Function at 0xce9676
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ebp
mov byte [esp + 1], cl
mov dword [ebp + 8], ebx
mov bx, word [esp]
lea ebx, [eax + ebp]
jmp 0xcd8cd3
mov dword [ebp + 0xc], eax
jmp 0xcd8c96
jmp 0xcd8d1a
mov ebx, dword [esp]
lea ebx, [esi*4]
mov dword [ebp + 4], ecx
stc
jle 0xcd8cb9
mov ecx, 0x6449b845
cmc
bswap ecx
jmp 0xcd8d04
mov ecx, ebp
mov dword [ecx], edx
lea ecx, reloc.mscoree.dll__CorExeMain
xchg dx, cx
jmp 0xcd8d28
mov ecx, 0x6449b845
cmc
bswap ecx
jmp 0xcd8d04
mov ebx, ebp
lea esp, [esp + 8]
jne 0xd2157d
jmp 0xd21567
movzx ebx, byte [edi - 1]
bswap edx
jmp 0xce93d1
pushfd
pushfd
pop dword [esp]
pop dx
lea esp, [esp + 2]
jmp 0xce9405
not ax
bswap edx
mov ah, bl
mov ax, dx
mov eax, dword [esp]
xchg edx, eax
jmp 0xce93af
xchg dl, ah
bsr edx, ebx
inc edx
jmp 0xce9430
add bl, cl
jnp 0xce93ef
xchg dl, ah
jmp 0xce9446
mov dl, bl
mov ah, byte [esp]
lea eax, [esp + ebx]
mov ah, byte [esp]
dec ax
jmp 0xce9489
bsr edx, ebx
inc edx
jmp 0xce9430
mov ah, 0x45
jmp 0xce94ff
jle 0xce94f9
clc
sub esp, 0
jmp 0xce9473
inc dl
add al, 0x93
jo 0xce94cf
cmc
jmp 0xce94b9
mov al, byte [esp]
push si
mov eax, 0x214e35a3
bswap eax
lea esp, [esp + 2]
jmp 0xce9491
lea eax, [edx*4]
mov ah, 0x91
jmp 0xce94d9
cmc
lea eax, [edx*4]
mov ah, 0x91
call 0xce94e0
in eax, dx
pop ax
lea esp, [esp + 2]
jmp 0xce9524
clc
sub esp, 0
mov ah, 0x45
add dl, 0x84
mov ax, word [esp]
mov eax, dword [esp]
lea eax, [edx + ebx]
jmp 0xce94a7
lea eax, [ebx - 0x8f]
rcl ah, 4
jmp 0xce957f
add dl, 0xe5
mov al, cl
bswap eax
mov ah, 0x76
dec ax
jmp 0xce95db
xchg byte [esp + 0xd], al
jmp 0xce955d
stc
xchg dword [esp + 7], eax
lea esp, [esp + 3]
jmp 0xce95af
not ah
mov eax, dword [esp]
mov ax, bp
clc
jmp 0xce98ce
not dl
sub esp, 0x13
jg 0xce9553
xchg byte [esp + 0xd], al
stc
xchg dword [esp + 7], eax
lea esp, [esp + 3]
jmp 0xce95af
not ah
mov eax, dword [esp]
mov ax, bp
jmp 0xce95bf
ror dl, 0
lea eax, [ebp*4]
neg eax
jbe 0xce9568
ja 0xce9595
clc
call fcn.00ce970a
inc dh
jne 0xce9637
mov edx, 0x4fa3c393
jmp 0xce963c
jg 0xce950e
lea eax, [ebx - 0x8f]
rcl ah, 4
jmp 0xce957f
mov ax, si
mov al, byte [esp]
not edx
lea edx, [esi + edi]
lea edx, [ecx + ebp]
neg edx
jmp 0xce963f
mov edx, 0x4fa3c393
dec edi
jmp 0xce9621
jae 0xce9655
bswap eax
mov dh, byte [esp]
jmp 0xce965a
bswap eax
mov dh, byte [esp]
call 0xce9676
lea esp, [esp + 4]
xor bl, 0x43
mov dx, bx
dec edx
jg 0xce9678
jle 0xce96ad
mov dh, 0x43
sal dword [esi + reloc.mscoree.dll__CorExeMain], cl
jmp 0xce965f
mov dh, 6
lea edx, reloc.mscoree.dll__CorExeMain
ror eax, cl
jmp 0xce9697
ror bl, 0
mov ax, cx
bt eax, esp
jb 0xce96e0
jae 0xce96e8
div byte [esi - 0x1c]
cmp dword [esi + 0x76], 0xffffffe7
push cs
cdq
mov dh, 6
lea edx, reloc.mscoree.dll__CorExeMain
ror eax, cl
jmp 0xce9697
xchg edx, eax
jmp 0xce972e
xchg edx, eax
bsr dx, si
mov edx, 0xb8ece93
mov ax, 0x22f0
mov ax, bp
jmp 0xce97f1
bsr dx, si
mov edx, 0xb8ece93
mov ax, 0x22f0
call fcn.00ce978f
inc edx
std
dec bl
jmp 0xce97a8
btr edx, edx
jae 0xce97d0
clc
mov edx, dword [esp]
mov dl, cl
not ax
mov dh, bl
jmp 0xce9802
not dx
rdtsc
bt edx, ebp
jp 0xce97a0
jnp 0xce97a0
clc
mov edx, dword [esp]
jmp 0xce97da
mov dl, cl
not ax
mov dh, bl
jmp 0xce9802
not bl
rdtsc
mov eax, 0x54818c76
mov dh, byte [esp]
mov edx, dword [esp]
jmp 0xce97c4
pushal
mov edx, esi
xchg dx, ax
lea esp, [esp + 0x20]
inc bl
jmp 0xce9813
mov ax, cx
mov dh, 0x6f
mov eax, esi
jmp 0xce9850
shl eax, 2
call fcn.00ce988a
rol byte [edx + ebx*8 - 0x43], 0x4c
sub eax, 0x61f176
push dword [eax + 0x73]
mov eax, ebx
bswap edx
mov edx, dword [esp]
mov dx, word [esp]
mov dx, ax
jmp 0xce983a
add cl, dl
pushal
jmp 0xce95c5
mov dh, al
not dx
not ah
jmp 0xd014f2
mov dh, al
not dx
not ah
jmp 0xd01513
bsf edx, eax
jmp 0xd01527
add ax, sp
je 0xd014eb
jne 0xd014d5
lea eax, [esi + 0x50]
mov bx, sp
neg bx
jl 0xd014f4
bsf edx, eax
jmp 0xd0166e
sub esp, 9
lea esp, [esp + 1]
jmp 0xd01625
mov dh, byte [esp]
cmc
not dh
jmp 0xd01607
not dh
jmp 0xd01607
jg 0xd015af
mov dh, byte [esp]
cmc
jmp 0xd015d3
pushal
mov dword [esp + 0x3c], esi
lea esp, [esp + 0x20]
popal
setle dl
call fcn.00d01698
inc esi
int1
pushal
pushal
bswap edi
ror bx, 2
jb 0xd015f1
jae 0xd01648
out dx, eax
push 0x576899fe
add eax, dword [ebp - reloc.mscoree.dll__CorExeMain]
mov bl, 0x36
movsb byte es:[edi], byte [esi]
ret
cmp ebp, eax
ja 0xce93a7
rcl bx, cl
jmp 0xd015e9
popal
setle dl
call fcn.00d01734
invalid
pushal
mov dword [esp + 0x3c], esi
lea esp, [esp + 0x20]
jmp 0xd01632
sub esp, 9
lea esp, [esp + 1]
call fcn.00d015a3
lea esp, [esp + 3]
xchg dword [esp + 0x10], ecx
setne bl
mov bx, word [esp]
mov bh, byte [esp]
lea ebx, reloc.mscoree.dll__CorExeMain
jmp 0xd016ab
rcl bl, cl
lea ecx, [ecx + 0x50]
xchg dl, bl
lea ebx, reloc.mscoree.dll__CorExeMain
mov bx, bp
mov dl, 0x9a
jmp 0xd018c3
mov edx, ecx
push dword [esp + 0x10]
ret 0x14
clc
xchg dword [esp + 0x10], ecx
xchg edx, ebx
mov dx, 0x8515
mov dx, 0x6f33
neg bx
jmp 0xd017a6
mov edx, eax
mov ch, byte [esp]
lea ecx, [ebp*4]
mov ecx, edi
jmp 0xd21593
jmp 0xd215ea
and edx, 0xff0
xchg bx, ax
bt cx, di
jmp 0xd215e0
bsr ecx, ebp
mov al, byte [esp]
jmp 0xd215ca
cmp edx, 0xfe0
bswap edx
push esi
cpuid
pushal
jmp 0xd21600
jbe 0xd215a5
bsr ecx, ebp
mov al, byte [esp]
jmp 0xd215ca
popal
mov bh, byte [esp]
mov ax, word [esp]
jmp 0xd0150c
lea esp, [esp + 0x24]
jne 0xd2157d
xor byte [ebp + 0xc], 0x20
jmp 0xd2157d