Function at 0xc57048
Capabilities:
Execute anti-debugging instructions

Disassembly:
btc di, sp
xchg dword [esp], eax
rdtsc
lea edi, [esi - 0xa5]
jmp 0xc56c5e
mov dh, byte [esp]
bswap eax
and dl, ah
rdtsc
setl dl
bt edi, ebp
jmp 0xc56c72
xchg di, dx
pop eax
not dh
lea edx, [ebx + ebp]
mov di, word [esp]
mov edi, 0x4594dbeb
jmp 0xc56c48
mov di, word [esp]
mov edi, esp
bt di, bp
mov di, 0x132d
mov ax, word [esp]
jmp 0xc56e77
cmp ah, 0xd2
mov dl, bh
lea esp, [esp + 3]
and dh, 0x39
xchg di, dx
mov dx, 0xe673
jmp 0xc56d1c
mov byte [esp + 3], ch
mov al, 0x50
bts edi, eax
mov byte [esp], bh
mov ax, word [esp + 3]
mov edx, dword [esp + 5]
jmp 0xc56ca2
setae dh
setne al
mov dl, byte [esp + 2]
cmc
bswap edi
setne ah
jmp 0xc56cc8
lea esp, [esp]
std
cmp edi, 0x9810dd3e
mov dx, bx
setb dh
jmp 0xc56d2c
pop di
setae ah
stc
neg di
mov ah, byte [esp]
inc al
jmp 0xc56d06
pushal
mov di, 0x9ca9
call fcn.00c56d7b
rol di, 0xf
xchg dx, di
mov ah, 0x59
push dword [esp + 0xb]
jmp 0xc56d64
push word [esp]
not edi
xchg dx, ax
bsf dx, cx
bsr eax, edx
xchg word [esp + 1], di
jmp 0xc56cf4
mov di, 0x6f1d
inc dh
setge ah
sub esp, 7
mov edi, dword [esp + 0x26]
jmp 0xc56e0d
neg di
mov edi, dword [esp + 0x27]
xchg dx, di
push di
neg dh
stc
jmp 0xc56dcf
rdtsc
lea edx, [edi*4]
mov edx, 0xf25839ef
or dh, dh
mov dx, word [esp + 0x25]
xchg byte [esp + 0x1d], dl
jmp 0xc56d88
lea eax, [edx + esi]
xchg word [esp + 0x26], ax
pop word [esp + 0x26]
jmp 0xc56de5
xchg dword [esp + 0x10], eax
xchg dword [esp + 0x23], edi
bsf eax, ebx
xchg al, ah
lea edi, [esi + esi]
bsr di, bx
jmp 0xc56db9
lea esp, [esp + 0xf]
lea edx, [esp + 0x4d]
pop word [esp + 0xa]
mov edi, eax
xchg dx, ax
mov ax, word [esp + 4]
jmp 0xc56e39
inc al
mov dx, bx
mov byte [esp + 0x16], bl
xchg dword [esp + 2], edx
xchg edx, eax
mov al, 0x28
jmp 0xc56d9e
mov edi, ebx
xchg edi, eax
clc
pop edx
mov dword [esp + 0x12], eax
bswap edx
jmp 0xc56e4c
neg ah
push word [esp + 0x14]
mov al, 0x72
xchg dword [esp], eax
mov edi, dword [esp + 0x11]
pushal
jmp 0xc56e23
cmp di, 0xf460
mov byte [esp + 0x1c], ch
setne dh
mov byte [esp + 0x19], cl
mov dl, ah
setb ah
jmp 0xc56f32
mov dl, 0x64
mov dx, bp
mov edx, dword [esp]
mov dh, byte [esp]
cmc
pushfd
jmp 0xc56d4d
xchg di, dx
bswap edi
mov word [esp], si
mov dh, 0xd7
mov word [esp], di
jmp 0xc56eb1
mov edx, eax
not dx
mov word [esp], sp
mov edi, ecx
mov dl, bh
mov edx, dword [esp]
jmp 0xc56e89
mov byte [esp], cl
pop dx
neg eax
xchg ah, dh
mov dl, 0x6c
setl dh
jmp 0xc56ef5
xchg dl, al
push bp
lea esp, [esp]
std
lea edi, reloc.RASAPI32.dll_RasHangUpA
lea edx, [ecx + edi]
jmp 0xc56e9f
lea edi, [ecx + edx]
shr eax, 0x18
call fcn.00c56edf
dec edx
push ebx
xchg edi, eax
sub esp, 3
mov edi, 0x4bfca261
mov dx, bp
jmp 0xc56fe3
push dword [esp + 0x30]
push dword [esp + 0x13]
lea esp, [esp + 0x41]
lea edx, [eax*4]
mov ah, byte [esp]
dec eax
jmp 0xc56ecc
dec dx
xchg dx, ax
cmc
lea edx, [esi*4]
pushal
jmp 0xc56faf
mov word [esp], cx
pop word [esp]
ror edi, 0x1b
mov dh, 0x76
clc
mov eax, esi
jmp 0xc56f71
neg di
mov edi, ebp
pop word [esp + 0x1a]
push dword [esp + 0xb]
jmp 0xc56fc8
xchg word [esp + 0xb], di
cmc
not ax
mov ah, byte [esp + 0x17]
mov dx, word [esp + 0x1c]
mov edx, 0x5af641a
jmp 0xc56f99
not dx
mov al, cl
mov edx, ebp
xchg edx, edi
mov eax, ecx
xchg byte [esp + 0xf], dl
jmp 0xc5700e
pop dword [esp + 1]
mov byte [esp + 1], dl
lea esp, [esp + 4]
xchg edx, eax
xchg dl, dh
bsr edi, edi
jmp 0xc56f87
or eax, 0x130b4ed4
lea eax, reloc.RASAPI32.dll_RasHangUpA
inc dh
pop eax
pop ax
jmp 0xc5703a
mov dword [esp + 0x15], edi
mov eax, ebx
not ax
push dword [esp + 6]
jmp 0xc56ff8
pop word [esp + 8]
setb dl
call 0xc57048
lea eax, reloc.RASAPI32.dll_RasHangUpA
in al, dx
pop ss
xchg byte [esp + 0x14], al
jmp 0xc57431
lea eax, reloc.RASAPI32.dll_RasHangUpA
mov edi, dword [esp]
cmc
mov byte [esp], dh
bts eax, esi
jmp 0xc570d4
rdtsc
rdtsc
add esp, 0
not edx
lea eax, [eax - 9]
xchg di, ax
jmp 0xc5706e
bts edi, esp
bswap edi
bsr di, cx
rdtsc
mov ax, si
jmp 0xc5710d
mov di, word [esp]
lea esp, [esp]
rcl di, cl
mov dh, 0x96
lea edx, [edx + 0x9c]
mov edx, dword [esp]
jmp 0xc57094
mov ax, 0xbd7c
xchg edi, eax
mov edx, dword [esp]
lea edx, [ebp*4]
rdtsc
xchg byte [esp], ah
jmp 0xc570aa
mov al, 0xb0
call 0xc570eb
mov eax, 0xc436360b
mov ah, bl
sub esp, 0x19
mov edx, dword [esp + 6]
lea edi, [esi*4]
lea eax, [ebx*4]
jmp 0xc5719b
lea eax, [edx + esi]
xchg byte [esp], dh
add ax, bp
xor eax, 0x21312c3c
shl edx, cl
mov dx, si
jmp 0xc57084
mov dh, 0xac
add esp, 8
sub esp, 3
add esp, 5
lea eax, [ebp + 0x74]
dec eax
jmp 0xc5717c
mov dx, 0x7aa0
xchg edx, eax
stc
lea eax, [ebx*4]
xchg edx, eax
not edx
jmp 0xc57152
xchg byte [esp + 0xb], al
pop word [esp + 9]
lea edx, [ecx*4]
pop ax
push word [esp + 2]
cld
jmp 0xc571c3
pop dword [esp + 1]
or dl, dh
xchg dl, dh
rdtsc
pop ax
mov dl, byte [esp + 0xd]
jmp 0xc57168
lea edx, [edi*4]
lea edi, [edi + ebp]
clc
push ecx
pop dx
jmp 0xc571d6
mov edx, 0x4b9e4327
sub dh, dh
push dword [esp + 2]
pop dx
neg edi
sbb edi, ebx
jmp 0xc571ad
mov al, 0xf2
xchg word [esp + 8], di
pop word [esp + 0xb]
xchg word [esp + 3], dx
sub esp, 9
jmp 0xc5721c
inc eax
mov dx, word [esp]
mov dx, 0x6cca
mov edi, edx
mov dx, sp
mov eax, dword [esp]
jmp 0xc5713a
push word [esp + 0x16]
pop dword [esp + 0x10]
mov di, 0xecb0
not dx
jmp 0xc57248
not al
mov al, byte [esp + 0xf]
mov di, 0x6bf9
mov eax, ebx
xchg dword [esp + 5], eax
xchg byte [esp + 4], dh
jmp 0xc57206
mov ax, 0xc55e
pop dword [esp]
lea eax, [eax + edi]
lea eax, reloc.RASAPI32.dll_RasHangUpA
jmp 0xc5725d
lea esp, [esp + 0xd]
mov edx, ecx
mov edx, eax
mov ah, 0x3f
lea edx, reloc.RASAPI32.dll_RasHangUpA
push cx
jmp 0xc57232
pop edx
xchg edi, eax
mov word [esp], bx
lea edi, [edi*4]
xchg byte [esp], dh
lea edi, reloc.RASAPI32.dll_RasHangUpA
jmp 0xc572e1
inc ah
mov dh, byte [esp]
bsr ax, di
mov edx, edi
mov dx, 0xcbb9
bswap edi
jmp 0xc571f0
pop word [esp + 4]
lea eax, [ecx - 0x78]
add al, bh
xchg dword [esp + 3], edx
pop edi
jmp 0xc572c6
neg ah
mov edx, 0xaa31ed77
mov dh, ch
sub esp, 0xc
bsf dx, dx
add esp, 3
jmp 0xc5729b
lea edx, [ecx*4]
not eax
call fcn.00c5731b
into
dec ebp
frstor dword [edi + edx*2 + reloc.RASAPI32.dll_RasHangUpA]
sub esp, esi
imul ecx, dword [ebp - reloc.RASAPI32.dll_RasHangUpA]
push es
lea edx, reloc.RASAPI32.dll_RasHangUpA
not edi
xchg word [esp], dx
mov ax, si
mov ax, word [esp + 1]
mov byte [esp], ch
jmp 0xc572b1
std
cmp eax, ebp
add esp, 1
mov dh, byte [esp]
xchg byte [esp], dl
rdtsc
jmp 0xc57285
lea edi, reloc.RASAPI32.dll_RasHangUpA
mov al, ah
lea esp, [esp + 0x22]
add esp, 1
mov byte [esp], dl
mov ax, word [esp + 1]
jmp 0xc5734d