Function at 0xc1d32b
Capabilities:
Execute anti-debugging instructions

Disassembly:
movzx ecx, byte [ebp]
xchg dh, dl
bsr dx, bp
jmp 0xc1cb42
xchg dl, bl
add edx, 0x71c1d634
sets bh
mov ebx, 0xa949317f
sub esp, 0x16
jmp 0xc1cb91
je 0xc1cb1a
xchg dl, bl
add edx, 0x71c1d634
jmp 0xc1cb52
sets bh
mov ebx, 0xa949317f
sub esp, 0x16
jmp 0xc1cb91
sub cl, al
adc ebx, 0x3b56bff2
jge 0xc1cbd0
sub esp, 0x19
jmp 0xc1cbeb
inc edx
mov bl, al
pop dword [esp + 4]
lea esp, [esp + 2]
jmp 0xc1cb7b
lea esp, [esp + 0xe]
mov byte [esp + 3], dh
lea esp, [esp + 3]
jmp 0xc1cbd5
sub esp, 0x19
jmp 0xc1cbb3
mov bl, cl
clc
jb 0xc1cd10
sbb edx, ebx
not edx
mov dx, si
jmp 0xc1cc2a
lea esp, [esp + 0xe]
mov byte [esp + 3], dh
lea esp, [esp + 3]
jmp 0xc1cbd5
inc bl
mov dh, byte [esp]
mov dx, 0x848d
setge dl
btc edx, edx
jmp 0xc1cc49
rcr edx, 1
not dh
jmp 0xc1ccd3
add bl, 0x5f
mov edx, dword [esp]
mov edx, 0x94df6284
mov dh, ah
mov edx, dword [esp]
jmp 0xc1cc9e
ja 0xc1cc68
mov edx, ecx
lea edx, reloc.WINMM.dll_midiStreamOut
jmp 0xc1cc70
mov edx, ecx
lea edx, reloc.WINMM.dll_midiStreamOut
jmp 0xc1cc33
jmp 0xc1cc88
mov edx, ebx
mov dx, sp
lea edx, [ebp*4]
jmp 0xc1ccf7
mov dx, word [esp]
sub bl, 0x48
xchg dl, dh
adc dh, cl
jbe 0xc1cc72
mov edx, ebx
mov dx, sp
lea edx, [ebp*4]
neg edx
jmp 0xc1ccf9
not edx
mov dx, si
rcr edx, 1
not dh
mov dx, si
setns dh
mov edx, dword [esp]
jmp 0xc1cc14
jmp 0xc1cd5a
neg edx
not bl
rcl dh, 1
jnp 0xc1cce1
btc dx, bp
mov dl, 0xfe
mov edx, esp
jmp 0xc1cd14
sbb edx, ebx
jmp 0xc1ccca
bts dx, cx
mov edx, edi
jmp 0xc1cd30
bts dx, cx
mov edx, edi
mov dh, al
dec bl
jmp 0xc1cd3a
xchg dl, dh
call fcn.00c1cd85
mov dword [esp + 2], ebp
neg dl
pop edx
lea esp, [esp]
jmp 0xc1cda7
btc dx, bp
mov dl, 0xfe
mov edx, esp
jmp 0xc1cd2a
mov edx, dword [esp]
mov ebx, edi
lea edx, [ecx + ecx]
inc bh
jmp 0xc1cdc6
mov ebx, edi
lea edx, [ecx + ecx]
inc bh
jmp 0xc1cdc6
sub al, bl
jb 0xc1cd6c
mov edx, dword [esp]
jmp 0xc1cd91
mov edx, 0x7e0d8849
jmp 0xc1cdfa
inc ebp
stc
jns 0xc1cdb0
mov edx, 0x7e0d8849
mov dx, word [esp]
dec edx
setbe dl
jmp 0xc1ce2a
sets bh
bswap ebx
inc cl
setge dh
mov edx, 0x8ed2653b
jmp 0xc1ce04
mov dx, word [esp]
dec edx
setbe dl
jmp 0xc1cddd
pushfd
mov word [esp], si
not ebx
mov bx, word [esp + 1]
lea esp, [esp + 4]
jmp 0xc1ce45
sets bh
jmp 0xc1cde0
inc bh
jmp 0xc1ceab
add cl, 0xc9
mov dx, word [esp]
neg edx
je 0xc1ce2f
inc bh
mov bl, 0xf1
mov edx, 0x74439a13
mov edx, dword [esp]
adc edx, 0xf78d2bc3
jmp 0xc1ce89
adc edx, 0xf78d2bc3
sub cl, 0xd0
mov bl, ah
neg dh
jmp 0xc1dc4d
shr ebx, cl
jmp 0xc1cebf
mov bl, 0xf1
mov edx, 0x74439a13
mov edx, dword [esp]
jmp 0xc1ce83
neg edx
mov dx, 0xc81c
shr ebx, cl
xor cl, 0xb3
lea ebx, [ebx*4]
mov dx, cx
neg dx
jmp 0xc1d68b
idiv bh
call dword [esi - 0x73]
xor al, 0x2b
mov dx, bp
lea ebp, [edx - 0x29]
jmp 0xc1d2e2
mov esi, 0x511d84b
mov ah, 0x5b
jmp 0xc1d39a
mov edi, dword [esp + 0x30]
xchg ecx, ebx
cmc
ja 0xc1d2cc
jbe 0xc1d657
out 0x78, al
out dx, al
mov dword [eax - 0x37], edi
enter 0xffffffffffffc555, 0xffffffffffffffac
pop edi
cwde
inc esp
neg esi
sub dword [eax - 0x15], ecx
lea esp, [esp + 4]
xor cl, 0x2b
not dh
call fcn.00c1d057
mov ax, bx
call 0xc1d32b
sbb al, 0x80
push ss
jno 0xc1d29e
inc esi
mov byte [0x47b4ad3d], al
test dword [edi + ebx + reloc.WINMM.dll_midiStreamOut], 0x648d5a66
and al, 2
jne 0xc1d351
je 0xc1d351
pop dx
lea esp, [esp + 2]
mov ebx, edi
neg dl
jmp 0xc1d375
bsr eax, esp
cmc
rdtsc
push edx
rdtsc
mov edx, dword [esp + 1]
jmp 0xc1d37d
sub esp, 0xbc
mov esi, esp
mov bx, word [esp]
jmp 0xc1d311
rdtsc
push edx
rdtsc
jmp 0xc1d344
je 0xc1d33b
bsr eax, esp
cmc
jmp 0xc1d35f
sub esp, 0x14
jns 0xc1d452
mov ax, word [esp + 0x15]
jmp 0xc1d457
lea ebp, [esp + 4]
mov cx, word [esp]
bswap esi
mov cl, 0x5f
btr edx, edi
jmp 0xc1d327
mov ax, word [esp]
jmp 0xc1d40f
not edi
mov ah, 0x36
bts edx, ebx
je 0xc1d3ae
mov ax, word [esp]
setl dh
mov ecx, 0x725a2530
inc ax
jmp 0xc1d48e
sub edi, 0x46f56c4e
mov dx, word [esp]
lea ecx, [ebx + esi]
sub esp, 0x1a
jmp 0xc1d460
setl dh
mov ecx, 0x725a2530
inc ax
call fcn.00c1d3e1
mov edi, 0x240c8b66
rol al, 0
not cl
xchg dword [esp], ebp
bswap ecx
clc
jmp 0xc1d4c4
mov ax, word [esp + 0x15]
lea esp, [esp + 0x18]
jmp 0xc1d3c4
jge 0xc1d476
add esp, 0x13
mov cx, word [esp + 3]
call fcn.00c1d494
inc edx
lds edx, [ebp + 0x3c]
iretd
add esp, 0x13
mov cx, word [esp + 3]
lea esp, [esp + 3]
jmp 0xc1d4cb
cmc
jmp 0xc1d3f8
xchg ecx, eax
push dword [esp]
ret 4
lea esp, [esp + 4]
add edi, 0x51b73bde
mov al, byte [esp]
call fcn.00c1d50b
aaa
push ds
imul ecx, dword [eax + reloc.WINMM.dll_midiStreamOut], 0x8de28a31
adc al, 0xbd
add byte [eax], al
add byte [eax], al
push dword [esp]
ret 4
mov esi, 0x511d84b
mov ah, 0x5b
jmp 0xc1d39a
jno 0xc1d9b0
mov edx, dword [esp]
pushfd
jmp 0xc1d9b4
mov edx, dword [esp]
pushfd
jmp 0xc1d303
jge 0xc1ceb7
neg edx
mov dx, 0xc81c
jmp 0xc1ce95
lea ebx, reloc.WINMM.dll_midiStreamOut
xchg dl, ch
mov ebx, dword [esp]
jmp 0xc29569
jmp 0xc29551
lea ecx, [esi + 0x50]
lea edx, [ebp + 0xcc]
lea ebx, [ebp*4]
xchg edx, ebx
shl edx, cl
jmp 0xc29595
jg 0xc295ab
jle 0xc295ab
push 0xfffffffffffffff9
imul ecx, dword [eax], reloc.WINMM.dll_midiStreamOut
dec eax
das
fisubr dword [ebx - 0x45]
xchg edx, eax
or eax, 0x3bf6ef9c
cmp edi, ecx
stc
ja 0xc1cb0a
mov dh, 0xea
jmp 0xc295d2
lea esp, [esp + 3]
pushal
lea ecx, [eax + ebp]
jmp 0xc29642
mov dx, 0x7b5c
sub esp, 0x1b
jbe 0xc295b7
lea esp, [esp + 3]
call fcn.00c2987c
loop 0xc2965b
in eax, 0x8c
jg 0xc295ac
cld
hlt
jmp 0xc2965a
cpuid
mov dword [esp + 0x10], esi
xchg ch, cl
popal
sub esp, 0x17
jno 0xc2962c
pushfd
jmp 0xc29665
pushfd
mov byte [esp + 0xe], al
jmp 0xc296b1
mov byte [esp + 0xe], al
neg cx
lea esp, [esp + 3]
jmp 0xc2969b
lea edx, [esi + 0x40]
sbb cx, 0x979f
jg 0xc296de
dec ch
mov cx, word [esp]
jmp 0xc2972f
neg cx
lea esp, [esp + 3]
jmp 0xc2969b
dec ch
jmp 0xc296e6
mov cx, word [esp]
sub esp, 0xb
lea esp, [esp + 3]
jmp 0xc29719
sub edx, ebx
setno cl
lea ecx, [esi*4]
jmp 0xc297f1
sub esp, 0xb
lea esp, [esp + 3]
jmp 0xc29719
ja 0xc2974e
cmc
jmp 0xc2974f
cmc
and cl, 0xfc
sub esp, 0x13
jmp 0xc2975b
jle 0xc29771
pop dword [esp + 2]
lea esp, [esp + 3]
jmp 0xc29779
pop dword [esp + 2]
lea esp, [esp + 3]
jmp 0xc297b5
pushfd
lea esi, [ecx + edx - 0x40]
push esi
jmp 0xc2979c
lea ecx, [edi - 0x80]
cmc
jmp 0xc29738
push edi
push ecx
mov esi, ebx
jmp 0xc297d7
sub ecx, edx
push si
lea esp, [esp + 2]
mov esp, ecx
jmp 0xc2977b
rep movsb byte es:[edi], byte [esi]
jmp 0xc29843
mov edi, ecx
mov ecx, edx
cld
jmp 0xc297c1
mov cx, 0x435
dec ch
jl 0xc29796
jge 0xc29796
bts edx, ebx
jp 0xc29818
mov ecx, dword [esp]
jmp 0xc29821
popfd
jmp fcn.00c1b651
mov ecx, dword [esp]
jmp 0xc29821
mov ebp, dword [edi]
call 0xc29829
mov eax, 0xffd98b66
xor al, 0x24
jp 0xc2985e
jnp 0xc2985e
mov ds, word [edi]
invalid
pop ecx
pop edi
pop esi
jmp 0xc29812
add edi, 4
sub esp, 0xd
jg 0xc29860
neg bx
jmp 0xc29aa1
jmp 0xc29848
neg bx
lea ebx, [edx + ebx]
lea esp, [esp + 1]
jmp 0xc29a0c
call 0xc29881
push edi
mov ebp, ebx
mov esi, dword [esp]
jmp 0xc298d5
bts ax, ax
call fcn.00c29958
lea edx, [edi]
xchg edx, esp
adc ecx, ebx
adc eax, 0x88791e88
cmp ah, byte [ebp - 0x60bb4073]
invalid
lea edi, reloc.WINMM.dll_midiStreamOut
xor dl, al
jp 0xc298bf
bts ax, ax
jmp 0xc298c3
push esi
inc ebx
jb 0xc2989d
jae 0xc2989d
mov eax, ebp
xchg word [esp + 8], bx
setb al
lea esp, [esp + 3]
jmp 0xc29a85
bswap eax
jmp 0xc29b4a
sub ebp, 4
neg ax
jae 0xc29a6f
bswap eax
mov dh, 0x85
mov al, 0xc6
jmp 0xc29b4e
lea ebx, [edx + ebx]
lea esp, [esp + 1]
jmp 0xc29a0c
lea ebx, [ebx - 0x69]
jmp 0xc29aee
mov ax, 0xc73d
lea ebx, [ecx + ebx]
btc ebx, ebp
jb 0xc29aad
lea ebx, [ebx - 0x69]
xchg bx, ax
sub esp, 0xd
pop dword [esp + 2]
mov byte [esp + 4], ah
jmp 0xc29b17
xchg bx, ax
sub esp, 0xd
pop dword [esp + 2]
jmp 0xc29b13
mov bh, cl
lea esp, [esp + 1]
jmp 0xc29b84
mov byte [esp + 4], ah
mov ebx, dword [esp + 7]
ror ax, 0xa
jl 0xc29af9
jge 0xc29b2b
cmp eax, 0xad5e3bab
push 0x4e
invalid
mov bh, cl
lea esp, [esp + 1]
call fcn.00c29b6b
and edi, dword [edx + reloc.WINMM.dll_midiStreamOut]
pop es
lahf
punpckhdq mm3, qword [ecx + 0x66f06f16]
add eax, esi
xor eax, 0x85b67c6d
mov dh, 0x85
mov al, 0xc6
mov edx, dword [esi]
jmp 0xc29ac3
add edx, ecx
jmp 0xc29bea
mov bx, 0xfce2
bsf eax, edi
jmp 0xc29bf7
mov ax, word [esp]
clc
js 0xc29bd4
mov bx, 0xfce2
jmp 0xc29c16
pushal
mov dword [esp + 0x10], edx
popal
lea eax, [esi + 0x3f]
mov ax, word [esp]
jmp 0xc29c36
bsf eax, edi
jmp 0xc29bf7
mov ax, dx
ror al, cl
call fcn.00c29c45
jmp 0x76497f9d
rcr eax, cl
jb 0xc29c1b
mov ax, dx
ror al, cl
jmp 0xc29c20