Function at 0x401225
Capabilities:
Create process on windows
Read file on windows

Disassembly:
sub esp, 0x58
push ebx
push ebp
push esi
push edi
push 0x403088
push 0x4031f0
call dword [sym.imp.MSVCRT.dll_fopen]
mov edi, eax
xor ebx, ebx
pop ecx
cmp edi, ebx
pop ecx
jne 0x401273
cmp dword [0x403710], ebx
jne 0x40126c
mov dword [0x403708], str.Z:work_v3unzip_v3unzip.c
mov dword [0x40370c], 0x34
mov dword [0x403710], 1
push 3
jmp 0x401583
mov ebp, dword [sym.imp.MSVCRT.dll_fseek]
push 2
push 0xfffffffffffffffc
push edi
call ebp
mov esi, dword [sym.imp.MSVCRT.dll_fread]
push edi
push 1
push 4
push 0x403704
call esi
add esp, 0x1c
cmp eax, 1
je 0x4012cf
push edi
call dword [sym.imp.MSVCRT.dll_fclose]
cmp dword [0x403710], ebx
pop ecx
jne 0x4012c8
mov dword [0x403708], str.Z:work_v3unzip_v3unzip.c
mov dword [0x40370c], 0x3c
mov dword [0x403710], 1
push 4
jmp 0x401583
push ebx
push dword [0x403704]
push edi
call ebp
push edi
push 1
pop ebp
push ebp
push 0x10
push 0x4031e0
call esi
add esp, 0x1c
cmp eax, ebp
push edi
je 0x40131a
call dword [sym.imp.MSVCRT.dll_fclose]
cmp dword [0x403710], ebx
pop ecx
jne 0x4012c8
mov dword [0x403708], str.Z:work_v3unzip_v3unzip.c
mov dword [0x40370c], 0x46
mov dword [0x403710], ebp
jmp 0x4012c8
movzx eax, word [0x4031ec]
push eax
push ebp
push 0x403600
call esi
movzx ecx, word [0x4031ec]
add esp, 0x10
cmp eax, ecx
push edi
je 0x40135e
call dword [sym.imp.MSVCRT.dll_fclose]
cmp dword [0x403710], ebx
pop ecx
jne 0x4012c8
mov dword [0x403708], str.Z:work_v3unzip_v3unzip.c
mov dword [0x40370c], 0x4e
jmp 0x401312
movzx eax, word [0x4031ee]
push eax
push ebp
mov ebp, 0x4034fc
push ebp
call esi
movzx ecx, word [0x4031ee]
add esp, 0x10
cmp eax, ecx
je 0x4013aa
push edi
call dword [sym.imp.MSVCRT.dll_fclose]
cmp dword [0x403710], ebx
pop ecx
jne 0x4012c8
mov dword [0x403708], str.Z:work_v3unzip_v3unzip.c
mov dword [0x40370c], 0x56
jmp 0x4012be
movzx eax, byte [0x4031e9]
sub eax, ebx
mov esi, 0x4030c0
je 0x401483
dec eax
je 0x4013f5
dec eax
je 0x4014e7
cmp dword [0x403710], ebx
jne 0x4013ee
mov dword [0x403708], str.Z:work_v3unzip_v3unzip.c
mov dword [0x40370c], 0x7f
mov dword [0x403710], 1
push 7
jmp 0x401583
cmp byte [0x4034fc], bl
jne 0x401422
cmp dword [0x403710], ebx
jne 0x4014e0
mov dword [0x403708], str.Z:work_v3unzip_v3unzip.c
mov dword [0x40370c], 0x69
jmp 0x4014d6
push ebp
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebp
call sub.MSVCRT.dll_strlen
cmp byte [eax + 0x4030bf], 0x5c
lea eax, [eax + 0x4030bf]
pop ecx
je 0x401447
mov byte [eax + 1], 0x5c
mov byte [eax + 2], bl
push esi
call fcn.00401060
test eax, eax
pop ecx
je 0x4014e7
call dword [sym.imp.MSVCRT.dll__errno]
cmp dword [eax], 0x11
je 0x4014e7
cmp dword [0x403710], ebx
jne 0x4014e0
mov dword [0x403708], str.Z:work_v3unzip_v3unzip.c
mov dword [0x40370c], 0x77
jmp 0x4014d6
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x4031f0
push esi
call ebp
push 0x2e
push esi
call dword [sym.imp.MSVCRT.dll_strrchr]
pop ecx
pop ecx
push 0x403068
push eax
call ebp
push esi
call fcn.00401060
test eax, eax
pop ecx
je 0x4014e7
call dword [sym.imp.MSVCRT.dll__errno]
cmp dword [eax], 0x11
je 0x4014e7
cmp dword [0x403710], ebx
jne 0x4014e0
mov dword [0x403708], str.Z:work_v3unzip_v3unzip.c
mov dword [0x40370c], 0x63
mov dword [0x403710], 1
push 2
jmp 0x401583
push edi
call fcn.004015a4
push edi
mov dword [esp + 0x18], eax
call dword [sym.imp.MSVCRT.dll_fclose]
cmp byte [0x4031eb], bl
pop ecx
pop ecx
je 0x401598
mov edi, 0x403600
mov eax, edi
test eax, eax
je 0x401598
push 0x44
lea eax, [esp + 0x28]
pop ebp
push ebp
push ebx
push eax
call sub.MSVCRT.dll_memset
push 0x10
lea eax, [esp + 0x24]
push ebx
push eax
mov dword [esp + 0x3c], ebp
call sub.MSVCRT.dll_memset
push edi
push esi
call sub.MSVCRT.dll_strcat
add esp, 0x20
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x28]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x401586
cmp dword [0x403710], ebx
jne 0x401581
mov dword [0x403708], str.Z:work_v3unzip_v3unzip.c
mov dword [0x40370c], 0x94
mov dword [0x403710], 1
push 9
pop eax
jmp 0x40159c
push dword [esp + 0x14]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [esp + 0x18]
call esi
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x58
ret