Function at 0x41f080
Capabilities:
Delete file
Get file size
Read file on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d43a4
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push ecx
mov eax, 0x10cc
call fcn.004848f0
mov eax, dword [0x56b06c]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x10d8], edx
mov edi, ecx
mov dword [ebp - 0x10b0], edi
mov dword [ebp - 0x10b4], edi
xor esi, esi
mov dword [ebp - 0x10dc], edi
mov byte [ebp - 0x10a9], 1
mov dword [ebp - 0x10c8], esi
mov dword [ebp - 0x10c4], esi
mov dword [ebp - 0x10c0], esi
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], esi
call fcn.004227a0
mov byte [ebp - 4], 1
cmp dword [ebp - 0x54], esi
je 0x41f13e
lea eax, [ebp - 0x10c8]
push 1
push eax
lea edx, [ebp - 0x64]
lea ecx, [ebp - 0x10d4]
call fcn.0041e1d0
add esp, 8
lea ecx, [ebp - 0x10d4]
call fcn.00420ac0
mov esi, dword [ebp - 0x10c8]
xor eax, eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
push SysReAllocStringLen
sub esp, 0x18
mov byte [ebp - 4], 2
mov ecx, esp
call fcn.00423450
lea edx, [ebp - 0x34]
mov ecx, str.RootFodler
call fcn.004239f0
mov ecx, dword [ebp - 0x24]
add esp, 0x1c
test ecx, ecx
je 0x41f205
mov edx, dword [ebp - 0x20]
lea eax, [ebp - 0x34]
mov esi, dword [ebp - 0x34]
cmp edx, 8
cmovae eax, esi
cmp word [eax + ecx*2 - 2], 0x5c
je 0x41f1cb
cmp ecx, edx
jae 0x41f1b3
lea eax, [ecx + 1]
cmp edx, 8
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x34]
cmovae eax, esi
mov dword [eax + ecx*2], 0x5c
jmp 0x41f1cb
push 0x5c
mov byte [ebp - 0x10bc], 0
push dword [ebp - 0x10bc]
push ecx
lea ecx, [ebp - 0x34]
call fcn.00421100
push 6
push str..sync_
lea ecx, [ebp - 0x34]
call fcn.00413720
lea eax, [ebp - 0x10c8]
push 0
push eax
lea edx, [ebp - 0x34]
lea ecx, [ebp - 0x10d4]
call fcn.0041e1d0
add esp, 8
lea ecx, [ebp - 0x10d4]
call fcn.00420ac0
mov esi, dword [ebp - 0x10c8]
cmp esi, dword [ebp - 0x10c4]
jne 0x41f2d2
mov edx, dword [ebp - 0x20]
xor eax, eax
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
cmp edx, 8
jb 0x41f25e
mov ecx, dword [ebp - 0x34]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41f254
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41f726
push edx
push ecx
call fcn.004835cc
add esp, 8
mov edx, dword [ebp - 0x50]
xor eax, eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
cmp edx, 8
jb 0x41f2ac
mov ecx, dword [ebp - 0x64]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41f2a2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41f72b
push edx
push ecx
call fcn.004835cc
add esp, 8
xor eax, eax
mov dword [ebp - 0x54], 0
lea ecx, [ebp - 0x10c8]
mov dword [ebp - 0x50], 7
mov word [ebp - 0x64], ax
call fcn.00420ac0
mov eax, edi
jmp 0x41f708
lea ecx, [ebp - 0x4c]
call fcn.004227a0
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x3c]
test ecx, ecx
je 0x41f66d
cmp dword [ebp - 0x38], 8
lea eax, [ebp - 0x4c]
cmovae eax, dword [ebp - 0x4c]
cmp word [eax + ecx*2 - 2], 0x5c
je 0x41f306
push 0x5c
lea ecx, [ebp - 0x4c]
call fcn.00421250
mov edx, dword [ebp - 0x10d8]
mov ecx, dword [edx + 0x10]
test ecx, ecx
je 0x41f66d
cmp dword [edx + 0x14], 8
mov eax, edx
jb 0x41f321
mov eax, dword [edx]
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.00413720
push 0xc
mov byte [ebp - 4], 4
call fcn.0048359c
mov edi, eax
add esp, 4
mov dword [ebp - 0x10b4], edi
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x4c]
mov dword [edi], vtable.ZipArchive.0
call fcn.00421a60
mov dword [edi + 4], eax
mov byte [edi + 8], 0
test eax, eax
je 0x41f730
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10e4]
push dword [ebp - 0x10dc]
mov dword [ebp - 0x10e4], 0
push edi
mov dword [ebp - 0x10e0], 0
call fcn.00421c50
mov edi, esi
nop
cmp edi, dword [ebp - 0x10c4]
je 0x41f58a
mov dword [ebp - 0x10b8], 0xffffffff
mov byte [ebp - 4], 8
mov eax, edi
cmp dword [edi + 0x14], 8
jb 0x41f3b4
mov eax, dword [edi]
push 0x80
push 3
push 7
push SysReAllocStringLen
push eax
lea ecx, [ebp - 0x10b8]
call fcn.0041ddc0
test eax, eax
je 0x41f570
push 0
push dword [ebp - 0x10b8]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x10bc], eax
test eax, eax
je 0x41f570
push ecx
lea ecx, [ebp - 0x10aa]
mov byte [ebp - 0x10aa], 0
push ecx
push eax
lea ecx, [ebp - 0x10d4]
call fcn.00420830
push 0
mov byte [ebp - 4], 9
lea eax, [ebp - 0x10b4]
push eax
push dword [ebp - 0x10bc]
mov dword [ebp - 0x10b4], 0
push dword [ebp - 0x10d4]
push dword [ebp - 0x10b8]
call dword [sym.imp.KERNEL32.dll_ReadFile]
neg eax
sbb eax, eax
neg eax
je 0x41f514
mov edx, dword [ebp - 0x10d8]
lea ecx, [ebp - 0x7c]
call fcn.00421540
push 0x5c
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xa
call fcn.00412ea0
lea edx, [edi + 0x18]
lea ecx, [ebp - 0x94]
call fcn.00421540
push eax
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xb
call fcn.0040aa90
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x80]
cmp edx, 0x10
jb 0x41f4ba
mov ecx, dword [ebp - 0x94]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41f4b0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41f755
push edx
push ecx
call fcn.004835cc
add esp, 8
mov ecx, dword [ebp - 0x10e4]
lea edx, [ebp - 0x7c]
push dword [ebp - 0x10bc]
push dword [ebp - 0x10d4]
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x68]
mov byte [ebp - 0x10a9], 0
cmp edx, 0x10
jb 0x41f514
mov ecx, dword [ebp - 0x7c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41f50a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41f75a
push edx
push ecx
call fcn.004835cc
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x10d4]
test ecx, ecx
je 0x41f570
mov edx, dword [ebp - 0x10cc]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x41f548
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41f75f
push edx
push ecx
call fcn.004835cc
add esp, 8
mov dword [ebp - 0x10d4], 0
mov dword [ebp - 0x10d0], 0
mov dword [ebp - 0x10cc], 0
mov eax, dword [ebp - 0x10b8]
cmp eax, 0xffffffff
je 0x41f582
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
add edi, 0x34
jmp 0x41f390
mov byte [ebp - 4], 0xc
mov edi, dword [ebp - 0x10e0]
test edi, edi
je 0x41f5b9
or eax, 0xffffffff
lock xadd dword [edi + 4], eax
jne 0x41f5b9
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [edi + 8], eax
jne 0x41f5b9
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
cmp byte [ebp - 0x10a9], 0
jne 0x41f66d
mov edi, dword [ebp - 0x10c4]
cmp esi, edi
je 0x41f5ee
cmp byte [esi + 0x30], 0
je 0x41f5e7
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x41f5e0
mov eax, dword [esi]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
add esi, 0x34
cmp esi, edi
jne 0x41f5d0
mov esi, dword [ebp - 0x10b0]
movups xmm0, xmmword [ebp - 0x4c]
mov edx, dword [ebp - 0x20]
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov word [ebp - 0x4c], ax
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x3c]
movq qword [esi + 0x10], xmm0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 7
cmp edx, 8
jb 0x41f699
mov ecx, dword [ebp - 0x34]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41f68f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41f764
jmp 0x41f68f
mov esi, dword [ebp - 0x10b0]
cmp dword [ebp - 0x38], 8
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x3c], 0
cmovae eax, dword [ebp - 0x4c]
xor ecx, ecx
mov word [eax], cx
jmp 0x41f5f4
push edx
push ecx
call fcn.004835cc
add esp, 8
mov edx, dword [ebp - 0x50]
xor eax, eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
cmp edx, 8
jb 0x41f6e7
mov ecx, dword [ebp - 0x64]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41f6dd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41f769
push edx
push ecx
call fcn.004835cc
add esp, 8
xor eax, eax
mov dword [ebp - 0x54], 0
lea ecx, [ebp - 0x10c8]
mov dword [ebp - 0x50], 7
mov word [ebp - 0x64], ax
call fcn.00420ac0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0048358b
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004b1db8
call fcn.004b1db8
lea eax, [ebp - 0x10a8]
push str.zipOpen_failed.
push eax
call fcn.004219b0
add esp, 8
lea eax, [ebp - 0x10a8]
push 0x5622e4
push eax
call fcn.004a92fe
call fcn.004b1db8
call fcn.004b1db8
call fcn.004b1db8
call fcn.004b1db8
call fcn.004b1db8
int3