Function at 0x465ef0
Capabilities:
Delete file
Get file size
Read file on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x681384
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push ecx
mov eax, 0x10cc
call fcn.00611f80
mov eax, dword [0x79cac4]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x10d8], edx
mov edi, ecx
mov dword [ebp - 0x10b0], edi
mov dword [ebp - 0x10b4], edi
xor esi, esi
mov dword [ebp - 0x10dc], edi
mov byte [ebp - 0x10a9], 1
mov dword [ebp - 0x10c8], esi
mov dword [ebp - 0x10c4], esi
mov dword [ebp - 0x10c0], esi
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], esi
call fcn.0046c440
mov byte [ebp - 4], 1
cmp dword [ebp - 0x6c], esi
je 0x465fae
lea eax, [ebp - 0x10c8]
push 1
push eax
lea edx, [ebp - 0x7c]
lea ecx, [ebp - 0x10d4]
call fcn.004652f0
add esp, 8
lea ecx, [ebp - 0x10d4]
call fcn.00468770
mov esi, dword [ebp - 0x10c8]
xor eax, eax
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 7
mov word [ebp - 0x4c], ax
push reloc.WS2_32.dll_accept
sub esp, 0x18
mov byte [ebp - 4], 2
mov ecx, esp
call fcn.0046ce70
lea edx, [ebp - 0x4c]
mov ecx, str.RootFodler
call fcn.0046d320
mov ecx, dword [ebp - 0x3c]
add esp, 0x1c
test ecx, ecx
je 0x466075
mov edx, dword [ebp - 0x38]
lea eax, [ebp - 0x4c]
mov esi, dword [ebp - 0x4c]
cmp edx, 8
cmovae eax, esi
cmp word [eax + ecx*2 - 2], 0x5c
je 0x46603b
cmp ecx, edx
jae 0x466023
lea eax, [ecx + 1]
cmp edx, 8
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x4c]
cmovae eax, esi
mov dword [eax + ecx*2], 0x5c
jmp 0x46603b
push 0x5c
mov byte [ebp - 0x10bc], 0
push dword [ebp - 0x10bc]
push ecx
lea ecx, [ebp - 0x4c]
call fcn.0046acb0
push 6
push str..sync_
lea ecx, [ebp - 0x4c]
call fcn.00459fe0
lea eax, [ebp - 0x10c8]
push 0
push eax
lea edx, [ebp - 0x4c]
lea ecx, [ebp - 0x10d4]
call fcn.004652f0
add esp, 8
lea ecx, [ebp - 0x10d4]
call fcn.00468770
mov esi, dword [ebp - 0x10c8]
cmp esi, dword [ebp - 0x10c4]
jne 0x4660b2
xor eax, eax
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
lea ecx, [ebp - 0x4c]
mov word [edi], ax
call fcn.00453390
lea ecx, [ebp - 0x7c]
call fcn.00453390
lea ecx, [ebp - 0x10c8]
call fcn.00468770
mov eax, edi
jmp 0x46642c
lea ecx, [ebp - 0x34]
call fcn.0046c440
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x46645e
cmp dword [ebp - 0x20], 8
lea eax, [ebp - 0x34]
cmovae eax, dword [ebp - 0x34]
cmp word [eax + ecx*2 - 2], 0x5c
je 0x4660e6
push 0x5c
lea ecx, [ebp - 0x34]
call fcn.0046ae00
mov edx, dword [ebp - 0x10d8]
mov ecx, dword [edx + 0x10]
test ecx, ecx
je 0x46645e
cmp dword [edx + 0x14], 8
mov eax, edx
jb 0x466101
mov eax, dword [edx]
push ecx
push eax
lea ecx, [ebp - 0x34]
call fcn.00459fe0
push 0xc
mov byte [ebp - 4], 4
call fcn.006113aa
mov edi, eax
add esp, 4
mov dword [ebp - 0x10b4], edi
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x34]
mov dword [edi], vtable.ZipArchive.0
call fcn.0046b740
mov dword [edi + 4], eax
mov byte [edi + 8], 0
test eax, eax
je 0x466480
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10e4]
push dword [ebp - 0x10dc]
mov dword [ebp - 0x10e4], 0
push edi
mov dword [ebp - 0x10e0], 0
call fcn.0046b930
mov edi, esi
nop
cmp edi, dword [ebp - 0x10c4]
je 0x46636a
mov dword [ebp - 0x10b8], 0xffffffff
mov byte [ebp - 4], 8
mov eax, edi
cmp dword [edi + 0x14], 8
jb 0x466194
mov eax, dword [edi]
push 0x80
push 3
push 7
push SysReAllocString
push eax
lea ecx, [ebp - 0x10b8]
call fcn.004647e0
test eax, eax
je 0x466350
push 0
push dword [ebp - 0x10b8]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x10bc], eax
test eax, eax
je 0x466350
push ecx
lea ecx, [ebp - 0x10aa]
mov byte [ebp - 0x10aa], 0
push ecx
push eax
lea ecx, [ebp - 0x10d4]
call fcn.004685f0
push 0
mov byte [ebp - 4], 9
lea eax, [ebp - 0x10b4]
push eax
push dword [ebp - 0x10bc]
mov dword [ebp - 0x10b4], 0
push dword [ebp - 0x10d4]
push dword [ebp - 0x10b8]
call dword [sym.imp.KERNEL32.dll_ReadFile]
neg eax
sbb eax, eax
neg eax
je 0x4662f4
mov edx, dword [ebp - 0x10d8]
lea ecx, [ebp - 0x64]
call fcn.0046b0e0
push 0x5c
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xa
call fcn.00459750
lea edx, [edi + 0x18]
lea ecx, [ebp - 0x94]
call fcn.0046b0e0
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xb
call fcn.00451720
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x80]
cmp edx, 0x10
jb 0x46629a
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x466290
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4664a5
push edx
push ecx
call fcn.006113da
add esp, 8
mov ecx, dword [ebp - 0x10e4]
lea edx, [ebp - 0x64]
push dword [ebp - 0x10bc]
push dword [ebp - 0x10d4]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x50]
mov byte [ebp - 0x10a9], 0
cmp edx, 0x10
jb 0x4662f4
mov ecx, dword [ebp - 0x64]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4662ea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4664aa
push edx
push ecx
call fcn.006113da
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x10d4]
test ecx, ecx
je 0x466350
mov edx, dword [ebp - 0x10cc]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x466328
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4664af
push edx
push ecx
call fcn.006113da
add esp, 8
mov dword [ebp - 0x10d4], 0
mov dword [ebp - 0x10d0], 0
mov dword [ebp - 0x10cc], 0
mov eax, dword [ebp - 0x10b8]
cmp eax, 0xffffffff
je 0x466362
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
add edi, 0x34
jmp 0x466170
mov byte [ebp - 4], 0xc
mov edi, dword [ebp - 0x10e0]
test edi, edi
je 0x466399
or eax, 0xffffffff
lock xadd dword [edi + 4], eax
jne 0x466399
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [edi + 8], eax
jne 0x466399
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
cmp byte [ebp - 0x10a9], 0
jne 0x46645e
mov edi, dword [ebp - 0x10c4]
cmp esi, edi
je 0x4663ce
cmp byte [esi + 0x30], 0
je 0x4663c7
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x4663c0
mov eax, dword [esi]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
add esi, 0x34
cmp esi, edi
jne 0x4663b0
mov esi, dword [ebp - 0x10b0]
movups xmm0, xmmword [ebp - 0x34]
mov dword [esi + 0x10], 0
lea ecx, [ebp - 0x34]
mov dword [esi + 0x14], 0
xor eax, eax
movups xmmword [esi], xmm0
mov word [ebp - 0x34], ax
movq xmm0, qword [ebp - 0x24]
movq qword [esi + 0x10], xmm0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 7
call fcn.00453390
lea ecx, [ebp - 0x4c]
call fcn.00453390
lea ecx, [ebp - 0x7c]
call fcn.00453390
lea ecx, [ebp - 0x10c8]
call fcn.00468770
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.00611399
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov esi, dword [ebp - 0x10b0]
cmp dword [ebp - 0x20], 8
lea eax, [ebp - 0x34]
mov dword [ebp - 0x24], 0
cmovae eax, dword [ebp - 0x34]
xor ecx, ecx
mov word [eax], cx
jmp 0x4663d4
lea eax, [ebp - 0x10a8]
push str.zipOpen_failed.
push eax
call fcn.0046b690
add esp, 8
lea eax, [ebp - 0x10a8]
push 0x790138
push eax
call fcn.0064d863
call fcn.00655ae8
call fcn.00655ae8
call fcn.00655ae8
int3