Function at 0x1000fee0
Capabilities:
Create thread
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10041b6e
mov eax, dword fs:[0]
push eax
sub esp, 0x164
push esi
mov eax, dword [0x1005b034]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp byte [0x10176778], 0
je 0x1000ffa8
mov eax, dword [0x101774e4]
test eax, eax
jne 0x1000ff36
mov dword [0x10177274], eax
mov dword [0x10177278], eax
mov word [0x1017727c], ax
mov byte [0x1017727e], al
jmp 0x1000ff5b
mov ecx, dword [eax]
mov dword [0x10177274], ecx
mov edx, dword [eax + 4]
mov dword [0x10177278], edx
mov cx, word [eax + 8]
mov word [0x1017727c], cx
mov dl, byte [eax + 0xa]
mov byte [0x1017727e], dl
mov eax, dword [0x101774e8]
test eax, eax
je 0x1000ff91
mov eax, dword [eax]
test eax, eax
je 0x1000ff91
mov ecx, dword [eax]
mov dword [0x1017727f], ecx
mov edx, dword [eax + 4]
mov dword [0x10177283], edx
mov cx, word [eax + 8]
mov word [0x10177287], cx
mov dl, byte [eax + 0xa]
mov byte [0x10177289], dl
jmp 0x1000ffa8
xor eax, eax
mov dword [0x1017727f], eax
mov dword [0x10177283], eax
mov word [0x10177287], ax
mov byte [0x10177289], al
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.MSVCR100.dll__time64]
lea ecx, [ebp - 0x18]
add esp, 4
push ecx
call dword [sym.imp.MSVCR100.dll__localtime64]
add esp, 4
push 0x80
push str..DataInterface_newui_ctscoreleftl99.OZT
mov esi, eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str..DataInterface_newui_ctscoreleftl99.OZT
lea edx, [ebp - 0xc0]
push edx
call fcn.10007190
lea eax, [ebp - 0xc0]
push str._nLocal_Time:
push eax
mov dword [ebp - 4], 0
call fcn.10002ad0
push esi
call dword [sym.imp.MSVCR100.dll_asctime]
add esp, 0xc
push eax
lea ecx, [ebp - 0xc0]
push ecx
call fcn.10002ad0
lea edx, [ebp - 0xc0]
push str.Hack_Detect:
push edx
call fcn.10002ad0
mov eax, dword [0x101768d0]
push eax
lea ecx, [ebp - 0xc0]
push ecx
call fcn.10002ad0
lea edx, [ebp - 0xc0]
push 0x1004d950
push edx
call fcn.10002ad0
lea eax, [ebp - 0xc0]
push str.Full_Path:
push eax
call fcn.10002ad0
mov ecx, dword [0x101768d4]
push ecx
lea edx, [ebp - 0xc0]
push edx
call fcn.10002ad0
lea eax, [ebp - 0xc0]
push 0x1004d950
push eax
call fcn.10002ad0
lea ecx, [ebp - 0xc0]
push str.HardwareID:
push ecx
call fcn.10002ad0
add esp, 0x40
push 0x1004d950
push ecx
lea edx, [ebp - 0xc0]
push 0x101774f0
push edx
call fcn.10007890
add esp, 0xc
push eax
call fcn.10002ad0
lea eax, [ebp - 0xc0]
push str.HardwareID_v2:
push eax
call fcn.10002ad0
add esp, 0x10
push 0x1004d950
push ecx
lea ecx, [ebp - 0xc0]
push str.NULL
push ecx
call fcn.10002ad0
add esp, 0xc
push eax
call fcn.10002ad0
lea edx, [ebp - 0xc0]
push str.Account:
push edx
call fcn.10002ad0
add esp, 0x10
push 0x1004d950
push ecx
lea eax, [ebp - 0xc0]
push 0x10177274
push eax
call fcn.10002ad0
add esp, 0xc
push eax
call fcn.10002ad0
lea ecx, [ebp - 0xc0]
push str.Character:
push ecx
call fcn.10002ad0
lea edx, [ebp - 0xc0]
push 0x1017727f
push edx
call fcn.10002ad0
lea eax, [ebp - 0xc0]
push str._n___________________________________________________
push eax
call fcn.10002ad0
add esp, 0x20
lea ecx, [ebp - 0xc0]
push ecx
call fcn.10007370
call fcn.100133f0
cmp dword [0x101768e8], 1
mov dword [0x101768e4], 0
jne 0x10010285
lea edx, [ebp - 0x170]
push edx
call fcn.10006610
push 1
mov ecx, str..Xor_PlusSplashXor_hack.bmp
lea esi, [ebp - 0x160]
mov byte [ebp - 4], 1
call fcn.100075e0
push 0
test eax, eax
jne 0x100101b9
mov eax, dword [ebp - 0x170]
mov ecx, dword [eax + 4]
push 2
lea ecx, [ebp + ecx - 0x170]
call dword [sym.imp.MSVCP100.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
jmp 0x100101d1
mov ecx, dword [ebp - 0x170]
mov ecx, dword [ecx + 4]
push 0
lea ecx, [ebp + ecx - 0x170]
call dword [sym.imp.MSVCP100.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool_]
mov edx, dword [ebp - 0x170]
mov eax, dword [edx + 4]
mov ecx, dword [ebp + eax - 0x164]
lea eax, [ebp + eax - 0x170]
and cl, 6
movsx edx, cl
neg edx
sbb edx, edx
push 0
not edx
push 0
push 0
test eax, edx
je 0x10010214
push 0x10009880
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.1002f170
jmp 0x10010233
push 0x1000fec0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.10009890
mov ecx, dword [ebp - 0x170]
mov edx, dword [ecx + 4]
lea eax, [ebp - 0x108]
mov dword [ebp - 0x10], eax
mov dword [ebp + edx - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 2
call fcn.10006830
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x170]
mov ecx, dword [eax + 4]
mov edx, dword [sym.imp.MSVCP100.dll_const_std::basic_istream_char__struct_std::char_traits_char__::vftable]
mov dword [ebp + ecx - 0x170], edx
lea ecx, [ebp - 0x108]
call dword [sym.imp.MSVCP100.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ecx + 4]
lea eax, [ebp - 0x60]
mov dword [ebp - 0x10], eax
mov dword [ebp + edx - 0xc0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 3
call fcn.10006830
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax + 4]
mov edx, dword [sym.imp.MSVCP100.dll_const_std::basic_ostream_char__struct_std::char_traits_char__::vftable]
mov dword [ebp + ecx - 0xc0], edx
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVCP100.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret