Function at 0x401000
Capabilities:
Delete directory
Identify system language via api
Terminate process

Disassembly:
push 0xc4
push 0
push 0x40b0f8
call sub.esem_Betriebssytem_nicht_untersttzt._memset
add esp, 0xc
push 0
call sub.hreiben__GetModuleHandleA
mov dword [0x40b0fc], eax
push 0
push 0x1000
push 0
call sub.hreiben__HeapCreate
mov dword [0x40b0f8], eax
call section..text
call fcn.00407470
call fcn.00406807
call fcn.00406040
call fcn.00404ab3
call fcn.004040e0
call fcn.00403d90
call fcn.0040393b
call fcn.00403694
push 7
push 0x40a388
lea eax, [0x40b1b8]
push eax
push 8
call fcn.00403ef0
mov dword [0x40b1b4], eax
push 7
push 0x40b1ac
push 0x40a380
mov edx, dword [0x40b1ac]
call fcn.00403060
mov eax, 0x401
push 8
call fcn.004030a0
push 0x400
call fcn.00403dc0
mov dword [0x40b130], eax
push 8
push dword [0x40b130]
call sub.hreiben__GetUserDefaultLangID
push eax
call sub.hreiben__VerLanguageNameA
push dword [0x40b130]
call sub.tzt._CharLowerA
mov eax, dword [0x40b3b0]
push eax
push eax
push 8
push dword [0x40b130]
call fcn.00403de0
lea ecx, [0x40b134]
pop edx
call fcn.004030f0
push dword [0x40b130]
call fcn.00403e30
push dword [0x40b134]
mov edx, str.deutsch
pop ecx
call fcn.004074c0
je 0x4011ff
mov edx, str.Fortfahren_
lea ecx, [0x40b138]
call fcn.00403108
mov edx, str.Fehler_
lea ecx, [0x40b13c]
call fcn.00403108
mov edx, str.Einige_Include_Dateien_konnten_nicht_erstellt_werden.
lea ecx, [0x40b140]
call fcn.00403108
mov edx, str.Nicht_gen
lea ecx, [0x40b144]
call fcn.00403108
mov edx, str.Falsches_Passwort.
lea ecx, [0x40b148]
call fcn.00403108
mov edx, 0x40a113
lea ecx, [0x40b14c]
call fcn.00403108
mov edx, str.Die_Datei
lea ecx, [0x40b150]
call fcn.00403108
mov edx, str._existiert_bereits_im_aktuellen_Arbeitsverzeichnis.
lea ecx, [0x40b154]
call fcn.00403108
mov edx, str.Ein_unbekannter_Fehler_ist_aufgetreten._Das_Programm_wird_beendet.
lea ecx, [0x40b158]
call fcn.00403108
mov edx, str.Das_Programm_wird_von_diesem_Betriebssytem_nicht_unterst
lea ecx, [0x40b15c]
call fcn.00403108
mov edx, str.Bitte_w
lea ecx, [0x40b160]
call fcn.00403108
mov edx, str.Passwort
lea ecx, [0x40b164]
call fcn.00403108
mov edx, str.Bitte_geben_Sie_das_Passwort_ein.
lea ecx, [0x40b168]
call fcn.00403108
jmp 0x4012cf
mov edx, str.Continue_
lea ecx, [0x40b138]
call fcn.00403108
mov edx, 0x40a0cc
lea ecx, [0x40b13c]
call fcn.00403108
mov edx, str.Can_not_create_some_of_your_include_files.
lea ecx, [0x40b140]
call fcn.00403108
mov edx, str.Can_not_allocate_the_memory.
lea ecx, [0x40b144]
call fcn.00403108
mov edx, str.Wrong_password.
lea ecx, [0x40b148]
call fcn.00403108
mov edx, 0x40a015
lea ecx, [0x40b14c]
call fcn.00403108
mov edx, str.The_file
lea ecx, [0x40b150]
call fcn.00403108
mov edx, str._already_exists_in_the_current_directory._Overwrite_
lea ecx, [0x40b154]
call fcn.00403108
mov edx, str.An_unknown_error_occured._The_program_will_be_terminated.
lea ecx, [0x40b158]
call fcn.00403108
mov edx, str.This_program_is_not_supported_on_this_operating_system.
lea ecx, [0x40b15c]
call fcn.00403108
mov edx, str.Choose_a_location_to_save_the_files.
lea ecx, [0x40b160]
call fcn.00403108
mov edx, str.Password
lea ecx, [0x40b164]
call fcn.00403108
mov edx, 0x40a020
lea ecx, [0x40b168]
call fcn.00403108
call fcn.00403cd7
mov ebx, eax
cmp ebx, 0x32
jge 0x4012f6
push 0x10
push dword [0x40b15c]
push dword [0x40b13c]
call fcn.004036a2
jmp 0x401b9f
lea eax, [0x40208e]
push eax
call fcn.00403b70
call fcn.00403a66
mov dword [0x40b170], eax
push 0
call sub.hreiben__GetModuleHandleA
mov dword [0x40b174], eax
mov ebx, dword [0x40b170]
and ebx, ebx
jle 0x40138a
mov dword [0x40b178], 0
mov ebx, dword [0x40b170]
dec ebx
cmp ebx, dword [0x40b178]
jl 0x40138a
mov edx, dword [0x40b17c]
push dword [0x40b3b0]
call fcn.004074f0
mov edx, 0x40a011
call fcn.004074f0
mov eax, dword [0x40b3b0]
push eax
push eax
push dword [0x40b178]
call fcn.00403a18
pop eax
mov edx, 0x40a0d3
call fcn.004074f0
lea ecx, [0x40b17c]
pop edx
call fcn.004030f0
inc dword [0x40b178]
jmp 0x40132f
push 0x40a0c6
push dword [0x40b174]
call fcn.004020b1
and eax, eax
je 0x4013b5
mov eax, dword [0x40b130]
mov dword [0x40b180], eax
push dword [0x40b180]
call fcn.00401bdd
jmp 0x4013d5
push 0x10
push dword [0x40b158]
push dword [0x40b13c]
call fcn.004036a2
push 1
jmp 0x401ba4
push 0x40a0c4
push dword [0x40b174]
call fcn.004020b1
and eax, eax
je 0x40140f
mov eax, dword [0x40b3b0]
push eax
push eax
push dword [0x40b16c]
push dword [0x40b130]
call fcn.00403de0
lea ecx, [0x40b184]
pop edx
call fcn.004030f0
jmp 0x40142f
push 0x10
push dword [0x40b158]
push dword [0x40b13c]
call fcn.004036a2
push 1
jmp 0x401ba4
push 0x40a0bc
push dword [0x40b174]
call fcn.004020b1
and eax, eax
je 0x401463
mov eax, dword [0x40b130]
mov dword [0x40b188], eax
mov eax, dword [0x40b16c]
mov dword [0x40b110], eax
mov eax, dword [0x40b188]
mov dword [0x40b104], eax
jmp 0x401483
push 0x10
push dword [0x40b158]
push dword [0x40b13c]
call fcn.004036a2
push 1
jmp 0x401ba4
push 0x40a0c2
push dword [0x40b174]
call fcn.004020b1
and eax, eax
je 0x4014b5
mov eax, dword [0x40b130]
mov dword [0x40b18c], eax
mov eax, dword [0x40b16c]
mov dword [0x40b114], eax
mov eax, dword [0x40b18c]
mov dword [0x40b108], eax
push 0x40a0c0
push dword [0x40b174]
call fcn.004020b1
and eax, eax
je 0x4014e7
mov eax, dword [0x40b130]
mov dword [0x40b190], eax
mov eax, dword [0x40b16c]
mov dword [0x40b118], eax
mov eax, dword [0x40b190]
mov dword [0x40b10c], eax
push 0x40a0c8
push dword [0x40b174]
call fcn.004020b1
and eax, eax
je 0x401756
push 0xc80001
push dword [0x40b164]
push 0x6e
push 0xc8
push 0
push 0
push 0
call fcn.00404de6
push dword [0x40b168]
push 0x14
push 0x9e
push 0xf
push 0x15
push 1
call fcn.004042bd
push 0x20
push 0x40a00d
push 0x14
push 0x9e
push 0x28
push 0x15
push 2
call fcn.004043ae
push 0x40a291
push 0x14
push 0x4e
push 0x4b
push 0x3d
push 3
call fcn.004045b3
push 4
push 0xd
push 0
call fcn.00404e09
push 2
call fcn.004045d3
call fcn.0040505e
push eax
mov ebx, 0x10
cmp ebx, dword [esp]
jne 0x4015e2
push dword [0x40b12c]
call sub.esem_Betriebssytem_nicht_untersttzt.__rmdir
add esp, 4
push 0
jmp 0x401ba4
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x40162b
call fcn.00405066
push eax
mov ebx, 4
cmp ebx, dword [esp]
jne 0x401628
mov eax, dword [0x40b3b0]
push eax
push eax
push 2
call fcn.004045fc
lea ecx, [0x40b194]
pop edx
call fcn.004030f0
push 0
call fcn.00404925
add esp, 8
jmp 0x401678
pop eax
jmp 0x401672
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x401672
call fcn.00405074
push eax
mov ebx, 3
cmp ebx, dword [esp]
jne 0x401671
mov eax, dword [0x40b3b0]
push eax
push eax
push 2
call fcn.004045fc
lea ecx, [0x40b194]
pop edx
call fcn.004030f0
push 0
call fcn.00404925
add esp, 8
jmp 0x401678
pop eax
pop eax
jmp 0x4015b5
mov eax, dword [0x40b3b0]
push eax
push eax
push dword [0x40b194]
call fcn.004031f0
push eax
mov eax, dword [0x40b194]
push eax
call fcn.00406860
inc dword [0x40b3b0]
mov eax, dword [0x40b3b0]
push eax
push eax
push dword [0x40b16c]
push dword [0x40b130]
call fcn.00403de0
pop edx
pop ecx
mov dword [0x40b3b0], ecx
add ecx, dword [0x40a390]
add edx, dword [0x40a390]
call fcn.004074c0
jne 0x4016fd
push 0x10
push dword [0x40b148]
push dword [0x40b13c]
call fcn.004036a2
push dword [0x40b12c]
call sub.esem_Betriebssytem_nicht_untersttzt.__rmdir
add esp, 4
push 1
jmp 0x401ba4
push 0x40a0ca
push dword [0x40b174]
call fcn.004020b1
and eax, eax
je 0x40171b
mov eax, dword [0x40b130]
mov dword [0x40b198], eax
push dword [0x40b118]
push dword [0x40b114]
push dword [0x40b110]
push dword [0x40b198]
push dword [0x40b190]
push dword [0x40b18c]
push dword [0x40b188]
push dword [0x40b194]
push dword [0x40b174]
call fcn.00401d3f
mov eax, dword [0x40b3b0]
push eax
push eax
push dword [0x40b110]
push dword [0x40b104]
call fcn.00403de0
lea ecx, [0x40b19c]
pop edx
call fcn.004030f0
mov eax, dword [0x40b3b0]
push eax
push eax
push dword [0x40b114]
push dword [0x40b108]
call fcn.00403de0
lea ecx, [0x40b1a0]
pop edx
call fcn.004030f0
push 0x40a0be
push dword [0x40b174]
call fcn.004020b1
and eax, eax
je 0x401a25
mov eax, dword [0x40b3b0]
push eax
push eax
push 0
call fcn.00403a18
inc dword [0x40b3b0]
mov eax, dword [0x40b3b0]
push eax
push eax
push dword [0x40b16c]
push dword [0x40b130]
call fcn.00403de0
pop edx
pop ecx
mov dword [0x40b3b0], ecx
add ecx, dword [0x40a390]
add edx, dword [0x40a390]
call fcn.004074c0
je 0x401812
mov ebx, dword [0x40b170]
cmp ebx, 1
jne 0x401812
mov eax, 1
jmp 0x401814
xor eax, eax
and eax, eax
je 0x401a25
mov eax, dword [0x40b3b0]
push eax
push eax
mov eax, dword [0x40b3b0]
push eax
push eax
call fcn.00405dd5
inc dword [0x40b3b0]
push dword [0x40b160]
mov edx, dword [0x40a390]
add dword [esp + 4], edx
call fcn.004036f8
lea ecx, [0x40b1a4]
pop edx
call fcn.004030f0
mov edx, dword [0x40b1a4]
xor ecx, ecx
call fcn.004074c0
jne 0x4019c6
mov edx, dword [0x40b1a4]
push dword [0x40b3b0]
call fcn.004074f0
lea ecx, [0x40b124]
pop edx
call fcn.004030f0
mov edx, dword [0x40b1a0]
xor ecx, ecx
call fcn.004074c0
jne 0x4018a0
push dword [0x40b1a0]
call fcn.00402118
push dword [0x40b184]
push 1
call fcn.00406230
and eax, eax
je 0x401998
push 1
call fcn.00405fd0
push dword [0x40b3b0]
push 0x24
mov edx, dword [0x40b150]
push dword [0x40b3b0]
call fcn.004074f0
mov edx, 0x40a011
call fcn.004074f0
mov edx, dword [0x40b184]
call fcn.004074f0
mov edx, 0x40a011
call fcn.004074f0
mov edx, dword [0x40b154]
call fcn.004074f0
inc dword [0x40b3b0]
push dword [0x40b14c]
mov edx, dword [0x40a390]
add dword [esp + 4], edx
call fcn.004036a2
pop dword [0x40b3b0]
mov dword [0x40b1a8], eax
mov ebx, dword [0x40b1a8]
cmp ebx, 7
jne 0x401998
mov eax, dword [0x40b3b0]
push eax
push eax
mov eax, dword [0x40b3b0]
push eax
push eax
push dword [0x40b3b0]
call fcn.00403a79
inc dword [0x40b3b0]
mov edx, dword [0x40a390]
add dword [esp], edx
call fcn.00405e15
inc dword [0x40b3b0]
mov edx, dword [0x40a390]
add dword [esp], edx
call fcn.00405e90
pop dword [0x40b3b0]
push dword [0x40b12c]
call sub.esem_Betriebssytem_nicht_untersttzt.__rmdir
add esp, 4
push 0
jmp 0x401ba4
push dword [0x40b184]
push 1
call fcn.00406170
and eax, eax
je 0x4019c6
push dword [0x40b19c]
push 1
call fcn.00406250
push 1
call fcn.00405fd0
mov eax, dword [0x40b3b0]
push eax
push eax
mov eax, dword [0x40b3b0]
push eax
push eax
push dword [0x40b3b0]
call fcn.00403a79
inc dword [0x40b3b0]
mov edx, dword [0x40a390]
add dword [esp], edx
call fcn.00405e15
inc dword [0x40b3b0]
mov edx, dword [0x40a390]
add dword [esp], edx
call fcn.00405e90
pop dword [0x40b3b0]
push dword [0x40b12c]
call sub.esem_Betriebssytem_nicht_untersttzt.__rmdir
add esp, 4
push 0
jmp 0x401ba4
mov edx, dword [0x40b12c]
push dword [0x40b3b0]
call fcn.004074f0
mov edx, str.BDFINOPS
call fcn.004074f0
mov edx, dword [0x40b184]
call fcn.004074f0
lea ecx, [0x40b184]
pop edx
call fcn.004030f0
push dword [0x40b184]
push 1
call fcn.00406170
and eax, eax
je 0x401a87
push dword [0x40b19c]
push 1
call fcn.00406250
push 1
call fcn.00405fd0
jmp 0x401ac5
push dword [0x40b184]
call fcn.00405ea0
call fcn.00402025
push 0x10
push dword [0x40b158]
push dword [0x40b13c]
call fcn.004036a2
push dword [0x40b12c]
call sub.esem_Betriebssytem_nicht_untersttzt.__rmdir
add esp, 4
push 1
jmp 0x401ba4
mov edx, dword [0x40b1a0]
xor ecx, ecx
call fcn.004074c0
jne 0x401adf
push dword [0x40b1a0]
call fcn.00402118
push dword [0x40b3b0]
mov edx, dword [0x40b17c]
push dword [0x40b3b0]
call fcn.004074f0
mov edx, dword [0x40b128]
call fcn.004074f0
inc dword [0x40b3b0]
push dword [0x40b124]
push dword [0x40b184]
mov edx, dword [0x40a390]
add dword [esp + 8], edx
call fcn.00402761
pop dword [0x40b3b0]
call fcn.00402025
push dword [0x40b184]
call fcn.00405ea0
mov eax, dword [0x40b3b0]
push eax
push eax
mov eax, dword [0x40b3b0]
push eax
push eax
push dword [0x40b3b0]
call fcn.00403a79
inc dword [0x40b3b0]
mov edx, dword [0x40a390]
add dword [esp], edx
call fcn.00405e15
inc dword [0x40b3b0]
mov edx, dword [0x40a390]
add dword [esp], edx
call fcn.00405e90
pop dword [0x40b3b0]
push dword [0x40b12c]
call sub.esem_Betriebssytem_nicht_untersttzt.__rmdir
add esp, 4
push 0
jmp 0x401ba4
push 0
call 0x401bb9
push dword [0x40b0f8]
call sub.hreiben__HeapDestroy
call sub.hreiben__ExitProcess
call fcn.00403b0b
call fcn.00403cc0
call fcn.00403db0
call fcn.00404150
call fcn.00404a13
call fcn.00406030
call fcn.0040681c
ret