Function at 0x401000
Capabilities:
Delete directory
Identify system language via api
Terminate process

Disassembly:
push 0xcc
push 0
push 0x40b18c
call sub.on_to_save_the_files._memset
add esp, 0xc
push 0
call sub.m_nicht_untersttzt._GetModuleHandleA
mov dword [0x40b190], eax
push 0
push 0x1000
push 0
call sub.m_nicht_untersttzt._HeapCreate
mov dword [0x40b18c], eax
call section..text
call fcn.004079a0
call fcn.00406d37
call fcn.00406570
call fcn.00404fe3
call fcn.00404610
call fcn.004042c0
call fcn.0040393b
call fcn.00403694
push 7
push 0x40a384
lea eax, [0x40b254]
push eax
push 8
call fcn.00404420
mov dword [0x40b250], eax
push 7
push 0x40b248
push 0x40a37c
mov edx, dword [0x40b248]
call fcn.00403060
mov eax, 0x401
push 8
call fcn.004030a0
push 0x400
call fcn.004042f0
mov dword [0x40b1c4], eax
push 8
push dword [0x40b1c4]
call sub.m_nicht_untersttzt._GetUserDefaultLangID
push eax
call sub.m_nicht_untersttzt._VerLanguageNameA
push dword [0x40b1c4]
call fcn.00408541
mov eax, dword [0x40b450]
push eax
push eax
push 8
push dword [0x40b1c4]
call fcn.00404310
lea ecx, [0x40b1c8]
pop edx
call fcn.004030f0
push dword [0x40b1c4]
call fcn.00404360
push dword [0x40b1c8]
mov edx, str.deutsch
pop ecx
call fcn.004079f0
je 0x4011ff
mov edx, str.Fortfahren_
lea ecx, [0x40b1cc]
call fcn.00403108
mov edx, str.Fehler_
lea ecx, [0x40b1d0]
call fcn.00403108
mov edx, str.Einige_Include_Dateien_konnten_nicht_erstellt_werden.
lea ecx, [0x40b1d4]
call fcn.00403108
mov edx, str.Nicht_gen
lea ecx, [0x40b1d8]
call fcn.00403108
mov edx, str.Falsches_Passwort.
lea ecx, [0x40b1dc]
call fcn.00403108
mov edx, 0x40a10e
lea ecx, [0x40b1e0]
call fcn.00403108
mov edx, str.Die_Datei
lea ecx, [0x40b1e4]
call fcn.00403108
mov edx, str._existiert_bereits_im_aktuellen_Arbeitsverzeichnis.
lea ecx, [0x40b1e8]
call fcn.00403108
mov edx, str.Ein_unbekannter_Fehler_ist_aufgetreten._Das_Programm_wird_beendet.
lea ecx, [0x40b1ec]
call fcn.00403108
mov edx, str.Das_Programm_wird_von_diesem_Betriebssytem_nicht_unterst
lea ecx, [0x40b1f0]
call fcn.00403108
mov edx, str.Bitte_w
lea ecx, [0x40b1f4]
call fcn.00403108
mov edx, str.Passwort
lea ecx, [0x40b1f8]
call fcn.00403108
mov edx, str.Bitte_geben_Sie_das_Passwort_ein.
lea ecx, [0x40b1fc]
call fcn.00403108
jmp 0x4012cf
mov edx, str.Continue_
lea ecx, [0x40b1cc]
call fcn.00403108
mov edx, 0x40a0cc
lea ecx, [0x40b1d0]
call fcn.00403108
mov edx, str.Can_not_create_some_of_your_include_files.
lea ecx, [0x40b1d4]
call fcn.00403108
mov edx, str.Can_not_allocate_the_memory.
lea ecx, [0x40b1d8]
call fcn.00403108
mov edx, str.Wrong_password.
lea ecx, [0x40b1dc]
call fcn.00403108
mov edx, 0x40a015
lea ecx, [0x40b1e0]
call fcn.00403108
mov edx, str.The_file
lea ecx, [0x40b1e4]
call fcn.00403108
mov edx, str._already_exists_in_the_current_directory._Overwrite_
lea ecx, [0x40b1e8]
call fcn.00403108
mov edx, str.An_unknown_error_occured._The_program_will_be_terminated.
lea ecx, [0x40b1ec]
call fcn.00403108
mov edx, str.This_program_is_not_supported_on_this_operating_system.
lea ecx, [0x40b1f0]
call fcn.00403108
mov edx, str.Choose_a_location_to_save_the_files.
lea ecx, [0x40b1f4]
call fcn.00403108
mov edx, str.Password
lea ecx, [0x40b1f8]
call fcn.00403108
mov edx, 0x40a020
lea ecx, [0x40b1fc]
call fcn.00403108
call fcn.00404207
mov ebx, eax
cmp ebx, 0x32
jge 0x4012f6
push 0x10
push dword [0x40b1f0]
push dword [0x40b1d0]
call fcn.004036a2
jmp 0x401bd0
lea eax, [0x4020bf]
push eax
call fcn.004040a0
call fcn.00403a66
mov dword [0x40b204], eax
push 0
call sub.m_nicht_untersttzt._GetModuleHandleA
mov dword [0x40b208], eax
mov ebx, dword [0x40b204]
and ebx, ebx
jle 0x40138a
mov dword [0x40b20c], 0
mov ebx, dword [0x40b204]
dec ebx
cmp ebx, dword [0x40b20c]
jl 0x40138a
mov edx, dword [0x40b210]
push dword [0x40b450]
call fcn.00407a20
mov edx, 0x40a011
call fcn.00407a20
mov eax, dword [0x40b450]
push eax
push eax
push dword [0x40b20c]
call fcn.00403a18
pop eax
mov edx, 0x40a0d3
call fcn.00407a20
lea ecx, [0x40b210]
pop edx
call fcn.004030f0
inc dword [0x40b20c]
jmp 0x40132f
push 0x40a0c6
push dword [0x40b208]
call fcn.004020e2
and eax, eax
je 0x4013b5
mov eax, dword [0x40b1c4]
mov dword [0x40b214], eax
push dword [0x40b214]
call fcn.00401c0e
jmp 0x4013d5
push 0x10
push dword [0x40b1ec]
push dword [0x40b1d0]
call fcn.004036a2
push 1
jmp 0x401bd5
push 0x40a0c4
push dword [0x40b208]
call fcn.004020e2
and eax, eax
je 0x40140f
mov eax, dword [0x40b450]
push eax
push eax
push dword [0x40b200]
push dword [0x40b1c4]
call fcn.00404310
lea ecx, [0x40b218]
pop edx
call fcn.004030f0
jmp 0x40142f
push 0x10
push dword [0x40b1ec]
push dword [0x40b1d0]
call fcn.004036a2
push 1
jmp 0x401bd5
push 0x40a0bc
push dword [0x40b208]
call fcn.004020e2
and eax, eax
je 0x401463
mov eax, dword [0x40b1c4]
mov dword [0x40b21c], eax
mov eax, dword [0x40b200]
mov dword [0x40b1a4], eax
mov eax, dword [0x40b21c]
mov dword [0x40b198], eax
jmp 0x401483
push 0x10
push dword [0x40b1ec]
push dword [0x40b1d0]
call fcn.004036a2
push 1
jmp 0x401bd5
push 0x40a0c2
push dword [0x40b208]
call fcn.004020e2
and eax, eax
je 0x4014b5
mov eax, dword [0x40b1c4]
mov dword [0x40b220], eax
mov eax, dword [0x40b200]
mov dword [0x40b1a8], eax
mov eax, dword [0x40b220]
mov dword [0x40b19c], eax
push 0x40a0c0
push dword [0x40b208]
call fcn.004020e2
and eax, eax
je 0x4014e7
mov eax, dword [0x40b1c4]
mov dword [0x40b224], eax
mov eax, dword [0x40b200]
mov dword [0x40b1ac], eax
mov eax, dword [0x40b224]
mov dword [0x40b1a0], eax
push 0x40a0c8
push dword [0x40b208]
call fcn.004020e2
and eax, eax
je 0x401756
push 0xc80001
push dword [0x40b1f8]
push 0x6e
push 0xc8
push 0
push 0
push 0
call fcn.00405316
push dword [0x40b1fc]
push 0x14
push 0x9e
push 0xf
push 0x15
push 1
call fcn.004047ed
push 0x20
push 0x40a00d
push 0x14
push 0x9e
push 0x28
push 0x15
push 2
call fcn.004048de
push 0x40a28c
push 0x14
push 0x4e
push 0x4b
push 0x3d
push 3
call fcn.00404ae3
push 4
push 0xd
push 0
call fcn.00405339
push 2
call fcn.00404b03
call fcn.0040558e
push eax
mov ebx, 0x10
cmp ebx, dword [esp]
jne 0x4015e2
push dword [0x40b1c0]
call sub.on_to_save_the_files.__rmdir
add esp, 4
push 0
jmp 0x401bd5
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x40162b
call fcn.00405596
push eax
mov ebx, 4
cmp ebx, dword [esp]
jne 0x401628
mov eax, dword [0x40b450]
push eax
push eax
push 2
call fcn.00404b2c
lea ecx, [0x40b228]
pop edx
call fcn.004030f0
push 0
call fcn.00404e55
add esp, 8
jmp 0x401678
pop eax
jmp 0x401672
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x401672
call fcn.004055a4
push eax
mov ebx, 3
cmp ebx, dword [esp]
jne 0x401671
mov eax, dword [0x40b450]
push eax
push eax
push 2
call fcn.00404b2c
lea ecx, [0x40b228]
pop edx
call fcn.004030f0
push 0
call fcn.00404e55
add esp, 8
jmp 0x401678
pop eax
pop eax
jmp 0x4015b5
mov eax, dword [0x40b450]
push eax
push eax
push dword [0x40b228]
call fcn.004031f0
push eax
mov eax, dword [0x40b228]
push eax
call fcn.00406d90
inc dword [0x40b450]
mov eax, dword [0x40b450]
push eax
push eax
push dword [0x40b200]
push dword [0x40b1c4]
call fcn.00404310
pop edx
pop ecx
mov dword [0x40b450], ecx
add ecx, dword [0x40a38c]
add edx, dword [0x40a38c]
call fcn.004079f0
jne 0x4016fd
push 0x10
push dword [0x40b1dc]
push dword [0x40b1d0]
call fcn.004036a2
push dword [0x40b1c0]
call sub.on_to_save_the_files.__rmdir
add esp, 4
push 1
jmp 0x401bd5
push 0x40a0ca
push dword [0x40b208]
call fcn.004020e2
and eax, eax
je 0x40171b
mov eax, dword [0x40b1c4]
mov dword [0x40b22c], eax
push dword [0x40b1ac]
push dword [0x40b1a8]
push dword [0x40b1a4]
push dword [0x40b22c]
push dword [0x40b224]
push dword [0x40b220]
push dword [0x40b21c]
push dword [0x40b228]
push dword [0x40b208]
call fcn.00401d70
mov eax, dword [0x40b450]
push eax
push eax
push dword [0x40b1a4]
push dword [0x40b198]
call fcn.00404310
lea ecx, [0x40b230]
pop edx
call fcn.004030f0
mov eax, dword [0x40b450]
push eax
push eax
push dword [0x40b1a8]
push dword [0x40b19c]
call fcn.00404310
lea ecx, [0x40b234]
pop edx
call fcn.004030f0
push 0x40a0be
push dword [0x40b208]
call fcn.004020e2
and eax, eax
je 0x401a25
mov eax, dword [0x40b450]
push eax
push eax
push 0
call fcn.00403a18
inc dword [0x40b450]
mov eax, dword [0x40b450]
push eax
push eax
push dword [0x40b200]
push dword [0x40b1c4]
call fcn.00404310
pop edx
pop ecx
mov dword [0x40b450], ecx
add ecx, dword [0x40a38c]
add edx, dword [0x40a38c]
call fcn.004079f0
je 0x401812
mov ebx, dword [0x40b204]
cmp ebx, 1
jne 0x401812
mov eax, 1
jmp 0x401814
xor eax, eax
and eax, eax
je 0x401a25
mov eax, dword [0x40b450]
push eax
push eax
mov eax, dword [0x40b450]
push eax
push eax
call fcn.00406305
inc dword [0x40b450]
push dword [0x40b1f4]
mov edx, dword [0x40a38c]
add dword [esp + 4], edx
call fcn.004036f8
lea ecx, [0x40b238]
pop edx
call fcn.004030f0
mov edx, dword [0x40b238]
xor ecx, ecx
call fcn.004079f0
jne 0x4019c6
mov edx, dword [0x40b238]
push dword [0x40b450]
call fcn.00407a20
lea ecx, [0x40b1b8]
pop edx
call fcn.004030f0
mov edx, dword [0x40b234]
xor ecx, ecx
call fcn.004079f0
jne 0x4018a0
push dword [0x40b234]
call fcn.00402149
push dword [0x40b218]
push 1
call fcn.00406760
and eax, eax
je 0x401998
push 1
call fcn.00406500
push dword [0x40b450]
push 0x24
mov edx, dword [0x40b1e4]
push dword [0x40b450]
call fcn.00407a20
mov edx, 0x40a011
call fcn.00407a20
mov edx, dword [0x40b218]
call fcn.00407a20
mov edx, 0x40a011
call fcn.00407a20
mov edx, dword [0x40b1e8]
call fcn.00407a20
inc dword [0x40b450]
push dword [0x40b1e0]
mov edx, dword [0x40a38c]
add dword [esp + 4], edx
call fcn.004036a2
pop dword [0x40b450]
mov dword [0x40b23c], eax
mov ebx, dword [0x40b23c]
cmp ebx, 7
jne 0x401998
mov eax, dword [0x40b450]
push eax
push eax
mov eax, dword [0x40b450]
push eax
push eax
push dword [0x40b450]
call fcn.00403a79
inc dword [0x40b450]
mov edx, dword [0x40a38c]
add dword [esp], edx
call fcn.00406345
inc dword [0x40b450]
mov edx, dword [0x40a38c]
add dword [esp], edx
call fcn.004063c0
pop dword [0x40b450]
push dword [0x40b1c0]
call sub.on_to_save_the_files.__rmdir
add esp, 4
push 0
jmp 0x401bd5
push dword [0x40b218]
push 1
call fcn.004066a0
and eax, eax
je 0x4019c6
push dword [0x40b230]
push 1
call fcn.00406780
push 1
call fcn.00406500
mov eax, dword [0x40b450]
push eax
push eax
mov eax, dword [0x40b450]
push eax
push eax
push dword [0x40b450]
call fcn.00403a79
inc dword [0x40b450]
mov edx, dword [0x40a38c]
add dword [esp], edx
call fcn.00406345
inc dword [0x40b450]
mov edx, dword [0x40a38c]
add dword [esp], edx
call fcn.004063c0
pop dword [0x40b450]
push dword [0x40b1c0]
call sub.on_to_save_the_files.__rmdir
add esp, 4
push 0
jmp 0x401bd5
mov edx, dword [0x40b1c0]
push dword [0x40b450]
call fcn.00407a20
mov edx, str.BDFINOPS
call fcn.00407a20
mov edx, dword [0x40b218]
call fcn.00407a20
lea ecx, [0x40b218]
pop edx
call fcn.004030f0
push dword [0x40b218]
push 1
call fcn.004066a0
and eax, eax
je 0x401a87
push dword [0x40b230]
push 1
call fcn.00406780
push 1
call fcn.00406500
jmp 0x401ac5
push dword [0x40b218]
call fcn.004063d0
call fcn.00402056
push 0x10
push dword [0x40b1ec]
push dword [0x40b1d0]
call fcn.004036a2
push dword [0x40b1c0]
call sub.on_to_save_the_files.__rmdir
add esp, 4
push 1
jmp 0x401bd5
mov edx, dword [0x40b234]
xor ecx, ecx
call fcn.004079f0
jne 0x401adf
push dword [0x40b234]
call fcn.00402149
push dword [0x40b450]
push 0x64
push dword [0x40b1b8]
mov edx, dword [0x40b210]
push dword [0x40b450]
call fcn.00407a20
mov edx, dword [0x40b1bc]
call fcn.00407a20
inc dword [0x40b450]
push dword [0x40b218]
mov edx, dword [0x40a38c]
add dword [esp + 4], edx
call fcn.00403f1e
pop dword [0x40b450]
mov dword [0x40b240], eax
push dword [0x40b240]
call fcn.00403f58
push dword [0x40b240]
call fcn.00403f66
mov dword [0x40b244], eax
push dword [0x40b240]
call fcn.00403f84
call fcn.00402056
push dword [0x40b218]
call fcn.004063d0
mov eax, dword [0x40b450]
push eax
push eax
mov eax, dword [0x40b450]
push eax
push eax
push dword [0x40b450]
call fcn.00403a79
inc dword [0x40b450]
mov edx, dword [0x40a38c]
add dword [esp], edx
call fcn.00406345
inc dword [0x40b450]
mov edx, dword [0x40a38c]
add dword [esp], edx
call fcn.004063c0
pop dword [0x40b450]
push dword [0x40b1c0]
call sub.on_to_save_the_files.__rmdir
add esp, 4
push dword [0x40b208]
call sub.m_nicht_untersttzt._FreeLibrary
push dword [0x40b244]
jmp 0x401bd5
push 0
call 0x401bea
push dword [0x40b18c]
call sub.m_nicht_untersttzt._HeapDestroy
call sub.m_nicht_untersttzt._ExitProcess
call fcn.00404038
call fcn.004041f0
call fcn.004042e0
call fcn.00404680
call fcn.00404f43
call fcn.00406560
call fcn.00406d4c
ret