Function at 0x401000
Capabilities:
Delete file
Hide graphical window

Disassembly:
push ebp
mov eax, dword [esp + 0xc]
mov ebp, esp
sub esp, 0x754
cmp eax, 2
push ebx
push esi
push edi
je 0x401038
cmp eax, 0x111
je 0x401044
mov esi, dword [ebp + 8]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push esi
call dword [sym.imp.USER32.dll_DefWindowProcA]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
xor eax, eax
jmp 0x40102f
movzx eax, word [ebp + 0x10]
cmp eax, 0x3e7
jne 0x40101c
mov dword [ebp - 4], 0
call sym.selfxfe.EXE_DZStartSelfEx
test eax, eax
je 0x4012a7
push 0x96
mov esi, 1
push 0
push 0x40a110
call fcn.004059a0
add esp, 0xc
lea eax, [ebp - 0x20c]
mov dword [0x40a110], 0x96
push 0x104
mov dword [0x40a134], esi
push eax
push dword [0x40a10c]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [ebp - 0x20c]
push 0
push 0
lea eax, [ebp - 0x108]
push 0
mov dword [0x40a118], ecx
push eax
mov dword [0x40a114], esi
push ecx
call fcn.004059e2
add esp, 0x14
lea ecx, [ebp - 0x108]
push 0
push 0
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea ecx, [ebp + eax - 0x108]
lea eax, [ebp - 0x20c]
push ecx
push 0
push eax
call fcn.004059e2
add esp, 0x14
push 0x40a110
call sym.selfxfe.EXE_DZSelfEx
mov ebx, eax
test ebx, ebx
jne 0x40129d
mov edi, dword [0x40a15c]
lea eax, [ebp - 0x108]
lea ecx, [ebp - 0x344]
mov esi, dword [ebp + 8]
mov dword [0x40a128], eax
mov dword [0x40a11c], ecx
mov dword [0x40a124], 0
test ebx, ebx
jne 0x4012a0
test edi, edi
jle 0x4012a0
lea eax, [ebp - 0x344]
push 0x40a110
mov dword [0x40a114], 7
mov dword [0x40a11c], eax
call sym.selfxfe.EXE_DZSelfEx
mov ebx, eax
lea ecx, [ebp - 0x31e]
mov eax, dword [str._Active_Delivery_]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x40128a
push 0x410
lea eax, [ebp - 0x754]
push 0
push eax
call fcn.004059a0
add esp, 0xc
lea eax, [ebp - 0x754]
mov dword [0x40a114], 9
push 0x40a110
mov dword [0x40a192], eax
mov dword [0x40a196], 0x40f
mov dword [0x40a19a], 0
call sym.selfxfe.EXE_DZSelfEx
mov ebx, eax
test ebx, ebx
jne 0x40128a
push 5
push esi
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, [ebp - 0x754]
push eax
push esi
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea ecx, [ebp - 0x650]
mov eax, dword [0x40a1e4]
push ecx
push 0x65
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
push esi
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0x40a110
inc dword [0x40a124]
mov dword [0x40a114], 8
mov dword [0x40a192], 0
mov dword [0x40a196], 0
mov dword [0x40a19a], 0
call sym.selfxfe.EXE_DZSelfEx
mov ebx, eax
test ebx, ebx
jne 0x401284
lea eax, [ebp - 0x344]
push 0x40a110
mov dword [0x40a114], 7
mov dword [0x40a11c], eax
call sym.selfxfe.EXE_DZSelfEx
mov ebx, eax
test ebx, ebx
jne 0x40127b
lea eax, [ebp - 0x31e]
push eax
push 0x40a1f0
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [ebp - 4], 1
jmp 0x40128a
dec dword [0x40a124]
dec edi
inc dword [0x40a124]
cmp dword [ebp - 4], 0
je 0x401134
jmp 0x4012a0
mov esi, dword [ebp + 8]
call sym.selfxfe.EXE_DZEndSelfEx
jmp 0x4012aa
mov esi, dword [ebp + 8]
cmp dword [ebp - 4], 0
je 0x4012f9
call fcn.004015ba
test eax, eax
je 0x4012d8
push 0x2000
lea eax, [ebp - 0x54c]
push eax
lea ecx, [ebp - 0x448]
push ecx
push dword [0x40a2f4]
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0x40a1f0
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0x108]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x401318
push 0x2000
lea eax, [ebp - 0x54c]
push eax
lea ecx, [ebp - 0x448]
push ecx
push dword [0x40a2f4]
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
mov eax, dword [0x40a2f4]
push 0
push 0x10
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x40101f