Function at 0x401560
Capabilities:
Copy file
Create directory
Create process on windows
Delete directory
Execute command
Get common file path
Manipulate console buffer
Move file
Resolve function by parsing pe exports
Set console window title
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x406d3f
mov eax, dword fs:[0]
push eax
sub esp, 0x3d0
mov eax, dword [0x40b018]
xor eax, esp
mov dword [esp + 0x3c8], eax
push ebx
push esi
push edi
mov eax, dword [0x40b018]
xor eax, esp
push eax
lea eax, [esp + 0x3e0]
mov dword fs:[0], eax
xor ebx, ebx
push 0x4082bc
mov dword [esp + 0x1c], ebx
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x40
push 0x12c
push 0x12c
push 1
call esi
cdq
sub eax, edx
sar eax, 1
sub eax, 0x96
push eax
push ebx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
cdq
sub eax, edx
sar eax, 1
sub eax, 0x96
push eax
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov esi, eax
lea eax, [esp + 0x128]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
mov ecx, dword [esp + 0x136]
mov edx, dword [esp + 0x138]
sub ecx, dword [esp + 0x132]
sub edx, dword [esp + 0x134]
inc ecx
inc edx
mov word [esp + 0x18], cx
mov word [esp + 0x1a], dx
mov eax, dword [esp + 0x18]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SetConsoleScreenBufferSize]
call edi
mov esi, eax
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
and eax, 0xfffeffff
push eax
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_SetWindowLongA]
lea edi, [ebx + 9]
mov eax, str.Ngopi.dll
lea esi, [esp + 0xd4]
mov dword [esp + 0xe8], 0xf
mov dword [esp + 0xe4], ebx
mov byte [esp + 0xd4], bl
call fcn.00404d90
mov dword [esp + 0x3e8], ebx
mov ecx, esi
mov ebx, 1
push ecx
mov dword [esp + 0x1c], ebx
call fcn.004013e0
add esp, 4
test al, al
je 0x4016f8
mov eax, str.Injek.sys
lea esi, [esp + 0x128]
mov dword [esp + 0x13c], 0xf
mov dword [esp + 0x138], 0
mov byte [esp + 0x128], 0
call fcn.00404d90
mov dword [esp + 0x3e8], ebx
mov edx, esi
mov ebx, 3
push edx
mov dword [esp + 0x1c], ebx
call fcn.004013e0
add esp, 4
mov byte [esp + 0x1f], 1
test al, al
jne 0x4016fd
mov byte [esp + 0x1f], 0
test bl, 2
je 0x40173e
and ebx, 0xfffffffd
cmp dword [esp + 0x13c], 0x10
jb 0x401720
mov eax, dword [esp + 0x128]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0x13c], 0xf
mov dword [esp + 0x138], 0
mov byte [esp + 0x128], 0
mov dword [esp + 0x3e8], 0xffffffff
test bl, 1
je 0x401769
cmp dword [esp + 0xe8], 0x10
jb 0x401769
mov ecx, dword [esp + 0xd4]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
cmp byte [esp + 0x1f], 0
je 0x4037d6
lea edx, [esp + 0x2cc]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea eax, [esp + 0x2cc]
mov dword [esp + 0x2c4], 0xf
mov dword [esp + 0x2c0], 0
mov byte [esp + 0x2b0], 0
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4017b0
sub eax, edx
mov edi, eax
lea eax, [esp + 0x2cc]
lea esi, [esp + 0x2b0]
call fcn.00404d90
mov eax, esi
push eax
lea ecx, [esp + 0x110]
push ecx
mov dword [esp + 0x3f0], 2
call fcn.004050c0
add esp, 8
xor ebx, ebx
mov byte [esp + 0x3e8], 3
lea edi, [ebx + 1]
mov eax, 0x4083d4
lea esi, [esp + 0x144]
mov dword [esp + 0x158], 0xf
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
call fcn.00404d90
mov byte [esp + 0x3e8], 4
mov esi, dword [esp + 0x10c]
mov edi, 0x10
cmp dword [esp + 0x120], edi
jae 0x401847
lea esi, [esp + 0x10c]
call fcn.00401340
mov eax, dword [esp + 0x10c]
cmp dword [esp + 0x120], edi
jae 0x401863
lea eax, [esp + 0x10c]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
mov eax, dword [esp + 0x10c]
cmp dword [esp + 0x120], edi
jae 0x401881
lea eax, [esp + 0x10c]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea edx, [esp + 0x144]
push edx
lea eax, [esp + 0x110]
push eax
lea ecx, [esp + 0xdc]
push ecx
call fcn.004051d0
add esp, 0xc
push eax
mov eax, str.Injek.sys
lea ecx, [esp + 0x1d4]
mov byte [esp + 0x3ec], 5
call fcn.00405180
add esp, 4
mov byte [esp + 0x3e8], 7
mov esi, dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
cmp dword [esp + 0xe8], edi
jb 0x4018ea
mov edx, dword [esp + 0xd4]
push edx
call esi
add esp, 4
lea eax, [esp + 0x144]
push eax
lea ecx, [esp + 0x110]
push ecx
lea edx, [esp + 0xf8]
push edx
mov dword [esp + 0xf4], 0xf
mov dword [esp + 0xf0], ebx
mov byte [esp + 0xe0], 0
call fcn.004051d0
add esp, 0xc
push eax
mov eax, str.Ngopi.dll
lea ecx, [esp + 0x164]
mov byte [esp + 0x3ec], 8
call fcn.00405180
add esp, 4
mov byte [esp + 0x3e8], 0xa
cmp dword [esp + 0x104], edi
jb 0x40195f
mov eax, dword [esp + 0xf0]
push eax
call esi
add esp, 4
lea ecx, [esp + 0x144]
push ecx
lea edx, [esp + 0x110]
push edx
lea eax, [esp + 0xdc]
push eax
mov dword [esp + 0x110], 0xf
mov dword [esp + 0x10c], ebx
mov byte [esp + 0xfc], 0
call fcn.004051d0
add esp, 0xc
push eax
mov eax, str.Injek.mentah
lea ecx, [esp + 0x180]
mov byte [esp + 0x3ec], 0xb
call fcn.00405180
add esp, 4
mov byte [esp + 0x3e8], 0xd
cmp dword [esp + 0xe8], edi
jb 0x4019d4
mov ecx, dword [esp + 0xd4]
push ecx
call esi
add esp, 4
lea edx, [esp + 0x144]
push edx
lea eax, [esp + 0x110]
push eax
lea ecx, [esp + 0xf8]
push ecx
mov dword [esp + 0xf4], 0xf
mov dword [esp + 0xf0], ebx
mov byte [esp + 0xe0], 0
call fcn.004051d0
add esp, 0xc
push eax
mov eax, str.Injek.exe
lea ecx, [esp + 0x1b8]
mov byte [esp + 0x3ec], 0xe
call fcn.00405180
add esp, 4
mov byte [esp + 0x3e8], 0x10
cmp dword [esp + 0x104], edi
jb 0x401a49
mov edx, dword [esp + 0xf0]
push edx
call esi
add esp, 4
lea eax, [esp + 0x144]
push eax
lea ecx, [esp + 0x110]
push ecx
lea edx, [esp + 0x280]
push edx
mov dword [esp + 0x110], 0xf
mov dword [esp + 0x10c], ebx
mov byte [esp + 0xfc], 0
call fcn.004051d0
add esp, 0xc
push eax
mov eax, str.Ngopi.mentah
lea ecx, [esp + 0x19c]
mov byte [esp + 0x3ec], 0x11
call fcn.00405180
add esp, 4
cmp dword [esp + 0x28c], edi
jb 0x401ab6
mov eax, dword [esp + 0x278]
push eax
call esi
add esp, 4
mov eax, dword [esp + 0x1d0]
cmp dword [esp + 0x1e4], edi
jae 0x401acd
lea eax, [esp + 0x1d0]
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileA]
push ebx
push eax
push str.Injek.sys
call esi
mov eax, dword [esp + 0x160]
cmp dword [esp + 0x174], edi
jae 0x401af3
lea eax, [esp + 0x160]
push ebx
push eax
push str.Ngopi.dll
call esi
mov ecx, dword [esp + 0x17c]
cmp dword [esp + 0x190], edi
jae 0x401b13
lea ecx, [esp + 0x17c]
mov eax, dword [esp + 0x1d0]
cmp dword [esp + 0x1e4], edi
jae 0x401b2a
lea eax, [esp + 0x1d0]
mov esi, dword [sym.imp.MSVCR100.dll_rename]
push ecx
push eax
call esi
mov ecx, dword [esp + 0x1a0]
add esp, 8
cmp dword [esp + 0x1ac], edi
jae 0x401b4e
lea ecx, [esp + 0x198]
mov eax, dword [esp + 0x160]
cmp dword [esp + 0x174], edi
jae 0x401b65
lea eax, [esp + 0x160]
push ecx
push eax
call esi
add esp, 8
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esp + 0x17c]
cmp dword [esp + 0x190], edi
jae 0x401b8e
lea eax, [esp + 0x17c]
mov esi, dword [sym.imp.MSVCR100.dll_fopen]
push 0x4083e8
push eax
call esi
add esp, 8
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x198]
cmp dword [esp + 0x1ac], edi
jae 0x401bba
lea eax, [esp + 0x198]
push 0x4083e8
push eax
call esi
push ebx
mov dword [esp + 0x20], eax
call dword [sym.imp.MSVCR100.dll__time64]
add esp, 0xc
push eax
call dword [sym.imp.MSVCR100.dll_srand]
add esp, 4
mov dword [esp + 0x28c], 0xf
mov dword [esp + 0x288], ebx
mov byte [esp + 0x278], 0
mov byte [esp + 0x3e8], 0x14
xor edi, edi
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
xor esi, esi
call ebx
cdq
mov ecx, 0x64
idiv ecx
inc edx
cmp edx, 0x32
jl 0x401c1b
cmp edx, 0x5a
jle 0x401c22
inc esi
cmp esi, ecx
jl 0x401c06
jmp 0x401c26
mov dword [esp + 0x18], edx
cmp edi, dword [esp + 0x18]
jae 0x401c5b
call dword [sym.imp.MSVCR100.dll_rand]
xor edx, edx
mov ecx, 0x47
div ecx
mov ecx, 0x46
lea esi, [esp + 0x278]
mov eax, edx
xor edx, edx
div ecx
mov bl, byte [edx + 0x4082c9]
call fcn.00403880
inc edi
jmp 0x401bfe
xor edi, edi
mov dword [esp + 0x5c], 0xf
mov dword [esp + 0x58], edi
mov byte [esp + 0x48], 0
mov byte [esp + 0x3e8], 0x15
xor esi, esi
call ebx
cdq
mov ecx, 0x64
idiv ecx
inc edx
cmp edx, 0xa
jl 0x401c8d
cmp edx, 0x32
jle 0x401c94
inc esi
cmp esi, ecx
jl 0x401c78
jmp 0x401c98
mov dword [esp + 0x18], edx
cmp edi, dword [esp + 0x18]
jae 0x401d4e
call dword [sym.imp.MSVCR100.dll_rand]
cdq
mov ecx, 6
idiv ecx
mov eax, dword [esp + 0x58]
mov bl, byte [edx + 0x408339]
or edx, 0xffffffff
sub edx, eax
cmp edx, 1
jbe 0x401d43
lea esi, [eax + 1]
cmp esi, 0xfffffffe
ja 0x401d43
mov ecx, dword [esp + 0x5c]
cmp ecx, esi
jae 0x401d1f
push eax
push esi
lea eax, [esp + 0x50]
push eax
call fcn.00404e60
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x58]
test esi, esi
je 0x401d13
cmp ecx, 0x10
mov ecx, dword [esp + 0x48]
jae 0x401cf9
lea ecx, [esp + 0x48]
mov byte [eax + ecx], bl
cmp dword [esp + 0x5c], 0x10
mov eax, dword [esp + 0x48]
mov dword [esp + 0x58], esi
jae 0x401d0f
lea eax, [esp + 0x48]
mov byte [eax + esi], 0
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
inc edi
jmp 0x401c76
test esi, esi
jne 0x401cec
mov eax, dword [esp + 0x48]
mov dword [esp + 0x58], esi
cmp ecx, 0x10
jae 0x401d34
lea eax, [esp + 0x48]
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
mov byte [eax], 0
inc edi
jmp 0x401c76
push str.string_too_long
call dword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const__]
xor edi, edi
mov dword [esp + 0xb0], 0xf
mov dword [esp + 0xac], edi
mov byte [esp + 0x9c], 0
mov byte [esp + 0x3e8], 0x16
xor esi, esi
call ebx
cdq
mov ecx, 0x64
idiv ecx
inc edx
cmp edx, 0x3c
jl 0x401d88
cmp edx, ecx
jle 0x401d8f
inc esi
cmp esi, ecx
jl 0x401d74
jmp 0x401d93
mov dword [esp + 0x18], edx
cmp edi, dword [esp + 0x18]
jae 0x401e6c
call dword [sym.imp.MSVCR100.dll_rand]
cdq
mov ecx, 6
idiv ecx
mov eax, dword [esp + 0xac]
mov bl, byte [edx + 0x408345]
or edx, 0xffffffff
sub edx, eax
cmp edx, 1
jbe 0x401d43
lea esi, [eax + 1]
cmp esi, 0xfffffffe
ja 0x401d43
mov ecx, dword [esp + 0xb0]
cmp ecx, esi
jae 0x401e3f
push eax
push esi
lea eax, [esp + 0xa4]
push eax
call fcn.00404e60
mov ecx, dword [esp + 0xb0]
mov eax, dword [esp + 0xac]
test esi, esi
je 0x401e33
cmp ecx, 0x10
mov ecx, dword [esp + 0x9c]
jae 0x401e0d
lea ecx, [esp + 0x9c]
mov byte [ecx + eax], bl
cmp dword [esp + 0xb0], 0x10
mov eax, dword [esp + 0x9c]
mov dword [esp + 0xac], esi
jae 0x401e2f
lea eax, [esp + 0x9c]
mov byte [esi + eax], 0
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
inc edi
jmp 0x401d72
test esi, esi
jne 0x401dfa
mov eax, dword [esp + 0x9c]
mov dword [esp + 0xac], esi
cmp ecx, 0x10
jae 0x401e5d
lea eax, [esp + 0x9c]
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
mov byte [eax], 0
inc edi
jmp 0x401d72
xor edi, edi
mov dword [esp + 0x94], 0xf
mov dword [esp + 0x90], edi
mov byte [esp + 0x80], 0
mov byte [esp + 0x3e8], 0x17
xor esi, esi
call ebx
cdq
mov ecx, 0x64
idiv ecx
inc edx
cmp edx, 0x28
jl 0x401ea7
cmp edx, 0x50
jle 0x401eae
inc esi
cmp esi, ecx
jl 0x401e92
jmp 0x401eb2
mov dword [esp + 0x18], edx
cmp edi, dword [esp + 0x18]
jae 0x401f8f
call dword [sym.imp.MSVCR100.dll_rand]
cdq
mov ecx, 6
idiv ecx
mov eax, dword [esp + 0x90]
mov bl, byte [edx + 0x408361]
or edx, 0xffffffff
sub edx, eax
cmp edx, 1
jbe 0x401d43
lea esi, [eax + 1]
cmp esi, 0xfffffffe
ja 0x401d43
mov ecx, dword [esp + 0x94]
cmp ecx, esi
jae 0x401f62
push eax
push esi
lea eax, [esp + 0x88]
push eax
call fcn.00404e60
mov ecx, dword [esp + 0x94]
mov eax, dword [esp + 0x90]
test esi, esi
je 0x401f56
cmp ecx, 0x10
mov ecx, dword [esp + 0x80]
jae 0x401f30
lea ecx, [esp + 0x80]
mov byte [eax + ecx], bl
cmp dword [esp + 0x94], 0x10
mov eax, dword [esp + 0x80]
mov dword [esp + 0x90], esi
jae 0x401f52
lea eax, [esp + 0x80]
mov byte [esi + eax], 0
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
inc edi
jmp 0x401e90
test esi, esi
jne 0x401f1d
mov eax, dword [esp + 0x80]
mov dword [esp + 0x90], esi
cmp ecx, 0x10
jae 0x401f80
lea eax, [esp + 0x80]
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
mov byte [eax], 0
inc edi
jmp 0x401e90
xor edi, edi
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], edi
mov byte [esp + 0x64], 0
mov byte [esp + 0x3e8], 0x18
lea ebx, [ebx]
xor esi, esi
call ebx
cdq
mov ecx, 0x64
idiv ecx
inc edx
cmp edx, 0x28
jl 0x401fc6
cmp edx, ecx
jle 0x401fcd
inc esi
cmp esi, ecx
jl 0x401fb2
jmp 0x401fd1
mov dword [esp + 0x18], edx
cmp edi, dword [esp + 0x18]
jae 0x402084
call dword [sym.imp.MSVCR100.dll_rand]
cdq
mov ecx, 6
idiv ecx
mov eax, dword [esp + 0x74]
mov bl, byte [edx + 0x408385]
or edx, 0xffffffff
sub edx, eax
cmp edx, 1
jbe 0x401d43
lea esi, [eax + 1]
cmp esi, 0xfffffffe
ja 0x401d43
mov ecx, dword [esp + 0x78]
cmp ecx, esi
jae 0x402060
push eax
push esi
lea eax, [esp + 0x6c]
push eax
call fcn.00404e60
mov ecx, dword [esp + 0x78]
mov eax, dword [esp + 0x74]
test esi, esi
je 0x402054
cmp ecx, 0x10
mov ecx, dword [esp + 0x64]
jae 0x40203a
lea ecx, [esp + 0x64]
mov byte [eax + ecx], bl
cmp dword [esp + 0x78], 0x10
mov eax, dword [esp + 0x64]
mov dword [esp + 0x74], esi
jae 0x402050
lea eax, [esp + 0x64]
mov byte [esi + eax], 0
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
inc edi
jmp 0x401fb0
test esi, esi
jne 0x40202d
mov eax, dword [esp + 0x64]
mov dword [esp + 0x74], esi
cmp ecx, 0x10
jae 0x402075
lea eax, [esp + 0x64]
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
mov byte [eax], 0
inc edi
jmp 0x401fb0
xor edi, edi
mov dword [esp + 0x40], 0xf
mov dword [esp + 0x3c], edi
mov byte [esp + 0x2c], 0
mov byte [esp + 0x3e8], 0x19
nop
xor esi, esi
call ebx
cdq
mov ecx, 0x64
idiv ecx
inc edx
cmp edx, 0x3c
jl 0x4020b7
cmp edx, 0x46
jle 0x4020be
inc esi
cmp esi, ecx
jl 0x4020a2
jmp 0x4020c2
mov dword [esp + 0x18], edx
cmp edi, dword [esp + 0x18]
jae 0x402175
call dword [sym.imp.MSVCR100.dll_rand]
cdq
mov ecx, 6
idiv ecx
mov eax, dword [esp + 0x3c]
mov bl, byte [edx + 0x4083a5]
or edx, 0xffffffff
sub edx, eax
cmp edx, 1
jbe 0x401d43
lea esi, [eax + 1]
cmp esi, 0xfffffffe
ja 0x401d43
mov ecx, dword [esp + 0x40]
cmp ecx, esi
jae 0x402151
push eax
push esi
lea eax, [esp + 0x34]
push eax
call fcn.00404e60
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
test esi, esi
je 0x402145
cmp ecx, 0x10
mov ecx, dword [esp + 0x2c]
jae 0x40212b
lea ecx, [esp + 0x2c]
mov byte [ecx + eax], bl
cmp dword [esp + 0x40], 0x10
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x3c], esi
jae 0x402141
lea eax, [esp + 0x2c]
mov byte [esi + eax], 0
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
inc edi
jmp 0x4020a0
test esi, esi
jne 0x40211e
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x3c], esi
cmp ecx, 0x10
jae 0x402166
lea eax, [esp + 0x2c]
mov ebx, dword [sym.imp.MSVCR100.dll_rand]
mov byte [eax], 0
inc edi
jmp 0x4020a0
mov edi, 0xf
mov dword [esp + 0xcc], edi
mov dword [esp + 0xc8], 0
mov byte [esp + 0xb8], 0
push 0
mov byte [esp + 0x3ec], 0x1a
call dword [sym.imp.MSVCR100.dll__time64]
lea ecx, [esp + 0x28]
add esp, 4
push ecx
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], edx
call dword [sym.imp.MSVCR100.dll__localtime64]
add esp, 4
push 0x100
mov esi, eax
call fcn.00405e2f
mov edx, dword [esi + 0x14]
mov ecx, dword [esi + 0xc]
add esp, 4
mov ebx, eax
mov eax, dword [esi + 0x10]
add edx, 0x76c
push edx
inc eax
push eax
push ecx
push str._02d:_02d:_02d
push ebx
call dword [sym.imp.MSVCR100.dll_sprintf]
sub esp, 8
mov dword [esp + 0x3c], esp
mov dword [esp + 0x34], esp
sub esp, 0x1c
mov esi, esp
mov dword [esi + 0x14], edi
mov eax, ebx
mov dword [esi + 0x10], 0
mov dword [esp + 0x58], esp
mov byte [esi], 0
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402213
sub eax, edi
mov edi, eax
mov eax, ebx
call fcn.00404d90
mov edi, dword [esp + 0x50]
call fcn.00405cf0
add esp, 0x1c
lea edi, [esp + 0xf0]
call fcn.00405cf0
add esp, 0x1c
mov esi, eax
lea edx, [esp + 0xb8]
mov ebx, 0x10
cmp edx, esi
je 0x4022cf
cmp dword [esp + 0xcc], ebx
jb 0x402270
mov eax, dword [esp + 0xb8]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor edi, edi
mov dword [esp + 0xcc], 0xf
mov dword [esp + 0xc8], edi
mov byte [esp + 0xb8], 0
cmp dword [esi + 0x14], ebx
jae 0x4022aa
mov eax, dword [esi + 0x10]
inc eax
push eax
lea ecx, [esp + 0xbc]
push esi
push ecx
call dword [sym.imp.MSVCR100.dll_memmove]
add esp, 0xc
jmp 0x4022b5
mov edx, dword [esi]
mov dword [esp + 0xb8], edx
mov dword [esi], edi
mov eax, dword [esi + 0x10]
mov dword [esp + 0xc8], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0xcc], ecx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov byte [esp + 0x3e8], 0x1a
cmp dword [esp + 0xe8], ebx
jb 0x4022f1
mov edx, dword [esp + 0xd4]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov ebx, dword [esp + 0x10]
mov edi, dword [sym.imp.MSVCR100.dll_fseek]
push 2
push 0
push ebx
call edi
mov esi, dword [esp + 0xd8]
mov eax, dword [esp + 0xc4]
add esp, 0xc
cmp esi, 0x10
jae 0x40231f
lea eax, [esp + 0xb8]
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402322
sub eax, ecx
mov ecx, dword [esp + 0xb8]
cmp esi, 0x10
jae 0x40233e
lea ecx, [esp + 0xb8]
mov esi, dword [sym.imp.MSVCR100.dll_fwrite]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x78]
mov eax, dword [esp + 0x64]
add esp, 0x1c
cmp ecx, 0x10
jae 0x402366
lea eax, [esp + 0x48]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
lea ecx, [ecx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402370
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0x48]
jae 0x402388
lea ecx, [esp + 0x48]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0xcc]
mov eax, dword [esp + 0xb8]
add esp, 0x1c
cmp ecx, 0x10
jae 0x4023b3
lea eax, [esp + 0x9c]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4023c0
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0x9c]
jae 0x4023de
lea ecx, [esp + 0x9c]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0xb0]
mov eax, dword [esp + 0x9c]
add esp, 0x1c
cmp ecx, 0x10
jae 0x402409
lea eax, [esp + 0x80]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402410
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0x80]
jae 0x40242e
lea ecx, [esp + 0x80]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x94]
mov eax, dword [esp + 0x80]
add esp, 0x1c
cmp ecx, 0x10
jae 0x402456
lea eax, [esp + 0x64]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
lea ecx, [ecx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402460
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0x64]
jae 0x402478
lea ecx, [esp + 0x64]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x48]
add esp, 0x1c
cmp ecx, 0x10
jae 0x40249a
lea eax, [esp + 0x2c]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4024a1
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0x2c]
jae 0x4024b9
lea ecx, [esp + 0x2c]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
add esp, 0x1c
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x38]
add esp, 0xc
cmp ecx, 0x10
jae 0x4024e5
lea eax, [esp + 0x2c]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
lea esp, [esp]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4024f0
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0x2c]
jae 0x402508
lea ecx, [esp + 0x2c]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x94]
mov eax, dword [esp + 0x80]
add esp, 0x1c
cmp ecx, 0x10
jae 0x402530
lea eax, [esp + 0x64]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402537
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0x64]
jae 0x40254f
lea ecx, [esp + 0x64]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0xb0]
mov eax, dword [esp + 0x9c]
add esp, 0x1c
cmp ecx, 0x10
jae 0x40257a
lea eax, [esp + 0x80]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402581
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0x80]
jae 0x40259f
lea ecx, [esp + 0x80]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0xcc]
mov eax, dword [esp + 0xb8]
add esp, 0x1c
cmp ecx, 0x10
jae 0x4025ca
lea eax, [esp + 0x9c]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4025d1
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0x9c]
jae 0x4025ef
lea ecx, [esp + 0x9c]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x78]
mov eax, dword [esp + 0x64]
add esp, 0x1c
cmp ecx, 0x10
jae 0x402611
lea eax, [esp + 0x48]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402618
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0x48]
jae 0x402630
lea ecx, [esp + 0x48]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x78]
mov eax, dword [esp + 0x64]
add esp, 0x1c
cmp ecx, 0x10
jae 0x402652
lea eax, [esp + 0x48]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
lea esp, [esp]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402660
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0x48]
jae 0x402678
lea ecx, [esp + 0x48]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0xcc]
mov eax, dword [esp + 0xb8]
add esp, 0x1c
cmp ecx, 0x10
jae 0x4026a3
lea eax, [esp + 0x9c]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4026b0
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0x9c]
jae 0x4026ce
lea ecx, [esp + 0x9c]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0xb0]
mov eax, dword [esp + 0x9c]
add esp, 0x1c
cmp ecx, 0x10
jae 0x4026f9
lea eax, [esp + 0x80]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402700
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0x80]
jae 0x40271e
lea ecx, [esp + 0x80]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x94]
mov eax, dword [esp + 0x80]
add esp, 0x1c
cmp ecx, 0x10
jae 0x402746
lea eax, [esp + 0x64]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
lea ecx, [ecx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402750
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0x64]
jae 0x402768
lea ecx, [esp + 0x64]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x48]
add esp, 0x1c
cmp ecx, 0x10
jae 0x40278a
lea eax, [esp + 0x2c]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402791
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0x2c]
jae 0x4027a9
lea ecx, [esp + 0x2c]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0xe8]
mov eax, dword [esp + 0xd4]
add esp, 0x1c
cmp ecx, 0x10
jae 0x4027d4
lea eax, [esp + 0xb8]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
jmp 0x4027e0
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4027e0
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0xb8]
jae 0x4027fe
lea ecx, [esp + 0xb8]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0xb0]
mov eax, dword [esp + 0x9c]
add esp, 0x1c
cmp ecx, 0x10
jae 0x402829
lea eax, [esp + 0x80]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402830
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0x80]
jae 0x40284e
lea ecx, [esp + 0x80]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x78]
mov eax, dword [esp + 0x64]
add esp, 0x1c
cmp ecx, 0x10
jae 0x402870
lea eax, [esp + 0x48]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402877
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0x48]
jae 0x40288f
lea ecx, [esp + 0x48]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x48]
add esp, 0x1c
cmp ecx, 0x10
jae 0x4028b1
lea eax, [esp + 0x2c]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4028b8
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0x2c]
jae 0x4028d0
lea ecx, [esp + 0x2c]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x94]
mov eax, dword [esp + 0x80]
add esp, 0x1c
cmp ecx, 0x10
jae 0x4028f8
lea eax, [esp + 0x64]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
nop
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402900
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0x64]
jae 0x402918
lea ecx, [esp + 0x64]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x48]
add esp, 0x1c
cmp ecx, 0x10
jae 0x40293a
lea eax, [esp + 0x2c]
lea edx, [eax + 1]
mov dword [esp + 0x10], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402941
sub eax, dword [esp + 0x10]
cmp ecx, 0x10
mov ecx, dword [esp + 0x2c]
jae 0x402959
lea ecx, [esp + 0x2c]
push ebx
push 1
push eax
push ecx
call esi
push 2
push 0
push ebx
call edi
mov esi, dword [esp + 0xe8]
mov eax, dword [esp + 0xd4]
add esp, 0x1c
cmp esi, 0x10
jae 0x402984
lea eax, [esp + 0xb8]
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402987
sub eax, ecx
mov ecx, dword [esp + 0xb8]
cmp esi, 0x10
jae 0x4029a3
lea ecx, [esp + 0xb8]
push ebx
push 1
push eax
push ecx
call dword [sym.imp.MSVCR100.dll_fwrite]
push 2
push 0
push ebx
call edi
mov esi, dword [esp + 0x30]
add esp, 0x1c
push 2
push 0
push esi
call edi
mov ecx, dword [esp + 0x68]
mov eax, dword [esp + 0x54]
add esp, 0xc
cmp ecx, 0x10
jae 0x4029d7
lea eax, [esp + 0x48]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov edi, edi
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4029e0
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x48]
jae 0x4029f8
lea ecx, [esp + 0x48]
push esi
push 1
push eax
push ecx
call dword [sym.imp.MSVCR100.dll_fwrite]
push 2
push 0
push esi
call edi
mov ecx, dword [esp + 0xcc]
mov eax, dword [esp + 0xb8]
add esp, 0x1c
cmp ecx, 0x10
jae 0x402a27
lea eax, [esp + 0x9c]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov edi, edi
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402a30
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x9c]
jae 0x402a4e
lea ecx, [esp + 0x9c]
push esi
push 1
push eax
push ecx
call dword [sym.imp.MSVCR100.dll_fwrite]
push 2
push 0
push esi
call edi
mov ecx, dword [esp + 0xb0]
mov eax, dword [esp + 0x9c]
add esp, 0x1c
cmp ecx, 0x10
jae 0x402a7d
lea eax, [esp + 0x80]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402a84
sub eax, dword [esp + 0x14]
cmp ecx, 0x10
mov ecx, dword [esp + 0x80]
jae 0x402aa2
lea ecx, [esp + 0x80]
push esi
push 1
push eax
push ecx
call dword [sym.imp.MSVCR100.dll_fwrite]
push 2
push 0
push esi
call edi
mov ecx, dword [esp + 0x94]
mov eax, dword [esp + 0x80]
add esp, 0x1c
cmp ecx, 0x10
jae 0x402ace
lea eax, [esp + 0x64]
lea edx, [eax + 1]
mov dword [esp + 0x14], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x402ad5
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
push 0xc
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov eax, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char______cdecl_std::endl_class_std::basic_ostream_char__struct_std::char_traits_char____]
push eax
push ecx
mov ecx, dword [sym.imp.MSVCP100.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
push str.Ngopi.dll___Injek.sys_Tidak_ada
push ecx
call fcn.00401090
add esp, 0xc
mov ecx, eax
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push str.pause
call dword [sym.imp.MSVCR100.dll_system]
add esp, 4
xor al, al
mov ecx, dword [esp + 0x3e0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c8]
xor ecx, esp
call fcn.00405e4c
mov esp, ebp
pop ebp
ret