Function at 0x4026b0
Capabilities:
Copy file
Create directory
Create process on windows
Delete directory
Delete file
Execute command
Move file
Resolve function by parsing pe exports
Set console window title
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5c3283
mov eax, dword fs:[0]
push eax
sub esp, 0x188
mov eax, dword [0x68683c]
xor eax, esp
mov dword [esp + 0x180], eax
push ebx
push esi
push edi
mov eax, dword [0x68683c]
xor eax, esp
push eax
lea eax, [esp + 0x198]
mov dword fs:[0], eax
push 0x6546aa
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x40
push 0xaa
push 0xfa
push 1
call esi
cdq
sub eax, edx
sar eax, 1
sub eax, 0x55
push eax
xor ebx, ebx
push ebx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x7d
push eax
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov esi, eax
lea eax, [esp + 0xcc]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
mov ecx, dword [esp + 0xda]
mov edx, dword [esp + 0xdc]
sub ecx, dword [esp + 0xd6]
sub edx, dword [esp + 0xd8]
inc ecx
inc edx
mov word [esp + 0x18], cx
mov word [esp + 0x1a], dx
mov eax, dword [esp + 0x18]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SetConsoleScreenBufferSize]
call edi
mov esi, eax
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
and eax, 0xfffeffff
push eax
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_SetWindowLongA]
call fcn.004020c0
push str.C:WindowsAF
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push ebx
push str.C:WindowsAF
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
push str.C:WindowsToken.exe
call esi
push str.C:WindowsToken.mentah
call esi
push str.PointBlank.exe
call fcn.00401520
add esp, 4
push str.CB.exe
call fcn.00401520
add esp, 4
lea edi, [ebx + 0x17]
mov eax, str.C:WindowsAFToken.exe
lea esi, [esp + 0x13c]
mov dword [esp + 0x150], 0xf
mov dword [esp + 0x14c], ebx
mov byte [esp + 0x13c], bl
call fcn.00406070
mov dword [esp + 0x1a0], ebx
nop
mov ecx, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char______cdecl_std::endl_class_std::basic_ostream_char__struct_std::char_traits_char____]
mov edx, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push ecx
push ecx
push str.Downloading...
push edx
call fcn.00406470
add esp, 0xc
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
sub esp, 0x1c
mov ecx, esp
mov dword [ecx + 0x10], ebx
lea eax, [esp + 0x158]
mov dword [esp + 0x30], esp
mov dword [ecx + 0x14], 0xf
mov byte [ecx], bl
push eax
or eax, 0xffffffff
xor ebx, ebx
call fcn.00405720
call fcn.00401b70
add esp, 0x1c
test al, al
jne 0x4028b9
mov ecx, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char______cdecl_std::endl_class_std::basic_ostream_char__struct_std::char_traits_char____]
mov edx, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push ecx
push ecx
push str.Mengulangi
push edx
call fcn.00406470
add esp, 0xc
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x6544d8
call dword [sym.imp.MSVCR100.dll_system]
add esp, 4
jmp 0x402820
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x3e8
call edi
push 0x6544d8
call dword [sym.imp.MSVCR100.dll_system]
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char______cdecl_std::endl_class_std::basic_ostream_char__struct_std::char_traits_char____]
add esp, 4
push eax
push ecx
mov ecx, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.Tunggu_Sebentar...
push ecx
call fcn.00406470
add esp, 0xc
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileA]
push 0
push str.C:WindowsAFmsvcp90.dll
push str.msvcp90.dll
call esi
push 0
push str.C:WindowsAFmsvcp100.dll
push str.msvcp100.dll
call esi
push 0
push str.C:WindowsAFmsvcp100d.dll
push str.msvcp100d.dll
call esi
push 0
push str.C:WindowsAFmsvcr90.dll
push str.msvcr90.dll
call esi
push 0
push str.C:WindowsAFmsvcr100.dll
push str.msvcr100.dll
call esi
push 0
push str.C:WindowsAFmsvcr100d.dll
push str.msvcr100d.dll
call esi
push 0x7d0
call edi
push str.C:WindowsAFToken.mentah
push str.C:WindowsAFToken.exe
call dword [sym.imp.MSVCR100.dll_rename]
add esp, 8
push 0xc8
call edi
push 0x65489c
push str.C:WindowsAFToken.mentah
call dword [sym.imp.MSVCR100.dll_fopen]
push 2
push 0
push eax
mov dword [esp + 0x28], eax
call dword [sym.imp.MSVCR100.dll_fseek]
add esp, 0x14
push 0
call dword [sym.imp.MSVCR100.dll__time64]
add esp, 4
push eax
call dword [sym.imp.MSVCR100.dll_srand]
add esp, 4
mov dword [esp + 0x16c], 0xf
mov dword [esp + 0x168], ebx
mov byte [esp + 0x158], bl
mov byte [esp + 0x1a0], 1
xor edi, edi
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
xor esi, esi
call ebx
cdq
mov ecx, 0x64
idiv ecx
inc edx
cmp edx, 0x32
jl 0x4029e9
cmp edx, 0x5a
jle 0x4029f0
inc esi
cmp esi, ecx
jl 0x4029d4
xor edx, edx
cmp edi, edx
jg 0x402a23
call dword [sym.imp.MSVCR100.dll_rand]
xor edx, edx
mov ecx, 0x47
div ecx
mov ecx, 0x46
lea esi, [esp + 0x158]
mov eax, edx
xor edx, edx
div ecx
mov bl, byte [edx + 0x654501]
call fcn.00404240
inc edi
jmp 0x4029cc
xor eax, eax
mov dword [esp + 0x38], 0xf
mov dword [esp + 0x34], eax
mov byte [esp + 0x24], al
mov byte [esp + 0x1a0], 2
mov dword [esp + 0x18], eax
lea edi, [eax + 0x10]
xor esi, esi
call ebx
cdq
mov ecx, 0x64
idiv ecx
inc edx
cmp edx, 0xa
jl 0x402a5b
cmp edx, 0x32
jle 0x402a62
inc esi
cmp esi, ecx
jl 0x402a46
xor edx, edx
cmp dword [esp + 0x18], edx
jge 0x402b1f
call dword [sym.imp.MSVCR100.dll_rand]
cdq
mov ecx, 6
idiv ecx
mov eax, dword [esp + 0x34]
mov bl, byte [edx + 0x654549]
or edx, 0xffffffff
sub edx, eax
cmp edx, 1
jbe 0x402b14
lea esi, [eax + 1]
cmp esi, 0xfffffffe
ja 0x402b14
mov ecx, dword [esp + 0x38]
cmp ecx, esi
jae 0x402aee
push eax
push esi
lea eax, [esp + 0x2c]
push eax
call fcn.00406300
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
test esi, esi
je 0x402adf
cmp ecx, edi
mov ecx, dword [esp + 0x24]
jae 0x402ac6
lea ecx, [esp + 0x24]
mov byte [ecx + eax], bl
mov eax, dword [esp + 0x24]
mov dword [esp + 0x34], esi
cmp dword [esp + 0x38], edi
jae 0x402adb
lea eax, [esp + 0x24]
mov byte [eax + esi], 0
inc dword [esp + 0x18]
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
jmp 0x402a44
test esi, esi
jne 0x402aba
mov eax, dword [esp + 0x24]
mov dword [esp + 0x34], esi
cmp ecx, edi
jae 0x402b02
lea eax, [esp + 0x24]
inc dword [esp + 0x18]
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
mov byte [eax], 0
jmp 0x402a44
push str.string_too_long
call dword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const__]
xor edi, edi
mov dword [esp + 0xa8], 0xf
mov dword [esp + 0xa4], edi
mov byte [esp + 0x94], 0
mov byte [esp + 0x1a0], 3
xor esi, esi
call ebx
cdq
mov ecx, 0x64
idiv ecx
inc edx
cmp edx, 0x3c
jl 0x402b59
cmp edx, ecx
jle 0x402b60
inc esi
cmp esi, ecx
jl 0x402b45
xor edx, edx
cmp edi, edx
jge 0x402c37
call dword [sym.imp.MSVCR100.dll_rand]
cdq
mov ecx, 6
idiv ecx
mov eax, dword [esp + 0xa4]
mov bl, byte [edx + 0x654555]
or edx, 0xffffffff
sub edx, eax
cmp edx, 1
jbe 0x402b14
lea esi, [eax + 1]
cmp esi, 0xfffffffe
ja 0x402b14
mov ecx, dword [esp + 0xa8]
cmp ecx, esi
jae 0x402c0a
push eax
push esi
lea eax, [esp + 0x9c]
push eax
call fcn.00406300
mov ecx, dword [esp + 0xa8]
mov eax, dword [esp + 0xa4]
test esi, esi
je 0x402bfe
cmp ecx, 0x10
mov ecx, dword [esp + 0x94]
jae 0x402bd8
lea ecx, [esp + 0x94]
mov byte [ecx + eax], bl
cmp dword [esp + 0xa8], 0x10
mov eax, dword [esp + 0x94]
mov dword [esp + 0xa4], esi
jae 0x402bfa
lea eax, [esp + 0x94]
mov byte [esi + eax], 0
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
inc edi
jmp 0x402b43
test esi, esi
jne 0x402bc5
mov eax, dword [esp + 0x94]
mov dword [esp + 0xa4], esi
cmp ecx, 0x10
jae 0x402c28
lea eax, [esp + 0x94]
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
mov byte [eax], 0
inc edi
jmp 0x402b43
xor edi, edi
mov dword [esp + 0x70], 0xf
mov dword [esp + 0x6c], edi
mov byte [esp + 0x5c], 0
mov byte [esp + 0x1a0], 4
xor esi, esi
call ebx
cdq
mov ecx, 0x64
idiv ecx
inc edx
cmp edx, 0x28
jl 0x402c69
cmp edx, 0x50
jle 0x402c70
inc esi
cmp esi, ecx
jl 0x402c54
xor edx, edx
cmp edi, edx
jge 0x402d21
call dword [sym.imp.MSVCR100.dll_rand]
cdq
mov ecx, 6
idiv ecx
mov eax, dword [esp + 0x6c]
mov bl, byte [edx + 0x654571]
or edx, 0xffffffff
sub edx, eax
cmp edx, 1
jbe 0x402b14
lea esi, [eax + 1]
cmp esi, 0xfffffffe
ja 0x402b14
mov ecx, dword [esp + 0x70]
cmp ecx, esi
jae 0x402cfd
push eax
push esi
lea eax, [esp + 0x64]
push eax
call fcn.00406300
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x6c]
test esi, esi
je 0x402cf1
cmp ecx, 0x10
mov ecx, dword [esp + 0x5c]
jae 0x402cd7
lea ecx, [esp + 0x5c]
mov byte [ecx + eax], bl
cmp dword [esp + 0x70], 0x10
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x6c], esi
jae 0x402ced
lea eax, [esp + 0x5c]
mov byte [esi + eax], 0
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
inc edi
jmp 0x402c52
test esi, esi
jne 0x402cca
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x6c], esi
cmp ecx, 0x10
jae 0x402d12
lea eax, [esp + 0x5c]
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
mov byte [eax], 0
inc edi
jmp 0x402c52
xor edi, edi
mov dword [esp + 0x8c], 0xf
mov dword [esp + 0x88], edi
mov byte [esp + 0x78], 0
mov byte [esp + 0x1a0], 5
xor esi, esi
call ebx
cdq
mov ecx, 0x64
idiv ecx
inc edx
cmp edx, 0x28
jl 0x402d58
cmp edx, ecx
jle 0x402d5f
inc esi
cmp esi, ecx
jl 0x402d44
xor edx, edx
cmp edi, edx
jge 0x402e28
call dword [sym.imp.MSVCR100.dll_rand]
cdq
mov ecx, 6
idiv ecx
mov eax, dword [esp + 0x88]
mov bl, byte [edx + 0x654595]
or edx, 0xffffffff
sub edx, eax
cmp edx, 1
jbe 0x402b14
lea esi, [eax + 1]
cmp esi, 0xfffffffe
ja 0x402b14
mov ecx, dword [esp + 0x8c]
cmp ecx, esi
jae 0x402e01
push eax
push esi
lea eax, [esp + 0x80]
push eax
call fcn.00406300
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x88]
test esi, esi
je 0x402df5
cmp ecx, 0x10
mov ecx, dword [esp + 0x78]
jae 0x402dd5
lea ecx, [esp + 0x78]
mov byte [ecx + eax], bl
cmp dword [esp + 0x8c], 0x10
mov eax, dword [esp + 0x78]
mov dword [esp + 0x88], esi
jae 0x402df1
lea eax, [esp + 0x78]
mov byte [eax + esi], 0
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
inc edi
jmp 0x402d42
test esi, esi
jne 0x402dc8
mov eax, dword [esp + 0x78]
mov dword [esp + 0x88], esi
cmp ecx, 0x10
jae 0x402e19
lea eax, [esp + 0x78]
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
mov byte [eax], 0
inc edi
jmp 0x402d42
xor edi, edi
mov dword [esp + 0x54], 0xf
mov dword [esp + 0x50], edi
mov byte [esp + 0x40], 0
mov byte [esp + 0x1a0], 6
xor esi, esi
call ebx
cdq
mov ecx, 0x64
idiv ecx
inc edx
cmp edx, 0x3c
jl 0x402e5a
cmp edx, 0x46
jle 0x402e61
inc esi
cmp esi, ecx
jl 0x402e45
xor edx, edx
cmp edi, edx
jge 0x402f12
call dword [sym.imp.MSVCR100.dll_rand]
cdq
mov ecx, 6
idiv ecx
mov eax, dword [esp + 0x50]
mov bl, byte [edx + 0x6545b5]
or edx, 0xffffffff
sub edx, eax
cmp edx, 1
jbe 0x402b14
lea esi, [eax + 1]
cmp esi, 0xfffffffe
ja 0x402b14
mov ecx, dword [esp + 0x54]
cmp ecx, esi
jae 0x402eee
push eax
push esi
lea eax, [esp + 0x48]
push eax
call fcn.00406300
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0x50]
test esi, esi
je 0x402ee2
cmp ecx, 0x10
mov ecx, dword [esp + 0x40]
jae 0x402ec8
lea ecx, [esp + 0x40]
mov byte [eax + ecx], bl
cmp dword [esp + 0x54], 0x10
mov eax, dword [esp + 0x40]
mov dword [esp + 0x50], esi
jae 0x402ede
lea eax, [esp + 0x40]
mov byte [esi + eax], 0
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
inc edi
jmp 0x402e43
test esi, esi
jne 0x402ebb
mov eax, dword [esp + 0x40]
mov dword [esp + 0x50], esi
cmp ecx, 0x10
jae 0x402f03
lea eax, [esp + 0x40]
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
mov byte [eax], 0
inc edi
jmp 0x402e43
mov edi, 0xf
mov dword [esp + 0xc4], edi
mov dword [esp + 0xc0], 0
mov byte [esp + 0xb0], 0
push 0
mov byte [esp + 0x1a4], 7
call dword [sym.imp.MSVCR100.dll__time64]
lea ecx, [esp + 0x20]
add esp, 4
push ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], edx
call dword [sym.imp.MSVCR100.dll__localtime64]
add esp, 4
push 0x100
mov esi, eax
call fcn.005a6cb6
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 0xc]
add esp, 4
mov ebx, eax
mov eax, dword [esi + 0x10]
add edx, 0x76c
push edx
inc eax
push eax
push ecx
push str._02d:_02d:_02d
push ebx
call dword [sym.imp.MSVCR100.dll_sprintf]
mov dword [esp + 0x110], edi
add esp, 0x14
mov edi, 1
mov eax, 0x6548b0
lea esi, [esp + 0xe8]
mov dword [esp + 0xf8], 0
mov byte [esp + 0xe8], 0
call fcn.00406070
sub esp, 0x1c
mov byte [esp + 0x1bc], 8
mov esi, esp
mov eax, ebx
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], 0
mov dword [esp + 0x34], esp
mov byte [esi], 0
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402fe4
sub eax, edi
mov edi, eax
mov eax, ebx
call fcn.00406070
lea edi, [esp + 0x120]
call fcn.00407730
add esp, 0x1c
push eax
lea edx, [esp + 0xd0]
push edx
lea ecx, [esp + 0xf0]
mov byte [esp + 0x1a8], 9
call fcn.00401960
add esp, 8
mov esi, eax
lea eax, [esp + 0xb0]
mov ebx, 0x10
cmp eax, esi
je 0x4030b0
cmp dword [esp + 0xc4], ebx
jb 0x403051
mov ecx, dword [esp + 0xb0]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor edi, edi
mov dword [esp + 0xc4], 0xf
mov dword [esp + 0xc0], edi
mov byte [esp + 0xb0], 0
cmp dword [esi + 0x14], ebx
jae 0x40308b
mov eax, dword [esi + 0x10]
inc eax
push eax
lea edx, [esp + 0xb4]
push esi
push edx
call dword [sym.imp.MSVCR100.dll_memmove]
add esp, 0xc
jmp 0x403096
mov eax, dword [esi]
mov dword [esp + 0xb0], eax
mov dword [esi], edi
mov ecx, dword [esi + 0x10]
mov dword [esp + 0xc0], ecx
mov edx, dword [esi + 0x14]
mov dword [esp + 0xc4], edx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
cmp dword [esp + 0xe0], ebx
jb 0x4030ca
mov eax, dword [esp + 0xcc]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor edi, edi
mov esi, 0xf
mov dword [esp + 0xe0], esi
mov dword [esp + 0xdc], edi
mov byte [esp + 0xcc], 0
cmp dword [esp + 0x118], ebx
jb 0x403101
mov ecx, dword [esp + 0x104]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov byte [esp + 0x1a0], 7
mov dword [esp + 0x118], esi
mov dword [esp + 0x114], edi
mov byte [esp + 0x104], 0
cmp dword [esp + 0xfc], ebx
jb 0x403139
mov edx, dword [esp + 0xe8]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov edi, dword [esp + 0xc4]
mov ecx, dword [esp + 0xb0]
mov eax, ecx
cmp edi, ebx
jae 0x403154
lea eax, [esp + 0xb0]
lea esi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403157
sub eax, esi
cmp edi, ebx
jae 0x40316b
lea ecx, [esp + 0xb0]
mov ebx, dword [esp + 0x14]
mov edi, dword [sym.imp.MSVCR100.dll_fwrite]
push ebx
push 1
push eax
push ecx
call edi
mov esi, dword [sym.imp.MSVCR100.dll_fseek]
push 2
push 0
push ebx
call esi
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0x40]
add esp, 0x1c
cmp ecx, 0x10
jae 0x40319d
lea eax, [esp + 0x24]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4031a4
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x24]
jae 0x4031bc
lea ecx, [esp + 0x24]
push ebx
push 1
push eax
push ecx
call edi
push 2
push 0
push ebx
call esi
mov edx, dword [esp + 0xc4]
mov eax, dword [esp + 0xb0]
add esp, 0x1c
cmp edx, 0x10
jae 0x4031e7
lea eax, [esp + 0x94]
lea esi, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4031f0
mov ecx, dword [esp + 0x94]
sub eax, esi
cmp edx, 0x10
jae 0x40320c
lea ecx, [esp + 0x94]
push ebx
push 1
push eax
push ecx
call edi
sub esp, 0xc
mov ecx, esp
mov dword [esp + 0x30], esp
call fcn.004022b0
lea edi, [esp + 0x13c]
call fcn.00407730
add esp, 0x1c
mov byte [esp + 0x1a0], 0xb
cmp dword [eax + 0x14], 0x10
jb 0x403240
mov eax, dword [eax]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403243
sub eax, edx
mov dword [esp + 0x14], eax
mov edi, 1
mov eax, 0x6548b0
lea esi, [esp + 0xcc]
mov dword [esp + 0xe0], 0xf
mov dword [esp + 0xdc], 0
mov byte [esp + 0xcc], cl
call fcn.00406070
mov eax, dword [esp + 0x14]
push ebx
push edi
push eax
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0x1c8], 0xc
mov dword [esp + 0x3c], esp
call fcn.004022b0
lea edi, [esp + 0x110]
call fcn.00407730
add esp, 0x1c
push eax
lea ecx, [esp + 0x114]
push ecx
mov ecx, esi
mov byte [esp + 0x1b4], 0xd
call fcn.00401960
add esp, 8
cmp dword [eax + 0x14], 0x10
jb 0x4032d2
mov eax, dword [eax]
mov esi, dword [sym.imp.MSVCR100.dll_fwrite]
push eax
call esi
mov edi, 0x10
add esp, 0x10
cmp dword [esp + 0x118], edi
jb 0x4032fd
mov edx, dword [esp + 0x104]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0x118], 0xf
mov dword [esp + 0x114], 0
mov byte [esp + 0x104], 0
cmp dword [esp + 0xfc], edi
jb 0x403335
mov eax, dword [esp + 0xe8]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0xfc], 0xf
mov dword [esp + 0xf8], 0
mov byte [esp + 0xe8], 0
cmp dword [esp + 0xe0], edi
jb 0x40336d
mov ecx, dword [esp + 0xcc]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov byte [esp + 0x1a0], 7
mov dword [esp + 0xe0], 0xf
mov dword [esp + 0xdc], 0
mov byte [esp + 0xcc], 0
cmp dword [esp + 0x134], edi
jb 0x4033ad
mov edx, dword [esp + 0x120]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov edi, dword [sym.imp.MSVCR100.dll_fseek]
push 2
push 0
push ebx
call edi
add esp, 0xc
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x68]
add esp, 0xc
cmp ecx, 0x10
jae 0x4033d8
lea eax, [esp + 0x5c]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
nop
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4033e0
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x5c]
jae 0x4033f8
lea ecx, [esp + 0x5c]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0xa8]
mov eax, dword [esp + 0x94]
add esp, 0x1c
cmp ecx, 0x10
jae 0x403420
lea eax, [esp + 0x78]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403427
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x78]
jae 0x40343f
lea ecx, [esp + 0x78]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x5c]
add esp, 0x1c
cmp ecx, 0x10
jae 0x403461
lea eax, [esp + 0x40]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403468
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x40]
jae 0x403480
lea ecx, [esp + 0x40]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0xe0]
mov eax, dword [esp + 0xcc]
add esp, 0x1c
cmp ecx, 0x10
jae 0x4034ab
lea eax, [esp + 0xb0]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4034b2
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0xb0]
jae 0x4034d0
lea ecx, [esp + 0xb0]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x5c]
add esp, 0x1c
cmp ecx, 0x10
jae 0x4034f2
lea eax, [esp + 0x40]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
lea esp, [esp]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403500
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x40]
jae 0x403518
lea ecx, [esp + 0x40]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0xa8]
mov eax, dword [esp + 0x94]
add esp, 0x1c
cmp ecx, 0x10
jae 0x403540
lea eax, [esp + 0x78]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403547
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x78]
jae 0x40355f
lea ecx, [esp + 0x78]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x78]
add esp, 0x1c
cmp ecx, 0x10
jae 0x403584
lea eax, [esp + 0x5c]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
jmp 0x403590
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403590
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x5c]
jae 0x4035a8
lea ecx, [esp + 0x5c]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0xc4]
mov eax, dword [esp + 0xb0]
add esp, 0x1c
cmp ecx, 0x10
jae 0x4035d3
lea eax, [esp + 0x94]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4035e0
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x94]
jae 0x4035fe
lea ecx, [esp + 0x94]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0x40]
add esp, 0x1c
cmp ecx, 0x10
jae 0x403620
lea eax, [esp + 0x24]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403627
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x24]
jae 0x40363f
lea ecx, [esp + 0x24]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0xc4]
mov eax, dword [esp + 0xb0]
add esp, 0x1c
cmp ecx, 0x10
jae 0x40366a
lea eax, [esp + 0x94]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403671
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x94]
jae 0x40368f
lea ecx, [esp + 0x94]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0x40]
add esp, 0x1c
cmp ecx, 0x10
jae 0x4036b1
lea eax, [esp + 0x24]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4036b8
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x24]
jae 0x4036d0
lea ecx, [esp + 0x24]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0xe0]
mov eax, dword [esp + 0xcc]
add esp, 0x1c
cmp ecx, 0x10
jae 0x4036fb
lea eax, [esp + 0xb0]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403702
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0xb0]
jae 0x403720
lea ecx, [esp + 0xb0]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0xc4]
mov eax, dword [esp + 0xb0]
add esp, 0x1c
cmp ecx, 0x10
jae 0x40374b
lea eax, [esp + 0x94]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403752
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x94]
jae 0x403770
lea ecx, [esp + 0x94]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0x40]
add esp, 0x1c
cmp ecx, 0x10
jae 0x403792
lea eax, [esp + 0x24]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
lea esp, [esp]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4037a0
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x24]
jae 0x4037b8
lea ecx, [esp + 0x24]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0xe0]
mov eax, dword [esp + 0xcc]
add esp, 0x1c
cmp ecx, 0x10
jae 0x4037e3
lea eax, [esp + 0xb0]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4037f0
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0xb0]
jae 0x40380e
lea ecx, [esp + 0xb0]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0x40]
add esp, 0x1c
cmp ecx, 0x10
jae 0x403830
lea eax, [esp + 0x24]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403837
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x24]
jae 0x40384f
lea ecx, [esp + 0x24]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0xc4]
mov eax, dword [esp + 0xb0]
add esp, 0x1c
cmp ecx, 0x10
jae 0x40387a
lea eax, [esp + 0x94]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403881
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x94]
jae 0x40389f
lea ecx, [esp + 0x94]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x78]
add esp, 0x1c
cmp ecx, 0x10
jae 0x4038c4
lea eax, [esp + 0x5c]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
jmp 0x4038d0
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4038d0
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x5c]
jae 0x4038e8
lea ecx, [esp + 0x5c]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, esp
mov dword [esp + 0x30], esp
call fcn.004022b0
lea edi, [esp + 0x13c]
call fcn.00407730
add esp, 0x1c
mov byte [esp + 0x1a0], 0xe
cmp dword [eax + 0x14], 0x10
jb 0x403920
mov eax, dword [eax]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403923
sub eax, edx
mov dword [esp + 0x14], eax
mov edi, 1
mov eax, 0x6548b0
lea esi, [esp + 0xcc]
mov dword [esp + 0xe0], 0xf
mov dword [esp + 0xdc], 0
mov byte [esp + 0xcc], cl
call fcn.00406070
mov eax, dword [esp + 0x14]
push ebx
push edi
push eax
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0x1c8], 0xf
mov dword [esp + 0x3c], esp
call fcn.004022b0
lea edi, [esp + 0x110]
call fcn.00407730
add esp, 0x1c
push eax
lea ecx, [esp + 0x114]
push ecx
mov ecx, esi
mov byte [esp + 0x1b4], 0x10
call fcn.00401960
add esp, 8
cmp dword [eax + 0x14], 0x10
jb 0x4039b2
mov eax, dword [eax]
mov esi, dword [sym.imp.MSVCR100.dll_fwrite]
push eax
call esi
mov edi, 0x10
add esp, 0x10
cmp dword [esp + 0x118], edi
jb 0x4039dd
mov edx, dword [esp + 0x104]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0x118], 0xf
mov dword [esp + 0x114], 0
mov byte [esp + 0x104], 0
cmp dword [esp + 0xfc], edi
jb 0x403a15
mov eax, dword [esp + 0xe8]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0xfc], 0xf
mov dword [esp + 0xf8], 0
mov byte [esp + 0xe8], 0
cmp dword [esp + 0xe0], edi
jb 0x403a4d
mov ecx, dword [esp + 0xcc]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov byte [esp + 0x1a0], 7
mov dword [esp + 0xe0], 0xf
mov dword [esp + 0xdc], 0
mov byte [esp + 0xcc], 0
cmp dword [esp + 0x134], edi
jb 0x403a8d
mov edx, dword [esp + 0x120]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov edi, dword [sym.imp.MSVCR100.dll_fseek]
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x98]
mov eax, dword [esp + 0x84]
add esp, 0xc
cmp ecx, 0x10
jae 0x403ab4
lea eax, [esp + 0x78]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
jmp 0x403ac0
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403ac0
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x78]
jae 0x403ad8
lea ecx, [esp + 0x78]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x5c]
add esp, 0x1c
cmp ecx, 0x10
jae 0x403afa
lea eax, [esp + 0x40]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403b01
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x40]
jae 0x403b19
lea ecx, [esp + 0x40]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x8c]
mov eax, dword [esp + 0x78]
add esp, 0x1c
cmp ecx, 0x10
jae 0x403b3e
lea eax, [esp + 0x5c]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403b45
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x5c]
jae 0x403b5d
lea ecx, [esp + 0x5c]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0x40]
add esp, 0x1c
cmp ecx, 0x10
jae 0x403b7f
lea eax, [esp + 0x24]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403b86
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x24]
jae 0x403b9e
lea ecx, [esp + 0x24]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x5c]
add esp, 0x1c
cmp ecx, 0x10
jae 0x403bc0
lea eax, [esp + 0x40]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403bc7
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x40]
jae 0x403bdf
lea ecx, [esp + 0x40]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0xa8]
mov eax, dword [esp + 0x94]
add esp, 0x1c
cmp ecx, 0x10
jae 0x403c07
lea eax, [esp + 0x78]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov edi, edi
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403c10
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x78]
jae 0x403c28
lea ecx, [esp + 0x78]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x5c]
add esp, 0x1c
cmp ecx, 0x10
jae 0x403c4a
lea eax, [esp + 0x40]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x403c51
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x40]
jae 0x403c69
lea ecx, [esp + 0x40]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, esp
mov dword [esp + 0x30], esp
call fcn.004022b0
lea edi, [esp + 0x190]
call fcn.00407730
add esp, 0x1c
mov byte [esp + 0x1a0], 0x11
cmp dword [eax + 0x14], 0x10
jb 0x403ca1
mov eax, dword [eax]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403ca4
sub eax, edx
mov dword [esp + 0x14], eax
mov edi, 1
mov eax, 0x6548b0
lea esi, [esp + 0xe8]
mov dword [esp + 0xfc], 0xf
mov dword [esp + 0xf8], 0
mov byte [esp + 0xe8], cl
call fcn.00406070
mov eax, dword [esp + 0x14]
push ebx
push edi
push eax
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0x1c8], 0x12
mov dword [esp + 0x3c], esp
call fcn.004022b0
lea edi, [esp + 0x148]
call fcn.00407730
add esp, 0x1c
push eax
lea ecx, [esp + 0x114]
push ecx
mov ecx, esi
mov byte [esp + 0x1b4], 0x13
call fcn.00401960
add esp, 8
cmp dword [eax + 0x14], 0x10
jb 0x403d33
mov eax, dword [eax]
push eax
call dword [sym.imp.MSVCR100.dll_fwrite]
mov edi, 0x10
add esp, 0x10
cmp dword [esp + 0x118], edi
jb 0x403d5c