Function at 0x40d150
Capabilities:
Delete directory
Delete file
Delete registry key
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5ac
mov eax, dword [0x413008]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x5ac], 0
mov dword [ebp - 0x580], 0
mov dword [ebp - 0x5a8], 0
push 0x114
push 0
lea eax, [ebp - 0x578]
push eax
call fcn.00401700
add esp, 0xc
mov dword [ebp - 0x578], 0x114
lea ecx, [ebp - 0x578]
push ecx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov edx, dword [ebp - 0x570]
and edx, 0xff
movzx eax, dl
mov ecx, dword [ebp - 0x574]
and ecx, 0xff
movzx edx, cl
shl edx, 8
or eax, edx
mov word [ebp - 0x57c], ax
push 0x24
push 0
lea eax, [ebp - 0x5a4]
push eax
call fcn.00401700
add esp, 0xc
push str.GetNativeSystemInfo
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x580], eax
cmp dword [ebp - 0x580], 0
je 0x40d234
lea ecx, [ebp - 0x5a4]
push ecx
call dword [ebp - 0x580]
movzx edx, word [ebp - 0x5a4]
cmp edx, 9
jne 0x40d234
mov dword [ebp - 0x5a8], 1
push 0x70000
push 0
push 0x401
mov eax, dword [0x418cf8]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x402
mov ecx, dword [0x418cf8]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 1
push 0x404
mov edx, dword [0x418cf8]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
push 1
mov eax, dword [0x418ce4]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
push 0
mov ecx, dword [0x418d0c]
push ecx
call dword [sym.imp.USER32.dll_EnableWindow]
push str.ck_W
mov edx, dword [0x418cf4]
push edx
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov eax, fcn.0040b600
test eax, eax
jne 0x40d2d5
push 0x10
push 0x41571c
push 0x415724
mov ecx, dword [0x418ce4]
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call fcn.004020a5
jmp 0x40d583
push 0
push 0
push 0x405
mov edx, dword [0x418cf8]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
call fcn.0040c480
push 0
push 0x3e8
call dword [sym.imp.KERNEL32.dll_SleepEx]
push 0
push 0
push 0x405
mov eax, dword [0x418cf8]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x250
push 0
lea ecx, [ebp - 0x460]
push ecx
call fcn.00401700
add esp, 0xc
push 0x418ae0
push 0x415748
lea edx, [ebp - 0x210]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x460]
push eax
lea ecx, [ebp - 0x210]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x5ac], eax
cmp dword [ebp - 0x5ac], 0xffffffff
je 0x40d3e4
push 0x41575c
lea edx, [ebp - 0x434]
push edx
call fcn.00401ac1
add esp, 8
test eax, eax
je 0x40d395
push 0x415760
lea eax, [ebp - 0x434]
push eax
call fcn.00401ac1
add esp, 8
test eax, eax
jne 0x40d397
jmp 0x40d3c5
lea ecx, [ebp - 0x434]
push ecx
push 0x418ae0
push str._sdata_s
lea edx, [ebp - 0x210]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x460]
push ecx
mov edx, dword [ebp - 0x5ac]
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x40d3df
jmp 0x40d3e4
jmp 0x40d35c
push 0
push 0x3e8
call dword [sym.imp.KERNEL32.dll_SleepEx]
push 0x418ae0
push str._sdata
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea ecx, [ebp - 0x210]
push ecx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push 0x250
push 0
lea edx, [ebp - 0x460]
push edx
call fcn.00401700
add esp, 0xc
push 0x418ae0
push str._s
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea ecx, [ebp - 0x460]
push ecx
lea edx, [ebp - 0x210]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x5ac], eax
cmp dword [ebp - 0x5ac], 0xffffffff
je 0x40d4ea
push 0x41579c
lea eax, [ebp - 0x434]
push eax
call fcn.00401ac1
add esp, 8
test eax, eax
je 0x40d49b
push 0x4157a0
lea ecx, [ebp - 0x434]
push ecx
call fcn.00401ac1
add esp, 8
test eax, eax
jne 0x40d49d
jmp 0x40d4cb
lea edx, [ebp - 0x434]
push edx
push 0x418ae0
push 0x4157a8
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea ecx, [ebp - 0x210]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea edx, [ebp - 0x460]
push edx
mov eax, dword [ebp - 0x5ac]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x40d4e5
jmp 0x40d4ea
jmp 0x40d462
push 0x418ae0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
cmp dword [ebp - 0x5ac], 0
je 0x40d50b
mov ecx, dword [ebp - 0x5ac]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0
push 0
push 0x405
mov edx, dword [0x418cf8]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
push str.SOFTWAREIPvE.COM_vLan
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
push 0
push 0
push 0x405
mov eax, dword [0x418cf8]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
call fcn.0040b0c0
push 0
push 0
push 0x405
mov ecx, dword [0x418cf8]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
call fcn.0040af20
push 0
push 0
push 0x405
mov edx, dword [0x418cf8]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
call fcn.004020a5
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401006
mov esp, ebp
pop ebp
ret