Function at 0x427ddd
Capabilities:
Create thread
Encode data using xor
Get graphical window text
Set file attributes
Terminate process

Disassembly:
push 0x270
mov eax, 0x580552
call fcn.0055ddbc
xor eax, eax
mov dword [ebp - 0x120], 0x58ebdc
mov dword [ebp - 0x11c], eax
xor ecx, ecx
imul edx, eax, 0x14
mov dword [ebp - 0x118], ecx
mov dword [ebp - 0x124], edx
imul eax, ecx, 0x14
push edx
push eax
call dword [sym.imp.USER32.dll_WindowFromPoint]
push 0xe1
lea ecx, [ebp - 0x110]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
call fcn.00426a91
mov ebx, dword [ebp - 0x120]
mov edi, dword [ebp - 0x120]
add edi, 0x14
cmp byte [ebx + 0x13], 0
je 0x427e8e
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x427e85
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x427e64
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ebf8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x427f0a
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x427f01
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x427ee0
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ec14
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x427f86
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x427f7d
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x427f5c
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ec34
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x428002
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x427ff9
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x427fd8
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ec54
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x42807e
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x428075
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428054
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ec78
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4280fa
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x4280f1
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x4280d0
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ec98
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x428176
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x42816d
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x42814c
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ecb4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4281f2
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x4281e9
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x4281c8
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ecd0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x42826e
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x428265
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428244
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ecec
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4282ea
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x4282e1
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x4282c0
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ed08
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x428366
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x42835d
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x42833c
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ed24
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4283e2
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x4283d9
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x4283b8
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ed40
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x42845e
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x428455
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428434
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ed5c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4284da
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x4284d1
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x4284b0
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ed7c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x428556
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x42854d
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x42852c
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ed9c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4285d2
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x4285c9
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x4285a8
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58edbc
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x42864e
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x428645
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428624
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58edd8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4286ca
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x4286c1
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x4286a0
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58edf4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x428746
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x42873d
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x42871c
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ee10
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4287c2
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x4287b9
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428798
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ee2c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x42883e
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x428835
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428814
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], str.__nAh
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4288ba
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x4288b1
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428890
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ee64
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x428936
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x42892d
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x42890c
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ee80
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4289b2
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x4289a9
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428988
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ee9c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x428a2e
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x428a25
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428a04
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58eeb8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x428aaa
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x428aa1
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428a80
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58eed4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x428b26
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x428b1d
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428afc
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58eef0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x428ba2
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x428b99
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428b78
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ef0c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x428c1e
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x428c15
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428bf4
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ef28
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x428c9a
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x428c91
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428c70
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ef44
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x428d16
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x428d0d
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428cec
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ef60
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x428d92
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x428d89
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428d68
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], str.:OW.E4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x428e0e
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x428e05
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428de4
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58ef98
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x428e8a
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x428e81
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428e60
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58efb4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x428f06
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x428efd
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428edc
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58efd4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x428f82
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x428f79
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428f58
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58eff4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x428ffe
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x428ff5
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x428fd4
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f014
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x42907a
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x429071
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x429050
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f030
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4290f6
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x4290ed
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x4290cc
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f04c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x429172
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x429169
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x429148
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f068
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4291ee
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x4291e5
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x4291c4
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f084
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x42926a
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x429261
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x429240
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f0a0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4292e6
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x4292dd
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x4292bc
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f0bc
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x429362
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x429359
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x429338
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f0d8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4293de
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x4293d5
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x4293b4
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f0d8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x42945a
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x429451
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x429430
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f0f4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4294d6
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x4294cd
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x4294ac
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f110
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x429552
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x429549
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x429528
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f12c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4295ce
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x4295c5
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x4295a4
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f148
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x42964a
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x429641
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x429620
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f164
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4296c6
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x4296bd
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x42969c
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f180
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x429742
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x429739
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x429718
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f19c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4297be
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x4297b5
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x429794
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f1b8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x42983a
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x429831
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x429810
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f1d4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4298b6
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x4298ad
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x42988c
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f1f0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x429932
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x429929
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x429908
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f20c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4299ae
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x4299a5
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x429984
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f228
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x429a2a
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x429a21
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x429a00
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f244
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x429aa6
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x429a9d
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x429a7c
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f260
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x429b22
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x429b19
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x429af8
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f27c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x429b9e
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x429b95
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x429b74
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f298
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x429c1a
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x429c11
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x429bf0
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f2b8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x429c96
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x429c8d
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x429c6c
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f2d8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x429d12
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00562163
mov edx, eax
xor eax, eax
mov dword [ebp - 0x114], eax
pop ecx
test esi, esi
je 0x429d09
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp eax, dword [ebx + 0xf]
jb 0x429ce8
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call fcn.00561b70
pop ecx
pop ecx
test eax, eax
jne 0x42ce49
mov dword [ebp - 0x114], 0x58f2f8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x429d8e
push 0x58fe18
push 0x58fe24
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [eax + 6], 0xea
jne 0x42ce70
push 1
call edi
cmp dword [0x69682c], 1
jne 0x42ced4
push 1
push 0x40
push 8
push str.GameGuard_Log.txt
lea ecx, [ebp - 0x27c]
call fcn.0042443d
and dword [ebp - 4], 0
lea eax, [ebp - 0x27c]
push str._nH_Scan:
push eax
call fcn.0042141f
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.0042141f
add esp, 0x10
lea ecx, [ebp - 0x27c]
call fcn.00424a62
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x27c]
call fcn.00424592
cmp dword [0x69683c], 1
jne 0x42cf96
lea eax, [ebp - 0x12c]
push eax
call fcn.0056300a
lea eax, [ebp - 0x12c]
push eax
call fcn.00562d6b
pop ecx
pop ecx
push 1
push 0x40
push 8
mov ebx, 0x58dacc
lea ecx, [ebp - 0x1d4]
push ebx
mov esi, eax
call fcn.0042443d
lea eax, [ebp - 0x1d4]
mov dword [ebp - 4], 1
push str._nLocal_Time:
push eax
call fcn.0042141f
push esi
call fcn.00562b5e
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0042141f
lea eax, [ebp - 0x1d4]
push str.H_Scan:
push eax
call fcn.0042141f
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0042141f
lea eax, [ebp - 0x1d4]
push str._n__________________
push eax
call fcn.0042141f
add esp, 0x2c
lea ecx, [ebp - 0x1d4]
call fcn.00424a62
push 2
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [ebp - 0x1d4]
call fcn.00424592
mov eax, dword [0x696830]
cmp eax, 1
jne 0x42cfc0
xor ebx, ebx
push ebx
push ebx
push ebx
push 0x427d65
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0xbb8
call edi
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp eax, 2
jne 0x42cfde
xor ebx, ebx
push ebx
push ebx
push ebx
push 0x427ced
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x1f4
jmp 0x42cfb7
cmp eax, 3
jne 0x42cfef
xor ebx, ebx
push ebx
push ebx
push ebx
push 0x42ddfe
jmp 0x42cfaa
cmp eax, 4
jne 0x42d020
xor ebx, ebx
push ebx
push ebx
push ebx
push 0x426bb1
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x200010
push str.H_Scan
lea eax, [ebp - 0x110]
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x42cfb9
push 0
jmp 0x42cfba