Function at 0x40176d
Capabilities:
Delete file
Get common file path

Disassembly:
mov eax, 0x43cf7b
call fcn.00434688
sub esp, 0x4a0
push ebx
push esi
push edi
lea ecx, [ebp - 0x24]
call fcn.004022d0
xor ebx, ebx
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], ebx
call fcn.004010b9
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.004144c0
push dword [0x44a088]
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 2
call fcn.00414190
push dword [0x44a08c]
lea ecx, [ebp - 0x44]
call fcn.00414190
push str.ZIP_
lea ecx, [ebp - 0x44]
call fcn.00414190
push dword [0x44a098]
lea ecx, [ebp - 0x44]
call fcn.00414190
push dword [0x44a0a0]
lea ecx, [ebp - 0x44]
call fcn.00414190
lea ecx, [ebp - 0x44]
call fcn.004065f0
push eax
lea ecx, [ebp - 0x24]
call fcn.004025b0
xor edi, edi
cmp byte [0x457cec], bl
je 0x401a52
push ebx
push 0x401e06
push dword [ebp + 8]
push 0x82
push dword [0x457c34]
call dword [sym.imp.USER32.dll_DialogBoxParamA]
mov esi, 0x457cf0
mov ecx, esi
call fcn.00413f00
test eax, eax
je 0x40189d
lea ecx, [ebp - 0x6c]
call fcn.004173a0
lea eax, [ebp - 0x6c]
mov ecx, esi
push eax
push 0x20
push 0x457ccc
mov byte [ebp - 4], 3
call fcn.004065f0
push eax
push 0x100
push 1
call fcn.00418350
add esp, 0x18
lea ecx, [ebp - 0x6c]
call fcn.004172a0
push 0x1e
push str.01234567890ABCDEF01234567890ABCD
push eax
call fcn.00434af0
add esp, 0xc
test eax, eax
je 0x4018c7
push ebx
push str.Error
push str.Incorrect_password.
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 2
call fcn.004179b0
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.00414650
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], bl
call fcn.004010e7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00402340
xor al, al
jmp 0x401a43
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], ebx
call fcn.004144c0
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 4
push eax
push ebx
call fcn.00415140
pop ecx
pop ecx
lea ecx, [ebp - 0x18]
push ecx
lea ecx, [ebp - 0x14]
push ecx
push 0x44a1b8
mov ecx, eax
call fcn.00415360
lea eax, [ebp - 0x4ac]
push eax
push 0x320
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea eax, [ebp - 0x18c]
push eax
push ebx
lea eax, [ebp - 0x4ac]
push str.ckdec
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
lea ecx, [ebp - 0x58]
lea edi, [ebp - 0x18c]
call fcn.004173a0
lea eax, [ebp - 0x58]
mov ecx, esi
push eax
mov byte [ebp - 4], 5
push dword [ebp - 0x18]
push dword [ebp - 0x14]
call fcn.004065f0
push eax
push dword [0x457cc8]
push 1
call fcn.00418350
add esp, 0x18
lea ecx, [ebp - 0x28]
call fcn.00415e70
push ebx
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 6
call fcn.004065f0
push eax
lea ecx, [ebp - 0x58]
call fcn.004172a0
push eax
lea eax, [ebp - 0x18c]
push eax
call fcn.00416c90
add esp, 0x10
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0x24]
push eax
call fcn.00402530
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
call fcn.00415ea0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 4
call fcn.004179b0
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 3
call fcn.00414650
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 2
call fcn.004179b0
cmp dword [ebp + 8], ebx
je 0x4019f0
push 0x3f0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_GetDlgItem]
push ebx
push ebx
push 0x402
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [ebp + 8]
mov esi, dword [0x457d70]
mov dword [0x457d70], eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x24]
push dword [ebp + 0xc]
call fcn.00402440
cmp edi, ebx
mov dword [0x457d70], esi
je 0x401a1e
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.00414650
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], bl
call fcn.004010e7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00402340
mov al, 1
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret
push 0x44a1b8
lea ecx, [ebp - 0x24]
call fcn.004023c0
test al, al
jne 0x4019cf
push ebx
push str.Error
push str.Failed_to_open_embedded_zip.
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x401a1e