Function at 0xcfe653
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov edx, eax
inc bl
jmp 0xcfdecf
bsr edx, edx
bsf bx, si
mov ebx, 0x3324a40d
lea esp, [esp + 1]
xchg word [esp + 1], ax
mov ebp, 0xaf3e5229
jmp 0xcfdf1c
lea edx, [ebp + 0x16]
mov bh, ch
xchg word [esp + 0x16], cx
xchg word [esp + 6], bp
jmp 0xcfdfac
mov ecx, dword [esp + 1]
rdtsc
sub esp, 0x1a
pop edi
neg dh
mov si, 0xac23
jmp 0xcfdf06
mov di, word [esp + 0xe]
lea ecx, [ecx*4]
bswap eax
bswap eax
xchg bp, bx
lea esp, [esp + 0xa]
jmp 0xcfdf8c
pop dword [esp + 5]
pop word [esp + 8]
mov cx, word [esp + 3]
mov edi, ebp
add esp, 5
sub esp, 0x15
jmp 0xcfdf3d
dec ebx
neg ch
std
mov al, 0xc5
mov ax, word [esp]
rdtsc
jmp 0xcfdfd6
pushal
mov word [esp + 0x1b], bp
pushfd
add esp, 0xf
sub esp, 0x1a
lea esp, [esp + 0x45]
jmp 0xcfdf76
add eax, esp
not ch
adc ebp, 0x378f6077
mov word [esp + 0xe], si
pop edx
mov bl, 0xa5
jmp 0xcfdf5e
xchg ebx, esi
mov bp, 0xcf06
pop dx
push word [esp + 8]
jmp 0xcfe7e4
sub esp, 0x19
add bp, 0x6043
xchg edx, edi
bswap eax
lea edi, [edi*4]
xchg byte [esp + 5], cl
jmp 0xcfdfc0
rol ah, cl
inc dx
mov di, 0xb167
mov edx, 0x52e77000
jmp 0xcfe054
mov di, word [esp + 4]
clc
xchg dword [esp + 2], edx
xchg ecx, ebx
sub esp, 0x1b
lea esp, [esp + 0x56]
jmp 0xcfdfef
cld
lea ebp, [eax + edi]
sub esp, 0x1e
mov bl, byte [esp + 0x22]
seto ch
mov dl, 8
jmp 0xcfe005
cpuid
bswap ebp
xchg bp, ax
mov edx, dword [esp]
xchg di, bx
mov cl, bh
jmp 0xcfe2e0
lea eax, [esi*4]
btr ax, bx
bsr edx, ecx
bswap esi
xor dl, cl
sub bl, cl
jmp 0xcfe03e
mov byte [esp + 0xe], dl
mov edi, dword [esp + 0xb]
lea esi, [esi + edi]
clc
push dword [esp + 7]
rcl dh, cl
jmp 0xcfe02c
mov bp, ax
mov dl, byte [esp]
mov edx, esi
sub esp, 0xf
call fcn.00cfe208
mov dl, 0xcd
mov byte [esp + 1], dl
pop edi
neg dl
lea esp, [esp + 8]
mov dword [esp + 1], ebp
jmp 0xcfe4a9
pop dword [esp + 0xe]
mov si, word [esp + 0x12]
neg ah
mov eax, 0xa272596f
inc dl
mov ecx, dword [esp + 0x15]
jmp 0xcfe07a
mov eax, ebx
xchg word [esp], bp
dec esi
mov edi, dword [esp]
bswap edx
mov eax, 0xf9392cf
call fcn.00cfe3a4
pop dword [esp + 0x30]
lea eax, [ecx*4]
mov byte [esp + 0x10], cl
mov dword [esp + 0x2a], edi
jmp 0xcfe482
mov al, dh
shl bh, 1
lea ebx, [ebp*4]
mov di, bx
lea esi, reloc.ADVAPI32.DLL_GetUserNameA
add esp, 1
jmp 0xcfe423
mov ch, al
xchg dword [esp + 0x15], ebx
push word [esp + 0x1d]
push dword [esp + 7]
jmp 0xcfe546
add edx, 0xc3b6a3bd
mov byte [esp + 0x31], dh
mov byte [esp + 0x1f], ah
cld
xchg dword [esp + 0x29], ecx
push dword [esp + 2]
jmp 0xcfe46c
bswap eax
mov al, 0x4e
std
rol eax, 0xc
add esp, 7
rdtsc
jmp 0xcfe453
lea esp, [esp + 0x44]
setb ah
stc
call fcn.00cfe4ce
lea ebx, [ebx*4]
lea edx, [eax + 0x5f]
mov ch, byte [esp + 3]
jmp 0xcfe5b2
shl cl, 7
xchg ecx, edx
bswap ecx
seto bl
xchg bp, di
jmp 0xcfe63a
mov ebx, 0xbecacafb
pop word [esp]
mov edi, 0xf8c708ae
cpuid
shl ax, cl
mov byte [esp], dl
jmp 0xcfe59c
mov bp, word [esp + 1]
pushal
bswap edi
mov word [esp + 0x1e], di
mov cx, word [esp + 5]
xchg bl, bh
call fcn.00cfe608
add esp, 0
xchg dword [esp + 0x27], ebx
bsr cx, sp
mov ax, bx
jmp 0xcfe688
bsr bx, bp
mov edx, ecx
mov al, 0x11
xchg byte [esp + 0xc], al
lea edi, [esp + eax]
jmp 0xcfe6d4
not cx
cld
mov cl, al
lea edx, [ebp*4]
pop dword [esp + 0x24]
add esp, 0x16
jmp 0xcfe672
mov dword [esp + 3], edi
xchg byte [esp + 0x10], ah
pop word [esp + 0xf]
sub esp, 0x1c
jmp 0xcfe730
rdtsc
lea ebx, reloc.ADVAPI32.DLL_GetUserNameA
xchg si, ax
mov ax, 0x1fbe
mov cx, word [esp + 0x13]
mov bh, 0xdc
jmp 0xcfe6be
xchg bh, dh
mov cl, 1
xchg byte [esp + 0xa], ah
bswap ebx
mov byte [esp + 0x1c], dl
lea ecx, [esp + eax]
jmp 0xcfe758
mov dh, 0xd5
pop dword [esp + 0xe]
neg esi
bswap edi
mov dword [esp + 0xd], eax
mov cl, al
jmp 0xcfe709
popal
pop word [esp + 9]
bt si, bx
lea edx, [edx + esi]
dec eax
jmp 0xcfe7af
seto dl
mov word [esp + 0x11], sp
mov edi, ebp
xchg edx, eax
mov bx, word [esp + 0xd]
pop esi
jmp 0xcfe742
lea ebx, reloc.ADVAPI32.DLL_GetUserNameA
bsf si, si
bts edx, ecx
lea eax, [ebx*4]
pop bp
lea eax, [ebx*4]
jmp 0xcfe7c4
push dword [esp + 8]
mov bl, 0x27
mov eax, edi
lea esp, [esp + 5]
pop si
xchg word [esp + 2], bp
jmp 0xcfe78b
setg ah
xchg ebx, eax
bswap edx
lea eax, [eax*4]
std
mov word [esp + 5], di
jmp 0xcfee56
push dword [esp + 0x16]
mov bh, byte [esp + 0xb]
btc ebp, ebx
mov dword [esp + 8], ebx
cpuid
ror cl, cl
jmp 0xcfe316
lea esp, [esp + 5]
lea edx, [esp + ebp]
cpuid
pop dword [esp + 4]
cpuid
jmp 0xcfe824
cpuid
push word [esp + 8]
push dword [esp + 0xa]
pop eax
rdtsc
rdtsc
jmp 0xcfe7fc
lea ecx, reloc.ADVAPI32.DLL_GetUserNameA
not eax
lea edx, [ebx*4]
not bx
jmp 0xcfe9e3
push dword [esp + 9]
lea ebx, [eax*4]
neg edx
mov dl, byte [esp + 7]
adc esi, edx
mov al, byte [esp + 0xc]
jmp 0xcfe812
add edx, 0xf2457bd5
add esp, 0x13
add esp, 0
mov ch, 0x1c
mov dl, bh
jmp 0xcfe881
push dword [esp + 0xa]
not bp
mov dl, byte [esp + 6]
mov bh, 0x99
inc cx
push dword [esp + 7]
jmp 0xcfe856
bswap eax
sub esp, 0x1d
push edi
xchg si, dx
rcl dx, cl
jmp 0xcfe8c3
rdtsc
push edx
mov ax, word [esp + 0xa]
mov edx, eax
mov ecx, edx
mov dl, bl
jmp 0xcfe86c
lea esp, [esp + 0x16]
btr si, cx
pop esi
cmc
lea ebx, [edx - 0xc0]
mov ch, 0xeb
jmp 0xcfe958
lea esi, [esi*4]
mov dx, cx
lea esp, [esp + 9]
cpuid
inc bx
xchg byte [esp + 0xf], ah
jmp 0xcfe8a8
ror al, 3
pop eax
lea eax, [ecx + esi]
push dword [esp + 1]
mov edx, 0x2983843e
setbe bl
jmp 0xcfe898
mov bh, ah
ror al, 7
mov ax, di
mov esi, dword [esp]
cld
mov ah, cl
jmp 0xcfe92c
lea edx, [eax + esi]
stc
mov dh, cl
btr ebx, edx
stc
shr dl, cl
jmp 0xcfe904
clc
btc edx, edx
lea ebp, [ecx*4]
mov eax, 0xf48f1c85
call fcn.00cfe981
push dword [esp + 1]
not si
mov ebp, 0x624bf930
std
jmp 0xcfe96b
mov ah, byte [esp]
cpuid
lea ebx, [edx + esi]
bt eax, edi
neg dx
setno ah
jmp 0xcfe91e
pop word [esp + 1]
pop word [esp]
lea esp, [esp + 3]
mov cl, bh
jmp 0xcfe99f
lea ebp, [ecx + esi]
sub al, 0xdb
std
mov bp, word [esp]
btr edx, ebp
mov cl, bh
jmp 0xcfe9c7
mov esi, dword [esp]
mov dl, 0x5f
rdtsc
btc bp, bx
sbb esi, esi
xchg dx, si
jmp 0xcfe989
mov dh, byte [esp]
rcr edi, cl
mov ebx, 0x73a6a919
rdtsc
bswap edx
call fcn.00cfea17
xchg esp, eax
pop es
mov ah, 0x25
adc dl, al
lea esi, [edx*4]
inc bl
mov cx, word [esp]
mov edx, ebx
jmp 0xcfe9b1
xchg dword [esp + 2], eax
lea ebp, [ebp*4]
xchg word [esp + 4], cx
mov dx, bp
xchg ebp, eax
shl ax, 0
jmp 0xcfe8ef
mov esi, dword [esp + 7]
push word [esp + 5]
rdtsc
pop dword [esp + 6]
mov esi, eax
mov cl, al
jmp 0xcfe83d
std
pushfd
pop edx
mov dword [esp], edi
lea edi, reloc.ADVAPI32.DLL_GetUserNameA
push word [esp + 7]
jmp 0xcfeab3
sub esp, 4
mov cx, si
xchg word [esp + 3], cx
neg ecx
not bl
rdtsc
jmp 0xcfeaf0