Function at 0x10007890
Capabilities:
Create thread
Get graphical window text
Set file attributes
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10013bc6
mov eax, dword fs:[0]
push eax
sub esp, 0x25c
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [sym.imp.MSVCR120.dll_strstr]
xor ebx, ebx
lea ecx, [ebx + ebx*4]
xor edi, edi
shl ecx, 2
mov dword [ebp - 0x114], ecx
lea eax, [edi + edi*4]
shl eax, 2
push ecx
push eax
call dword [sym.imp.USER32.dll_WindowFromPoint]
push 0xe1
lea ecx, [ebp - 0x110]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x110]
mov dword [0x10020454], 1
push str.Acelera
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.acelera
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Acelerador
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.acelerador
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push 0x100162d0
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Black_Box
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.BYPASS
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.ByPass
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.byPass
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Bypass
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.CAPOTE
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Capote
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.capote
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.CATASTROPHE
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Catastrophe
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push 0x100156e8
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.CHEAT
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Cheat
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push 0x10015704
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.CHEATER
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Cheater
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.cheater
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.CHEATS
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Cheats
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push 0x10015734
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.DUPAR
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Dupar
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.dupar
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.DUPER
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Duper
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.duper
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.ENGINE
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Engine
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.engine
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.EXPLORER
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Explorer
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.explorer
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.PROCESS
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Process
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push 0x100157b8
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.FREEZE
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Freeze
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.freeze
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.SPEED
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Speed
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Speed
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.HACK
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Hack
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push 0x100157f8
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.HACKER
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Hacker
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.hacker
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.HIDE
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Hide
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.hide
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.TOOLZ
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Toolz
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.toolz
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.INJECT
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Inject
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.inject
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.INJECTOR
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Injector
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push 0x10015878
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.KILL
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Kill
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.kill
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.MUPIE
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.MuPie
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.MuPie
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.OLLY
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Olly
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.olly
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.PACKAGER
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Packager
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Packager
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.PACOTES
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Pacotes
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Pacotes
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.SUSPEND
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Suspend
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.suspend
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.WILDPROXY
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Wildproxy
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push 0x1001591c
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.WPE_PRO
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Wpe_Pro
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.wpe_pro
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.XELERATOR
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Xelerator
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push 0x1001594c
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.XTRAP
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.XTrap
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.xtrap
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.XSPEED
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.XSpeed
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.xSpeed
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.xspeed
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.FUNNYZHYPER
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.FunnyZhyper
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.funnyzhyper
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.AUTOSKILL
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.AutoSkill
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.autoskill
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.AUTOKILL
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Autokill
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.autokill
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.AGILITY
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Agility
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.agility
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.TRADE
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Trade
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.trade
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.PACKET
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Packet
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push 0x10015a3c
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.AUTOIT
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.AutoIt
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push 0x10015a54
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.AUTOKEYBOARD
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.AutoKeyboard
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.autokeyboard
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.SMOLL
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Smoll
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.smoll
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.SANDBOX
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.Sandbox
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push 0x10015a9c
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
lea eax, [ebp - 0x110]
push str.SANDBOXED
push eax
call esi
add esp, 8
test eax, eax
jne 0x10008942
push 0x100163c4
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [eax + 6], 0xea
jne 0x10008969
push 1
call edi
cmp dword [0x1001f720], 1
mov ebx, dword [sym.imp.MSVCR120.dll_fclose]
jne 0x10008b39
sub esp, 8
lea ecx, [ebp - 0x268]
push 8
push str.GameGuard_Log.txt
call fcn.10001710
mov edx, str._n_H_Scan:
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x268]
call fcn.10002ae0
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x268]
call fcn.10002ae0
cmp dword [ebp - 0x214], 0
lea esi, [ebp - 0x264]
jne 0x100089cc
xor esi, esi
jmp 0x100089f0
lea ecx, [ebp - 0x264]
call fcn.10002590
push dword [ebp - 0x214]
xor ecx, ecx
test al, al
cmove esi, ecx
call ebx
xor ecx, ecx
add esp, 4
test eax, eax
cmovne esi, ecx
lea ecx, [ebp - 0x264]
mov byte [ebp - 0x218], 0
mov byte [ebp - 0x21f], 0
call dword [sym.imp.MSVCP120.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void_]
mov eax, dword [0x1001f664]
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x224], 0
test esi, esi
jne 0x10008a47
mov eax, dword [ebp - 0x268]
lea ecx, [ebp - 0x268]
push esi
push 2
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP120.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x268]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x268]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x60]
mov dword [ebp + ecx - 0x26c], eax
mov ecx, dword [ebp - 0x214]
mov dword [ebp - method.std::basic_filebuf_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
test ecx, ecx
je 0x10008ab9
mov eax, dword [ebp - 0x258]
lea edx, [ebp - 0x220]
cmp dword [eax], edx
jne 0x10008ab9
push dword [ebp - 0x228]
mov eax, dword [ebp - 0x22c]
lea ecx, [ebp - 0x264]
push eax
push eax
call dword [sym.imp.MSVCP120.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char___char___char__]
mov ecx, dword [ebp - 0x214]
cmp byte [ebp - 0x218], 0
je 0x10008b15
test ecx, ecx
je 0x10008adc
lea ecx, [ebp - 0x264]
call fcn.10002590
push dword [ebp - 0x214]
call ebx
add esp, 4
lea ecx, [ebp - 0x264]
mov byte [ebp - 0x218], 0
mov byte [ebp - 0x21f], 0
call dword [sym.imp.MSVCP120.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void_]
mov eax, dword [0x1001f664]
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x224], 0
lea ecx, [ebp - 0x264]
call dword [sym.imp.MSVCP120.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x260]
call dword [sym.imp.MSVCP120.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x208]
call dword [sym.imp.MSVCP120.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
cmp dword [0x1001f734], 1
jne 0x10008d86
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.MSVCR120.dll__time64]
add esp, 4
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.MSVCR120.dll__localtime64]
push ecx
push 8
push 0x100154c0
lea ecx, [ebp - 0x1c0]
mov esi, eax
call fcn.10001710
mov edx, str._nLocal_Time:
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x1c0]
call fcn.10002ae0
push esi
call dword [sym.imp.MSVCR120.dll_asctime]
add esp, 4
lea ecx, [ebp - 0x1c0]
mov edx, eax
call fcn.10002ae0
mov edx, str.H_Scan:
lea ecx, [ebp - 0x1c0]
call fcn.10002ae0
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x1c0]
call fcn.10002ae0
mov edx, str._n__________________
lea ecx, [ebp - 0x1c0]
call fcn.10002ae0
cmp dword [ebp - 0x16c], 0
lea esi, [ebp - 0x1bc]
jne 0x10008bea
xor esi, esi
jmp 0x10008c0e
lea ecx, [ebp - 0x1bc]
call fcn.10002590
push dword [ebp - 0x16c]
xor ecx, ecx
test al, al
cmove esi, ecx
call ebx
xor ecx, ecx
add esp, 4
test eax, eax
cmovne esi, ecx
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 0x170], 0
mov byte [ebp - 0x177], 0
call dword [sym.imp.MSVCP120.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void_]
mov eax, dword [0x1001f664]
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0
test esi, esi
jne 0x10008c65
mov eax, dword [ebp - 0x1c0]
lea ecx, [ebp - 0x1c0]
push esi
push 2
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP120.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
push 2
push 0x100154c0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c0]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x60]
mov dword [ebp + ecx - 0x1c4], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - method.std::basic_filebuf_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
test eax, eax
je 0x10008cea
mov esi, dword [ebp - 0x1b0]
lea ecx, [ebp - 0x178]
cmp dword [esi], ecx
jne 0x10008cea
mov edx, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x184]
sub edx, ecx
mov dword [esi], ecx
mov eax, dword [ebp - 0x1a0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x190]
mov dword [eax], edx
mov eax, dword [ebp - 0x16c]
cmp byte [ebp - 0x170], 0
je 0x10008d46
test eax, eax
je 0x10008d0d
lea ecx, [ebp - 0x1bc]
call fcn.10002590
push dword [ebp - 0x16c]
call ebx
add esp, 4
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 0x170], 0
mov byte [ebp - 0x177], 0
call dword [sym.imp.MSVCP120.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void_]
mov eax, dword [0x1001f664]
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0
lea ecx, [ebp - 0x1bc]
call dword [sym.imp.MSVCP120.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [eax + 4]
mov eax, dword [sym.imp.MSVCP120.dll_const_std::basic_ostream_char__struct_std::char_traits_char__::vftable]
mov dword [ebp + ecx - 0x1c0], eax
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0x1c4], eax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVCP120.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov eax, dword [0x1001f724]
push 0
cmp eax, 1
jne 0x10008db4
push 0
push 0
push 0x10007870
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x1388
call edi
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp eax, 2
jne 0x10008ddb
push 0
push 0
push 0x10007850
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x1f4
call edi
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp eax, 3
jne 0x10008deb
push 0
push 0
push 0x10001350
jmp 0x10008d9b
jmp 0x10008dae