Function at 0x10028ccf
Capabilities:
Authenticate hmac

Disassembly:
mov eax, 0x100619d7
call fcn.10060588
sub esp, 0x5c
cmp byte [ebp + 0x1c], 0
push ebx
push esi
push edi
mov edi, edx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x24], ecx
je 0x10028eef
xor esi, esi
cmp byte [ebp + 0x34], 0
je 0x10028e32
mov edi, dword [ebp + 0x2c]
mov dword [ebp - 0x24], edi
mov dword [edi], esi
cmp dword [edi], 0x34
jge 0x1002907f
mov dword [ebp + 0x1c], esi
mov dword [ebp + 0x1c], 0x15bb
cmp dword [ebp + 0x1c], 0x1943
jle 0x10028d7c
mov ebx, esi
mov edi, esi
mov eax, edi
mov ecx, 0x1007cb18
xor eax, ebx
cdq
push edx
push eax
call fcn.10010bb7
inc edi
cmp edi, 0x79a9
jl 0x10028d28
inc ebx
cmp ebx, 0x2e18
jl 0x10028d26
push esi
push 0xa95
push 0x227d
push 0x36
push 0xe8b
push 0x26f0
push 0x1aa9
push 0x11d7
push 0x1c68
push esi
push esi
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
mov edi, dword [ebp + 0x2c]
mov dword [ebp - 0x30], 0x836b16b
mov dword [ebp - 4], esi
cmp dword [ebp + 0x1c], 0x154a
jge 0x10028d9e
mov edx, str.pchcqq_ohniaempb_lauqeyydv_ctekbml_hpm_mvw_vxjehpds_tfthlbj
mov ecx, 0x1007cb18
call fcn.100134d2
or dword [ebp - 4], 0xffffffff
mov dword [ebp + 0x1c], 0x7597a61e
mov dword [ebp + 0x1c], 0xfffffffc
mov dword [ebp + 0x1c], 1
mov dword [ebp + 0x1c], 0x5b14f4e7
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp + 0x1c], esi
jmp 0x10028e00
mov eax, dword [ebp + 0x1c]
mov dword [ebp + eax*4 - 0x34], 3
inc dword [ebp + 0x1c]
cmp dword [ebp + 0x1c], 1
jl 0x10028df2
lea eax, [ebp - 0x28]
mov dl, 1
push eax
push esi
push 0x18db
push 0x377
push 0x3982
push 0x6ba7
mov cl, dl
call fcn.100287a0
add esp, 0x18
inc dword [edi]
jmp 0x10028d08
mov dword [ebp - 0x20], 0x1001
cmp dword [ebp - 0x20], 0x1036
jle 0x10028eb3
mov edi, esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
mov dword [ebp + 0x1c], edi
mov dword [ebp - 0x14], 0x70ee
mov ebx, dword [ebp + 0x1c]
mov edi, esi
mov eax, ebx
lea ecx, [ebp - 0x4c]
or eax, edi
cdq
push edx
push eax
call fcn.10001311
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10028e72
mov eax, dword [eax]
push eax
call fcn.10048d40
pop ecx
push esi
push 1
lea ecx, [ebp - 0x4c]
call fcn.10001516
inc edi
cmp edi, 0x973
jl 0x10028e59
mov ebx, dword [ebp - 0x18]
add dword [ebp + 0x1c], ebx
dec dword [ebp - 0x14]
jne 0x10028e54
mov edi, dword [ebp - 0x1c]
dec ebx
mov dword [ebp - 0x18], ebx
cmp ebx, 0xffffd0c3
jg 0x10028e4a
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x3699
jl 0x10028e47
cmp dword [ebp - 0x20], 0xedf
jge 0x10028ec7
push str.makirnetu_mphpkegvq_tej_pceaaft_ulxp_ykwb_jxrlkxp_onoh
call fcn.10048d40
pop ecx
mov edx, dword [ebp + 0x24]
mov dword [edx], esi
cmp dword [edx], 2
jge 0x1002907f
mov esi, dword [ebp + 0x30]
mov ecx, dword [edx]
mov eax, dword [esi]
mov dword [eax + ecx*4], 9
inc dword [edx]
cmp dword [edx], 2
jl 0x10028ed8
jmp 0x1002907f
cmp byte [ebp + 0xc], 0
je 0x10028fee
mov dword [ebp - 0x14], 0x2af5
xor esi, esi
cmp dword [ebp - 0x14], 0x2d08
jle 0x10028f88
mov ebx, esi
mov dword [ebp - 0x18], esi
mov dword [ebp + 0x1c], ebx
mov dword [ebp - 0x1c], 0x7306
mov eax, esi
mov dword [ebp - 0x20], esi
mov ecx, eax
mov dword [ebp - 0x2c], ebx
mov edi, esi
shl ebx, cl
mov eax, ebx
lea ecx, [ebp - 0x64]
xor eax, edi
cdq
push edx
push eax
call fcn.10001311
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10028f41
mov eax, dword [eax]
push eax
call fcn.10048d40
pop ecx
push esi
push 1
lea ecx, [ebp - 0x64]
call fcn.10001516
inc edi
cmp edi, 0x5bf4
jl 0x10028f28
mov eax, dword [ebp - 0x20]
mov ebx, dword [ebp + 0x1c]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x2b2f
jl 0x10028f1f
dec ebx
dec dword [ebp - 0x1c]
mov dword [ebp + 0x1c], ebx
jne 0x10028f1a
mov ebx, dword [ebp - 0x18]
inc ebx
mov dword [ebp - 0x18], ebx
cmp ebx, 0x700
jl 0x10028f10
mov edi, dword [ebp - 0x30]
cmp dword [ebp - 0x14], 0x2ac4
jge 0x10028f9c
push str.eecmri_qbybee_kcx_lvkvmolmo_zublnhldh_ckwmg
call fcn.10048d40
pop ecx
mov dword [edi], 1
cmp dword [edi], esi
jl 0x1002907f
mov ebx, dword [ebp + 0x14]
mov edx, dword [ebp + 8]
mov ecx, dword [ebx]
mov eax, dword [edx]
cmp dword [eax + ecx*4], esi
jne 0x1002907f
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx]
mov eax, dword [edi]
mov eax, dword [ebx]
mov eax, dword [ebx]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
imul ecx, dword [ecx], 5
mov eax, dword [edx]
xor edx, edx
cmp ecx, dword [eax]
mov eax, dword [ebp + 0x18]
setne dl
mov dword [eax], edx
dec dword [edi]
cmp dword [edi], esi
jge 0x10028fad
jmp 0x1002907f
mov esi, dword [ebp + 0x38]
xor edx, edx
mov eax, dword [esi]
mov ecx, dword [esi]
mov eax, dword [esi]
inc ecx
cmp ecx, eax
mov eax, dword [esi]
sete dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [esi]
mov ecx, dword [esi]
setl bl
sub ebx, eax
mov eax, dword [esi]
neg ebx
sbb ebx, ebx
xor edx, edx
neg ebx
imul ecx, ebx
cmp eax, ecx
mov eax, dword [esi]
setne dl
xor ecx, ecx
sub edx, eax
mov eax, dword [esi]
cmp edx, eax
mov eax, dword [esi]
setg cl
xor edx, edx
cmp ecx, 1
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [esi]
setg cl
xor edx, edx
cmp ecx, 0x5809
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
or eax, 0xffffffff
cmp eax, ecx
mov eax, dword [esi]
sbb ecx, ecx
neg ecx
sub ecx, eax
mov eax, dword [ebp + 0x28]
mov eax, dword [eax]
lea edx, [ecx + 0x31bb000e]
xor ecx, ecx
mov dword [eax], edx
mov eax, dword [esi]
cmp eax, 0x4288
mov eax, dword [ebp + 0x20]
setle cl
add ecx, edx
mov dword [eax], ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret