Function at 0x401000
Capabilities:
Delete directory
Identify system language via api

Disassembly:
push 0xd0
push 0
push 0x40b1c8
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.DLL_GetModuleHandleA
mov dword [0x40b1cc], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.DLL_HeapCreate
mov dword [0x40b1c8], eax
call section..text
call fcn.004079a0
call fcn.00406d37
call fcn.00406570
call fcn.00404fe3
call fcn.00404610
call fcn.004042c0
call fcn.0040393b
call fcn.00403694
push 7
push 0x40a380
lea eax, [0x40b294]
push eax
push 8
call fcn.00404420
mov dword [0x40b290], eax
push 7
push 0x40b288
push 0x40a378
mov edx, dword [0x40b288]
call fcn.00403060
mov eax, 0x401
push 8
call fcn.004030a0
push 0x400
call fcn.004042f0
mov dword [0x40b200], eax
push 8
push dword [0x40b200]
call sub.KERNEL32.DLL_GetUserDefaultLangID
push eax
call sub.KERNEL32.DLL_VerLanguageNameA
push dword [0x40b200]
call sub.USER32.dll_CharLowerA
mov eax, dword [0x40b490]
push eax
push eax
push 8
push dword [0x40b200]
call fcn.00404310
lea ecx, [0x40b204]
pop edx
call fcn.004030f0
push dword [0x40b200]
call fcn.00404360
push dword [0x40b204]
mov edx, str.deutsch
pop ecx
call fcn.004079f0
je 0x4011ff
mov edx, str.Fortfahren_
lea ecx, [0x40b208]
call fcn.00403108
mov edx, str.Fehler_
lea ecx, [0x40b20c]
call fcn.00403108
mov edx, str.Einige_Include_Dateien_konnten_nicht_erstellt_werden.
lea ecx, [0x40b210]
call fcn.00403108
mov edx, str.Nicht_gen
lea ecx, [0x40b214]
call fcn.00403108
mov edx, str.Falsches_Passwort.
lea ecx, [0x40b218]
call fcn.00403108
mov edx, 0x40a10a
lea ecx, [0x40b21c]
call fcn.00403108
mov edx, str.Die_Datei
lea ecx, [0x40b220]
call fcn.00403108
mov edx, str._existiert_bereits_im_aktuellen_Arbeitsverzeichnis.
lea ecx, [0x40b224]
call fcn.00403108
mov edx, str.Ein_unbekannter_Fehler_ist_aufgetreten._Das_Programm_wird_beendet.
lea ecx, [0x40b228]
call fcn.00403108
mov edx, str.Das_Programm_wird_von_diesem_Betriebssytem_nicht_unterst
lea ecx, [0x40b22c]
call fcn.00403108
mov edx, str.Bitte_w
lea ecx, [0x40b230]
call fcn.00403108
mov edx, str.Passwort
lea ecx, [0x40b234]
call fcn.00403108
mov edx, str.Bitte_geben_Sie_das_Passwort_ein.
lea ecx, [0x40b238]
call fcn.00403108
jmp 0x4012cf
mov edx, str.Continue_
lea ecx, [0x40b208]
call fcn.00403108
mov edx, 0x40a0cb
lea ecx, [0x40b20c]
call fcn.00403108
mov edx, str.Can_not_create_some_of_your_include_files.
lea ecx, [0x40b210]
call fcn.00403108
mov edx, str.Can_not_allocate_the_memory.
lea ecx, [0x40b214]
call fcn.00403108
mov edx, str.Wrong_password.
lea ecx, [0x40b218]
call fcn.00403108
mov edx, 0x40a014
lea ecx, [0x40b21c]
call fcn.00403108
mov edx, str.The_file
lea ecx, [0x40b220]
call fcn.00403108
mov edx, str._already_exists_in_the_current_directory._Overwrite_
lea ecx, [0x40b224]
call fcn.00403108
mov edx, str.An_unknown_error_occured._The_program_will_be_terminated.
lea ecx, [0x40b228]
call fcn.00403108
mov edx, str.This_program_is_not_supported_on_this_operating_system.
lea ecx, [0x40b22c]
call fcn.00403108
mov edx, str.Choose_a_location_to_save_the_files.
lea ecx, [0x40b230]
call fcn.00403108
mov edx, str.Password
lea ecx, [0x40b234]
call fcn.00403108
mov edx, 0x40a01f
lea ecx, [0x40b238]
call fcn.00403108
call fcn.00404207
mov ebx, eax
cmp ebx, 0x32
jge 0x4012f6
push 0x10
push dword [0x40b22c]
push dword [0x40b20c]
call fcn.004036a2
jmp 0x401be7
lea eax, [0x4020d7]
push eax
call fcn.004040a0
call fcn.00403a66
mov dword [0x40b240], eax
push 0
call sub.KERNEL32.DLL_GetModuleHandleA
mov dword [0x40b244], eax
mov ebx, dword [0x40b240]
and ebx, ebx
jle 0x4013a1
mov dword [0x40b248], 0
mov ebx, dword [0x40b240]
dec ebx
cmp ebx, dword [0x40b248]
jl 0x4013a1
mov eax, dword [0x40b490]
push eax
push eax
push dword [0x40b248]
call fcn.00403a18
lea ecx, [0x40b24c]
pop edx
call fcn.004030f0
push dword [0x40b24c]
call sub.SHLWAPI.dll_PathQuoteSpacesA
mov edx, dword [0x40b250]
push dword [0x40b490]
call fcn.00407a20
mov edx, dword [0x40b24c]
call fcn.00407a20
mov edx, str.__
call fcn.00407a20
lea ecx, [0x40b250]
pop edx
call fcn.004030f0
inc dword [0x40b248]
jmp 0x40132f
push 0x40a0c5
push dword [0x40b244]
call fcn.004020fa
and eax, eax
je 0x4013cc
mov eax, dword [0x40b200]
mov dword [0x40b254], eax
push dword [0x40b254]
call fcn.00401c25
jmp 0x4013ec
push 0x10
push dword [0x40b228]
push dword [0x40b20c]
call fcn.004036a2
push 1
jmp 0x401bec
push 0x40a0c3
push dword [0x40b244]
call fcn.004020fa
and eax, eax
je 0x401426
mov eax, dword [0x40b490]
push eax
push eax
push dword [0x40b23c]
push dword [0x40b200]
call fcn.00404310
lea ecx, [0x40b258]
pop edx
call fcn.004030f0
jmp 0x401446
push 0x10
push dword [0x40b228]
push dword [0x40b20c]
call fcn.004036a2
push 1
jmp 0x401bec
push 0x40a0bb
push dword [0x40b244]
call fcn.004020fa
and eax, eax
je 0x40147a
mov eax, dword [0x40b200]
mov dword [0x40b25c], eax
mov eax, dword [0x40b23c]
mov dword [0x40b1e0], eax
mov eax, dword [0x40b25c]
mov dword [0x40b1d4], eax
jmp 0x40149a
push 0x10
push dword [0x40b228]
push dword [0x40b20c]
call fcn.004036a2
push 1
jmp 0x401bec
push 0x40a0c1
push dword [0x40b244]
call fcn.004020fa
and eax, eax
je 0x4014cc
mov eax, dword [0x40b200]
mov dword [0x40b260], eax
mov eax, dword [0x40b23c]
mov dword [0x40b1e4], eax
mov eax, dword [0x40b260]
mov dword [0x40b1d8], eax
push 0x40a0bf
push dword [0x40b244]
call fcn.004020fa
and eax, eax
je 0x4014fe
mov eax, dword [0x40b200]
mov dword [0x40b264], eax
mov eax, dword [0x40b23c]
mov dword [0x40b1e8], eax
mov eax, dword [0x40b264]
mov dword [0x40b1dc], eax
push 0x40a0c7
push dword [0x40b244]
call fcn.004020fa
and eax, eax
je 0x40176d
push 0xc80001
push dword [0x40b234]
push 0x6e
push 0xc8
push 0
push 0
push 0
call fcn.00405316
push dword [0x40b238]
push 0x14
push 0x9e
push 0xf
push 0x15
push 1
call fcn.004047ed
push 0x20
push 0x40a00d
push 0x14
push 0x9e
push 0x28
push 0x15
push 2
call fcn.004048de
push 0x40a288
push 0x14
push 0x4e
push 0x4b
push 0x3d
push 3
call fcn.00404ae3
push 4
push 0xd
push 0
call fcn.00405339
push 2
call fcn.00404b03
call fcn.0040558e
push eax
mov ebx, 0x10
cmp ebx, dword [esp]
jne 0x4015f9
push dword [0x40b1fc]
call sub.MSVCRT.dll__rmdir
add esp, 4
push 0
jmp 0x401bec
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x401642
call fcn.00405596
push eax
mov ebx, 4
cmp ebx, dword [esp]
jne 0x40163f
mov eax, dword [0x40b490]
push eax
push eax
push 2
call fcn.00404b2c
lea ecx, [0x40b268]
pop edx
call fcn.004030f0
push 0
call fcn.00404e55
add esp, 8
jmp 0x40168f
pop eax
jmp 0x401689
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x401689
call fcn.004055a4
push eax
mov ebx, 3
cmp ebx, dword [esp]
jne 0x401688
mov eax, dword [0x40b490]
push eax
push eax
push 2
call fcn.00404b2c
lea ecx, [0x40b268]
pop edx
call fcn.004030f0
push 0
call fcn.00404e55
add esp, 8
jmp 0x40168f
pop eax
pop eax
jmp 0x4015cc
mov eax, dword [0x40b490]
push eax
push eax
push dword [0x40b268]
call fcn.004031f0
push eax
mov eax, dword [0x40b268]
push eax
call fcn.00406d90
inc dword [0x40b490]
mov eax, dword [0x40b490]
push eax
push eax
push dword [0x40b23c]
push dword [0x40b200]
call fcn.00404310
pop edx
pop ecx
mov dword [0x40b490], ecx
add ecx, dword [0x40a388]
add edx, dword [0x40a388]
call fcn.004079f0
jne 0x401714
push 0x10
push dword [0x40b218]
push dword [0x40b20c]
call fcn.004036a2
push dword [0x40b1fc]
call sub.MSVCRT.dll__rmdir
add esp, 4
push 1
jmp 0x401bec
push 0x40a0c9
push dword [0x40b244]
call fcn.004020fa
and eax, eax
je 0x401732
mov eax, dword [0x40b200]
mov dword [0x40b26c], eax
push dword [0x40b1e8]
push dword [0x40b1e4]
push dword [0x40b1e0]
push dword [0x40b26c]
push dword [0x40b264]
push dword [0x40b260]
push dword [0x40b25c]
push dword [0x40b268]
push dword [0x40b244]
call fcn.00401d88
mov eax, dword [0x40b490]
push eax
push eax
push dword [0x40b1e0]
push dword [0x40b1d4]
call fcn.00404310
lea ecx, [0x40b270]
pop edx
call fcn.004030f0
mov eax, dword [0x40b490]
push eax
push eax
push dword [0x40b1e4]
push dword [0x40b1d8]
call fcn.00404310
lea ecx, [0x40b274]
pop edx
call fcn.004030f0
push 0x40a0bd
push dword [0x40b244]
call fcn.004020fa
and eax, eax
je 0x401a3c
mov eax, dword [0x40b490]
push eax
push eax
push 0
call fcn.00403a18
inc dword [0x40b490]
mov eax, dword [0x40b490]
push eax
push eax
push dword [0x40b23c]
push dword [0x40b200]
call fcn.00404310
pop edx
pop ecx
mov dword [0x40b490], ecx
add ecx, dword [0x40a388]
add edx, dword [0x40a388]
call fcn.004079f0
je 0x401829
mov ebx, dword [0x40b240]
cmp ebx, 1
jne 0x401829
mov eax, 1
jmp 0x40182b
xor eax, eax
and eax, eax
je 0x401a3c
mov eax, dword [0x40b490]
push eax
push eax
mov eax, dword [0x40b490]
push eax
push eax
call fcn.00406305
inc dword [0x40b490]
push dword [0x40b230]
mov edx, dword [0x40a388]
add dword [esp + 4], edx
call fcn.004036f8
lea ecx, [0x40b278]
pop edx
call fcn.004030f0
mov edx, dword [0x40b278]
xor ecx, ecx
call fcn.004079f0
jne 0x4019dd
mov edx, dword [0x40b278]
push dword [0x40b490]
call fcn.00407a20
lea ecx, [0x40b1f4]
pop edx
call fcn.004030f0
mov edx, dword [0x40b274]
xor ecx, ecx
call fcn.004079f0
jne 0x4018b7
push dword [0x40b274]
call fcn.00402161
push dword [0x40b258]
push 1
call fcn.00406760
and eax, eax
je 0x4019af
push 1
call fcn.00406500
push dword [0x40b490]
push 0x24
mov edx, dword [0x40b220]
push dword [0x40b490]
call fcn.00407a20
mov edx, 0x40a010
call fcn.00407a20
mov edx, dword [0x40b258]
call fcn.00407a20
mov edx, 0x40a010
call fcn.00407a20
mov edx, dword [0x40b224]
call fcn.00407a20
inc dword [0x40b490]
push dword [0x40b21c]
mov edx, dword [0x40a388]
add dword [esp + 4], edx
call fcn.004036a2
pop dword [0x40b490]
mov dword [0x40b27c], eax
mov ebx, dword [0x40b27c]
cmp ebx, 7
jne 0x4019af
mov eax, dword [0x40b490]
push eax
push eax
mov eax, dword [0x40b490]
push eax
push eax
push dword [0x40b490]
call fcn.00403a79
inc dword [0x40b490]
mov edx, dword [0x40a388]
add dword [esp], edx
call fcn.00406345
inc dword [0x40b490]
mov edx, dword [0x40a388]
add dword [esp], edx
call fcn.004063c0
pop dword [0x40b490]
push dword [0x40b1fc]
call sub.MSVCRT.dll__rmdir
add esp, 4
push 0
jmp 0x401bec
push dword [0x40b258]
push 1
call fcn.004066a0
and eax, eax
je 0x4019dd
push dword [0x40b270]
push 1
call fcn.00406780
push 1
call fcn.00406500
mov eax, dword [0x40b490]
push eax
push eax
mov eax, dword [0x40b490]
push eax
push eax
push dword [0x40b490]
call fcn.00403a79
inc dword [0x40b490]
mov edx, dword [0x40a388]
add dword [esp], edx
call fcn.00406345
inc dword [0x40b490]
mov edx, dword [0x40a388]
add dword [esp], edx
call fcn.004063c0
pop dword [0x40b490]
push dword [0x40b1fc]
call sub.MSVCRT.dll__rmdir
add esp, 4
push 0
jmp 0x401bec
mov edx, dword [0x40b1fc]
push dword [0x40b490]
call fcn.00407a20
mov edx, str.BDFINOPS
call fcn.00407a20
mov edx, dword [0x40b258]
call fcn.00407a20
lea ecx, [0x40b258]
pop edx
call fcn.004030f0
push dword [0x40b258]
push 1
call fcn.004066a0
and eax, eax
je 0x401a9e
push dword [0x40b270]
push 1
call fcn.00406780
push 1
call fcn.00406500
jmp 0x401adc
push dword [0x40b258]
call fcn.004063d0
call fcn.0040206e
push 0x10
push dword [0x40b228]
push dword [0x40b20c]
call fcn.004036a2
push dword [0x40b1fc]
call sub.MSVCRT.dll__rmdir
add esp, 4
push 1
jmp 0x401bec
mov edx, dword [0x40b274]
xor ecx, ecx
call fcn.004079f0
jne 0x401af6
push dword [0x40b274]
call fcn.00402161
push dword [0x40b490]
push 0x64
push dword [0x40b1f4]
mov edx, dword [0x40b250]
push dword [0x40b490]
call fcn.00407a20
mov edx, dword [0x40b1f8]
call fcn.00407a20
inc dword [0x40b490]
push dword [0x40b258]
mov edx, dword [0x40a388]
add dword [esp + 4], edx
call fcn.00403f1e
pop dword [0x40b490]
mov dword [0x40b280], eax
push dword [0x40b280]
call fcn.00403f58
push dword [0x40b280]
call fcn.00403f66
mov dword [0x40b284], eax
push dword [0x40b280]
call fcn.00403f84
call fcn.0040206e
push dword [0x40b258]
call fcn.004063d0
mov eax, dword [0x40b490]
push eax
push eax
mov eax, dword [0x40b490]
push eax
push eax
push dword [0x40b490]
call fcn.00403a79
inc dword [0x40b490]
mov edx, dword [0x40a388]
add dword [esp], edx
call fcn.00406345
inc dword [0x40b490]
mov edx, dword [0x40a388]
add dword [esp], edx
call fcn.004063c0
pop dword [0x40b490]
push dword [0x40b1fc]
call sub.MSVCRT.dll__rmdir
add esp, 4
push dword [0x40b244]
call sub.KERNEL32.DLL_FreeLibrary
push dword [0x40b284]
jmp 0x401bec
push 0
call 0x401c01
push dword [0x40b1c8]
call sub.KERNEL32.DLL_HeapDestroy
call sub.KERNEL32.DLL_ExitProcess
call fcn.00404038
call fcn.004041f0
call fcn.004042e0
call fcn.00404680
call fcn.00404f43
call fcn.00406560
call fcn.00406d4c
ret