Function at 0x1003903e
Capabilities:
Check for time delay via gettickcount
Terminate process

Disassembly:
push ebp
lea ebp, [esp - 0x39a8]
mov eax, 0x3a28
call fcn.10040c40
mov eax, dword [0x10074bac]
xor eax, ebp
mov dword [ebp + 0x39a4], eax
mov eax, ecx
push ebx
mov ebx, dword [ebp + 0x39bc]
mov dword [ebp - 0x6c], eax
add eax, 0x58
push esi
mov esi, dword [ebp + 0x39b8]
push eax
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x64], eax
call fcn.10010a2d
pop ecx
test al, al
je 0x1003908e
xor eax, eax
jmp 0x10039c90
mov eax, dword [ebp + 0x39b4]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp + 0x39b0]
push edi
mov edi, 0x1016bbf8
mov ecx, 0x200
test dword [0x1014469c], eax
je 0x10039311
test dword [0x1015bd84], ecx
je 0x100390e6
cmp byte [0x1015cb88], 0
je 0x100390e6
cmp byte [0x10085f90], 0
je 0x100390e6
push 0x10085f90
push 0x1015cb88
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
jne 0x10039388
test dword [ebp + 0x39b0], 0x10000000
mov eax, dword [0x101434ac]
je 0x100392e7
cmp eax, 0x11
je 0x10039105
cmp eax, 0x17
jne 0x10039113
push str.start
push 0
call fcn.1003dfed
pop ecx
pop ecx
cmp byte [esi], 0
je 0x100398c2
lea eax, [ebp + 0x31a4]
push eax
push esi
call fcn.1003591f
mov eax, dword [0x101434ac]
pop ecx
pop ecx
push 0x11
pop ebx
cmp eax, ebx
je 0x1003913c
cmp eax, 0x17
jne 0x10039158
push 0x1015cd88
lea eax, [ebp + 0x31a4]
push eax
push esi
push str.Subject__s_MyURL__s_g_tc_OKURL__s_
push 0
call fcn.1003dfed
add esp, 0x14
cmp byte [0x1016bbf8], 0
je 0x1003917c
push edi
push esi
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je 0x1003917c
lea eax, [ebp + 0x31a4]
push edi
push eax
call fcn.100074d8
pop ecx
pop ecx
cmp byte [ebp + 0x31a4], 0
je 0x100391a6
lea eax, [ebp + 0x31a4]
push eax
push edi
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je 0x100391a6
mov eax, dword [0x1016bbf4]
mov dword [0x1016bc5c], eax
jmp 0x100398c2
mov eax, dword [0x1015bd84]
xor esi, esi
test eax, 0x10000
je 0x1003922a
cmp byte [0x1016bbf8], 0
je 0x1003922a
cmp byte [ebp + 0x31a4], 0
je 0x100391fd
cmp dword [0x10165588], esi
je 0x100391fd
cmp esi, 0x400
jge 0x100391fd
push dword [esi*4 + 0x10165588]
lea eax, [ebp + 0x31a4]
push eax
call fcn.10040c70
pop ecx
pop ecx
test eax, eax
jne 0x10039388
inc esi
cmp dword [esi*4 + 0x10165588], eax
jne 0x100391ce
mov eax, dword [0x101434ac]
mov dword [ebp - 0x60], ebx
cmp eax, ebx
je 0x10039212
cmp eax, 0x17
jne 0x10039388
push dword [esi*4 + 0x10165588]
lea eax, [ebp + 0x31a4]
push eax
push str.TC_DT_OKURLISOK__s___s_
jmp 0x100392b3
test eax, 0x20000
je 0x100392b7
cmp byte [0x1016bbf8], 0
je 0x100392b7
cmp byte [ebp + 0x31a4], 0
je 0x10039388
cmp dword [0x10165588], esi
je 0x10039388
cmp esi, 0x400
jge 0x10039388
push dword [esi*4 + 0x10165588]
lea eax, [ebp + 0x31a4]
push eax
call fcn.10040c70
pop ecx
pop ecx
test eax, eax
jne 0x1003928b
inc esi
cmp dword [esi*4 + 0x10165588], eax
jne 0x10039257
jmp 0x10039388
mov eax, dword [0x101434ac]
mov dword [ebp - 0x60], ebx
cmp eax, ebx
je 0x100392a0
cmp eax, 0x17
jne 0x10039388
push dword [esi*4 + 0x10165588]
lea eax, [ebp + 0x31a4]
push eax
push str.TC_DT_OKURLISBLACK__s___s_
push 0
jmp 0x100392da
mov eax, dword [0x101434ac]
mov dword [ebp - 0x60], ebx
cmp eax, ebx
je 0x100392cc
cmp eax, 0x17
jne 0x10039388
push edi
lea eax, [ebp + 0x31a4]
push eax
push str.MediaType__TYPE_INTERNETURL_ELSE__s___s_
push esi
call fcn.1003dfed
add esp, 0x10
jmp 0x10039388
push 0x11
pop ecx
mov dword [ebp - 0x60], ecx
cmp eax, ecx
je 0x100392fa
cmp eax, 0x17
jne 0x10039388
push dword [ebp + 0x39b0]
push str.MediaType__d_
push 0
call fcn.1003dfed
add esp, 0xc
jmp 0x10039388
mov eax, dword [0x10144ef8]
shl eax, 0xa
cmp eax, dword [ebp + 0x39c0]
ja 0x10039388
mov eax, dword [0x1015bd84]
test eax, 0x40000
je 0x10039388
mov esi, 0x10085f90
test ecx, eax
je 0x10039358
cmp byte [0x1015cb88], 0
je 0x10039358
cmp byte [0x10085f90], 0
je 0x10039358
push esi
push 0x1015cb88
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
jne 0x10039388
cmp dword [0x101434ac], 0x11
mov dword [ebp - 0x60], 0x21
jne 0x10039388
mov eax, dword [0x10144ef0]
push ebx
push esi
push dword [ebp + 0x39c0]
shl eax, 0xa
push eax
push str.SEND_CUTDEVICESIZE12__08x____08x_host:_s_file:_s
push 0
call fcn.1003dfed
add esp, 0x18
mov ecx, dword [ebp - 0x6c]
call fcn.1003791c
cmp dword [0x101434ac], 0x14
mov edi, 0x400000
jne 0x100393b4
cmp dword [ebp + 0x39b0], edi
jne 0x100393b4
push str.SendInfoDisplay_2
push 0
call fcn.1003dfed
pop ecx
pop ecx
cmp dword [0x10144694], 2
push 0x42
pop esi
jne 0x100393c9
test byte [ebp - 0x60], 1
je 0x100393ef
mov dword [ebp - 0x60], esi
test byte [ebp - 0x60], 1
je 0x100393ef
cmp byte [0x10149960], 0
je 0x100393ef
push 0x10142848
push 0x10149960
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je 0x100393ef
mov dword [ebp - 0x60], esi
mov ebx, dword [ebp - 0x60]
and ebx, 1
mov dword [ebp - 0x70], ebx
je 0x10039412
mov eax, dword [ebp - 0x6c]
mov byte [eax + 0x50bc], 1
mov byte [eax + 0x1470], 1
mov byte [eax + 0x630c], 1
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [ebp + 0x39b0], edi
jne 0x10039461
cmp dword [0x1029e408], 0
jne 0x10039435
call esi
mov dword [0x1029e408], eax
jmp 0x100398c2
call esi
mov ecx, dword [0x1029e408]
add ecx, 0x7d0
cmp ecx, eax
jbe 0x1003945a
call esi
mov dword [0x1029e408], eax
xor eax, eax
test ebx, ebx
setne al
jmp 0x10039c8f
call esi
mov dword [0x1029e408], eax
push dword [ebp - 0x74]
push dword [ebp - 0x68]
call fcn.1000f234
pop ecx
pop ecx
test eax, eax
je 0x10039479
mov eax, ebx
jmp 0x10039c8f
mov esi, 0x1ff
push esi
xor ebx, ebx
lea eax, [ebp + 0x2da5]
push ebx
push eax
mov byte [ebp + 0x2da4], 0
call fcn.10040850
lea eax, [ebp + 0x2da4]
push 0x200
push eax
call fcn.100074a5
mov eax, dword [0x1013ee84]
add eax, 0xea60
push eax
mov edi, 0x1005d13c
lea eax, [ebp + 0x2da4]
push edi
push eax
call fcn.10040b98
push esi
lea eax, [ebp + 0x2fa5]
push ebx
push eax
mov byte [ebp + 0x2fa4], bl
call fcn.10040850
push esi
lea eax, [ebp + 0x37a5]
push ebx
push eax
mov byte [ebp + 0x37a4], bl
call fcn.10040850
push esi
lea eax, [ebp + 0x2ba5]
push ebx
push eax
mov byte [ebp + 0x2ba4], bl
call fcn.10040850
add esp, 0x44
push 0x2bff
lea eax, [ebp - 0x5b]
push ebx
push eax
mov byte [ebp - 0x5c], bl
call fcn.10040850
mov eax, dword [0x1029e3fc]
cdq
mov ecx, 0xea60
idiv ecx
lea eax, [ebp + 0x2fa4]
push str.SoftWareTrojanCut_tc_FileM
push eax
mov ebx, edx
add ebx, 0x64
inc dword [0x1029e3fc]
mov dword [ebp - 0x78], ebx
call fcn.10040b98
push ebx
lea eax, [ebp + 0x2ba4]
push edi
push eax
call fcn.10040b98
lea eax, [ebp + 0x37a4]
push eax
call fcn.1003dc1e
add esp, 0x24
cmp byte [0x1029dff0], 0
je 0x1003957a
xor eax, eax
mov cl, byte [eax + 0x1029dff0]
mov byte [ebp + eax + 0x37a4], cl
inc eax
test cl, cl
jne 0x10039568
push esi
lea eax, [ebp + 0x35a5]
push 0
push eax
mov byte [ebp + 0x35a4], 0
call fcn.10040850
lea eax, [ebp - 0x80]
push eax
call fcn.10040fd5
lea eax, [ebp - 0x80]
push eax
call fcn.10040fae
add esp, 0x14
test eax, eax
je 0x100395c6
push eax
push str._Y__m__d__H:_M:_S
mov edi, 0x200
lea eax, [ebp + 0x35a4]
push edi
push eax
call fcn.10041c5f
add esp, 0x10
jmp 0x100395de
lea eax, [ebp + 0x35a4]
push str.0000
push eax
call fcn.100074d8
pop ecx
pop ecx
mov edi, 0x200
push esi
lea eax, [ebp + 0x33a5]
push 0
push eax
mov byte [ebp + 0x33a4], 0
call fcn.10040850
mov ebx, dword [ebp + 0x39b0]
add esp, 0xc
test ebx, 0x10000
je 0x100396fb
mov esi, 0x1006b624
lea edi, [ebp + 0x33a4]
movsd dword es:[edi], dword [esi]
push 0x2a00
movsw word es:[edi], word [esi]
call fcn.10040c33
and dword [ebp - 0x64], 0
mov ebx, eax
mov eax, dword [ebp - 0x68]
pop ecx
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x1003962e
sub eax, ecx
je 0x10039666
mov edi, dword [ebp - 0x68]
mov ecx, ebx
sub edi, ebx
mov al, byte [edi + ecx]
cmp al, 0x7c
jne 0x1003964c
mov byte [ecx], 0x20
jmp 0x1003964e
mov byte [ecx], al
mov eax, dword [ebp - 0x68]
inc dword [ebp - 0x64]
inc ecx
lea esi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x10039658
sub eax, esi
cmp dword [ebp - 0x64], eax
jb 0x10039640
mov eax, dword [ebp + 0x39b0]
or eax, 0x800
test byte [0x1013ee90], 1
je 0x100396b5
push 0x1013cfe0
push dword [ebp + 0x39c0]
push eax
push dword [ebp - 0x74]
lea eax, [ebp + 0x33a4]
push ebx
push eax
lea eax, [ebp + 0x37a4]
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
lea eax, [ebp - 0x5c]
push str._s_d_s__s__s__s_d_d_s
push eax
call fcn.10040b98
add esp, 0x2c
jmp 0x100396e9
push dword [ebp + 0x39c0]
push eax
push dword [ebp - 0x74]
lea eax, [ebp + 0x33a4]
push ebx
push eax
lea eax, [ebp + 0x37a4]
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
lea eax, [ebp - 0x5c]
push str._s_d_s__s__s__s_d_d
push eax
call fcn.10040b98
add esp, 0x28
push ebx
call fcn.10040b8d
mov ebx, dword [ebp + 0x39b0]
pop ecx
jmp 0x10039a32
test ebx, 0x2000000
je 0x10039780
push edi
lea eax, [ebp + 0x33a4]
push eax
push 0x77
push dword [0x102bc550]
call dword [sym.imp.USER32.dll_LoadStringA]
mov eax, ebx
or eax, 0x800
test byte [0x1013ee90], 1
je 0x10039757
push 0x1013cfe0
push eax
push dword [ebp - 0x74]
lea eax, [ebp + 0x33a4]
push dword [ebp - 0x68]
push eax
lea eax, [ebp + 0x37a4]
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
push str._s_d_s__s__s__s_d_s
jmp 0x100399f7
push eax
push dword [ebp - 0x74]
lea eax, [ebp + 0x33a4]
push dword [ebp - 0x68]
push eax
lea eax, [ebp + 0x37a4]
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
push str._s_d_s__s__s__s_d
jmp 0x10039a26
test ebx, 0x10000000
je 0x100398d7
test dword [0x1014469c], ebx
je 0x100397ad
test byte [ebp - 0x60], 2
je 0x100397ad
test byte [ebp - 0x60], 0x40
jne 0x100397ad
test byte [0x1013ee94], 0x10
je 0x100398c2
mov esi, dword [ebp - 0x68]
mov al, byte [esi + 1]
cmp al, 0x3a
jne 0x100397c1
cmp byte [esi + 2], 0x5c
je 0x100398c2
cmp byte [esi], 0x5c
jne 0x100397ce
cmp al, 0x5c
je 0x100398c2
push str.about:blank
push esi
call dword [sym.imp.SHLWAPI.dll_StrStrA]
test eax, eax
jne 0x100398c2
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x100397e7
sub eax, edx
cmp eax, 4
jbe 0x1003981c
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x100397fa
sub eax, edx
cmp byte [eax + esi - 2], 0x20
jne 0x1003981c
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1003980f
sub eax, edx
mov byte [eax + esi - 2], cl
mov edi, dword [sym.imp.SHLWAPI.dll_StrStrIA]
push str.http:__
push esi
call edi
test eax, eax
je 0x10039833
lea eax, [esi + 7]
jmp 0x10039844
push str.https:__
push esi
call edi
test eax, eax
lea eax, [esi + 8]
jne 0x10039844
mov eax, esi
mov ecx, ebx
or ecx, 0x800
test byte [0x1013ee90], 1
je 0x10039883
push 0x1013cfe0
push ecx
push dword [ebp - 0x74]
push eax
lea eax, [ebp + 0x37a4]
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
lea eax, [ebp - 0x5c]
push str._s_d_s_URL__s_s_d_s
push eax
call fcn.10040b98
add esp, 0x24
jmp 0x100398aa
push ecx
push dword [ebp - 0x74]
push eax
lea eax, [ebp + 0x37a4]
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
lea eax, [ebp - 0x5c]
push str._s_d_s_URL__s_s_d
push eax
call fcn.10040b98
add esp, 0x20
push esi
mov edi, 0x1029df88
push edi
call fcn.100073d3
pop ecx
pop ecx
test eax, eax
jne 0x100398c9
test byte [ebp - 0x60], 0x10
jne 0x100398c9
xor eax, eax
jmp 0x10039c8f
push esi
push edi
call fcn.100074d8
pop ecx
pop ecx
jmp 0x10039a32
mov eax, 0x8000000
test eax, ebx
je 0x10039941
cmp dword [ebp - 0x70], 0
je 0x100398f5
test dword [0x1015bd80], eax
je 0x100398f5
mov dword [ebp - 0x60], 0x42
push edi
lea eax, [ebp + 0x33a4]
push eax
push 0x78
jmp 0x10039953
push 0x1013cfe0
push dword [eax + 0x8b2c]
lea eax, [ebp + 0x33a4]
push ebx
push dword [ebp - 0x64]
push dword [ebp - 0x68]
push eax
lea eax, [ebp + 0x37a4]
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
lea eax, [ebp - 0x5c]
push str._s_d_s__s__s_s_d_d_s
push eax
call fcn.10040b98
add esp, 0x2c
jmp 0x10039a32
test bl, 2
je 0x10039997
push edi
lea eax, [ebp + 0x33a4]
push eax
push 0x8b
push dword [0x102bc550]
call dword [sym.imp.USER32.dll_LoadStringA]
test byte [0x1013ee90], 1
mov eax, dword [ebp - 0x6c]
jne 0x10039901
push dword [eax + 0x8b2c]
lea eax, [ebp + 0x33a4]
push ebx
push dword [ebp - 0x64]
push dword [ebp - 0x68]
push eax
lea eax, [ebp + 0x37a4]
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
push str._s_d_s__s__s_s_d_d
jmp 0x100399f7
test ebx, 0x400000
je 0x10039a32
mov esi, dword [ebp - 0x68]
test esi, esi
je 0x100399c5
cmp byte [esi], 0
je 0x100399c5
lea edx, [ebp + 0x37a4]
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x100399b9
mov byte [esi], cl
test byte [0x1013ee90], 1
mov eax, dword [ebp - 0x6c]
je 0x10039a05
push 0x1013cfe0
push dword [eax + 0x8b2c]
lea eax, [ebp + 0x37a4]
push ebx
push dword [ebp - 0x64]
push esi
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
push str._s_d_s_ScreenShot__s_s_d_d_s
lea eax, [ebp - 0x5c]
push eax
call fcn.10040b98
add esp, 0x28
jmp 0x10039a32
push dword [eax + 0x8b2c]
lea eax, [ebp + 0x37a4]
push ebx
push dword [ebp - 0x64]
push esi
push eax
push dword [ebp - 0x60]
lea eax, [ebp + 0x35a4]
push eax
push str._s_d_s_ScreenShot__s_s_d_d
lea eax, [ebp - 0x5c]
push eax
call fcn.10040b98
add esp, 0x24
cmp dword [0x101434ac], 0x14
jne 0x10039a56
cmp ebx, 0x400000
jne 0x10039a5f
lea eax, [ebp - 0x5c]
push eax
push str.SendInfoDisplay_3__s_
push 0
call fcn.1003dfed
add esp, 0xc
cmp dword [0x101434ac], 0
je 0x10039a72
lea eax, [ebp - 0x5c]
push eax
push str.SendInfoDisplay_subject:__s
push 0
call fcn.1003dfed
add esp, 0xc
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp + 0x2ba4]
push eax
lea eax, [ebp + 0x2fa4]
push eax
mov esi, reloc.WS2_32.dll_bind
push esi
call fcn.1003ef27
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.tc_Last
push str.SOFTWARETrojanCut_tc_Env
push esi
call fcn.1003e718
mov edi, dword [sym.imp.USER32.dll_FindWindowA]
add esp, 0x10
mov ebx, 0x1005d094
push ebx
push 0
call edi
mov dword [ebp - 0x64], eax
test eax, eax
jne 0x10039ae9
push ebx
push eax
call edi
mov dword [ebp - 0x64], eax
test eax, eax
jne 0x10039ae9
push eax
push str.tc_hnd
push str.SOFTWARETrojanCutTC_Env_tc_COMMUNICATION
push esi
call fcn.1003d897
add esp, 0x10
mov dword [ebp - 0x64], eax
test eax, eax
je 0x10039afd
push dword [ebp - 0x60]
push dword [ebp - 0x78]
push 0xcfd
push dword [ebp - 0x64]
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x70], ecx
and dword [ebp - 0x70], 1
mov byte [0x1029e400], 0
je 0x10039c8c
mov eax, dword [ebp + 0x39b0]
test eax, 0x400000
je 0x10039b3d
push ecx
push dword [ebp - 0x78]
push 0xcfd
push dword [ebp - 0x64]
call dword [sym.imp.USER32.dll_SendMessageA]
call fcn.100378b0
jmp 0x10039c8c
test dword [0x1014469c], eax
je 0x10039c8c
test eax, 0x10000000
je 0x10039c8c
push ecx
push dword [ebp - 0x78]
push 0xcfd
push dword [ebp - 0x64]
call dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [0x101434ac], 0
je 0x10039b83
push 0x1016bbf8
push str.g_tc_RedirectURL___s_
push 0
call fcn.1003dfed
add esp, 0xc
cmp byte [0x1016bbf8], 0
je 0x10039c58
push 0x2e
push 0x1016bbf8
call fcn.10040730
pop ecx
pop ecx
test eax, eax
jne 0x10039be1
cmp dword [0x101434ac], eax
je 0x10039bb7
push str.MessageBox_ExitProcess
push eax
call fcn.1003dfed
pop ecx
pop ecx
push 0x10142848
push str.BrowserBlock_Pro
mov edi, str.SOFTWARETrojanCut_tc_Env
push edi
push esi
call fcn.1003ef27
push dword [ebp - 0x68]
push str.BrowserBlock_URL
push edi
push esi
call fcn.1003ef27
add esp, 0x20
jmp 0x10039c58
cmp byte [0x1016bbf8], 0
je 0x10039c58
cmp dword [0x101434ac], 0
je 0x10039c01
push str.g_tc_RedirectURL_gogo
push 0
call fcn.1003dfed
pop ecx
pop ecx
push 0x10142448
push 0x1006b458
push str.SoftWareTrojanCut_tc_FileNa
push esi
call fcn.1003ef27
add esp, 0x10
push ebx
push 0
call edi
test eax, eax
jne 0x10039c42
push ebx
push eax
call edi
test eax, eax
jne 0x10039c42
push eax
push str.tc_hnd
push str.SOFTWARETrojanCutTC_Env_tc_COMMUNICATION
push esi
call fcn.1003d897
add esp, 0x10
test eax, eax
je 0x10039c58
push 0
push dword [0x10144ecc]
push 0xcfe
push dword [ebp - 0x64]
call dword [sym.imp.USER32.dll_PostMessageA]
cmp dword [0x10144ecc], 2
jne 0x10039c69
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.100378b0
cmp dword [0x101434ac], 0x11
jne 0x10039c85
push str.g_bRedirectURL_true
push 0
call fcn.1003dfed
pop ecx
pop ecx
mov byte [0x1029e400], 1
mov eax, dword [ebp - 0x70]
pop edi
mov ecx, dword [ebp + 0x39a4]
pop esi
xor ecx, ebp
pop ebx
call fcn.1004083f
add ebp, 0x39a8
leave
ret 0x14