Function at 0x10028b48
Capabilities:
Delete file

Disassembly:
mov eax, 0x1005d85a
call fcn.1005cab0
sub esp, 0x114
push ebx
push esi
mov dword [ebp - 0x24], edx
xor ebx, ebx
mov dword [ebp - 0x28], 0x3c1a
mov edx, ecx
cmp dword [ebp - 0x28], 0x3e10
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x14], edx
jle 0x10028bb2
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x18], ebx
lea eax, [ebx + edi]
mov ecx, 0x10077fd8
add eax, esi
cdq
push edx
push eax
call fcn.10004c70
inc ebx
cmp ebx, 0x7942
jl 0x10028b7f
inc edi
push 0
pop ebx
cmp edi, 0x27c1
jl 0x10028b7c
inc esi
cmp esi, 0x6a4e
jl 0x10028b7a
mov edx, dword [ebp - 0x14]
cmp byte [ebp + 0x10], 0
je 0x10029448
cmp byte [ebp + 0xc], 0
je 0x10028bd4
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
sar ecx, 2
mov dword [edx], ecx
jmp 0x1002945c
mov eax, dword [ebp + 0x18]
or edi, 0xffffffff
mov dword [ebp + 0x10], edi
mov dword [ebp - 0x14], 0x475ee4c2
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x18], 0xf3922cbd
push 3
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x5c], eax
mov dword [ebp + 0x10], ebx
pop ecx
jmp 0x10028c0a
mov eax, dword [ebp + 0x10]
mov dword [ebp + eax*4 - 0x54], 2
inc dword [ebp + 0x10]
cmp dword [ebp + 0x10], ecx
jl 0x10028bfc
mov dword [ebp + 0x10], ebx
jmp 0x10028c22
mov eax, dword [ebp + 0x10]
mov dword [ebp + eax*4 - 0x70], 0xfffffffe
inc dword [ebp + 0x10]
cmp dword [ebp + 0x10], 2
jl 0x10028c14
xor esi, esi
mov dword [ebp + 0x10], ebx
inc esi
jmp 0x10028c3a
mov eax, dword [ebp + 0x10]
mov dword [ebp + eax*4 - 0x34], edi
inc dword [ebp + 0x10]
cmp dword [ebp + 0x10], esi
jl 0x10028c30
mov dword [ebp + 0x10], ebx
jmp 0x10028c55
mov eax, dword [ebp + 0x10]
mov dword [ebp + eax*4 - 0xbc], 0xbc6200d4
inc dword [ebp + 0x10]
cmp dword [ebp + 0x10], ecx
jl 0x10028c44
mov dword [ebp + 0x10], ebx
jmp 0x10028d40
mov dword [ebp - 0x20], 0xfffffffd
mov dword [ebp - 0x1c], ebx
jmp 0x10028c7c
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x68], 9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10028c6e
mov dword [ebp - 0x1c], ebx
jmp 0x10028c94
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x64], 0x6369
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10028c86
mov eax, dword [ebp + 0x10]
cmp dword [ebp + eax*4 - 0x54], ebx
je 0x10028ce8
mov eax, dword [ebp + 0x10]
mov eax, dword [ebp + eax*4 - 0x54]
mov eax, dword [ebp + 0x10]
mov eax, dword [ebp - 0x20]
neg eax
je 0x10028cbf
mov eax, dword [ebp + 0x10]
mov ecx, ebx
cmp dword [ebp + eax*4 - 0x54], ebx
jne 0x10028cc1
mov ecx, esi
mov eax, dword [ebp - 0x60]
mov edx, esi
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], ecx
mov ecx, 0x1330
mov eax, dword [ebp - 0x34]
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, eax
mov dword [ebp - 0x68], ecx
mov eax, dword [ebp - 0x18]
dec dword [ebp - 0x60]
cmp eax, ecx
jge 0x10028cea
mov edx, ebx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x28]
setle cl
xor edx, edx
sub ecx, 0x6d42bd36
cmp ecx, eax
setg dl
sub edx, dword [ebp - 0x70]
mov eax, dword [ebp + 0x10]
neg edx
sbb edx, edx
xor ecx, ecx
add edx, 0xb6d1
mov eax, dword [ebp + eax*4 - 0x54]
cmp edx, eax
mov eax, dword [ebp + 0x10]
setge cl
xor edx, edx
imul ecx, ecx, 0x2a90
mov eax, dword [ebp + eax*4 - 0x54]
cmp ecx, eax
setg dl
xor eax, eax
test edx, edx
setns al
mov dword [ebp - 0x34], eax
inc dword [ebp + 0x10]
cmp dword [ebp + 0x10], 2
jle 0x10028c62
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
je 0x10028d69
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0x3c]
jg 0x10028d69
cmp dword [ebp - 0x34], ebx
je 0x10028d69
mov edx, esi
cmp dword [ebp - 0x14], ebx
jne 0x10028d6b
mov edx, ebx
xor ecx, ecx
mov dword [ebp - 0x70], edx
mov eax, dword [ebp - 0x4c]
cmp edx, eax
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xb8]
setg cl
imul edx, ecx
xor ecx, ecx
push 0xfffffffffffffff6
cmp edx, eax
pop eax
push dword [ebp - 0x24]
setne cl
cmp eax, ecx
mov eax, dword [ebp - 0x34]
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setne cl
mov dword [ebp + 0x10], ecx
lea ecx, [ebp - 0x94]
call fcn.10007bd7
mov dword [ebp - 4], ebx
mov eax, 0x30045702
mov dword [ebp - 0x14], 0xd526d2e8
mov dword [ebp + 0x10], 0x76acb8f2
mov dword [ebp - 0x24], 0xfe81720d
mov dword [ebp + 0x10], 0xfffffffb
mov dword [ebp + 0x10], edi
mov dword [ebp + 0x10], esi
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp + 0x10], ebx
jmp 0x10028e03
mov eax, dword [ebp + 0x10]
mov dword [ebp + eax*4 - 0x7c], 0xfff6
inc dword [ebp + 0x10]
cmp dword [ebp + 0x10], 3
jl 0x10028df5
sub esp, 0xc
mov byte [ebp - 0x2a], bl
lea edx, [ebp - 0x2a]
push 0x683
push ecx
xor cl, cl
call fcn.1002a307
add esp, 0x14
cmp dword [ebp - 0x14], ebx
jne 0x10028e46
mov eax, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp + 0x10], edi
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp + 0x10]
cmp eax, ecx
setne dl
mov dword [ebp + 0x10], edx
mov eax, dword [ebp + 0x10]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0x10]
cmp eax, 0xfffffffe
setg cl
push ecx
push dword [ebp + 0x14]
mov dword [ebp - 0xa8], ecx
lea ecx, [ebp - 0x94]
call fcn.1002c0fa
mov dword [ebp - 0x30], eax
mov dword [ebp + 0x10], 0xfffffffc
mov dword [ebp - 0x14], 0x776e
cmp dword [ebp - 0x14], 0x7adf
jle 0x10028f06
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
mov edx, ebx
mov dword [ebp + 0x10], ebx
mov edi, ebx
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x108]
xor eax, edx
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10028ec8
mov eax, dword [eax]
push eax
call fcn.10045eec
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x108]
call fcn.100052dc
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp + 0x10]
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x4e2d
jl 0x10028eaa
inc edi
cmp edi, 0x4c0d
jl 0x10028ea5
inc edx
mov dword [ebp + 0x10], edx
cmp edx, 0x16f1
jl 0x10028ea3
or edi, 0xffffffff
cmp dword [ebp - 0x14], 0x7587
jge 0x10028f1a
push str.fvsdmc_ggo_nsd_tugitsybg_nlpqyx_sembylz_ttkn_ycxjvu_cxkq_atbxh_jsawro_fbzc
call fcn.10045eec
pop ecx
mov dword [ebp - 4], ebx
mov dword [ebp + 0x10], 0x96e6c8ca
mov dword [ebp - 0x14], edi
mov dword [ebp + 0x10], 0xfffffffe
mov dword [ebp - 0x24], 0x339b8842
mov dword [ebp + 0x10], edi
mov dword [ebp + 0x10], 0x983c17a3
mov dword [ebp + 0x10], ebx
jmp 0x10028f51
mov eax, dword [ebp + 0x10]
mov dword [ebp + eax*4 - 0xa0], esi
inc dword [ebp + 0x10]
cmp dword [ebp + 0x10], 3
jl 0x10028f44
mov dword [ebp + 0x10], ebx
jmp 0x10028f66
mov eax, dword [ebp + 0x10]
mov dword [ebp + eax*4 - 0x40], ebx
inc dword [ebp + 0x10]
cmp dword [ebp + 0x10], esi
jl 0x10028f5c
mov dword [ebp + 0x10], 8
jmp 0x10028fb0
mov dword [ebp - 0x18], 0x7dd68876
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x10028fad
push esi
push 0x2af8
push ebx
lea eax, [ebp - 0x29]
mov byte [ebp - 0x29], bl
push eax
push ebx
mov edx, 0x2324
mov ecx, 0x39e
call fcn.1002b14e
add esp, 0x14
dec dword [ebp - 0x18]
jns 0x10028f87
inc dword [ebp + 0x10]
cmp dword [ebp + 0x10], 0xc
jg 0x10028f74
cmp dword [ebp + 0x10], ebx
je 0x10028ff8
mov eax, dword [ebp - 0x40]
xor edx, edx
mov dword [ebp + 0x10], eax
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp + 0x10]
cmp eax, ecx
mov eax, dword [ebp - 0x40]
setl dl
dec eax
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp + 0x10], ecx
xor ecx, ecx
mov eax, dword [ebp + 0x10]
cmp eax, esi
setge cl
add ecx, dword [ebp - 0x14]
mov dword [ebp + 0x10], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + 0x10]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0xa0]
mov dword [ebp + 0x10], eax
cmp dword [ebp - 0x30], edi
je 0x1002923c
mov dword [ebp - 0x20], 0x69fdf99f
mov dword [ebp - 0x24], 0xede5c489
mov dword [ebp - 0xcc], edi
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0xc4], edi
mov dword [ebp - 0xc0], edi
mov dword [ebp - 0x20], 0x14
cmp dword [ebp - 0x20], 0xffffffee
jle 0x10029226
mov dword [ebp + 0x10], 8
mov dword [ebp - 0x58], ebx
mov dword [ebp + 0x10], ebx
jmp 0x10029069
mov eax, dword [ebp + 0x10]
mov dword [ebp + eax*4 - 0xf0], esi
inc dword [ebp + 0x10]
cmp dword [ebp + 0x10], 3
jl 0x1002905c
mov dword [ebp + 0x10], 0xffffffe8
jmp 0x1002908d
push ecx
push ecx
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x2b], bl
push eax
push ecx
call fcn.1002a283
add esp, 0x10
inc dword [ebp + 0x10]
cmp dword [ebp + 0x10], 0xe
jge 0x10029078
mov dword [ebp - 0x28], 0x8d1
cmp dword [ebp - 0x28], 0xb50
jle 0x10029119
mov edi, ebx
mov dword [ebp - 0x18], ebx
mov eax, ebx
mov dword [ebp + 0x10], ebx
mov edx, edi
mov dword [ebp - 0x24], ebx
mov ecx, eax
mov edi, ebx
sar edx, cl
mov dword [ebp - 0x3c], edx
mov eax, edx
mov ecx, edi
sar eax, cl
lea ecx, [ebp - 0x120]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100290d9
mov eax, dword [eax]
push eax
call fcn.10045eec
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x120]
call fcn.100052dc
mov edx, dword [ebp - 0x3c]
inc edi
cmp edi, 0x437f
jl 0x100290bb
mov eax, dword [ebp + 0x10]
mov edi, dword [ebp - 0x18]
inc eax
mov dword [ebp + 0x10], eax
cmp eax, 0x5c7e
jl 0x100290ad
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0xb9d
jl 0x100290a8
or edi, 0xffffffff
mov dword [ebp + 0x10], 0xffffffe9
jmp 0x100291fd
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x24], 0x6e8597a0
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x24], 0x909cc0f9
mov dword [ebp - 0x24], 0xac29ba1f
mov dword [ebp - 0x1c], ebx
jmp 0x100291cd
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x18], ebx
jmp 0x10029161
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xdc], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10029150
cmp dword [ebp - 0x1c], ebx
jne 0x100291b7
mov eax, dword [ebp - 0x20]
sub eax, 3
imul eax, dword [ebp - 0x14]
test eax, eax
jne 0x10029182
cmp dword [ebp - 0x14], ebx
jne 0x10029182
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1c]
dec ecx
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, 0xd89e
mov ecx, ebx
setl al
add eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0x20], ebx
je 0x100291b9
mov ecx, esi
mov eax, dword [ebp - 0x20]
sub ecx, eax
imul ecx, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x24], ecx
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe4
jl 0x10029148
push 0x57bd
push 0x1fdc
push esi
push ebx
push 0x3f91
push 0x406f
lea edx, [ebp - 0x58]
xor cl, cl
call fcn.1002addb
add esp, 0x18
inc dword [ebp + 0x10]
cmp dword [ebp + 0x10], 5
je 0x10029125
cmp dword [ebp - 0x28], 0x5c0
jge 0x1002921b
push str.ocie_zoci_lbrtzp_ibicly_udmtzwslk_ibzb
call fcn.10045eec
pop ecx
mov dword [ebp - 4], ebx
dec dword [ebp - 0x20]
jmp 0x10029043
push 0x47f7
push ebx
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x94]
call fcn.1002aa35
pop ecx
pop ecx
push ecx
push dword [ebp + 0x14]
lea eax, [ebp - 0x94]
push eax
lea edx, [ebp - 0x30]
call fcn.1002ac24
mov dword [ebp - 0x18], ebx
add esp, 0xc
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 3
jl 0x100293c6
mov dword [ebp - 0x20], 0x1805
cmp dword [ebp - 0x20], 0x1a8e
jle 0x100292ea
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edi, ebx
mov dword [ebp - 0x14], ebx
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edx, ebx
mov esi, edi
mov ecx, eax
mov dword [ebp + 0x10], edx
shl esi, cl
mov eax, esi
mov ecx, edx
shl eax, cl
mov edi, ebx
mov dword [ebp - 0x24], eax
mov ebx, eax
mov eax, edi
mov ecx, 0x10077fd8
and eax, ebx
cdq
push edx
push eax
call fcn.10004c70
inc edi
cmp edi, 0x441c
jl 0x1002929b
mov edx, dword [ebp + 0x10]
inc edx
mov dword [ebp + 0x10], edx
push 0
pop ebx
cmp edx, 0x2a90
jl 0x1002928e
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x173e
jl 0x10029283
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x50e9
jl 0x1002927e
xor esi, esi
inc esi
or edi, 0xffffffff
mov byte [ebp - 4], 5
cmp dword [ebp - 0x20], 0x170c
jge 0x10029330
mov edx, str.kdt_hclo_ptmf_otddum_qis_tyntqfl_mjbe_etqxp_tvuu_abqzvlf
mov ecx, 0x10077fd8
call fcn.10007021
jmp 0x10029330
mov dword [ebp - 4], ebx
mov dword [ebp + 0x10], ebx
jmp 0x10029349
mov eax, dword [ebp + 0x10]
mov dword [ebp + eax*4 - 0xe4], 0xb72fd491
inc dword [ebp + 0x10]
cmp dword [ebp + 0x10], 2
jl 0x10029338
mov dword [ebp + 0x10], ebx
jmp 0x10029362
mov eax, dword [ebp + 0x10]
mov dword [ebp + eax*4 - 0x48], 0xb7cefa9d
inc dword [ebp + 0x10]
cmp dword [ebp + 0x10], 2
jl 0x10029354
cmp dword [ebp - 0x18], ebx
jne 0x100293c6
mov dword [ebp - 0x44], ebx
jmp 0x100293b9
mov dword [ebp + 0x10], ebx
jmp 0x10029381
mov eax, dword [ebp + 0x10]
mov dword [ebp + eax*4 - 0x38], esi
inc dword [ebp + 0x10]
cmp dword [ebp + 0x10], esi
jl 0x10029377
mov dword [ebp - 0x38], esi
cmp dword [ebp - 0x38], ebx
jl 0x100293b6
push 0x2b26
push 0x7ef8
push ebx
push esi
push 0x772b
mov edx, 0x449e
mov ecx, 0x36c4
call fcn.10028b48
add esp, 0x14
dec dword [ebp - 0x38]
jns 0x1002938e
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], esi
jle 0x10029372
inc dword [ebp - 0x18]
jmp 0x10029258
cmp dword [ebp - 0x30], edi
je 0x100293ee
push 0x56e
push ebx
push 0x5f75
push ecx
push ecx
push 0x3e0b
lea edx, [ebp - 0x94]
lea ecx, [ebp - 0x30]
call fcn.10029497
add esp, 0x18
push ecx
push ecx
mov dword [ebp + 0x10], 0x198a8f93
xor dl, dl
mov ecx, 0x273d
call fcn.1002af9c
mov byte [ebp + 0x13], bl
cmp byte [ebp + 0x13], 0
pop ecx
pop ecx
je 0x10029413
call fcn.1002adb3
mov eax, dword [ebp + 0x18]
lea ecx, [ebp - 0x94]
cmp eax, ecx
je 0x1002942a
push edi
push ebx
push ecx
mov ecx, eax
call fcn.10005fc9
push ebx
push esi
lea ecx, [ebp - 0x94]
call fcn.100053a8
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x2c]
mov byte [ebp - 0x2c], bl
push eax
xor dl, dl
mov ecx, 0x484d
call fcn.1002b12f
pop ecx
mov dword [ebp - 4], 7
cmp dword [ebp - 0x28], 0x3988
jge 0x10029437
mov edx, str.juxhaa_wzp_tigkmbk_cfg_xxfywrjbs_soharfyoa
mov ecx, 0x10077fd8
call fcn.10007021
jmp 0x10029437