Function at 0x404b11
Capabilities:
Delete file
Get common file path
Open clipboard
Read clipboard data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe7c
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 4], 0
mov edx, dword [ebp + 8]
mov edx, dword [edx]
lea eax, [ebp - 4]
push eax
push dword [ebp + 8]
call dword [edx + 0x20]
cmp dword [ebp - 4], 0
je 0x404e47
mov dword [ebp - 8], 0
mov edx, dword [ebp - 4]
mov edx, dword [edx]
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call dword [edx + 0x24]
cmp dword [ebp - 8], 0
je 0x404e3c
jmp 0x404e32
dec dword [ebp - 8]
lea eax, [ebp - 0x28]
push eax
call sub.oleaut32.dll_VariantInit
mov word [ebp - 0x28], 3
mov eax, dword [ebp - 8]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xc], 0
mov edx, dword [ebp - 4]
mov edx, dword [edx]
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push dword [ebp - 4]
call dword [edx + 0x2c]
cmp dword [ebp - 0xc], 0
je 0x404e32
or eax, eax
jne 0x404e32
mov edx, dword [ebp - 0xc]
mov edx, dword [edx]
lea eax, [ebp - 0x48]
push eax
push 0x4090b0
push dword [ebp - 0xc]
call dword [edx]
cmp dword [ebp - 0x48], 0
je 0x404c6c
mov edx, dword [ebp - 0x48]
mov edx, dword [edx]
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x48]
call dword [edx + 0x30]
cmp dword [ebp - 0x14], 0
je 0x404c6c
push dword [ebp - 0x14]
call fcn.00402f9b
or eax, eax
je 0x404c64
mov dword [ebp - 0x18], eax
push str.whatsite
push dword [ebp - 0x18]
call fcn.004026ef
or eax, eax
je 0x404c2e
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x4c], eax
push str.captcha
push dword [ebp - 0x18]
call fcn.004026ef
or eax, eax
je 0x404c45
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x50], eax
push str.continue
push dword [ebp - 0x18]
call fcn.004026ef
or eax, eax
je 0x404c5c
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x58], eax
push dword [ebp - 0x18]
call sub.KERNEL32.DLL_GlobalFree
push dword [ebp - 0x14]
call sub.oleaut32.dll_SysFreeString
mov edx, dword [ebp - 0xc]
mov edx, dword [edx]
lea eax, [ebp - 0x48]
push eax
push 0x409100
push dword [ebp - 0xc]
call dword [edx]
cmp dword [ebp - 0x48], 0
je 0x404cd0
mov edx, dword [ebp - 0x48]
mov edx, dword [edx]
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x48]
call dword [edx + 0x2c]
cmp dword [ebp - 0x14], 0
je 0x404cd0
push dword [ebp - 0x14]
call fcn.00402f9b
or eax, eax
je 0x404cc8
mov dword [ebp - 0x18], eax
push str.comments
push dword [ebp - 0x18]
call fcn.004026ef
or eax, eax
je 0x404cc0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x54], eax
push dword [ebp - 0x18]
call sub.KERNEL32.DLL_GlobalFree
push dword [ebp - 0x14]
call sub.oleaut32.dll_SysFreeString
mov edx, dword [ebp - 0xc]
mov edx, dword [edx]
lea eax, [ebp - 0x10]
push eax
push 0x4091e0
push dword [ebp - 0xc]
call dword [edx]
cmp dword [ebp - 0x10], 0
je 0x404e27
mov edx, dword [ebp - 0x10]
mov edx, dword [edx]
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x10]
call dword [edx + 0x44]
cmp dword [ebp - 0x14], 0
je 0x404d48
push dword [ebp - 0x14]
call fcn.00402f9b
or eax, eax
je 0x404d40
mov dword [ebp - 0x18], eax
push str.captcha.php
push dword [ebp - 0x18]
call fcn.004026ef
or eax, eax
je 0x404d38
push 0x424db4
push 0x42db96
call sub.KERNEL32.DLL_lstrcatA
mov dword [ebp - 0x2c], 1
push dword [ebp - 0x18]
call sub.KERNEL32.DLL_GlobalFree
push dword [ebp - 0x14]
call sub.oleaut32.dll_SysFreeString
cmp dword [ebp - 0x2c], 0
je 0x404e1c
mov dword [ebp - 0x2c], 0
call sub.user32.dll_EmptyClipboard
mov edx, dword [ebp - 0x10]
mov edx, dword [edx]
lea eax, [ebp - 0x30]
push eax
push 0x4091c0
push dword [ebp - 0x10]
call dword [edx]
cmp dword [ebp - 0x30], 0
je 0x404e1c
mov edx, dword [ebp - 0x30]
mov edx, dword [edx]
push 0
push 0
push 2
push 0xf
push 0x4091d0
push dword [ebp - 0x30]
call dword [edx + 0x10]
push 2
call sub.user32.dll_IsClipboardFormatAvailable
or eax, eax
je 0x404e1c
push 0
call sub.user32.dll_OpenClipboard
push 2
call sub.user32.dll_GetClipboardData
or eax, eax
je 0x404e17
mov dword [ebp - 0x34], eax
push 0x40b5b9
push 0x802
call sub.KERNEL32.DLL_GetTempPathA
push 0x424dc0
push 0x40b5b9
call sub.KERNEL32.DLL_lstrcatA
push 0x40b5b9
call sub.KERNEL32.DLL_DeleteFileA
push 0x40b5b9
push dword [ebp - 0x34]
call fcn.00405076
push 0
push 0x1e
push 0x432df2
call fcn.00407690
push 0x424dd4
push 0x40b5b9
call fcn.004050f7
push dword [ebp - 0x34]
call sub.gdi32.dll_DeleteObject
push 0x40b5b9
call sub.KERNEL32.DLL_DeleteFileA
call sub.user32.dll_CloseClipboard
mov edx, dword [ebp - 0x10]
mov edx, dword [edx]
push dword [ebp - 0x10]
call dword [edx + 8]
mov edx, dword [ebp - 0xc]
mov edx, dword [edx]
push dword [ebp - 0xc]
call dword [edx + 8]
cmp dword [ebp - 8], 0
jne 0x404b82
mov edx, dword [ebp - 4]
mov edx, dword [edx]
push dword [ebp - 4]
call dword [edx + 8]
cmp dword [ebp - 0x4c], 0
je 0x40503c
cmp dword [ebp - 0x50], 0
je 0x40503c
cmp dword [ebp - 0x54], 0
je 0x40503c
cmp dword [ebp - 0x58], 0
je 0x40503c
cmp dword [0x432dee], 0
je 0x40503c
push 0x424de0
push 0x42db96
call sub.KERNEL32.DLL_lstrcatA
push 0x432df2
push 0x42db96
call sub.KERNEL32.DLL_lstrcatA
mov esi, 0x432df2
cmp dword [esi], 0x7c7c7c7c
jne 0x405010
add esi, 4
lea edi, [ebp - 0xbc]
jmp 0x404eb7
movsb byte es:[edi], byte [esi]
cmp byte [esi], 0x7c
je 0x404ec1
cmp byte [esi], 0
jne 0x404eb6
mov byte [edi], 0
inc esi
lea edi, [ebp - 0x120]
jmp 0x404ece
movsb byte es:[edi], byte [esi]
cmp byte [esi], 0x7c
je 0x404ed8
cmp byte [esi], 0
jne 0x404ecd
mov byte [edi], 0
inc esi
lea edi, [ebp - 0x184]
jmp 0x404ee5
movsb byte es:[edi], byte [esi]
cmp byte [esi], 0x7c
je 0x404eef
cmp byte [esi], 0
jne 0x404ee4
mov byte [edi], 0
inc esi
lea eax, [ebp - 0xbc]
push eax
call fcn.00403875
or eax, eax
je 0x404f33
mov dword [ebp - 0x18], eax
push dword [ebp - 0x18]
call sub.oleaut32.dll_SysAllocString
or eax, eax
je 0x404f2b
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x4c]
mov edx, dword [edx]
push dword [ebp - 0x14]
push dword [ebp - 0x4c]
call dword [edx + 0x24]
push dword [ebp - 0x14]
call sub.oleaut32.dll_SysFreeString
push dword [ebp - 0x18]
call sub.KERNEL32.DLL_GlobalFree
lea eax, [ebp - 0x120]
push eax
call fcn.00403875
or eax, eax
je 0x404f73
mov dword [ebp - 0x18], eax
push dword [ebp - 0x18]
call sub.oleaut32.dll_SysAllocString
or eax, eax
je 0x404f6b
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x50]
mov edx, dword [edx]
push dword [ebp - 0x14]
push dword [ebp - 0x50]
call dword [edx + 0x24]
push dword [ebp - 0x14]
call sub.oleaut32.dll_SysFreeString
push dword [ebp - 0x18]
call sub.KERNEL32.DLL_GlobalFree
lea eax, [ebp - 0x184]
push eax
call fcn.00403875
or eax, eax
je 0x404fb3
mov dword [ebp - 0x18], eax
push dword [ebp - 0x18]
call sub.oleaut32.dll_SysAllocString
or eax, eax
je 0x404fab
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x54]
mov edx, dword [edx]
push dword [ebp - 0x14]
push dword [ebp - 0x54]
call dword [edx + 0x20]
push dword [ebp - 0x14]
call sub.oleaut32.dll_SysFreeString
push dword [ebp - 0x18]
call sub.KERNEL32.DLL_GlobalFree
push 0x1388
call sub.KERNEL32.DLL_Sleep
call fcn.00404114
push dword [0x425000]
call fcn.004052db
or eax, eax
jne 0x404fd5
leave
ret 4
mov edx, dword [ebp - 0x58]
mov edx, dword [edx]
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x58]
call dword [edx + 0x44]
mov edx, dword [ebp - 0x48]
mov edx, dword [edx]
push dword [ebp - 0x48]
call dword [edx + 0x60]
push 0x424de8
push 0x42db96
call sub.KERNEL32.DLL_lstrcatA
mov dword [ebp - 0x2c], 1
mov edx, dword [ebp - 0x48]
mov edx, dword [edx]
push dword [ebp - 0x48]
call dword [edx + 8]
mov edx, dword [ebp - 0x4c]
mov edx, dword [edx]
push dword [ebp - 0x4c]
call dword [edx + 8]
mov edx, dword [ebp - 0x50]
mov edx, dword [edx]
push dword [ebp - 0x50]
call dword [edx + 8]
mov edx, dword [ebp - 0x54]
mov edx, dword [edx]
push dword [ebp - 0x54]
call dword [edx + 8]
mov edx, dword [ebp - 0x58]
mov edx, dword [edx]
push dword [ebp - 0x58]
call dword [edx + 8]
mov eax, dword [ebp - 0x2c]
leave
ret 4