Function at 0x10039a30
Capabilities:
Create thread
Get common file path

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x51c
push eax
mov eax, esp
mov dword [ebp - 0x30c], eax
push eax
mov eax, esp
mov dword [ebp - 0x308], eax
push eax
mov eax, esp
mov dword [ebp - 0x318], eax
push eax
mov eax, esp
mov dword [ebp - 0x314], eax
push eax
mov eax, esp
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x10], 0
lea eax, [ebp - 0x154]
sub esp, 8
mov dword [esp], 0x104
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x31c]
cmp eax, 0
seta al
mov byte [ebp - 0x31d], al
mov al, byte [ebp - 0x31d]
test al, 1
jne 0x10039ac0
jmp 0x1003a0ae
mov eax, dword [0x10068d40]
mov dword [ebp - 0x32c], eax
mov ecx, dword [0x10068d3c]
mov dword [ebp - 0x328], ecx
add eax, 0xbc5dddb8
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x324]
sub eax, 1
sub eax, 0xbc5dddb8
mov dword [ebp - 0x330], eax
mov ecx, dword [ebp - 0x330]
mov eax, dword [ebp - 0x32c]
imul eax, ecx
mov dword [ebp - 0x334], eax
mov ecx, dword [ebp - 0x328]
mov eax, dword [ebp - 0x334]
and eax, 1
cmp eax, 0
sete al
mov byte [ebp - 0x33a], al
cmp ecx, 0xa
setl cl
mov byte [ebp - 0x339], cl
xor al, 0xff
mov byte [ebp - 0x338], al
xor cl, 0xff
mov byte [ebp - 0x337], cl
mov cl, 1
xor cl, 1
mov byte [ebp - 0x336], cl
and al, 0xff
mov byte [ebp - 0x335], al
mov al, byte [ebp - 0x335]
mov ah, byte [ebp - 0x336]
mov dl, byte [ebp - 0x339]
mov ch, byte [ebp - 0x337]
mov cl, byte [ebp - 0x33a]
and cl, ah
and ch, 0xff
mov byte [ebp - 0x33d], ch
and dl, ah
mov byte [ebp - 0x33c], dl
or al, cl
mov byte [ebp - 0x33b], al
mov dl, byte [ebp - 0x336]
mov ah, byte [ebp - 0x337]
mov cl, byte [ebp - 0x338]
mov al, byte [ebp - 0x33b]
mov dh, byte [ebp - 0x33c]
mov ch, byte [ebp - 0x33d]
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x10039bd0
jmp 0x1003ac31
mov byte [ebp - 0x151], 0
mov eax, dword [0x100672c0]
mov eax, dword [eax - 0x4245d8f9]
mov dword [ebp - 0x344], eax
mov eax, dword [0x100672c4]
mov dword [ebp - 0x348], eax
mov eax, dword [ebp - 0x348]
mov eax, dword [eax - 0x4245d8f9]
mov dword [ebp - 0x350], eax
lea ecx, [0x10067e68]
lea eax, [0x10060190]
add eax, 0x26d
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.100410d0
mov eax, dword [ebp - 0x350]
add esp, 8
lea ecx, [0x10067e68]
sub esp, 4
mov dword [esp], ecx
call eax
mov dword [ebp - 0x34c], eax
lea ecx, [0x10067e4c]
lea eax, [0x10060190]
add eax, 0x232
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10040d10
mov edx, dword [ebp - 0x34c]
mov eax, dword [ebp - 0x344]
add esp, 8
lea ecx, [0x10067e4c]
sub esp, 8
mov dword [esp], edx
mov dword [esp + 4], ecx
call eax
mov ecx, eax
mov eax, dword [ebp - 0x30c]
mov dword [eax], ecx
mov eax, dword [eax]
lea edx, [ebp - 0x154]
xor ecx, ecx
lea ecx, [ebp - 0x170]
sub esp, 0x20
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
call eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0
setne al
mov byte [ebp - 0x359], al
mov eax, dword [0x10068d40]
mov ecx, dword [0x10068d3c]
mov dword [ebp - 0x358], ecx
mov ecx, eax
sub ecx, 0x33434e10
sub ecx, 1
add ecx, 0x33434e10
imul eax, ecx
mov dword [ebp - 0x354], eax
mov ecx, dword [ebp - 0x358]
mov eax, dword [ebp - 0x354]
and eax, 1
cmp eax, 0
sete al
mov byte [ebp - 0x35c], al
cmp ecx, 0xa
setl cl
mov byte [ebp - 0x35b], cl
and al, cl
mov byte [ebp - 0x35a], al
mov al, byte [ebp - 0x35a]
mov dl, byte [ebp - 0x35b]
mov cl, byte [ebp - 0x35c]
xor cl, dl
or al, cl
test al, 1
jne 0x10039d6c
jmp 0x1003ac31
mov al, byte [ebp - 0x359]
test al, 1
jne 0x10039d7f
jmp 0x10039d9c
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x364], eax
jmp 0x10039da9
xor eax, eax
mov dword [ebp - 0x364], eax
jmp 0x10039da9
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x368], eax
mov ecx, dword [0x10068d40]
mov eax, dword [0x10068d3c]
mov edx, ecx
add edx, 0xae48d580
sub edx, 1
sub edx, 0xae48d580
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
test al, 1
jne 0x10039df8
jmp 0x1003ae5f
mov eax, dword [0x10068d40]
mov dword [ebp - 0x374], eax
mov ecx, dword [0x10068d3c]
mov dword [ebp - 0x370], ecx
sub eax, 0x13a16772
sub eax, 1
add eax, 0x13a16772
mov dword [ebp - 0x36c], eax
mov ecx, dword [ebp - 0x370]
mov edx, dword [ebp - 0x36c]
mov eax, dword [ebp - 0x374]
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov byte [ebp - 0x37a], cl
mov dl, al
xor dl, 0xff
mov byte [ebp - 0x379], dl
xor cl, 0xff
mov byte [ebp - 0x378], cl
mov cl, 1
xor cl, 1
mov byte [ebp - 0x377], cl
and dl, 0xff
mov byte [ebp - 0x376], dl
and al, cl
mov byte [ebp - 0x375], al
mov al, byte [ebp - 0x378]
and al, 0xff
mov byte [ebp - 0x37b], al
mov cl, byte [ebp - 0x378]
mov al, byte [ebp - 0x379]
mov ah, byte [ebp - 0x37b]
mov dh, byte [ebp - 0x375]
mov dl, byte [ebp - 0x376]
mov bl, byte [ebp - 0x377]
mov ch, byte [ebp - 0x37a]
and ch, bl
or dl, dh
or ah, ch
xor dl, ah
mov byte [ebp - 0x37d], dl
or al, cl
xor al, 0xff
mov byte [ebp - 0x37c], al
mov al, byte [ebp - 0x377]
or al, 1
mov byte [ebp - 0x37e], al
mov al, byte [ebp - 0x37d]
mov dl, byte [ebp - 0x37e]
mov cl, byte [ebp - 0x37c]
and cl, dl
or al, cl
test al, 1
jne 0x10039efd
jmp 0x1003ae7a
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x158], eax
mov eax, dword [0x10068d40]
mov dword [ebp - 0x38c], eax
mov ecx, dword [0x10068d3c]
mov dword [ebp - 0x388], ecx
add eax, 0x153e5f0f
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x38c]
mov ecx, dword [ebp - 0x384]
sub ecx, 1
sub ecx, 0x153e5f0f
imul eax, ecx
mov dword [ebp - 0x390], eax
mov ecx, dword [ebp - 0x388]
mov eax, dword [ebp - 0x390]
and eax, 1
cmp eax, 0
sete al
mov byte [ebp - 0x393], al
cmp ecx, 0xa
setl cl
mov byte [ebp - 0x392], cl
and al, cl
mov byte [ebp - 0x391], al
mov cl, byte [ebp - 0x392]
mov al, byte [ebp - 0x393]
xor al, cl
mov byte [ebp - 0x394], al
mov cl, byte [ebp - 0x394]
mov al, byte [ebp - 0x391]
or al, cl
mov byte [ebp - 0x395], al
mov al, byte [ebp - 0x395]
test al, 1
jne 0x10039fb3
jmp 0x1003ae7a
mov eax, dword [0x10068d40]
mov dword [ebp - 0x3a0], eax
mov eax, dword [0x10068d3c]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x3a0]
mov ecx, eax
add ecx, 0x4cd24be
sub ecx, 1
sub ecx, 0x4cd24be
imul eax, ecx
and eax, 1
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x3a4]
cmp ecx, 0
sete cl
cmp eax, 0xa
setl al
mov byte [ebp - 0x3ab], al
mov ah, cl
xor ah, 0xff
mov byte [ebp - 0x3aa], ah
xor al, 0xff
mov byte [ebp - 0x3a9], al
mov dl, 1
xor dl, 1
mov byte [ebp - 0x3a8], dl
and ah, 0xff
mov byte [ebp - 0x3a7], ah
and cl, dl
mov byte [ebp - 0x3a6], cl
and al, 0xff
mov byte [ebp - 0x3a5], al
mov cl, byte [ebp - 0x3a5]
mov ah, byte [ebp - 0x3a6]
mov al, byte [ebp - 0x3a7]
mov ch, byte [ebp - 0x3a8]
mov dl, byte [ebp - 0x3ab]
and dl, ch
or al, ah
or cl, dl
xor al, cl
mov byte [ebp - 0x3ac], al
mov cl, byte [ebp - 0x3a8]
mov dl, byte [ebp - 0x3a9]
mov al, byte [ebp - 0x3aa]
or al, dl
xor al, 0xff
or cl, 1
and al, cl
mov byte [ebp - 0x3ad], al
mov cl, byte [ebp - 0x3ad]
mov al, byte [ebp - 0x3ac]
or al, cl
test al, 1
jne 0x1003a0a9
jmp 0x1003ae5f
jmp 0x1003a0ae
mov eax, dword [0x10068d40]
mov dword [ebp - 0x3b4], eax
mov eax, dword [0x10068d3c]
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x3b8]
mov ecx, dword [ebp - 0x3b4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [ebp - 0x3bc], cl
cmp eax, 0xa
setl al
mov byte [ebp - 0x3bb], al
xor cl, 0xff
mov byte [ebp - 0x3ba], cl
xor al, 0xff
mov byte [ebp - 0x3b9], al
mov cl, byte [ebp - 0x3b9]
mov al, byte [ebp - 0x3ba]
mov ch, byte [ebp - 0x3bb]
mov dh, byte [ebp - 0x3bc]
mov bl, 1
xor bl, 1
mov byte [ebp - 0x3bf], bl
mov dl, al
and dl, 0xff
and dh, bl
mov ah, cl
and ah, 0xff
and ch, bl
or dl, dh
or ah, ch
xor dl, ah
mov byte [ebp - 0x3be], dl
or al, cl
xor al, 0xff
mov byte [ebp - 0x3bd], al
mov al, byte [ebp - 0x3be]
mov cl, byte [ebp - 0x3bd]
mov dl, byte [ebp - 0x3bf]
or dl, 1
and cl, dl
or al, cl
mov byte [ebp - 0x3c0], al
mov al, byte [ebp - 0x3c0]
test al, 1
jne 0x1003a181
jmp 0x1003ae8b
mov eax, dword [ebp - 0x158]
lea ecx, [ebp - 0x16c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1000e620
add esp, 8
mov eax, dword [0x100672d0]
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp - 0x3c4]
mov word [eax - 0x4245d8f9], 0x32d
lea ecx, [0x10068150]
lea eax, [0x10060190]
add eax, 0xa2c
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10050be0
add esp, 8
lea ecx, [0x10067d50]
lea eax, [0x10068150]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [0x10067d10]
lea eax, [0x10068150]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x100672c0]
add eax, 0xbdba2707
mov dword [ebp - 0x3c8], eax
mov eax, dword [ebp - 0x3c8]
mov eax, dword [eax]
mov dword [ebp - 0x3d0], eax
mov eax, dword [0x100672c4]
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3cc]
add eax, 0xbdba2707
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x3d4]
mov eax, dword [eax]
mov dword [ebp - 0x3f8], eax
lea ecx, [0x10067de8]
lea eax, [0x10060190]
add eax, 0xc7
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1003da90
mov eax, dword [ebp - 0x3f8]
add esp, 8
lea ecx, [0x10067de8]
sub esp, 4
mov dword [esp], ecx
call eax
mov dword [ebp - 0x3f4], eax
lea ecx, [0x1006816c]
lea eax, [0x10060190]
add eax, 0xa73
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10050ec0
mov edx, dword [ebp - 0x3f4]
mov eax, dword [ebp - 0x3d0]
add esp, 8
lea ecx, [0x1006816c]
sub esp, 8
mov dword [esp], edx
mov dword [esp + 4], ecx
call eax
mov ecx, eax
mov eax, dword [ebp - 0x308]
mov dword [eax], ecx
lea ecx, [ebp - 0x300]
sub esp, 8
mov dword [esp], 0x202
mov dword [esp + 4], ecx
call dword [eax]
mov eax, dword [0x100672e8]
mov dword [eax - 0x4245d8f9], 1
lea eax, [ebp - 0x16c]
mov dword [ebp - 0x3ec], eax
lea eax, [ebp - 0x50]
mov dword [ebp - 0x3f0], eax
lea ecx, [0x1006817c]
lea eax, [0x10060190]
add eax, 0xaad
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.100512f0
mov edx, dword [ebp - 0x3f0]
mov eax, dword [ebp - 0x3ec]
add esp, 8
lea ecx, [0x1006817c]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [0x100672c0]
mov eax, dword [eax - 0x4245d8f9]
mov dword [ebp - 0x3e0], eax
mov eax, dword [0x100672c4]
mov eax, dword [eax - 0x4245d8f9]
mov dword [ebp - 0x3e8], eax
lea ecx, [0x10067e68]
lea eax, [0x10060190]
add eax, 0x26d
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.100410d0
mov eax, dword [ebp - 0x3e8]
add esp, 8
lea ecx, [0x10067e68]
sub esp, 4
mov dword [esp], ecx
call eax
mov dword [ebp - 0x3e4], eax
lea ecx, [0x1006818c]
lea eax, [0x10060190]
add eax, 0xadc
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10051550
mov edx, dword [ebp - 0x3e4]
mov eax, dword [ebp - 0x3e0]
add esp, 8
lea ecx, [0x1006818c]
sub esp, 8
mov dword [esp], edx
mov dword [esp + 4], ecx
call eax
mov ecx, eax
mov eax, dword [ebp - 0x318]
mov dword [eax], ecx
mov eax, dword [eax]
mov dword [ebp - 0x3dc], eax
lea eax, [ebp - 0x50]
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x3dc]
mov ecx, dword [ebp - 0x3d8]
xor edx, edx
sub esp, 0xc
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
call eax
mov ecx, dword [ebp - 0x314]
mov dword [ecx], eax
xor eax, eax
cmp eax, dword [ecx]
setne al
mov byte [ebp - 0x3f9], al
mov ecx, dword [0x10068d40]
mov eax, dword [0x10068d3c]
mov edx, ecx
sub edx, 0x631022c6
sub edx, 1
add edx, 0x631022c6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov cl, bl
xor cl, 0xff
mov ah, dh
xor ah, 0xff
mov dl, 1
xor dl, 1
mov al, cl
and al, 0xff
and bl, dl
mov ch, ah
and ch, 0xff
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
test al, 1
jne 0x1003a4c9
jmp 0x1003ae8b
mov al, byte [ebp - 0x3f9]
test al, 1
jne 0x1003a4dc
jmp 0x1003a827
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x400], eax
mov ecx, dword [ebp - 0x400]
mov eax, 0xb7
cmp eax, ecx
sete al
mov byte [ebp - 0x401], al
mov al, byte [ebp - 0x401]
test al, 1
jne 0x1003a511
jmp 0x1003a542
mov eax, dword [ebp - 0x314]
mov eax, dword [eax]
mov dword [ebp - 0x408], eax
mov eax, dword [ebp - 0x408]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x314]
mov dword [eax], 0
jmp 0x1003a542
mov eax, dword [ebp - 0x314]
mov eax, dword [eax]
mov dword [ebp - 0x40c], eax
mov ecx, dword [ebp - 0x40c]
xor eax, eax
cmp eax, ecx
setne al
mov byte [ebp - 0x40d], al
mov al, byte [ebp - 0x40d]
test al, 1
jne 0x1003a576
jmp 0x1003a822
xor eax, eax
lea eax, [0x1002ed20]
sub esp, 0x18
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x310]
mov ecx, dword [ebp - 0x414]
mov dword [eax], ecx
mov eax, dword [ebp - 0x310]
mov eax, dword [eax]
mov dword [ebp - 0x418], eax
mov ecx, dword [ebp - 0x418]
xor eax, eax
cmp eax, ecx
setne al
mov byte [ebp - 0x419], al
mov al, byte [ebp - 0x419]
test al, 1
jne 0x1003a5fa
jmp 0x1003a7fd
mov eax, dword [0x10068d40]
mov ecx, dword [0x10068d3c]
mov edx, eax
add edx, 0x4123d74
sub edx, 1
sub edx, 0x4123d74
imul eax, edx
and eax, 1
cmp eax, 0
sete al
mov byte [ebp - 0x41c], al
cmp ecx, 0xa
setl cl
mov byte [ebp - 0x41b], cl
xor al, 0xff
mov byte [ebp - 0x41a], al
mov cl, byte [ebp - 0x41c]
mov ah, byte [ebp - 0x41a]
mov al, byte [ebp - 0x41b]
xor al, 0xff
mov byte [ebp - 0x421], al
mov dl, 1
xor dl, 1
mov byte [ebp - 0x420], dl
and ah, 0xff
mov byte [ebp - 0x41f], ah
and cl, dl
mov byte [ebp - 0x41e], cl
and al, 0xff
mov byte [ebp - 0x41d], al
mov cl, byte [ebp - 0x420]
mov al, byte [ebp - 0x41b]
and al, cl
mov byte [ebp - 0x422], al
mov dl, byte [ebp - 0x422]
mov cl, byte [ebp - 0x41d]
mov ah, byte [ebp - 0x41e]
mov al, byte [ebp - 0x41f]
or al, ah
or cl, dl
xor al, cl
mov byte [ebp - 0x423], al
mov al, byte [ebp - 0x423]
mov dl, byte [ebp - 0x420]
mov ah, byte [ebp - 0x421]
mov cl, byte [ebp - 0x41a]
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
mov byte [ebp - 0x424], al
mov al, byte [ebp - 0x424]
test al, 1
jne 0x1003a6ef
jmp 0x1003b134
mov eax, dword [ebp - 0x310]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xc], 1
mov eax, dword [0x10068d40]
mov dword [ebp - 0x430], eax
mov ecx, dword [0x10068d3c]
mov dword [ebp - 0x42c], ecx
add eax, 0xb6abf6a
sub eax, 1
mov dword [ebp - 0x428], eax
mov eax, dword [ebp - 0x428]
sub eax, 0xb6abf6a
mov dword [ebp - 0x434], eax
mov eax, dword [ebp - 0x42c]
mov edx, dword [ebp - 0x434]
mov ecx, dword [ebp - 0x430]
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
cmp eax, 0xa
setl al
mov byte [ebp - 0x43b], al
mov ah, cl
xor ah, 0xff
mov byte [ebp - 0x43a], ah
xor al, 0xff
mov byte [ebp - 0x439], al
mov dl, 1
xor dl, 1
mov byte [ebp - 0x438], dl
and ah, 0xff
mov byte [ebp - 0x437], ah
and cl, dl
mov byte [ebp - 0x436], cl
and al, 0xff
mov byte [ebp - 0x435], al
mov dl, byte [ebp - 0x438]
mov ah, byte [ebp - 0x439]
mov cl, byte [ebp - 0x43a]
mov ch, byte [ebp - 0x435]
mov bl, byte [ebp - 0x436]
mov al, byte [ebp - 0x437]
mov dh, byte [ebp - 0x43b]
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
mov byte [ebp - 0x43c], al
mov al, byte [ebp - 0x43c]
test al, 1
jne 0x1003a7f8
jmp 0x1003b134
jmp 0x1003aa9f
mov eax, dword [ebp - 0x314]
mov eax, dword [eax]
mov dword [ebp - 0x440], eax
mov eax, dword [ebp - 0x440]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1003a822
jmp 0x1003a827
mov eax, dword [0x10068d40]
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x444]
mov ecx, dword [0x10068d3c]
mov dword [ebp - 0x44c], ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [ebp - 0x448], eax
mov ecx, dword [ebp - 0x448]
mov eax, dword [ebp - 0x444]
imul eax, ecx
and eax, 1
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x44c]
mov ecx, dword [ebp - 0x450]
cmp ecx, 0
sete cl
mov byte [ebp - 0x452], cl
cmp eax, 0xa
setl al
mov byte [ebp - 0x451], al
mov dl, byte [ebp - 0x451]
mov cl, byte [ebp - 0x452]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [ebp - 0x453], al
mov al, byte [ebp - 0x453]
test al, 1
jne 0x1003a8ba
jmp 0x1003ae48
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xc], eax
mov eax, dword [0x10068d40]
mov dword [ebp - 0x458], eax
mov eax, dword [ebp - 0x458]
mov ecx, dword [0x10068d3c]
mov dword [ebp - 0x460], ecx
add eax, 0xfa06ddb2
sub eax, 1
mov dword [ebp - 0x45c], eax
mov eax, dword [ebp - 0x460]
mov ecx, dword [ebp - 0x458]
mov edx, dword [ebp - 0x45c]
sub edx, 0xfa06ddb2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
mov byte [ebp - 0x462], cl
cmp eax, 0xa
setl al
mov byte [ebp - 0x461], al
mov cl, byte [ebp - 0x461]
mov al, byte [ebp - 0x462]
and al, cl
mov byte [ebp - 0x463], al
mov al, byte [ebp - 0x463]
mov dl, byte [ebp - 0x461]
mov cl, byte [ebp - 0x462]
xor cl, dl
or al, cl
mov byte [ebp - 0x464], al
mov al, byte [ebp - 0x464]
test al, 1
jne 0x1003a964
jmp 0x1003ae48
mov eax, dword [0x10068d40]
mov dword [ebp - 0x470], eax
mov ecx, dword [0x10068d3c]
mov dword [ebp - 0x46c], ecx
add eax, 0x64d55db5
sub eax, 1
sub eax, 0x64d55db5
mov dword [ebp - 0x468], eax
mov ecx, dword [ebp - 0x468]
mov eax, dword [ebp - 0x470]
imul eax, ecx
mov dword [ebp - 0x474], eax
mov eax, dword [ebp - 0x474]
and eax, 1
cmp eax, 0
sete al
mov byte [ebp - 0x475], al
mov eax, dword [ebp - 0x46c]
cmp eax, 0xa
setl al
mov byte [ebp - 0x476], al
mov dl, byte [ebp - 0x476]
mov cl, byte [ebp - 0x475]
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov byte [ebp - 0x477], al
mov al, byte [ebp - 0x477]
test al, 1
jne 0x1003a9f7
jmp 0x1003ae70
mov eax, dword [0x10068d40]
mov dword [ebp - 0x484], eax
mov ecx, dword [0x10068d3c]
mov dword [ebp - 0x480], ecx
sub eax, 0xecef850a
sub eax, 1
add eax, 0xecef850a
mov dword [ebp - 0x47c], eax
mov ecx, dword [ebp - 0x47c]
mov eax, dword [ebp - 0x484]
imul eax, ecx
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0x488]
and eax, 1
mov dword [ebp - 0x48c], eax
mov eax, dword [ebp - 0x48c]
cmp eax, 0
sete al
mov byte [ebp - 0x48d], al
mov al, byte [ebp - 0x48d]
mov ecx, dword [ebp - 0x480]
cmp ecx, 0xa
setl cl
mov byte [ebp - 0x48f], cl
and al, cl
mov byte [ebp - 0x48e], al
mov al, byte [ebp - 0x48e]
mov dl, byte [ebp - 0x48f]
mov cl, byte [ebp - 0x48d]
xor cl, dl
or al, cl
test al, 1
jne 0x1003aa9a
jmp 0x1003ae70
jmp 0x1003aa9f
mov eax, dword [0x10068d40]
mov ecx, dword [0x10068d3c]
mov dword [ebp - 0x498], ecx
mov ecx, eax
add ecx, 0x570fefaf
sub ecx, 1
sub ecx, 0x570fefaf
imul eax, ecx
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0x498]
mov eax, dword [ebp - 0x494]
and eax, 1
cmp eax, 0
sete al
mov byte [ebp - 0x49b], al
cmp ecx, 0xa
setl cl
mov byte [ebp - 0x49a], cl
xor al, 0xff
mov byte [ebp - 0x499], al
mov al, byte [ebp - 0x49a]
xor al, 0xff
mov byte [ebp - 0x49c], al
mov al, byte [ebp - 0x49c]
mov cl, byte [ebp - 0x49b]
mov ah, byte [ebp - 0x499]
mov dl, 1
xor dl, 1
mov byte [ebp - 0x4a0], dl
and ah, 0xff
mov byte [ebp - 0x49f], ah
and cl, dl
mov byte [ebp - 0x49e], cl
and al, 0xff
mov byte [ebp - 0x49d], al
mov dl, byte [ebp - 0x4a0]
mov ah, byte [ebp - 0x49c]
mov cl, byte [ebp - 0x499]
mov ch, byte [ebp - 0x49d]
mov bl, byte [ebp - 0x49e]
mov al, byte [ebp - 0x49f]
mov dh, byte [ebp - 0x49a]
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 1
and cl, dl
or al, cl
mov byte [ebp - 0x4a1], al
mov al, byte [ebp - 0x4a1]
test al, 1
jne 0x1003ab94
jmp 0x1003ae75
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x4ac], eax
mov eax, dword [0x10068d40]
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x4a8]
mov ecx, dword [0x10068d3c]
mov dword [ebp - 0x4b4], ecx
xor edx, edx
sub edx, 1
mov ecx, eax
add ecx, edx
imul eax, ecx
and eax, 1
cmp eax, 0
sete al
mov byte [ebp - 0x4ad], al
mov al, byte [ebp - 0x4ad]
mov ecx, dword [ebp - 0x4b4]
cmp ecx, 0xa
setl cl
mov byte [ebp - 0x4b6], cl
and al, cl
mov byte [ebp - 0x4b5], al
mov al, byte [ebp - 0x4b5]
mov dl, byte [ebp - 0x4b6]
mov cl, byte [ebp - 0x4ad]
xor cl, dl
or al, cl
mov byte [ebp - 0x4b7], al
mov al, byte [ebp - 0x4b7]
test al, 1
jne 0x1003ac24
jmp 0x1003ae75
mov eax, dword [ebp - 0x4ac]
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov eax, dword [0x10068d40]
mov dword [ebp - 0x4bc], eax
mov eax, dword [ebp - 0x4bc]
mov ecx, dword [0x10068d3c]
mov dword [ebp - 0x4c4], ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
mov dword [ebp - 0x4c0], eax
mov ecx, dword [ebp - 0x4c0]
mov eax, dword [ebp - 0x4bc]
imul eax, ecx
mov dword [ebp - 0x4c8], eax
mov eax, dword [ebp - 0x4c8]
and eax, 1
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp - 0x4cc]
cmp eax, 0
sete al
mov byte [ebp - 0x4cd], al
mov cl, byte [ebp - 0x4cd]
mov eax, dword [ebp - 0x4c4]
cmp eax, 0xa
setl dl
mov al, cl
and al, dl
xor cl, dl
or al, cl
test al, 1
jne 0x1003acb8
jmp 0x1003b160
mov byte [ebp - 0x151], 0
mov eax, dword [0x100672c0]
mov eax, dword [eax - 0x4245d8f9]
mov dword [ebp - 0x4d8], eax
mov eax, dword [0x100672c4]
add eax, 0xbdba2707
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x4d4]
mov eax, dword [eax]
mov dword [ebp - 0x4e0], eax
lea ecx, [0x10067e68]
lea eax, [0x10060190]
add eax, 0x26d
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.100410d0
mov eax, dword [ebp - 0x4e0]
add esp, 8
lea ecx, [0x10067e68]
sub esp, 4
mov dword [esp], ecx
call eax
mov dword [ebp - 0x4dc], eax
lea ecx, [0x10067e4c]
lea eax, [0x10060190]
add eax, 0x232
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10040d10
mov edx, dword [ebp - 0x4dc]
mov eax, dword [ebp - 0x4d8]
add esp, 8
lea ecx, [0x10067e4c]
sub esp, 8
mov dword [esp], edx
mov dword [esp + 4], ecx
call eax
mov ecx, eax
mov eax, dword [ebp - 0x30c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x30c]
mov eax, dword [eax]
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp - 0x4e4]
lea edx, [ebp - 0x154]
xor ecx, ecx
lea ecx, [ebp - 0x170]
sub esp, 0x20
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
call eax
mov dword [ebp - 0x304], eax
mov ecx, dword [0x10068d40]
mov eax, dword [0x10068d3c]
mov edx, ecx
add edx, 0x7f50682a
sub edx, 1
sub edx, 0x7f50682a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov cl, bl
xor cl, 0xff
mov ah, dh
xor ah, 0xff
mov dl, 1
xor dl, 0
mov al, cl
and al, 0
and bl, dl
mov ch, ah
and ch, 0
and dh, dl
or al, bl
or ch, dh
xor al, ch
or cl, ah
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
test al, 1
jne 0x1003ae43
jmp 0x1003b160
jmp 0x10039bd0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0xc], eax
jmp 0x1003a8ba
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x158], eax
jmp 0x10039df8
jmp 0x1003a9f7
jmp 0x1003ab94
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x158], eax
jmp 0x10039efd
mov eax, dword [ebp - 0x158]
lea ecx, [ebp - 0x16c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1000e620
add esp, 8
mov eax, dword [0x100672d0]
mov word [eax - 0x4245d8f9], 0x32d
lea ecx, [0x10068150]
lea eax, [0x10060190]
add eax, 0xa2c
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10050be0
add esp, 8
lea ecx, [0x10067d50]
lea eax, [0x10068150]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [0x10067d10]
lea eax, [0x10068150]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [0x100672c0]
mov eax, dword [eax - 0x4245d8f9]
mov dword [ebp - 0x4ec], eax
mov eax, dword [0x100672c4]
mov eax, dword [eax - 0x4245d8f9]
mov dword [ebp - 0x4f0], eax
lea ecx, [0x10067de8]
lea eax, [0x10060190]
add eax, 0xc7
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1003da90
mov eax, dword [ebp - 0x4f0]
add esp, 8
lea ecx, [0x10067de8]
sub esp, 4
mov dword [esp], ecx
call eax
mov dword [ebp - 0x4f8], eax
lea ecx, [0x1006816c]
lea eax, [0x10060190]
add eax, 0xa73
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10050ec0
mov edx, dword [ebp - 0x4f8]
mov eax, dword [ebp - 0x4ec]
add esp, 8
lea ecx, [0x1006816c]
sub esp, 8
mov dword [esp], edx
mov dword [esp + 4], ecx
call eax
mov ecx, eax
mov eax, dword [ebp - 0x308]
mov dword [eax], ecx
mov eax, dword [eax]
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 0x4f4]
lea ecx, [ebp - 0x300]
sub esp, 8
mov dword [esp], 0x202
mov dword [esp + 4], ecx
call eax
mov eax, dword [0x100672e8]
mov dword [ebp - 0x4fc], eax
mov eax, dword [ebp - 0x4fc]
mov dword [eax - 0x4245d8f9], 1
lea eax, [ebp - 0x16c]
mov dword [ebp - 0x504], eax
lea eax, [ebp - 0x50]
mov dword [ebp - 0x500], eax
lea ecx, [0x1006817c]
lea eax, [0x10060190]
add eax, 0xaad
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.100512f0
mov edx, dword [ebp - 0x500]
mov eax, dword [ebp - 0x504]
add esp, 8
lea ecx, [0x1006817c]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [0x100672c0]
mov eax, dword [eax - 0x4245d8f9]
mov dword [ebp - 0x508], eax
mov eax, dword [0x100672c4]
mov eax, dword [eax - 0x4245d8f9]
mov dword [ebp - 0x510], eax
lea ecx, [0x10067e68]
lea eax, [0x10060190]
add eax, 0x26d
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.100410d0
mov eax, dword [ebp - 0x510]
add esp, 8
lea ecx, [0x10067e68]
sub esp, 4
mov dword [esp], ecx
call eax
mov dword [ebp - 0x50c], eax
lea ecx, [0x1006818c]
lea eax, [0x10060190]
add eax, 0xadc
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10051550
mov edx, dword [ebp - 0x50c]
mov eax, dword [ebp - 0x508]
add esp, 8
lea ecx, [0x1006818c]
sub esp, 8
mov dword [esp], edx
mov dword [esp + 4], ecx
call eax
mov ecx, eax
mov eax, dword [ebp - 0x318]
mov dword [eax], ecx
mov eax, dword [eax]
lea ecx, [ebp - 0x50]
xor edx, edx
sub esp, 0xc
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
call eax
mov ecx, eax
mov eax, dword [ebp - 0x314]
mov dword [eax], ecx
jmp 0x1003a181
mov eax, dword [ebp - 0x310]
mov eax, dword [eax]
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x514]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xc], 1
jmp 0x1003a6ef
mov byte [ebp - 0x151], 0
mov eax, dword [0x100672c0]
mov eax, dword [eax - 0x4245d8f9]
mov dword [ebp - 0x51c], eax
mov eax, dword [0x100672c4]
mov eax, dword [eax - 0x4245d8f9]
mov dword [ebp - 0x518], eax
lea ecx, [0x10067e68]
lea eax, [0x10060190]
add eax, 0x26d
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.100410d0
mov eax, dword [ebp - 0x518]
add esp, 8
lea ecx, [0x10067e68]
sub esp, 4
mov dword [esp], ecx
call eax
mov dword [ebp - 0x520], eax
lea ecx, [0x10067e4c]
lea eax, [0x10060190]
add eax, 0x232
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10040d10
mov edx, dword [ebp - 0x520]
mov eax, dword [ebp - 0x51c]
add esp, 8
lea ecx, [0x10067e4c]
sub esp, 8
mov dword [esp], edx
mov dword [esp + 4], ecx
call eax
mov ecx, eax
mov eax, dword [ebp - 0x30c]
mov dword [eax], ecx
mov eax, dword [eax]
lea edx, [ebp - 0x154]
xor ecx, ecx
lea ecx, [ebp - 0x170]
sub esp, 0x20
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
call eax
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x304]
jmp 0x1003acb8