Function at 0xc567c8
Capabilities:
Execute anti-debugging instructions

Disassembly:
pushfd
std
sub esp, 0x19
add esp, 0x13
lea esp, [esp + 2]
lea esp, [esp + 4]
jmp 0xc56791
clc
push ecx
mov dword [esp], edx
sub esp, 0x14
add esp, 9
clc
jmp 0xc567fb
call 0xc567c8
push ebx
popal
outsb dx, byte gs:[esi]
imul ebp, dword [bp + 0x65], 0x69685320
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
and byte [esi + 0x32], dh
xor al, 0x2e
xor byte [esi], ch
xor byte [eax], al
jmp 0xc56761
mov dword [esp + 4], eax
mov eax, 0x78b9801f
sub esp, 0x1e
mov edx, dword [esp]
jmp 0xc56953
xchg byte [esp + 5], dl
sub esp, 9
push dword [esp + 7]
bts dx, dx
xchg dword [esp + 8], edx
jmp 0xc567e5
rcl edi, 0x11
push word [esp + 1]
mov eax, dword [esp + 2]
rcl edx, 0xb
jmp 0xc56874
push word [esp + 2]
mov word [esp + 2], bp
mov eax, esp
mov eax, ebp
stc
lea edx, reloc.RASAPI32.dll_RasHangUpA
jmp 0xc5681e
mov edx, ebx
xchg dh, al
mov dx, si
push esp
clc
mov dh, byte [esp]
jmp 0xc56834
btr edx, ebx
mov dx, word [esp + 3]
push dword [esp + 7]
pushal
inc dx
pop edi
jmp 0xc56905
rdtsc
neg ax
not edi
mov dh, byte [esp + 1]
cmc
xchg di, ax
jmp 0xc5685e
bsr dx, bp
xchg al, dh
mov edi, 0xccf27b1
bt dx, cx
rcr di, cl
not edx
jmp 0xc56850
sub esp, 0x1d
lea esp, [esp + 0x41]
btc di, bx
mov dx, ax
shl eax, 0x16
bsf edx, ebp
jmp 0xc568eb
push word [esp + 3]
setae dl
mov edx, dword [esp]
dec dl
push word [esp + 0x17]
not ah
jmp 0xc568a5
ror dl, 5
rol dx, 9
mov di, dx
sets dl
not dh
cmc
jmp 0xc56930
rdtsc
xchg edi, eax
std
std
mov al, 0x4e
ror edi, 0x1f
jmp 0xc568d5
pop dword [esp + 3]
neg ah
rcl edx, cl
mov dword [esp + 0x1c], esi
pop di
pop word [esp + 2]
jmp 0xc568bf
xchg di, ax
mov edx, dword [esp]
dec ah
mov eax, esi
xchg dh, dl
rol edx, 7
jmp 0xc569cb
lea edx, reloc.RASAPI32.dll_RasHangUpA
xchg edx, edi
xchg dx, ax
bsr edx, ecx
mov edx, 0x70c2d9cc
mov dl, dh
jmp 0xc5691a
lea edx, [ecx + 0xd8]
rcr edx, cl
bswap edx
lea esp, [esp + 2]
mov dword [esp + 0x14], edi
mov eax, 0xe6fc3944
jmp 0xc5688f
std
lea eax, [ebp*4]
xchg dl, ah
std
call fcn.00c5696f
dec edi
mov di, 0xd473
sbb edx, 0x212402b6
xchg byte [esp], al
push ecx
jmp 0xc56a4a
xor dx, 0xec7e
push dx
setno dl
mov dx, cx
sete al
pop dx
jmp 0xc56985
push dword [esp + 2]
xchg dx, di
neg eax
xchg dx, ax
pop dword [esp]
xchg edi, eax
jmp 0xc56a30
neg eax
mov edx, 0x8ec3d8c5
mov word [esp], si
mov dword [esp], eax
mov dx, 0x6743
inc ah
jmp 0xc569df
mov byte [esp + 2], ah
mov byte [esp + 3], dh
lea edx, [eax + edx]
push di
bsr edi, esp
jmp 0xc56a88
xchg dword [esp], eax
mov dh, cl
xchg dl, al
mov eax, 0x5f50472e
rdtsc
xchg dx, ax
jmp 0xc56a1a
setp al
rdtsc
and edx, 0x80457882
mov edi, 0x45fe5af1
inc di
lea eax, [ebp*4]
jmp 0xc56a04
mov dword [esp + 0xa], ebp
bsf edx, esi
xchg ah, dl
mov edi, dword [esp + 0xb]
mov word [esp + 0xe], ax
rdtsc
jmp 0xc57025
push dword [esp + 2]
push dword [esp + 9]
push bp
xchg edi, eax
xchg dword [esp + 3], edi
lea edi, [eax*4]
jmp 0xc56a65
mov di, word [esp + 0x12]
xchg dword [esp + 0xb], edx
mov edi, dword [esp + 0xb]
rdtsc
jmp 0xc56b04
xchg edi, edx
xchg dword [esp + 0xc], edi
cld
mov ah, byte [esp + 0xf]
std
mov dl, cl
jmp 0xc56ac8
mov dword [esp + 0xd], esp
mov word [esp + 7], bx
xchg word [esp + 9], dx
pushal
jmp 0xc56b5e
lea eax, reloc.RASAPI32.dll_RasHangUpA
xchg di, ax
mov edx, dword [esp + 0xd]
mov dl, 0x79
mov byte [esp + 0xa], bh
mov dword [esp + 0xc], ecx
jmp 0xc56aee
xchg dh, dl
bswap edx
pop di
xchg word [esp + 6], di
xchg di, ax
mov edx, dword [esp + 0xe]
jmp 0xc56ade
mov edi, edx
bts eax, edx
mov edx, 0xa26a5fa4
neg edx
xchg dword [esp + 8], edx
cld
jmp 0xc56b85
lea esp, [esp + 0x23]
mov edi, dword [esp + 7]
mov edi, eax
mov ah, dh
neg edi
pop edx
jmp 0xc56b44
mov dl, bl
mov edx, 0xdc9dffae
rdtsc
bsf di, bp
jmp 0xc56c2f
neg di
mov edx, 0xa90c69e0
lea eax, [esp + ebp]
mov ax, word [esp + 5]
lea edx, [esp + esi]
add esp, 0xb
jmp 0xc56b6f
bsr edx, esp
xchg byte [esp + 6], ah
xchg byte [esp + 0xb], dl
mov al, byte [esp + 3]
mov dh, dl
pop dword [esp + 0x12]
jmp 0xc56b31
mov dl, bh
lea edx, reloc.RASAPI32.dll_RasHangUpA
mov al, bh
inc edx
mov di, word [esp]
rdtsc
jmp 0xc56c17
xchg dl, dh
pop edi
lea eax, [eax*4]
not ax
xchg dx, ax
mov di, dx
jmp 0xc56bcb
xchg edx, edi
call fcn.00c56c01
mov cl, 0x31
mov eax, dword [reloc.RASAPI32.dll_RasHangUpA]
xor ah, byte [eax - 0x4c2bcd39]
stosb byte es:[edi], al
lds esi, [edi - 0x73]
add al, 0x9d
add byte [eax], al
add byte [eax], al
lea eax, [ebx*4]
xchg word [esp], dx
bsr edx, ebx
mov eax, dword [esp + 1]
btc edx, edx
and edi, ebp
jmp 0xc56bed
mov al, 0xba
not ax
push word [esp]
mov dx, 0x9579
dec edi
xchg di, ax
jmp 0xc56bb1
push ebp
sete al
setns ah
adc eax, ebx
neg dl
inc di
jmp 0xc56c8c
pushfd
mov dx, 0x3dce
rol dl, 1
ror eax, 0x1d
dec edi
mov edi, 0xc2cb2fd2
jmp 0xc56f5f