Function at 0x401000
Capabilities:
Delete directory

Disassembly:
push 0xcc
push 0
push 0x40b00c
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x40b010], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x40b00c], eax
call section..text
call fcn.004076d0
call fcn.00406a67
call fcn.00406320
call fcn.00404d13
call fcn.00404340
call fcn.00403ff0
call fcn.00403b80
call fcn.004038d9
push 7
push 0x40a23c
lea eax, [0x40b0d4]
push eax
push 8
call fcn.00404150
mov dword [0x40b0d0], eax
push 7
push 0x40b0c8
push 0x40a234
mov edx, dword [0x40b0c8]
call fcn.00403060
mov eax, 0x401
push 8
call fcn.004030a0
mov edx, str.Continue_
lea ecx, [0x40b048]
call fcn.004030f8
mov edx, str.Error_
lea ecx, [0x40b04c]
call fcn.004030f8
mov edx, str.Can_not_create_some_of_your_include_files.
lea ecx, [0x40b050]
call fcn.004030f8
mov edx, str.Can_not_allocate_the_memory.
lea ecx, [0x40b054]
call fcn.004030f8
mov edx, str.Wrong_password.
lea ecx, [0x40b058]
call fcn.004030f8
mov edx, 0x40a016
lea ecx, [0x40b05c]
call fcn.004030f8
mov edx, str.The_file
lea ecx, [0x40b060]
call fcn.004030f8
mov edx, str._already_exists_in_the_current_directory._Overwrite_
lea ecx, [0x40b064]
call fcn.004030f8
mov edx, str.An_unknown_error_occured._The_program_will_be_terminated.
lea ecx, [0x40b068]
call fcn.004030f8
mov edx, str.This_program_is_not_supported_on_this_operating_system.
lea ecx, [0x40b06c]
call fcn.004030f8
mov edx, str.Choose_a_location_to_save_the_files.
lea ecx, [0x40b070]
call fcn.004030f8
mov edx, str.Password
lea ecx, [0x40b074]
call fcn.004030f8
mov edx, 0x40a043
lea ecx, [0x40b078]
call fcn.004030f8
call fcn.00403f37
mov ebx, eax
cmp ebx, 0x32
jge 0x4011ac
push 0x10
push dword [0x40b06c]
push dword [0x40b04c]
call fcn.004038e7
jmp 0x401c41
lea eax, [0x4020d5]
push eax
call fcn.00403dd0
call fcn.00403cab
mov dword [0x40b088], eax
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x40b08c], eax
mov ebx, dword [0x40b088]
and ebx, ebx
jle 0x4012b5
mov dword [0x40b090], 0
mov ebx, dword [0x40b088]
dec ebx
cmp ebx, dword [0x40b090]
jl 0x4012b5
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b090]
call fcn.00403c5d
lea ecx, [0x40b094]
pop edx
call fcn.00403100
push dword [0x40b094]
mov edx, str._v2epass
pop ecx
call fcn.00407720
je 0x401239
mov dword [0x40b098], 1
jmp 0x4012aa
mov ebx, dword [0x40b098]
cmp ebx, 1
jne 0x40126d
mov edx, dword [0x40b094]
push dword [0x40b2c8]
call fcn.00407750
lea ecx, [0x40b044]
pop edx
call fcn.00403100
mov dword [0x40b098], 0
jmp 0x4012aa
push dword [0x40b094]
call sub.SHLWAPI.dll_PathQuoteSpacesA
mov edx, dword [0x40b09c]
push dword [0x40b2c8]
call fcn.00407750
mov edx, dword [0x40b094]
call fcn.00407750
mov edx, 0x40a00e
call fcn.00407750
lea ecx, [0x40b09c]
pop edx
call fcn.00403100
inc dword [0x40b090]
jmp 0x4011e9
push 0x40a0b8
push dword [0x40b08c]
call fcn.004020f8
and eax, eax
je 0x4012e0
mov eax, dword [0x40b080]
mov dword [0x40b0a0], eax
push dword [0x40b0a0]
call fcn.00401c7f
jmp 0x401300
push 0x10
push dword [0x40b068]
push dword [0x40b04c]
call fcn.004038e7
push 1
jmp 0x401c46
push 0x40a0b6
push dword [0x40b08c]
call fcn.004020f8
and eax, eax
je 0x40133a
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b07c]
push dword [0x40b080]
call fcn.00404020
lea ecx, [0x40b084]
pop edx
call fcn.00403100
jmp 0x40135a
push 0x10
push dword [0x40b068]
push dword [0x40b04c]
call fcn.004038e7
push 1
jmp 0x401c46
push 0x40a0ae
push dword [0x40b08c]
call fcn.004020f8
and eax, eax
je 0x40138e
mov eax, dword [0x40b080]
mov dword [0x40b0a4], eax
mov eax, dword [0x40b07c]
mov dword [0x40b024], eax
mov eax, dword [0x40b0a4]
mov dword [0x40b018], eax
jmp 0x4013ae
push 0x10
push dword [0x40b068]
push dword [0x40b04c]
call fcn.004038e7
push 1
jmp 0x401c46
push 0x40a0b4
push dword [0x40b08c]
call fcn.004020f8
and eax, eax
je 0x4013e0
mov eax, dword [0x40b080]
mov dword [0x40b0a8], eax
mov eax, dword [0x40b07c]
mov dword [0x40b028], eax
mov eax, dword [0x40b0a8]
mov dword [0x40b01c], eax
push 0x40a0b2
push dword [0x40b08c]
call fcn.004020f8
and eax, eax
je 0x401412
mov eax, dword [0x40b080]
mov dword [0x40b0ac], eax
mov eax, dword [0x40b07c]
mov dword [0x40b02c], eax
mov eax, dword [0x40b0ac]
mov dword [0x40b020], eax
push 0x40a0ba
push dword [0x40b08c]
call fcn.004020f8
and eax, eax
je 0x4016ac
mov edx, dword [0x40b044]
xor ecx, ecx
call fcn.00407720
jne 0x40145b
mov edx, dword [0x40b044]
push dword [0x40b2c8]
call fcn.00407750
lea ecx, [0x40b0b0]
pop edx
call fcn.00403100
jmp 0x4015d1
push 0xc80001
push dword [0x40b074]
push 0x6e
push 0xc8
push 0
push 0
push 0
call fcn.00405046
push dword [0x40b078]
push 0x14
push 0x9e
push 0xf
push 0x15
push 1
call fcn.0040451d
push 0x20
push 0x40a00d
push 0x14
push 0x9e
push 0x28
push 0x15
push 2
call fcn.0040460e
push 0x40a1b0
push 0x14
push 0x4e
push 0x4b
push 0x3d
push 3
call fcn.00404813
push 4
push 0xd
push 0
call fcn.00405069
push 2
call fcn.00404833
call fcn.004052be
push eax
mov ebx, 0x10
cmp ebx, dword [esp]
jne 0x40153b
push dword [0x40b03c]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x401c46
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x401584
call fcn.004052c6
push eax
mov ebx, 4
cmp ebx, dword [esp]
jne 0x401581
mov eax, dword [0x40b2c8]
push eax
push eax
push 2
call fcn.0040485c
lea ecx, [0x40b0b0]
pop edx
call fcn.00403100
push 0
call fcn.00404b85
add esp, 8
jmp 0x4015d1
pop eax
jmp 0x4015cb
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x4015cb
call fcn.004052d4
push eax
mov ebx, 3
cmp ebx, dword [esp]
jne 0x4015ca
mov eax, dword [0x40b2c8]
push eax
push eax
push 2
call fcn.0040485c
lea ecx, [0x40b0b0]
pop edx
call fcn.00403100
push 0
call fcn.00404b85
add esp, 8
jmp 0x4015d1
pop eax
pop eax
jmp 0x401511
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b0b0]
call fcn.004031f0
push eax
mov eax, dword [0x40b0b0]
push eax
call fcn.00406ac0
inc dword [0x40b2c8]
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b07c]
push dword [0x40b080]
call fcn.00404020
pop edx
pop ecx
mov dword [0x40b2c8], ecx
add ecx, dword [0x40a244]
add edx, dword [0x40a244]
call fcn.00407720
jne 0x401653
push 0x10
push dword [0x40b058]
push dword [0x40b04c]
call fcn.004038e7
push dword [0x40b03c]
call sub.KERNEL32.dll_RemoveDirectoryA
push 1
jmp 0x401c46
push 0x40a0bc
push dword [0x40b08c]
call fcn.004020f8
and eax, eax
je 0x401671
mov eax, dword [0x40b080]
mov dword [0x40b0b4], eax
push dword [0x40b02c]
push dword [0x40b028]
push dword [0x40b024]
push dword [0x40b0b4]
push dword [0x40b0ac]
push dword [0x40b0a8]
push dword [0x40b0a4]
push dword [0x40b0b0]
push dword [0x40b08c]
call fcn.00401d9d
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b028]
push dword [0x40b01c]
call fcn.00404020
lea ecx, [0x40b0b8]
pop edx
call fcn.00403100
push 0x40a0b0
push dword [0x40b08c]
call fcn.004020f8
and eax, eax
je 0x401957
mov eax, dword [0x40b2c8]
push eax
push eax
push 0
call fcn.00403c5d
inc dword [0x40b2c8]
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b07c]
push dword [0x40b080]
call fcn.00404020
pop edx
pop ecx
mov dword [0x40b2c8], ecx
add ecx, dword [0x40a244]
add edx, dword [0x40a244]
call fcn.00407720
je 0x401744
mov ebx, dword [0x40b088]
cmp ebx, 1
jne 0x401744
mov eax, 1
jmp 0x401746
xor eax, eax
and eax, eax
je 0x401957
mov eax, dword [0x40b2c8]
push eax
push eax
mov eax, dword [0x40b2c8]
push eax
push eax
call fcn.00406035
inc dword [0x40b2c8]
push dword [0x40b070]
mov edx, dword [0x40a244]
add dword [esp + 4], edx
call fcn.0040393d
lea ecx, [0x40b0bc]
pop edx
call fcn.00403100
mov edx, dword [0x40b0bc]
xor ecx, ecx
call fcn.00407720
jne 0x4018fb
mov edx, dword [0x40b0bc]
push dword [0x40b2c8]
call fcn.00407750
lea ecx, [0x40b038]
pop edx
call fcn.00403100
mov edx, dword [0x40b0b8]
xor ecx, ecx
call fcn.00407720
jne 0x4017d2
push dword [0x40b0b8]
call fcn.0040215f
push dword [0x40b084]
push 1
call fcn.00406510
and eax, eax
je 0x4018c7
push 1
call fcn.004062b0
push dword [0x40b2c8]
push 0x24
mov edx, dword [0x40b060]
push dword [0x40b2c8]
call fcn.00407750
mov edx, 0x40a010
call fcn.00407750
mov edx, dword [0x40b084]
call fcn.00407750
mov edx, 0x40a010
call fcn.00407750
mov edx, dword [0x40b064]
call fcn.00407750
inc dword [0x40b2c8]
push dword [0x40b05c]
mov edx, dword [0x40a244]
add dword [esp + 4], edx
call fcn.004038e7
pop dword [0x40b2c8]
mov dword [0x40b0c0], eax
mov ebx, dword [0x40b0c0]
cmp ebx, 7
jne 0x4018c7
mov eax, dword [0x40b2c8]
push eax
push eax
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b2c8]
call fcn.00403cbe
inc dword [0x40b2c8]
mov edx, dword [0x40a244]
add dword [esp], edx
call fcn.00406075
inc dword [0x40b2c8]
mov edx, dword [0x40a244]
add dword [esp], edx
call fcn.004060f0
pop dword [0x40b2c8]
push dword [0x40b03c]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x401c46
push dword [0x40b084]
push 1
call fcn.00406450
and eax, eax
je 0x4018fb
push dword [0x40b024]
push dword [0x40b018]
push 1
call fcn.00406530
push 1
call fcn.004062b0
mov eax, dword [0x40b2c8]
push eax
push eax
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b2c8]
call fcn.00403cbe
inc dword [0x40b2c8]
mov edx, dword [0x40a244]
add dword [esp], edx
call fcn.00406075
inc dword [0x40b2c8]
mov edx, dword [0x40a244]
add dword [esp], edx
call fcn.004060f0
pop dword [0x40b2c8]
push dword [0x40b03c]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x401c46
mov edx, dword [0x40b03c]
push dword [0x40b2c8]
call fcn.00407750
mov edx, str.BDFINOPS
call fcn.00407750
mov edx, dword [0x40b084]
call fcn.00407750
lea ecx, [0x40b084]
pop edx
call fcn.00403100
push dword [0x40b084]
push 1
call fcn.00406450
and eax, eax
je 0x4019bf
push dword [0x40b024]
push dword [0x40b018]
push 1
call fcn.00406530
push 1
call fcn.004062b0
jmp 0x4019fa
push dword [0x40b084]
call fcn.00406100
call fcn.0040206c
push 0x10
push dword [0x40b068]
push dword [0x40b04c]
call fcn.004038e7
push dword [0x40b03c]
call sub.KERNEL32.dll_RemoveDirectoryA
push 1
jmp 0x401c46
mov edx, dword [0x40b0b8]
xor ecx, ecx
call fcn.00407720
jne 0x401a14
push dword [0x40b0b8]
call fcn.0040215f
mov eax, dword [0x40b2c8]
push eax
push eax
push 0x800
call fcn.00403220
lea ecx, [0x40b0c4]
pop edx
call fcn.00403100
push dword [0x40b2c8]
push 0x800
push dword [0x40b0c4]
mov eax, dword [0x40b2c8]
push eax
push eax
call fcn.00403cbe
inc dword [0x40b2c8]
mov edx, dword [0x40a244]
add dword [esp], edx
call sub.KERNEL32.dll_GetShortPathNameA
pop dword [0x40b2c8]
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b2c8]
call fcn.00403cbe
inc dword [0x40b2c8]
push 0x40a034
mov edx, dword [0x40a244]
add dword [esp + 4], edx
call fcn.00403d19
pop dword [0x40b2c8]
mov eax, dword [0x40b2c8]
push eax
push eax
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b2c8]
call fcn.00403cbe
inc dword [0x40b2c8]
mov edx, dword [0x40a244]
add dword [esp], edx
call fcn.00406112
inc dword [0x40b2c8]
push 0x40a021
mov edx, dword [0x40a244]
add dword [esp + 4], edx
call fcn.00403d19
pop dword [0x40b2c8]
mov eax, dword [0x40b2c8]
push eax
push eax
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b2c8]
call fcn.00403cbe
inc dword [0x40b2c8]
mov edx, dword [0x40a244]
add dword [esp], edx
call fcn.00406075
inc dword [0x40b2c8]
push str.v2eprogrampathname
mov edx, dword [0x40a244]
add dword [esp + 4], edx
call fcn.00403d19
pop dword [0x40b2c8]
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b2c8]
push dword [0x40b0c4]
call fcn.00403260
inc dword [0x40b2c8]
push str.v2eprogramshortname
mov edx, dword [0x40a244]
add dword [esp + 4], edx
call fcn.00403d19
pop dword [0x40b2c8]
push dword [0x40b038]
push str.v2eincfilepath
call fcn.00403d19
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b2c8]
mov eax, dword [0x40b040]
cdq
push edx
push eax
call fcn.00403480
inc dword [0x40b2c8]
push str.v2eincfilecount
mov edx, dword [0x40a244]
add dword [esp + 4], edx
call fcn.00403d19
pop dword [0x40b2c8]
push dword [0x40b084]
call sub.SHLWAPI.dll_PathQuoteSpacesA
push dword [0x40b09c]
push dword [0x40b038]
push dword [0x40b084]
call fcn.00402830
call fcn.0040206c
push dword [0x40b084]
call fcn.00406100
mov eax, dword [0x40b2c8]
push eax
push eax
mov eax, dword [0x40b2c8]
push eax
push eax
push dword [0x40b2c8]
call fcn.00403cbe
inc dword [0x40b2c8]
mov edx, dword [0x40a244]
add dword [esp], edx
call fcn.00406075
inc dword [0x40b2c8]
mov edx, dword [0x40a244]
add dword [esp], edx
call fcn.004060f0
pop dword [0x40b2c8]
push dword [0x40b03c]
call sub.KERNEL32.dll_RemoveDirectoryA
push 0
jmp 0x401c46
push 0
call 0x401c5b
push dword [0x40b00c]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00403d71
call fcn.00403f20
call fcn.00404010
call fcn.004043b0
call fcn.00404c73
call fcn.00406310
call fcn.00406a7c
ret