Function at 0x40176c
Capabilities:
Delete file
Get common file path

Disassembly:
mov eax, 0x43878b
call fcn.00430d18
sub esp, 0x4a0
push ebx
push esi
push edi
lea ecx, [ebp - 0x24]
call fcn.004022c0
xor ebx, ebx
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], ebx
call fcn.004010b9
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.00414020
push dword [0x443088]
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 2
call fcn.00413cf0
push dword [0x44308c]
lea ecx, [ebp - 0x44]
call fcn.00413cf0
push str.ZIP_
lea ecx, [ebp - 0x44]
call fcn.00413cf0
push dword [0x443098]
lea ecx, [ebp - 0x44]
call fcn.00413cf0
push dword [0x4430a0]
lea ecx, [ebp - 0x44]
call fcn.00413cf0
lea ecx, [ebp - 0x44]
call fcn.004235e0
push eax
lea ecx, [ebp - 0x24]
call fcn.004025a0
xor edi, edi
cmp byte [0x44e5cc], bl
je 0x401a51
push ebx
push 0x401df1
push dword [ebp + 8]
push 0x82
push dword [0x44e514]
call dword [sym.imp.USER32.dll_DialogBoxParamA]
mov esi, 0x44e5d0
mov ecx, esi
call fcn.00413a80
test eax, eax
je 0x40189c
lea ecx, [ebp - 0x6c]
call fcn.00416ea0
lea eax, [ebp - 0x6c]
mov ecx, esi
push eax
push 0x20
push 0x44e5ac
mov byte [ebp - 4], 3
call fcn.004235e0
push eax
push 0x100
push 1
call fcn.00417e50
add esp, 0x18
lea ecx, [ebp - 0x6c]
call fcn.00416de0
push 0x1e
push str.01234567890ABCDEF01234567890ABCD
push eax
call fcn.00431180
add esp, 0xc
test eax, eax
je 0x4018c6
push ebx
push str.Error
push str.Incorrect_password.
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 2
call fcn.004174b0
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.004141b0
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], bl
call fcn.004010e7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00402330
xor al, al
jmp 0x401a42
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], ebx
call fcn.00414020
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 4
push eax
push ebx
call fcn.00414ca0
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
push ecx
lea ecx, [ebp - 0x14]
push ecx
push 0x4431b8
mov ecx, eax
call fcn.00414ec0
lea eax, [ebp - 0x4ac]
push eax
push 0x320
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea eax, [ebp - 0x18c]
push eax
push ebx
lea eax, [ebp - 0x4ac]
push str.ckdec
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
lea ecx, [ebp - 0x58]
lea edi, [ebp - 0x18c]
call fcn.00416ea0
lea eax, [ebp - 0x58]
mov ecx, esi
push eax
mov byte [ebp - 4], 5
push dword [ebp - 0x18]
push dword [ebp - 0x14]
call fcn.004235e0
push eax
push dword [0x44e5a8]
push 1
call fcn.00417e50
add esp, 0x18
lea ecx, [ebp - 0x28]
call fcn.004159b0
push ebx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 6
call fcn.004235e0
push eax
lea ecx, [ebp - 0x58]
call fcn.00416de0
push eax
lea eax, [ebp - 0x18c]
push eax
call fcn.004167d0
add esp, 0x10
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0x24]
push eax
call fcn.00402520
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.004159e0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 4
call fcn.004174b0
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 3
call fcn.004141b0
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 2
call fcn.004174b0
cmp dword [ebp + 8], ebx
je 0x4019ef
push 0x3f0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
push ebx
push 0x402
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [ebp + 8]
mov esi, dword [0x44e650]
mov dword [0x44e650], eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x24]
push dword [ebp + 0xc]
call fcn.00402430
cmp edi, ebx
mov dword [0x44e650], esi
je 0x401a1d
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.004141b0
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], bl
call fcn.004010e7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00402330
mov al, 1
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret
push 0x4431b8
lea ecx, [ebp - 0x24]
call fcn.004023b0
test al, al
jne 0x4019ce
push ebx
push str.Error
push str.Failed_to_open_embedded_zip.
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x401a1d