Function at 0x401000
Capabilities:
Delete directory

Disassembly:
push 0xd4
push 0
push 0x40b01c
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.DLL_GetModuleHandleA
mov dword [0x40b020], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.DLL_HeapCreate
mov dword [0x40b01c], eax
call section..text
call fcn.00407830
call fcn.00406bc7
call fcn.00406320
call fcn.00404d13
call fcn.00404340
call fcn.00403ff0
call fcn.00403b80
call fcn.004038d9
push 7
push 0x40a250
lea eax, [0x40b0ec]
push eax
push 8
call fcn.00404150
mov dword [0x40b0e8], eax
push 7
push 0x40b0e0
push 0x40a248
mov edx, dword [0x40b0e0]
call fcn.00403060
mov eax, 0x401
push 8
call fcn.004030a0
mov edx, 0x40a0c3
lea ecx, [0x40b058]
call fcn.004030f8
mov edx, 0x40a0b7
lea ecx, [0x40b05c]
call fcn.004030f8
mov edx, str.Can_not_create_some_of_your_include_files.
lea ecx, [0x40b060]
call fcn.004030f8
mov edx, str.Can_not_allocate_the_memory.
lea ecx, [0x40b064]
call fcn.004030f8
mov edx, str.Wrong_password.
lea ecx, [0x40b068]
call fcn.004030f8
mov edx, 0x40a016
lea ecx, [0x40b06c]
call fcn.004030f8
mov edx, 0x40a0e6
lea ecx, [0x40b070]
call fcn.004030f8
mov edx, str._already_exists_in_the_current_directory._Overwrite_
lea ecx, [0x40b074]
call fcn.004030f8
mov edx, str.An_unknown_error_occured._The_program_will_be_terminated.
lea ecx, [0x40b078]
call fcn.004030f8
mov edx, str.This_program_is_not_supported_on_your_operating_system.
lea ecx, [0x40b07c]
call fcn.004030f8
mov edx, str.Choose_a_location_to_save_the_files.
lea ecx, [0x40b080]
call fcn.004030f8
mov edx, str.Password
lea ecx, [0x40b084]
call fcn.004030f8
mov edx, 0x40a035
lea ecx, [0x40b088]
call fcn.004030f8
call fcn.00403f37
mov ebx, eax
cmp ebx, 0x32
jge 0x4011ac
push 0x10
push dword [0x40b07c]
push dword [0x40b05c]
call fcn.004038e7
jmp 0x401d1c
lea eax, [0x4021b0]
push eax
call fcn.00403dd0
call fcn.00403cab
mov dword [0x40b098], eax
push 0
call sub.KERNEL32.DLL_GetModuleHandleA
mov dword [0x40b09c], eax
mov eax, dword [0x40b2e0]
push eax
push eax
call fcn.00403cbe
lea ecx, [0x40b0a0]
pop edx
call fcn.00403100
push dword [0x40b0a0]
call sub.SHLWAPI.dll_PathQuoteSpacesA
mov ebx, dword [0x40b098]
and ebx, ebx
jle 0x40130c
mov dword [0x40b0a4], 0
mov ebx, dword [0x40b098]
dec ebx
cmp ebx, dword [0x40b0a4]
jl 0x4012d8
mov eax, dword [0x40b2e0]
push eax
push eax
push dword [0x40b0a4]
call fcn.00403c5d
lea ecx, [0x40b0a8]
pop edx
call fcn.00403100
push dword [0x40b0a8]
mov edx, str._b2epass
pop ecx
call fcn.00407880
je 0x40125c
mov dword [0x40b0ac], 1
jmp 0x4012cd
mov ebx, dword [0x40b0ac]
cmp ebx, 1
jne 0x401290
mov edx, dword [0x40b0a8]
push dword [0x40b2e0]
call fcn.004078b0
lea ecx, [0x40b054]
pop edx
call fcn.00403100
mov dword [0x40b0ac], 0
jmp 0x4012cd
push dword [0x40b0a8]
call sub.SHLWAPI.dll_PathQuoteSpacesA
mov edx, dword [0x40b0b0]
push dword [0x40b2e0]
call fcn.004078b0
mov edx, dword [0x40b0a8]
call fcn.004078b0
mov edx, 0x40a00e
call fcn.004078b0
lea ecx, [0x40b0b0]
pop edx
call fcn.00403100
inc dword [0x40b0a4]
jmp 0x40120c
mov edx, dword [0x40b0a0]
push dword [0x40b2e0]
call fcn.004078b0
mov edx, 0x40a00e
call fcn.004078b0
mov edx, dword [0x40b0b0]
call fcn.004078b0
lea ecx, [0x40b0b0]
pop edx
call fcn.00403100
jmp 0x401329
mov edx, dword [0x40b0a0]
push dword [0x40b2e0]
call fcn.004078b0
lea ecx, [0x40b0b0]
pop edx
call fcn.00403100
push 0x40a0b1
push dword [0x40b09c]
call fcn.004021d3
and eax, eax
je 0x401354
mov eax, dword [0x40b090]
mov dword [0x40b0b4], eax
push dword [0x40b0b4]
call fcn.00401d5a
jmp 0x401374
push 0x10
push dword [0x40b078]
push dword [0x40b05c]
call fcn.004038e7
push 1
jmp 0x401d21
push 0x40a0af
push dword [0x40b09c]
call fcn.004021d3
and eax, eax
je 0x4013ae
mov eax, dword [0x40b2e0]
push eax
push eax
push dword [0x40b08c]
push dword [0x40b090]
call fcn.00404020
lea ecx, [0x40b094]
pop edx
call fcn.00403100
jmp 0x4013ce
push 0x10
push dword [0x40b078]
push dword [0x40b05c]
call fcn.004038e7
push 1
jmp 0x401d21
push 0x40a08c
push dword [0x40b09c]
call fcn.004021d3
and eax, eax
je 0x401402
mov eax, dword [0x40b090]
mov dword [0x40b0b8], eax
mov eax, dword [0x40b08c]
mov dword [0x40b034], eax
mov eax, dword [0x40b0b8]
mov dword [0x40b028], eax
jmp 0x401422
push 0x10
push dword [0x40b078]
push dword [0x40b05c]
call fcn.004038e7
push 1
jmp 0x401d21
push 0x40a09e
push dword [0x40b09c]
call fcn.004021d3
and eax, eax
je 0x401454
mov eax, dword [0x40b090]
mov dword [0x40b0bc], eax
mov eax, dword [0x40b08c]
mov dword [0x40b038], eax
mov eax, dword [0x40b0bc]
mov dword [0x40b02c], eax
push 0x40a09c
push dword [0x40b09c]
call fcn.004021d3
and eax, eax
je 0x401486
mov eax, dword [0x40b090]
mov dword [0x40b0c0], eax
mov eax, dword [0x40b08c]
mov dword [0x40b03c], eax
mov eax, dword [0x40b0c0]
mov dword [0x40b030], eax
push 0x40a0b3
push dword [0x40b09c]
call fcn.004021d3
and eax, eax
je 0x401720
mov edx, dword [0x40b054]
xor ecx, ecx
call fcn.00407880
jne 0x4014cf
mov edx, dword [0x40b054]
push dword [0x40b2e0]
call fcn.004078b0
lea ecx, [0x40b0c4]
pop edx
call fcn.00403100
jmp 0x401645
push 0xc80001
push dword [0x40b084]
push 0x6e
push 0xc8
push 0
push 0
push 0
call fcn.00405046
push dword [0x40b088]
push 0x14
push 0x9e
push 0xf
push 0x15
push 1
call fcn.0040451d
push 0x20
push 0x40a00d
push 0x14
push 0x9e
push 0x28
push 0x15
push 2
call fcn.0040460e
push 0x40a1a7
push 0x14
push 0x4e
push 0x4b
push 0x3d
push 3
call fcn.00404813
push 4
push 0xd
push 0
call fcn.00405069
push 2
call fcn.00404833
call fcn.004052be
push eax
mov ebx, 0x10
cmp ebx, dword [esp]
jne 0x4015af
push dword [0x40b04c]
call sub.KERNEL32.DLL_RemoveDirectoryA
push 0
jmp 0x401d21
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x4015f8
call fcn.004052c6
push eax
mov ebx, 4
cmp ebx, dword [esp]
jne 0x4015f5
mov eax, dword [0x40b2e0]
push eax
push eax
push 2
call fcn.0040485c
lea ecx, [0x40b0c4]
pop edx
call fcn.00403100
push 0
call fcn.00404b85
add esp, 8
jmp 0x401645
pop eax
jmp 0x40163f
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x40163f
call fcn.004052d4
push eax
mov ebx, 3
cmp ebx, dword [esp]
jne 0x40163e
mov eax, dword [0x40b2e0]
push eax
push eax
push 2
call fcn.0040485c
lea ecx, [0x40b0c4]
pop edx
call fcn.00403100
push 0
call fcn.00404b85
add esp, 8
jmp 0x401645
pop eax
pop eax
jmp 0x401585
mov eax, dword [0x40b2e0]
push eax
push eax
push dword [0x40b0c4]
call fcn.004031f0
push eax
mov eax, dword [0x40b0c4]
push eax
call fcn.00406c20
inc dword [0x40b2e0]
mov eax, dword [0x40b2e0]
push eax
push eax
push dword [0x40b08c]
push dword [0x40b090]
call fcn.00404020
pop edx
pop ecx
mov dword [0x40b2e0], ecx
add ecx, dword [0x40a258]
add edx, dword [0x40a258]
call fcn.00407880
jne 0x4016c7
push 0x10
push dword [0x40b068]
push dword [0x40b05c]
call fcn.004038e7
push dword [0x40b04c]
call sub.KERNEL32.DLL_RemoveDirectoryA
push 1
jmp 0x401d21
push 0x40a0b5
push dword [0x40b09c]
call fcn.004021d3
and eax, eax
je 0x4016e5
mov eax, dword [0x40b090]
mov dword [0x40b0c8], eax
push dword [0x40b03c]
push dword [0x40b038]
push dword [0x40b034]
push dword [0x40b0c8]
push dword [0x40b0c0]
push dword [0x40b0bc]
push dword [0x40b0b8]
push dword [0x40b0c4]
push dword [0x40b09c]
call fcn.00401e78
mov eax, dword [0x40b2e0]
push eax
push eax
push dword [0x40b034]
push dword [0x40b028]
call fcn.00404020
lea ecx, [0x40b0cc]
pop edx
call fcn.00403100
mov eax, dword [0x40b2e0]
push eax
push eax
push dword [0x40b038]
push dword [0x40b02c]
call fcn.00404020
lea ecx, [0x40b0d0]
pop edx
call fcn.00403100
push 0x40a09a
push dword [0x40b09c]
call fcn.004021d3
and eax, eax
je 0x401a16
mov eax, dword [0x40b2e0]
push eax
push eax
push 0
call fcn.00403c5d
inc dword [0x40b2e0]
mov eax, dword [0x40b2e0]
push eax
push eax
push dword [0x40b08c]
push dword [0x40b090]
call fcn.00404020
pop edx
pop ecx
mov dword [0x40b2e0], ecx
add ecx, dword [0x40a258]
add edx, dword [0x40a258]
call fcn.00407880
je 0x4017dc
mov ebx, dword [0x40b098]
cmp ebx, 1
jne 0x4017dc
mov eax, 1
jmp 0x4017de
xor eax, eax
and eax, eax
je 0x401a16
mov eax, dword [0x40b2e0]
push eax
push eax
mov eax, dword [0x40b2e0]
push eax
push eax
call fcn.00406035
inc dword [0x40b2e0]
push dword [0x40b080]
mov edx, dword [0x40a258]
add dword [esp + 4], edx
call fcn.0040393d
lea ecx, [0x40b0d4]
pop edx
call fcn.00403100
mov edx, dword [0x40b0d4]
xor ecx, ecx
call fcn.00407880
jne 0x4019ba
mov edx, dword [0x40b0d4]
push dword [0x40b2e0]
call fcn.004078b0
lea ecx, [0x40b048]
pop edx
call fcn.00403100
mov edx, dword [0x40b0d0]
xor ecx, ecx
call fcn.00407880
jne 0x40186a
push dword [0x40b0d0]
call fcn.0040223a
push dword [0x40b094]
push 1
call fcn.00406510
and eax, eax
je 0x40195f
push 1
call fcn.004062b0
push dword [0x40b2e0]
push 0x24
mov edx, dword [0x40b070]
push dword [0x40b2e0]
call fcn.004078b0
mov edx, 0x40a010
call fcn.004078b0
mov edx, dword [0x40b094]
call fcn.004078b0
mov edx, 0x40a010
call fcn.004078b0
mov edx, dword [0x40b074]
call fcn.004078b0
inc dword [0x40b2e0]
push dword [0x40b06c]
mov edx, dword [0x40a258]
add dword [esp + 4], edx
call fcn.004038e7
pop dword [0x40b2e0]
mov dword [0x40b0d8], eax
mov ebx, dword [0x40b0d8]
cmp ebx, 7
jne 0x40195f
mov eax, dword [0x40b2e0]
push eax
push eax
mov eax, dword [0x40b2e0]
push eax
push eax
push dword [0x40b2e0]
call fcn.00403cbe
inc dword [0x40b2e0]
mov edx, dword [0x40a258]
add dword [esp], edx
call fcn.00406075
inc dword [0x40b2e0]
mov edx, dword [0x40a258]
add dword [esp], edx
call fcn.004060f0
pop dword [0x40b2e0]
push dword [0x40b04c]
call sub.KERNEL32.DLL_RemoveDirectoryA
push 0
jmp 0x401d21
push dword [0x40b094]
push 1
call fcn.00406450
and eax, eax
je 0x4019ba
push str._echo_off
push 1
call fcn.00406530
push 0x40a0cd
push 1
call fcn.00406530
push str._echo_on
push 1
call fcn.00406530
push dword [0x40b0cc]
push 1
call fcn.00406610
push 1
call fcn.004062b0
mov eax, dword [0x40b2e0]
push eax
push eax
mov eax, dword [0x40b2e0]
push eax
push eax
push dword [0x40b2e0]
call fcn.00403cbe
inc dword [0x40b2e0]
mov edx, dword [0x40a258]
add dword [esp], edx
call fcn.00406075
inc dword [0x40b2e0]
mov edx, dword [0x40a258]
add dword [esp], edx
call fcn.004060f0
pop dword [0x40b2e0]
push dword [0x40b04c]
call sub.KERNEL32.DLL_RemoveDirectoryA
push 0
jmp 0x401d21
mov edx, dword [0x40b04c]
push dword [0x40b2e0]
call fcn.004078b0
mov edx, 0x40a08a
call fcn.004078b0
mov edx, dword [0x40b094]
call fcn.004078b0
lea ecx, [0x40b094]
pop edx
call fcn.00403100
push dword [0x40b094]
push 1
call fcn.00406450
and eax, eax
je 0x401aa5
push str._echo_off
push 1
call fcn.00406530
push 0x40a0cd
push 1
call fcn.00406530
push str._echo_on
push 1
call fcn.00406530
push dword [0x40b0cc]
push 1
call fcn.00406610
push 1
call fcn.004062b0
jmp 0x401ae0
push dword [0x40b094]
call fcn.00406100
call fcn.00402147
push 0x10
push dword [0x40b078]
push dword [0x40b05c]
call fcn.004038e7
push dword [0x40b04c]
call sub.KERNEL32.DLL_RemoveDirectoryA
push 1
jmp 0x401d21
mov edx, dword [0x40b0d0]
xor ecx, ecx
call fcn.00407880
jne 0x401afa
push dword [0x40b0d0]
call fcn.0040223a
mov eax, dword [0x40b2e0]
push eax
push eax
push 0x800
call fcn.00403220
lea ecx, [0x40b0dc]
pop edx
call fcn.00403100
push dword [0x40b2e0]
push 0x800
push dword [0x40b0dc]
mov eax, dword [0x40b2e0]
push eax
push eax
call fcn.00403cbe
inc dword [0x40b2e0]
mov edx, dword [0x40a258]
add dword [esp], edx
call sub.KERNEL32.DLL_GetShortPathNameA
pop dword [0x40b2e0]
mov eax, dword [0x40b2e0]
push eax
push eax
push dword [0x40b2e0]
call fcn.00403cbe
inc dword [0x40b2e0]
push str.b2eprogramname
mov edx, dword [0x40a258]
add dword [esp + 4], edx
call fcn.00403d19
pop dword [0x40b2e0]
mov eax, dword [0x40b2e0]
push eax
push eax
mov eax, dword [0x40b2e0]
push eax
push eax
push dword [0x40b2e0]
call fcn.00403cbe
inc dword [0x40b2e0]
mov edx, dword [0x40a258]
add dword [esp], edx
call fcn.00406112
inc dword [0x40b2e0]
push str.b2eprogramfilename
mov edx, dword [0x40a258]
add dword [esp + 4], edx
call fcn.00403d19
pop dword [0x40b2e0]
mov eax, dword [0x40b2e0]
push eax
push eax
mov eax, dword [0x40b2e0]
push eax
push eax
push dword [0x40b2e0]
call fcn.00403cbe
inc dword [0x40b2e0]
mov edx, dword [0x40a258]
add dword [esp], edx
call fcn.00406075
inc dword [0x40b2e0]
push str.b2eprogrampathname
mov edx, dword [0x40a258]
add dword [esp + 4], edx
call fcn.00403d19
pop dword [0x40b2e0]
mov eax, dword [0x40b2e0]
push eax
push eax
push dword [0x40b2e0]
push dword [0x40b0dc]
call fcn.00403260
inc dword [0x40b2e0]
push 0x40a021
mov edx, dword [0x40a258]
add dword [esp + 4], edx
call fcn.00403d19
pop dword [0x40b2e0]
push dword [0x40b048]
push 0x40a0a0
call fcn.00403d19
mov eax, dword [0x40b2e0]
push eax
push eax
push dword [0x40b2e0]
mov eax, dword [0x40b050]
cdq
push edx
push eax
call fcn.00403480
inc dword [0x40b2e0]
push 0x40a0d6
mov edx, dword [0x40a258]
add dword [esp + 4], edx
call fcn.00403d19
pop dword [0x40b2e0]
push dword [0x40b0b0]
push dword [0x40b048]
push dword [0x40b094]
call fcn.0040290b
call fcn.00402147
push dword [0x40b094]
call fcn.00406100
mov eax, dword [0x40b2e0]
push eax
push eax
mov eax, dword [0x40b2e0]
push eax
push eax
push dword [0x40b2e0]
call fcn.00403cbe
inc dword [0x40b2e0]
mov edx, dword [0x40a258]
add dword [esp], edx
call fcn.00406075
inc dword [0x40b2e0]
mov edx, dword [0x40a258]
add dword [esp], edx
call fcn.004060f0
pop dword [0x40b2e0]
push dword [0x40b04c]
call sub.KERNEL32.DLL_RemoveDirectoryA
push 0
jmp 0x401d21
push 0
call 0x401d36
push dword [0x40b01c]
call sub.KERNEL32.DLL_HeapDestroy
call sub.KERNEL32.DLL_ExitProcess
call fcn.00403d71
call fcn.00403f20
call fcn.00404010
call fcn.004043b0
call fcn.00404c73
call fcn.00406310
call fcn.00406bdc
ret