Function at 0x100a15e0
Capabilities:
Copy file
Delete file
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101eaba6
mov eax, dword fs:[0]
push eax
sub esp, 0x2f8
mov eax, dword [0x102683e0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x300], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp + 0x14]
push 0x1027b574
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x84], vtable.Base::lock::scoped_lock_class_Base::lock::critical_section_.0
mov byte [eax], 0
mov dword [ebp - 0x80], 0x1027b570
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor dl, dl
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x9c]
mov byte [ebp - 0x2f1], 0
call fcn.100a1ca0
push 0
push 0
push 3
push 0
mov byte [ebp - 4], 1
lea eax, [ebp - 0x9c]
cmp dword [ebp - 0x88], 8
push 1
cmovae eax, dword [ebp - 0x9c]
push SysReAllocStringLen
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
jne 0x100a1790
mov dl, 1
lea ecx, [ebp - 0x7c]
call fcn.100a1ca0
cmp dword [ebp - 0x88], 8
lea ecx, [ebp - 0x2f0]
mov esi, dword [sym.imp.KERNEL32.dll_FindFirstFileW]
lea eax, [ebp - 0x9c]
cmovae eax, dword [ebp - 0x9c]
push ecx
push eax
call esi
cmp eax, edi
je 0x100a16df
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x100a173f
cmp dword [ebp - 0x68], 8
lea ecx, [ebp - 0x2f0]
lea eax, [ebp - 0x7c]
cmovae eax, dword [ebp - 0x7c]
push ecx
push eax
call esi
cmp eax, 0xffffffff
je 0x100a173f
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [ebp - 0x88], 8
lea ecx, [ebp - 0x9c]
push 0
cmovae ecx, dword [ebp - 0x9c]
lea eax, [ebp - 0x7c]
cmp dword [ebp - 0x68], 8
push ecx
cmovae eax, dword [ebp - 0x7c]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x100a173f
cmp dword [ebp - 0x68], 8
lea eax, [ebp - 0x7c]
cmovae eax, dword [ebp - 0x7c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [ebp - 0x68], 8
lea eax, [ebp - 0x7c]
push 0
cmovae eax, dword [ebp - 0x7c]
push 0
push 3
push 0
push 1
push SysReAllocStringLen
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp dword [ebp - 0x68], 8
mov edi, eax
jb 0x100a1773
push dword [ebp - 0x7c]
call fcn.101a02f0
add esp, 4
xor eax, eax
mov dword [ebp - 0x68], 7
mov dword [ebp - 0x6c], 0
mov word [ebp - 0x7c], ax
cmp edi, 0xffffffff
je 0x100a1934
push 0
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0x14
jb 0x100a192d
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [ebp - 0x64]
push 0
push eax
push 4
lea eax, [ebp - 0x80]
mov dword [ebp - 0x64], 0
push eax
push edi
mov dword [ebp - 0x80], 0
call esi
test eax, eax
je 0x100a192d
cmp dword [ebp - 0x64], 4
jne 0x100a192d
mov eax, dword [ebp - 0x80]
cmp eax, 1
jne 0x100a1811
push 0
lea eax, [ebp - 0x64]
push eax
mov eax, dword [ebp - 0x2f8]
push 0x10
push eax
push edi
call esi
test eax, eax
je 0x100a192d
cmp dword [ebp - 0x64], 0x10
jne 0x100a192d
mov eax, dword [ebp - 0x2fc]
mov byte [eax], 1
jmp 0x100a1926
cmp eax, 2
jne 0x100a192d
push 0
lea eax, [ebp - 0x64]
xorps xmm0, xmm0
push eax
push 0x10
lea eax, [ebp - 0x60]
push eax
push edi
movdqu xmmword [ebp - 0x60], xmm0
call esi
test eax, eax
je 0x100a192d
cmp dword [ebp - 0x64], 0x10
jne 0x100a192d
push 0
lea eax, [ebp - 0x64]
xorps xmm0, xmm0
push eax
push 0x10
lea eax, [ebp - 0x20]
push eax
push edi
movdqu xmmword [ebp - 0x20], xmm0
call esi
test eax, eax
je 0x100a192d
cmp dword [ebp - 0x64], 0x10
jne 0x100a192d
push 0
lea eax, [ebp - 0x64]
xorps xmm0, xmm0
push eax
push 0x10
lea eax, [ebp - 0x30]
push eax
push edi
movdqu xmmword [ebp - 0x30], xmm0
call esi
test eax, eax
je 0x100a192d
cmp dword [ebp - 0x64], 0x10
jne 0x100a192d
mov eax, dword [ebp - 0x300]
xorps xmm0, xmm0
movdqu xmmword [ebp - 0x40], xmm0
cmp dword [eax + 0x14], 0x10
mov edx, dword [eax + 0x10]
jb 0x100a18ae
mov eax, dword [eax]
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
call fcn.1009f850
mov eax, dword [ebp - 0x304]
xorps xmm0, xmm0
movdqu xmmword [ebp - 0x50], xmm0
cmp dword [eax + 0x14], 0x10
mov edx, dword [eax + 0x10]
jb 0x100a18d2
mov eax, dword [eax]
lea ecx, [ebp - 0x50]
push ecx
mov ecx, eax
call fcn.1009f850
lea ecx, [ebp - 0x20]
mov esi, 0xc
lea edx, [ebp - 0x40]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x100a18fb
add ecx, 4
add edx, 4
sub esi, 4
jae 0x100a18e8
jmp 0x100a1917
lea ecx, [ebp - 0x30]
mov esi, 0xc
lea edx, [ebp - 0x50]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x100a192d
add ecx, 4
add edx, 4
sub esi, 4
jae 0x100a1906
mov eax, dword [ebp - 0x2f8]
movdqu xmm0, xmmword [ebp - 0x60]
movdqu xmmword [eax], xmm0
mov byte [ebp - 0x2f1], 1
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x88], 8
jb 0x100a194b
push dword [ebp - 0x9c]
call fcn.101a02f0
add esp, 4
xor eax, eax
mov dword [ebp - 0x88], 7
push 0x1027b574
mov dword [ebp - 0x8c], 0
mov word [ebp - 0x9c], ax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov al, byte [ebp - 0x2f1]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.101a0193
mov esp, ebp
pop ebp
ret 0x10