Function at 0x411b40
Capabilities:
Delete file
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1894
call fcn.004090a0
mov eax, dword [0x4422a0]
xor eax, ebp
mov dword [ebp - 8], eax
mov dword [ebp - 0x1870], 0
mov dword [ebp - 0x186c], 0
mov dword [ebp - 0x460], 0
mov byte [ebp - 0x459], 0
mov eax, dword [0x45c2f8]
add eax, 0x300000
mov dword [ebp - 0x464], eax
push 0x45d310
push str._sGetFile
lea ecx, [ebp - 0x668]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea edx, [ebp - 0x668]
push edx
push str._s
lea eax, [ebp - 0x458]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x80
push 0
push 0x45cd20
call fcn.00402740
add esp, 0xc
lea ecx, [ebp - 0x258]
push ecx
lea edx, [ebp - 0x458]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xffffffff
jne 0x411c0e
mov dword [ebp - 0x1870], 1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x186c], eax
jmp 0x412333
lea ecx, [ebp - 0x187d]
call fcn.00401a00
mov eax, dword [ebp - 0x258]
and eax, 0x10
jne 0x411ead
lea ecx, [ebp - 0x187d]
push ecx
call fcn.00428d70
mov dword [ebp - 0x187c], eax
lea edx, [ebp - 0x22c]
push edx
lea eax, [ebp - 0x668]
push eax
push 0x435420
lea ecx, [ebp - 0x458]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea edx, [ebp - 0x458]
push edx
mov eax, dword [ebp - 0x187c]
push eax
mov ecx, dword [0x442f50]
push ecx
push str._HTMLtextView_______________View_HtmlFile_______11111______d_:__d___s_
call fcn.004283a0
add esp, 0x10
lea edx, [ebp - 0x186c]
push edx
lea eax, [ebp - 0x458]
push eax
call fcn.004010b0
add esp, 8
test eax, eax
jl 0x411ead
lea ecx, [ebp - 0x458]
push ecx
mov edx, dword [ebp - 0x187c]
push edx
mov eax, dword [0x442f50]
push eax
push str._HTMLtextView_______________View_HtmlFile_______22222______d_:__d___s_
call fcn.004283a0
add esp, 0x10
cmp dword [ebp + 8], 0
je 0x411e71
movzx ecx, byte [ebp - 0x459]
cmp ecx, 1
jne 0x411e71
mov edx, dword [ebp - 0x464]
push edx
push 0x600000
lea eax, [ebp - 0x458]
push eax
call fcn.004012f0
add esp, 0xc
mov dword [ebp - 0x1874], eax
cmp dword [ebp - 0x1874], 0
jle 0x411e71
lea ecx, [ebp - 0x458]
push ecx
mov edx, dword [ebp - 0x1874]
push edx
push str._HTMLtextView_______________View_HtmlFile_______33333______d___s_
call fcn.004283a0
add esp, 0xc
mov dword [ebp - 0x1878], 0
jmp 0x411d3c
mov eax, dword [ebp - 0x1878]
add eax, 1
mov dword [ebp - 0x1878], eax
mov ecx, dword [ebp - 0x1878]
cmp ecx, dword [ebp - 0x1874]
jge 0x411d93
mov edx, dword [ebp - 0x464]
add edx, dword [ebp - 0x1878]
movsx eax, byte [edx]
test eax, eax
jne 0x411d6e
mov ecx, dword [ebp - 0x464]
add ecx, dword [ebp - 0x1878]
mov byte [ecx], 0x20
jmp 0x411d91
mov edx, dword [ebp - 0x464]
add edx, dword [ebp - 0x1878]
movsx eax, byte [edx]
cmp eax, 0x1f
jne 0x411d91
mov ecx, dword [ebp - 0x464]
add ecx, dword [ebp - 0x1878]
mov byte [ecx], 0x20
jmp 0x411d2d
mov byte [ebp - 0x459], 9
mov edx, dword [ebp - 0x464]
add edx, dword [ebp - 0x1874]
mov byte [edx], 0
mov eax, dword [ebp - 0x464]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0
push 0
push 0xe
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x1878], eax
mov eax, dword [ebp - 0x1878]
push eax
mov ecx, dword [ebp - 0x1874]
push ecx
push str._HTMLtextView_______________FileReadLength_________________d_:__d_
call fcn.00428290
add esp, 0xc
mov edx, dword [ebp - 0x1878]
add edx, 0x200
cmp edx, dword [ebp - 0x1874]
jge 0x411e71
mov eax, dword [ebp - 0x464]
add eax, dword [ebp - 0x1878]
movsx ecx, byte [eax + 3]
push ecx
mov edx, dword [ebp - 0x464]
add edx, dword [ebp - 0x1878]
movsx eax, byte [edx + 2]
push eax
mov ecx, dword [ebp - 0x464]
add ecx, dword [ebp - 0x1878]
movsx edx, byte [ecx + 1]
push edx
mov eax, dword [ebp - 0x464]
add eax, dword [ebp - 0x1878]
movsx ecx, byte [eax]
push ecx
mov edx, dword [ebp - 0x464]
add edx, dword [ebp - 0x1878]
movsx eax, byte [edx - 1]
push eax
mov ecx, dword [ebp - 0x464]
add ecx, dword [ebp - 0x1878]
movsx edx, byte [ecx - 2]
push edx
push str._HTMLtextView_______________TextViewLength_________________02X:_02X:_02X:_02X:_02X:_02X_
call fcn.00428290
add esp, 0x1c
lea eax, [ebp - 0x458]
push eax
mov ecx, dword [ebp - 0x460]
shl ecx, 9
lea edx, [ebp + ecx - 0x1668]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [ebp - 0x460]
add eax, 1
mov dword [ebp - 0x460], eax
mov cl, byte [ebp - 0x459]
add cl, 1
mov byte [ebp - 0x459], cl
lea edx, [ebp - 0x258]
push edx
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x411ecf
lea ecx, [ebp - 0x187d]
call fcn.004019f0
jmp 0x411edf
lea ecx, [ebp - 0x187d]
call fcn.004019f0
jmp 0x411c0e
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp + 8], 0
je 0x4122ca
movzx edx, byte [ebp - 0x459]
cmp edx, 9
jge 0x411f50
mov eax, dword [ebp - 0x464]
push eax
push 0x600000
lea ecx, [ebp - 0x1668]
push ecx
call fcn.004012f0
add esp, 0xc
mov dword [ebp - 0x1874], eax
cmp dword [ebp - 0x1874], 0
jle 0x411f50
mov byte [ebp - 0x459], 9
mov edx, dword [ebp - 0x464]
add edx, dword [ebp - 0x1874]
mov byte [edx], 0
mov eax, dword [ebp - 0x464]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextA]
movzx edx, byte [ebp - 0x459]
cmp edx, 9
jl 0x4122ca
mov dword [ebp - 0x188c], 0xa
lea ecx, [ebp - 0x188d]
call fcn.00401a00
movzx eax, byte [ebp - 0x459]
push eax
push str._HTMLtextView_______________bViewFlags_____________________d_
call fcn.00428290
add esp, 8
mov ecx, dword [ebp - 0x1874]
push ecx
mov edx, dword [ebp - 0x464]
push edx
call fcn.0040de60
cmp dword [ebp - 0x1874], 0x8000
jge 0x411fcd
push str.Varnish_cache
mov eax, dword [ebp - 0x1874]
push eax
mov ecx, dword [ebp - 0x464]
push ecx
lea ecx, [ebp - 0x188d]
call fcn.00401a10
mov dword [ebp - 0x1884], eax
push str._address_
mov edx, dword [ebp - 0x1874]
push edx
mov eax, dword [ebp - 0x464]
push eax
lea ecx, [ebp - 0x188d]
call fcn.00401a10
mov dword [ebp - 0x1884], eax
push str._meta_name_author_
mov ecx, dword [ebp - 0x1874]
push ecx
mov edx, dword [ebp - 0x464]
push edx
lea ecx, [ebp - 0x188d]
call fcn.00401a10
mov dword [ebp - 0x1884], eax
cmp dword [ebp - 0x1884], 0
je 0x412032
mov eax, dword [ebp - 0x1884]
push eax
push str._HTMLtextView_______________author_________________________.28s_
call fcn.00428290
add esp, 8
push str.powered_by
mov ecx, dword [ebp - 0x1874]
push ecx
mov edx, dword [ebp - 0x464]
push edx
lea ecx, [ebp - 0x188d]
call fcn.00401a10
mov dword [ebp - 0x1884], eax
cmp dword [ebp - 0x1884], 0
je 0x412277
mov eax, dword [ebp - 0x1884]
push eax
push str._HTMLtextView_______________Powered_by______11111111_______.16s_
call fcn.00428290
add esp, 8
mov ecx, dword [ebp - 0x1884]
add ecx, dword [ebp - 0x188c]
movzx edx, byte [ecx]
cmp edx, 0x3a
jne 0x41209a
mov eax, dword [ebp - 0x188c]
add eax, 1
mov dword [ebp - 0x188c], eax
mov ecx, dword [ebp - 0x1884]
add ecx, dword [ebp - 0x188c]
movzx edx, byte [ecx]
cmp edx, 0x20
jg 0x4120bd
mov eax, dword [ebp - 0x188c]
add eax, 1
mov dword [ebp - 0x188c], eax
mov ecx, dword [ebp - 0x1884]
add ecx, dword [ebp - 0x188c]
movzx edx, byte [ecx]
cmp edx, 0x20
jg 0x4120e0
mov eax, dword [ebp - 0x188c]
add eax, 1
mov dword [ebp - 0x188c], eax
mov ecx, dword [ebp - 0x1884]
add ecx, dword [ebp - 0x188c]
movzx edx, byte [ecx]
cmp edx, 0x20
jg 0x412103
mov eax, dword [ebp - 0x188c]
add eax, 1
mov dword [ebp - 0x188c], eax
mov ecx, dword [ebp - 0x1884]
add ecx, dword [ebp - 0x188c]
movzx edx, byte [ecx]
cmp edx, 0x20
jg 0x412126
mov eax, dword [ebp - 0x188c]
add eax, 1
mov dword [ebp - 0x188c], eax
mov ecx, dword [ebp - 0x1884]
add ecx, dword [ebp - 0x188c]
movzx edx, byte [ecx]
cmp edx, 0x20
jg 0x412149
mov eax, dword [ebp - 0x188c]
add eax, 1
mov dword [ebp - 0x188c], eax
jmp 0x41215a
mov edx, dword [ebp - 0x188c]
cmp edx, dword [ebp - 0x1874]
jge 0x412263
mov eax, dword [ebp - 0x1884]
add eax, dword [ebp - 0x188c]
movsx ecx, byte [eax]
cmp ecx, 0x3c
jne 0x4121d5
mov edx, dword [ebp - 0x188c]
add edx, 1
mov dword [ebp - 0x188c], edx
jmp 0x4121a0
mov eax, dword [ebp - 0x188c]
add eax, 1
mov dword [ebp - 0x188c], eax
mov ecx, dword [ebp - 0x188c]
cmp ecx, dword [ebp - 0x1874]
jge 0x4121d5
mov edx, dword [ebp - 0x1884]
add edx, dword [ebp - 0x188c]
movsx eax, byte [edx]
cmp eax, 0x3e
jne 0x4121d3
mov ecx, dword [ebp - 0x188c]
add ecx, 1
mov dword [ebp - 0x188c], ecx
jmp 0x4121d5
jmp 0x412191
mov dword [ebp - 0x1888], 0
jmp 0x4121ff
mov edx, dword [ebp - 0x188c]
add edx, 1
mov dword [ebp - 0x188c], edx
mov eax, dword [ebp - 0x1888]
add eax, 1
mov dword [ebp - 0x1888], eax
cmp dword [ebp - 0x1888], 0x60
jge 0x41225c
mov ecx, dword [ebp - 0x188c]
cmp ecx, dword [ebp - 0x1874]
jge 0x41225c
mov edx, dword [ebp - 0x1884]
add edx, dword [ebp - 0x188c]
movsx eax, byte [edx]
cmp eax, 0x20
jl 0x41223e
mov ecx, dword [ebp - 0x1884]
add ecx, dword [ebp - 0x188c]
movsx edx, byte [ecx]
cmp edx, 0x3c
jne 0x412240
jmp 0x41225c
mov eax, dword [ebp - 0x1884]
add eax, dword [ebp - 0x188c]
mov ecx, dword [ebp - 0x1888]
mov dl, byte [eax]
mov byte [ecx + 0x45cd20], dl
jmp 0x4121e1
jmp 0x412263
mov eax, dword [ebp - 0x1884]
push eax
push str._HTMLtextView_______________Powered_by______22222222_______.16s_
call fcn.00428290
add esp, 8
push str._title_
mov ecx, dword [ebp - 0x1874]
push ecx
mov edx, dword [ebp - 0x464]
push edx
lea ecx, [ebp - 0x188d]
call fcn.00401a10
mov dword [ebp - 0x1884], eax
push str._center_
mov eax, dword [ebp - 0x1874]
push eax
mov ecx, dword [ebp - 0x464]
push ecx
lea ecx, [ebp - 0x188d]
call fcn.00401a10
mov dword [ebp - 0x1884], eax
lea ecx, [ebp - 0x188d]
call fcn.004019f0
push 0x45d310
push str._sEntryInfo.txt
lea edx, [ebp - 0x668]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x186c]
push eax
lea ecx, [ebp - 0x668]
push ecx
call fcn.004010b0
add esp, 8
test eax, eax
jl 0x41231f
mov edx, dword [ebp - 0x464]
push edx
push 0x600000
lea eax, [ebp - 0x668]
push eax
call fcn.004012f0
add esp, 0xc
mov dword [ebp - 0x1874], eax
lea ecx, [ebp - 0x668]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x412333
cmp dword [ebp + 8], 0
jne 0x41237b
mov dword [ebp - 0x1894], 0
jmp 0x412354
mov edx, dword [ebp - 0x1894]
add edx, 1
mov dword [ebp - 0x1894], edx
mov eax, dword [ebp - 0x1894]
cmp eax, dword [ebp - 0x460]
jge 0x41237b
mov ecx, dword [ebp - 0x1894]
shl ecx, 9
lea edx, [ebp + ecx - 0x1668]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x412345
movsx eax, byte [0x45cd20]
test eax, eax
je 0x41239f
push 0
push 0x463
push 0x111
mov ecx, dword [0x45cb78]
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
push 0x45cd20
push str._HTMLtextView_______________Powered_by______33333333_______.16s_
call fcn.00428290
add esp, 8
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00402730
mov esp, ebp
pop ebp
ret 4