Function at 0x40b0c0
Capabilities:
Delete file
Read file on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x68
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x64], eax
mov ecx, dword [0x468ec0]
lea eax, [edi*8]
sub eax, edi
add eax, eax
push ebx
add eax, eax
push esi
add eax, eax
mov esi, dword [eax + ecx]
mov dword [esp + 0xc], eax
xor eax, eax
push eax
push eax
push eax
push esi
mov dword [edi*8 + 0x468aa0], eax
mov dword [edi*8 + 0x468aa4], eax
call dword [sym.imp.MSVCR100.dll__fseeki64]
mov ebx, dword [sym.imp.MSVCR100.dll_fread]
push esi
push 1
lea edx, [esp + 0x28]
push 0x50
push edx
call ebx
lea eax, [esp + 0x30]
push 0xa
push eax
call dword [sym.imp.MSVCR100.dll_strchr]
add esp, 0x28
test eax, eax
je 0x40b14e
mov byte [eax], 0
dec eax
cmp byte [eax], 0
je 0x40b14e
jmp 0x40b140
cmp byte [eax], 0x20
jne 0x40b14e
mov byte [eax], 0
dec eax
cmp byte [eax], 0
jne 0x40b140
push 0x29
lea ecx, [esp + 0x14]
push str.HEADER_RECORDLIBRARY_HEADER_RECORD
push ecx
call dword [sym.imp.MSVCR100.dll_strncmp]
add esp, 0xc
test eax, eax
je 0x40b18c
push str.SAS_transport
push edi
push str.The_level__d_file_does_not_seem_to_be_a__s_file__n
call dword [sym.imp.MSVCR100.dll_printf]
mov eax, dword [edi*4 + 0x4695d0]
add esp, 0xc
mov ebx, 1
call fcn.004016c0
push esi
push 1
lea edx, [esp + 0x18]
push 0x50
push edx
call ebx
push esi
push 1
lea eax, [esp + 0x28]
push 0x50
push eax
call ebx
push esi
push 1
lea ecx, [esp + 0x38]
push 0x50
push ecx
call ebx
lea edx, [esp + 0x40]
push 0xa
push edx
call dword [sym.imp.MSVCR100.dll_strchr]
add esp, 0x38
test eax, eax
je 0x40b1de
mov byte [eax], 0
dec eax
cmp byte [eax], 0
je 0x40b1de
lea ecx, [ecx]
cmp byte [eax], 0x20
jne 0x40b1de
mov byte [eax], 0
dec eax
cmp byte [eax], 0
jne 0x40b1d0
push 3
lea eax, [esp + 0x5f]
push 0x45f8e0
push eax
call dword [sym.imp.MSVCR100.dll_strncmp]
add esp, 0xc
test eax, eax
jne 0x40b201
mov dword [0x4a5ffc], 0x88
push 3
lea ecx, [esp + 0x5f]
push 0x45f8e4
push ecx
call dword [sym.imp.MSVCR100.dll_strncmp]
add esp, 0xc
test eax, eax
jne 0x40b2b0
push esi
push 1
lea edx, [esp + 0x18]
push 0x50
push edx
mov dword [0x4a5ffc], 0x8c
call ebx
push esi
push 1
lea eax, [esp + 0x28]
push 0x50
push eax
call ebx
push esi
push 1
lea ecx, [esp + 0x38]
push 0x50
push ecx
call ebx
push esi
push 1
lea edx, [esp + 0x48]
push 0x50
push edx
call ebx
lea eax, [esp + 0x86]
add esp, 0x40
push eax
mov byte [esp + 0x4e], 0
call dword [sym.imp.MSVCR100.dll_atol]
add esp, 4
test eax, eax
jg 0x40b28d
mov ecx, 1
mov eax, ecx
pop esi
pop ebx
mov ecx, dword [esp + 0x64]
xor ecx, esp
call fcn.0045d089
mov esp, ebp
pop ebp
ret
mov esi, dword [esp + 0xc]
mov edx, dword [0x468ec0]
xor ecx, ecx
mov dword [esi + edx + 4], eax
mov eax, ecx
mov ecx, dword [esp + 0x6c]
pop esi
pop ebx
xor ecx, esp
call fcn.0045d089
mov esp, ebp
pop ebp
ret
push str.SAS_transport
push edi
push str.The_level__d_file_does_not_seem_to_be_a__s_file__n
call dword [sym.imp.MSVCR100.dll_printf]
add esp, 0xc
cmp dword [0x4a5b3c], 0
je 0x40b345
cmp dword [0x489ad0], 0
je 0x40b345
push str.stdout
push 0x476be0
call dword [sym.imp.MSVCR100.dll__stricmp]
add esp, 8
test eax, eax
je 0x40b318
mov eax, dword [0x489ad0]
push eax
call dword [sym.imp.MSVCR100.dll__ftelli64]
mov ecx, dword [0x489ad0]
add esp, 4
push edx
push eax
push ecx
call dword [sym.imp.MSVCR100.dll__fileno]
add esp, 4
push eax
call dword [sym.imp.MSVCR100.dll__chsize_s]
add esp, 0xc
cmp dword [0x4a5b4c], 0
je 0x40b336
mov edx, dword [0x489ad0]
push str.__body___html__n
push edx
call dword [sym.imp.MSVCR100.dll_fprintf]
add esp, 8
mov eax, dword [0x489ad0]
push eax
call dword [sym.imp.MSVCR100.dll_fclose]
add esp, 4
call fcn.0040a1a0
mov ecx, dword [0x469488]
mov esi, dword [sym.imp.MSVCR100.dll_remove]
inc dword [0x468ff8]
push ecx
call esi
mov edx, dword [0x4899d8]
add esp, 4
push edx
call esi
mov eax, dword [0x4802bc]
add esp, 4
push eax
call esi
mov ecx, dword [0x4802cc]
add esp, 4
push ecx
call esi
mov edx, dword [0x469488]
mov esi, dword [sym.imp.MSVCR100.dll_free]
add esp, 4
push edx
call esi
mov eax, dword [0x4899d8]
add esp, 4
push eax
call esi
mov ecx, dword [0x4802bc]
add esp, 4
push ecx
call esi
mov edx, dword [0x4802cc]
add esp, 4
push edx
call esi
add esp, 4
cmp dword [0x468ff8], 0
je 0x40b3c8
call fcn.00409900
push 0x64
call dword [sym.imp.MSVCR100.dll_exit]
int3