Function at 0x5d7182
Capabilities:
Execute anti-debugging instructions

Disassembly:
bsr ax, bp
jmp 0x5d7029
mov dh, 0x10
pop bp
push word [esp + 1]
pop word [esp]
mov al, ah
pop bp
jmp 0x5d7080
mov bp, sp
xchg bp, dx
pushal
pop bp
mov bp, sp
mov bp, word [esp + 4]
jmp 0x5d7100
mov dl, 0xcc
inc eax
mov dh, ch
stc
call fcn.005d70e1
inc esi
insb byte es:[edi], dx
jne 0x5d7182
push 0x656c6946
inc edx
jne 0x5d717d
jb 0x5d718e
add byte [ebp + 0x50012464], cl
not dx
mov dh, ch
mov dl, 0x44
bsf bp, ax
xchg byte [esp], dh
cmc
jmp 0x5d71f9
lea esp, [esp + 0x19]
clc
pop dword [esp]
xchg byte [esp + 2], dl
mov eax, 0x4b7bb3f0
jmp 0x5d7133
dec esp
and al, 0x15
jmp 0x5d7153
mov ebp, esp
xchg dword [esp], ebp
mov dx, word [esp + 9]
jmp 0x5d71d1
push ebx
je 0x5d71d8
imul ebp, dword [ebp + 0x50], reloc.KERNEL32.dll_SetEndOfFile
jb 0x5d719d
mov word [esp + 4], dx
xchg byte [esp + 4], dh
sete dh
call 0x5d7182
inc edi
je 0x5d71f5
jne 0x5d7226
jb 0x5d721b
outsb dx, byte [esi]
je 0x5d7209
jb 0x5d722a
arpl word [ebp + 0x73], sp
jae 0x5d71c0
iretd
rdtsc
mov edx, eax
not dh
mov dl, dh
btr eax, edx
mov ebp, ebx
jmp 0x5d719d
mov dh, byte [esp + 7]
push word [esp + 0xa]
and al, 0xa
add esp, 2
sub dh, ah
mov dx, sp
mov ax, 0x941
jmp 0x5d720e
insb byte es:[edi], dx
add cl, al
rdtsc
pop word [esp]
lea ebp, [ecx*4]
cmc
push edx
xor ax, 0x9e64
jmp 0x5d71c2
xor eax, 0xb4eb9e64
lea esp, [esp + 1]
sub esp, 2
pop dword [esp]
mov byte [esp + 5], bh
lea eax, [edi*4]
jmp 0x5d8bec
add eax, 0xbd048d
add byte [eax], al
add cl, ch
les ebx, [ecx]
add byte [eax], al
or byte [ebp - 0x7fedb9c], 0xf5
lea esp, [esp + 1]
clc
cmc
and al, 1
pop dword [esp + 4]
xchg word [esp + 7], bp
not bp
cmc
lea eax, [edx + esi]
mov edx, ebp
jmp 0x5d72a6
push word [esp + 5]
pop dx
xchg ah, dh
mov dh, byte [esp + 5]
xchg dh, al
rdtsc
jmp 0x5d723c
mov edx, dword [esp + 9]
lea ebp, [ebx*4]
mov al, ah
mov dh, 0xf2
xchg dword [esp + 0xa], eax
setp ah
jmp 0x5d7256
pop dword [esp]
mov al, ah
xchg ah, dh
push word [esp + 3]
sbb ebp, ebp
jmp 0x5d752e
mov eax, 0xce0e9bf8
mov bp, dx
lea ebp, [eax - 0x69]
pop bp
lea edx, [eax + ebx]
jmp 0x5d7290
lea edx, reloc.KERNEL32.dll_SetEndOfFile
mov ebp, 0xaa4e88ca
cmp ebp, ecx
not eax
bswap ebp
push esp
jmp 0x5d7278
pop word [esp + 9]
seto dh
mov word [esp + 8], di
mov al, 0xee
lea esp, [esp + 0x11]
xchg bp, ax
jmp 0x5d7353
not dh
mov ebp, 0x6d6783ea
xchg word [esp + 0xb], dx
xchg dh, dl
mov dh, 0x80
jmp 0x5d72d1
mov dh, 0xca
add esp, 2
mov ah, byte [esp + 4]
sub esp, 0x1a
xchg dh, dl
lea esp, [esp + 9]
jmp 0x5d72f3
pop ax
btc ebp, ebx
xchg byte [esp], dh
call fcn.005d733c
btc ebp, edi
mov bp, 0xd93d
mov dh, 0x8a
xchg bp, ax
push edx
bsf bp, si
jmp 0x5d73d2
btr eax, edi
mov ebp, 0xdc6b7b16
pop word [esp + 1]
lea ebp, [edx*4]
push dword [esp + 3]
inc bp
jmp 0x5d730b
mov dword [esp], eax
sub esp, 8
mov dx, 0x2cb1
btc ebp, edi
call fcn.005d73b8
popal
mov al, byte [0x64751ae3]
xchg bp, dx
mov edx, 0xb469279c
inc bp
xchg dh, al
and ebp, ecx
inc al
jmp 0x5d7399
add esp, 1
pop bp
setp dh
mov dh, byte [esp + 3]
push word [esp + 2]
jmp 0x5d73ea
xchg byte [esp + 4], dh
rdtsc
rdtsc
xchg byte [esp], al
stc
xchg dh, dl
jmp 0x5d7515
xchg dh, al
mov word [esp + 4], di
pop dword [esp + 2]
mov dl, 0xbc
neg ah
lea ebp, [ebx + ebx]
jmp 0x5d72bd
xchg ah, dh
mov ebp, dword [esp + 7]
push word [esp + 7]
push word [esp + 5]
mov ax, 0x460b
push dword [esp]
jmp 0x5d875a