Function at 0x411cc0
Capabilities:
Delete file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1894
call fcn.004091c0
mov eax, dword [0x4452a0]
xor eax, ebp
mov dword [ebp - 8], eax
mov dword [ebp - 0x1870], 0
mov dword [ebp - 0x186c], 0
mov dword [ebp - 0x460], 0
mov byte [ebp - 0x459], 0
mov eax, dword [0x45f3d8]
add eax, 0x300000
mov dword [ebp - 0x464], eax
push 0x4603f0
push str._sGetFile
lea ecx, [ebp - 0x668]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea edx, [ebp - 0x668]
push edx
push str._s
lea eax, [ebp - 0x458]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x80
push 0
push 0x45fe00
call fcn.00402860
add esp, 0xc
lea ecx, [ebp - 0x258]
push ecx
lea edx, [ebp - 0x458]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xffffffff
jne 0x411d8e
mov dword [ebp - 0x1870], 1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x186c], eax
jmp 0x4124b3
lea ecx, [ebp - 0x187d]
call fcn.00401ab0
mov eax, dword [ebp - 0x258]
and eax, 0x10
jne 0x41202d
lea ecx, [ebp - 0x187d]
push ecx
call fcn.0042c500
mov dword [ebp - 0x187c], eax
lea edx, [ebp - 0x22c]
push edx
lea eax, [ebp - 0x668]
push eax
push 0x438470
lea ecx, [ebp - 0x458]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea edx, [ebp - 0x458]
push edx
mov eax, dword [ebp - 0x187c]
push eax
mov ecx, dword [0x445f50]
push ecx
push str._HTMLtextView_______________View_HtmlFile_______11111______d_:__d___s_
call fcn.0042bb30
add esp, 0x10
lea edx, [ebp - 0x186c]
push edx
lea eax, [ebp - 0x458]
push eax
call fcn.004010b0
add esp, 8
test eax, eax
jl 0x41202d
lea ecx, [ebp - 0x458]
push ecx
mov edx, dword [ebp - 0x187c]
push edx
mov eax, dword [0x445f50]
push eax
push str._HTMLtextView_______________View_HtmlFile_______22222______d_:__d___s_
call fcn.0042bb30
add esp, 0x10
cmp dword [ebp + 8], 0
je 0x411ff1
movzx ecx, byte [ebp - 0x459]
cmp ecx, 1
jne 0x411ff1
mov edx, dword [ebp - 0x464]
push edx
push 0x600000
lea eax, [ebp - 0x458]
push eax
call fcn.004012f0
add esp, 0xc
mov dword [ebp - 0x1874], eax
cmp dword [ebp - 0x1874], 0
jle 0x411ff1
lea ecx, [ebp - 0x458]
push ecx
mov edx, dword [ebp - 0x1874]
push edx
push str._HTMLtextView_______________View_HtmlFile_______33333______d___s_
call fcn.0042bb30
add esp, 0xc
mov dword [ebp - 0x1878], 0
jmp 0x411ebc
mov eax, dword [ebp - 0x1878]
add eax, 1
mov dword [ebp - 0x1878], eax
mov ecx, dword [ebp - 0x1878]
cmp ecx, dword [ebp - 0x1874]
jge 0x411f13
mov edx, dword [ebp - 0x464]
add edx, dword [ebp - 0x1878]
movsx eax, byte [edx]
test eax, eax
jne 0x411eee
mov ecx, dword [ebp - 0x464]
add ecx, dword [ebp - 0x1878]
mov byte [ecx], 0x20
jmp 0x411f11
mov edx, dword [ebp - 0x464]
add edx, dword [ebp - 0x1878]
movsx eax, byte [edx]
cmp eax, 0x1f
jne 0x411f11
mov ecx, dword [ebp - 0x464]
add ecx, dword [ebp - 0x1878]
mov byte [ecx], 0x20
jmp 0x411ead
mov byte [ebp - 0x459], 9
mov edx, dword [ebp - 0x464]
add edx, dword [ebp - 0x1874]
mov byte [edx], 0
mov eax, dword [ebp - 0x464]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0
push 0
push 0xe
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x1878], eax
mov eax, dword [ebp - 0x1878]
push eax
mov ecx, dword [ebp - 0x1874]
push ecx
push str._HTMLtextView_______________FileReadLength_________________d_:__d_
call fcn.0042ba20
add esp, 0xc
mov edx, dword [ebp - 0x1878]
add edx, 0x200
cmp edx, dword [ebp - 0x1874]
jge 0x411ff1
mov eax, dword [ebp - 0x464]
add eax, dword [ebp - 0x1878]
movsx ecx, byte [eax + 3]
push ecx
mov edx, dword [ebp - 0x464]
add edx, dword [ebp - 0x1878]
movsx eax, byte [edx + 2]
push eax
mov ecx, dword [ebp - 0x464]
add ecx, dword [ebp - 0x1878]
movsx edx, byte [ecx + 1]
push edx
mov eax, dword [ebp - 0x464]
add eax, dword [ebp - 0x1878]
movsx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0x464]
add edx, dword [ebp - 0x1878]
movsx eax, byte [edx - 1]
push eax
mov ecx, dword [ebp - 0x464]
add ecx, dword [ebp - 0x1878]
movsx edx, byte [ecx - 2]
push edx
push str._HTMLtextView_______________TextViewLength_________________02X:_02X:_02X:_02X:_02X:_02X_
call fcn.0042ba20
add esp, 0x1c
lea eax, [ebp - 0x458]
push eax
mov ecx, dword [ebp - 0x460]
shl ecx, 9
lea edx, [ebp + ecx - 0x1668]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [ebp - 0x460]
add eax, 1
mov dword [ebp - 0x460], eax
mov cl, byte [ebp - 0x459]
add cl, 1
mov byte [ebp - 0x459], cl
lea edx, [ebp - 0x258]
push edx
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x41204f
lea ecx, [ebp - 0x187d]
call fcn.00401aa0
jmp 0x41205f
lea ecx, [ebp - 0x187d]
call fcn.00401aa0
jmp 0x411d8e
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp + 8], 0
je 0x41244a
movzx edx, byte [ebp - 0x459]
cmp edx, 9
jge 0x4120d0
mov eax, dword [ebp - 0x464]
push eax
push 0x600000
lea ecx, [ebp - 0x1668]
push ecx
call fcn.004012f0
add esp, 0xc
mov dword [ebp - 0x1874], eax
cmp dword [ebp - 0x1874], 0
jle 0x4120d0
mov byte [ebp - 0x459], 9
mov edx, dword [ebp - 0x464]
add edx, dword [ebp - 0x1874]
mov byte [edx], 0
mov eax, dword [ebp - 0x464]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextA]
movzx edx, byte [ebp - 0x459]
cmp edx, 9
jl 0x41244a
mov dword [ebp - 0x188c], 0xa
lea ecx, [ebp - 0x188d]
call fcn.00401ab0
movzx eax, byte [ebp - 0x459]
push eax
push str._HTMLtextView_______________bViewFlags_____________________d_
call fcn.0042ba20
add esp, 8
mov ecx, dword [ebp - 0x1874]
push ecx
mov edx, dword [ebp - 0x464]
push edx
call fcn.0040dbc0
cmp dword [ebp - 0x1874], 0x8000
jge 0x41214d
push str.Varnish_cache
mov eax, dword [ebp - 0x1874]
push eax
mov ecx, dword [ebp - 0x464]
push ecx
lea ecx, [ebp - 0x188d]
call fcn.00401ac0
mov dword [ebp - 0x1884], eax
push str._address_
mov edx, dword [ebp - 0x1874]
push edx
mov eax, dword [ebp - 0x464]
push eax
lea ecx, [ebp - 0x188d]
call fcn.00401ac0
mov dword [ebp - 0x1884], eax
push str._meta_name_author_
mov ecx, dword [ebp - 0x1874]
push ecx
mov edx, dword [ebp - 0x464]
push edx
lea ecx, [ebp - 0x188d]
call fcn.00401ac0
mov dword [ebp - 0x1884], eax
cmp dword [ebp - 0x1884], 0
je 0x4121b2
mov eax, dword [ebp - 0x1884]
push eax
push str._HTMLtextView_______________author_________________________.28s_
call fcn.0042ba20
add esp, 8
push str.powered_by
mov ecx, dword [ebp - 0x1874]
push ecx
mov edx, dword [ebp - 0x464]
push edx
lea ecx, [ebp - 0x188d]
call fcn.00401ac0
mov dword [ebp - 0x1884], eax
cmp dword [ebp - 0x1884], 0
je 0x4123f7
mov eax, dword [ebp - 0x1884]
push eax
push str._HTMLtextView_______________Powered_by______11111111_______.16s_
call fcn.0042ba20
add esp, 8
mov ecx, dword [ebp - 0x1884]
add ecx, dword [ebp - 0x188c]
movzx edx, byte [ecx]
cmp edx, 0x3a
jne 0x41221a
mov eax, dword [ebp - 0x188c]
add eax, 1
mov dword [ebp - 0x188c], eax
mov ecx, dword [ebp - 0x1884]
add ecx, dword [ebp - 0x188c]
movzx edx, byte [ecx]
cmp edx, 0x20
jg 0x41223d
mov eax, dword [ebp - 0x188c]
add eax, 1
mov dword [ebp - 0x188c], eax
mov ecx, dword [ebp - 0x1884]
add ecx, dword [ebp - 0x188c]
movzx edx, byte [ecx]
cmp edx, 0x20
jg 0x412260
mov eax, dword [ebp - 0x188c]
add eax, 1
mov dword [ebp - 0x188c], eax
mov ecx, dword [ebp - 0x1884]
add ecx, dword [ebp - 0x188c]
movzx edx, byte [ecx]
cmp edx, 0x20
jg 0x412283
mov eax, dword [ebp - 0x188c]
add eax, 1
mov dword [ebp - 0x188c], eax
mov ecx, dword [ebp - 0x1884]
add ecx, dword [ebp - 0x188c]
movzx edx, byte [ecx]
cmp edx, 0x20
jg 0x4122a6
mov eax, dword [ebp - 0x188c]
add eax, 1
mov dword [ebp - 0x188c], eax
mov ecx, dword [ebp - 0x1884]
add ecx, dword [ebp - 0x188c]
movzx edx, byte [ecx]
cmp edx, 0x20
jg 0x4122c9
mov eax, dword [ebp - 0x188c]
add eax, 1
mov dword [ebp - 0x188c], eax
jmp 0x4122da
mov edx, dword [ebp - 0x188c]
cmp edx, dword [ebp - 0x1874]
jge 0x4123e3
mov eax, dword [ebp - 0x1884]
add eax, dword [ebp - 0x188c]
movsx ecx, byte [eax]
cmp ecx, 0x3c
jne 0x412355
mov edx, dword [ebp - 0x188c]
add edx, 1
mov dword [ebp - 0x188c], edx
jmp 0x412320
mov eax, dword [ebp - 0x188c]
add eax, 1
mov dword [ebp - 0x188c], eax
mov ecx, dword [ebp - 0x188c]
cmp ecx, dword [ebp - 0x1874]
jge 0x412355
mov edx, dword [ebp - 0x1884]
add edx, dword [ebp - 0x188c]
movsx eax, byte [edx]
cmp eax, 0x3e
jne 0x412353
mov ecx, dword [ebp - 0x188c]
add ecx, 1
mov dword [ebp - 0x188c], ecx
jmp 0x412355
jmp 0x412311
mov dword [ebp - 0x1888], 0
jmp 0x41237f
mov edx, dword [ebp - 0x188c]
add edx, 1
mov dword [ebp - 0x188c], edx
mov eax, dword [ebp - 0x1888]
add eax, 1
mov dword [ebp - 0x1888], eax
cmp dword [ebp - 0x1888], 0x60
jge 0x4123dc
mov ecx, dword [ebp - 0x188c]
cmp ecx, dword [ebp - 0x1874]
jge 0x4123dc
mov edx, dword [ebp - 0x1884]
add edx, dword [ebp - 0x188c]
movsx eax, byte [edx]
cmp eax, 0x20
jl 0x4123be
mov ecx, dword [ebp - 0x1884]
add ecx, dword [ebp - 0x188c]
movsx edx, byte [ecx]
cmp edx, 0x3c
jne 0x4123c0
jmp 0x4123dc
mov eax, dword [ebp - 0x1884]
add eax, dword [ebp - 0x188c]
mov ecx, dword [ebp - 0x1888]
mov dl, byte [eax]
mov byte [ecx + 0x45fe00], dl
jmp 0x412361
jmp 0x4123e3
mov eax, dword [ebp - 0x1884]
push eax
push str._HTMLtextView_______________Powered_by______22222222_______.16s_
call fcn.0042ba20
add esp, 8
push str._title_
mov ecx, dword [ebp - 0x1874]
push ecx
mov edx, dword [ebp - 0x464]
push edx
lea ecx, [ebp - 0x188d]
call fcn.00401ac0
mov dword [ebp - 0x1884], eax
push str._center_
mov eax, dword [ebp - 0x1874]
push eax
mov ecx, dword [ebp - 0x464]
push ecx
lea ecx, [ebp - 0x188d]
call fcn.00401ac0
mov dword [ebp - 0x1884], eax
lea ecx, [ebp - 0x188d]
call fcn.00401aa0
push 0x4603f0
push str._sEntryInfo.txt
lea edx, [ebp - 0x668]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x186c]
push eax
lea ecx, [ebp - 0x668]
push ecx
call fcn.004010b0
add esp, 8
test eax, eax
jl 0x41249f
mov edx, dword [ebp - 0x464]
push edx
push 0x600000
lea eax, [ebp - 0x668]
push eax
call fcn.004012f0
add esp, 0xc
mov dword [ebp - 0x1874], eax
lea ecx, [ebp - 0x668]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x4124b3
cmp dword [ebp + 8], 0
jne 0x4124fb
mov dword [ebp - 0x1894], 0
jmp 0x4124d4
mov edx, dword [ebp - 0x1894]
add edx, 1
mov dword [ebp - 0x1894], edx
mov eax, dword [ebp - 0x1894]
cmp eax, dword [ebp - 0x460]
jge 0x4124fb
mov ecx, dword [ebp - 0x1894]
shl ecx, 9
lea edx, [ebp + ecx - 0x1668]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x4124c5
movsx eax, byte [0x45fe00]
test eax, eax
je 0x41251f
push 0
push 0x463
push 0x111
mov ecx, dword [0x45fc58]
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
push 0x45fe00
push str._HTMLtextView_______________Powered_by______33333333_______.16s_
call fcn.0042ba20
add esp, 8
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00402850
mov esp, ebp
pop ebp
ret 4