Function at 0x401000
Capabilities:
Allocate thread local storage
Delete directory

Disassembly:
push 0xd8
push 0
push 0x410248
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x41024c], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x410248], eax
call section..text
call fcn.0040cdc0
call fcn.0040cbac
call fcn.0040b0b3
call fcn.0040abe3
call fcn.0040a6f0
call fcn.0040a379
call fcn.0040a1b0
call fcn.0040a192
call fcn.0040a109
call fcn.00409871
call fcn.004088a0
call fcn.00407ab1
call fcn.00407776
call fcn.004072f1
call fcn.00406f69
push dword [0x41030c]
call fcn.00407795
push 7
push 0x40f244
lea eax, [0x41030c]
push eax
push 8
call fcn.004076e4
push 0x410304
push 0x40f254
push 7
push 0x401
push 8
call fcn.0040caad
mov eax, 0x200
push eax
lea eax, [0x41031c]
push eax
xor eax, eax
push eax
push 0x15
push 4
call fcn.0040b0d2
push dword [0x410314]
call fcn.00407795
push 7
push 0x40f24c
lea eax, [0x410314]
push eax
push 8
call fcn.004076e4
mov edx, 0x40f0cc
lea ecx, [0x410260]
call fcn.00404068
mov edx, str.Error_
lea ecx, [0x4102fc]
call fcn.00404068
mov edx, str.Can_not_create_some_of_your_include_files.
lea ecx, [0x410284]
call fcn.00404068
mov edx, str.Can_not_allocate_the_memory.
lea ecx, [0x4102b8]
call fcn.00404068
mov edx, str.Wrong_password.
lea ecx, [0x4102dc]
call fcn.00404068
mov edx, 0x40f025
lea ecx, [0x4102bc]
call fcn.00404068
mov edx, str.The_file
lea ecx, [0x410264]
call fcn.00404068
mov edx, str._already_exists_in_the_current_directory._Overwrite_
lea ecx, [0x410274]
call fcn.00404068
mov edx, 0x40f068
lea ecx, [0x4102b4]
call fcn.00404068
mov edx, str.This_program_is_not_supported_on_this_operating_system.
lea ecx, [0x4102ec]
call fcn.00404068
mov edx, 0x40f0fe
lea ecx, [0x4102d8]
call fcn.00404068
mov edx, 0x40f0f5
lea ecx, [0x4102f0]
call fcn.00404068
mov edx, str.Please_enter_the_password.
lea ecx, [0x41029c]
call fcn.00404068
call fcn.0040865f
mov ebx, eax
cmp ebx, 0x32
jge 0x40120f
push 0x10
push dword [0x4102ec]
push dword [0x4102fc]
call fcn.00406fa0
jmp 0x401c8d
lea eax, [0x4022c2]
push eax
call fcn.00407500
call fcn.0040742f
mov dword [0x4102e0], eax
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x4102a4], eax
mov ebx, dword [0x4102e0]
and ebx, ebx
jle 0x401314
mov dword [0x410288], 0
mov ebx, dword [0x4102e0]
dec ebx
cmp ebx, dword [0x410288]
jl 0x401314
mov edx, dword [0x4105e8]
push edx
push edx
push dword [0x410288]
call fcn.004073e1
push 0x4102cc
call fcn.0040ce40
push dword [0x4102cc]
mov edx, str._v2epass
pop ecx
call fcn.0040cec0
je 0x40129b
mov dword [0x410280], 1
jmp 0x401308
mov ebx, dword [0x410280]
cmp ebx, 1
jne 0x4012cd
mov edx, dword [0x4102cc]
push dword [0x4105e8]
call fcn.0040cef0
push 0x4102f4
call fcn.0040ce40
mov dword [0x410280], 0
jmp 0x401308
push dword [0x4102cc]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
mov edx, dword [0x4102a0]
push dword [0x4105e8]
call fcn.0040cef0
mov edx, dword [0x4102cc]
call fcn.0040cef0
mov edx, 0x40f01f
call fcn.0040cef0
push 0x4102a0
call fcn.0040ce40
inc dword [0x410288]
jno 0x40124c
push 0x40f0ae
push dword [0x4102a4]
call fcn.00402c6f
and eax, eax
je 0x40133f
mov eax, dword [0x410254]
mov dword [0x4102c4], eax
push dword [0x4102c4]
call fcn.00402425
jmp 0x40135f
push 0x10
push dword [0x4102b4]
push dword [0x4102fc]
call fcn.00406fa0
push 1
jmp 0x401c92
push 0x40f0ac
push dword [0x4102a4]
call fcn.00402c6f
and eax, eax
je 0x401398
mov edx, dword [0x4105e8]
push edx
push edx
push dword [0x410268]
push dword [0x410254]
call fcn.0040a1e0
push 0x4102b0
call fcn.0040ce40
jmp 0x4013b8
push 0x10
push dword [0x4102b4]
push dword [0x4102fc]
call fcn.00406fa0
push 1
jmp 0x401c92
push 0x40f0a4
push dword [0x4102a4]
call fcn.00402c6f
and eax, eax
je 0x4013ec
mov eax, dword [0x410254]
mov dword [0x41028c], eax
mov eax, dword [0x410268]
mov dword [0x410258], eax
mov eax, dword [0x41028c]
mov dword [0x4102e8], eax
jmp 0x40140c
push 0x10
push dword [0x4102b4]
push dword [0x4102fc]
call fcn.00406fa0
push 1
jmp 0x401c92
push 0x40f0aa
push dword [0x4102a4]
call fcn.00402c6f
and eax, eax
je 0x40143e
mov eax, dword [0x410254]
mov dword [0x410294], eax
mov eax, dword [0x410268]
mov dword [0x410298], eax
mov eax, dword [0x410294]
mov dword [0x4102c0], eax
push 0x40f0a8
push dword [0x4102a4]
call fcn.00402c6f
and eax, eax
je 0x401470
mov eax, dword [0x410254]
mov dword [0x410290], eax
mov eax, dword [0x410268]
mov dword [0x41025c], eax
mov eax, dword [0x410290]
mov dword [0x410300], eax
push 0x40f0b0
push dword [0x4102a4]
call fcn.00402c6f
and eax, eax
je 0x401708
mov edx, dword [0x4102f4]
xor ecx, ecx
call fcn.0040cec0
jne 0x4014b7
mov edx, dword [0x4102f4]
push dword [0x4105e8]
call fcn.0040cef0
push 0x4102d4
call fcn.0040ce40
jmp 0x40162b
push 0xc80001
push dword [0x4102f0]
push 0x6e
push 0xc8
push 0
push 0
push 0
call fcn.00408bb0
push dword [0x41029c]
push 0x14
push 0x9e
push 0xf
push 0x15
push 1
call fcn.00407d93
push 0x20
push 0x40f01e
push 0x14
push 0x9e
push 0x28
push 0x15
push 2
call fcn.00407f6c
push 0x40f1e5
push 0x14
push 0x4e
push 0x4b
push 0x3d
push 3
call fcn.00408279
push 4
push 0xd
push 0
call fcn.00408bd3
push 2
call fcn.00408299
call fcn.00408dd7
push eax
mov ebx, 0x333c
cmp ebx, dword [esp]
jne 0x401597
push dword [0x4102f8]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x401c92
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x4015df
call fcn.0040acac
push eax
mov ebx, 4
cmp ebx, dword [esp]
jne 0x4015dc
mov edx, dword [0x4105e8]
push edx
push edx
push 2
call fcn.004082d4
push 0x4102d4
call fcn.0040ce40
push 0
call fcn.00408773
add esp, 8
jmp 0x40162b
pop eax
jmp 0x401625
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x401625
call fcn.0040acbb
push eax
mov ebx, 3
cmp ebx, dword [esp]
jne 0x401624
mov edx, dword [0x4105e8]
push edx
push edx
push 2
call fcn.004082d4
push 0x4102d4
call fcn.0040ce40
push 0
call fcn.00408773
add esp, 8
jmp 0x40162b
pop eax
pop eax
jmp 0x40156d
mov edx, dword [0x4105e8]
push edx
push edx
push dword [0x4102d4]
call fcn.004040c0
push eax
mov eax, dword [0x4102d4]
push eax
call fcn.0040b690
inc dword [0x4105e8]
mov edx, dword [0x4105e8]
push edx
push edx
push dword [0x410268]
push dword [0x410254]
call fcn.0040a1e0
pop edx
pop ecx
mov dword [0x4105e8], ecx
add ecx, dword [0x40f25c]
add edx, dword [0x40f25c]
call fcn.0040cec0
jne 0x4016af
push 0x10
push dword [0x4102dc]
push dword [0x4102fc]
call fcn.00406fa0
push dword [0x4102f8]
call sub.KERNEL32.dll_RemoveDirectoryA
push 1
jmp 0x401c92
push 0x40f0b2
push dword [0x4102a4]
call fcn.00402c6f
and eax, eax
je 0x4016cd
mov eax, dword [0x410254]
mov dword [0x4102e4], eax
push dword [0x41025c]
push dword [0x410298]
push dword [0x410258]
push dword [0x4102e4]
push dword [0x410290]
push dword [0x410294]
push dword [0x41028c]
push dword [0x4102d4]
push dword [0x4102a4]
call fcn.00402d82
mov edx, dword [0x4105e8]
push edx
push edx
push dword [0x410298]
push dword [0x4102c0]
call fcn.0040a1e0
push 0x410278
call fcn.0040ce40
push 0x40f0a6
push dword [0x4102a4]
call fcn.00402c6f
and eax, eax
je 0x4019a9
mov edx, dword [0x4105e8]
push edx
push edx
push 0
call fcn.004073e1
inc dword [0x4105e8]
mov edx, dword [0x4105e8]
push edx
push edx
push dword [0x410268]
push dword [0x410254]
call fcn.0040a1e0
pop edx
pop ecx
mov dword [0x4105e8], ecx
add ecx, dword [0x40f25c]
add edx, dword [0x40f25c]
call fcn.0040cec0
je 0x4017a1
mov ebx, dword [0x4102e0]
cmp ebx, 1
jne 0x4017a1
mov eax, 1
jmp 0x4017a3
xor eax, eax
and eax, eax
je 0x4019a9
mov edx, dword [0x4105e8]
push edx
push edx
mov edx, dword [0x4105e8]
push edx
push edx
call fcn.0040a385
inc dword [0x4105e8]
push dword [0x4102d8]
mov edx, dword [0x40f25c]
add dword [esp + 4], edx
call fcn.00407013
push 0x410270
call fcn.0040ce40
mov edx, dword [0x410270]
xor ecx, ecx
call fcn.0040cec0
jne 0x401957
mov edx, dword [0x410270]
push dword [0x4105e8]
call fcn.0040cef0
push 0x4102a8
call fcn.0040ce40
push dword [0x4102a8]
call fcn.0040a3c5
mov edx, dword [0x410278]
xor ecx, ecx
call fcn.0040cec0
jne 0x401838
push dword [0x410278]
call fcn.00402553
push dword [0x4102b0]
push 1
call fcn.0040a960
and eax, eax
je 0x401923
push 1
call fcn.0040a670
push dword [0x4105e8]
push 0x24
mov edx, dword [0x410264]
push dword [0x4105e8]
call fcn.0040cef0
mov edx, 0x40f021
call fcn.0040cef0
mov edx, dword [0x4102b0]
call fcn.0040cef0
mov edx, 0x40f021
call fcn.0040cef0
mov edx, dword [0x410274]
call fcn.0040cef0
inc dword [0x4105e8]
push dword [0x4102bc]
mov edx, dword [0x40f25c]
add dword [esp + 4], edx
call fcn.00406fa0
pop dword [0x4105e8]
mov dword [0x4102ac], eax
mov ebx, dword [0x4102ac]
cmp ebx, 7
jne 0x401923
mov edx, dword [0x4105e8]
push edx
push edx
mov edx, dword [0x4105e8]
push edx
push edx
push dword [0x4105e8]
call fcn.00407442
mov edx, dword [0x40f25c]
add dword [esp], edx
call fcn.0040a3d7
mov edx, dword [0x40f25c]
add dword [esp], edx
call fcn.0040a3c5
pop dword [0x4105e8]
push dword [0x4102f8]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x401c92
push dword [0x4102b0]
push 1
call fcn.0040a890
and eax, eax
je 0x401957
push dword [0x410258]
push dword [0x4102e8]
push 1
call fcn.0040aa10
push 1
call fcn.0040a670
mov edx, dword [0x4105e8]
push edx
push edx
mov edx, dword [0x4105e8]
push edx
push edx
push dword [0x4105e8]
call fcn.00407442
mov edx, dword [0x40f25c]
add dword [esp], edx
call fcn.0040a3d7
mov edx, dword [0x40f25c]
add dword [esp], edx
call fcn.0040a3c5
pop dword [0x4105e8]
push dword [0x4102f8]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x401c92
mov edx, dword [0x4102f8]
push dword [0x4105e8]
call fcn.0040cef0
mov edx, str.BDFINOPSe_td
call fcn.0040cef0
mov edx, dword [0x4102b0]
call fcn.0040cef0
push 0x4102b0
call fcn.0040ce40
push dword [0x4102b0]
push 1
call fcn.0040a890
and eax, eax
je 0x401a0f
push dword [0x410258]
push dword [0x4102e8]
push 1
call fcn.0040aa10
push 1
call fcn.0040a670
jmp 0x401a4a
push dword [0x4102b0]
call fcn.0040a47b
call fcn.0040302f
push 0x10
push dword [0x4102b4]
push dword [0x4102fc]
call fcn.00406fa0
push dword [0x4102f8]
call sub.KERNEL32.dll_RemoveDirectoryA
push 1
jmp 0x401c92
mov edx, dword [0x410278]
xor ecx, ecx
call fcn.0040cec0
jne 0x401a64
push dword [0x410278]
call fcn.00402553
mov edx, dword [0x4105e8]
push edx
push edx
push 0x800
call fcn.004040f0
push 0x4102c8
call fcn.0040ce40
push dword [0x4105e8]
push 0x800
push dword [0x4102c8]
mov edx, dword [0x4105e8]
push edx
push edx
call fcn.00407442
inc dword [0x4105e8]
mov edx, dword [0x40f25c]
add dword [esp], edx
call sub.KERNEL32.dll_GetShortPathNameA
pop dword [0x4105e8]
mov edx, dword [0x4105e8]
push edx
push edx
push dword [0x4105e8]
call fcn.00407442
inc dword [0x4105e8]
push 0x40f045
mov edx, dword [0x40f25c]
add dword [esp + 4], edx
call fcn.0040749d
pop dword [0x4105e8]
mov edx, dword [0x4105e8]
push edx
push edx
mov edx, dword [0x4105e8]
push edx
push edx
push dword [0x4105e8]
call fcn.00407442
mov edx, dword [0x40f25c]
add dword [esp], edx
call fcn.0040a531
inc dword [0x4105e8]
push 0x40f032
mov edx, dword [0x40f25c]
add dword [esp + 4], edx
call fcn.0040749d
pop dword [0x4105e8]
mov edx, dword [0x4105e8]
push edx
push edx
mov edx, dword [0x4105e8]
push edx
push edx
push dword [0x4105e8]
call fcn.00407442
mov edx, dword [0x40f25c]
add dword [esp], edx
call fcn.0040a3d7
inc dword [0x4105e8]
push 0x40f0b9
mov edx, dword [0x40f25c]
add dword [esp + 4], edx
call fcn.0040749d
pop dword [0x4105e8]
mov edx, dword [0x4105e8]
push edx
push edx
push dword [0x4105e8]
push dword [0x4102c8]
call fcn.004041f0
inc dword [0x4105e8]
push 0x40f054
mov edx, dword [0x40f25c]
add dword [esp + 4], edx
call fcn.0040749d
pop dword [0x4105e8]
push dword [0x4102a8]
push 0x40f0e6
call fcn.0040749d
mov edx, dword [0x4105e8]
push edx
push edx
push dword [0x4105e8]
mov eax, dword [0x41026c]
cdq
push edx
push eax
call fcn.00404380
inc dword [0x4105e8]
push 0x40f0d6
mov edx, dword [0x40f25c]
add dword [esp + 4], edx
call fcn.0040749d
pop dword [0x4105e8]
push dword [0x4102b0]
call sub.SHLWAPI.DLL_PathQuoteSpacesA
push dword [0x4102a0]
push dword [0x4102a8]
push dword [0x4102b0]
call fcn.0040230c
call fcn.0040302f
push dword [0x4102b0]
call sub.SHLWAPI.DLL_PathUnquoteSpacesA
push dword [0x4102b0]
call fcn.0040a47b
mov edx, dword [0x4105e8]
push edx
push edx
mov edx, dword [0x4105e8]
push edx
push edx
push dword [0x4105e8]
call fcn.00407442
mov edx, dword [0x40f25c]
add dword [esp], edx
call fcn.0040a3d7
mov edx, dword [0x40f25c]
add dword [esp], edx
call fcn.0040a3c5
pop dword [0x4105e8]
push dword [0x4102f8]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x401c92
push 0
call 0x401cac
call fcn.0040ce10
push dword [0x410248]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00407650
call fcn.00407b21
call fcn.00408889
call fcn.004098ff
call fcn.0040a0fd
call fcn.0040a543
call fcn.0040a6e0
call fcn.0040afae
call fcn.0040a1d0
ret