Function at 0x401119
Capabilities:
Accept command line arguments
Create directory
Create process on windows
Delete directory
Delete file
Get common file path
Get file size
Read file on windows
Self delete
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x254
push ebx
push esi
push edi
push 4
call fcn.00401e3f
mov esi, eax
xor ebx, ebx
cmp esi, ebx
pop ecx
mov edi, 0x201
je 0x40114a
push edi
mov ecx, esi
call fcn.0040181f
mov dword [0x4074a0], esi
jmp 0x401150
mov dword [0x4074a0], ebx
push 4
call fcn.00401e3f
mov esi, eax
pop ecx
cmp esi, ebx
je 0x40116e
push edi
mov ecx, esi
call fcn.0040181f
mov dword [0x40741c], esi
jmp 0x401174
mov dword [0x40741c], ebx
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 8]
push ebx
mov dword [0x4074a4], eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x7f02
push dword [0x4074a4]
call dword [sym.imp.USER32.dll_LoadCursorA]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
mov esi, 0x105
lea ecx, [ebp - 8]
push esi
call fcn.0040181f
mov edi, 0x104
push edi
push dword [ebp - 8]
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ebx
push 0x80
push 3
push ebx
push 3
push 0x80000000
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, ebx
mov dword [ebp + 8], eax
jne 0x401217
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [0x40741c]
push str.Creat
mov dword [0x407418], eax
call fcn.00401883
push dword [ebp - 8]
mov ecx, dword [0x40741c]
call fcn.004018bd
call fcn.0040197f
mov esi, eax
jmp 0x4015fa
push ebx
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push dword [section..data]
mov dword [ebp - 0x28], eax
call fcn.00401e3f
pop ecx
mov dword [ebp - 0x10], eax
push ebx
push ebx
push ebx
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [ebp - 0x2c]
push ebx
push eax
push dword [section..data]
push dword [ebp - 0x10]
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x401287
mov eax, dword [section..data]
cmp dword [ebp - 0x2c], eax
jne 0x401287
push eax
push dword [ebp - 0x10]
call fcn.00401837
push eax
push dword [section..data]
push dword [ebp - 0x10]
call fcn.00401904
add esp, 0x14
cmp eax, dword [0x406004]
je 0x401297
push str.SelfExtractor_program_altered_r_n_it_could_be_due_to_an_error_on_the_transmission__r_nCant_continue__sorry
call fcn.0040193b
pop ecx
jmp 0x401355
push str._tstsigma
push dword [ebp - 0x1c]
call fcn.00401f48
pop ecx
test eax, eax
pop ecx
jne 0x401355
push str.TestSigmaBuilt
push dword [ebp - 0x1c]
call fcn.00401f48
pop ecx
cmp eax, ebx
pop ecx
mov dword [ebp - 0x20], eax
je 0x40136d
lea eax, [ebp - 0x254]
push str.SigmaBuilt__r_n
push eax
call fcn.00401f93
mov eax, dword [ebp - 0x20]
add eax, 0xf
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.00401fbc
lea eax, [ebp - 0x254]
push 0x4060bc
push eax
call fcn.00401fbc
push dword [section..data]
call fcn.00401ea3
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.00401fbc
lea eax, [ebp - 0x254]
push 0x4060b8
push eax
call fcn.00401fbc
push dword [0x406004]
call fcn.00401ea3
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.00401fbc
add esp, 0x38
lea eax, [ebp - 0x254]
push ebx
push 0x4060b4
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [ebp - 8], ebx
je 0x401363
push dword [ebp - 8]
call fcn.00401e4a
pop ecx
push 1
pop eax
pop edi
pop esi
pop ebx
leave
ret 0x10
push esi
call fcn.00401e3f
pop ecx
mov dword [ebp - 0xc], eax
mov byte [eax], bl
push dword [ebp - 0xc]
push edi
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
push esi
call fcn.00401e3f
mov dword [ebp - 4], eax
mov byte [eax], bl
push dword [ebp - 0xc]
push dword [ebp - 4]
call fcn.00401f93
push dword [ebp - 0xc]
call fcn.00401ec0
mov ecx, eax
mov eax, dword [ebp - 0xc]
add esp, 0x10
cmp byte [ecx + eax - 1], 0x5c
jne 0x4013be
push eax
call fcn.00401ec0
pop ecx
mov ecx, dword [ebp - 4]
mov byte [eax + ecx - 1], bl
mov edi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push ebx
push dword [ebp - 4]
call edi
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0xc]
lea ecx, [ebp - 4]
push eax
call fcn.004018af
push dword [ebp - 0xc]
call fcn.00401ec0
pop ecx
mov ecx, dword [ebp - 0xc]
cmp byte [eax + ecx - 1], 0x5c
je 0x4013ff
push 0x4060b0
push dword [ebp - 4]
call fcn.00401fbc
pop ecx
pop ecx
push 0x4060ac
lea ecx, [ebp - 4]
call fcn.004018bd
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x10]
call fcn.00401e69
pop ecx
pop ecx
push eax
lea ecx, [ebp - 4]
call fcn.004018bd
push ebx
push dword [ebp - 4]
call edi
test eax, eax
jne 0x40146e
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x40143f
inc dword [ebp - 0x10]
jmp 0x4013d1
mov ecx, dword [0x40741c]
push str.MkD
mov dword [0x407418], eax
call fcn.00401883
push dword [ebp - 4]
mov ecx, dword [0x40741c]
call fcn.004018bd
call fcn.0040197f
mov esi, eax
jmp 0x4015de
push esi
call fcn.00401e3f
mov ecx, dword [ebp - 0x28]
mov edi, eax
mov byte [edi], bl
mov eax, dword [section..data]
push dword [ebp - 4]
sub ecx, eax
push ecx
push eax
push edi
push dword [ebp + 8]
call fcn.00401a80
add esp, 0x18
test eax, eax
je 0x4015cc
push edi
call fcn.00403ee8
cmp eax, ebx
pop ecx
mov dword [ebp - 0x18], eax
jne 0x4014be
mov ecx, dword [0x40741c]
push str.unzOpn
call fcn.00401883
jmp 0x4015cc
mov eax, 0x2000
push eax
mov dword [ebp - 0x30], eax
call fcn.00401e3f
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x18]
call fcn.00401c26
mov eax, dword [ebp - 0x24]
add esp, 0x10
xor esi, esi
cmp byte [eax], bl
je 0x40152d
push dword [ebp - 4]
add eax, esi
mov dword [ebp - 0x10], eax
mov eax, dword [0x4074a0]
push dword [eax]
call fcn.00401f93
push dword [ebp - 0x10]
push dword [ebp - 0x18]
call fcn.00401bfd
add esp, 0x10
cmp eax, ebx
mov dword [ebp - 0x20], eax
jne 0x4015a6
push dword [ebp - 0x10]
call fcn.00401ec0
lea esi, [esi + eax + 1]
mov eax, dword [ebp - 0x24]
pop ecx
cmp byte [esi + eax], bl
jne 0x4014eb
push dword [ebp - 0x18]
call fcn.0040423c
pop ecx
push edi
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
call edi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x201
call fcn.00401e3f
mov dword [ebp - 0x14], eax
mov byte [eax], bl
mov eax, dword [0x4074a0]
pop ecx
lea ecx, [ebp - 0x14]
push dword [eax]
call fcn.00401883
push 0x4060b0
lea ecx, [ebp - 0x14]
call fcn.004018bd
push str._bbg.exe
lea ecx, [ebp - 0x14]
call fcn.004018bd
push str._test:
push dword [ebp - 0x1c]
call fcn.00401f48
mov esi, eax
pop ecx
cmp esi, ebx
pop ecx
je 0x40160f
push 0x4060b8
lea ecx, [ebp - 0x14]
call fcn.004018bd
push esi
jmp 0x401622
mov ecx, dword [0x40741c]
push 0x406084
call fcn.00401883
push dword [ebp - 0x10]
mov ecx, dword [0x40741c]
call fcn.004018bd
mov eax, dword [ebp - 0x20]
mov dword [0x407314], eax
call fcn.0040197f
cmp edi, ebx
mov esi, eax
je 0x4015de
push edi
call fcn.00401e4a
pop ecx
cmp dword [ebp - 4], ebx
je 0x4015ec
push dword [ebp - 4]
call fcn.00401e4a
pop ecx
cmp dword [ebp - 0xc], ebx
je 0x4015fa
push dword [ebp - 0xc]
call fcn.00401e4a
pop ecx
cmp dword [ebp - 8], ebx
je 0x401608
push dword [ebp - 8]
call fcn.00401e4a
pop ecx
mov eax, esi
jmp 0x401366
push str.__sfxv:
lea ecx, [ebp - 0x14]
call fcn.004018bd
push dword [0x40601c]
lea ecx, [ebp - 0x14]
call fcn.004018bd
push dword [ebp - 0x14]
call fcn.00401dc8
pop ecx
mov dword [ebp - 0x1c], ebx
push pe_nt_image_headers32
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x24]
xor esi, esi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x10], esi
cmp byte [eax], bl
je 0x4017d4
push dword [ebp - 4]
add eax, esi
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x158]
push eax
call fcn.00401f93
lea eax, [ebp - 0x158]
push 0x4060b0
push eax
call fcn.00401fbc
push dword [ebp - 0x20]
lea eax, [ebp - 0x158]
push eax
call fcn.00401fbc
add esp, 0x18
lea eax, [ebp - 0x158]
push eax
call edi
cmp eax, ebx
mov dword [ebp + 8], eax
jne 0x4016df
push ebx
push 0x80
push 3
push ebx
push ebx
lea eax, [ebp - 0x158]
push 0x80000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, ebx
je 0x4016c9
cmp eax, 0xffffffff
je 0x4016c9
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4016df
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
je 0x4016d8
cmp eax, 2
jne 0x4016df
mov dword [ebp + 8], 1
cmp dword [ebp + 8], ebx
mov dword [ebp - 0x18], ebx
jne 0x4017b8
cmp dword [ebp - 0x18], 3
jge 0x40172d
mov ecx, 0x1388
mov eax, ecx
sub eax, dword [ebp - 0x1c]
imul eax, eax, 0x384
cdq
idiv ecx
mov esi, eax
add esi, 0x64
cmp esi, ebx
jle 0x401717
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
add dword [ebp - 0x1c], esi
lea eax, [ebp - 0x158]
push eax
call edi
inc dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
cmp eax, ebx
mov dword [ebp + 8], eax
je 0x4016eb
cmp dword [ebp + 8], ebx
jne 0x4017b8
cmp dword [ebp - 0x28], ebx
jne 0x4017b8
push 0x800
call fcn.00401e3f
pop ecx
mov dword [ebp + 8], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 0x158]
push ecx
push eax
push str.err_i._Could_not_delete___s_r_nOpen_folder_
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x34
push str.Deleting_temporary_file
push dword [ebp + 8]
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp eax, 6
jne 0x401797
push 1
push dword [ebp - 4]
push dword [ebp - 4]
push str.explorer
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0x1e
push 0x3e8
mov dword [ebp - 0x28], 1
call dword [sym.imp.KERNEL32.dll_Beep]
push 0x1e
push 0x708
call dword [sym.imp.KERNEL32.dll_Beep]
push dword [ebp - 0x20]
call fcn.00401ec0
lea esi, [esi + eax + 1]
mov eax, dword [ebp - 0x24]
pop ecx
mov dword [ebp - 0x10], esi
cmp byte [esi + eax], bl
jne 0x401654
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
push dword [ebp - 0x24]
call fcn.00401e4a
mov eax, dword [0x4074a0]
push dword [eax]
call fcn.00401e4a
mov eax, dword [0x40741c]
push dword [eax]
call fcn.00401e4a
add esp, 0xc
push 0x7f00
push dword [0x4074a4]
call dword [sym.imp.USER32.dll_LoadCursorA]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]