Function at 0x413090
Capabilities:
Create thread
Encode data using xor
Get graphical window text
Set file attributes
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59a646
mov eax, dword fs:[0]
push eax
sub esp, 0x270
mov eax, dword [0x6d48e0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ecx, ecx
mov dword [ebp - 0x124], 0x5aa46c
mov dword [ebp - 0x118], ecx
xor eax, eax
lea ecx, [ecx + ecx*4]
shl ecx, 2
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x120], ecx
lea eax, [eax + eax*4]
shl eax, 2
push ecx
push eax
call dword [sym.imp.USER32.dll_WindowFromPoint]
push 0xe1
lea ecx, [ebp - 0x110]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
call fcn.00411610
mov edi, dword [ebp - 0x124]
mov ebx, dword [ebp - 0x124]
add ebx, 0x14
cmp byte [edi + 0x13], 0
je 0x413165
mov esi, dword [edi + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41315c
sub ebx, ecx
nop
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + edi + 7]
xor al, byte [ebx + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [edi + 0xf]
jb 0x413140
mov eax, dword [edi + 0xf]
mov ebx, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push ebx
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa488
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4131e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4131dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4131c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa4a4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413265
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41325c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413240
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa4c4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4132e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4132dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4132c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa4e4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413365
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41335c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413340
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa508
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4133e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4133dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4133c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa528
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413465
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41345c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413440
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa544
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4134e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4134dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4134c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa560
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413565
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41355c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413540
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa57c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4135e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4135dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4135c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa598
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413665
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41365c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413640
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa5b4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4136e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4136dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4136c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa5d0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413765
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41375c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413740
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa5ec
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4137e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4137dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4137c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa60c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413865
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41385c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413840
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa62c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4138e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4138dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4138c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa64c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413965
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41395c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413940
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa668
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4139e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4139dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4139c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa684
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413a65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x413a5c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413a40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa6a0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413ae5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x413adc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413ac0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa6bc
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413b65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x413b5c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413b40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa6d8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413be5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x413bdc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413bc0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa6f4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413c65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x413c5c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413c40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa710
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413ce5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x413cdc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413cc0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa72c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413d65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x413d5c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413d40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa748
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413de5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x413ddc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413dc0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa764
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413e65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x413e5c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413e40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa780
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413ee5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x413edc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413ec0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa79c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413f65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x413f5c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413f40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa7b8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x413fe5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x413fdc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x413fc0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa7d4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414065
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41405c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414040
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa7f0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4140e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4140dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4140c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa80c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414165
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41415c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414140
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa828
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4141e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4141dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4141c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa844
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414265
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41425c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414240
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa864
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4142e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4142dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4142c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa884
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414365
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41435c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414340
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa8a4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4143e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4143dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4143c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa8c0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414465
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41445c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414440
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa8dc
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4144e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4144dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4144c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa8f8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414565
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41455c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414540
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa914
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4145e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4145dc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4145c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa930
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414665
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41465c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414640
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa94c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4146e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4146dc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4146c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa968
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414765
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41475c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414740
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa968
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4147e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4147dc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4147c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa984
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414865
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41485c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414840
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa9a0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4148e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4148dc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4148c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa9bc
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414965
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41495c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414940
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa9d8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4149e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4149dc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4149c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aa9f4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414a65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x414a5c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414a40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aaa10
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414ae5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x414adc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414ac0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aaa2c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414b65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x414b5c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414b40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aaa48
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414be5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x414bdc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414bc0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aaa64
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414c65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x414c5c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414c40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aaa80
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414ce5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x414cdc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414cc0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aaa9c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414d65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x414d5c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414d40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aaab8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414de5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x414ddc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414dc0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aaad4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414e65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x414e5c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414e40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aaaf0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414ee5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x414edc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414ec0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aab0c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414f65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x414f5c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414f40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aab28
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x414fe5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x414fdc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x414fc0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], str._xSk
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x415065
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41505c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x415040
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aab68
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4150e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4150dc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4150c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x4183c8
mov dword [ebp - 0x114], 0x5aab88
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x415165
mov dword [ebp - 0x118], 0x5ab6a8
mov edi, dword [ebp - 0x118]
mov ebx, dword [ebp - 0x118]
add ebx, 0x14
mov dword [ebp - 0x11c], ebx
cmp byte [edi + 0x13], 0
je 0x41843c
mov esi, dword [edi + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x118], ecx
test esi, esi
je 0x41842d
sub ebx, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + edi + 7]
xor al, byte [ebx + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x118]
cmp edx, dword [edi + 0xf]
jb 0x418411
mov eax, dword [edi + 0xf]
mov ebx, ecx
mov dword [ebp - 0x11c], ecx
mov byte [ecx + eax], 0
mov dword [ebp - 0x118], 0x5ab6c8
mov esi, dword [ebp - 0x118]
mov edi, dword [ebp - 0x118]
add edi, 0x14
mov dword [ebp - 0x114], esi
cmp byte [esi + 0x13], 0
je 0x4184bc
mov esi, dword [esi + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x118], ecx
test esi, esi
mov esi, dword [ebp - 0x114]
je 0x4184b3
mov ebx, eax
sub edi, ebx
lea esp, [esp]
mov eax, edx
lea ecx, [edx + ebx]
and eax, 7
inc edx
mov al, byte [eax + esi + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
cmp edx, dword [esi + 0xf]
jb 0x418490
mov ebx, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x118]
mov eax, dword [esi + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp byte [eax + 6], 0xea
jne 0x4184dd
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x6e51d4], 1
jne 0x418792
mov dword [ebp - 0x118], 0x5a8eb4
mov ebx, dword [ebp - 0x118]
mov edi, dword [ebp - 0x118]
add edi, 0x14
cmp byte [ebx + 0x13], 0
je 0x418555
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x118], ecx
test esi, esi
je 0x41854c
sub edi, ecx
lea ecx, [ecx]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x118]
cmp edx, dword [ebx + 0xf]
jb 0x418530
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
push 1
push 0x40
push 8
push edi
lea ecx, [ebp - 0x1d4]
call fcn.0040c3d0
mov dword [ebp - 0x118], 0x5ab6ec
mov edi, dword [ebp - 0x118]
mov ebx, dword [ebp - 0x118]
add ebx, 0x14
mov dword [ebp - 4], 0
cmp byte [edi + 0x13], 0
je 0x4185d6
mov esi, dword [edi + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x118], ecx
test esi, esi
je 0x4185cd
sub ebx, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + edi + 7]
xor al, byte [ebx + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x118]
cmp edx, dword [edi + 0xf]
jb 0x4185b1
mov eax, dword [edi + 0xf]
mov ebx, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x1d4]
push ebx
push eax
call fcn.0040ae60
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040ae60
mov edi, dword [sym.imp.MSVCR120.dll_fclose]
lea esi, [ebp - 0x1d0]
add esp, 0x10
cmp dword [ebp - 0x180], 0
jne 0x418619
xor esi, esi
jmp 0x41863d
lea ecx, [ebp - 0x1d0]
call fcn.00409a30
push dword [ebp - 0x180]
xor ecx, ecx
test al, al
cmove esi, ecx
call edi
xor ecx, ecx
add esp, 4
test eax, eax
cmovne esi, ecx
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 0x184], 0
mov byte [ebp - 0x18b], 0
call dword [sym.imp.MSVCP120.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void_]
mov eax, dword [0x6dc1e8]
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x190], 0
test esi, esi
jne 0x418698
mov eax, dword [ebp - 0x1d4]
lea ecx, [ebp - 0x1d4]
push esi
push 2
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP120.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x60]
mov dword [ebp + ecx - 0x1d8], eax
mov ecx, dword [ebp - 0x180]
mov dword [ebp - method.std::basic_filebuf_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
test ecx, ecx
je 0x41870e
mov eax, dword [ebp - 0x1c4]
lea edx, [ebp - 0x18c]
cmp dword [eax], edx
jne 0x41870e
push dword [ebp - 0x194]
mov eax, dword [ebp - 0x198]
lea ecx, [ebp - 0x1d0]
push eax
push eax
call dword [sym.imp.MSVCP120.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char___char___char__]
mov ecx, dword [ebp - 0x180]
cmp byte [ebp - 0x184], 0
je 0x41876e
test ecx, ecx
je 0x418735
lea ecx, [ebp - 0x1d0]
call fcn.00409a30
push dword [ebp - 0x180]
call edi
add esp, 4
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 0x184], 0
mov byte [ebp - 0x18b], 0
call dword [sym.imp.MSVCP120.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void_]
mov eax, dword [0x6dc1e8]
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x190], 0
lea ecx, [ebp - 0x1d0]
call dword [sym.imp.MSVCP120.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x1cc]
call dword [sym.imp.MSVCP120.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVCP120.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
cmp dword [0x6e51e4], 1
jne 0x418a8a
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.MSVCR120.dll__time64]
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.MSVCR120.dll__localtime64]
mov dword [ebp - 0x118], 0x5a8f00
add esp, 8
mov edi, dword [ebp - 0x118]
mov ebx, dword [ebp - 0x118]
add ebx, 0x14
mov dword [ebp - 0x120], eax
cmp byte [edi + 0x13], 0
je 0x41882a
mov esi, dword [edi + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x118], ecx
test esi, esi
je 0x418821
sub ebx, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + edi + 7]
xor al, byte [ebx + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x118]
cmp edx, dword [edi + 0xf]
jb 0x418805
mov eax, dword [edi + 0xf]
mov ebx, ecx
mov byte [ecx + eax], 0
push 1
push 0x40
push 8
push ebx
lea ecx, [ebp - 0x27c]
call fcn.0040c3d0
mov dword [ebp - 0x118], 0x5a8f18
mov edi, dword [ebp - 0x118]
mov ebx, dword [ebp - 0x118]
add ebx, 0x14
mov dword [ebp - 4], 1
cmp byte [edi + 0x13], 0
je 0x4188ab
mov esi, dword [edi + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x118], ecx
test esi, esi
je 0x4188a2
sub ebx, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + edi + 7]
xor al, byte [ebx + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x118]
cmp edx, dword [edi + 0xf]
jb 0x418886
mov eax, dword [edi + 0xf]
mov ebx, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x27c]
push ebx
push eax
call fcn.0040ae60
push dword [ebp - 0x120]
call dword [sym.imp.MSVCR120.dll_asctime]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.0040ae60
mov dword [ebp - 0x118], 0x5ab710
add esp, 0x14
mov edi, dword [ebp - 0x118]
mov ebx, dword [ebp - 0x118]
add ebx, 0x14
cmp byte [edi + 0x13], 0
je 0x418938
mov esi, dword [edi + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x118], ecx
test esi, esi
je 0x41892f
sub ebx, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + edi + 7]
xor al, byte [ebx + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x118]
cmp edx, dword [edi + 0xf]
jb 0x418913
mov eax, dword [edi + 0xf]
mov ebx, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x27c]
push ebx
push eax
call fcn.0040ae60
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.0040ae60
mov dword [ebp - 0x118], 0x5a8f60
add esp, 0x10
mov edi, dword [ebp - 0x118]
mov ebx, dword [ebp - 0x118]
add ebx, 0x14
cmp byte [edi + 0x13], 0
je 0x4189c5
mov esi, dword [edi + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x118], ecx
test esi, esi
je 0x4189bc
sub ebx, ecx
lea ebx, [ebx]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + edi + 7]
xor al, byte [ebx + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x118]
cmp edx, dword [edi + 0xf]
jb 0x4189a0
mov eax, dword [edi + 0xf]
mov ebx, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x27c]
push ebx
push eax
call fcn.0040ae60
add esp, 8
lea ecx, [ebp - 0x278]
call fcn.00409ff0
test eax, eax
jne 0x418a02
push eax
mov eax, dword [ebp - 0x27c]
lea ecx, [ebp - 0x27c]
push 2
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP120.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
mov dword [ebp - 0x118], 0x5a8f00
mov ebx, dword [ebp - 0x118]
mov edi, dword [ebp - 0x118]
add edi, 0x14
cmp byte [ebx + 0x13], 0
je 0x418a6a
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x118], ecx
test esi, esi
je 0x418a61
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x118]
cmp edx, dword [ebx + 0xf]
jb 0x418a45
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
push 2
push edi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [ebp - 0x21c]
call fcn.0040c4e0
lea ecx, [ebp - 0x21c]
call dword [sym.imp.MSVCP120.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov eax, dword [0x6e51d8]
push 0
cmp eax, 1
jne 0x418abd
push 0
push 0
push 0x413010
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
push 0xbb8
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp eax, 2
jne 0x418ae9
push 0
push 0
push 0x412f90
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x1f4
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp eax, 3
jne 0x418b15
push 0
push 0
push 0x42ab80
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
push 0xbb8
call eax
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp eax, 4
jne 0x418bb2
push 0
push 0
push 0x411780
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x118], 0x5ab734
mov ebx, dword [ebp - 0x118]
mov edi, dword [ebp - 0x118]
add edi, 0x14
cmp byte [ebx + 0x13], 0
je 0x418b95
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x118], ecx
test esi, esi
je 0x418b8c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x118]
cmp edx, dword [ebx + 0xf]
jb 0x418b70
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
push 0x200010
push edi
lea eax, [ebp - 0x110]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
test eax, eax
jne 0x418ab7
call dword [sym.imp.KERNEL32.dll_ExitProcess]