Function at 0xc4c067
Capabilities:
Execute anti-debugging instructions

Disassembly:
sub esp, 0x1a
btr ecx, edx
sub esp, 0xa
stc
lea edx, reloc.KERNEL32.dll_DuplicateHandle
jmp 0xc4c045
push word [esp + 5]
bswap esi
mov byte [esp + 1], bh
add dx, 0x294e
mov ax, di
mov ah, byte [esp + 4]
jmp 0xc4bffa
mov di, 0xb3c5
pop dword [esp + 0x20]
mov edx, eax
inc cx
lea edi, [ecx + ebx]
mov cl, 0xc2
jmp 0xc4c0e5
xchg dword [esp + 3], edi
neg ch
not ch
rdtsc
xchg byte [esp + 0x10], al
rdtsc
jmp 0xc4c02c
mov di, word [esp + 3]
mov edx, dword [esp + 8]
mov dx, di
jmp 0xc4c013
rdtsc
add esp, 0xd
cpuid
btc ebp, ebx
mov cl, ch
push dword [esp + 2]
jmp 0xc4c0cf
add esp, 6
pop dword [esp + 0xf]
bswap ebx
btc eax, ebx
add esp, 9
lea ecx, [ebx*4]
jmp 0xc4c075
pop word [esp + 0x27]
bswap eax
pop si
mov edx, 0x174399ce
not dx
mov di, word [esp + 0x1a]
jmp 0xc4c099
bswap edi
xchg dh, al
mov edx, 0xe7a992c0
xor esi, esi
xchg edx, eax
jmp 0xc4c30c
mov ebx, ebp
xchg si, bx
mov ax, word [esp + 0x1f]
mov ecx, eax
bswap ebx
xchg ch, dl
jmp 0xc4c0b7
mov cx, word [esp + 0x11]
mov word [esp + 0x1b], di
mov byte [esp + 0x1d], ch
mov bp, 0xd8b1
mov di, word [esp + 0x21]
mov bx, 0x9d67
jmp 0xc4c15a
mov esi, ecx
xchg cx, di
rdtsc
xor esi, esi
sub esp, 0x18
cmc
jmp 0xc4c107
xchg ch, dl
mov ecx, esi
cpuid
mov dword [esp + 3], ebp
popal
cmc
jmp 0xc4c26d
mov si, dx
mov ebp, dword [esp + 0x10]
setle ah
xchg di, ax
xchg dh, al
xchg si, bx
jmp 0xc4c142
lea ebp, [edx + ebx]
pop dx
mov edi, 0xd9710a34
not bh
lea eax, [esp + edi]
rdtsc
jmp 0xc4c133
bswap esi
setae ch
mov ecx, eax
sub esp, 0x12
mov ax, sp
add esp, 9
jmp 0xc4c20c
neg eax
not edi
mov bl, bh
mov edx, ebp
lea ebp, [edx + ebx]
bswap ebx
jmp 0xc4c191
mov ax, word [esp]
rcr edi, 0x11
cld
mov bx, 0xc03b
lea ecx, [ebp - 0x6f]
mov ebp, dword [esp]
jmp 0xc4c1b2
xchg dx, ax
mov dx, 0x7fcb
rcr edi, 0x13
call fcn.00c4c1f4
cmc
bswap esi
mov esi, dword [esp + 2]
mov dl, 0x4c
mov word [esp + 3], bx
jmp 0xc4c2ae
mov ecx, 0x193b086c
lea eax, [eax*4]
lea ebp, [edx + edi]
lea esi, [ebp + 0xcf]
mov dx, 0x5243
lea ebp, [esp + ecx]
jmp 0xc4c1c9
lea ecx, [edx + esi]
mov ebx, 0x7b46d3f0
cld
neg ah
mov cl, 0xf2
neg dh
jmp 0xc4c2e0
mov byte [esp + 5], bh
xchg dword [esp + 4], eax
pop ebx
push word [esp + 1]
bsr ax, cx
xchg byte [esp], dl
jmp 0xc4c28e
bswap edi
neg ebx
mov bp, 0x638b
cmc
lea ebx, [eax - 0x31]
mov cl, ch
jmp 0xc4c2f5
mov ebx, 0xb497a280
rdtsc
xchg dword [esp], edx
not ah
setae bh
mov si, 0xbe47
jmp 0xc4c2c5
pop dx
stc
cmc
mov byte [esp + 3], ch
lea esp, [esp + 4]
cld
jmp 0xc4c61f
lea edx, [edi*4]
rcr esi, 0x13
xchg byte [esp + 4], cl
xchg dh, al
not esi
clc
jmp 0xc4c17e
sub esp, 0xa
mov ecx, 0x5f7261b8
lea esp, [esp + 5]
neg bx
pushal
rcr dh, 7
jmp 0xc4c34f
pop esi
xchg dx, si
add esp, 3
bsf ax, ax
not ch
bswap eax
jmp 0xc4c324
mov edi, dword [esp + 1]
cmc
sub esp, 0x18
bswap edx
xchg word [esp + 0xf], bx
neg di
jmp 0xc4c3ba
cld
xchg ebx, esi
mov byte [esp], dh
mov ebp, ecx
shl si, cl
mov ebp, 0xc9a8bbd0
jmp 0xc4c33e
mov bl, bh
mov si, 0x57f5
lea edi, reloc.KERNEL32.dll_DuplicateHandle
not bh
push esp
push word [esp + 3]
jmp 0xc4c368
lea esp, [esp + 0x15]
btr edx, edx
xchg cx, ax
setg ch
jmp 0xc4c3ef
mov eax, 0x27a0b81a
mov byte [esp + 0x24], bh
mov ah, byte [esp + 0x39]
rdtsc
xchg byte [esp + 0x2a], cl
mov al, 0xe
jmp 0xc4c3a4
btr ebp, esp
mov ax, word [esp + 4]
shr dh, 7
mov bh, byte [esp]
setne ch
add esp, 5
jmp 0xc4c38e
sub di, 0x2050
pop dword [esp + 0xc]
lea ebx, [esp + edi]
sub esp, 0
rdtsc
not ebx
jmp 0xc4c4a8
mov dx, bx
push word [esp]
mov bh, byte [esp + 3]
bswap edi
inc bx
bswap eax
jmp 0xc4c3d9
mov cl, 0xaa
neg ecx
xor edi, esi
bswap edx
xchg word [esp + 0xd], bp
cpuid
jmp 0xc4c48b
xchg ch, dl
clc
mov bl, bh
stc
rdtsc
lea ebx, [ebx*4]
jmp 0xc4c41c
mov byte [esp + 1], ah
xchg bx, cx
xchg ecx, edx
mov si, 0x4625
xchg word [esp + 4], ax
mov edx, dword [esp + 8]
jmp 0xc4c434
pop dword [esp + 6]
push word [esp + 9]
lea esp, [esp + 0xd]
call fcn.00c4c464
dec ecx
rol dword [ebx + 0x26], cl
aad 0x3d
salc
inc ecx
ret
lea edx, reloc.KERNEL32.dll_DuplicateHandle
add ebx, ebp
popal
sub esp, 0xe
stc
mov cl, 0x72
jmp 0xc4c44c
mov ch, byte [esp]
mov bl, 0x50
mov cx, 0x967b
mov dl, 0x5c
push edx
xchg byte [esp], cl
jmp 0xc4c409