Function at 0x401000
Capabilities:
Delete directory

Disassembly:
push 0xdc
push 0
push 0x40b0d8
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x40b0dc], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x40b0d8], eax
call section..text
call fcn.00407d70
call fcn.00407107
call fcn.00406860
call fcn.00405253
call fcn.00404880
call fcn.00404530
call fcn.00403b70
call fcn.004038c9
push 7
push 0x40a24c
lea eax, [0x40b1b0]
push eax
push 8
call fcn.00404690
mov dword [0x40b1ac], eax
push 7
push 0x40b1a4
push 0x40a244
mov edx, dword [0x40b1a4]
call fcn.00403060
mov eax, 0x401
push 8
call fcn.004030a0
mov edx, 0x40a0be
lea ecx, [0x40b114]
call fcn.004030f8
mov edx, 0x40a0b7
lea ecx, [0x40b118]
call fcn.004030f8
mov edx, str.Can_not_create_some_of_your_include_files.
lea ecx, [0x40b11c]
call fcn.004030f8
mov edx, str.Can_not_allocate_the_memory.
lea ecx, [0x40b120]
call fcn.004030f8
mov edx, str.Wrong_password.
lea ecx, [0x40b124]
call fcn.004030f8
mov edx, 0x40a016
lea ecx, [0x40b128]
call fcn.004030f8
mov edx, 0x40a0e1
lea ecx, [0x40b12c]
call fcn.004030f8
mov edx, str._already_exists_in_the_current_directory._Overwrite_
lea ecx, [0x40b130]
call fcn.004030f8
mov edx, str.An_unknown_error_occured._The_program_will_be_terminated.
lea ecx, [0x40b134]
call fcn.004030f8
mov edx, str.This_program_is_not_supported_on_your_operating_system.
lea ecx, [0x40b138]
call fcn.004030f8
mov edx, str.Choose_a_location_to_save_the_files.
lea ecx, [0x40b13c]
call fcn.004030f8
mov edx, str.Password
lea ecx, [0x40b140]
call fcn.004030f8
mov edx, 0x40a035
lea ecx, [0x40b144]
call fcn.004030f8
call fcn.00404477
mov ebx, eax
cmp ebx, 0x32
jge 0x4011ac
push 0x10
push dword [0x40b138]
push dword [0x40b118]
call fcn.004038d7
jmp 0x401d61
lea eax, [0x4021f5]
push eax
call fcn.00404310
call fcn.00403c9b
mov dword [0x40b154], eax
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x40b158], eax
mov eax, dword [0x40b3a8]
push eax
push eax
call fcn.00403cae
lea ecx, [0x40b15c]
pop edx
call fcn.00403100
push dword [0x40b15c]
call sub.SHLWAPI.dll_PathQuoteSpacesA
mov ebx, dword [0x40b154]
and ebx, ebx
jle 0x40130c
mov dword [0x40b160], 0
mov ebx, dword [0x40b154]
dec ebx
cmp ebx, dword [0x40b160]
jl 0x4012d8
mov eax, dword [0x40b3a8]
push eax
push eax
push dword [0x40b160]
call fcn.00403c4d
lea ecx, [0x40b164]
pop edx
call fcn.00403100
push dword [0x40b164]
mov edx, str._b2epass
pop ecx
call fcn.00407dc0
je 0x40125c
mov dword [0x40b168], 1
jmp 0x4012cd
mov ebx, dword [0x40b168]
cmp ebx, 1
jne 0x401290
mov edx, dword [0x40b164]
push dword [0x40b3a8]
call fcn.00407df0
lea ecx, [0x40b110]
pop edx
call fcn.00403100
mov dword [0x40b168], 0
jmp 0x4012cd
push dword [0x40b164]
call sub.SHLWAPI.dll_PathQuoteSpacesA
mov edx, dword [0x40b16c]
push dword [0x40b3a8]
call fcn.00407df0
mov edx, dword [0x40b164]
call fcn.00407df0
mov edx, str.___
call fcn.00407df0
lea ecx, [0x40b16c]
pop edx
call fcn.00403100
inc dword [0x40b160]
jmp 0x40120c
mov edx, dword [0x40b15c]
push dword [0x40b3a8]
call fcn.00407df0
mov edx, str.___
call fcn.00407df0
mov edx, dword [0x40b16c]
call fcn.00407df0
lea ecx, [0x40b16c]
pop edx
call fcn.00403100
jmp 0x401329
mov edx, dword [0x40b15c]
push dword [0x40b3a8]
call fcn.00407df0
lea ecx, [0x40b16c]
pop edx
call fcn.00403100
push 0x40a0b1
push dword [0x40b158]
call fcn.00402218
and eax, eax
je 0x401354
mov eax, dword [0x40b14c]
mov dword [0x40b170], eax
push dword [0x40b170]
call fcn.00401d9f
jmp 0x401374
push 0x10
push dword [0x40b134]
push dword [0x40b118]
call fcn.004038d7
push 1
jmp 0x401d66
push 0x40a0af
push dword [0x40b158]
call fcn.00402218
and eax, eax
je 0x4013ae
mov eax, dword [0x40b3a8]
push eax
push eax
push dword [0x40b148]
push dword [0x40b14c]
call fcn.00404560
lea ecx, [0x40b150]
pop edx
call fcn.00403100
jmp 0x4013ce
push 0x10
push dword [0x40b134]
push dword [0x40b118]
call fcn.004038d7
push 1
jmp 0x401d66
push 0x40a08c
push dword [0x40b158]
call fcn.00402218
and eax, eax
je 0x401402
mov eax, dword [0x40b14c]
mov dword [0x40b174], eax
mov eax, dword [0x40b148]
mov dword [0x40b0f0], eax
mov eax, dword [0x40b174]
mov dword [0x40b0e4], eax
jmp 0x401422
push 0x10
push dword [0x40b134]
push dword [0x40b118]
call fcn.004038d7
push 1
jmp 0x401d66
push 0x40a09e
push dword [0x40b158]
call fcn.00402218
and eax, eax
je 0x401454
mov eax, dword [0x40b14c]
mov dword [0x40b178], eax
mov eax, dword [0x40b148]
mov dword [0x40b0f4], eax
mov eax, dword [0x40b178]
mov dword [0x40b0e8], eax
push 0x40a09c
push dword [0x40b158]
call fcn.00402218
and eax, eax
je 0x401486
mov eax, dword [0x40b14c]
mov dword [0x40b17c], eax
mov eax, dword [0x40b148]
mov dword [0x40b0f8], eax
mov eax, dword [0x40b17c]
mov dword [0x40b0ec], eax
push 0x40a0b3
push dword [0x40b158]
call fcn.00402218
and eax, eax
je 0x401720
mov edx, dword [0x40b110]
xor ecx, ecx
call fcn.00407dc0
jne 0x4014cf
mov edx, dword [0x40b110]
push dword [0x40b3a8]
call fcn.00407df0
lea ecx, [0x40b180]
pop edx
call fcn.00403100
jmp 0x401645
push 0xc80001
push dword [0x40b140]
push 0x6e
push 0xc8
push 0
push 0
push 0
call fcn.00405586
push dword [0x40b144]
push 0x14
push 0x9e
push 0xf
push 0x15
push 1
call fcn.00404a5d
push 0x20
push 0x40a00d
push 0x14
push 0x9e
push 0x28
push 0x15
push 2
call fcn.00404b4e
push 0x40a1a2
push 0x14
push 0x4e
push 0x4b
push 0x3d
push 3
call fcn.00404d53
push 4
push 0xd
push 0
call fcn.004055a9
push 2
call fcn.00404d73
call fcn.004057fe
push eax
mov ebx, 0x10
cmp ebx, dword [esp]
jne 0x4015af
push dword [0x40b108]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x401d66
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x4015f8
call fcn.00405806
push eax
mov ebx, 4
cmp ebx, dword [esp]
jne 0x4015f5
mov eax, dword [0x40b3a8]
push eax
push eax
push 2
call fcn.00404d9c
lea ecx, [0x40b180]
pop edx
call fcn.00403100
push 0
call fcn.004050c5
add esp, 8
jmp 0x401645
pop eax
jmp 0x40163f
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x40163f
call fcn.00405814
push eax
mov ebx, 3
cmp ebx, dword [esp]
jne 0x40163e
mov eax, dword [0x40b3a8]
push eax
push eax
push 2
call fcn.00404d9c
lea ecx, [0x40b180]
pop edx
call fcn.00403100
push 0
call fcn.004050c5
add esp, 8
jmp 0x401645
pop eax
pop eax
jmp 0x401585
mov eax, dword [0x40b3a8]
push eax
push eax
push dword [0x40b180]
call fcn.004031e0
push eax
mov eax, dword [0x40b180]
push eax
call fcn.00407160
inc dword [0x40b3a8]
mov eax, dword [0x40b3a8]
push eax
push eax
push dword [0x40b148]
push dword [0x40b14c]
call fcn.00404560
pop edx
pop ecx
mov dword [0x40b3a8], ecx
add ecx, dword [0x40a254]
add edx, dword [0x40a254]
call fcn.00407dc0
jne 0x4016c7
push 0x10
push dword [0x40b124]
push dword [0x40b118]
call fcn.004038d7
push dword [0x40b108]
call sub.KERNEL32.dll_RemoveDirectoryA
push 1
jmp 0x401d66
push 0x40a0b5
push dword [0x40b158]
call fcn.00402218
and eax, eax
je 0x4016e5
mov eax, dword [0x40b14c]
mov dword [0x40b184], eax
push dword [0x40b0f8]
push dword [0x40b0f4]
push dword [0x40b0f0]
push dword [0x40b184]
push dword [0x40b17c]
push dword [0x40b178]
push dword [0x40b174]
push dword [0x40b180]
push dword [0x40b158]
call fcn.00401ebd
mov eax, dword [0x40b3a8]
push eax
push eax
push dword [0x40b0f0]
push dword [0x40b0e4]
call fcn.00404560
lea ecx, [0x40b188]
pop edx
call fcn.00403100
mov eax, dword [0x40b3a8]
push eax
push eax
push dword [0x40b0f4]
push dword [0x40b0e8]
call fcn.00404560
lea ecx, [0x40b18c]
pop edx
call fcn.00403100
push 0x40a09a
push dword [0x40b158]
call fcn.00402218
and eax, eax
je 0x401a16
mov eax, dword [0x40b3a8]
push eax
push eax
push 0
call fcn.00403c4d
inc dword [0x40b3a8]
mov eax, dword [0x40b3a8]
push eax
push eax
push dword [0x40b148]
push dword [0x40b14c]
call fcn.00404560
pop edx
pop ecx
mov dword [0x40b3a8], ecx
add ecx, dword [0x40a254]
add edx, dword [0x40a254]
call fcn.00407dc0
je 0x4017dc
mov ebx, dword [0x40b154]
cmp ebx, 1
jne 0x4017dc
mov eax, 1
jmp 0x4017de
xor eax, eax
and eax, eax
je 0x401a16
mov eax, dword [0x40b3a8]
push eax
push eax
mov eax, dword [0x40b3a8]
push eax
push eax
call fcn.00406575
inc dword [0x40b3a8]
push dword [0x40b13c]
mov edx, dword [0x40a254]
add dword [esp + 4], edx
call fcn.0040392d
lea ecx, [0x40b190]
pop edx
call fcn.00403100
mov edx, dword [0x40b190]
xor ecx, ecx
call fcn.00407dc0
jne 0x4019ba
mov edx, dword [0x40b190]
push dword [0x40b3a8]
call fcn.00407df0
lea ecx, [0x40b104]
pop edx
call fcn.00403100
mov edx, dword [0x40b18c]
xor ecx, ecx
call fcn.00407dc0
jne 0x40186a
push dword [0x40b18c]
call fcn.0040227f
push dword [0x40b150]
push 1
call fcn.00406a50
and eax, eax
je 0x40195f
push 1
call fcn.004067f0
push dword [0x40b3a8]
push 0x24
mov edx, dword [0x40b12c]
push dword [0x40b3a8]
call fcn.00407df0
mov edx, 0x40a010
call fcn.00407df0
mov edx, dword [0x40b150]
call fcn.00407df0
mov edx, 0x40a010
call fcn.00407df0
mov edx, dword [0x40b130]
call fcn.00407df0
inc dword [0x40b3a8]
push dword [0x40b128]
mov edx, dword [0x40a254]
add dword [esp + 4], edx
call fcn.004038d7
pop dword [0x40b3a8]
mov dword [0x40b194], eax
mov ebx, dword [0x40b194]
cmp ebx, 7
jne 0x40195f
mov eax, dword [0x40b3a8]
push eax
push eax
mov eax, dword [0x40b3a8]
push eax
push eax
push dword [0x40b3a8]
call fcn.00403cae
inc dword [0x40b3a8]
mov edx, dword [0x40a254]
add dword [esp], edx
call fcn.004065b5
inc dword [0x40b3a8]
mov edx, dword [0x40a254]
add dword [esp], edx
call fcn.00406630
pop dword [0x40b3a8]
push dword [0x40b108]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x401d66
push dword [0x40b150]
push 1
call fcn.00406990
and eax, eax
je 0x4019ba
push str._echo_off
push 1
call fcn.00406a70
push 0x40a0c8
push 1
call fcn.00406a70
push str._echo_on
push 1
call fcn.00406a70
push dword [0x40b188]
push 1
call fcn.00406b50
push 1
call fcn.004067f0
mov eax, dword [0x40b3a8]
push eax
push eax
mov eax, dword [0x40b3a8]
push eax
push eax
push dword [0x40b3a8]
call fcn.00403cae
inc dword [0x40b3a8]
mov edx, dword [0x40a254]
add dword [esp], edx
call fcn.004065b5
inc dword [0x40b3a8]
mov edx, dword [0x40a254]
add dword [esp], edx
call fcn.00406630
pop dword [0x40b3a8]
push dword [0x40b108]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x401d66
mov edx, dword [0x40b108]
push dword [0x40b3a8]
call fcn.00407df0
mov edx, 0x40a08a
call fcn.00407df0
mov edx, dword [0x40b150]
call fcn.00407df0
lea ecx, [0x40b150]
pop edx
call fcn.00403100
push dword [0x40b150]
push 1
call fcn.00406990
and eax, eax
je 0x401aa5
push str._echo_off
push 1
call fcn.00406a70
push 0x40a0c8
push 1
call fcn.00406a70
push str._echo_on
push 1
call fcn.00406a70
push dword [0x40b188]
push 1
call fcn.00406b50
push 1
call fcn.004067f0
jmp 0x401ae0
push dword [0x40b150]
call fcn.00406640
call fcn.0040218c
push 0x10
push dword [0x40b134]
push dword [0x40b118]
call fcn.004038d7
push dword [0x40b108]
call sub.KERNEL32.dll_RemoveDirectoryA
push 1
jmp 0x401d66
mov edx, dword [0x40b18c]
xor ecx, ecx
call fcn.00407dc0
jne 0x401afa
push dword [0x40b18c]
call fcn.0040227f
mov eax, dword [0x40b3a8]
push eax
push eax
push 0x800
call fcn.00403210
lea ecx, [0x40b198]
pop edx
call fcn.00403100
push dword [0x40b3a8]
push 0x800
push dword [0x40b198]
mov eax, dword [0x40b3a8]
push eax
push eax
call fcn.00403cae
inc dword [0x40b3a8]
mov edx, dword [0x40a254]
add dword [esp], edx
call sub.KERNEL32.dll_GetShortPathNameA
pop dword [0x40b3a8]
mov eax, dword [0x40b3a8]
push eax
push eax
push dword [0x40b3a8]
call fcn.00403cae
inc dword [0x40b3a8]
push str.b2eprogramname
mov edx, dword [0x40a254]
add dword [esp + 4], edx
call fcn.00403d09
pop dword [0x40b3a8]
mov eax, dword [0x40b3a8]
push eax
push eax
mov eax, dword [0x40b3a8]
push eax
push eax
push dword [0x40b3a8]
call fcn.00403cae
inc dword [0x40b3a8]
mov edx, dword [0x40a254]
add dword [esp], edx
call fcn.00406652
inc dword [0x40b3a8]
push str.b2eprogramfilename
mov edx, dword [0x40a254]
add dword [esp + 4], edx
call fcn.00403d09
pop dword [0x40b3a8]
mov eax, dword [0x40b3a8]
push eax
push eax
mov eax, dword [0x40b3a8]
push eax
push eax
push dword [0x40b3a8]
call fcn.00403cae
inc dword [0x40b3a8]
mov edx, dword [0x40a254]
add dword [esp], edx
call fcn.004065b5
inc dword [0x40b3a8]
push str.b2eprogrampathname
mov edx, dword [0x40a254]
add dword [esp + 4], edx
call fcn.00403d09
pop dword [0x40b3a8]
mov eax, dword [0x40b3a8]
push eax
push eax
push dword [0x40b3a8]
push dword [0x40b198]
call fcn.00403250
inc dword [0x40b3a8]
push 0x40a021
mov edx, dword [0x40a254]
add dword [esp + 4], edx
call fcn.00403d09
pop dword [0x40b3a8]
push dword [0x40b104]
push 0x40a0a0
call fcn.00403d09
mov eax, dword [0x40b3a8]
push eax
push eax
push dword [0x40b3a8]
mov eax, dword [0x40b10c]
cdq
push edx
push eax
call fcn.00403470
inc dword [0x40b3a8]
push 0x40a0d1
mov edx, dword [0x40a254]
add dword [esp + 4], edx
call fcn.00403d09
pop dword [0x40b3a8]
push 0x44
push dword [0x40b104]
push dword [0x40b16c]
push dword [0x40b150]
call fcn.00404174
mov dword [0x40b19c], eax
push dword [0x40b19c]
call fcn.0040418e
mov ebx, eax
and ebx, ebx
jne 0x401cd0
jmp 0x401cdc
push 5
call sub.KERNEL32.dll_Sleep
jmp 0x401cbd
push dword [0x40b19c]
call fcn.004041da
mov dword [0x40b1a0], eax
push dword [0x40b19c]
call fcn.004041f8
call fcn.0040218c
push dword [0x40b150]
call fcn.00406640
mov eax, dword [0x40b3a8]
push eax
push eax
mov eax, dword [0x40b3a8]
push eax
push eax
push dword [0x40b3a8]
call fcn.00403cae
inc dword [0x40b3a8]
mov edx, dword [0x40a254]
add dword [esp], edx
call fcn.004065b5
inc dword [0x40b3a8]
mov edx, dword [0x40a254]
add dword [esp], edx
call fcn.00406630
pop dword [0x40b3a8]
push dword [0x40b108]
call sub.KERNEL32.dll_RemoveDirectoryA
push dword [0x40b1a0]
jmp 0x401d66
push 0
call 0x401d7b
push dword [0x40b0d8]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.004042ac
call fcn.00404460
call fcn.00404550
call fcn.004048f0
call fcn.004051b3
call fcn.00406850
call fcn.0040711c
ret