Function at 0x5a9cb0
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ebp
lea ebp, [esp - 0xfe4]
push 0xffffffffffffffff
push 0x6a1fa8
mov eax, dword fs:[0]
push eax
mov eax, 0x1058
mov dword fs:[0], esp
call fcn.005ba830
mov eax, dword [0x6faa54]
xor eax, ebp
push ebx
push edi
mov dword [ebp + 0xfd4], eax
call fcn.005a9750
test al, al
je 0x5a9f4a
xor eax, eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
push ebx
push ecx
push edx
xor eax, eax
cpuid
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x34], ecx
mov eax, 1
cpuid
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x74], edx
mov eax, 0x80000000
cpuid
cmp eax, 0x80000000
jb 0x5a9d42
mov eax, 0x80000001
cpuid
mov dword [ebp - 0x6c], edx
pop ecx
pop ebx
pop edx
mov eax, dword [ebp - 0x74]
test eax, 0x800000
je 0x5a9d53
or dword [esi + 0x5c], 1
mov ecx, dword [ebp - 0x6c]
test ecx, ecx
jns 0x5a9d5e
or dword [esi + 0x5c], 2
test eax, 0x2000000
je 0x5a9d69
or dword [esi + 0x5c], 4
test eax, 0x4000000
je 0x5a9d74
or dword [esi + 0x5c], 8
mov eax, dword [ebp - 0x5c]
mov ecx, eax
shr ecx, 8
and ecx, 0xf
cmp cx, 0xf
mov word [esi + 0x50], cx
jne 0x5a9d98
mov ecx, eax
shr ecx, 0x10
and ecx, 0xff0
mov word [esi + 0x52], cx
mov ecx, eax
shr ecx, 4
and ecx, 0xf
cmp cx, 0xf
mov word [esi + 0x54], cx
jne 0x5a9db6
mov edx, eax
shr edx, 0xc
and edx, 0xf
mov word [esi + 0x56], dx
and eax, 0xf
mov word [esi + 0x58], ax
lea eax, [ebp - 0x3c]
lea ebx, [esi + 0x33]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5a9dc6
sub eax, edx
mov edi, eax
cmp edi, 0xd
jbe 0x5a9ddb
mov edi, 0xd
push edi
lea eax, [ebp - 0x3c]
push eax
push ebx
call fcn.005ba680
add esp, 0xc
lea ecx, [ebp - 0x70]
push ecx
mov byte [edi + ebx], 0
call dword [0x6a83ac]
rdtsc
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], edx
mov edi, dword [0x6a83b0]
lea edx, [ebp - 0x68]
push edx
call edi
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x68]
add ecx, eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x68], ecx
mov ecx, dword [ebp - 0x6c]
adc eax, ecx
mov dword [ebp - 0x64], eax
lea edx, [ebp - 0x60]
push edx
call edi
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x64]
jb 0x5a9e21
ja 0x5a9e39
mov ecx, dword [ebp - 0x60]
cmp ecx, dword [ebp - 0x68]
jb 0x5a9e21
rdtsc
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], edx
mov ebx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x74]
mov edi, dword [ebp - 0x7c]
sub edx, ebx
sbb eax, edi
xor ebx, ebx
mov dword [esi + 0x48], edx
mov dword [esi + 0x4c], eax
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x44], ebx
mov byte [ebp - 0x54], bl
mov byte [ebp - 0x2c], bl
xor eax, eax
mov ecx, 0x3ff
lea edi, [ebp - 0x2b]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x5c]
push ecx
push 0x20019
push ebx
stosw word es:[edi], ax
push str.HARDWAREDESCRIPTIONSystemCentralProcessor0
push 0x80000002
mov dword [ebp + 0xfe0], ebx
stosb byte es:[edi], al
mov dword [ebp - 0x6c], 0x1000
mov dword [ebp - 0x74], ebx
call dword [0x6a8018]
test eax, eax
jne 0x5a9ef0
lea edx, [ebp - 0x6c]
push edx
mov edx, dword [ebp - 0x5c]
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x74]
push ecx
push ebx
push str.ProcessorNameString
push edx
call dword [0x6a801c]
test eax, eax
jne 0x5a9ee6
lea eax, [ebp - 0x2c]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5a9ed0
sub eax, edx
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x58]
call fcn.00405710
mov ecx, dword [ebp - 0x5c]
push ecx
call dword [0x6a8020]
lea edx, [ebp - 0x58]
push edx
call fcn.005ab530
mov eax, dword [ebp - 0x40]
mov ebx, dword [ebp - 0x54]
add esp, 4
cmp eax, 0x10
jae 0x5a9f0a
lea ebx, [ebp - 0x54]
mov eax, ebx
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5a9f10
sub eax, edx
mov edi, eax
cmp edi, 0x32
jbe 0x5a9f25
mov edi, 0x32
push edi
push ebx
push esi
call fcn.005ba680
mov byte [edi + esi], 0
mov eax, dword [ebp - 0x40]
add esp, 0xc
cmp eax, 0x10
jb 0x5a9f48
mov eax, dword [ebp - 0x54]
push eax
call fcn.005b9e6d
add esp, 4
mov al, 1
mov ecx, dword [ebp + 0xfd8]
mov dword fs:[0], ecx
mov ecx, dword [ebp + 0xfd4]
pop edi
xor ecx, ebp
pop ebx
call fcn.005be15d
add ebp, 0xfe4
mov esp, ebp
pop ebp
ret