Function at 0x10027ac0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0xd
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.10026cf0
xchg ebx, ebx
jae 0x10027af1
pushf
xor eax, dword [esp + 8]
xor eax, dword [esp + 8]
neg edx
neg edx
popf
jo 0x10027aec
jne 0x10027aee
jb 0x10027af1
xor eax, 0x45c675b0
call 0xfd484142
mov byte fs:[ebp - 0xe], 0x6f
mov al, 0x75
mov byte [ebp - 0x18], 0x48
mov byte [ebp - 0x13], 0x64
mov byte [ebp - 0xe], 0x6f
mov byte [ebp - 0x17], 0x66
mov byte [ebp - 0x12], 0x6c
mov byte [ebp - 0xd], al
mov byte [ebp - 0x16], al
mov byte [ebp - 0x11], 0x44
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x15], 0x55
mov byte [ebp - 0x10], 0x70
mov byte [ebp - 0x14], 0x6a
mov byte [ebp - 0xf], 0x76
shr esp, 0
mov esp, esp
mov ecx, ecx
jge 0x10027b37
jae 0x10027b30
jno 0x10027b32
xchg ebx, ebx
jl 0x10027b37
call 0x9aeac8c5
inc ebp
in eax, dx
mov cl, byte [ebp - 0x18]
mov al, byte [ebp - 0x13]
mov bl, byte [ebp - 0xe]
mov dl, byte [ebp - 0x17]
dec cl
dec al
mov byte [ebp - 0x18], cl
mov cl, byte [ebp - 0x12]
dec bl
mov byte [ebp - 0x13], al
mov al, byte [ebp - 0xd]
dec dl
mov byte [ebp - 0xe], bl
mov bl, byte [ebp - 0x16]
mov byte [ebp - 0x17], dl
mov dl, byte [ebp - 0x11]
dec cl
dec al
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0x15]
dec bl
mov byte [ebp - 0xd], al
mov al, byte [ebp - 0x10]
dec dl
mov byte [ebp - 0x16], bl
mov bl, byte [ebp - 0x14]
mov byte [ebp - 0x11], dl
mov dl, byte [ebp - 0xf]
dec cl
dec al
dec bl
dec dl
mov byte [ebp - 0x15], cl
mov byte [ebp - 0x10], al
mov byte [ebp - 0x14], bl
mov byte [ebp - 0xf], dl
add ebx, 0x639e
sub ebx, 0x639e
jp 0x10027ba5
sub esp, 0
call 0x10027bad
add esp, 4
jns 0x10027bc2
lea ecx, [ecx + 0x4a]
lea ecx, [ecx - 0x4a]
jns 0x10027bba
jbe 0x10027bbc
jb 0x10027bbe
js 0x10027bc2
mov edi, 0xf449e8f4
invalid
call fcn.10027010
test eax, eax
jne 0x10027bd2
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
add ecx, dword [esp]
sub ecx, dword [esp]
clc
jl 0x10027beb
lea edi, [edi + 0x5c54]
lea edi, [edi - 0x5c54]
jge 0x10027beb
lcall 0x5051, 0xe84d8db7
lea ecx, [ebp - 0x18]
push ecx
push eax
call fcn.10027800
test eax, eax
mov dword [ebp - 8], eax
jne 0x10027c03
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0xd
lea edx, [ebp - 0x18]
push 0
push edx
call fcn.10026cf0
and esp, 0xffffffff
not esi
not esi
xor edx, 0x2f30
xor edx, 0x2f30
jg 0x10027c34
js 0x10027c27
jp 0x10027c29
xchg esi, ebx
xchg esi, ebx
mov ecx, ecx
jle 0x10027c34
mov esp, 0x6a0433
push 0
call dword [sym.imp.MSVCR100.dll__time32]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
add esp, 8
rol edi, 0
jl 0x10027c53
lea esp, [esp]
js 0x10027c50
jge 0x10027c53
mov edi, 0x62b83d8b
add al, 0x10
mov edi, dword [sym.imp.MSVCR100.dll_rand]
call edi
cdq
mov ecx, 5
idiv ecx
mov esi, edx
test esi, esi
jle 0x10027c7e
mov ebx, esi
call edi
cdq
mov ecx, 0x6f5
idiv ecx
mov dword [ebp - 4], edx
push dword [ebp - 4]
dec ebx
jne 0x10027c6b
call dword [ebp - 8]
test esi, esi
jle 0x10027c8b
pop dword [ebp - 4]
dec esi
jne 0x10027c85
neg edi
neg edi
jne 0x10027c91
and edi, edi
jl 0x10027ca5
pushf
jne 0x10027c99
lea esi, [esi]
cmc
popf
jne 0x10027ca0
jns 0x10027ca2
jge 0x10027ca5
add eax, 0xc4c10074
add bh, dh
salc
je 0x10027ca7
rol esp, 0
not esi
not esi
je 0x10027cc1
lea ecx, [ecx + 0x65f2]
lea ecx, [ecx - 0x65f2]
xchg esi, esi
jne 0x10027cc1
mov ecx, 0x7c5b53
push ebx
pop ebx
jl 0x10027cc5
jl 0x10027cd2
jnp 0x10027cc9
jnp 0x10027ccb
lea ecx, [ecx]
jb 0x10027ccf
jge 0x10027cd2
lcall 0x1006, 0x5f200d8b
mov ecx, dword [0x10065f20]
jnp 0x10027cda
xchg edx, esi
xchg edx, esi
add edi, dword [esp]
sub edi, dword [esp]
js 0x10027ced
lea edi, [edi]
jo 0x10027cea
jns 0x10027ced
mov edi, 0x7cf800eb
sbb ah, byte [esi - 0x64]
jmp 0x10027cef
clc
jl 0x10027d0c
pushf
jne 0x10027cf6
xor esp, 0
popf
lea edx, [edx + 0x5e03]
lea edx, [edx - 0x5e03]
jns 0x10027d09
jge 0x10027d0c
mov esp, 0x4192c181
add al, byte [ecx]
add ecx, 0x1024192
lea edx, [eax + 0x1024192]
xor ecx, edx
je 0x10027d66
xor ebx, dword [esp]
xor ebx, dword [esp]
ror esp, 0
and esp, 0xffffffff
jnp 0x10027d2f
jmp 0x10027d2c
jp 0x10027d2f
mov ebp, 0x15ff006a
shl byte [ecx + 4], 1
adc byte [eax - 1], dl
adc eax, sym.imp.MSVCR100.dll_srand
push 0
call dword [sym.imp.MSVCR100.dll__time32]
push eax
call dword [sym.imp.MSVCR100.dll_srand]
add esp, 8
nop
mov esp, esp
je 0x10027d59
pushf
xor edx, edi
xor edx, edi
popf
xchg edi, esi
xchg edi, esi
lea edi, [edi]
jae 0x10027d56
jne 0x10027d59
mov ebp, 0x62b815ff
add al, 0x10
call dword [sym.imp.MSVCR100.dll_rand]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
mov dword [0x10065f20], eax
pop ebx
mov esp, ebp
pop ebp
ret