Function at 0x1005f260
Capabilities:
Execute anti-debugging instructions

Disassembly:
add eax, 0x39991acd
jmp 0x1005f6dc
add eax, 0x7732bafc
jmp 0x1005f483
movzx ebx, byte [esi - 1]
pushfd
neg al
jmp 0x1005f043
mov dh, dl
mov dx, 0x740d
lea eax, [ecx + ebx]
bswap edx
cmc
mov al, 0xfe
jmp 0x1005f000
mov dx, word [esp]
jmp 0x1005f01e
lea eax, [ecx + ebx]
bswap edx
cmc
jmp 0x1005efe4
add bl, cl
rdtsc
btc edx, esp
jmp 0x1005f04d
mov eax, dword [esp]
lea eax, [ecx*4]
jmp 0x1005f05f
ja 0x1005efd8
mov dh, dl
mov dx, 0x740d
jmp 0x1005f016
jne 0x1005f02b
mov eax, dword [esp]
lea eax, [ecx*4]
jmp 0x1005f05f
mov dl, bl
mov ax, 0xd2d
bsf eax, eax
jge 0x1005f0b8
jl 0x1005f0b8
cmp al, 0xb4
sub cl, byte [ebp - 0x44]
or ah, byte [ecx]
pushal
mov dword [reloc.KERNEL32.dll_VirtualAlloc], eax
call 0xf597d8d
invalid
call 0x1005f08f
mov ax, cx
btc ax, ax
mov ax, 0x7795
jmp 0x1005f0f9
mov eax, ebx
setle al
mov ax, cx
sub esp, 5
jns 0x1005f11d
js 0x1005f107
or dword [ebp + reloc.KERNEL32.dll_VirtualAlloc], eax
mov ah, 0xa7
into
pop ecx
mov eax, 0xc8ab0f66
bts ax, cx
shl ah, cl
inc dl
mov ax, word [esp]
jmp 0x1005f0df
xchg word [esp + 2], ax
xchg byte [esp], ah
pop ax
jmp 0x1005f47a
xchg word [esp + 2], ax
xchg byte [esp], ah
pop ax
lea esp, [esp + 3]
jmp 0x1005f1b4
mov ah, 0xca
mov word [esp + 1], ax
mov al, bh
jmp 0x1005f16f
pop ax
jmp 0x1005f13f
rol eax, 0x12
jo 0x1005f192
jno 0x1005f192
add edx, 0xc4774fbc
jmp 0x10060acf
inc al
lea esp, [esp + 1]
ror dl, 0
mov ah, cl
jmp 0x1005f159
call 0x1005f17c
lea esp, [esp + 3]
jmp 0x1005f366
not dl
sub esp, 7
jle 0x1005f155
pop ax
mov ah, 0xca
mov word [esp + 1], ax
mov al, bh
inc al
jmp 0x1005f171
jno 0x1005f1e0
rcr ax, cl
lea esp, [esp + 1]
jmp 0x1005f1e7
rcr ax, cl
lea esp, [esp + 1]
jmp 0x1005f302
sub esp, 0xe
jmp 0x1005f1f5
rcr dx, cl
lea esp, [esp + 2]
jmp 0x1005f289
add dl, 0x38
mov eax, 0x613e886b
pushfd
lea esp, [esp + 3]
not ax
inc ah
jmp 0x1005f1ca
sub esp, 0x1b
lea esp, [esp + 3]
setl dl
jmp 0x1005f235
rcr ax, cl
jmp 0x1005f25a
sub esp, 0x1b
lea esp, [esp + 3]
setl dl
rcr ax, cl
call 0x1005f260
and bh, bh
je 0x1005f287
add ebx, ebp
inc edi
pop ebp
lodsb al, byte [esi]
mov edi, 0x648df886
and al, 8
xor bl, 0x5c
jmp 0x1005f297
inc ebp
hlt
dec esi
lea eax, [esi*4]
neg edx
jbe 0x1005f24d
ja 0x1005f225
mov edx, esi
rdtsc
mov dl, 0xdf
mov ah, 0xe
jmp 0x1005f2c8
setb ah
jmp 0x1005f2d7
not bl
mov dx, sp
xchg al, dl
push edi
xchg word [esp + 1], dx
jmp 0x1005f2b2
rol bl, 0
jmp 0x1005f33a
mov dh, 0x26
mov edx, dword [esp]
mov dl, 0xe3
mov ah, 0x69
lea eax, [ebx + ebp]
jmp 0x1005f343
add cl, dl
lea eax, [esp - 0xd6]
rcr dx, 0xe
jnp 0x1005f1ec
sub esp, 0xe
rcr dx, cl
lea esp, [esp + 2]
jmp 0x1005f289
mov dl, 0xe3
mov ah, 0x69
lea eax, [ebx + ebp]
jmp 0x1005f2ec
jnp 0x1005f2e0
mov dh, 0x26
mov edx, dword [esp]
jmp 0x1005f324
lea esp, [esp + 4]
dec bl
sub esp, 9
jbe 0x1005f3eb
pop dword [esp]
mov word [esp + 2], cx
mov al, byte [esp + 2]
jmp 0x1005f38c
lea eax, [eax + esi]
lea esp, [esp + 1]
lea esp, [esp + 4]
jmp 0x1005f211
bt edx, ebp
js 0x1005f397
lea edx, [edi - 0x8f]
jmp 0x1005f39d
xchg word [esp + 2], dx
lea esp, [esp + 1]
jmp 0x1005f3cd
lea edx, [edi - 0x8f]
pushal
call fcn.1005f3d4
jnp 0x1005f328
in al, dx
push es
je 0x1005f45b
lea esp, [esp + 2]
mov dword [esp + 0x20], ebx
jmp 0x1005f814
mov word [esp + 2], cx
mov al, byte [esp + 2]
xchg word [esp + 2], dx
lea esp, [esp + 1]
rol bl, 0
mov eax, esp
jmp 0x1005f376
pop dword [esp]
jmp 0x1005f3bb
lea esp, [esp + 4]
popal
mov dl, byte [esp]
xchg dl, dh
jmp 0x1005f7b7
lea esp, [esp + 2]
mov dword [esp + 0x20], ebx
jmp 0x1005f445
lea esp, [esp + 3]
jmp 0x1005f1b4
cmp edx, esp
jmp 0x1005f4cd
mov edx, ebp
mov edx, dword [esp]
rcr dx, cl
mov esp, edi
lea edx, reloc.KERNEL32.dll_VirtualAlloc
stc
js 0x1005f54b
pushfd
jmp 0x1005f4f4
jae 0x1005f4e8
mov edx, 0xa46b1b82
mov edx, ebp
jmp 0x1005ef9c
rcr dx, cl
jmp 0x1005f493
jb 0x1005f48b
mov edx, ebp
mov edx, dword [esp]
jmp 0x1005f4b7
mov edx, 0xa46b1b82
mov edx, ebp
jmp 0x1005ef9c
bswap edx
jmp 0x1005f50d
pushfd
bswap edx
mov dx, word [esp]
btr dx, si
jp 0x1005f531
jnp 0x1005f563
mov dx, bp
adc al, ah
jl 0x1005f54d
jge 0x1005f569
sbb al, 0x97
pop es
bound edx, qword [ecx - 0x61f765a2]
stc
or byte [ebx + 0x66c75425], bh
mov edx, 0xc35072f2
jg 0x1005f525
mov dx, 0x72f2
push eax
ret
bound eax, qword [0xf96b35f4]
imul ecx, dword [eax], reloc.KERNEL32.dll_VirtualAlloc
dec eax
das
fisub dword [ebp - 0x45]
xchg edx, eax
jmp 0x1005f50a
xchg dx, ax
pushfd
bswap edx
sub esp, 0x12
mov edx, dword [esp + 0xd]
rdtsc
jmp 0x1005f5ba
mov dx, 0x72f2
jmp 0x1005f535
xchg dx, ax
pushfd
bswap edx
jmp 0x1005f574
sub esp, 0x12
mov edx, dword [esp + 0xd]
jmp 0x1005f559
lea edx, [ebx - 0xd8]
mov eax, dword [eax - reloc.KERNEL32.dll_VirtualAlloc]
lea edx, [eax*4]
dec dx
jmp 0x1005f4a9
lea eax, reloc.KERNEL32.dll_VirtualAlloc
setb dl
pushfd
bsr dx, ax
jmp 0x1005f5e5
xchg word [esp + 8], dx
lea esp, [esp + 2]
lea esp, [esp + 0x14]
add bl, 0xa5
lea eax, [edx + ebx]
jmp 0x1005f5a4
jmp 0x1005f5e9
jl 0x1005f607
jge 0x1005f607
lea edx, [edx + ebp]
lea eax, reloc.KERNEL32.dll_VirtualAlloc
mov al, bh
jmp 0x1005f639
lea esp, [esp + 4]
neg bl
sub esp, 0x15
je 0x1005f5cf
lea edx, [edx + ebp]
lea eax, reloc.KERNEL32.dll_VirtualAlloc
mov al, bh
lea esp, [esp + 1]
call fcn.1005f6a5
test eax, 0x30c1a630
xor byte [ecx + 0x37c4bd2d], 0xf0
mov eax, dword [reloc.KERNEL32.dll_VirtualAlloc]
or dword [edi + reloc.KERNEL32.dll_VirtualAlloc], 0xffffff8d
and al, 0x14
lea esp, [esp + 1]
lea esp, [esp + 0x14]
not bl
push di
jmp 0x1005f6f4
mov dl, byte [esp]
jmp 0x1005f58a
bsf dx, bx
jne 0x1005f658
mov dl, byte [esp]
lea edx, [ebx - 0xd8]
jmp 0x1005f590
not dh
lea eax, [eax + ebp]
sete dl
rdtsc
call fcn.1005f76e
xchg ebp, eax
push ss
test bl, ah
push ds
lodsd eax, dword [esi]
add eax, 0x8d7e1b8b
dec edi
scasb al, byte es:[edi]
mov ecx, 0x6624148b
mov edx, 0x5be9e786
clc
invalid
mov edx, dword [esp]
mov dx, 0xe786
jmp 0x1005ef78
push edi
push cx
lea esp, [esp + 2]
shl eax, 2
mov dl, byte [esp]
jmp 0x1005f711
lea esp, [esp + 4]
popal
mov dl, byte [esp]
jmp 0x1005f44d
mov esp, esi
mov ebx, ecx
call fcn.10060af3
pop edi
retf
lea ebx, [esi + edi]
mov bl, al
lea ebx, [ebp*4]
jmp 0x10060ab9
add cl, al
mov ax, di
neg ax
jmp 0x10083061
mov al, 0x22
dec esi
mov ax, 0x74ba
jmp 0x10082fd8
mov edx, dword [esp]
jmp 0x10083003
mov ax, 0xbfe6
lea eax, [eax*4]
mov byte [ebx + edi], dl
mov eax, esi
neg bx
jmp 0x10083023
mov edx, 0xa737d779
jmp 0x10083040
add ebp, 2
dec ax
jp 0x10082fed
mov edx, 0xa737d779
lea ebx, [ebx*4]
mov eax, 0xf915e0fa
jmp 0x1005efbd
jns 0x10082fc2
mov edx, dword [esp]
jmp 0x10083003
lea ebx, [ebx*4]
mov eax, 0xf915e0fa
jmp 0x1005efbd
jo 0x10082f9e
mov al, 0x22
jmp 0x10082fa0