Function at 0x10016430
Capabilities:
Create thread
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1003f4d3
mov eax, dword fs:[0]
push eax
sub esp, 0x1a0
push esi
push edi
mov eax, dword [0x10056050]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
sub dword [ebp + 0xc], 1
jne 0x10016b5c
call sym.OpenGuard.dll_OpenGuard
cmp dword [0x1005b930], 1
jne 0x100165f7
push str.lib_ayarlar.txt
call fcn.10021e84
push str.libhesap1.txt
call fcn.10021e84
push str.libhesap2.txt
call fcn.10021e84
push str.libhesap3.txt
call fcn.10021e84
push str.libhesap4.txt
call fcn.10021e84
push str.liblib.txt
call fcn.10021e84
push str.lib_ticaret.txt
call fcn.10021e84
push str.libloglar.txt
call fcn.10021e84
add esp, 0x20
mov dword [ebp - 0x2c], vtable.CSplash.0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x14], str.SPLASH
mov dword [ebp - 0x24], 0
push str.SetLayeredWindowAttributes
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x10
push 0
push 0
push 0
push str..OpenGuard.bmp
push 0
mov dword [0x1005b8ac], eax
call dword [sym.imp.USER32.dll_LoadImageA]
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
mov edi, eax
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x1001651f
push eax
call esi
mov dword [ebp - 0x18], 0
test edi, edi
je 0x1001655d
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x18], edi
push eax
push 0x18
push edi
call dword [sym.imp.GDI32.dll_GetObjectA]
test eax, eax
jne 0x10016551
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x10016548
push eax
call esi
mov dword [ebp - 0x18], 0
jmp 0x1001655d
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], 0x808080
test eax, eax
je 0x1001659e
cmp dword [0x1005b8ac], 0
je 0x1001659e
push 0xffffffffffffffec
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
or eax, 0x80000
push eax
push 0xffffffffffffffec
push dword [ebp - 0x28]
call dword [sym.imp.USER32.dll_SetWindowLongA]
push 1
push 0
push dword [ebp - 0x24]
push dword [ebp - 0x28]
call dword [0x1005b8ac]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0
call fcn.100194e0
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x100165df
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
mov dword [ebp - 0x28], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
push dword [ebp - 0x14]
call dword [sym.imp.USER32.dll_UnregisterClassA]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], vtable.CSplash.0
test eax, eax
je 0x100165f7
push eax
call esi
cmp dword [0x1005b9a8], 1
je 0x10016b74
cmp dword [0x1005ba04], 0
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
jne 0x10016624
push 0
push 0
push 0
push 0x1001aa30
push 0
push 0
call edi
cmp dword [0x1005b91c], 1
jne 0x100167b3
mov edx, str._START.cpp___carrega.PAUSE_ALL_DETECTORS__Turned_ON_
mov ecx, 0x1005ac18
call fcn.10005930
push eax
call fcn.100062b0
mov edx, str.All_Anti_hack_detectors_and_anti_kill_by_scan_are_PAUSED_
mov ecx, 0x1005ac18
call fcn.10005930
push eax
call fcn.100062b0
add esp, 8
cmp dword [0x1005b97c], 0
jne 0x100166dd
sub esp, 0xc
lea ecx, [ebp - 0x1ac]
push str.OpenGuard.txt
call fcn.10004170
mov edx, str._START.cpp___carrega.PAUSE_ALL_DETECTORS__Turned_ON__All_Anti_hack_detectors_and_anti_kill_by_scan_are_PAUSED_
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x1ac]
call fcn.10005930
lea ecx, [ebp - 0x1a8]
call fcn.10004900
test eax, eax
jne 0x100166cb
mov eax, dword [ebp - 0x1ac]
lea ecx, [ebp - 0x1ac]
push 0
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.10001d70
lea ecx, [ebp - 0x1ac]
mov dword [ebp - 4], 0xffffffff
call fcn.100030f0
cmp dword [0x1005b98c], 0
jne 0x10016a39
lea eax, [ebp - 0x34]
push eax
call fcn.10020f8f
lea eax, [ebp - 0x34]
push eax
call fcn.1002127c
push ecx
push 0x1004c450
lea ecx, [ebp - 0xfc]
mov esi, eax
call fcn.10004170
mov edx, str._nLocal_Time:
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xfc]
call fcn.10005930
push esi
call fcn.10021ca8
add esp, 4
lea ecx, [ebp - 0xfc]
mov edx, eax
call fcn.10005930
mov edx, str._START.cpp___carrega.PAUSE_ALL_DETECTORS__Turned_ON__All_Anti_hack_detectors_and_anti_kill_by_scan_are_PAUSED_
lea ecx, [ebp - 0xfc]
call fcn.10005930
mov edx, str._n__________________
lea ecx, [ebp - 0xfc]
call fcn.10005930
lea ecx, [ebp - 0xf8]
call fcn.10004900
test eax, eax
jne 0x10016796
mov eax, dword [ebp - 0xfc]
lea ecx, [ebp - 0xfc]
push 0
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.10001d70
push 2
push 0x1004c450
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [ebp - 0xfc]
call fcn.100030f0
jmp 0x10016a39
cmp dword [0x1005b92c], 1
jne 0x100167cd
push 0
push 0
push 0
push 0x10017990
push 0
push 0
call edi
cmp dword [0x1005b978], 1
jne 0x100167e7
push 0
push 0
push 0
push 0x10015d30
push 0
push 0
call edi
cmp dword [0x1005b9ec], 1
jne 0x10016801
push 0
push 0
push 0
push 0x10016110
push 0
push 0
call edi
cmp dword [0x1005b934], 1
jne 0x1001681b
push 0
push 0
push 0
push 0x1001a1f0
push 0
push 0
call edi
cmp dword [0x1005b9b0], 1
jne 0x10016835
push 0
push 0
push 0
push 0x10019330
push 0
push 0
call edi
cmp dword [0x1005b938], 1
jne 0x1001684f
push 0
push 0
push 0
push 0x10006ec0
push 0
push 0
call edi
cmp dword [0x1005b9e0], 1
jne 0x10016869
push 0
push 0
push 0
push 0x100183d0
push 0
push 0
call edi
cmp dword [0x1005b9b4], 1
jne 0x10016883
push 0
push 0
push 0
push 0x1000b970
push 0
push 0
call edi
cmp dword [0x1005b9bc], 1
jne 0x1001689d
push 0
push 0
push 0
push 0x1000cd90
push 0
push 0
call edi
cmp dword [0x1005b9d0], 1
jne 0x100168b7
push 0
push 0
push 0
push 0x100129f0
push 0
push 0
call edi
cmp dword [0x1005b9c0], 1
jne 0x100168d1
push 0
push 0
push 0
push 0x1000d350
push 0
push 0
call edi
cmp dword [0x1005b9b8], 1
jne 0x100168eb
push 0
push 0
push 0
push 0x1000cd40
push 0
push 0
call edi
cmp dword [0x1005b9c4], 1
jne 0x10016905
push 0
push 0
push 0
push 0x10010590
push 0
push 0
call edi
cmp dword [0x1005b9c8], 1
jne 0x1001691f
push 0
push 0
push 0
push 0x10011c10
push 0
push 0
call edi
cmp dword [0x1005b9cc], 1
jne 0x1001695b
push 0
push 0
push 0
push 0x1000ebb0
push 0
push 0
call edi
push 0
push 0
push 0
push 0x1000f360
push 0
push 0
call edi
push 0
push 0
push 0
push 0x1000f7d0
push 0
push 0
call edi
cmp dword [0x1005b9d4], 1
jne 0x10016975
push 0
push 0
push 0
push 0x100130d0
push 0
push 0
call edi
cmp dword [0x1005b9d8], 0
jne 0x1001698f
push 0
push 0
push 0
push 0x10013990
push 0
push 0
call edi
cmp dword [0x1005b9dc], 1
jne 0x100169a9
push 0
push 0
push 0
push 0x100031f0
push 0
push 0
call edi
cmp dword [0x1005b9e4], 1
jne 0x100169c3
push 0
push 0
push 0
push 0x100013e0
push 0
push 0
call edi
cmp dword [0x1005b970], 1
jne 0x100169d1
call fcn.10018880
cmp dword [0x1005b988], 0
jne 0x100169eb
push 0
push 0
push 0
push 0x100199c0
push 0
push 0
call edi
cmp dword [0x1005b9f4], 1
jne 0x10016a05
push 0
push 0
push 0
push 0x10019da0
push 0
push 0
call edi
cmp dword [0x1005b9e8], 1
jne 0x10016a1f
push 0
push 0
push 0
push 0x100058e0
push 0
push 0
call edi
cmp dword [0x1005b984], 1
jne 0x10016a39
push 0
push 0
push 0
push 0x10013d00
push 0
push 0
call edi
cmp dword [0x1005b924], 1
jne 0x10016abe
mov eax, 0x7dbe6ac
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov ecx, eax
mov eax, dword [0x1005b90c]
movups xmm0, xmmword [eax]
mov eax, 0x69216c
mov edx, eax
movups xmmword [ecx], xmm0
mov ecx, dword [0x1005b910]
mov dword [eax], 0
mov byte [eax + 4], 0
mov eax, dword [ecx]
mov dword [edx], eax
movzx eax, byte [ecx + 4]
xor ecx, ecx
mov byte [edx + 4], al
mov eax, 0x7dbe6c0
mov edx, eax
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov word [eax + 0xc], cx
mov byte [eax + 0xe], cl
mov ecx, dword [0x1005b914]
movq xmm0, qword [ecx]
movq qword [edx], xmm0
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov ax, word [ecx + 0xc]
mov word [edx + 0xc], ax
movzx eax, byte [ecx + 0xe]
mov byte [edx + 0xe], al
cmp dword [0x1005b928], 1
jne 0x10016ad8
push 0
push 0
push 0
push 0x1001a960
push 0
push 0
call edi
cmp dword [0x1005b9fc], 1
jne 0x10016b01
mov eax, 0x693ff1
xor ecx, ecx
mov dword [eax], ecx
mov word [eax + 4], cx
mov ecx, eax
mov eax, dword [str.Player]
mov dword [ecx], eax
mov ax, word [0x1004c714]
mov word [ecx + 4], ax
cmp dword [0x1005b93c], 1
jne 0x10016b35
cmp dword [0x1005b91c], 0
jne 0x10016b35
push 0
push 0
push 0
push 0x1001a420
push 0
push 0
call edi
push 0
push 0
push 0
push 0x1001a750
push 0
push 0
call edi
cmp dword [0x1005b96c], 1
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jne 0x10016b4c
push dword [0x1005b8f4]
call esi
cmp dword [0x1005b968], 1
jne 0x10016b5c
push 0x10050958
call esi
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0xc
call fcn.10016b80
int3