Function at 0x4011a4
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov eax, dword [esp + 0xc]
mov ebp, esp
sub esp, 0x89c
cmp eax, 0x110
push ebx
push esi
push edi
je 0x4011ee
cmp eax, 0x111
je 0x40124c
cmp eax, 0x135
je 0x4016a8
cmp eax, 0x136
je 0x4016d8
cmp eax, 0x138
je 0x4016a8
xor eax, eax
jmp 0x4016dd
push 0x104
lea eax, [ebp - 0x24c]
push eax
mov esi, dword [sym.imp.USER32.dll_LoadStringA]
push 7
push dword [0x40a10c]
call esi
lea ecx, [ebp - 0x24c]
mov eax, dword [0x415004]
push ecx
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0x104
lea ecx, [ebp - 0x24c]
push ecx
push 8
push dword [0x40a10c]
call esi
lea ecx, [ebp - 0x24c]
push ecx
push 0x65
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
xor eax, eax
jmp 0x4016dd
movzx eax, word [ebp + 0x10]
cmp eax, 0x3e7
je 0x40125e
xor eax, eax
jmp 0x4016dd
mov dword [ebp - 4], 0
call sym.sfxfe32.EXE_DZStartSelfEx
test eax, eax
je 0x40160a
push 0x96
mov esi, 1
push 0
push 0x40a110
call fcn.00405bb0
add esp, 0xc
lea eax, [ebp - 0x44]
mov dword [0x40a110], 0x96
push str.BdqtkdzmAktd
mov dword [0x40a134], esi
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x44]
push 0x104
lea ecx, [ebp - 0x148]
mov dword [0x40a16c], esi
push ecx
mov dword [0x40a170], eax
push dword [0x40a10c]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [ebp - 0x148]
lea edx, [ebp - 0x354]
push edx
mov dword [0x40a118], ecx
push 0xe4
mov dword [0x40a114], esi
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
je 0x4012ff
cmp eax, 0xe4
jbe 0x401345
push 0
lea eax, [ebp - 0x354]
push 0
lea ecx, [ebp - 0x148]
push 0
push eax
push ecx
call fcn.00405bf2
add esp, 0x14
lea ecx, [ebp - 0x354]
push 0
push 0
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea ecx, [ebp + eax - 0x354]
lea edx, [ebp - 0x148]
push ecx
push 0
push edx
call fcn.00405bf2
add esp, 0x14
lea eax, [ebp - 0x354]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp byte [ebp + eax - 0x355], 0x5c
je 0x40136e
push str.___
lea eax, [ebp - 0x354]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x40a110
call sym.sfxfe32.EXE_DZSelfEx
mov ebx, eax
test ebx, ebx
jne 0x401605
mov edi, dword [0x40a15c]
lea eax, [ebp - 0x354]
lea ecx, [ebp - 0x48c]
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [0x40a128], eax
mov dword [0x40a11c], ecx
lea eax, [edi - 1]
mov dword [0x40a124], eax
test ebx, ebx
jne 0x401605
test edi, edi
jle 0x401605
lea eax, [ebp - 0x48c]
push 0x40a110
mov dword [0x40a114], 7
mov dword [0x40a11c], eax
call sym.sfxfe32.EXE_DZSelfEx
mov ebx, eax
lea ecx, [ebp - 0x466]
mov eax, dword [str._Active_Delivery_]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4015f4
push 0x410
lea eax, [ebp - 0x89c]
push 0
push eax
call fcn.00405bb0
add esp, 0xc
lea eax, [ebp - 0x89c]
mov dword [0x40a114], 9
push 0x40a110
mov dword [0x40a192], eax
mov dword [0x40a196], 0x40f
mov dword [0x40a19a], 0
call sym.sfxfe32.EXE_DZSelfEx
mov ebx, eax
test ebx, ebx
jne 0x4015f4
lea eax, [ebp - 0x89c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jne 0x40149a
lea eax, [ebp - 0x798]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jne 0x40149a
push 0x415070
mov eax, dword [0x415004]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0x415074
mov eax, dword [0x415008]
push 0x65
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
mov eax, dword [0x415004]
push eax
jmp 0x4014d2
lea eax, [ebp - 0x89c]
push eax
push dword [0x415004]
call dword [sym.imp.USER32.dll_SetWindowTextA]
lea ecx, [ebp - 0x798]
push ecx
push 0x65
push dword [0x415008]
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
push dword [0x415004]
mov dword [0x415010], 1
call dword [sym.imp.USER32.dll_UpdateWindow]
lea eax, [ebp - 0x14]
push eax
push dword [0x415008]
call dword [sym.imp.USER32.dll_GetWindowRect]
push 0
call esi
push 1
mov dword [ebp - 0x1c], eax
call esi
mov dword [ebp - 0x18], eax
mov eax, dword [0x415010]
test eax, eax
je 0x401578
cmp eax, 1
mov eax, 0
adc eax, 0xffffffff
and eax, 0x40
or al, 4
push eax
push 6
call esi
lea ebx, [eax*2 + 4]
push 4
call esi
add ebx, eax
sub ebx, dword [ebp - 0x10]
add ebx, dword [ebp - 8]
push ebx
push 6
call esi
lea eax, [eax*2 + 4]
sub eax, dword [ebp - 0x14]
add eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 8]
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
add ecx, eax
mov eax, dword [ebp - 0x14]
push ecx
sub eax, dword [ebp - 0xc]
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, dword [ebp - 0x1c]
cdq
sub eax, edx
sar eax, 1
add ecx, eax
mov eax, dword [0x415004]
push ecx
push 0
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0x40a110
inc dword [0x40a124]
mov dword [0x40a114], 8
mov dword [0x40a192], 0
mov dword [0x40a196], 0
mov dword [0x40a19a], 0
call sym.sfxfe32.EXE_DZSelfEx
mov ebx, eax
test ebx, ebx
jne 0x4015f4
lea eax, [ebp - 0x48c]
push 0x40a110
mov dword [0x40a114], 7
mov dword [0x40a11c], eax
call sym.sfxfe32.EXE_DZSelfEx
mov ebx, eax
test ebx, ebx
jne 0x4015ed
lea eax, [ebp - 0x466]
push eax
push 0x40a210
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [ebp - 4], 1
dec edi
dec dword [0x40a124]
cmp dword [ebp - 4], 0
je 0x4013ad
call sym.sfxfe32.EXE_DZEndSelfEx
cmp dword [ebp - 4], 0
je 0x40167b
call fcn.004016e6
test eax, eax
je 0x40165a
lea eax, [ebp - 0x590]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jne 0x40163b
lea eax, [ebp - 0x694]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je 0x40165a
push 0x2000
lea eax, [ebp - 0x694]
push eax
lea ecx, [ebp - 0x590]
push ecx
push dword [0x415004]
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0x40a210
lea eax, [ebp - 0x354]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0x354]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x40169a
push 0x2000
lea eax, [ebp - 0x694]
push eax
lea ecx, [ebp - 0x590]
push ecx
push dword [0x415004]
call dword [sym.imp.USER32.dll_MessageBoxA]
mov dword [0x41500c], 1
xor eax, eax
jmp 0x4016dd
push dword [ebp + 8]
mov esi, dword [ebp + 0x10]
call dword [sym.imp.USER32.dll_GetDC]
push eax
mov edi, eax
call dword [sym.imp.GDI32.dll_GetBkColor]
push eax
push esi
call dword [sym.imp.GDI32.dll_SetBkColor]
push edi
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_ReleaseDC]
push 1
push esi
call dword [sym.imp.GDI32.dll_SetBkMode]
mov eax, dword [section..data]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10