Function at 0x5b0b29
Capabilities:
Execute anti-debugging instructions

Disassembly:
call 0x5af492
lea ecx, [edi + 0x40]
btr ax, cx
jmp 0x5af569
lea eax, [ebx*4]
btr ax, bx
call fcn.005af5bf
add edx, 0x6267d29d
jmp 0x5b05e7
add edx, 0x2d8f4326
jmp 0x5b0a17
mov eax, edx
sub ecx, ebx
jmp 0x5af7e7
jo 0x5af4d7
lea eax, [ebx*4]
btr ax, bx
jmp 0x5af553
mov al, 0x2c
bsf eax, esi
mov eax, dword [esp]
jmp 0x5af786
mov eax, dword [esp]
sub esp, 0xb
lea esp, [esp + 3]
jmp 0x5af78d
rcr ecx, 0xe
jge 0x5af4c5
jl 0x5af4c5
sub esp, 0xb
lea esp, [esp + 3]
lea eax, [ebp - 0x80]
call fcn.005af6db
jbe 0x5af65a
mov al, 0x2c
bsf eax, esi
jmp 0x5af668
pushfd
jmp 0x5b05f2
inc ax
ja 0x5b05d1
pushfd
jmp 0x5b0a86
lea esp, [esp + 2]
lea esp, [esp + 2]
mov edx, dword [edx - reloc.ADVAPI32.DLL_RegCloseKey]
not eax
jmp 0x5b0a2d
mov al, byte [esp]
mov ax, di
mov al, byte [esp]
sete ah
jmp 0x5b0a4c
mov ah, 0x7a
not al
jmp 0x5af52c
push edx
ret
mov esp, ebp
neg eax
jnp 0x5b0a36
jp 0x5b0a36
dec edx
jne 0x5b0a6c
xchg dx, ax
or ah, 0xf7
lea edx, [edi*4]
jmp 0x5b0be1
xchg dx, ax
or ah, 0xf7
jmp 0x5b0c37
lea esp, [esp + 2]
lea esp, [esp + 2]
jmp 0x5b05fa
jo 0x5b0abe
not ax
pushal
jmp 0x5b0a9f
mov eax, ebp
bt edx, eax
jmp 0x5b0ac7
setp al
not eax
mov dx, bx
call 0x5b0b29
test byte [ebx + 0x3c857613], 0xc6
jno 0x5b0b2c
jae 0x5b0b28
not ax
pushal
mov eax, ebp
bt edx, eax
lea esp, [esp + 0x20]
neg cl
jmp 0x5b0aa6
bswap eax
jmp 0x5b0ae7
lea esp, [esp + 4]
not cl
rdtsc
neg edx
jmp 0x5b0af7
jo 0x5b0b0d
mov dh, cl
rdtsc
jmp 0x5b0b9e
mov dh, cl
rdtsc
xchg edx, eax
not cl
mov eax, ebx
btc edx, ecx
ja 0x5b0b45
mov edx, 0x6d5a6438
jmp 0x5b0b6a
cmp eax, 0xb873def6
jb 0x5b0acf
mov eax, 0x38baa072
pop edx
insd dword es:[edi], dx
mov edx, 0x6d5a6438
mov ax, 0x2900
mov eax, 0x7d9f9248
call fcn.005b0b7a
or al, 0x9f
out 0xeb, al
call 0xf7c1d549
fsubr st(1)
leave
add byte [eax], al
add byte [ecx], dl
jmp 0x5b0b2f
dec cl
neg ax
jmp 0x5b0c1a
dec dx
lea eax, [edi*4]
ror edx, cl
jmp 0x5b0c7f
mov ax, 0x2900
mov eax, 0x7d9f9248
jmp 0x5b0b47
xchg edx, eax
jmp 0x5b0b13
mov ax, word [esp]
bswap eax
jmp 0x5b0c44
jbe 0x5b0b52
dec dx
lea eax, [edi*4]
jmp 0x5b0e9f
lea edx, [edi*4]
mov ax, word [esp]
bswap eax
dec cl
rcr eax, 0xd
jmp 0x5b0a93
mov dh, 0x50
jmp 0x5b0c66
mov dh, 0x50
sub edi, 4
ror al, cl
jo 0x5b0d97
jno 0x5b0d0a
stosb byte es:[edi], al
xor byte [esi - 0x520dcf3f], ah
mov esp, 0x8a3ce183
xor al, 0x24
and ecx, 0x3c
mov dh, byte [esp]
shl ax, 0xb
jae 0x5b0c64
jb 0x5b0c4e
mov dword [edi], eax
lea eax, [ebx*4]
mov eax, 0xd8f600ec
jmp 0x5b0cc3
jae 0x5b0cdb
shl dx, cl
mov cx, si
jmp 0x5b0ce1
mov ecx, ebp
mov dx, 0xc75b
lea edx, reloc.ADVAPI32.DLL_RegCloseKey
jmp 0x5b0ce3
mov ax, word [esp]
push edx
jmp 0x5b0cad
shl dx, cl
mov cx, si
jmp 0x5b0c8d
lea eax, [ebp + 0x50]
sub esp, 0x11
jmp 0x5b0d60
pop dword [esp + 3]
xchg cx, dx
lea esp, [esp + 1]
jmp 0x5b0d13
neg eax
mov edx, ecx
jmp 0x5b0d9b
mov ch, cl
mov cx, word [esp]
mov dl, 0xeb
cmp edi, eax
jns 0x5b0d45
js 0x5b0d2f
dec ebp
xlatb
inc edi
and dl, cl
sbb ecx, edx
lea esp, gs:[esp + 1]
lea esp, [esp + 1]
jmp 0x5b0d13
ja fcn.005b00c4
mov ch, 0x38
mov cx, 0xd1c3
sub esp, 0x15
jmp 0x5b0d6b
jmp 0x5b0d2f
mov ax, di
lea esp, [esp + 1]
jmp 0x5b0d7a
jb 0x5b0cef
pop dword [esp + 3]
xchg cx, dx
jmp 0x5b0d29
js 0x5b0d47
mov ax, di
lea esp, [esp + 1]
jmp 0x5b0d7a
mov ecx, ebp
rdtsc
mov eax, 0xdbeccd51
jmp 0x5b0dbb
neg eax
mov edx, ecx
mov eax, dword [ecx + ebp]
shl edx, cl
jmp 0x5b0ca3
or ax, 0x12d5
jmp 0x5b0de5
lea edx, [ebp + 0x40]
bts ax, dx
jg 0x5b0da5
or ax, 0x12d5
bsr eax, ecx
mov eax, esi
jmp 0x5b0dea
sub esp, 0xc
jl 0x5b0e3e
neg eax
mov ah, ch
lea esp, [esp + 0xb]
jmp 0x5b0dee
bsr eax, ecx
mov eax, esi
sub edx, ecx
jmp 0x5b0dcf
lea esp, [esp + 1]
jmp 0x5b0e12
push ebx
jmp 0x5b0e5a
cmp dh, byte [edx + 0x3ec3a436]
mov fs, word [eax + 0x2ddebb2b]
sahf
into
lea esp, [esp + 0xb]
lea esp, [esp + 1]
lea eax, [edi - 0x80]
clc
jno 0x5b0df4
jo 0x5b0e22
push ecx
invalid
push ebx
jmp 0x5b0e5a
sub eax, edx
call 0x5b0e77
sti
jo 0x5b0e15
xor dword [eax - 0x31], reloc.ADVAPI32.DLL_RegCloseKey
ja 0x5b0dfc
cld
iretd
neg eax
mov ah, ch
jmp 0x5b0e0a
and al, 0xfc
cmc
jne 0x5b0e25
je 0x5b0e25
clc
lea esi, [esi + 0x18]
sub esp, 0x1a
mov word [esp + 8], ax
mov byte [esp + 0x18], ah
jmp 0x5b0e82
lea esp, [esp + 2]
xchg dword [esp + 0x1c], esi
pushfd
mov dword [esp], edi
mov byte [esp + 2], dh
push dword [esp + 0x20]
ret 0x24
ror edx, cl
jmp 0x5b0c7f