Function at 0x401000
Capabilities:
Delete directory

Disassembly:
push 0xd0
push 0
push 0x40b004
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x40b008], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x40b004], eax
call section..text
call fcn.00407750
call fcn.00406ae7
call fcn.00406320
call fcn.00404d13
call fcn.00404340
call fcn.00403ff0
call fcn.00403b80
call fcn.004038d9
push 7
push 0x40a234
lea eax, [0x40b0d0]
push eax
push 8
call fcn.00404150
mov dword [0x40b0cc], eax
push 7
push 0x40b0c4
push 0x40a22c
mov edx, dword [0x40b0c4]
call fcn.00403060
mov eax, 0x401
push 8
call fcn.004030a0
mov edx, 0x40a0fb
lea ecx, [0x40b040]
call fcn.004030f8
mov edx, 0x40a0b7
lea ecx, [0x40b044]
call fcn.004030f8
mov edx, 0x40a135
lea ecx, [0x40b048]
call fcn.004030f8
mov edx, 0x40a178
lea ecx, [0x40b04c]
call fcn.004030f8
mov edx, 0x40a1d9
lea ecx, [0x40b050]
call fcn.004030f8
mov edx, 0x40a016
lea ecx, [0x40b054]
call fcn.004030f8
mov edx, 0x40a115
lea ecx, [0x40b058]
call fcn.004030f8
mov edx, 0x40a1ee
lea ecx, [0x40b05c]
call fcn.004030f8
mov edx, 0x40a050
lea ecx, [0x40b060]
call fcn.004030f8
mov edx, 0x40a0be
lea ecx, [0x40b064]
call fcn.004030f8
mov edx, 0x40a1ab
lea ecx, [0x40b068]
call fcn.004030f8
mov edx, 0x40a16f
lea ecx, [0x40b06c]
call fcn.004030f8
mov edx, 0x40a035
lea ecx, [0x40b070]
call fcn.004030f8
call fcn.00403f37
mov ebx, eax
cmp ebx, 0x32
jge 0x4011ac
push 0x10
push dword [0x40b064]
push dword [0x40b044]
call fcn.004038e7
jmp 0x401c4e
lea eax, [0x4020e2]
push eax
call fcn.00403dd0
call fcn.00403cab
mov dword [0x40b080], eax
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x40b084], eax
mov ebx, dword [0x40b080]
and ebx, ebx
jle 0x4012b5
mov dword [0x40b088], 0
mov ebx, dword [0x40b080]
dec ebx
cmp ebx, dword [0x40b088]
jl 0x4012b5
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b088]
call fcn.00403c5d
lea ecx, [0x40b08c]
pop edx
call fcn.00403100
push dword [0x40b08c]
mov edx, 0x40a1d0
pop ecx
call fcn.004077a0
je 0x401239
mov dword [0x40b090], 1
jmp 0x4012aa
mov ebx, dword [0x40b090]
cmp ebx, 1
jne 0x40126d
mov edx, dword [0x40b08c]
push dword [0x40b2c8]
call fcn.004077d0
lea ecx, [0x40b03c]
pop edx
call fcn.00403100
mov dword [0x40b090], 0
jmp 0x4012aa
push dword [0x40b08c]
call sub.SHLWAPI.dll_PathQuoteSpacesA
mov edx, dword [0x40b094]
push dword [0x40b2c8]
call fcn.004077d0
mov edx, dword [0x40b08c]
call fcn.004077d0
mov edx, 0x40a00e
call fcn.004077d0
lea ecx, [0x40b094]
pop edx
call fcn.00403100
inc dword [0x40b088]
jmp 0x4011e9
push 0x40a0b1
push dword [0x40b084]
call fcn.00402105
and eax, eax
je 0x4012e0
mov eax, dword [0x40b078]
mov dword [0x40b098], eax
push dword [0x40b098]
call fcn.00401c8c
jmp 0x401300
push 0x10
push dword [0x40b060]
push dword [0x40b044]
call fcn.004038e7
push 1
jmp 0x401c53
push 0x40a0af
push dword [0x40b084]
call fcn.00402105
and eax, eax
je 0x40133a
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b074]
push dword [0x40b078]
call fcn.00404020
lea ecx, [0x40b07c]
pop edx
call fcn.00403100
jmp 0x40135a
push 0x10
push dword [0x40b060]
push dword [0x40b044]
call fcn.004038e7
push 1
jmp 0x401c53
push 0x40a08c
push dword [0x40b084]
call fcn.00402105
and eax, eax
je 0x40138e
mov eax, dword [0x40b078]
mov dword [0x40b09c], eax
mov eax, dword [0x40b074]
mov dword [0x40b01c], eax
mov eax, dword [0x40b09c]
mov dword [0x40b010], eax
jmp 0x4013ae
push 0x10
push dword [0x40b060]
push dword [0x40b044]
call fcn.004038e7
push 1
jmp 0x401c53
push 0x40a09e
push dword [0x40b084]
call fcn.00402105
and eax, eax
je 0x4013e0
mov eax, dword [0x40b078]
mov dword [0x40b0a0], eax
mov eax, dword [0x40b074]
mov dword [0x40b020], eax
mov eax, dword [0x40b0a0]
mov dword [0x40b014], eax
push 0x40a09c
push dword [0x40b084]
call fcn.00402105
and eax, eax
je 0x401412
mov eax, dword [0x40b078]
mov dword [0x40b0a4], eax
mov eax, dword [0x40b074]
mov dword [0x40b024], eax
mov eax, dword [0x40b0a4]
mov dword [0x40b018], eax
push 0x40a0b3
push dword [0x40b084]
call fcn.00402105
and eax, eax
je 0x4016ac
mov edx, dword [0x40b03c]
xor ecx, ecx
call fcn.004077a0
jne 0x40145b
mov edx, dword [0x40b03c]
push dword [0x40b2c8]
call fcn.004077d0
lea ecx, [0x40b0a8]
pop edx
call fcn.00403100
jmp 0x4015d1
push 0xc80001
push dword [0x40b06c]
push 0x6e
push 0xc8
push 0
push 0
push 0
call fcn.00405046
push dword [0x40b070]
push 0x14
push 0x9e
push 0xf
push 0x15
push 1
call fcn.0040451d
push 0x20
push 0x40a00d
push 0x14
push 0x9e
push 0x28
push 0x15
push 2
call fcn.0040460e
push 0x40a195
push 0x14
push 0x4e
push 0x4b
push 0x3d
push 3
call fcn.00404813
push 4
push 0xd
push 0
call fcn.00405069
push 2
call fcn.00404833
call fcn.004052be
push eax
mov ebx, 0x10
cmp ebx, dword [esp]
jne 0x40153b
push dword [0x40b034]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x401c53
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x401584
call fcn.004052c6
push eax
mov ebx, 4
cmp ebx, dword [esp]
jne 0x401581
mov eax, dword [0x40b2c8]
push eax
push eax
push 2
call fcn.0040485c
lea ecx, [0x40b0a8]
pop edx
call fcn.00403100
push 0
call fcn.00404b85
add esp, 8
jmp 0x4015d1
pop eax
jmp 0x4015cb
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x4015cb
call fcn.004052d4
push eax
mov ebx, 3
cmp ebx, dword [esp]
jne 0x4015ca
mov eax, dword [0x40b2c8]
push eax
push eax
push 2
call fcn.0040485c
lea ecx, [0x40b0a8]
pop edx
call fcn.00403100
push 0
call fcn.00404b85
add esp, 8
jmp 0x4015d1
pop eax
pop eax
jmp 0x401511
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b0a8]
call fcn.004031f0
push eax
mov eax, dword [0x40b0a8]
push eax
call fcn.00406b40
inc dword [0x40b2c8]
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b074]
push dword [0x40b078]
call fcn.00404020
pop edx
pop ecx
mov dword [0x40b2c8], ecx
add ecx, dword [0x40a23c]
add edx, dword [0x40a23c]
call fcn.004077a0
jne 0x401653
push 0x10
push dword [0x40b050]
push dword [0x40b044]
call fcn.004038e7
push dword [0x40b034]
call sub.KERNEL32.dll_RemoveDirectoryA
push 1
jmp 0x401c53
push 0x40a0b5
push dword [0x40b084]
call fcn.00402105
and eax, eax
je 0x401671
mov eax, dword [0x40b078]
mov dword [0x40b0ac], eax
push dword [0x40b024]
push dword [0x40b020]
push dword [0x40b01c]
push dword [0x40b0ac]
push dword [0x40b0a4]
push dword [0x40b0a0]
push dword [0x40b09c]
push dword [0x40b0a8]
push dword [0x40b084]
call fcn.00401daa
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b01c]
push dword [0x40b010]
call fcn.00404020
lea ecx, [0x40b0b0]
pop edx
call fcn.00403100
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b020]
push dword [0x40b014]
call fcn.00404020
lea ecx, [0x40b0b4]
pop edx
call fcn.00403100
push 0x40a09a
push dword [0x40b084]
call fcn.00402105
and eax, eax
je 0x401975
mov eax, dword [0x40b2c8]
push eax
push eax
push 0
call fcn.00403c5d
inc dword [0x40b2c8]
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b074]
push dword [0x40b078]
call fcn.00404020
pop edx
pop ecx
mov dword [0x40b2c8], ecx
add ecx, dword [0x40a23c]
add edx, dword [0x40a23c]
call fcn.004077a0
je 0x401768
mov ebx, dword [0x40b080]
cmp ebx, 1
jne 0x401768
mov eax, 1
jmp 0x40176a
xor eax, eax
and eax, eax
je 0x401975
mov eax, dword [0x40b2c8]
push eax
push eax
mov eax, dword [0x40b2c8]
push eax
push eax
call fcn.00406035
inc dword [0x40b2c8]
push dword [0x40b068]
mov edx, dword [0x40a23c]
add dword [esp + 4], edx
call fcn.0040393d
lea ecx, [0x40b0b8]
pop edx
call fcn.00403100
mov edx, dword [0x40b0b8]
xor ecx, ecx
call fcn.004077a0
jne 0x401919
mov edx, dword [0x40b0b8]
push dword [0x40b2c8]
call fcn.004077d0
lea ecx, [0x40b030]
pop edx
call fcn.00403100
mov edx, dword [0x40b0b4]
xor ecx, ecx
call fcn.004077a0
jne 0x4017f6
push dword [0x40b0b4]
call fcn.0040216c
push dword [0x40b07c]
push 1
call fcn.00406510
and eax, eax
je 0x4018eb
push 1
call fcn.004062b0
push dword [0x40b2c8]
push 0x24
mov edx, dword [0x40b058]
push dword [0x40b2c8]
call fcn.004077d0
mov edx, 0x40a010
call fcn.004077d0
mov edx, dword [0x40b07c]
call fcn.004077d0
mov edx, 0x40a010
call fcn.004077d0
mov edx, dword [0x40b05c]
call fcn.004077d0
inc dword [0x40b2c8]
push dword [0x40b054]
mov edx, dword [0x40a23c]
add dword [esp + 4], edx
call fcn.004038e7
pop dword [0x40b2c8]
mov dword [0x40b0bc], eax
mov ebx, dword [0x40b0bc]
cmp ebx, 7
jne 0x4018eb
mov eax, dword [0x40b2c8]
push eax
push eax
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b2c8]
call fcn.00403cbe
inc dword [0x40b2c8]
mov edx, dword [0x40a23c]
add dword [esp], edx
call fcn.00406075
inc dword [0x40b2c8]
mov edx, dword [0x40a23c]
add dword [esp], edx
call fcn.004060f0
pop dword [0x40b2c8]
push dword [0x40b034]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x401c53
push dword [0x40b07c]
push 1
call fcn.00406450
and eax, eax
je 0x401919
push dword [0x40b0b0]
push 1
call fcn.00406530
push 1
call fcn.004062b0
mov eax, dword [0x40b2c8]
push eax
push eax
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b2c8]
call fcn.00403cbe
inc dword [0x40b2c8]
mov edx, dword [0x40a23c]
add dword [esp], edx
call fcn.00406075
inc dword [0x40b2c8]
mov edx, dword [0x40a23c]
add dword [esp], edx
call fcn.004060f0
pop dword [0x40b2c8]
push dword [0x40b034]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x401c53
mov edx, dword [0x40b034]
push dword [0x40b2c8]
call fcn.004077d0
mov edx, 0x40a08a
call fcn.004077d0
mov edx, dword [0x40b07c]
call fcn.004077d0
lea ecx, [0x40b07c]
pop edx
call fcn.00403100
push dword [0x40b07c]
push 1
call fcn.00406450
and eax, eax
je 0x4019d7
push dword [0x40b0b0]
push 1
call fcn.00406530
push 1
call fcn.004062b0
jmp 0x401a12
push dword [0x40b07c]
call fcn.00406100
call fcn.00402079
push 0x10
push dword [0x40b060]
push dword [0x40b044]
call fcn.004038e7
push dword [0x40b034]
call sub.KERNEL32.dll_RemoveDirectoryA
push 1
jmp 0x401c53
mov edx, dword [0x40b0b4]
xor ecx, ecx
call fcn.004077a0
jne 0x401a2c
push dword [0x40b0b4]
call fcn.0040216c
mov eax, dword [0x40b2c8]
push eax
push eax
push 0x800
call fcn.00403220
lea ecx, [0x40b0c0]
pop edx
call fcn.00403100
push dword [0x40b2c8]
push 0x800
push dword [0x40b0c0]
mov eax, dword [0x40b2c8]
push eax
push eax
call fcn.00403cbe
inc dword [0x40b2c8]
mov edx, dword [0x40a23c]
add dword [esp], edx
call sub.KERNEL32.dll_GetShortPathNameA
pop dword [0x40b2c8]
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b2c8]
call fcn.00403cbe
inc dword [0x40b2c8]
push 0x40a160
mov edx, dword [0x40a23c]
add dword [esp + 4], edx
call fcn.00403d19
pop dword [0x40b2c8]
mov eax, dword [0x40b2c8]
push eax
push eax
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b2c8]
call fcn.00403cbe
inc dword [0x40b2c8]
mov edx, dword [0x40a23c]
add dword [esp], edx
call fcn.00406112
inc dword [0x40b2c8]
push 0x40a122
mov edx, dword [0x40a23c]
add dword [esp + 4], edx
call fcn.00403d19
pop dword [0x40b2c8]
mov eax, dword [0x40b2c8]
push eax
push eax
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b2c8]
call fcn.00403cbe
inc dword [0x40b2c8]
mov edx, dword [0x40a23c]
add dword [esp], edx
call fcn.00406075
inc dword [0x40b2c8]
push 0x40a198
mov edx, dword [0x40a23c]
add dword [esp + 4], edx
call fcn.00403d19
pop dword [0x40b2c8]
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b2c8]
push dword [0x40b0c0]
call fcn.00403260
inc dword [0x40b2c8]
push 0x40a021
mov edx, dword [0x40a23c]
add dword [esp + 4], edx
call fcn.00403d19
pop dword [0x40b2c8]
push dword [0x40b030]
push 0x40a0a0
call fcn.00403d19
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b2c8]
mov eax, dword [0x40b038]
cdq
push edx
push eax
call fcn.00403480
inc dword [0x40b2c8]
push 0x40a105
mov edx, dword [0x40a23c]
add dword [esp + 4], edx
call fcn.00403d19
pop dword [0x40b2c8]
push dword [0x40b094]
push dword [0x40b030]
push dword [0x40b07c]
call fcn.0040283d
call fcn.00402079
push dword [0x40b07c]
call fcn.00406100
mov eax, dword [0x40b2c8]
push eax
push eax
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b2c8]
call fcn.00403cbe
inc dword [0x40b2c8]
mov edx, dword [0x40a23c]
add dword [esp], edx
call fcn.00406075
inc dword [0x40b2c8]
mov edx, dword [0x40a23c]
add dword [esp], edx
call fcn.004060f0
pop dword [0x40b2c8]
push dword [0x40b034]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x401c53
push 0
call 0x401c68
push dword [0x40b004]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00403d71
call fcn.00403f20
call fcn.00404010
call fcn.004043b0
call fcn.00404c73
call fcn.00406310
call fcn.00406afc
ret