Function at 0xc47c9f
Capabilities:
Execute anti-debugging instructions

Disassembly:
push esp
mov dl, 0xd4
mov esi, 0x8cb2b776
bsr di, cx
push word [esp + 3]
pop ebp
jmp 0xc47c59
sub esp, 0xa
mov di, 0x729b
bswap edx
lea edi, [ecx + edi]
mov edx, 0x5b4999de
mov ax, 0x48eb
jmp 0xc47c19
mov si, di
mov ebp, dword [esp + 0xb]
btr ebx, edx
mov dh, byte [esp + 0x10]
pop dword [esp + 0x10]
jmp 0xc47c87
lea esi, [ecx + edx]
lea ecx, [eax + edi]
mov dx, 0xbc35
xchg ebx, edx
mov bx, di
bsr bx, bp
jmp 0xc47c42
lea ecx, [edi + edi]
mov byte [esp + 0x11], bh
pop esi
mov dl, dh
push dword [esp + 0x10]
bswap edi
jmp 0xc47cf0
bswap eax
stc
jmp 0xc47c72
lea esp, [esp + 0xd]
lea edi, [ebp*4]
mov dh, byte [esp + 7]
lea edi, [ecx + 0x5b]
jmp 0xc47d36
push word [esp + 0xd]
xchg word [esp + 4], bx
cpuid
btc ebx, edi
jmp 0xc47ca4
xchg dword [esp + 0xb], ecx
mov ebp, dword [esp + 0xa]
xchg word [esp + 7], dx
mov ebx, dword [esp + 2]
xchg esi, ebp
bsr si, bp
jmp 0xc47cbc
mov cx, word [esp + 7]
mov dx, sp
xchg bh, cl
pop edi
xchg byte [esp + 4], al
xchg bh, cl
jmp 0xc47cd3
pop dword [esp]
mov word [esp], di
cld
mov esi, ebp
cld
xchg dword [esp], ebp
jmp 0xc47dcd
lea eax, [ecx - 0xa3]
mov edx, 0xeef25ae2
mov edi, ecx
push dword [esp]
jmp 0xc47d03
add ebx, ebp
sub bl, ah
lea ebx, [ebp - 7]
not bx
pop dword [esp]
xchg byte [esp], dl
jmp 0xc47d1f
mov word [esp + 6], sp
sub esp, 4
rol si, cl
lea ebp, [eax - 0x71]
jmp 0xc47ee2
mov esi, dword [esp]
sub edx, eax
xchg bh, cl
shr ah, 1
push word [esp + 8]
jmp 0xc47d85
push esp
push dword [esp + 4]
xchg word [esp + 3], bp
mov di, 0xc599
stc
xchg ch, dl
jmp 0xc47d9e
cld
xchg dword [esp], eax
xchg ebp, eax
mov word [esp], sp
rdtsc
lea esp, [esp + 3]
jmp 0xc47db5
btc ebp, ebx
push word [esp + 1]
rdtsc
neg di
jmp 0xc47e29
mov byte [esp + 3], dh
pushal
btc edi, ebx
mov bx, word [esp + 0x1c]
push word [esp + 0x22]
neg ax
jmp 0xc47dde
not ch
bsf cx, si
push dword [esp]
pop dword [esp + 5]
mov dword [esp], eax
mov word [esp + 3], di
jmp 0xc47df4
pop dword [esp + 3]
lea ecx, [eax + 0x59]
bsf bx, ax
xchg dword [esp + 9], esi
inc edi
setg bh
jmp 0xc47e7a
pop dword [esp + 4]
setae ah
neg ah
rol bp, cl
pop dword [esp + 2]
mov byte [esp + 7], ah
jmp 0xc47e12
stc
lea ebp, reloc.KERNEL32.dll_DuplicateHandle
mov byte [esp], ch
add esp, 0
cpuid
clc
jmp 0xc47eac
cpuid
mov eax, esi
popal
setnp dh
lea esp, [esp + 0xa]
cpuid
jmp 0xc47e59
neg ch
add esp, 0
mov ch, byte [esp]
mov al, 0xe6
add esp, 0
neg edx
jmp 0xc47f66
ror dh, 7
xchg dh, al
sub bp, 0x5f50
lea ecx, [esp + ecx]
call fcn.00c47e8a
pop edi
mov cx, word [esp]
mov ax, word [esp]
mov byte [esp], ch
bswap ebp
bswap edi
jmp 0xc47e93
mov esi, 0xd90eab34
bsr di, cx
mov al, ah
mov esi, 0x3172247a
neg ebx
push edx
jmp 0xc47e43
rdtsc
neg ah
mov bh, byte [esp]
cpuid
lea eax, [ecx + ebx]
mov cl, ch
jmp 0xc47f4b
btc eax, edi
mov byte [esp], ch
lea edi, [ebx*4]
ror ah, 1
mov ch, byte [esp]
xchg byte [esp], al
jmp 0xc47efa
neg cx
setbe bh
xchg byte [esp], cl
mov dh, byte [esp]
cpuid
jmp 0xc47f93
mov cx, bx
mov al, ah
inc ebp
rdtsc
cpuid
mov edx, eax
jmp 0xc47f35
rcr ebp, 0x19
add esp, 0
mov esi, dword [esp]
lea esp, [esp]
neg bh
inc ecx
jmp 0xc47f1e
xchg ch, dl
mov ch, byte [esp]
mov eax, 0xe5bfd7cc
sub esp, 0x10
push dword [esp + 4]
xchg ebp, edx
jmp 0xc47fd8
mov cl, 0x1a
mov edi, 0x68ff9922
lea edi, [edx + edx]
mov byte [esp], ch
rdtsc
mov ebx, ecx
jmp 0xc47f77
not si
pushal
popal
clc
lea edx, [esp + ebx]
inc dx
jmp 0xc47fe7
mov ax, 0x5c85
lea esp, [esp + 6]
sub esp, 0
pop bx
mov byte [esp + 7], ch
jmp 0xc47fa6
pop eax
mov ebx, 0x9ada5ab6
add ebx, ebp
xchg bh, cl
neg dh
push edx
jmp 0xc47fbf
pop bx
bswap edi
xchg bp, di
inc al
btc ebx, edi
mov ecx, dword [esp + 1]
jmp 0xc48d98
not bp
mov eax, esi
xchg ebp, edx
pop ebx
call fcn.00c48049
mov ah, byte [esp + 2]
pushal
rcr ah, 1
pop esi
lea edx, [edx*4]
mov ebx, 0xf2d90dea
jmp 0xc480d4
lea ebx, [ecx*4]
mov word [esp + 0xd], sp
mov dword [esp + 0x15], esi
pop edi
btc ecx, edi
pop edx
jmp 0xc48092
mov word [esp + 0x17], sp
xchg dword [esp], edx
call fcn.00c48122
inc esp
jne 0xc48154
insb byte es:[edi], dx
imul esp, dword [ebx + 0x61], 0x61486574
outsb dx, byte [esi]
insb byte es:[edi], dx
add byte gs:[ebx + 0x4486d3f7], dh
and al, 0x1a
not ebx
xchg byte [esp + 0x1a], al
xchg dword [esp + 2], ebx
lea ebp, [esi - 0xbd]
neg ah
xchg bh, cl
jmp 0xc480bd
mov edx, dword [esp]
mov edx, ebp
pushal
lea ecx, [edx + ebp]
rdtsc
pop eax
jmp 0xc480f2
and al, 0x24
pop edi
neg ecx
setp dh
jmp 0xc481b6
xchg byte [esp], bl
setae bh
lea edx, [eax + edi]
pushal
rdtsc
call fcn.00c48193
add dx, 0x88ce
pushal
lea ecx, [ebp*4]
xchg ah, bl
xchg dword [esp + 0x15], ebp
bswap edi
jmp 0xc48339
mov edx, dword [esp]
xchg esi, eax
mov bp, word [esp]
mov cl, ch
btc edi, ebx
xor bx, 0x7cc4
jmp 0xc48254
mov al, ah
lea edi, [ecx + 0xd3]
rdtsc
mov bl, bh
lea esi, [ebp*4]
lea esi, reloc.KERNEL32.dll_DuplicateHandle
jmp 0xc48220
mov ebx, ecx
mov ecx, 0x81b9e18a
lea ebp, [edx + edi]
push esp
mov al, ah
sub esp, 0x1a
jmp 0xc482f8
xchg byte [esp + 2], dl
btc ebp, edi
mov ecx, dword [esp + 3]
pop ax
rcr bh, 3
lea esp, [esp + 2]
jmp 0xc48239
rdtsc
cpuid
call fcn.00c482d1
pop eax
mov si, word [esp]
bsf dx, si
cpuid
rdtsc
xchg bx, bp
jmp 0xc48371
shr edi, 0x13
push word [esp + 0xd]
mov edi, 0xdbfd171c
pop edx
add esp, 0x20
cld
jmp 0xc48274
lea eax, [edi*4]
pushal
popal
setle ch
lea ebp, [edx*4]
mov si, 0x664f
jmp 0xc485a2
mov byte [esp + 1], ch
mov edi, 0x2d7b4cc
mov word [esp], sp
sub bl, ah
btr esi, esp
lea eax, reloc.KERNEL32.dll_DuplicateHandle
jmp 0xc48350
lea esp, [esp + 3]
not ebx
lea esp, [esp + 1]
mov word [esp], dx
mov ebp, esi
mov word [esp], bx
jmp 0xc4813d
sub esp, 0x10
rdtsc
cpuid
btc esi, ebx
pop ebx
cpuid
jmp 0xc483fc
btc ebp, edi
inc dx
sub esp, 0x1e
lea esp, [esp + 0x55]
not bh
inc eax
jmp 0xc483a8
xchg ah, bl
mov esi, eax
not bp
xchg ebx, eax
neg ah
xchg word [esp + 9], bx
call fcn.00c4845b
dec eax
popal
jo 0xc48449
imul edi, dword [edx + 0x65], reloc.KERNEL32.dll_DuplicateHandle
pop ebp
pop bp
mov dl, dh
cpuid
mov si, dx
mov word [esp + 4], di
push dword [esp + 4]
jmp 0xc483dd
xchg ah, bl
sub esp, 0x16
sub esp, 0x1e
lea ebp, [edx + edx]
xchg word [esp + 2], bp
mov esi, dword [esp + 0x24]
jmp 0xc483cc
add esp, 7
lea esp, [esp + 2]
add esp, 1
mov word [esp], di
not edx
cmc
call fcn.00c48551
dec ebx
loop 0xc48460
pop di
mov byte [esp + 0xc], ah
pop dword [esp]
lea ecx, [esi + edi]
lea edx, [edx + ebx]
mov dx, di
jmp 0xc4842a
dec esp
and al, 5
mov ebx, 0xd2b7e7be
xchg dword [esp + 2], eax
btr ebp, esp
mov ecx, dword [esp + 3]
jmp 0xc48531
lea ebx, [esi*4]
mov bl, 0x68
xchg byte [esp + 2], bl
pop dword [esp]
jmp 0xc48588
mov ax, 0x58bd
xchg dword [esp], edi
neg bp
push dword [esp]
xchg dh, al
jmp 0xc48504
xchg ebp, eax
mov bh, byte [esp + 3]
pop word [esp + 3]
mov bx, 0xc7d5
pop si
mov byte [esp], ah
jmp 0xc4851a
rdtsc
mov edi, dword [esp + 3]
pop ebp
pop word [esp]
rdtsc
not ah
jmp 0xc488d7
lea ebx, [esi + 0xfd]
push esp
xchg di, cx
xchg word [esp + 3], di
mov word [esp + 4], dx
jmp 0xc48553
mov dl, dh
lea ebx, [ebx*4]
mov dh, byte [esp + 3]
mov dword [esp], eax
jmp 0xc4856e
mov ax, word [esp + 2]
mov di, bx
cpuid
rdtsc
xchg bp, cx
neg esi
jmp 0xc48414
btc ecx, edi
lea edx, [ecx*4]
setne ch
cmc
mov cl, 0xfa
bsr cx, bp
jmp 0xc48671
pop esi
xchg ebx, edx
lea ebp, [esp + esi]
lea ebx, [ecx + edx]
lea edx, [esp + edx]
stc
jmp 0xc485b8
xchg ecx, eax
xchg esi, edi
shr ecx, 3
xchg byte [esp + 7], dl
ror bh, 3
pop ebp
jmp 0xc485dc
bsf dx, si
cpuid
call 0xc4861a
mov word [esi + 0x66022454], es
push dword [esp + 3]
and eax, ecx
inc al
jmp 0xc4864d
mov ecx, 0x587f50fe
neg ah
lea edi, [edx + ebx]
mov dl, 0x3c
lea esp, [esp + 1]
lea esp, [esp]
jmp 0xc4860e
mov byte [esp + 3], bh
cpuid
mov word [esp + 2], bx
inc bx
mov dword [esp], ebp
push edx
jmp 0xc48687
mov bl, bh
lea edi, [ebx + esi]
bswap edi
mov byte [esp], bh
lea edi, [esi*4]
mov bp, dx
jmp 0xc48638
mov ebx, dword [esp + 4]
pushal
shr ebx, 5
neg cx
sub esp, 0x12
mov eax, 0x7a87979c
jmp 0xc48714
mov dword [esp + 3], eax
mov edx, ebp
xchg word [esp + 3], di
add esi, ebp
mov cl, 0xa2
mov bp, 0x6a3f
jmp 0xc485fd
mov ax, dx
mov bx, dx
pop dword [esp]
pop word [esp]
pop bp
mov edx, 0x749daa24
call fcn.00c486f7
xchg ebx, eax
or ah, byte [ebp - 0x6811b82c]
xchg edi, eax
xchg edi, edx
mov byte [esp + 0x35], dh
lea esp, [esp + 0x31]
xchg dword [esp + 4], edx
pop dword [esp + 2]
jmp 0xc486c3
mov al, ah
inc edi
add esp, 0
mov bl, bh
mov si, sp
cpuid
jmp 0xc486e2
lea eax, [ebx + edi]
lea ebx, [ecx + 0xc3]
xchg word [esp], di
sub esp, 2
mov dword [esp], esi
sub esp, 6
jmp 0xc486ab
rdtsc
mov dh, byte [esp + 1]
mov word [esp], sp
not edx
btc edi, edi
push edx
jmp 0xc4838f
bswap edi
mov di, dx
mov bh, byte [esp + 0xa]
pop dword [esp]
pop eax
mov ah, byte [esp]
jmp 0xc48999