Function at 0x100027f0
Capabilities:
Delete file
Get common file path
Write file on windows

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff8
mov eax, 0x156c
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
call fcn.100041c0
sub esp, eax
mov ebx, dword [ecx]
mov esi, dword [ecx + 4]
test byte [0x10005068], 8
jne 0x10002e00
mov eax, dword [esi]
lea edx, [ebp - 0x154c]
mov dword [esp], esi
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], 0
mov dword [esp + 4], 0x10007200
call dword [eax + 0x10]
sub esp, 0x18
mov edi, eax
test eax, eax
js 0x10002e38
mov eax, dword [ebp - 0x154c]
mov edx, dword [eax]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 4], 6
mov dword [esp + 8], 0
mov dword [esp], eax
call dword [edx + 0x14]
sub esp, 0x14
mov edi, eax
test eax, eax
js 0x10002d98
mov eax, dword [ebp - 0x154c]
call sym._discard_string.isra.0
mov edi, eax
test eax, eax
js 0x10002d98
mov eax, dword [ebp - 0x154c]
call sym._discard_string.isra.0
mov edi, eax
test eax, eax
js 0x10002d98
mov eax, dword [ebp - 0x154c]
mov edx, dword [eax]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp], eax
call dword [edx + 0x14]
sub esp, 0x14
mov edi, eax
test eax, eax
js 0x10002d98
mov eax, dword [ebp - 0x154c]
lea ecx, [ebp - 0x1540]
mov edx, dword [eax]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 4
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0xc]
sub esp, 0x10
mov edi, eax
test eax, eax
js 0x10002d98
mov eax, dword [ebp - 0x154c]
mov ecx, dword [ebp - 0x1540]
lea esi, [ebp - 0x1524]
mov edx, dword [eax]
mov dword [esp + 0xc], 0
mov dword [esp + 8], ecx
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [edx + 0xc]
sub esp, 0x10
mov edi, eax
test eax, eax
js 0x10002d98
mov eax, dword [ebp - 0x154c]
lea ecx, [ebp - 0x1548]
mov edx, dword [eax]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 4
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0xc]
sub esp, 0x10
mov edi, eax
test eax, eax
js 0x10002d98
mov eax, dword [ebp - 0x154c]
lea ecx, [ebp - 0x1530]
mov edx, dword [eax]
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], 1
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp], eax
call dword [edx + 0x14]
sub esp, 0x14
mov edi, eax
test eax, eax
js 0x10002d98
mov eax, dword [ebp - 0x154c]
mov edi, dword [ebp - 0x1548]
mov edx, dword [eax]
mov dword [esp + 4], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov dword [esp], eax
call dword [edx + 0x14]
sub esp, 0x14
mov edi, eax
test eax, eax
js 0x10002d98
mov eax, dword [ebp - 0x154c]
lea ecx, [ebp - 0x153c]
mov edx, dword [eax]
mov dword [esp + 0xc], ecx
lea ecx, [ebp - 0x1544]
mov dword [esp + 8], 4
mov dword [esp + 4], ecx
mov dword [esp], eax
call dword [edx + 0xc]
sub esp, 0x10
test eax, eax
js 0x10002a57
cmp dword [ebp - 0x153c], 4
je 0x10002ed8
mov eax, dword [ebp - 0x1540]
lea edx, [ebp - 0x1420]
mov dword [esp + 8], esi
mov dword [esp + 0x10], edx
mov dword [ebp - 0x1550], edx
mov dword [esp + 0x14], 0x104
mov dword [esp + 0xc], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_MultiByteToWideChar]
mov edx, dword [ebp - 0x1550]
mov dword [ebp - 0x1544], eax
sub esp, 0x18
mov edi, eax
lea esi, [edx + edi*2 - 2]
cmp esi, edx
jne 0x10002abb
jmp 0x10002e78
sub esi, 2
cmp esi, edx
je 0x10002e78
cmp word [esi], 0x5c
jne 0x10002ab0
add esi, 2
mov eax, esi
sub eax, edx
sar eax, 1
sub edi, eax
lea eax, [ebx + 8]
mov dword [esp], 0x104
mov dword [ebp - 0x1550], eax
mov dword [esp + 4], eax
call dword [sym.imp.kernel32.dll_GetTempPathW]
lea edx, [edi + edi]
mov ecx, eax
mov dword [ebp - 0x1544], eax
mov eax, dword [ebp - 0x1550]
sub esp, 8
mov dword [esp + 8], edx
lea eax, [eax + ecx*2]
mov dword [esp + 4], esi
mov dword [esp], eax
mov dword [ebp - 0x1554], ecx
call sym._memcpy
mov ecx, dword [ebp - 0x1554]
xor eax, eax
mov edx, dword [ebp - 0x152c]
add edi, ecx
mov ecx, dword [ebp - 0x154c]
mov word [ebx + edi*2 + 8], ax
mov eax, dword [ebp - 0x1530]
mov esi, dword [ecx]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp], ecx
call dword [esi + 0x14]
sub esp, 0x14
mov edi, eax
test eax, eax
js 0x10002d98
mov eax, dword [ebp - 0x1550]
mov dword [esp], eax
call dword [sym.imp.shlwapi.dll_PathFindExtensionW]
mov esi, eax
sub esp, 4
xor eax, eax
mov esi, esi
lea edi, [edi]
movzx edx, word [esi + eax]
mov word [ebp + eax - 0x1218], dx
add eax, 2
test dx, dx
jne 0x10002b80
mov eax, dword [ebp - 0x1550]
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp], eax
mov eax, dword [sym.imp.kernel32.dll_CreateFileW]
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov dword [esp + 4], 0x40000000
mov dword [ebp - 0x1554], eax
call eax
sub esp, 0x1c
mov edx, eax
cmp eax, 0xffffffff
jne 0x10002cb1
mov eax, dword fs:[0x18]
mov dword [ebp - 0x155c], eax
mov edi, 1
mov dword [ebp - 0x1558], ebx
mov ebx, eax
lea esi, [esi]
cmp dword [ebx + 0x34], 0x50
jne 0x10002e90
add edi, 1
mov dword [esp + 4], str.___u_
mov dword [esp + 8], edi
mov dword [esp], esi
call dword [sym.imp.user32.dll_wsprintfW]
cmp word [esi], 0
mov edx, esi
je 0x10002c41
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x10002c38
xor eax, eax
nop
lea esi, [esi]
movzx ecx, word [ebp + eax - 0x1218]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x10002c48
mov eax, dword [ebp - 0x1550]
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp], eax
mov eax, dword [ebp - 0x1554]
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov dword [esp + 4], 0x40000000
call eax
sub esp, 0x1c
cmp eax, 0xffffffff
je 0x10002c08
mov ebx, dword [ebp - 0x1558]
mov edx, eax
test byte [0x10005068], 8
jne 0x10002f7b
mov eax, dword [ebp - 0x1548]
test eax, eax
je 0x100031eb
lea esi, [ebp - 0x1538]
lea ebx, [ebp - 0x1010]
mov edi, edx
mov dword [ebp - 0x1554], esi
jmp 0x10002d30
mov edx, dword [ebp - 0x1538]
test edx, edx
je 0x10002f30
lea eax, [ebp - 0x1534]
sub dword [ebp - 0x1548], edx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], edx
mov dword [esp + 4], ebx
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_WriteFile]
mov eax, dword [ebp - 0x1548]
sub esp, 0x14
test eax, eax
je 0x10002f68
mov edx, dword [ebp - 0x154c]
mov esi, dword [ebp - 0x1554]
cmp eax, 0x1000
mov ecx, dword [edx]
mov dword [esp + 0xc], esi
mov esi, 0x1000
cmova eax, esi
mov dword [esp + 4], ebx
mov dword [esp], edx
mov dword [esp + 8], eax
call dword [ecx + 0xc]
sub esp, 0x10
test eax, eax
jns 0x10002ce8
mov edx, edi
mov edi, eax
test byte [0x10005068], 8
jne 0x100030c3
mov dword [esp], edx
call dword [sym.imp.kernel32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x1550]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_DeleteFileW]
sub esp, 4
nop
lea esi, [esi]
mov eax, dword [ebp - 0x154c]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
sub esp, 4
test byte [0x10005068], 8
jne 0x10002dc8
lea esp, [ebp - 0x10]
mov eax, edi
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 8
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], str.Returning:__08lx_n
mov dword [esp + 8], str.PersistStorage_Load
mov dword [esp + 4], 0x10005068
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
lea esp, [ebp - 0x10]
mov eax, edi
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 8
lea eax, [ebx - 4]
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.__p_____p__n
mov dword [esp + 8], str.PersistStorage_Load
mov dword [esp + 4], 0x10005068
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
jmp 0x1000281f
test byte [0x10005068], 8
je 0x10002db2
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.OpenStream_gave:__08lx_n
mov dword [esp + 8], str.PersistStorage_Load
mov dword [esp + 4], 0x10005068
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
jmp 0x10002db2
cmp word [ebp - 0x1420], 0x5c
mov esi, edx
jne 0x10002acc
jmp 0x10002ac1
mov edi, 0x80004005
test byte [0x10005068], 4
je 0x10002d98
mov eax, dword [ebp - 0x155c]
mov eax, dword [eax + 0x34]
mov dword [esp + 0xc], str.CreateFile_failed:__lu_n
mov dword [esp + 8], str.PersistStorage_Load
mov dword [esp + 0x10], eax
mov dword [esp + 4], 0x10005068
mov dword [esp], 2
call sym._wine_dbg_log.constprop.0
jmp 0x10002d98
mov eax, dword [ebp - 0x1544]
test eax, eax
je 0x10002a57
mov ecx, dword [ebp - 0x154c]
lea edx, [ebp - 0x1420]
add eax, eax
mov dword [ebp - 0x1550], edx
mov esi, dword [ecx]
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], edx
mov dword [esp], ecx
call dword [esi + 0xc]
sub esp, 0x10
mov edi, eax
test eax, eax
js 0x10002d98
mov edi, dword [ebp - 0x1544]
mov edx, dword [ebp - 0x1550]
jmp 0x10002aa3
mov edx, edi
mov edi, eax
test byte [0x10005068], 8
jne 0x100030c3
cmp edi, 1
jbe 0x100030fc
mov dword [esp], edx
call dword [sym.imp.kernel32.dll_CloseHandle]
sub esp, 4
test edi, edi
jns 0x10002d98
jmp 0x10002d81
mov dword [esp], edi
xor edi, edi
call dword [sym.imp.kernel32.dll_CloseHandle]
sub esp, 4
jmp 0x10002d98
mov eax, dword [ebp - 0x1550]
mov dword [ebp - 0x1554], edx
shr eax, 0x10
je 0x100031a9
mov eax, dword [ebp - 0x1550]
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, dword [ebp - 0x1554]
mov ecx, str._invalid_
sub esp, 8
test eax, eax
jne 0x1000308a
cmp word [ebx + 8], 0
je 0x100031cd
mov esi, eax
lea eax, [eax + 1]
cmp word [ebx + esi*2 + 0xa], 0
jne 0x10002fc8
mov word [ebp - 0x1010], 0x224c
mov edi, dword [ebp - 0x1550]
lea ecx, [ebp - 0x100e]
jmp 0x1000301f
cmp ax, 9
je 0x10003123
cmp ax, 0xa
jne 0x1000313d
mov eax, 0x6e5c
add ecx, 2
mov word [ecx - 2], ax
lea eax, [esi - 1]
test esi, esi
jle 0x10003053
lea ebx, [ebp - 0xeee]
cmp ecx, ebx
ja 0x10003053
mov esi, eax
movzx eax, word [edi]
add edi, 2
cmp ax, 0xd
je 0x10003112
jbe 0x10002fec
cmp ax, 0x22
je 0x1000318e
cmp ax, 0x5c
jne 0x10003134
mov ebx, 0x5c5c
add ecx, 2
mov word [ecx - 2], bx
jmp 0x1000300c
mov byte [ecx], 0x22
test eax, eax
jle 0x100031e3
mov word [ecx + 1], 0x2e2e
lea eax, [ecx + 4]
mov byte [ecx + 3], 0x2e
lea ebx, [ebp - 0x1010]
mov byte [eax], 0
mov dword [esp], ebx
mov dword [ebp - 0x1554], edx
call sym.___wine_dbg_strdup
mov edx, dword [ebp - 0x1554]
mov ecx, eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], str.Final_filename:__s_n
mov dword [esp + 8], str.PersistStorage_Load
mov dword [esp + 4], 0x10005068
mov dword [esp], 3
mov dword [ebp - 0x1554], edx
call sym._wine_dbg_log.constprop.0
mov edx, dword [ebp - 0x1554]
jmp 0x10002cbe
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], str.Unexpected_end_of_file__or_Read_failed_with__08lx_n
mov dword [esp + 8], str.PersistStorage_Load
mov dword [esp + 4], 0x10005068
mov dword [esp], 3
mov dword [ebp - 0x1554], edx
call sym._wine_dbg_log.constprop.0
mov edx, dword [ebp - 0x1554]
jmp 0x10002f41
mov dword [esp], edx
mov edi, 0x80004005
call dword [sym.imp.kernel32.dll_CloseHandle]
sub esp, 4
jmp 0x10002d81
mov eax, 0x725c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x1000300c
mov eax, 0x745c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x1000300c
lea ebx, [eax - 0x20]
cmp bx, 0x5e
jbe 0x1000319f
mov ebx, eax
mov byte [ecx], 0x5c
add ecx, 5
shr bx, 0xc
movzx ebx, bx
movzx ebx, byte [ebx + str.0123456789abcdefdiscard_string]
mov byte [ecx - 4], bl
mov ebx, eax
shr bx, 8
and ebx, 0xf
movzx ebx, byte [ebx + str.0123456789abcdefdiscard_string]
mov byte [ecx - 3], bl
mov ebx, eax
and eax, 0xf
shr bx, 4
movzx eax, byte [eax + str.0123456789abcdefdiscard_string]
and ebx, 0xf
movzx ebx, byte [ebx + str.0123456789abcdefdiscard_string]
mov byte [ecx - 1], al
mov byte [ecx - 2], bl
jmp 0x1000300c
mov eax, 0x225c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x1000300c
mov byte [ecx], al
add ecx, 1
jmp 0x1000300c
movzx eax, word [ebp - 0x1550]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call sym._wine_dbg_sprintf
mov edx, dword [ebp - 0x1554]
mov ecx, eax
jmp 0x1000308a
mov word [ebp - 0x1010], 0x224c
lea ecx, [ebp - 0x100e]
mov byte [ebp - 0x100e], 0x22
lea eax, [ecx + 1]
jmp 0x1000306b
mov dword [esp], edx
xor edi, edi
call dword [sym.imp.kernel32.dll_CloseHandle]
push eax
jmp 0x10002d98