Function at 0x100265b0
Capabilities:
Create thread

Disassembly:
jae 0x100265ae
jmp 0x100265a9
call fcn.100265b0
jae 0x100265a9
add esp, 4
jmp 0x100265b5
dec dword [esp]
jno 0x100265ba
jns 0x100265a5
jp 0x100265be
add esp, 4
popf
jmp 0x100265c5
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100265de
jne 0x100265de
call 0x1fc29932
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
push 0
push 0
push 0x10033610
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
jne 0x1002665d
mov eax, 0xeded905b
push eax
lea ecx, [ebp - 0x328]
call fcn.100256c0
mov dword [ebp - 0x29c], eax
mov ecx, dword [ebp - 0x29c]
mov dword [ebp - 0x2a0], ecx
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x2a0]
push edx
call fcn.10029c20
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x328]
call fcn.1001f140
mov eax, 1
jmp 0x10028876
clc
jae 0x10026662
pop ds
or esp, dword [esi - 0x64]
pushf
push 0xa
jae 0x1002666f
jmp 0x1002666a
call 0x10026671
jae 0x1002666a
add esp, 4
jmp 0x10026676
dec dword [esp]
jno 0x1002667b
jns 0x10026666
jp 0x1002667f
add esp, 4
popf
jmp 0x10026686
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002669f
jne 0x1002669f
or edi, dword [ebx + eax - 0x15]
add ecx, dword [ebx]
jl 0x100266a4
jmp 0x100266a6
je 0x100266a1
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x100266c0
jne 0x100266bf
call 0x93065747
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x100266ce
jne 0x100266ce
call 0x4bea673c
cmpsd dword [esi], dword es:[edi]
invalid
push 0
call fcn.10010e10
add esp, 4
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x290], edx
xor eax, eax
test eax, eax
je 0x100266ed
jne 0x100266ec
call 0x93065774
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
aaa
xor eax, 3
add eax, 4
xor eax, 5
jl 0x100266fb
jmp 0x100266fd
je 0x100266f8
clc
jae 0x10026702
wait
aaa
je 0x10026707
jne 0x10026707
aaa
pushf
push 0xa
jae 0x10026714
jmp 0x1002670f
call 0x10026716
jae 0x1002670f
add esp, 4
jmp 0x1002671b
dec dword [esp]
jno 0x10026720
jns 0x1002670b
jp 0x10026724
add esp, 4
popf
jmp 0x1002672b
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10026744
jne 0x10026744
call 0x1fc29a98
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
cmp dword [ebp - 0x290], 0
jl 0x100267bc
jg 0x1002676c
cmp dword [ebp - 0x294], 0x6715a52f
jbe 0x100267bc
mov eax, 0xeded906b
push eax
lea ecx, [ebp - 0x520]
call fcn.100255c0
mov dword [ebp - 0x2a4], eax
mov ecx, dword [ebp - 0x2a4]
mov dword [ebp - 0x2a8], ecx
mov dword [ebp - 4], 1
mov edx, dword [ebp - 0x2a8]
push edx
call fcn.10029c20
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x520]
call fcn.10025c80
call fcn.10020a80
push 0x10433df0
call fcn.10037480
add esp, 4
movzx eax, al
test eax, eax
jne 0x1002682f
mov ecx, 0xeded9097
push ecx
lea ecx, [ebp - 0x4f4]
call fcn.1001fa40
mov dword [ebp - 0x2ac], eax
mov edx, dword [ebp - 0x2ac]
mov dword [ebp - 0x2b0], edx
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x2b0]
push eax
call fcn.10029c20
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4f4]
call fcn.1000aba0
call fcn.10020a80
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov byte [ebp - 0x84], 0x6d
mov byte [ebp - 0x83], 0x30
mov byte [ebp - 0x82], 0x31
mov byte [ebp - 0x81], 0
mov byte [ebp - 0x88], 0x6d
mov byte [ebp - 0x87], 0x30
mov byte [ebp - 0x86], 0x32
mov byte [ebp - 0x85], 0
mov byte [ebp - 0x8c], 0x6d
mov byte [ebp - 0x8b], 0x30
mov byte [ebp - 0x8a], 0x33
mov byte [ebp - 0x89], 0
mov byte [ebp - 0x90], 0x6d
mov byte [ebp - 0x8f], 0x30
mov byte [ebp - 0x8e], 0x34
mov byte [ebp - 0x8d], 0
mov byte [ebp - 0x94], 0x6d
mov byte [ebp - 0x93], 0x30
mov byte [ebp - 0x92], 0x35
mov byte [ebp - 0x91], 0
mov byte [ebp - 0x98], 0x6d
mov byte [ebp - 0x97], 0x30
mov byte [ebp - 0x96], 0x36
mov byte [ebp - 0x95], 0
mov byte [ebp - 0x9c], 0x6d
mov byte [ebp - 0x9b], 0x30
mov byte [ebp - 0x9a], 0x37
mov byte [ebp - 0x99], 0
mov byte [ebp - 0xa0], 0x6d
mov byte [ebp - 0x9f], 0x30
mov byte [ebp - 0x9e], 0x38
mov byte [ebp - 0x9d], 0
mov byte [ebp - 0xa4], 0x6d
mov byte [ebp - 0xa3], 0x30
mov byte [ebp - 0xa2], 0x39
mov byte [ebp - 0xa1], 0
mov byte [ebp - 0xa8], 0x6d
mov byte [ebp - 0xa7], 0x31
mov byte [ebp - 0xa6], 0x30
mov byte [ebp - 0xa5], 0
mov byte [ebp - 0xac], 0x6d
mov byte [ebp - 0xab], 0x31
mov byte [ebp - 0xaa], 0x31
mov byte [ebp - 0xa9], 0
mov byte [ebp - 0xb0], 0x6d
mov byte [ebp - 0xaf], 0x31
mov byte [ebp - 0xae], 0x32
mov byte [ebp - 0xad], 0
mov byte [ebp - 0xb4], 0x6d
mov byte [ebp - 0xb3], 0x31
mov byte [ebp - 0xb2], 0x33
mov byte [ebp - 0xb1], 0
mov byte [ebp - 0xb8], 0x6d
mov byte [ebp - 0xb7], 0x31
mov byte [ebp - 0xb6], 0x34
mov byte [ebp - 0xb5], 0
mov byte [ebp - 0xbc], 0x6d
mov byte [ebp - 0xbb], 0x31
mov byte [ebp - 0xba], 0x35
mov byte [ebp - 0xb9], 0
mov byte [ebp - 0xc0], 0x6d
mov byte [ebp - 0xbf], 0x31
mov byte [ebp - 0xbe], 0x36
mov byte [ebp - 0xbd], 0
mov byte [ebp - 0xc4], 0x6d
mov byte [ebp - 0xc3], 0x31
mov byte [ebp - 0xc2], 0x37
mov byte [ebp - 0xc1], 0
lea ecx, [ebp - 0x84]
push ecx
lea ecx, [ebp - 0x430]
call fcn.100051f0
mov dword [ebp - 4], 3
lea edx, [ebp - 0x430]
push edx
push 0x10433df0
lea eax, [ebp - 0x200]
push eax
call fcn.1002a130
add esp, 0xc
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x430]
call fcn.100056a0
lea ecx, [ebp - 0x88]
push ecx
lea ecx, [ebp - 0x340]
call fcn.100051f0
mov byte [ebp - 4], 6
lea edx, [ebp - 0x340]
push edx
push 0x10433df0
lea eax, [ebp - 0x1e8]
push eax
call fcn.1002a130
add esp, 0xc
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x340]
call fcn.100056a0
lea ecx, [ebp - 0x8c]
push ecx
lea ecx, [ebp - 0x358]
call fcn.100051f0
mov byte [ebp - 4], 9
lea edx, [ebp - 0x358]
push edx
push 0x10433df0
lea eax, [ebp - 0x1d0]
push eax
call fcn.1002a130
add esp, 0xc
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x358]
call fcn.100056a0
lea ecx, [ebp - 0x90]
push ecx
lea ecx, [ebp - 0x370]
call fcn.100051f0
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x370]
push edx
push 0x10433df0
lea eax, [ebp - 0x1b8]
push eax
call fcn.1002a130
add esp, 0xc
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x370]
call fcn.100056a0
lea ecx, [ebp - 0x94]
push ecx
lea ecx, [ebp - 0x388]
call fcn.100051f0
mov byte [ebp - 4], 0xf
lea edx, [ebp - 0x388]
push edx
push 0x10433df0
lea eax, [ebp - 0x1a0]
push eax
call fcn.1002a130
add esp, 0xc
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x388]
call fcn.100056a0
lea ecx, [ebp - 0x98]
push ecx
lea ecx, [ebp - 0x3a0]
call fcn.100051f0
mov byte [ebp - 4], 0x12
lea edx, [ebp - 0x3a0]
push edx
push 0x10433df0
lea eax, [ebp - 0x188]
push eax
call fcn.1002a130
add esp, 0xc
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x3a0]
call fcn.100056a0
lea ecx, [ebp - 0x9c]
push ecx
lea ecx, [ebp - 0x3b8]
call fcn.100051f0
mov byte [ebp - 4], 0x15
lea edx, [ebp - 0x3b8]
push edx
push 0x10433df0
lea eax, [ebp - 0x170]
push eax
call fcn.1002a130
add esp, 0xc
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x3b8]
call fcn.100056a0
lea ecx, [ebp - 0xa0]
push ecx
lea ecx, [ebp - 0x3d0]
call fcn.100051f0
mov byte [ebp - 4], 0x18
lea edx, [ebp - 0x3d0]
push edx
push 0x10433df0
lea eax, [ebp - 0xe0]
push eax
call fcn.1002a130
add esp, 0xc
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x3d0]
call fcn.100056a0
lea ecx, [ebp - 0xa4]
push ecx
lea ecx, [ebp - 0x3e8]
call fcn.100051f0
mov byte [ebp - 4], 0x1b
lea edx, [ebp - 0x3e8]
push edx
push 0x10433df0
lea eax, [ebp - 0x158]
push eax
call fcn.1002a130
add esp, 0xc
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x3e8]
call fcn.100056a0
lea ecx, [ebp - 0xa8]
push ecx
lea ecx, [ebp - 0x400]
call fcn.100051f0
mov byte [ebp - 4], 0x1e
lea edx, [ebp - 0x400]
push edx
push 0x10433df0
lea eax, [ebp - 0x140]
push eax
call fcn.1002a130
add esp, 0xc
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x400]
call fcn.100056a0
lea ecx, [ebp - 0xac]
push ecx
lea ecx, [ebp - 0x418]
call fcn.100051f0
mov byte [ebp - 4], 0x21
lea edx, [ebp - 0x418]
push edx
push 0x10433df0
lea eax, [ebp - 0x260]
push eax
call fcn.1002a130
add esp, 0xc
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x418]
call fcn.100056a0
lea ecx, [ebp - 0xb0]
push ecx
lea ecx, [ebp - 0x4c0]
call fcn.100051f0
mov byte [ebp - 4], 0x24
lea edx, [ebp - 0x4c0]
push edx
push 0x10433df0
lea eax, [ebp - 0x128]
push eax
call fcn.1002a130
add esp, 0xc
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x4c0]
call fcn.100056a0
lea ecx, [ebp - 0xb4]
push ecx
lea ecx, [ebp - 0x448]
call fcn.100051f0
mov byte [ebp - 4], 0x27
lea edx, [ebp - 0x448]
push edx
push 0x10433df0
lea eax, [ebp - 0x110]
push eax
call fcn.1002a130
add esp, 0xc
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x448]
call fcn.100056a0
lea ecx, [ebp - 0xb8]
push ecx
lea ecx, [ebp - 0x460]
call fcn.100051f0
mov byte [ebp - 4], 0x2a
lea edx, [ebp - 0x460]
push edx
push 0x10433df0
lea eax, [ebp - 0xf8]
push eax
call fcn.1002a130
add esp, 0xc
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x460]
call fcn.100056a0
lea ecx, [ebp - 0xbc]
push ecx
lea ecx, [ebp - 0x478]
call fcn.100051f0
mov byte [ebp - 4], 0x2d
lea edx, [ebp - 0x478]
push edx
push 0x10433df0
lea eax, [ebp - 0x218]
push eax
call fcn.1002a130
add esp, 0xc
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x478]
call fcn.100056a0
lea ecx, [ebp - 0xc0]
push ecx
lea ecx, [ebp - 0x490]
call fcn.100051f0
mov byte [ebp - 4], 0x30
lea edx, [ebp - 0x490]
push edx
push 0x10433df0
lea eax, [ebp - 0x248]
push eax
call fcn.1002a130
add esp, 0xc
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x490]
call fcn.100056a0
lea ecx, [ebp - 0xc4]
push ecx
lea ecx, [ebp - 0x4a8]
call fcn.100051f0
mov byte [ebp - 4], 0x33
lea edx, [ebp - 0x4a8]
push edx
push 0x10433df0
lea eax, [ebp - 0x230]
push eax
call fcn.1002a130
add esp, 0xc
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x4a8]
call fcn.100056a0
clc
jae 0x10026e53
inc ebp
add byte [esi - 0x64], ah
pushf
push 0xa
jae 0x10026e60
jmp 0x10026e5b
call 0x10026e62
jae 0x10026e5b
add esp, 4
jmp 0x10026e67
dec dword [esp]
jno 0x10026e6c
jns 0x10026e57
jp 0x10026e70
add esp, 4
popf
jmp 0x10026e77
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10026e90
jne 0x10026e90
add byte [ebx + eax - 0x15], bh
add eax, dword [eax]
jl 0x10026e95
jmp 0x10026e97
je 0x10026e92
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10026eb1
jne 0x10026eb0
call 0x93065f38
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10026ebf
jne 0x10026ebf
call 0xd0882ef6
xor eax, eax
test eax, eax
je 0x10026ec8
jne 0x10026ec7
call 0x93065f4f
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
invalid
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10026ed6
jmp 0x10026ed8
je 0x10026ed3
clc
jae 0x10026edd
in al, dx
invalid
je 0x10026ee2
jne 0x10026ee2
invalid
pushf
push 0xa
jae 0x10026eef
jmp 0x10026eea
call 0x10026ef1
jae 0x10026eea
add esp, 4
jmp 0x10026ef6
dec dword [esp]
jno 0x10026efb
jns 0x10026ee6
jp 0x10026eff
add esp, 4
popf
jmp 0x10026f06
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10026f1f
jne 0x10026f1f
call 0x1fc2a273
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0x10060a30
lea ecx, [ebp - 0x1d0]
push ecx
call fcn.10025490
add esp, 8
movzx edx, al
test edx, edx
je 0x10026f50
call fcn.100369e0
clc
jae 0x10026f55
loop 0x10026fce
pushf
push 0xa
jae 0x10026f62
jmp 0x10026f5d
call 0x10026f64
jae 0x10026f5d
add esp, 4
jmp 0x10026f69
dec dword [esp]
jno 0x10026f6e
jns 0x10026f59
jp 0x10026f72
add esp, 4
popf
jmp 0x10026f79
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10026f92
jne 0x10026f92
jns 0x1002700f
jl 0x10026f97
add ebp, ebx
add edi, dword [ecx + 0x74]
sti
jmp 0x10026f99
je 0x10026f94
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10026fb3
jne 0x10026fb2
call 0x9306603a
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10026fc1
jne 0x10026fc1
call 0xd0882ff8
xor eax, eax
test eax, eax
je 0x10026fca
jne 0x10026fc9
call 0x93066051
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10026fd8
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
inc edx
jmp 0x10026fda
je 0x10026fd5
clc
jae 0x10026fdf
mov word [edx + 0x74], es
add esi, dword [ebp + 1]
je 0x10026fe4
jne 0x10026fe4
inc edx
pushf
push 0xa
jae 0x10026ff1
jmp 0x10026fec
call 0x10026ff3
jae 0x10026fec
add esp, 4
jmp 0x10026ff8
dec dword [esp]
jno 0x10026ffd
jns 0x10026fe8
jp 0x10027001
add esp, 4
popf
jmp 0x10027008
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10027021
add byte [edx - 0x7f], dl
ljmp 0x358
jne 0x10027021
call 0x1fc2a375
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0x10060a34
lea eax, [ebp - 0x1b8]
push eax
call fcn.10025490
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x100270f9
lea edx, [ebp - 0x278]
push edx
call fcn.10029fa0
add esp, 4
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0x278]
push eax
call fcn.1002a000
add esp, 4
mov dword [ebp - 0x2b4], eax
push 0xa
push 0
lea ecx, [ebp - 0x1a0]
push ecx
call fcn.1001dd70
add esp, 0xc
mov dword [ebp - 0x2b8], eax
mov edx, dword [ebp - 0x2b4]
cmp edx, dword [ebp - 0x2b8]
je 0x100270ea
mov eax, 0xeded90bb
push eax
lea ecx, [ebp - 0x4d8]
call fcn.10025540
mov dword [ebp - 0x2bc], eax
mov ecx, dword [ebp - 0x2bc]
mov dword [ebp - 0x2c0], ecx
mov byte [ebp - 4], 0x37
mov edx, dword [ebp - 0x2c0]
push edx
call fcn.10029c20
add esp, 4
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x4d8]
call fcn.10005540
call fcn.10020a80
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x278]
call fcn.100056a0
clc
jae 0x100270fe
test al, 0xe7
pushf
push 0xa
jae 0x1002710b
jmp 0x10027106
call 0x1002710d
jae 0x10027106
add esp, 4
jmp 0x10027112
dec dword [esp]
jno 0x10027117
jns 0x10027102
jp 0x1002711b
add esp, 4
popf
jmp 0x10027122
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002713b
jne 0x1002713b
out 0x7c, eax
add ebp, ebx
add esp, edi
jl 0x10027140
jmp 0x10027142
je 0x1002713d
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1002715c
jne 0x1002715b
call 0x930661e3
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1002716a
jne 0x1002716a
call 0xd08831a1
xor eax, eax
test eax, eax
je 0x10027173
jne 0x10027172
call 0x930661fa
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
mov al, 0x74
sti
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10027181
jmp 0x10027183
je 0x1002717e
clc
jae 0x10027188
push edx
mov al, 0x74
add esi, dword [ebp + 1]
je 0x1002718d
jne 0x1002718d
mov al, 0x66
pushfd
pushf
push 0xa
jae 0x1002719a
jmp 0x10027195
call 0x1002719c
jae 0x10027195
add esp, 4
jmp 0x100271a1
dec dword [esp]
jno 0x100271a6
jns 0x10027191
jp 0x100271aa
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1003a016
mov esp, ebp
pop ebp
ret