Function at 0x103229f
Capabilities:
Delete file
Get common file path
Get file size
Read file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x63c
mov eax, dword [0x1053d10]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov dword [ebp - 0x628], ecx
xor ecx, ecx
push edi
mov dword [ebp - 0x638], ecx
mov dword [ebp - 0x624], ecx
mov dword [ebp - 0x634], ecx
mov dword [ebp - 0x630], ecx
mov word [ebp - 0x20c], cx
mov esi, 0x104
push esi
lea ecx, [ebp - 0x61c]
push ecx
mov ecx, dword [ebp - 0x628]
push eax
call fcn.01031e29
mov dword [ebp - 0x63c], eax
lea eax, [ebp - 0x414]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
mov ebx, 0xffff
mov edi, 0x80070000
jne 0x1032362
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x103232a
and eax, ebx
or eax, edi
test eax, eax
mov dword [ebp - 0x620], eax
jge 0x1032362
mov eax, dword [section..data]
cmp eax, section..data
je 0x103257c
test byte [eax + 0x1c], 2
je 0x103257c
push dword [ebp - 0x620]
push 0x1008a7c
push 0x1008a0c
push 0xb
jmp 0x10323d2
call fcn.01031e18
test eax, eax
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x414]
push 0x1008a68
push eax
lea eax, [ebp - 0x20c]
je 0x103238b
push 0x1008a48
jmp 0x1032390
push 0x1008a30
push esi
push eax
call fcn.010184d0
xor esi, esi
add esp, 0x18
cmp eax, esi
mov dword [ebp - 0x620], eax
jge 0x10323e2
mov eax, dword [section..data]
cmp eax, section..data
je 0x103257c
test byte [eax + 0x1c], 2
je 0x103257c
push dword [ebp - 0x620]
push 0x1002b18
push 0x1008a0c
push 0xc
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01040d61
jmp 0x103257c
push esi
push 0x8000000
push 3
push esi
push esi
push SysReAllocStringLen
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
mov dword [ebp - 0x62c], eax
jne 0x1032454
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, esi
jle 0x1032417
and eax, ebx
or eax, edi
mov dword [ebp - 0x620], eax
mov eax, dword [section..data]
cmp eax, section..data
je 0x103257c
test byte [eax + 0x1c], 2
je 0x103257c
push dword [ebp - 0x620]
push 0x1008a0c
push 0xd
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0101420b
jmp 0x103257c
push esi
push esi
push esi
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
jne 0x10324a3
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, esi
jle 0x1032471
and eax, ebx
or eax, edi
mov dword [ebp - 0x620], eax
mov eax, dword [section..data]
cmp eax, section..data
je 0x1032570
test byte [eax + 0x1c], 2
je 0x1032570
push dword [ebp - 0x620]
push 0x1008a0c
push 0xe
jmp 0x103252e
lea eax, [ebp - 0x630]
push eax
push dword [ebp - 0x62c]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp dword [ebp - 0x630], esi
mov ecx, eax
mov dword [ebp - 0x634], ecx
jne 0x103253b
cmp ecx, 0xa28
ja 0x103253b
push ecx
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
push esi
lea ecx, [ebp - 0x638]
push ecx
push dword [ebp - 0x634]
mov dword [ebp - 0x624], eax
push eax
push dword [ebp - 0x62c]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1032570
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, esi
jle 0x1032509
and eax, ebx
or eax, edi
mov dword [ebp - 0x620], eax
mov eax, dword [section..data]
cmp eax, section..data
je 0x1032570
test byte [eax + 0x1c], 2
je 0x1032570
push dword [ebp - 0x620]
push 0x1008a0c
push 0x10
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0101420b
jmp 0x1032570
mov eax, dword [section..data]
cmp eax, section..data
je 0x1032566
test byte [eax + 0x1c], 2
je 0x1032566
push ecx
push dword [ebp - 0x630]
push 0x1008a0c
push 0xf
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019979
mov dword [ebp - 0x620], 0x80004005
push dword [ebp - 0x62c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp word [ebp - 0x20c], 0
je 0x1032593
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov esi, dword [ebp - 0x628]
xor eax, eax
cmp dword [ebp - 0x620], eax
jl 0x10325d1
mov edi, dword [ebp - 0x634]
push edi
push dword [ebp - 0x624]
lea eax, [esi + 0xe70]
push eax
mov dword [esi + 0xe6c], 1
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov dword [esi + 0x22c0], edi
jmp 0x10325f3
push 0x1450
push eax
mov dword [esi + 0xe6c], eax
lea eax, [esi + 0xe70]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
and dword [esi + 0x22c0], 0
cmp dword [ebp - 0x624], 0
pop edi
pop esi
pop ebx
je 0x103260b
push dword [ebp - 0x624]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x63c]
xor ecx, ebp
call fcn.01035675
leave
ret 4