Function at 0x401000
Capabilities:
Delete directory
Identify system language via api

Disassembly:
push 0xc8
push 0
push 0x40b13c
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.DLL_GetModuleHandleA
mov dword [0x40b140], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.DLL_HeapCreate
mov dword [0x40b13c], eax
call section..text
call fcn.00407470
call fcn.00406807
call fcn.00406040
call fcn.00404ab3
call fcn.004040e0
call fcn.00403d90
call fcn.0040393b
call fcn.00403694
push 7
push 0x40a384
lea eax, [0x40b200]
push eax
push 8
call fcn.00403ef0
mov dword [0x40b1fc], eax
push 7
push 0x40b1f4
push 0x40a37c
mov edx, dword [0x40b1f4]
call fcn.00403060
mov eax, 0x401
push 8
call fcn.004030a0
push 0x400
call fcn.00403dc0
mov dword [0x40b174], eax
push 8
push dword [0x40b174]
call sub.KERNEL32.DLL_GetUserDefaultLangID
push eax
call sub.KERNEL32.DLL_VerLanguageNameA
push dword [0x40b174]
call sub.USER32.dll_CharLowerA
mov eax, dword [0x40b3f8]
push eax
push eax
push 8
push dword [0x40b174]
call fcn.00403de0
lea ecx, [0x40b178]
pop edx
call fcn.004030f0
push dword [0x40b174]
call fcn.00403e30
push dword [0x40b178]
mov edx, str.deutsch
pop ecx
call fcn.004074c0
je 0x4011ff
mov edx, str.Fortfahren_
lea ecx, [0x40b17c]
call fcn.00403108
mov edx, str.Fehler_
lea ecx, [0x40b180]
call fcn.00403108
mov edx, str.Einige_Include_Dateien_konnten_nicht_erstellt_werden.
lea ecx, [0x40b184]
call fcn.00403108
mov edx, str.Nicht_gen
lea ecx, [0x40b188]
call fcn.00403108
mov edx, str.Falsches_Passwort.
lea ecx, [0x40b18c]
call fcn.00403108
mov edx, 0x40a10f
lea ecx, [0x40b190]
call fcn.00403108
mov edx, str.Die_Datei
lea ecx, [0x40b194]
call fcn.00403108
mov edx, str._existiert_bereits_im_aktuellen_Arbeitsverzeichnis.
lea ecx, [0x40b198]
call fcn.00403108
mov edx, str.Ein_unbekannter_Fehler_ist_aufgetreten._Das_Programm_wird_beendet.
lea ecx, [0x40b19c]
call fcn.00403108
mov edx, str.Das_Programm_wird_von_diesem_Betriebssytem_nicht_unterst
lea ecx, [0x40b1a0]
call fcn.00403108
mov edx, str.Bitte_w
lea ecx, [0x40b1a4]
call fcn.00403108
mov edx, str.Passwort
lea ecx, [0x40b1a8]
call fcn.00403108
mov edx, str.Bitte_geben_Sie_das_Passwort_ein.
lea ecx, [0x40b1ac]
call fcn.00403108
jmp 0x4012cf
mov edx, str.Continue_
lea ecx, [0x40b17c]
call fcn.00403108
mov edx, 0x40a0cb
lea ecx, [0x40b180]
call fcn.00403108
mov edx, str.Can_not_create_some_of_your_include_files.
lea ecx, [0x40b184]
call fcn.00403108
mov edx, str.Can_not_allocate_the_memory.
lea ecx, [0x40b188]
call fcn.00403108
mov edx, str.Wrong_password.
lea ecx, [0x40b18c]
call fcn.00403108
mov edx, 0x40a014
lea ecx, [0x40b190]
call fcn.00403108
mov edx, str.The_file
lea ecx, [0x40b194]
call fcn.00403108
mov edx, str._already_exists_in_the_current_directory._Overwrite_
lea ecx, [0x40b198]
call fcn.00403108
mov edx, str.An_unknown_error_occured._The_program_will_be_terminated.
lea ecx, [0x40b19c]
call fcn.00403108
mov edx, str.This_program_is_not_supported_on_this_operating_system.
lea ecx, [0x40b1a0]
call fcn.00403108
mov edx, str.Choose_a_location_to_save_the_files.
lea ecx, [0x40b1a4]
call fcn.00403108
mov edx, str.Password
lea ecx, [0x40b1a8]
call fcn.00403108
mov edx, 0x40a01f
lea ecx, [0x40b1ac]
call fcn.00403108
call fcn.00403cd7
mov ebx, eax
cmp ebx, 0x32
jge 0x4012f6
push 0x10
push dword [0x40b1a0]
push dword [0x40b180]
call fcn.004036a2
jmp 0x401bb6
lea eax, [0x4020a6]
push eax
call fcn.00403b70
call fcn.00403a66
mov dword [0x40b1b4], eax
push 0
call sub.KERNEL32.DLL_GetModuleHandleA
mov dword [0x40b1b8], eax
mov ebx, dword [0x40b1b4]
and ebx, ebx
jle 0x4013a1
mov dword [0x40b1bc], 0
mov ebx, dword [0x40b1b4]
dec ebx
cmp ebx, dword [0x40b1bc]
jl 0x4013a1
mov eax, dword [0x40b3f8]
push eax
push eax
push dword [0x40b1bc]
call fcn.00403a18
lea ecx, [0x40b1c0]
pop edx
call fcn.004030f0
push dword [0x40b1c0]
call sub.SHLWAPI.dll_PathQuoteSpacesA
mov edx, dword [0x40b1c4]
push dword [0x40b3f8]
call fcn.004074f0
mov edx, dword [0x40b1c0]
call fcn.004074f0
mov edx, 0x40a00e
call fcn.004074f0
lea ecx, [0x40b1c4]
pop edx
call fcn.004030f0
inc dword [0x40b1bc]
jmp 0x40132f
push 0x40a0c5
push dword [0x40b1b8]
call fcn.004020c9
and eax, eax
je 0x4013cc
mov eax, dword [0x40b174]
mov dword [0x40b1c8], eax
push dword [0x40b1c8]
call fcn.00401bf4
jmp 0x4013ec
push 0x10
push dword [0x40b19c]
push dword [0x40b180]
call fcn.004036a2
push 1
jmp 0x401bbb
push 0x40a0c3
push dword [0x40b1b8]
call fcn.004020c9
and eax, eax
je 0x401426
mov eax, dword [0x40b3f8]
push eax
push eax
push dword [0x40b1b0]
push dword [0x40b174]
call fcn.00403de0
lea ecx, [0x40b1cc]
pop edx
call fcn.004030f0
jmp 0x401446
push 0x10
push dword [0x40b19c]
push dword [0x40b180]
call fcn.004036a2
push 1
jmp 0x401bbb
push 0x40a0bb
push dword [0x40b1b8]
call fcn.004020c9
and eax, eax
je 0x40147a
mov eax, dword [0x40b174]
mov dword [0x40b1d0], eax
mov eax, dword [0x40b1b0]
mov dword [0x40b154], eax
mov eax, dword [0x40b1d0]
mov dword [0x40b148], eax
jmp 0x40149a
push 0x10
push dword [0x40b19c]
push dword [0x40b180]
call fcn.004036a2
push 1
jmp 0x401bbb
push 0x40a0c1
push dword [0x40b1b8]
call fcn.004020c9
and eax, eax
je 0x4014cc
mov eax, dword [0x40b174]
mov dword [0x40b1d4], eax
mov eax, dword [0x40b1b0]
mov dword [0x40b158], eax
mov eax, dword [0x40b1d4]
mov dword [0x40b14c], eax
push 0x40a0bf
push dword [0x40b1b8]
call fcn.004020c9
and eax, eax
je 0x4014fe
mov eax, dword [0x40b174]
mov dword [0x40b1d8], eax
mov eax, dword [0x40b1b0]
mov dword [0x40b15c], eax
mov eax, dword [0x40b1d8]
mov dword [0x40b150], eax
push 0x40a0c7
push dword [0x40b1b8]
call fcn.004020c9
and eax, eax
je 0x40176d
push 0xc80001
push dword [0x40b1a8]
push 0x6e
push 0xc8
push 0
push 0
push 0
call fcn.00404de6
push dword [0x40b1ac]
push 0x14
push 0x9e
push 0xf
push 0x15
push 1
call fcn.004042bd
push 0x20
push 0x40a00d
push 0x14
push 0x9e
push 0x28
push 0x15
push 2
call fcn.004043ae
push 0x40a28d
push 0x14
push 0x4e
push 0x4b
push 0x3d
push 3
call fcn.004045b3
push 4
push 0xd
push 0
call fcn.00404e09
push 2
call fcn.004045d3
call fcn.0040505e
push eax
mov ebx, 0x10
cmp ebx, dword [esp]
jne 0x4015f9
push dword [0x40b170]
call sub.MSVCRT.dll__rmdir
add esp, 4
push 0
jmp 0x401bbb
mov ebx, 0x332d
cmp ebx, dword [esp]
jne 0x401642
call fcn.00405066
push eax
mov ebx, 4
cmp ebx, dword [esp]
jne 0x40163f
mov eax, dword [0x40b3f8]
push eax
push eax
push 2
call fcn.004045fc
lea ecx, [0x40b1dc]
pop edx
call fcn.004030f0
push 0
call fcn.00404925
add esp, 8
jmp 0x40168f
pop eax
jmp 0x401689
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x401689
call fcn.00405074
push eax
mov ebx, 3
cmp ebx, dword [esp]
jne 0x401688
mov eax, dword [0x40b3f8]
push eax
push eax
push 2
call fcn.004045fc
lea ecx, [0x40b1dc]
pop edx
call fcn.004030f0
push 0
call fcn.00404925
add esp, 8
jmp 0x40168f
pop eax
pop eax
jmp 0x4015cc
mov eax, dword [0x40b3f8]
push eax
push eax
push dword [0x40b1dc]
call fcn.004031f0
push eax
mov eax, dword [0x40b1dc]
push eax
call fcn.00406860
inc dword [0x40b3f8]
mov eax, dword [0x40b3f8]
push eax
push eax
push dword [0x40b1b0]
push dword [0x40b174]
call fcn.00403de0
pop edx
pop ecx
mov dword [0x40b3f8], ecx
add ecx, dword [0x40a38c]
add edx, dword [0x40a38c]
call fcn.004074c0
jne 0x401714
push 0x10
push dword [0x40b18c]
push dword [0x40b180]
call fcn.004036a2
push dword [0x40b170]
call sub.MSVCRT.dll__rmdir
add esp, 4
push 1
jmp 0x401bbb
push 0x40a0c9
push dword [0x40b1b8]
call fcn.004020c9
and eax, eax
je 0x401732
mov eax, dword [0x40b174]
mov dword [0x40b1e0], eax
push dword [0x40b15c]
push dword [0x40b158]
push dword [0x40b154]
push dword [0x40b1e0]
push dword [0x40b1d8]
push dword [0x40b1d4]
push dword [0x40b1d0]
push dword [0x40b1dc]
push dword [0x40b1b8]
call fcn.00401d57
mov eax, dword [0x40b3f8]
push eax
push eax
push dword [0x40b154]
push dword [0x40b148]
call fcn.00403de0
lea ecx, [0x40b1e4]
pop edx
call fcn.004030f0
mov eax, dword [0x40b3f8]
push eax
push eax
push dword [0x40b158]
push dword [0x40b14c]
call fcn.00403de0
lea ecx, [0x40b1e8]
pop edx
call fcn.004030f0
push 0x40a0bd
push dword [0x40b1b8]
call fcn.004020c9
and eax, eax
je 0x401a3c
mov eax, dword [0x40b3f8]
push eax
push eax
push 0
call fcn.00403a18
inc dword [0x40b3f8]
mov eax, dword [0x40b3f8]
push eax
push eax
push dword [0x40b1b0]
push dword [0x40b174]
call fcn.00403de0
pop edx
pop ecx
mov dword [0x40b3f8], ecx
add ecx, dword [0x40a38c]
add edx, dword [0x40a38c]
call fcn.004074c0
je 0x401829
mov ebx, dword [0x40b1b4]
cmp ebx, 1
jne 0x401829
mov eax, 1
jmp 0x40182b
xor eax, eax
and eax, eax
je 0x401a3c
mov eax, dword [0x40b3f8]
push eax
push eax
mov eax, dword [0x40b3f8]
push eax
push eax
call fcn.00405dd5
inc dword [0x40b3f8]
push dword [0x40b1a4]
mov edx, dword [0x40a38c]
add dword [esp + 4], edx
call fcn.004036f8
lea ecx, [0x40b1ec]
pop edx
call fcn.004030f0
mov edx, dword [0x40b1ec]
xor ecx, ecx
call fcn.004074c0
jne 0x4019dd
mov edx, dword [0x40b1ec]
push dword [0x40b3f8]
call fcn.004074f0
lea ecx, [0x40b168]
pop edx
call fcn.004030f0
mov edx, dword [0x40b1e8]
xor ecx, ecx
call fcn.004074c0
jne 0x4018b7
push dword [0x40b1e8]
call fcn.00402130
push dword [0x40b1cc]
push 1
call fcn.00406230
and eax, eax
je 0x4019af
push 1
call fcn.00405fd0
push dword [0x40b3f8]
push 0x24
mov edx, dword [0x40b194]
push dword [0x40b3f8]
call fcn.004074f0
mov edx, 0x40a010
call fcn.004074f0
mov edx, dword [0x40b1cc]
call fcn.004074f0
mov edx, 0x40a010
call fcn.004074f0
mov edx, dword [0x40b198]
call fcn.004074f0
inc dword [0x40b3f8]
push dword [0x40b190]
mov edx, dword [0x40a38c]
add dword [esp + 4], edx
call fcn.004036a2
pop dword [0x40b3f8]
mov dword [0x40b1f0], eax
mov ebx, dword [0x40b1f0]
cmp ebx, 7
jne 0x4019af
mov eax, dword [0x40b3f8]
push eax
push eax
mov eax, dword [0x40b3f8]
push eax
push eax
push dword [0x40b3f8]
call fcn.00403a79
inc dword [0x40b3f8]
mov edx, dword [0x40a38c]
add dword [esp], edx
call fcn.00405e15
inc dword [0x40b3f8]
mov edx, dword [0x40a38c]
add dword [esp], edx
call fcn.00405e90
pop dword [0x40b3f8]
push dword [0x40b170]
call sub.MSVCRT.dll__rmdir
add esp, 4
push 0
jmp 0x401bbb
push dword [0x40b1cc]
push 1
call fcn.00406170
and eax, eax
je 0x4019dd
push dword [0x40b1e4]
push 1
call fcn.00406250
push 1
call fcn.00405fd0
mov eax, dword [0x40b3f8]
push eax
push eax
mov eax, dword [0x40b3f8]
push eax
push eax
push dword [0x40b3f8]
call fcn.00403a79
inc dword [0x40b3f8]
mov edx, dword [0x40a38c]
add dword [esp], edx
call fcn.00405e15
inc dword [0x40b3f8]
mov edx, dword [0x40a38c]
add dword [esp], edx
call fcn.00405e90
pop dword [0x40b3f8]
push dword [0x40b170]
call sub.MSVCRT.dll__rmdir
add esp, 4
push 0
jmp 0x401bbb
mov edx, dword [0x40b170]
push dword [0x40b3f8]
call fcn.004074f0
mov edx, str.BDFINOPS
call fcn.004074f0
mov edx, dword [0x40b1cc]
call fcn.004074f0
lea ecx, [0x40b1cc]
pop edx
call fcn.004030f0
push dword [0x40b1cc]
push 1
call fcn.00406170
and eax, eax
je 0x401a9e
push dword [0x40b1e4]
push 1
call fcn.00406250
push 1
call fcn.00405fd0
jmp 0x401adc
push dword [0x40b1cc]
call fcn.00405ea0
call fcn.0040203d
push 0x10
push dword [0x40b19c]
push dword [0x40b180]
call fcn.004036a2
push dword [0x40b170]
call sub.MSVCRT.dll__rmdir
add esp, 4
push 1
jmp 0x401bbb
mov edx, dword [0x40b1e8]
xor ecx, ecx
call fcn.004074c0
jne 0x401af6
push dword [0x40b1e8]
call fcn.00402130
push dword [0x40b3f8]
mov edx, dword [0x40b1c4]
push dword [0x40b3f8]
call fcn.004074f0
mov edx, dword [0x40b16c]
call fcn.004074f0
inc dword [0x40b3f8]
push dword [0x40b168]
push dword [0x40b1cc]
mov edx, dword [0x40a38c]
add dword [esp + 8], edx
call fcn.00402779
pop dword [0x40b3f8]
call fcn.0040203d
push dword [0x40b1cc]
call fcn.00405ea0
mov eax, dword [0x40b3f8]
push eax
push eax
mov eax, dword [0x40b3f8]
push eax
push eax
push dword [0x40b3f8]
call fcn.00403a79
inc dword [0x40b3f8]
mov edx, dword [0x40a38c]
add dword [esp], edx
call fcn.00405e15
inc dword [0x40b3f8]
mov edx, dword [0x40a38c]
add dword [esp], edx
call fcn.00405e90
pop dword [0x40b3f8]
push dword [0x40b170]
call sub.MSVCRT.dll__rmdir
add esp, 4
push 0
jmp 0x401bbb
push 0
call 0x401bd0
push dword [0x40b13c]
call sub.KERNEL32.DLL_HeapDestroy
call sub.KERNEL32.DLL_ExitProcess
call fcn.00403b0b
call fcn.00403cc0
call fcn.00403db0
call fcn.00404150
call fcn.00404a13
call fcn.00406030
call fcn.0040681c
ret