x4e8b14
bsf ax, sp
jbe 0x4e964a
mov dx, word [esp]
jmp 0x4e961e
stc
jmp 0x4e8b01
or dl, dl
sub esp, 0xb
lea esp, [esp + 3]
jmp 0x4e95ea
mov ax, word [esp]
bts dx, bp
jp 0x4e95c5
or dl, dl
jmp 0x4e9604
lea esp, [esp + 8]
inc bl
mov ah, al
mov dx, bx
mov eax, 0x53aaa799
jmp 0x4e9625
sub esp, 0xb
lea esp, [esp + 3]
jmp 0x4e95ea
mov ax, 0x6bc8
inc eax
jmp 0x4e9653
clc
jnp 0x4e9672
mov eax, ebp
jmp 0x4e9674
bswap eax
rcr ax, 4
dec edx
xchg dh, al
jmp 0x4e9679
mov dx, word [esp]
mov ax, 0x6bc8
inc eax
add bl, 0x2b
mov ax, 0x1082
jmp 0x4e95dc
jg 0x4e962c
bswap eax
rcr ax, 4
jmp 0x4e968f
mov eax, ebp
ror bl, 0
jmp 0x4e965c
add bl, 0xa1
sub esp, 5
jae 0x4e9694
dec ah
bsr eax, ecx
mov ax, dx
jmp 0x4e96d7
dec edx
xchg dh, al
jmp 0x4e9679
dec ah
jmp 0x4e969c
bsr eax, ecx
mov ax, dx
xchg dword [esp], edx
mov dh, cl
bt dx, bx
lea esp, [esp + 1]
jmp 0x4e96c1
ror bl, 0
lea eax, [eax + edi]
sub esp, 8
jo 0x4e970c
jno 0x4e96f4
in al, 0x7a
sbb eax, 0x109158ec
xchg ebx, eax
xchg dword [esp], edx
mov dh, cl
jmp 0x4e96a7
mov ax, 0xf827
mov ax, word [esp + 6]
jmp 0x4e9715
mov ax, 0xf827
mov ax, word [esp + 6]
and ebx, 0x3c
mov dh, 0x70
call fcn.004e96de
mov ax, 0x1dc2
mov ax, bp
jmp 0x4e97c1
call 0x4e979e
jmp 0x4e980e
lea eax, [ecx*4]
mov eax, edx
rol eax, cl
jp 0x4e975b
jnp 0x4e975b
mov ebx, 0xcf0015bb
mov ebx, dword [esp]
bts ebx, ecx
adc ebx, edi
jmp 0x4e9828
sub esi, 4
bswap edx
mov al, cl
mov edx, dword [ebx + ebp]
jmp 0x4e9779
mov ax, 0x13ef
lea eax, reloc.KERNEL32.dll_LockFile
jmp 0x4e985f
mov bx, word [esp]
lea esi, [esi - 0x1b]
call fcn.004e97e9
xchg edx, eax
mov eax, 0x4ae95369
xchg edx, eax
jmp 0x4e9844
cmp esi, ebx
ja 0x4e988a
mov dx, si
sub esp, 0x16
jmp 0x4ea50d
mov edx, ebp
lea ebx, [eax + ebx]
push eax
lea ebx, [ebp + 0x50]
call fcn.004e9924
invalid