Function at 0x5d2481
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov edi, dword [esp + 1]
pushfd
push word [esp + 6]
mov ecx, 0x6d1d5ab7
jmp 0x5d2493
mov dx, word [esp + 1]
cpuid
cld
mov word [esp + 2], si
rol cl, 4
jmp 0x5d246b
cpuid
xchg byte [esp + 0xc], bh
mov cx, 0x2207
xchg byte [esp + 7], ch
lea eax, [edx*4]
bsf eax, ebp
jmp 0x5d259f
cld
bt bp, di
mov al, byte [esp + 0x16]
dec bl
mov byte [esp + 7], bh
mov dh, 0x9d
jmp 0x5d251f
sub esp, 0x1e
cld
pop dword [esp + 6]
xchg byte [esp + 6], ah
mov ah, 0xad
btc dx, bp
jmp 0x5d24d7
add esp, 9
setg bl
neg si
xchg byte [esp + 9], al
jmp 0x5d2536
mov edx, ebp
mov eax, 0xda05e89c
mov si, word [esp + 0xd]
bswap eax
not cx
mov eax, dword [esp + 0xa]
jmp 0x5d2508
xchg word [esp + 7], si
xchg byte [esp + 0xc], dh
xchg edx, esi
xchg si, di
mov al, ch
jmp 0x5d2572
xchg bh, cl
xchg byte [esp], al
rdtsc
pop ebx
btc ebp, esi
lea esp, [esp]
jmp 0x5d24f4
btc bx, dx
bt di, di
pop word [esp + 2]
rdtsc
jmp 0x5d2589
inc dl
pop dword [esp + 5]
lea edx, [ebp*4]
pop esi
not bp
mov byte [esp + 7], ah
jmp 0x5d255c
mov word [esp + 1], ax
bts ebp, esp
setno dh
pop dword [esp]
mov cl, al
jmp 0x5d25f9
add esp, 9
rdtsc
mov ebp, dword [esp + 4]
lea esi, [edi*4]
mov cx, word [esp + 1]
cld
jmp 0x5d254c
not edi
xchg byte [esp], dh
cpuid
lea ebp, [esi*4]
cpuid
jmp 0x5d25de
rdtsc
lea ebx, [ebx + edi]
mov ebp, dword [esp]
mov dword [esp], edi
dec ax
pop bp
jmp 0x5d25b7
shr edi, cl
rdtsc
dec esi
shl bh, 4
add bl, 0xec
mov di, word [esp]
jmp 0x5d262a
mov byte [esp + 2], dl
pop di
lea edx, reloc.WSOCK32.dll_gethostbyname
push dx
rcr ah, cl
std
jmp 0x5d25cd
mov si, 0x2c3b
mov dx, 0x334
pop dx
not bp
mov dx, 0x32d1
xchg dx, bx
jmp 0x5d2652
add esp, 1
mov di, 0xf493
mov cl, ah
mov eax, ecx
lea esp, [esp]
push di
jmp 0x5d260c
mov dx, 0x370d
std
mov bl, byte [esp]
ror ax, 4
xchg bp, ax
jmp 0x5d2662
mov dl, byte [esp]
lea esp, [esp]
lea esp, [esp]
stc
lea ebx, [eax + esi]
cmc
jmp 0x5d263c
lea edi, [esp + ecx]
xchg bh, al
lea ebx, reloc.WSOCK32.dll_gethostbyname
rcl dx, cl
rdtsc
mov cx, sp
jmp 0x5d277e
mov word [esp + 4], ax
xchg bx, cx
call fcn.005d26ff
dec eax
popal
jo 0x5d26ea
jb 0x5d270b
add byte gs:[ebx - 0x2a089926], cl
mov ebx, edx
not bp
mov dl, 0xe
mov esi, dword [esp + 6]
dec edx
mov word [esp + 4], bp
jmp 0x5d2692
or si, dx
lea eax, [edx + edx]
bsr ecx, esp
sub bh, bh
mov edx, esp
sets al
jmp 0x5d26e3
lea eax, [edx + ebp]
neg ebx
sub esp, 0xd
mov si, sp
mov edx, dword [esp + 6]
pop ecx
jmp 0x5d26bb
inc edi
mov bx, 0xbe1e
xchg ah, bl
mov di, 0x99d1
add di, si
xchg bx, di
jmp 0x5d2726
xchg dx, si
jmp 0x5d26d1
lea eax, [ebp*4]
bswap edi
bswap ecx
call fcn.005d2710
mov eax, dword [esp + 0x16]
xchg byte [esp + 0x1b], dl
lea ebx, [edi*4]
jmp 0x5d2764
lea ecx, [ecx + ebx]
mov word [esp + 5], sp
not bp
xchg ebx, ebp
push dword [esp + 0x16]
rdtsc
jmp 0x5d27ec
mov bh, byte [esp]
btc ebx, edi
lea ebx, [edx + 0xa2]
cld
push ebx
sub esp, 2
jmp 0x5d26a8
neg ch
cmc
mov dword [esp], edi
xchg byte [esp + 3], cl
rcl bx, cl
call fcn.005d27c1
and byte [ebx - 0x66], ah
cmc
mov bx, word [esp + 4]
bsf ecx, esi
lea edi, reloc.WSOCK32.dll_gethostbyname
lea esp, [esp + 9]
xchg esi, ecx
pushfd
jmp 0x5d2794
lea ebx, [eax*4]
popal
adc cl, 0xa3
mov di, 0xca50
xchg word [esp + 6], di
mov bp, ax
jmp 0x5d27aa