Function at 0x410e10
Capabilities:
Create thread
Encode data using xor
Get graphical window text
Set file attributes
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x598ba6
mov eax, dword fs:[0]
push eax
sub esp, 0x270
mov eax, dword [0x6d28d0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ecx, ecx
mov dword [ebp - 0x120], 0x5a7ff4
mov dword [ebp - 0x11c], ecx
xor eax, eax
lea ecx, [ecx + ecx*4]
shl ecx, 2
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x124], ecx
lea eax, [eax + eax*4]
shl eax, 2
push ecx
push eax
call dword [sym.imp.USER32.dll_WindowFromPoint]
push 0xe1
lea ecx, [ebp - 0x110]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
call fcn.0040f160
mov edi, dword [ebp - 0x120]
mov ebx, dword [ebp - 0x120]
add ebx, 0x14
cmp byte [edi + 0x13], 0
je 0x410ee5
mov esi, dword [edi + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x410edc
sub ebx, ecx
nop
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + edi + 7]
xor al, byte [ecx + ebx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [edi + 0xf]
jb 0x410ec0
mov eax, dword [edi + 0xf]
mov ebx, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push ebx
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8010
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x410f65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x410f5c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x410f40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a802c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x410fe5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x410fdc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x410fc0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a804c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411065
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41105c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411040
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a806c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4110e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4110dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4110c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8090
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411165
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41115c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411140
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a80b0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4111e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4111dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4111c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a80cc
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411265
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41125c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411240
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a80e8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4112e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4112dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4112c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8104
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411365
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41135c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411340
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8120
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4113e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4113dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4113c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a813c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411465
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41145c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411440
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8158
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4114e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4114dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4114c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8174
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411565
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41155c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411540
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8194
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4115e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4115dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4115c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a81b4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411665
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41165c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411640
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a81d4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4116e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4116dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4116c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a81f0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411765
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41175c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411740
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a820c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4117e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4117dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4117c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8228
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411865
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41185c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411840
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8244
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4118e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4118dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4118c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], str.__nAh
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411965
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41195c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411940
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a827c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4119e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4119dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4119c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8298
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411a65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411a5c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411a40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a82b4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411ae5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411adc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411ac0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a82d0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411b65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411b5c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411b40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a82ec
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411be5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411bdc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411bc0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8308
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411c65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411c5c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411c40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8324
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411ce5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411cdc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411cc0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8340
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411d65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411d5c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411d40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a835c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411de5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411ddc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411dc0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8378
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411e65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411e5c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411e40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], str.:OW.E4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411ee5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411edc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411ec0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a83b0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411f65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411f5c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411f40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a83cc
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x411fe5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x411fdc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x411fc0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a83ec
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412065
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41205c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412040
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a840c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4120e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4120dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4120c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a842c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412165
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41215c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412140
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8448
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4121e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4121dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4121c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8464
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412265
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41225c
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412240
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8480
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4122e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4122dc
sub edi, ecx
lea esp, [esp]
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4122c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a849c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412365
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41235c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412340
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a84b8
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4123e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4123dc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4123c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a84d4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412465
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41245c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412440
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a84f0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4124e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4124dc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4124c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a84f0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412565
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41255c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412540
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a850c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4125e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4125dc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4125c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8528
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412665
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41265c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412640
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8544
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4126e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4126dc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4126c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8560
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412765
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41275c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412740
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a857c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4127e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4127dc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4127c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8598
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412865
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41285c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412840
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a85b4
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4128e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4128dc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4128c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a85d0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412965
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x41295c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412940
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a85ec
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x4129e5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x4129dc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x4129c0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8608
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412a65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412a5c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412a40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8624
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412ae5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412adc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412ac0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8640
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412b65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412b5c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412b40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a865c
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412be5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412bdc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412bc0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8678
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412c65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412c5c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412c40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8694
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412ce5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412cdc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412cc0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a86b0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412d65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412d5c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412d40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a86d0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412de5
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412ddc
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412dc0
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a86f0
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412e65
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call dword [sym.imp.MSVCR120.dll_malloc]
add esp, 4
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x114], ecx
test esi, esi
je 0x412e5c
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
inc edx
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov ecx, dword [ebp - 0x114]
cmp edx, dword [ebx + 0xf]
jb 0x412e40
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x110]
push edi
push eax
call dword [sym.imp.MSVCR120.dll_strstr]
add esp, 8
test eax, eax
jne 0x416148
mov dword [ebp - 0x114], 0x5a8710
mov ebx, dword [ebp - 0x114]
mov edi, dword [ebp - 0x114]
add edi, 0x14
cmp byte [ebx + 0x13], al
je 0x412ee5
push 0x5a9230
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [eax + 6], 0xea
jne 0x416173
push 1
call edi
cmp dword [0x6e31cc], 1
mov ebx, dword [sym.imp.MSVCR120.dll_fclose]
jne 0x41635a
push 1
push 0x40
push 8
push str.GameGuard_Log.txt
lea ecx, [ebp - 0x1d4]
call fcn.0040c3b0
lea eax, [ebp - 0x1d4]
mov dword [ebp - 4], 0
push str._nH_Scan:
push eax
call fcn.0040ae40
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x1d4]
push eax
call fcn.0040ae40
add esp, 0x10
lea esi, [ebp - 0x1d0]
cmp dword [ebp - 0x180], 0
jne 0x4161e1
xor esi, esi
jmp 0x416205
lea ecx, [ebp - 0x1d0]
call fcn.00409a10
push dword [ebp - 0x180]
xor ecx, ecx
test al, al
cmove esi, ecx
call ebx
xor ecx, ecx
add esp, 4
test eax, eax
cmovne esi, ecx
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 0x184], 0
mov byte [ebp - 0x18b], 0
call dword [sym.imp.MSVCP120.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void_]
mov eax, dword [0x6da1d8]
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x190], 0
test esi, esi
jne 0x416260
mov eax, dword [ebp - 0x1d4]
lea ecx, [ebp - 0x1d4]
push esi
push 2
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP120.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x60]
mov dword [ebp + ecx - 0x1d8], eax
mov ecx, dword [ebp - 0x180]
mov dword [ebp - method.std::basic_filebuf_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
test ecx, ecx
je 0x4162d6
mov eax, dword [ebp - 0x1c4]
lea edx, [ebp - 0x18c]
cmp dword [eax], edx
jne 0x4162d6
push dword [ebp - 0x194]
mov eax, dword [ebp - 0x198]
lea ecx, [ebp - 0x1d0]
push eax
push eax
call dword [sym.imp.MSVCP120.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char___char___char__]
mov ecx, dword [ebp - 0x180]
cmp byte [ebp - 0x184], 0
je 0x416336
test ecx, ecx
je 0x4162fd
lea ecx, [ebp - 0x1d0]
call fcn.00409a10
push dword [ebp - 0x180]
call ebx
add esp, 4
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 0x184], 0
mov byte [ebp - 0x18b], 0
call dword [sym.imp.MSVCP120.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void_]
mov eax, dword [0x6da1d8]
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x190], 0
lea ecx, [ebp - 0x1d0]
call dword [sym.imp.MSVCP120.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x1cc]
call dword [sym.imp.MSVCP120.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVCP120.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
cmp dword [0x6e31dc], 1
jne 0x4164ba
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.MSVCR120.dll__time64]
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.MSVCR120.dll__localtime64]
add esp, 8
lea ecx, [ebp - 0x27c]
mov esi, eax
push 1
push 0x40
push 8
push 0x5a6ee4
call fcn.0040c3b0
lea eax, [ebp - 0x27c]
mov dword [ebp - 4], 1
push str._nLocal_Time:
push eax
call fcn.0040ae40
push esi
call dword [sym.imp.MSVCR120.dll_asctime]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.0040ae40
lea eax, [ebp - 0x27c]
push str.H_Scan:
push eax
call fcn.0040ae40
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.0040ae40
lea eax, [ebp - 0x27c]
push str._n__________________
push eax
call fcn.0040ae40
add esp, 0x2c
lea esi, [ebp - 0x278]
cmp dword [ebp - 0x228], 0
jne 0x416417
xor esi, esi
jmp 0x41643b
lea ecx, [ebp - 0x278]
call fcn.00409a10
push dword [ebp - 0x228]
xor ecx, ecx
test al, al
cmove esi, ecx
call ebx
xor ecx, ecx
add esp, 4
test eax, eax
cmovne esi, ecx
lea ecx, [ebp - 0x278]
mov byte [ebp - 0x22c], 0
mov byte [ebp - 0x233], 0
call dword [sym.imp.MSVCP120.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void_]
mov eax, dword [0x6da1d8]
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x238], 0
test esi, esi
jne 0x416496
mov eax, dword [ebp - 0x27c]
lea ecx, [ebp - 0x27c]
push esi
push 2
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP120.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
push 2
push 0x5a6ee4
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [ebp - 0x21c]
call fcn.0040c4c0
lea ecx, [ebp - 0x21c]
call dword [sym.imp.MSVCP120.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov eax, dword [0x6e31d0]
push 0
cmp eax, 1
jne 0x4164ec
push 0
push 0
push 0x410d90
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0xbb8
call edi
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp eax, 2
jne 0x416517
push 0
push 0
push 0x410d10
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x1f4
call edi
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp eax, 3
jne 0x41652b
push 0
push 0
push 0x40d1d0
jmp 0x4164d3
cmp eax, 4
jne 0x41655e
push 0
push 0
push 0x40f2d0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x200010
push str.H_Scan
lea eax, [ebp - 0x110]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x4164e4
jmp 0x4164e6