Function at 0x100039f0
Capabilities:
Create process on windows
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10042bae
mov eax, dword fs:[0]
push eax
sub esp, 0x180
mov eax, dword [0x1005b034]
xor eax, esp
mov dword [esp + 0x178], eax
push ebx
push esi
push edi
mov eax, dword [0x1005b034]
xor eax, esp
push eax
lea eax, [esp + 0x190]
mov dword fs:[0], eax
lea eax, [esp + 0xbc]
push eax
call fcn.10006610
xor ebx, ebx
push 1
mov ecx, str..Xor_PlusSplashXor_Ban.bmp
lea esi, [esp + 0xd0]
mov dword [esp + 0x19c], ebx
call fcn.100075e0
push ebx
test eax, eax
jne 0x10003a79
mov ecx, dword [esp + 0xc0]
mov ecx, dword [ecx + 4]
push 2
lea ecx, [esp + ecx + 0xc4]
call dword [sym.imp.MSVCP100.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
jmp 0x10003a91
mov edx, dword [esp + 0xc0]
mov ecx, dword [edx + 4]
push ebx
lea ecx, [esp + ecx + 0xc4]
call dword [sym.imp.MSVCP100.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool_]
mov eax, dword [esp + 0xbc]
mov eax, dword [eax + 4]
mov ecx, dword [esp + eax + 0xc8]
lea eax, [esp + eax + 0xbc]
and cl, 6
movsx edx, cl
neg edx
sbb edx, edx
not edx
test eax, edx
push str.HardwareID.txt
lea eax, [esp + 0x18]
push eax
je 0x10003b5e
call fcn.10007190
mov byte [esp + 0x198], 1
cmp dword [esp + 0x6c], ebx
je 0x10003b14
push 0x1004d950
push ecx
push 0x101774f0
push ecx
lea ecx, [esp + 0x24]
push 0x1004d954
push ecx
call fcn.10002ad0
add esp, 0xc
push eax
call fcn.10007890
add esp, 0xc
push eax
call fcn.10002ad0
add esp, 8
lea edx, [esp + 0x14]
push edx
call fcn.10007370
call fcn.1002fd40
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 4]
lea eax, [esp + 0x74]
mov dword [esp + 0x10], eax
mov dword [esp + edx + 0x14], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
lea ecx, [esp + 0x18]
mov byte [esp + 0x198], 2
call fcn.10006830
mov byte [esp + 0x198], bl
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 4]
mov edx, dword [sym.imp.MSVCP100.dll_const_std::basic_ostream_char__struct_std::char_traits_char__::vftable]
mov dword [esp + ecx + 0x14], edx
jmp 0x10003cbb
call fcn.10007190
mov byte [esp + 0x198], 3
cmp dword [esp + 0x6c], ebx
je 0x10003bab
push 0x1004d950
push ecx
push 0x101774f0
push ecx
lea ecx, [esp + 0x24]
push 0x1004d954
push ecx
call fcn.10002ad0
add esp, 0xc
push eax
call fcn.10007890
add esp, 0xc
push eax
call fcn.10002ad0
add esp, 8
lea edx, [esp + 0x14]
push edx
call fcn.10007370
push ebx
push ebx
push ebx
push 0x10003880
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
lea eax, [esp + 0x16c]
push 0x1006872c
push eax
call fcn.10002750
add esp, 8
mov edi, eax
mov esi, 0x1006872c
mov byte [esp + 0x198], 4
call fcn.10003280
mov byte [esp + 0x198], 3
cmp dword [esp + 0x180], 0x10
jb 0x10003c07
mov ecx, dword [esp + 0x16c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea edx, [esp + 0x16c]
push 0x10068764
push edx
call fcn.10002750
add esp, 8
mov edi, eax
mov esi, 0x10068764
mov byte [esp + 0x198], 5
call fcn.10003280
cmp dword [esp + 0x180], 0x10
jb 0x10003c4b
mov eax, dword [esp + 0x16c]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push 1
push str.HardwareID.txt
mov dword [esp + 0x188], 0xf
mov dword [esp + 0x184], ebx
mov byte [esp + 0x174], bl
mov dword [0x101768e4], ebx
call dword [sym.imp.KERNEL32.dll_WinExec]
call fcn.10009890
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 4]
lea ecx, [esp + 0x74]
mov dword [esp + 0x10], ecx
mov dword [esp + eax + 0x14], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
lea ecx, [esp + 0x18]
mov byte [esp + 0x198], 6
call fcn.10006830
mov byte [esp + 0x198], bl
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 4]
mov eax, dword [sym.imp.MSVCP100.dll_const_std::basic_ostream_char__struct_std::char_traits_char__::vftable]
mov dword [esp + edx + 0x14], eax
lea ecx, [esp + 0x74]
call dword [sym.imp.MSVCP100.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov edx, dword [esp + 0xbc]
mov eax, dword [edx + 4]
lea ecx, [esp + 0x124]
mov dword [esp + 0x10], ecx
mov dword [esp + eax + 0xbc], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
lea ecx, [esp + 0xcc]
mov dword [esp + 0x198], 7
call fcn.10006830
mov dword [esp + 0x198], 0xffffffff
mov ecx, dword [esp + 0xbc]
mov edx, dword [ecx + 4]
mov eax, dword [sym.imp.MSVCP100.dll_const_std::basic_istream_char__struct_std::char_traits_char__::vftable]
lea ecx, [esp + 0x124]
mov dword [esp + edx + 0xbc], eax
call dword [sym.imp.MSVCP100.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov ecx, dword [esp + 0x190]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x178]
xor ecx, esp
call fcn.1003e6b0
mov esp, ebp
pop ebp
ret