Function at 0x401000
Capabilities:
Delete directory

Disassembly:
push 0xd8
push 0
push 0x40b098
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.DLL_GetModuleHandleA
mov dword [0x40b09c], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.DLL_HeapCreate
mov dword [0x40b098], eax
call section..text
call fcn.00407c00
call fcn.00406f97
call fcn.00406850
call fcn.0040523c
call fcn.00404869
call fcn.00404510
call fcn.00403b70
call fcn.004038c9
push 7
push 0x40a234
lea eax, [0x40b16c]
push eax
push 8
call fcn.00404679
mov dword [0x40b168], eax
push 7
push 0x40b160
push 0x40a22c
mov edx, dword [0x40b160]
call fcn.00403060
mov eax, 0x401
push 8
call fcn.004030a0
mov edx, str.Continue_
lea ecx, [0x40b0d4]
call fcn.004030f8
mov edx, 0x40a0bc
lea ecx, [0x40b0d8]
call fcn.004030f8
mov edx, str.Can_not_create_some_of_your_include_files.
lea ecx, [0x40b0dc]
call fcn.004030f8
mov edx, str.Can_not_allocate_the_memory.
lea ecx, [0x40b0e0]
call fcn.004030f8
mov edx, str.Wrong_password.
lea ecx, [0x40b0e4]
call fcn.004030f8
mov edx, 0x40a014
lea ecx, [0x40b0e8]
call fcn.004030f8
mov edx, str.The_file
lea ecx, [0x40b0ec]
call fcn.004030f8
mov edx, str._already_exists_in_the_current_directory._Overwrite_
lea ecx, [0x40b0f0]
call fcn.004030f8
mov edx, str.An_unknown_error_occured._The_program_will_be_terminated.
lea ecx, [0x40b0f4]
call fcn.004030f8
mov edx, str.This_program_is_not_supported_on_this_operating_system.
lea ecx, [0x40b0f8]
call fcn.004030f8
mov edx, str.Choose_a_location_to_save_the_files.
lea ecx, [0x40b0fc]
call fcn.004030f8
mov edx, str.Password
lea ecx, [0x40b100]
call fcn.004030f8
mov edx, 0x40a041
lea ecx, [0x40b104]
call fcn.004030f8
call fcn.00404457
mov ebx, eax
cmp ebx, 0x32
jge 0x4011ac
push 0x10
push dword [0x40b0f8]
push dword [0x40b0d8]
call fcn.004038d7
jmp 0x401cea
lea eax, [0x40217e]
push eax
call fcn.004042f0
call fcn.00403c9b
mov dword [0x40b114], eax
push 0
call sub.KERNEL32.DLL_GetModuleHandleA
mov dword [0x40b118], eax
mov ebx, dword [0x40b114]
and ebx, ebx
jle 0x4012c3
mov ebx, dword [0x40b114]
and ebx, ebx
jle 0x4012c3
mov dword [0x40b11c], 0
mov ebx, dword [0x40b114]
dec ebx
cmp ebx, dword [0x40b11c]
jl 0x4012c3
mov eax, dword [0x40b368]
push eax
push eax
push dword [0x40b11c]
call fcn.00403c4d
lea ecx, [0x40b120]
pop edx
call fcn.00403100
push dword [0x40b120]
mov edx, str._v2epass
pop ecx
call fcn.00407c50
je 0x401247
mov dword [0x40b124], 1
jmp 0x4012b8
mov ebx, dword [0x40b124]
cmp ebx, 1
jne 0x40127b
mov edx, dword [0x40b120]
push dword [0x40b368]
call fcn.00407c80
lea ecx, [0x40b0d0]
pop edx
call fcn.00403100
mov dword [0x40b124], 0
jmp 0x4012b8
push dword [0x40b120]
call sub.SHLWAPI.dll_PathQuoteSpacesA
mov edx, dword [0x40b128]
push dword [0x40b368]
call fcn.00407c80
mov edx, dword [0x40b120]
call fcn.00407c80
mov edx, 0x40a00e
call fcn.00407c80
lea ecx, [0x40b128]
pop edx
call fcn.00403100
inc dword [0x40b11c]
jmp 0x4011f7
push 0x40a0b6
push dword [0x40b118]
call fcn.004021a1
and eax, eax
je 0x4012ee
mov eax, dword [0x40b10c]
mov dword [0x40b12c], eax
push dword [0x40b12c]
call fcn.00401d28
jmp 0x40130e
push 0x10
push dword [0x40b0f4]
push dword [0x40b0d8]
call fcn.004038d7
push 1
jmp 0x401cef
push 0x40a0b4
push dword [0x40b118]
call fcn.004021a1
and eax, eax
je 0x401348
mov eax, dword [0x40b368]
push eax
push eax
push dword [0x40b108]
push dword [0x40b10c]
call fcn.00404540
lea ecx, [0x40b110]
pop edx
call fcn.00403100
jmp 0x401368
push 0x10
push dword [0x40b0f4]
push dword [0x40b0d8]
call fcn.004038d7
push 1
jmp 0x401cef
push 0x40a0ac
push dword [0x40b118]
call fcn.004021a1
and eax, eax
je 0x40139c
mov eax, dword [0x40b10c]
mov dword [0x40b130], eax
mov eax, dword [0x40b108]
mov dword [0x40b0b0], eax
mov eax, dword [0x40b130]
mov dword [0x40b0a4], eax
jmp 0x4013bc
push 0x10
push dword [0x40b0f4]
push dword [0x40b0d8]
call fcn.004038d7
push 1
jmp 0x401cef
push 0x40a0b2
push dword [0x40b118]
call fcn.004021a1
and eax, eax
je 0x4013ee
mov eax, dword [0x40b10c]
mov dword [0x40b134], eax
mov eax, dword [0x40b108]
mov dword [0x40b0b4], eax
mov eax, dword [0x40b134]
mov dword [0x40b0a8], eax
push 0x40a0b0
push dword [0x40b118]
call fcn.004021a1
and eax, eax
je 0x401420
mov eax, dword [0x40b10c]
mov dword [0x40b138], eax
mov eax, dword [0x40b108]
mov dword [0x40b0b8], eax
mov eax, dword [0x40b138]
mov dword [0x40b0ac], eax
push 0x40a0b8
push dword [0x40b118]
call fcn.004021a1
and eax, eax
je 0x4016ba
mov edx, dword [0x40b0d0]
xor ecx, ecx
call fcn.00407c50
jne 0x401469
mov edx, dword [0x40b0d0]
push dword [0x40b368]
call fcn.00407c80
lea ecx, [0x40b13c]
pop edx
call fcn.00403100
jmp 0x4015df
push 0xc80001
push dword [0x40b100]
push 0x6e
push 0xc8
push 0
push 0
push 0
call fcn.0040556f
push dword [0x40b104]
push 0x14
push 0x9e
push 0xf
push 0x15
push 1
call fcn.00404a46
push 0x20
push 0x40a00d
push 0x14
push 0x9e
push 0x28
push 0x15
push 2
call fcn.00404b37
push 0x40a19d
push 0x14
push 0x4e
push 0x4b
push 0x3d
push 3
call fcn.00404d3c
push 4
push 0xd
push 0
call fcn.00405592
push 2
call fcn.00404d5c
call fcn.004057e7
push eax
mov ebx, 0x10
cmp ebx, dword [esp]
jne 0x401549
push dword [0x40b0c8]
call sub.KERNEL32.DLL_RemoveDirectoryA
push 0
jmp 0x401cef
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x401592
call fcn.004057ef
push eax
mov ebx, 4
cmp ebx, dword [esp]
jne 0x40158f
mov eax, dword [0x40b368]
push eax
push eax
push 2
call fcn.00404d85
lea ecx, [0x40b13c]
pop edx
call fcn.00403100
push 0
call fcn.004050ae
add esp, 8
jmp 0x4015df
pop eax
jmp 0x4015d9
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x4015d9
call fcn.004057fd
push eax
mov ebx, 3
cmp ebx, dword [esp]
jne 0x4015d8
mov eax, dword [0x40b368]
push eax
push eax
push 2
call fcn.00404d85
lea ecx, [0x40b13c]
pop edx
call fcn.00403100
push 0
call fcn.004050ae
add esp, 8
jmp 0x4015df
pop eax
pop eax
jmp 0x40151f
mov eax, dword [0x40b368]
push eax
push eax
push dword [0x40b13c]
call fcn.004031e0
push eax
mov eax, dword [0x40b13c]
push eax
call fcn.00406ff0
inc dword [0x40b368]
mov eax, dword [0x40b368]
push eax
push eax
push dword [0x40b108]
push dword [0x40b10c]
call fcn.00404540
pop edx
pop ecx
mov dword [0x40b368], ecx
add ecx, dword [0x40a23c]
add edx, dword [0x40a23c]
call fcn.00407c50
jne 0x401661
push 0x10
push dword [0x40b0e4]
push dword [0x40b0d8]
call fcn.004038d7
push dword [0x40b0c8]
call sub.KERNEL32.DLL_RemoveDirectoryA
push 1
jmp 0x401cef
push 0x40a0ba
push dword [0x40b118]
call fcn.004021a1
and eax, eax
je 0x40167f
mov eax, dword [0x40b10c]
mov dword [0x40b140], eax
push dword [0x40b0b8]
push dword [0x40b0b4]
push dword [0x40b0b0]
push dword [0x40b140]
push dword [0x40b138]
push dword [0x40b134]
push dword [0x40b130]
push dword [0x40b13c]
push dword [0x40b118]
call fcn.00401e46
mov eax, dword [0x40b368]
push eax
push eax
push dword [0x40b0b0]
push dword [0x40b0a4]
call fcn.00404540
lea ecx, [0x40b144]
pop edx
call fcn.00403100
mov eax, dword [0x40b368]
push eax
push eax
push dword [0x40b0b4]
push dword [0x40b0a8]
call fcn.00404540
lea ecx, [0x40b148]
pop edx
call fcn.00403100
push 0x40a0ae
push dword [0x40b118]
call fcn.004021a1
and eax, eax
je 0x401994
mov eax, dword [0x40b368]
push eax
push eax
push 0
call fcn.00403c4d
inc dword [0x40b368]
mov eax, dword [0x40b368]
push eax
push eax
push dword [0x40b108]
push dword [0x40b10c]
call fcn.00404540
pop edx
pop ecx
mov dword [0x40b368], ecx
add ecx, dword [0x40a23c]
add edx, dword [0x40a23c]
call fcn.00407c50
je 0x401776
mov ebx, dword [0x40b114]
cmp ebx, 1
jne 0x401776
mov eax, 1
jmp 0x401778
xor eax, eax
and eax, eax
je 0x401994
mov eax, dword [0x40b368]
push eax
push eax
mov eax, dword [0x40b368]
push eax
push eax
call fcn.0040655e
inc dword [0x40b368]
push dword [0x40b0fc]
mov edx, dword [0x40a23c]
add dword [esp + 4], edx
call fcn.0040392d
lea ecx, [0x40b14c]
pop edx
call fcn.00403100
mov edx, dword [0x40b14c]
xor ecx, ecx
call fcn.00407c50
jne 0x401938
mov edx, dword [0x40b14c]
push dword [0x40b368]
call fcn.00407c80
lea ecx, [0x40b0c4]
pop edx
call fcn.00403100
push dword [0x40b0c4]
call fcn.0040659e
mov edx, dword [0x40b148]
xor ecx, ecx
call fcn.00407c50
jne 0x40180f
push dword [0x40b148]
call fcn.00402284
push dword [0x40b110]
push 1
call fcn.00406a40
and eax, eax
je 0x401904
push 1
call fcn.004067e0
push dword [0x40b368]
push 0x24
mov edx, dword [0x40b0ec]
push dword [0x40b368]
call fcn.00407c80
mov edx, 0x40a010
call fcn.00407c80
mov edx, dword [0x40b110]
call fcn.00407c80
mov edx, 0x40a010
call fcn.00407c80
mov edx, dword [0x40b0f0]
call fcn.00407c80
inc dword [0x40b368]
push dword [0x40b0e8]
mov edx, dword [0x40a23c]
add dword [esp + 4], edx
call fcn.004038d7
pop dword [0x40b368]
mov dword [0x40b150], eax
mov ebx, dword [0x40b150]
cmp ebx, 7
jne 0x401904
mov eax, dword [0x40b368]
push eax
push eax
mov eax, dword [0x40b368]
push eax
push eax
push dword [0x40b368]
call fcn.00403cae
inc dword [0x40b368]
mov edx, dword [0x40a23c]
add dword [esp], edx
call fcn.004065ae
inc dword [0x40b368]
mov edx, dword [0x40a23c]
add dword [esp], edx
call fcn.0040659e
pop dword [0x40b368]
push dword [0x40b0c8]
call sub.KERNEL32.DLL_RemoveDirectoryA
push 0
jmp 0x401cef
push dword [0x40b110]
push 1
call fcn.00406980
and eax, eax
je 0x401938
push dword [0x40b0b0]
push dword [0x40b0a4]
push 1
call fcn.00406a60
push 1
call fcn.004067e0
mov eax, dword [0x40b368]
push eax
push eax
mov eax, dword [0x40b368]
push eax
push eax
push dword [0x40b368]
call fcn.00403cae
inc dword [0x40b368]
mov edx, dword [0x40a23c]
add dword [esp], edx
call fcn.004065ae
inc dword [0x40b368]
mov edx, dword [0x40a23c]
add dword [esp], edx
call fcn.0040659e
pop dword [0x40b368]
push dword [0x40b0c8]
call sub.KERNEL32.DLL_RemoveDirectoryA
push 0
jmp 0x401cef
mov edx, dword [0x40b0c8]
push dword [0x40b368]
call fcn.00407c80
mov edx, str.BDFINOPS
call fcn.00407c80
mov edx, dword [0x40b110]
call fcn.00407c80
lea ecx, [0x40b110]
pop edx
call fcn.00403100
push dword [0x40b110]
push 1
call fcn.00406980
and eax, eax
je 0x4019fc
push dword [0x40b0b0]
push dword [0x40b0a4]
push 1
call fcn.00406a60
push 1
call fcn.004067e0
jmp 0x401a37
push dword [0x40b110]
call fcn.00406629
call fcn.00402115
push 0x10
push dword [0x40b0f4]
push dword [0x40b0d8]
call fcn.004038d7
push dword [0x40b0c8]
call sub.KERNEL32.DLL_RemoveDirectoryA
push 1
jmp 0x401cef
mov edx, dword [0x40b148]
xor ecx, ecx
call fcn.00407c50
jne 0x401a51
push dword [0x40b148]
call fcn.00402284
mov eax, dword [0x40b368]
push eax
push eax
push 0x800
call fcn.00403210
lea ecx, [0x40b154]
pop edx
call fcn.00403100
push dword [0x40b368]
push 0x800
push dword [0x40b154]
mov eax, dword [0x40b368]
push eax
push eax
call fcn.00403cae
inc dword [0x40b368]
mov edx, dword [0x40a23c]
add dword [esp], edx
call sub.KERNEL32.DLL_GetShortPathNameA
pop dword [0x40b368]
mov eax, dword [0x40b368]
push eax
push eax
push dword [0x40b368]
call fcn.00403cae
inc dword [0x40b368]
push 0x40a032
mov edx, dword [0x40a23c]
add dword [esp + 4], edx
call fcn.00403d09
pop dword [0x40b368]
mov eax, dword [0x40b368]
push eax
push eax
mov eax, dword [0x40b368]
push eax
push eax
push dword [0x40b368]
call fcn.00403cae
inc dword [0x40b368]
mov edx, dword [0x40a23c]
add dword [esp], edx
call fcn.0040663b
inc dword [0x40b368]
push 0x40a01f
mov edx, dword [0x40a23c]
add dword [esp + 4], edx
call fcn.00403d09
pop dword [0x40b368]
mov eax, dword [0x40b368]
push eax
push eax
mov eax, dword [0x40b368]
push eax
push eax
push dword [0x40b368]
call fcn.00403cae
inc dword [0x40b368]
mov edx, dword [0x40a23c]
add dword [esp], edx
call fcn.004065ae
inc dword [0x40b368]
push str.v2eprogrampathname
mov edx, dword [0x40a23c]
add dword [esp + 4], edx
call fcn.00403d09
pop dword [0x40b368]
mov eax, dword [0x40b368]
push eax
push eax
push dword [0x40b368]
push dword [0x40b154]
call fcn.00403250
inc dword [0x40b368]
push str.v2eprogramshortname
mov edx, dword [0x40a23c]
add dword [esp + 4], edx
call fcn.00403d09
pop dword [0x40b368]
push dword [0x40b0c4]
push str.v2eincfilepath
call fcn.00403d09
mov eax, dword [0x40b368]
push eax
push eax
push dword [0x40b368]
mov eax, dword [0x40b0cc]
cdq
push edx
push eax
call fcn.00403470
inc dword [0x40b368]
push str.v2eincfilecount
mov edx, dword [0x40a23c]
add dword [esp + 4], edx
call fcn.00403d09
pop dword [0x40b368]
push dword [0x40b110]
call sub.SHLWAPI.dll_PathQuoteSpacesA
push dword [0x40b368]
push 0x44
push dword [0x40b0c4]
mov edx, dword [0x40b110]
push dword [0x40b368]
call fcn.00407c80
mov edx, 0x40a00e
call fcn.00407c80
mov edx, dword [0x40b128]
call fcn.00407c80
inc dword [0x40b368]
push str.cscript
mov edx, dword [0x40a23c]
add dword [esp + 4], edx
call fcn.00404174
pop dword [0x40b368]
mov dword [0x40b158], eax
push dword [0x40b158]
call fcn.004041ae
push dword [0x40b158]
call fcn.004041bc
mov dword [0x40b15c], eax
push dword [0x40b158]
call fcn.004041da
call fcn.00402115
push dword [0x40b110]
call fcn.00406629
mov eax, dword [0x40b368]
push eax
push eax
mov eax, dword [0x40b368]
push eax
push eax
push dword [0x40b368]
call fcn.00403cae
inc dword [0x40b368]
mov edx, dword [0x40a23c]
add dword [esp], edx
call fcn.004065ae
inc dword [0x40b368]
mov edx, dword [0x40a23c]
add dword [esp], edx
call fcn.0040659e
pop dword [0x40b368]
push dword [0x40b0c8]
call sub.KERNEL32.DLL_RemoveDirectoryA
push dword [0x40b15c]
jmp 0x401cef
push 0
call 0x401d04
push dword [0x40b098]
call sub.KERNEL32.DLL_HeapDestroy
call sub.KERNEL32.DLL_ExitProcess
call fcn.0040428e
call fcn.00404440
call fcn.00404530
call fcn.004048d9
call fcn.0040519c
call fcn.00406840
call fcn.00406fac
ret