Function at 0x5ce564
Capabilities:
Execute anti-debugging instructions

Disassembly:
rdtsc
rdtsc
mov si, 0xcdf3
lea esp, [esp + 1]
jmp 0x5ce5b2
mov dword [esp + 0x24], eax
jmp 0x5cfbb2
mov si, di
call fcn.005ce59c
call 0x5ce593
jmp 0x5cfb73
mov byte [esp + 1], bh
lea esi, [esi + edi]
lea esp, [esp + 3]
pop edx
bswap esi
mov si, word [esp]
jmp 0x5ce586
call 0x5ce610
jmp 0x5cfc61
mov dword [esp + 0x24], eax
jmp 0x5cfc9e
call 0x5ce6c1
jmp 0x5cfe02
mov dword [esp + 0x24], eax
jmp 0x5cfd2f
pop ecx
sub ecx, 0x5ce593
mov dword [ecx + 0x5cfad6], eax
jmp 0x5cfb8c
movzx ebx, byte [eax]
add ebx, 0xe4612c65
cmp ebx, 0xe4612d31
jmp 0x5cfc05
popal
call 0x5cfb86
lea esp, [esp + 4]
jmp 0x5cfbe8
push 0
pushfd
call fcn.005cfd02
test al, 0x39
test eax, 0x8ad03bc8
sbb cl, byte [eax - 0x442e511]
ror byte [ebp - 0x24], cl
cmp edx, eax
mov bl, byte [edx]
mov bh, ch
sbb bh, byte [ebp - 0x23b22d05]
das
je 0x5cfbf9
je 0x5cfbf9
jne 0x5ce572
xor ah, byte [ecx + 0x50a35031]
je 0x5cfbf7
jo 0x5cfc2e
loop 0x5cfc70
mov dword [reloc.MSVBVM60.DLL___vbaR8FixI4], eax
sbb edx, dword [edx - 0x10]
invalid
call 0x5cfc41
pop edi
pop edi
jbe 0x5cfc92
popal
push edx
arpl word gs:[ebp + 0x73], ax
je 0x5cfcab
jne 0x5cfc9e
je 0x5cfc7e
outsb dx, byte [esi]
jae 0x5cfca9
add bl, ch
xor al, 0x24
push edi
mov esi, 0xde82889
invalid
invalid
add byte [eax], al
add byte [ebp + 0x53], cl
call fcn.004d283b
jmp 0x5cfc27
pop ecx
jmp 0x5cfcbd
or bl, byte [ebp + 0xca7540d]
insb byte es:[edi], dx
push eax
call fcn.004d4e3d
jmp 0x5ce60b
mov ecx, ebp
invalid
jae 0x5cfc5a
invalid
popal
pushal
xchg di, bp
popal
push edx
call fcn.005cfce8
call 0x71dfe426
clc
imul byte [eax - 2]
cdq
push 0x158505ef
jl 0x5cfc4a
add al, ch
ja 0x5cfc94
xor byte [ecx - 8], 0xf6
push 0xef6899fe
add eax, 0x8f7c1585
pop ecx
mov ah, 0x81
jmp 0xb9e2d3
sub ecx, 0x5ce610
mov dword [ecx + 0x5cfbe9], eax
jmp 0x5cfd9a
jmp 0x5cfde2
popal
pushal
call 0x5cfd37
inc esp
lea esp, [esp + 0x24]
jmp 0x5cfdea
je 0x5cfe07
jne 0x5ce677
push dword [esp + 2]
lea esp, [esp + 8]
jmp 0x5cfd7a
or bl, ch
adc eax, 0x71168006
sub byte [ecx - 0x48], 0x3d
lodsd eax, dword [esi]
mov ah, 0x47
movsd dword es:[edi], dword [esi]
mov word [edi], ds
pushf
call 0x5cfd5b
cmp dword [esp + 4], 0
jne 0x5cfd2a
pushal
jmp 0x5cfdc5
movzx ebx, byte [eax]
add ebx, 0x1ad0f325
cmp ebx, 0x1ad0f3f1
jmp 0x5cfd4f
call 0x5cfdd7
dec ebp
push ebx
push esi
inc edx
push esi
dec ebp
xor byte ss:[esi], ch
inc esp
dec esp
dec esp
add bl, ch
stosd dword es:[edi], eax
out 0x6c, al
loop 0x5cfd62
je 0x5cfd75
stc
popfd
ret
popfd
ret
popfd
ret
cmp ebx, 0xcc3f44fe
jmp 0x5cfe32
pop ecx
sub ecx, 0x5ce6c1
mov dword [ecx + 0x5cfd1b], eax
movzx ebx, byte [eax]
pop esp
add byte [ecx + 0x5cfd1b81], cl
add byte [edi], cl
mov dh, 0x18
add ebx, 0xcc3f4432
jmp 0x5cfdec
je 0x5cfe50
jne 0x5ce6e9
scasb al, byte es:[edi]
and dh, byte [eax - 0x1336dd29]
not dword [bp + si - reloc.MSVBVM60.DLL___vbaR8FixI4]
or bl, byte [eax + 0x7a98690e]
jne 0x5cfeb2
xchg edi, eax
push eax
call fcn.004d4e3d
jmp 0x5ce6bc
jmp 0x5cff47
jne 0x5cfe5a
pushal
jmp 0x5cfec6
inc esp
dec esp
dec esp
add al, ch
invalid
jg 0x5cfee3
invalid
call 0x5cfed8
dec ebp
push ebx
push esi
inc edx
push esi
dec ebp
xor byte ss:[esi], ch
inc esp
dec esp
dec esp
add al, ch
pop esi
sub eax, esi
invalid
mov dl, 0x20
inc edi
mov dl, 4
and al, 0xb7
daa
inc edx
mov cl, 0x16
sub al, byte [ebp - 0xc]
out 0xe, eax
cdq
pushfd
pushal
mov dword [esp + 0x15], ebp
lea esp, [esp + 0x20]
cmp dword [esp + 4], 0
jmp 0x5cfe8c
popfd
ret