Function at 0x467a10
Capabilities:
Delete file
Get common file path
Get file size
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x460
mov eax, dword [0x604e14]
xor eax, ebp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x45c], ecx
lea eax, [ebp - 0x228]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea ecx, [ebp - 0x450]
push ecx
push 0
push 0x5af9cc
lea edx, [ebp - 0x228]
push edx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
push 0
push 0
push 2
push 0
push 1
push 0xc0000000
lea eax, [ebp - 0x450]
push eax
call fcn.00460cf0
add esp, 0x1c
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0xffffffff
jne 0x467a8a
xor eax, eax
jmp 0x467d56
push 0
lea ecx, [ebp - 8]
push ecx
mov ecx, dword [ebp - 0x45c]
call fcn.0045bce0
push eax
mov edx, dword [ebp - 0x45c]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, dword [ebp - 0x22c]
push edx
call fcn.00460e10
add esp, 4
mov eax, dword [ebp + 8]
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 8]
add ecx, 6
mov dword [ebp - 0x230], ecx
push 0
lea edx, [ebp - 0x450]
push edx
call fcn.00480940
add esp, 8
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x230]
mov ecx, dword [eax + 0xc]
add ecx, dword [ebp + 8]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x230]
mov eax, dword [edx + 8]
add eax, 4
push eax
call fcn.00526059
add esp, 4
mov dword [ebp - 0x454], eax
mov ecx, dword [ebp - 0x454]
mov dword [ebp - 0x244], ecx
mov byte [ebp - 0xc], 1
mov byte [ebp - 0xb], 0
mov byte [ebp - 0xa], 1
mov byte [ebp - 9], 0
mov byte [ebp - 0x240], 1
mov byte [ebp - 0x23f], 0
mov byte [ebp - 0x23e], 1
mov byte [ebp - 0x23d], 0
mov byte [ebp - 0x238], 2
mov byte [ebp - 0x237], 0
mov byte [ebp - 0x236], 2
mov byte [ebp - 0x235], 0
mov byte [ebp - 0x18], 3
mov byte [ebp - 0x17], 0
mov byte [ebp - 0x16], 3
mov byte [ebp - 0x15], 0
push 4
lea edx, [ebp - 0xc]
push edx
mov eax, dword [ebp - 0x244]
push eax
call fcn.00556dd0
add esp, 0xc
mov ecx, dword [ebp - 0x230]
movzx edx, byte [ecx]
cmp edx, 0x10
jne 0x467bb6
push 4
lea eax, [ebp - 0x240]
push eax
mov ecx, dword [ebp - 0x244]
push ecx
call fcn.00556dd0
add esp, 0xc
jmp 0x467c01
mov edx, dword [ebp - 0x230]
movzx eax, byte [edx]
cmp eax, 0x20
jne 0x467bde
push 4
lea ecx, [ebp - 0x238]
push ecx
mov edx, dword [ebp - 0x244]
push edx
call fcn.00556dd0
add esp, 0xc
jmp 0x467c01
mov eax, dword [ebp - 0x230]
movzx ecx, byte [eax]
cmp ecx, 0x30
jne 0x467c01
push 4
lea edx, [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x244]
push eax
call fcn.00556dd0
add esp, 0xc
mov ecx, dword [ebp - 0x230]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x244]
add ecx, 4
push ecx
call fcn.00556dd0
add esp, 0xc
cmp dword [ebp + 0x10], 0
je 0x467c32
mov edx, dword [ebp + 0x18]
mov dword [ebp - 0x460], edx
jmp 0x467c3c
movzx eax, word [ebp + 0x14]
mov dword [ebp - 0x460], eax
mov ecx, dword [ebp - 0x230]
mov edx, dword [ecx + 8]
add edx, 4
push edx
mov eax, dword [ebp - 0x244]
push eax
movzx ecx, word [ebp + 0x1c]
push ecx
mov edx, dword [ebp - 0x460]
push edx
push 1
mov eax, dword [ebp - 0x23c]
push eax
call dword [sym.imp.KERNEL32.dll_UpdateResourceW]
mov ecx, dword [ebp - 0x244]
mov dword [ebp - 0x458], ecx
mov edx, dword [ebp - 0x458]
push edx
call fcn.0052604e
add esp, 4
push 0
mov eax, dword [ebp - 0x23c]
push eax
call fcn.00480b70
add esp, 8
push 0x8000
push 0
mov ecx, dword [ebp - 0x45c]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualFree]
push 0
push 0
push 3
push 0
push 1
push 0xc0000000
lea eax, [ebp - 0x450]
push eax
call fcn.00460cf0
add esp, 0x1c
mov dword [ebp - 0x22c], eax
push 0
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x234], eax
mov edx, dword [ebp - 0x234]
push edx
call fcn.0045ee00
add esp, 4
mov dword [ebp - 0x10], eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, dword [ebp - 0x234]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x22c]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov ecx, dword [ebp - 0x22c]
push ecx
call fcn.00460e10
add esp, 4
lea edx, [ebp - 0x450]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [ebp - 0x45c]
mov dword [eax + 0xc], 1
mov ecx, dword [ebp - 0x234]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov ecx, dword [ebp - 0x45c]
call fcn.00461100
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.00555ac5
mov esp, ebp
pop ebp
ret 0x18