Function at 0x10025e70
Capabilities:
Check for time delay via gettickcount
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1003108b
mov eax, dword fs:[0]
push eax
sub esp, 0x460
mov eax, dword [0x10039534]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.1002b2b0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x290], eax
call fcn.1002ad80
mov dword [0x1003da7c], 0
mov eax, dword [0x1003d674]
mov dword [eax + 4], 1
push str.BDLogicUtils.dll
push 0x1003dbcc
lea ecx, [ebp - 0x2e4]
push ecx
call fcn.100076b0
add esp, 0xc
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x338]
call fcn.100044d0
mov byte [ebp - 4], 1
push str.BDLogicUtils_url
lea ecx, [ebp - 0x358]
call fcn.10004500
mov byte [ebp - 4], 2
lea edx, [ebp - 0x338]
push edx
lea eax, [ebp - 0x358]
push eax
call fcn.10025d10
add esp, 8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x358]
call fcn.10004580
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x35c], esp
lea edx, [ebp - 0x338]
push edx
call fcn.10004540
mov dword [ebp - 0x428], eax
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x42c], eax
mov byte [ebp - 4], 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x360], esp
lea edx, [ebp - 0x2e4]
push edx
call fcn.10004540
mov dword [ebp - 0x430], eax
mov byte [ebp - 4], 1
mov ecx, dword [0x1003d674]
call fcn.10027af0
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 0
jne 0x10025fbd
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x338]
call fcn.10004580
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2e4]
call fcn.10004580
jmp 0x10026344
mov eax, dword [0x1003d674]
mov dword [eax + 4], 2
push str.BDMReport.dll
push 0x1003dbcc
lea ecx, [ebp - 0x300]
push ecx
call fcn.100076b0
add esp, 0xc
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2ac]
call fcn.100044d0
mov byte [ebp - 4], 5
push str.BDMReport_url
lea ecx, [ebp - 0x37c]
call fcn.10004500
mov byte [ebp - 4], 6
lea edx, [ebp - 0x2ac]
push edx
lea eax, [ebp - 0x37c]
push eax
call fcn.10025d10
add esp, 8
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x37c]
call fcn.10004580
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x380], esp
lea edx, [ebp - 0x2ac]
push edx
call fcn.10004540
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x43c], eax
mov byte [ebp - 4], 7
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x384], esp
lea edx, [ebp - 0x300]
push edx
call fcn.10004540
mov dword [ebp - 0x440], eax
mov byte [ebp - 4], 5
mov ecx, dword [0x1003d674]
call fcn.10027af0
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 0
jne 0x100260da
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2ac]
call fcn.10004580
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x300]
call fcn.10004580
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x338]
call fcn.10004580
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2e4]
call fcn.10004580
jmp 0x10026344
mov eax, dword [0x1003d674]
mov dword [eax + 4], 3
push str.BDMNet.dll
push 0x1003dbcc
lea ecx, [ebp - 0x2c8]
push ecx
call fcn.100076b0
add esp, 0xc
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x31c]
call fcn.100044d0
mov byte [ebp - 4], 9
push str.BDMNet_url
lea ecx, [ebp - 0x3a0]
call fcn.10004500
mov byte [ebp - 4], 0xa
lea edx, [ebp - 0x31c]
push edx
lea eax, [ebp - 0x3a0]
push eax
call fcn.10025d10
add esp, 8
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x3a0]
call fcn.10004580
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3a4], esp
lea edx, [ebp - 0x31c]
push edx
call fcn.10004540
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x44c], eax
mov byte [ebp - 4], 0xb
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3a8], esp
lea edx, [ebp - 0x2c8]
push edx
call fcn.10004540
mov dword [ebp - 0x450], eax
mov byte [ebp - 4], 9
mov ecx, dword [0x1003d674]
call fcn.10027af0
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 0
jne 0x10026215
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x31c]
call fcn.10004580
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2c8]
call fcn.10004580
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2ac]
call fcn.10004580
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x300]
call fcn.10004580
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x338]
call fcn.10004580
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2e4]
call fcn.10004580
jmp 0x10026344
mov dword [0x1003db78], 3
mov dword [0x1003db7c], 0xa
mov dword [0x1003db80], 1
mov dword [0x1003db84], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x1003da78]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov dword [0x1003db88], eax
lea edx, [ebp - 0x2e4]
push edx
mov ecx, 0x1003db78
call fcn.10030720
test eax, eax
jne 0x100262cb
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x31c]
call fcn.10004580
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2c8]
call fcn.10004580
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2ac]
call fcn.10004580
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x300]
call fcn.10004580
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x338]
call fcn.10004580
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2e4]
call fcn.10004580
jmp 0x10026344
mov ecx, 0x1003db78
call fcn.10030560
mov dword [0x1003da7c], 1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x31c]
call fcn.10004580
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2c8]
call fcn.10004580
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2ac]
call fcn.10004580
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x300]
call fcn.10004580
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x338]
call fcn.10004580
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2e4]
call fcn.10004580
xor eax, eax
jne 0x10025eb1
call fcn.1002b830
mov dword [0x1003da80], 0
lea ecx, [ebp - 0x68]
call fcn.100044d0
mov dword [ebp - 4], 0xc
push 0x10034ea0
push 0x1003dbcc
lea ecx, [ebp - 0x3c4]
push ecx
call fcn.100076b0
add esp, 0xc
mov dword [ebp - 0x458], eax
mov edx, dword [ebp - 0x458]
mov dword [ebp - 0x45c], edx
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x45c]
push eax
lea ecx, [ebp - 0x68]
call fcn.100045a0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x3c4]
call fcn.10004580
lea ecx, [ebp - 0x48]
call fcn.100044d0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x48]
push ecx
call fcn.1002ed40
add esp, 4
lea edx, [ebp - 0x48]
push edx
lea ecx, [ebp - 0x68]
call fcn.100045e0
lea ecx, [ebp - 0x2c]
call fcn.100044d0
mov byte [ebp - 4], 0xf
cmp dword [0x1003a4b8], 0
je 0x10026487
push 0x10034ea4
lea ecx, [ebp - 0x3e0]
call fcn.10004500
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x3e0]
push ecx
call fcn.10025d10
add esp, 8
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x3e0]
call fcn.10004580
push 0x10034eb8
lea ecx, [ebp - 0x400]
call fcn.10004500
mov byte [ebp - 4], 0x11
lea edx, [ebp - 0x400]
push edx
lea eax, [ebp - 0x2c]
push eax
call fcn.100251c0
add esp, 8
mov byte [ebp - 0x3e1], al
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x400]
call fcn.10004580
movzx ecx, byte [ebp - 0x3e1]
test ecx, ecx
je 0x10026478
push 0x10034ec0
lea ecx, [ebp - 0x68]
call fcn.10004600
jmp 0x10026485
push str..exe
lea ecx, [ebp - 0x68]
call fcn.10004600
jmp 0x100264a1
push str.http:__dl1sw.baidu.com_client4_gaosu_24917022867_BDBrowserZip.dll
lea ecx, [ebp - 0x2c]
call fcn.100045c0
push str..dll
lea ecx, [ebp - 0x68]
call fcn.10004600
mov dword [ebp - 0x33c], 0
jmp 0x100264bc
mov edx, dword [ebp - 0x33c]
add edx, 1
mov dword [ebp - 0x33c], edx
cmp dword [ebp - 0x33c], 2
jge 0x10026554
call fcn.1002abc0
mov eax, dword [0x1003d674]
mov dword [eax + 4], 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x404], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.10004540
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x464], eax
mov byte [ebp - 4], 0x12
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x408], esp
lea edx, [ebp - 0x68]
push edx
call fcn.10004540
mov dword [ebp - 0x468], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [0x1003d674]
call fcn.10027af0
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 0
jne 0x10026543
jmp 0x100264ad
mov dword [0x1003da80], 1
jmp 0x10026554
call fcn.1002a9e0
cmp dword [0x1003da80], 0
jne 0x100265da
cmp dword [0x1003da7c], 0
je 0x100265da
mov dword [0x1003db80], 2
mov dword [0x1003db84], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x1003da78]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov dword [0x1003db88], eax
mov ecx, 0x1003db78
call fcn.10030560
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x2c]
call fcn.10004580
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x48]
call fcn.10004580
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.10004580
jmp 0x100267e4
call fcn.1002a000
mov word [ebp - 0x28c], 0
push 0x1fe
push 0
lea edx, [ebp - 0x28a]
push edx
call fcn.100090e0
add esp, 0xc
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x68]
call fcn.100046a0
push eax
call fcn.10030910
add esp, 8
lea ecx, [ebp - 0x88]
call fcn.10003fe0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x28c]
push ecx
push 0x10034f68
lea edx, [ebp - 0x88]
push edx
call fcn.10005f00
add esp, 0xc
call fcn.1002c2c0
lea ecx, [ebp - 0x84]
call fcn.100044d0
mov byte [ebp - 4], 0x14
push 0x10034f70
lea ecx, [ebp - 0x424]
call fcn.10004500
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x424]
push ecx
call fcn.10025d10
add esp, 8
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x424]
call fcn.10004580
lea ecx, [ebp - 0x84]
call fcn.100046a0
push eax
lea ecx, [ebp - 0x4c]
call fcn.10004020
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x88]
call fcn.10006ae0
push eax
lea ecx, [ebp - 0x4c]
call fcn.10006ae0
push eax
call fcn.10006b50
add esp, 8
movzx edx, al
test edx, edx
jne 0x100266e4
push 0x10034f78
lea eax, [ebp - 0x84]
push eax
call fcn.10007760
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x10026733
cmp dword [0x1003da7c], 0
je 0x10026725
mov dword [0x1003db80], 2
mov dword [0x1003db84], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x1003da78]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov dword [0x1003db88], eax
mov ecx, 0x1003db78
call fcn.10030560
lea edx, [ebp - 0x68]
push edx
call fcn.10025760
add esp, 4
jmp 0x1002678e
lea ecx, [ebp - 0x68]
call fcn.100046a0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [0x1003da7c], 0
je 0x10026783
mov dword [0x1003db80], 2
mov dword [0x1003db84], 2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x1003da78]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov dword [0x1003db88], eax
mov ecx, 0x1003db78
call fcn.10030560
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.10029c30
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x4c]
call fcn.100040a0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x84]
call fcn.10004580
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x88]
call fcn.100040a0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x2c]
call fcn.10004580
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x48]
call fcn.10004580
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.10004580
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10008b75
mov esp, ebp
pop ebp
ret