Function at 0x411080
Capabilities:
Create thread
Encode data using xor
Get graphical window text
Set file attributes
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59ad16
mov eax, dword fs:[0]
push eax
sub esp, 0x270
mov eax, dword [0x6dd8d0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ecx, ecx
mov dword [ebp - 0x120], 0x5aba34
mov dword [ebp - 0x11c], ecx
xor eax, eax
lea ecx, [ecx + ecx*4]
shl ecx, 2
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x124], ecx
lea eax, [eax + eax*4]
shl eax, 2
push ecx
push eax
call dword [sym.imp.USER32.dll_WindowFromPoint]
push 0xe1
lea ecx, [ebp - 0x110]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
call fcn.0040f320
mov edi, dword [ebp - 0x120]
mov ebx, dword [ebp - 0x120]
add ebx, 0x14
cmp byte [edi + 0x13], 0
je 0x411155
mov esi, dword [edi + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41114c
sub ebx, ecx
nop
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + edi + 7]
xor al, byte [ebx + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [edi + 0xf]
jb 0x411130
mov eax, dword [edi + 0xf]
mov ebx, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push ebx
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5aba9c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4111d5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4111cc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4111b0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abab8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411255
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41124c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411230
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abad8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4112d5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4112cc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4112b0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abaf8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411355
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41134c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411330
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abb1c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4113d5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4113cc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4113b0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abb3c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411455
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41144c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411430
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abb58
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4114d5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4114cc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4114b0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abb74
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411555
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41154c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411530
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], str.__nAh
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4115d5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4115cc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4115b0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abbac
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411655
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41164c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411630
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abbc8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4116d5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4116cc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4116b0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abbe4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411755
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41174c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411730
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abc00
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4117d5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4117cc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4117b0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abc20
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411855
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41184c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411830
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abc40
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4118d5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4118cc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4118b0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abc60
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411955
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41194c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411930
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abc7c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4119d5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4119cc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4119b0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abc98
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411a55
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411a4c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411a30
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abcb4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411ad5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411acc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411ab0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], str.:OW.E4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411b55
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411b4c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411b30
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abcec
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411bd5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411bcc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411bb0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abd08
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411c55
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411c4c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411c30
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abd24
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411cd5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411ccc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411cb0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abd40
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411d55
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411d4c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411d30
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abd5c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411dd5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411dcc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411db0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abd78
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411e55
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411e4c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411e30
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abd94
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411ed5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411ecc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411eb0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abdb0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411f55
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411f4c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411f30
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abdcc
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411fd5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411fcc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411fb0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abde8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412055
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41204c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412030
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abe04
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4120d5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4120cc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4120b0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abe20
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412155
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41214c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412130
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abe3c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4121d5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4121cc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4121b0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abe58
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412255
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41224c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412230
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abe78
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4122d5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4122cc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4122b0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abe98
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412355
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41234c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412330
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abeb8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4123d5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4123cc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4123b0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abed4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412455
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41244c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412430
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abef0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4124d5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4124cc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4124b0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abf0c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412555
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41254c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412530
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abf28
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4125d5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4125cc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4125b0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abf44
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412655
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41264c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412630
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abf60
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4126d5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4126cc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4126b0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abf7c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412755
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41274c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412730
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abf98
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4127d5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4127cc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4127b0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abfb4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412855
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41284c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412830
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abfd0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4128d5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4128cc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4128b0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5abfec
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412955
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41294c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412930
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5ac008
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4129d5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4129cc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4129b0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5ac024
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412a55
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412a4c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412a30
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5ac040
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412ad5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412acc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412ab0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5ac05c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412b55
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412b4c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412b30
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5ac078
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412bd5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412bcc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412bb0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5ac094
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412c55
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412c4c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412c30
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5ac0b0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412cd5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412ccc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412cb0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5ac0cc
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412d55
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412d4c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412d30
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5ac0e8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412dd5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412dcc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412db0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5ac104
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412e55
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412e4c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412e30
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5ac120
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412ed5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412ecc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412eb0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5ac13c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412f55
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412f4c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412f30
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5ac158
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412fd5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412fcc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412fb0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5ac178
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413055
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41304c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413030
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5ac198
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4130d5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4130cc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4130b0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4163b8
mov dword [ebp - 0x114], 0x5ac1b8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413155
push 0x5acd84
push 0x5acd90
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [eax + 6], 0xea
jne 0x4163e3
push 1
call edi
cmp dword [0x6ee264], 1
mov ebx, dword [sym.imp.MSVCR120.dll_fclose]
jne 0x4165ce
push 1
push 0x40
push 8
push 0x5ab980
lea ecx, [ebp - 0x27c]
call fcn.0040c520
lea eax, [ebp - 0x27c]
mov dword [ebp - 4], 0
push str._nH_Scan:
push eax
call fcn.0040afa0
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.0040afa0
add esp, 0x10
lea esi, [ebp - 0x278]
cmp dword [ebp - 0x228], 0
jne 0x416451
xor esi, esi
jmp 0x416475
lea ecx, [ebp - 0x278]
call fcn.0040a080
push dword [ebp - 0x228]
xor ecx, ecx
test al, al
cmove esi, ecx
call ebx
xor ecx, ecx
add esp, 4
test eax, eax
cmovne esi, ecx
lea ecx, [ebp - 0x278]
mov byte [ebp - 0x22c], 0
mov byte [ebp - 0x233], 0
call dword [sym.imp.MSVCP120.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void_]
mov eax, dword [0x6e51ec]
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x238], 0
test esi, esi
jne 0x4164d0
mov eax, dword [ebp - 0x27c]
lea ecx, [ebp - 0x27c]
push esi
push 2
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP120.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x27c]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x60]
mov dword [ebp + ecx - 0x280], eax
cmp dword [ebp - 0x228], 0
mov dword [ebp - method.std::basic_filebuf_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
je 0x416545
lea ecx, [ebp - 0x278]
call dword [sym.imp.MSVCP120.dll_protected:_char____thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const]
lea ecx, [ebp - 0x234]
cmp eax, ecx
jne 0x416545
push dword [ebp - 0x23c]
mov eax, dword [ebp - 0x240]
lea ecx, [ebp - 0x278]
push eax
push eax
call dword [sym.imp.MSVCP120.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char___char___char__]
cmp byte [ebp - 0x22c], 0
je 0x4165aa
cmp dword [ebp - 0x228], 0
je 0x416571
lea ecx, [ebp - 0x278]
call fcn.0040a080
push dword [ebp - 0x228]
call ebx
add esp, 4
lea ecx, [ebp - 0x278]
mov byte [ebp - 0x22c], 0
mov byte [ebp - 0x233], 0
call dword [sym.imp.MSVCP120.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void_]
mov eax, dword [0x6e51ec]
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x238], 0
lea ecx, [ebp - 0x278]
call dword [sym.imp.MSVCP120.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x274]
call dword [sym.imp.MSVCP120.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x21c]
call dword [sym.imp.MSVCP120.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
cmp dword [0x6ee274], 1
jne 0x416815
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.MSVCR120.dll__time64]
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.MSVCR120.dll__localtime64]
add esp, 8
lea ecx, [ebp - 0x1d4]
mov esi, eax
push 1
push 0x40
push 8
push 0x5ab9a4
call fcn.0040c520
lea eax, [ebp - 0x1d4]
mov dword [ebp - 4], 1
push 0x5ab9a8
push eax
call fcn.0040afa0
push esi
call dword [sym.imp.MSVCR120.dll_asctime]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040afa0
lea eax, [ebp - 0x1d4]
push str.H_Scan:
push eax
call fcn.0040afa0
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040afa0
lea eax, [ebp - 0x1d4]
push 0x5ab9c8
push eax
call fcn.0040afa0
add esp, 0x2c
lea esi, [ebp - 0x1d0]
cmp dword [ebp - 0x180], 0
jne 0x41668b
xor esi, esi
jmp 0x4166af
lea ecx, [ebp - 0x1d0]
call fcn.0040a080
push dword [ebp - 0x180]
xor ecx, ecx
test al, al
cmove esi, ecx
call ebx
xor ecx, ecx
add esp, 4
test eax, eax
cmovne esi, ecx
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 0x184], 0
mov byte [ebp - 0x18b], 0
call dword [sym.imp.MSVCP120.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void_]
mov eax, dword [0x6e51ec]
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x190], 0
test esi, esi
jne 0x41670a
mov eax, dword [ebp - 0x1d4]
lea ecx, [ebp - 0x1d4]
push esi
push 2
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP120.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
push 2
push 0x5ab9f0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x60]
mov dword [ebp + ecx - 0x1d8], eax
cmp dword [ebp - 0x180], 0
mov dword [ebp - method.std::basic_filebuf_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
je 0x41678c
lea ecx, [ebp - 0x1d0]
call dword [sym.imp.MSVCP120.dll_protected:_char____thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const]
lea ecx, [ebp - 0x18c]
cmp eax, ecx
jne 0x41678c
push dword [ebp - 0x194]
mov eax, dword [ebp - 0x198]
lea ecx, [ebp - 0x1d0]
push eax
push eax
call dword [sym.imp.MSVCP120.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char___char___char__]
cmp byte [ebp - 0x184], 0
je 0x4167f1
cmp dword [ebp - 0x180], 0
je 0x4167b8
lea ecx, [ebp - 0x1d0]
call fcn.0040a080
push dword [ebp - 0x180]
call ebx
add esp, 4
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 0x184], 0
mov byte [ebp - 0x18b], 0
call dword [sym.imp.MSVCP120.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void_]
mov eax, dword [0x6e51ec]
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x190], 0
lea ecx, [ebp - 0x1d0]
call dword [sym.imp.MSVCP120.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x1cc]
call dword [sym.imp.MSVCP120.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVCP120.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov eax, dword [0x6ee268]
push 0
cmp eax, 1
jne 0x416847
push 0
push 0
push 0x410fd0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0xbb8
call edi
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp eax, 2
jne 0x416872
push 0
push 0
push 0x410f50
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x1f4
call edi
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp eax, 3
jne 0x416886
push 0
push 0
push 0x411050
jmp 0x41682e
cmp eax, 4
jne 0x4168b9
push 0
push 0
push 0x40f490
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x200010
push 0x5ab9f4
lea eax, [ebp - 0x110]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x41683f
jmp 0x416841