Function at 0x1026d40
Capabilities:
Check for software breakpoints
Encode data using xor

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x14
mov eax, dword [ebp + 0x18]
push ebx
mov ebx, dword [ebp + 0x14]
push esi
xor ecx, ecx
cmp byte [ebx + eax - 1], 0x7d
push edi
lea edi, [eax - 0x20]
mov dword [ebp - 8], edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 4], ecx
jne 0x1026d97
cmp edi, 0x400
jbe 0x1026d97
mov edi, edi
cmp byte [ebx + edi - 1], cl
jne 0x1026d88
cmp byte [edi + ebx - 2], cl
jne 0x1026d88
cmp byte [edi + ebx - 3], cl
jne 0x1026d88
cmp byte [edi + ebx - 4], cl
je 0x1026d93
dec edi
cmp edi, 0x400
ja 0x1026d70
jmp 0x1026d94
dec edi
mov dword [ebp - 8], edi
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ebp + 0x20]
mov esi, dword [ebp + 8]
lea eax, [ecx + edx]
cmp eax, 0x10
jbe 0x1026ef7
cmp eax, dword [ebp + 0x18]
jae 0x1026ef7
add ecx, ebx
xor eax, eax
add ecx, edx
mov edx, ecx
lea ecx, [ecx]
cmp byte [edx], 0xe8
je 0x1026dd1
inc eax
dec edx
cmp eax, 0x10
jb 0x1026dc0
jmp 0x1026ef7
mov edx, dword [esi + 0xe8]
mov eax, dword [edx + 0x2715c]
mov bl, byte [ecx - 0x10]
add ecx, 0xfffffff0
xor edx, edx
mov dword [ebp + 0x20], edx
cmp bl, byte [edx + ecx]
jne 0x1026e3a
inc edx
cmp edx, 4
jl 0x1026de8
lea edx, [ecx + 1]
mov dword [ebp + 8], 4
jmp 0x1026e02
mov bl, byte [ecx]
cmp bl, byte [edx - 1]
je 0x1026e0c
inc dword [ebp + 0x20]
mov bl, byte [ecx]
cmp bl, byte [edx]
je 0x1026e15
inc dword [ebp + 0x20]
mov bl, byte [ecx]
cmp bl, byte [edx + 1]
je 0x1026e1f
inc dword [ebp + 0x20]
mov bl, byte [ecx]
cmp bl, byte [edx + 2]
je 0x1026e27
inc dword [ebp + 0x20]
add edx, 4
sub dword [ebp + 8], 1
jne 0x1026e00
cmp dword [ebp + 0x20], 1
jl 0x1026ef4
mov dword [ebp + 0x1c], 4
mov edx, dword [esi + 0xc]
movzx ebx, byte [ecx]
mov edi, dword [esi + 8]
mov dword [ebp - 0x10], edx
shr edx, 0x18
movzx edx, dl
xor edx, ebx
mov ebx, dword [ebp - 0x10]
shld ebx, edi, 8
xor ebx, dword [eax + edx*8 + 4]
shl edi, 8
xor edi, dword [eax + edx*8]
mov dword [esi + 0xc], ebx
mov edx, ebx
mov dword [esi + 8], edi
movzx ebx, byte [ecx + 1]
mov dword [ebp - 0x10], edx
shr edx, 0x18
movzx edx, dl
xor edx, ebx
mov ebx, dword [ebp - 0x10]
shld ebx, edi, 8
xor ebx, dword [eax + edx*8 + 4]
shl edi, 8
xor edi, dword [eax + edx*8]
mov edx, ebx
mov dword [esi + 0xc], ebx
mov dword [ebp - 0x10], edx
mov dword [esi + 8], edi
movzx ebx, byte [ecx + 2]
shr edx, 0x18
movzx edx, dl
xor edx, ebx
mov ebx, dword [ebp - 0x10]
shld ebx, edi, 8
xor ebx, dword [eax + edx*8 + 4]
shl edi, 8
xor edi, dword [eax + edx*8]
mov edx, ebx
mov dword [esi + 0xc], ebx
mov dword [ebp - 0x10], edx
mov dword [esi + 8], edi
movzx ebx, byte [ecx + 3]
shr edx, 0x18
movzx edx, dl
xor edx, ebx
mov ebx, dword [ebp - 0x10]
shld ebx, edi, 8
xor ebx, dword [eax + edx*8 + 4]
shl edi, 8
xor edi, dword [eax + edx*8]
add ecx, 4
sub dword [ebp + 0x1c], 1
mov dword [esi + 8], edi
mov dword [esi + 0xc], ebx
jne 0x1026e41
mov edi, dword [ebp - 8]
mov ebx, dword [ebp + 0x14]
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 4]
add eax, ecx
cmp eax, dword [ebp + 0x18]
jae 0x1026f11
cmp eax, 0x400
jbe 0x1026f11
lea edi, [eax - 0x20]
mov al, byte [edi + ebx]
cmp al, byte [edi + ebx + 1]
jne 0x1026f57
mov cl, byte [edi + ebx + 3]
cmp cl, byte [edi + ebx + 4]
jne 0x1026f57
test al, al
je 0x1026f57
cmp al, 0xff
je 0x1026f57
cmp al, 0xcc
je 0x1026f57
cmp edi, 0x400
jbe 0x1026f78
jmp 0x1026f40
mov al, byte [edi + ebx]
cmp al, byte [edi + ebx + 1]
jne 0x1026f54
dec edi
cmp edi, 0x400
ja 0x1026f40
jmp 0x1026f78
sub edi, 0x10
cmp edi, 0x400
jbe 0x1026f78
nop
mov al, byte [edi + ebx]
test al, al
je 0x1026f6f
cmp al, 0xff
je 0x1026f6f
cmp al, 0xcc
jne 0x1026f78
dec edi
cmp edi, 0x400
ja 0x1026f60
sub edi, 0x20
xor eax, eax
lea ecx, [edi + ebx]
cmp byte [ecx + eax], 0
jne 0x1026f87
inc edx
cmp byte [ecx + eax + 1], 0
jne 0x1026f8f
inc edx
cmp byte [ecx + eax + 2], 0
jne 0x1026f97
inc edx
cmp byte [ecx + eax + 3], 0
jne 0x1026f9f
inc edx
add eax, 4
cmp eax, 0x20
jb 0x1026f80
cmp edx, 0xa
jg 0x1027270
lea eax, [edi - 0x80]
cmp edi, eax
jbe 0x1027270
mov edx, dword [ebp - 0xc]
mov edi, edi
cmp byte [edi + ebx], 0
je 0x1026fc7
inc edx
dec edi
cmp edi, eax
ja 0x1026fc0
cmp edx, 0x30
jl 0x1027270
mov edx, dword [esi + 0xe8]
mov eax, dword [edx + 0x2715c]
mov dl, byte [ecx]
xor edi, edi
mov dword [ebp + 0x1c], edi
cmp dl, byte [edi + ecx]
jne 0x1027032
inc edi
cmp edi, 8
jl 0x1026fe8
lea edi, [ecx + 1]
mov dword [ebp + 0x20], 8
lea ecx, [ecx]
cmp dl, byte [edi - 1]
je 0x1027008
inc dword [ebp + 0x1c]
cmp dl, byte [edi]
je 0x102700f
inc dword [ebp + 0x1c]
cmp dl, byte [edi + 1]
je 0x1027017
inc dword [ebp + 0x1c]
cmp dl, byte [edi + 2]
je 0x102701f
inc dword [ebp + 0x1c]
add edi, 4
sub dword [ebp + 0x20], 1
jne 0x1027000
cmp dword [ebp + 0x1c], 2
jl 0x10270f0
mov dword [ebp + 0x1c], 8
lea esp, [esp]
mov edx, dword [esi + 0xc]
movzx ebx, byte [ecx]
mov edi, dword [esi + 8]
mov dword [ebp - 0x10], edx
shr edx, 0x18
movzx edx, dl
xor edx, ebx
mov ebx, dword [ebp - 0x10]
shld ebx, edi, 8
xor ebx, dword [eax + edx*8 + 4]
shl edi, 8
xor edi, dword [eax + edx*8]
mov dword [esi + 0xc], ebx
mov edx, ebx
mov dword [esi + 8], edi
movzx ebx, byte [ecx + 1]
mov dword [ebp - 0x10], edx
shr edx, 0x18
movzx edx, dl
xor edx, ebx
mov ebx, dword [ebp - 0x10]
shld ebx, edi, 8
xor ebx, dword [eax + edx*8 + 4]
shl edi, 8
xor edi, dword [eax + edx*8]
mov edx, ebx
mov dword [esi + 0xc], ebx
mov dword [ebp - 0x10], edx
mov dword [esi + 8], edi
movzx ebx, byte [ecx + 2]
shr edx, 0x18
movzx edx, dl
xor edx, ebx
mov ebx, dword [ebp - 0x10]
shld ebx, edi, 8
xor ebx, dword [eax + edx*8 + 4]
shl edi, 8
xor edi, dword [eax + edx*8]
mov edx, ebx
mov dword [esi + 0xc], ebx
mov dword [ebp - 0x10], edx
mov dword [esi + 8], edi
movzx ebx, byte [ecx + 3]
shr edx, 0x18
movzx edx, dl
xor edx, ebx
mov ebx, dword [ebp - 0x10]
shld ebx, edi, 8
xor ebx, dword [eax + edx*8 + 4]
shl edi, 8
xor edi, dword [eax + edx*8]
add ecx, 4
sub dword [ebp + 0x1c], 1
mov dword [esi + 8], edi
mov dword [esi + 0xc], ebx
jne 0x1027040
mov ecx, dword [ebp + 0x18]
mov ebx, dword [esi + 0x44]
cmp ebx, ecx
jae 0x1027270
test ebx, ebx
jbe 0x1027270
mov eax, ecx
sub eax, ebx
cmp eax, 0x1000
jb 0x1027270
cmp eax, 0x2000
jae 0x1027270
mov eax, dword [ebp + 0x14]
lea edi, [eax + ecx - 0x400]
push 0x400
push edi
call fcn.01025eb0
fcomp qword [0x1009e40]
fnstsw ax
test ah, 0x41
je 0x102714f
mov ecx, dword [ebp + 0x14]
cmp byte [ebx + ecx], 0xe8
jne 0x1027270
mov edx, dword [esi + 0xe8]
mov eax, dword [edx + 0x2715c]
mov ecx, edi
mov dl, byte [ecx]
xor edi, edi
mov dword [ebp + 0x14], edi
cmp dl, byte [edi + ecx]
jne 0x10271b2
inc edi
cmp edi, 0x100
jl 0x1027164
lea edi, [ecx + 1]
mov dword [ebp + 0x18], pe_nt_image_headers32
lea esp, [esp]
cmp dl, byte [edi - 1]
je 0x1027188
inc dword [ebp + 0x14]
cmp dl, byte [edi]
je 0x102718f
inc dword [ebp + 0x14]
cmp dl, byte [edi + 1]
je 0x1027197
inc dword [ebp + 0x14]
cmp dl, byte [edi + 2]
je 0x102719f
inc dword [ebp + 0x14]
add edi, 4
sub dword [ebp + 0x18], 1
jne 0x1027180
cmp dword [ebp + 0x14], 0x40
jl 0x1027270
mov dword [ebp + 0x14], pe_nt_image_headers32
lea esp, [esp]
mov edx, dword [esi + 0xc]
movzx ebx, byte [ecx]
mov edi, dword [esi + 8]
mov dword [ebp - 0x10], edx
shr edx, 0x18
movzx edx, dl
xor edx, ebx
mov ebx, dword [ebp - 0x10]
shld ebx, edi, 8
xor ebx, dword [eax + edx*8 + 4]
shl edi, 8
xor edi, dword [eax + edx*8]
mov dword [esi + 0xc], ebx
mov edx, ebx
mov dword [esi + 8], edi
movzx ebx, byte [ecx + 1]
mov dword [ebp - 0x10], edx
shr edx, 0x18
movzx edx, dl
xor edx, ebx
mov ebx, dword [ebp - 0x10]
shld ebx, edi, 8
xor ebx, dword [eax + edx*8 + 4]
shl edi, 8
xor edi, dword [eax + edx*8]
mov edx, ebx
mov dword [esi + 0xc], ebx
mov dword [ebp - 0x10], edx
mov dword [esi + 8], edi
movzx ebx, byte [ecx + 2]
shr edx, 0x18
movzx edx, dl
xor edx, ebx
mov ebx, dword [ebp - 0x10]
shld ebx, edi, 8
xor ebx, dword [eax + edx*8 + 4]
shl edi, 8
xor edi, dword [eax + edx*8]
mov edx, ebx
mov dword [esi + 0xc], ebx
mov dword [ebp - 0x10], edx
mov dword [esi + 8], edi
movzx ebx, byte [ecx + 3]
shr edx, 0x18
movzx edx, dl
xor edx, ebx
mov ebx, dword [ebp - 0x10]
shld ebx, edi, 8
xor ebx, dword [eax + edx*8 + 4]
shl edi, 8
xor edi, dword [eax + edx*8]
add ecx, 4
sub dword [ebp + 0x14], 1
mov dword [esi + 8], edi
mov dword [esi + 0xc], ebx
jne 0x10271c0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c