Function at 0x1000dd10
Capabilities:
Connect pipe
Delete file
Get common file path
Get file size
Read file on windows
Read pipe
Write pipe

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x79c
push ebx
push esi
push edi
push eax
xor eax, eax
xor eax, eax
je 0x1000dd2a
push ebp
adc byte [ecx], 0x58
pop eax
mov byte [ebp - 0x308], 0
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0x307]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x208], 0
mov ecx, 0x3f
xor eax, eax
lea edi, [ebp - 0x207]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x308]
push eax
push 0xc8
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push str._d.tmp
lea ecx, [ebp - 0x308]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea edx, [ebp + eax - 0x308]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0x1001393c
push str.http:___s
lea eax, [ebp - 0x208]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov byte [ebp - 0x614], 0
mov ecx, 0xc1
xor eax, eax
lea edi, [ebp - 0x613]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea ecx, [ebp - 0x308]
push ecx
lea edx, [ebp - 0x614]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x208]
push eax
lea ecx, [ebp - 0x514]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [ebp - 0x310], 0x232b
mov dword [ebp - 0x788], 0
mov ecx, 0x5c
xor eax, eax
lea edi, [ebp - 0x784]
rep stosd dword es:[edi], eax
mov edx, dword [str..pipe_]
mov dword [ebp - 0x108], edx
mov eax, dword [0x10012120]
mov dword [ebp - 0x104], eax
mov cx, word [0x10012124]
mov word [ebp - 0x100], cx
mov ecx, 0x3d
xor eax, eax
lea edi, [ebp - 0xfe]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x10013a94
lea edx, [ebp - 0x108]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov dword [ebp - 4], 0
push 0xffffffffffffffff
lea eax, [ebp - 4]
push eax
push 0x174
lea ecx, [ebp - 0x788]
push ecx
push 0x308
lea edx, [ebp - 0x614]
push edx
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_CallNamedPipeA]
test eax, eax
jne 0x1000de9c
xor eax, eax
jmp 0x1000e006
push 0
push 0x80
push 3
push 0
push 1
push accept
lea ecx, [ebp - 0x308]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x790], eax
cmp dword [ebp - 0x790], 0xffffffff
jne 0x1000ded1
xor eax, eax
jmp 0x1000e006
push 0
mov edx, dword [ebp - 0x790]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0
jne 0x1000df10
lea eax, [ebp - 0x308]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, dword [ebp - 0x790]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x1000e006
mov edx, dword [ebp - 0x30c]
add edx, 1
push edx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x794], eax
mov eax, dword [ebp - 0x794]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x30c]
mov byte [ecx], 0
push 0
lea edx, [ebp - 4]
push edx
mov eax, dword [ebp - 0x30c]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x790]
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [ebp - 0x790]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x308]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 0x3a
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.SHLWAPI.dll_StrChrA]
mov dword [ebp - 0x78c], eax
cmp dword [ebp - 0x78c], 0
jne 0x1000dfbd
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 8]
mov dword [ebp - 0x798], edx
mov eax, dword [ebp - 0x798]
push eax
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 4
mov eax, 1
jmp 0x1000e006
mov ecx, dword [ebp - 0x78c]
mov byte [ecx], 0
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0x78c]
add ecx, 1
push ecx
call dword [sym.imp.SHLWAPI.dll_StrToIntA]
mov edx, dword [ebp + 0xc]
mov dword [edx], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x79c], eax
mov ecx, dword [ebp - 0x79c]
push ecx
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret