Function at 0x5bc1c0
Capabilities:
Check for time delay via queryperformancecounter
Execute anti-debugging instructions
Get cpu information
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0xfe4]
push 0xffffffffffffffff
push 0x6b4bd8
mov eax, dword fs:[0]
push eax
mov eax, 0x1058
mov dword fs:[0], esp
call fcn.005cd2a0
mov eax, dword [0x70e4ec]
xor eax, ebp
push ebx
push edi
mov dword [ebp + 0xfd4], eax
call fcn.005bbc60
test al, al
je 0x5bc45a
xor eax, eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
push ebx
push ecx
push edx
xor eax, eax
cpuid
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x34], ecx
mov eax, 1
cpuid
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x74], edx
mov eax, Ordinal_3
cpuid
cmp eax, 0x80000000
jb 0x5bc252
mov eax, Ordinal_3
cpuid
mov dword [ebp - 0x6c], edx
pop ecx
pop ebx
pop edx
mov eax, dword [ebp - 0x74]
test eax, 0x800000
je 0x5bc263
or dword [esi + 0x5c], 1
mov ecx, dword [ebp - 0x6c]
test ecx, ecx
jns 0x5bc26e
or dword [esi + 0x5c], 2
test eax, 0x2000000
je 0x5bc279
or dword [esi + 0x5c], 4
test eax, 0x4000000
je 0x5bc284
or dword [esi + 0x5c], 8
mov eax, dword [ebp - 0x5c]
mov ecx, eax
shr ecx, 8
and ecx, 0xf
cmp cx, 0xf
mov word [esi + 0x50], cx
jne 0x5bc2a8
mov ecx, eax
shr ecx, 0x10
and ecx, 0xff0
mov word [esi + 0x52], cx
mov ecx, eax
shr ecx, 4
and ecx, 0xf
cmp cx, 0xf
mov word [esi + 0x54], cx
jne 0x5bc2c6
mov edx, eax
shr edx, 0xc
and edx, 0xf
mov word [esi + 0x56], dx
and eax, 0xf
mov word [esi + 0x58], ax
lea eax, [ebp - 0x3c]
lea ebx, [esi + 0x33]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5bc2d6
sub eax, edx
mov edi, eax
cmp edi, 0xd
jbe 0x5bc2eb
mov edi, 0xd
push edi
lea eax, [ebp - 0x3c]
push eax
push ebx
call fcn.005cd0f0
add esp, 0xc
lea ecx, [ebp - 0x70]
push ecx
mov byte [edi + ebx], 0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
rdtsc
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], edx
mov edi, dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea edx, [ebp - 0x68]
push edx
call edi
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x68]
add ecx, eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x68], ecx
mov ecx, dword [ebp - 0x6c]
adc eax, ecx
mov dword [ebp - 0x64], eax
lea edx, [ebp - 0x60]
push edx
call edi
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x64]
jb 0x5bc331
ja 0x5bc349
mov ecx, dword [ebp - 0x60]
cmp ecx, dword [ebp - 0x68]
jb 0x5bc331
rdtsc
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], edx
mov ebx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x74]
mov edi, dword [ebp - 0x7c]
sub edx, ebx
sbb eax, edi
xor ebx, ebx
mov dword [esi + 0x48], edx
mov dword [esi + 0x4c], eax
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x44], ebx
mov byte [ebp - 0x54], bl
mov byte [ebp - 0x2c], bl
xor eax, eax
mov ecx, 0x3ff
lea edi, [ebp - 0x2b]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x5c]
push ecx
push 0x20019
push ebx
stosw word es:[edi], ax
push str.HARDWAREDESCRIPTIONSystemCentralProcessor0
push reloc.ijl15.dll_Ordinal_2
mov dword [ebp + 0xfe0], ebx
stosb byte es:[edi], al
mov dword [ebp - 0x6c], 0x1000
mov dword [ebp - 0x74], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x5bc400
lea edx, [ebp - 0x6c]
push edx
mov edx, dword [ebp - 0x5c]
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x74]
push ecx
push ebx
push str.ProcessorNameString
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x5bc3f6
lea eax, [ebp - 0x2c]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5bc3e0
sub eax, edx
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x58]
call fcn.00405710
mov ecx, dword [ebp - 0x5c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea edx, [ebp - 0x58]
push edx
call fcn.005befd0
mov eax, dword [ebp - 0x40]
mov ebx, dword [ebp - 0x54]
add esp, 4
cmp eax, 0x10
jae 0x5bc41a
lea ebx, [ebp - 0x54]
mov eax, ebx
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5bc420
sub eax, edx
mov edi, eax
cmp edi, 0x32
jbe 0x5bc435
mov edi, 0x32
push edi
push ebx
push esi
call fcn.005cd0f0
mov byte [edi + esi], 0
mov eax, dword [ebp - 0x40]
add esp, 0xc
cmp eax, 0x10
jb 0x5bc458
mov eax, dword [ebp - 0x54]
push eax
call fcn.005cc620
add esp, 4
mov al, 1
mov ecx, dword [ebp + 0xfd8]
mov dword fs:[0], ecx
mov ecx, dword [ebp + 0xfd4]
pop edi
xor ecx, ebp
pop ebx
call fcn.005d0efa
add ebp, 0xfe4
mov esp, ebp
pop ebp
ret