Function at 0x401000
Capabilities:
Delete directory

Disassembly:
push 0xd4
push 0
push 0x40b02c
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x40b030], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x40b02c], eax
call section..text
call fcn.00407bb0
call fcn.00406f47
call fcn.00406780
call fcn.004051f3
call fcn.00404820
call fcn.004044d0
call fcn.00403b2b
call fcn.00403884
push 7
push 0x40a1e8
lea eax, [0x40b0fc]
push eax
push 8
call fcn.00404630
mov dword [0x40b0f8], eax
push 7
push 0x40b0f0
push 0x40a1e0
mov edx, dword [0x40b0f0]
call fcn.00403060
mov eax, 0x401
push 8
call fcn.004030a0
mov edx, str.Continue_
lea ecx, [0x40b068]
call fcn.004030f8
mov edx, 0x40a0a3
lea ecx, [0x40b06c]
call fcn.004030f8
mov edx, str.Can_not_create_some_of_your_include_files.
lea ecx, [0x40b070]
call fcn.004030f8
mov edx, str.Can_not_allocate_the_memory.
lea ecx, [0x40b074]
call fcn.004030f8
mov edx, str.Wrong_password.
lea ecx, [0x40b078]
call fcn.004030f8
mov edx, 0x40a016
lea ecx, [0x40b07c]
call fcn.004030f8
mov edx, str.The_file
lea ecx, [0x40b080]
call fcn.004030f8
mov edx, str._already_exists_in_the_current_directory._Overwrite_
lea ecx, [0x40b084]
call fcn.004030f8
mov edx, str.An_unknown_error_occured._The_program_will_be_terminated.
lea ecx, [0x40b088]
call fcn.004030f8
mov edx, 0x40a0aa
lea ecx, [0x40b08c]
call fcn.004030f8
mov edx, str.Choose_a_location_to_save_the_files.
lea ecx, [0x40b090]
call fcn.004030f8
mov edx, str.Password
lea ecx, [0x40b094]
call fcn.004030f8
mov edx, str.Please_enter_the_password.
lea ecx, [0x40b098]
call fcn.004030f8
call fcn.00404417
mov ebx, eax
cmp ebx, 0x32
jge 0x4011ac
push 0x10
push dword [0x40b08c]
push dword [0x40b06c]
call fcn.00403892
jmp 0x401b35
lea eax, [0x401fc9]
push eax
call fcn.004042b0
call fcn.00403c56
mov dword [0x40b0a8], eax
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x40b0ac], eax
mov ebx, dword [0x40b0a8]
and ebx, ebx
jle 0x4012c3
mov ebx, dword [0x40b0a8]
and ebx, ebx
jle 0x4012c3
mov dword [0x40b0b0], 0
mov ebx, dword [0x40b0a8]
dec ebx
cmp ebx, dword [0x40b0b0]
jl 0x4012c3
mov eax, dword [0x40b2f8]
push eax
push eax
push dword [0x40b0b0]
call fcn.00403c08
lea ecx, [0x40b0b4]
pop edx
call fcn.00403100
push dword [0x40b0b4]
mov edx, str._b2epass
pop ecx
call fcn.00407c00
je 0x401247
mov dword [0x40b0b8], 1
jmp 0x4012b8
mov ebx, dword [0x40b0b8]
cmp ebx, 1
jne 0x40127b
mov edx, dword [0x40b0b4]
push dword [0x40b2f8]
call fcn.00407c30
lea ecx, [0x40b064]
pop edx
call fcn.00403100
mov dword [0x40b0b8], 0
jmp 0x4012b8
push dword [0x40b0b4]
call sub.SHLWAPI.dll_PathQuoteSpacesA
mov edx, dword [0x40b0bc]
push dword [0x40b2f8]
call fcn.00407c30
mov edx, dword [0x40b0b4]
call fcn.00407c30
mov edx, str.___
call fcn.00407c30
lea ecx, [0x40b0bc]
pop edx
call fcn.00403100
inc dword [0x40b0b0]
jmp 0x4011f7
push 0x40a09d
push dword [0x40b0ac]
call fcn.00401fec
and eax, eax
je 0x4012ee
mov eax, dword [0x40b0a0]
mov dword [0x40b0c0], eax
push dword [0x40b0c0]
call fcn.00401b73
jmp 0x40130e
push 0x10
push dword [0x40b088]
push dword [0x40b06c]
call fcn.00403892
push 1
jmp 0x401b3a
push 0x40a09b
push dword [0x40b0ac]
call fcn.00401fec
and eax, eax
je 0x401348
mov eax, dword [0x40b2f8]
push eax
push eax
push dword [0x40b09c]
push dword [0x40b0a0]
call fcn.00404500
lea ecx, [0x40b0a4]
pop edx
call fcn.00403100
jmp 0x401368
push 0x10
push dword [0x40b088]
push dword [0x40b06c]
call fcn.00403892
push 1
jmp 0x401b3a
push 0x40a078
push dword [0x40b0ac]
call fcn.00401fec
and eax, eax
je 0x40139c
mov eax, dword [0x40b0a0]
mov dword [0x40b0c4], eax
mov eax, dword [0x40b09c]
mov dword [0x40b044], eax
mov eax, dword [0x40b0c4]
mov dword [0x40b038], eax
jmp 0x4013bc
push 0x10
push dword [0x40b088]
push dword [0x40b06c]
call fcn.00403892
push 1
jmp 0x401b3a
push 0x40a08a
push dword [0x40b0ac]
call fcn.00401fec
and eax, eax
je 0x4013ee
mov eax, dword [0x40b0a0]
mov dword [0x40b0c8], eax
mov eax, dword [0x40b09c]
mov dword [0x40b048], eax
mov eax, dword [0x40b0c8]
mov dword [0x40b03c], eax
push 0x40a088
push dword [0x40b0ac]
call fcn.00401fec
and eax, eax
je 0x401420
mov eax, dword [0x40b0a0]
mov dword [0x40b0cc], eax
mov eax, dword [0x40b09c]
mov dword [0x40b04c], eax
mov eax, dword [0x40b0cc]
mov dword [0x40b040], eax
push 0x40a09f
push dword [0x40b0ac]
call fcn.00401fec
and eax, eax
je 0x4016ba
mov edx, dword [0x40b064]
xor ecx, ecx
call fcn.00407c00
jne 0x401469
mov edx, dword [0x40b064]
push dword [0x40b2f8]
call fcn.00407c30
lea ecx, [0x40b0d0]
pop edx
call fcn.00403100
jmp 0x4015df
push 0xc80001
push dword [0x40b094]
push 0x6e
push 0xc8
push 0
push 0
push 0
call fcn.00405526
push dword [0x40b098]
push 0x14
push 0x9e
push 0xf
push 0x15
push 1
call fcn.004049fd
push 0x20
push 0x40a00d
push 0x14
push 0x9e
push 0x28
push 0x15
push 2
call fcn.00404aee
push 0x40a15a
push 0x14
push 0x4e
push 0x4b
push 0x3d
push 3
call fcn.00404cf3
push 4
push 0xd
push 0
call fcn.00405549
push 2
call fcn.00404d13
call fcn.0040579e
push eax
mov ebx, 0x10
cmp ebx, dword [esp]
jne 0x401549
push dword [0x40b05c]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x401b3a
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x401592
call fcn.004057a6
push eax
mov ebx, 4
cmp ebx, dword [esp]
jne 0x40158f
mov eax, dword [0x40b2f8]
push eax
push eax
push 2
call fcn.00404d3c
lea ecx, [0x40b0d0]
pop edx
call fcn.00403100
push 0
call fcn.00405065
add esp, 8
jmp 0x4015df
pop eax
jmp 0x4015d9
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x4015d9
call fcn.004057b4
push eax
mov ebx, 3
cmp ebx, dword [esp]
jne 0x4015d8
mov eax, dword [0x40b2f8]
push eax
push eax
push 2
call fcn.00404d3c
lea ecx, [0x40b0d0]
pop edx
call fcn.00403100
push 0
call fcn.00405065
add esp, 8
jmp 0x4015df
pop eax
pop eax
jmp 0x40151f
mov eax, dword [0x40b2f8]
push eax
push eax
push dword [0x40b0d0]
call fcn.004031e0
push eax
mov eax, dword [0x40b0d0]
push eax
call fcn.00406fa0
inc dword [0x40b2f8]
mov eax, dword [0x40b2f8]
push eax
push eax
push dword [0x40b09c]
push dword [0x40b0a0]
call fcn.00404500
pop edx
pop ecx
mov dword [0x40b2f8], ecx
add ecx, dword [0x40a1f0]
add edx, dword [0x40a1f0]
call fcn.00407c00
jne 0x401661
push 0x10
push dword [0x40b078]
push dword [0x40b06c]
call fcn.00403892
push dword [0x40b05c]
call sub.KERNEL32.dll_RemoveDirectoryA
push 1
jmp 0x401b3a
push 0x40a0a1
push dword [0x40b0ac]
call fcn.00401fec
and eax, eax
je 0x40167f
mov eax, dword [0x40b0a0]
mov dword [0x40b0d4], eax
push dword [0x40b04c]
push dword [0x40b048]
push dword [0x40b044]
push dword [0x40b0d4]
push dword [0x40b0cc]
push dword [0x40b0c8]
push dword [0x40b0c4]
push dword [0x40b0d0]
push dword [0x40b0ac]
call fcn.00401c91
mov eax, dword [0x40b2f8]
push eax
push eax
push dword [0x40b044]
push dword [0x40b038]
call fcn.00404500
lea ecx, [0x40b0d8]
pop edx
call fcn.00403100
mov eax, dword [0x40b2f8]
push eax
push eax
push dword [0x40b048]
push dword [0x40b03c]
call fcn.00404500
lea ecx, [0x40b0dc]
pop edx
call fcn.00403100
push 0x40a086
push dword [0x40b0ac]
call fcn.00401fec
and eax, eax
je 0x401983
mov eax, dword [0x40b2f8]
push eax
push eax
push 0
call fcn.00403c08
inc dword [0x40b2f8]
mov eax, dword [0x40b2f8]
push eax
push eax
push dword [0x40b09c]
push dword [0x40b0a0]
call fcn.00404500
pop edx
pop ecx
mov dword [0x40b2f8], ecx
add ecx, dword [0x40a1f0]
add edx, dword [0x40a1f0]
call fcn.00407c00
je 0x401776
mov ebx, dword [0x40b0a8]
cmp ebx, 1
jne 0x401776
mov eax, 1
jmp 0x401778
xor eax, eax
and eax, eax
je 0x401983
mov eax, dword [0x40b2f8]
push eax
push eax
mov eax, dword [0x40b2f8]
push eax
push eax
call fcn.00406515
inc dword [0x40b2f8]
push dword [0x40b090]
mov edx, dword [0x40a1f0]
add dword [esp + 4], edx
call fcn.004038e8
lea ecx, [0x40b0e0]
pop edx
call fcn.00403100
mov edx, dword [0x40b0e0]
xor ecx, ecx
call fcn.00407c00
jne 0x401927
mov edx, dword [0x40b0e0]
push dword [0x40b2f8]
call fcn.00407c30
lea ecx, [0x40b058]
pop edx
call fcn.00403100
mov edx, dword [0x40b0dc]
xor ecx, ecx
call fcn.00407c00
jne 0x401804
push dword [0x40b0dc]
call fcn.00402053
push dword [0x40b0a4]
push 1
call fcn.00406970
and eax, eax
je 0x4018f9
push 1
call fcn.00406710
push dword [0x40b2f8]
push 0x24
mov edx, dword [0x40b080]
push dword [0x40b2f8]
call fcn.00407c30
mov edx, 0x40a010
call fcn.00407c30
mov edx, dword [0x40b0a4]
call fcn.00407c30
mov edx, 0x40a010
call fcn.00407c30
mov edx, dword [0x40b084]
call fcn.00407c30
inc dword [0x40b2f8]
push dword [0x40b07c]
mov edx, dword [0x40a1f0]
add dword [esp + 4], edx
call fcn.00403892
pop dword [0x40b2f8]
mov dword [0x40b0e4], eax
mov ebx, dword [0x40b0e4]
cmp ebx, 7
jne 0x4018f9
mov eax, dword [0x40b2f8]
push eax
push eax
mov eax, dword [0x40b2f8]
push eax
push eax
push dword [0x40b2f8]
call fcn.00403c69
inc dword [0x40b2f8]
mov edx, dword [0x40a1f0]
add dword [esp], edx
call fcn.00406555
inc dword [0x40b2f8]
mov edx, dword [0x40a1f0]
add dword [esp], edx
call fcn.004065d0
pop dword [0x40b2f8]
push dword [0x40b05c]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x401b3a
push dword [0x40b0a4]
push 1
call fcn.004068b0
and eax, eax
je 0x401927
push dword [0x40b0d8]
push 1
call fcn.00406990
push 1
call fcn.00406710
mov eax, dword [0x40b2f8]
push eax
push eax
mov eax, dword [0x40b2f8]
push eax
push eax
push dword [0x40b2f8]
call fcn.00403c69
inc dword [0x40b2f8]
mov edx, dword [0x40a1f0]
add dword [esp], edx
call fcn.00406555
inc dword [0x40b2f8]
mov edx, dword [0x40a1f0]
add dword [esp], edx
call fcn.004065d0
pop dword [0x40b2f8]
push dword [0x40b05c]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x401b3a
mov edx, dword [0x40b05c]
push dword [0x40b2f8]
call fcn.00407c30
mov edx, 0x40a076
call fcn.00407c30
mov edx, dword [0x40b0a4]
call fcn.00407c30
lea ecx, [0x40b0a4]
pop edx
call fcn.00403100
push dword [0x40b0a4]
push 1
call fcn.004068b0
and eax, eax
je 0x4019e5
push dword [0x40b0d8]
push 1
call fcn.00406990
push 1
call fcn.00406710
jmp 0x401a20
push dword [0x40b0a4]
call fcn.004065e0
call fcn.00401f60
push 0x10
push dword [0x40b088]
push dword [0x40b06c]
call fcn.00403892
push dword [0x40b05c]
call sub.KERNEL32.dll_RemoveDirectoryA
push 1
jmp 0x401b3a
mov edx, dword [0x40b0dc]
xor ecx, ecx
call fcn.00407c00
jne 0x401a3a
push dword [0x40b0dc]
call fcn.00402053
push dword [0x40b058]
push 0x40a08c
call fcn.00403cc4
mov eax, dword [0x40b2f8]
push eax
push eax
push dword [0x40b2f8]
mov eax, dword [0x40b060]
cdq
push edx
push eax
call fcn.00403380
inc dword [0x40b2f8]
push str.b2eincfilecount
mov edx, dword [0x40a1f0]
add dword [esp + 4], edx
call fcn.00403cc4
pop dword [0x40b2f8]
push 0x64
push dword [0x40b058]
push dword [0x40b0bc]
push dword [0x40b0a4]
call fcn.0040412f
mov dword [0x40b0e8], eax
push dword [0x40b0e8]
call fcn.00404169
push dword [0x40b0e8]
call fcn.00404177
mov dword [0x40b0ec], eax
push dword [0x40b0e8]
call fcn.00404195
call fcn.00401f60
push dword [0x40b0a4]
call fcn.004065e0
mov eax, dword [0x40b2f8]
push eax
push eax
mov eax, dword [0x40b2f8]
push eax
push eax
push dword [0x40b2f8]
call fcn.00403c69
inc dword [0x40b2f8]
mov edx, dword [0x40a1f0]
add dword [esp], edx
call fcn.00406555
inc dword [0x40b2f8]
mov edx, dword [0x40a1f0]
add dword [esp], edx
call fcn.004065d0
pop dword [0x40b2f8]
push dword [0x40b05c]
call sub.KERNEL32.dll_RemoveDirectoryA
push dword [0x40b0ec]
jmp 0x401b3a
push 0
call 0x401b4f
push dword [0x40b02c]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00404249
call fcn.00404400
call fcn.004044f0
call fcn.00404890
call fcn.00405153
call fcn.00406770
call fcn.00406f5c
ret