Function at 0xc894bd
Capabilities:
Execute anti-debugging instructions

Disassembly:
adc bx, 0xbaab
mov cx, word [esp + 0xf]
std
bswap edi
jmp 0xc894cd
cmp dl, dl
mov word [esp + 0x14], si
mov ebx, dword [esp + 0xe]
btc esi, esi
jmp 0xc894a7
mov si, word [esp + 2]
xchg word [esp + 0x1e], di
pop word [esp + 0x12]
mov bp, 0x5ef7
xchg word [esp + 6], dx
pop dx
jmp 0xc89515
lea esp, [esp + 6]
bswap ebx
lea ebp, [esp + 0xe8]
jmp 0xc89586
mov dh, ah
cpuid
add esp, 0x20
mov byte [esp], bh
pushfd
push word [esp + 1]
jmp 0xc894ff
mov dx, 0x2f4d
mov si, word [esp]
not dl
not dh
pushfd
cmc
jmp 0xc8956f
xchg ah, al
lea eax, [edi*4]
mov dh, al
xchg byte [esp], ch
lea esp, [esp]
std
jmp 0xc89545
push si
mov dx, bp
xchg ch, dl
push si
xchg dword [esp + 3], ebp
dec dh
jmp 0xc895c8
mov bp, 0x7abc
add esp, 0
add esp, 0
neg ah
bswap eax
neg edi
jmp 0xc8955b
mov eax, dword [esp + 4]
lea esp, [esp + 4]
mov edi, edx
neg dx
mov eax, dword [esp]
jmp 0xc895f8
push dword [esp + 1]
xchg esi, edi
rdtsc
bsf ebx, ecx
bsr ebp, edi
lea esp, [esp + 0xa]
jmp 0xc89598
xchg di, dx
mov dword [esp + 1], esi
push dword [esp + 7]
xchg word [esp + 8], bp
pop word [esp + 5]
btr ebp, ebp
jmp 0xc895ae
push si
push word [esp]
cpuid
dec ebp
pop word [esp]
jmp 0xc8991b
mov cx, 0x1e3b
stc
mov si, word [esp]
cmc
mov dx, word [esp]
rdtsc
jmp 0xc895e2
lea ecx, reloc.oleaut32.dll_SysFreeString
call 0xc896b5
mov byte [esp + 8], bl
mov cl, bh
mov di, bx
mov eax, dword [esp + 2]
jmp 0xc897a6
mov eax, dword [esp + 0x1d]
cpuid
mov si, word [esp + 0x23]
mov dx, word [esp + 0x2c]
jmp 0xc8980e
push dword [esp + 5]
lea edi, [ebp*4]
pushal
mov dword [esp + 0xa], esi
xchg word [esp + 0xc], dx
setne dl
jmp 0xc89790
add esp, 0x21
push word [esp + 4]
sub esp, 1
mov si, dx
xchg di, bp
mov bl, dl
jmp 0xc89820
xchg word [esp + 6], bp
neg cl
mov bl, 0xd2
mov si, bp
xchg edx, esi
pop si
jmp 0xc897f0
lea ebp, [edi*4]
pop word [esp + 8]
mov bp, 0xa6a6
pop dword [esp + 2]
xchg dword [esp + 5], ecx
lea esp, [esp + 6]
jmp 0xc8987b
lea eax, reloc.oleaut32.dll_SysFreeString
xchg word [esp + 8], dx
xchg dword [esp + 3], edx
lea esi, [ebx + edi]
mov dx, di
lea ecx, [eax*4]
jmp 0xc8975c
lea eax, [ecx + ebp]
mov dx, bx
btr bp, sp
jmp 0xc898a9
cpuid
lea esp, [esp + 1]
cpuid
setbe bh
cpuid
mov edx, eax
jmp 0xc89865
mov bh, 0xdb
setl bh
lea esp, [esp + 2]
neg bh
std
push ebx
jmp 0xc898e9
lea ebx, [edi*4]
bswap edx
mov word [esp], bp
mov ebp, 0x1844edbb
xchg ecx, ebx
cpuid
jmp 0xc8988c
pop dword [esp + 0xa]
mov dh, byte [esp + 2]
rdtsc
xchg dword [esp + 0xa], ebx
push dword [esp + 0xc]
bsr ebx, esp
jmp 0xc898fd
dec dx
mov di, 0x337c
pushal
cpuid
mov byte [esp + 0x18], ch
xchg word [esp + 9], si
jmp 0xc898c1
lea esp, [esp + 0x13]
xchg ebx, esi
lea esp, [esp + 6]
add esp, 3
lea eax, [ecx*4]
mov esi, ecx
jmp 0xc89bfa
lea ebx, [ebp*4]
lea ebx, [ebp*4]
sub esp, 0x17
pop eax
bsf ebx, ebx
add esp, 0xb
jmp 0xc89844
mov di, 0x784a
mov bh, byte [esp + 0x1d]
xchg byte [esp + 0x1a], ah
pop dword [esp]
jmp 0xc89974
rdtsc
cld
xchg ecx, eax
setl al
inc ebp
push word [esp + 3]
jmp 0xc89938
dec edx
add esp, 0xd
mov bx, si
shr edi, 0x18
jmp 0xc899c9
not esi
xchg cx, si
mov ebp, 0xd8be7937
mov cl, byte [esp + 0x11]
xchg word [esp + 6], di
lea edx, [ebx + esi]
jmp 0xc8995e
mov dx, 0xa54f
sub esp, 0x1d
neg di
xchg esi, edx
not bl
cmc
jmp 0xc8994e
sub esp, 0xf
bswap ebp
xchg esi, ebp
mov bp, ax
xchg al, bh
mov cx, sp
jmp 0xc899df
lea esi, [ebp*4]
push dword [esp + 0xb]
push dword [esp + 0xf]
bswap eax
inc ecx
cmp ch, dh
jmp 0xc899ab
mov eax, dword [esp + 0x1b]
pop dword [esp + 4]
mov dx, 0x5277
mov bx, 0x5c86
mov ax, word [esp + 0xd]
jmp 0xc89a24
mov bl, byte [esp]
mov ecx, eax
mov edi, dword [esp]
mov eax, esi
btc ax, bp
xchg ah, bl
jmp 0xc8999a
mov ecx, dword [esp + 0x11]
std
shr ax, 2
xchg bh, dl
mov bl, cl
sub esp, 0x13
jmp 0xc89a81
mov byte [esp + 0x16], dl
mov cx, word [esp + 0x1a]
bswap eax
mov word [esp + 0x19], bp
cpuid
add esp, 0xf
jmp 0xc89a0e
lea ecx, reloc.oleaut32.dll_SysFreeString
bts si, cx
cpuid
not esi
std
ror cx, 0
jmp 0xc899fc
pop word [esp + 7]
rdtsc
mov dword [esp + 0xa], esp
pop edx
shl eax, cl
mov ecx, 0xfc378804
jmp 0xc89aaa
mov ecx, dword [esp + 9]
cpuid
mov eax, edx
lea esp, [esp + 0xf]
lea eax, [esi + 0x23]
mov esi, edx
jmp 0xc89a60
not edx
mov bp, word [esp + 1]
mov bp, word [esp + 4]
add dh, 0xc3
jmp 0xc89af8
pop bp
mov ah, byte [esp + 4]
xchg bx, di
lea eax, reloc.oleaut32.dll_SysFreeString
shl bp, cl
pop dword [esp + 6]
jmp 0xc89a94
xchg byte [esp], bl
xchg byte [esp], cl
cpuid
not cx
adc ch, 0x6e
lea edx, [ecx*4]
jmp 0xc89a4b
ror ebx, 9
lea esp, [esp + 0x1b]
lea esi, reloc.oleaut32.dll_SysFreeString
mov ah, dh
jmp 0xc89b20
xchg dl, bh
mov ch, al
pop dx
mov dword [esp + 2], esp
sub esp, 0x1f
neg bp
jmp 0xc89ae2
add esp, 0x27
mov cx, 0x5b33
mov bh, dl
lea esi, [edx + edi]
lea eax, [esp + edi]
jmp 0xc89b47
lea ebp, [edi + ebp]
pushal
pop dword [esp + 1]
bsf cx, cx
dec edx
mov ch, al
jmp 0xc89b0a
lea esp, [esp + 1]
mov bx, word [esp]
add esp, 0
jmp 0xc89bb5
xchg ebp, ebx
mov bp, 0x1358
bsf di, dx
sbb esi, 0x73b1c050
mov si, word [esp]
mov bh, byte [esp]
jmp 0xc89b31
lea edx, [ebx*4]
bts ecx, eax
add esp, 0
sub cl, 0x54
xchg bh, dl
add esp, 0
jmp 0xc89ac8
lea eax, reloc.oleaut32.dll_SysFreeString
xchg ebp, edi
mov si, 0x6b7e
rdtsc
mov cl, dh
call fcn.00c89b8b
bsr ax, bp
inc dx
inc di
setns bh
adc bp, 0x1ced
jmp 0xc89c60
mov bp, 0x734
mov ch, 0x8e
add esp, 5
sets ch
mov dx, 0x74de
lea esp, [esp + 3]
jmp 0xc89b71
mov edx, dword [esp]
not bx
neg bp
lea esi, [esi*4]
xchg esi, eax
call fcn.00c89c13
cld
lea esp, [esp + 4]
pop word [esp]
lea ebx, [ebp + 0x8b]
mov ax, dx
mov ebx, edi
jmp 0xc8a0d4
bswap ecx
xchg byte [esp + 3], al
xchg ecx, ebp
setne ch
mov bp, 0x9644
xchg ebp, edi
jmp 0xc89c29
or edi, edx
cpuid
add esp, 9
mov dword [esp], edi
mov di, word [esp + 3]
pushal
jmp 0xc89cb7
mov byte [esp + 0xa], ch
mov di, word [esp + 0xf]
lea esp, [esp + 7]
adc dl, bh
mov edi, dword [esp + 0xc]
seto bh
jmp 0xc89c73
pop ebx
bswap ebp
add esp, 0xb
not si
push word [esp + 2]
jmp 0xc89d5f
pop eax
xchg dword [esp + 5], ecx
pop edi
not ch
mov cx, dx
push dword [esp + 0xb]
jmp 0xc89ca1
not cl
sub esp, 3
pop eax
push dword [esp + 7]
push ax
sub esp, 1
jmp 0xc89c89
cpuid
sub esp, 0x1a
add esp, 9
mov dword [esp + 1], esi
jmp 0xc89d39
std
mov ebx, 0x53e876ce
add esp, 0xb
push word [esp + 5]
mov ecx, dword [esp + 9]
mov bx, 0xf5f6
jmp 0xc89ce2
xchg dword [esp + 0xb], ecx
mov dl, 0x1e
push word [esp + 9]
btr edx, eax
mov ecx, dword [esp + 8]
mov cx, word [esp + 0xf]
jmp 0xc89cf8
mov ax, word [esp + 5]
pop dword [esp + 0x11]
lea ebp, [ebx*4]
xchg word [esp + 6], ax
neg si
pop dword [esp + 5]
call fcn.00c89d8d
imul eax, dword [edx - reloc.oleaut32.dll_SysFreeString], 0x74
and al, 2
push dword [esp + 2]
lea esp, [esp + 7]
xchg bx, ax
mov esi, 0x9379d1c1
mov dword [esp + 0xa], ecx
lea esp, [esp]
jmp 0xc89d20
mov byte [esp + 4], bl
not cx
mov ebp, eax
inc bh
push di
add esp, 1
jmp 0xc89cd1
pop ebx
bswap ecx
mov ch, 0xef
inc ecx
rol si, 0xc
push dword [esp + 1]
jmp 0xc89da8
mov ch, byte [esp + 3]
xchg si, bp
bsr ebp, esp
push word [esp + 2]
mov dh, al
push word [esp + 3]
jmp 0xc89e91
mov ch, 0xcc
mov esi, ebx
push word [esp + 1]
push si
add esp, 1
pushfd
jmp 0xc89f72