Function at 0x1026fcf
Capabilities:
Reference absolute stream path on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ebx
push esi
mov esi, dword [ebp + 8]
mov ebx, ecx
test esi, esi
je 0x10274b2
mov eax, dword [ebp + 0x10]
mov dword [ebx + 0x148], eax
push edi
xor eax, eax
lea edi, [ebx + 0x10c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
lea edi, [ebx + 0x120]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x1027013
mov eax, dword [eax]
mov dword [ebx + 0x40], eax
mov eax, dword [esi + 8]
mov dword [ebx + 0x90], eax
mov eax, dword [esi + 0xc]
mov dword [ebx + 0x94], eax
mov eax, dword [esi + 4]
mov dword [ebx + 0x98], eax
mov eax, dword [esi + 0x10]
mov dword [ebx + 0x8c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebx + 0x114], eax
mov eax, dword [ebp + 0x18]
mov dword [ebx + 0x11c], eax
lea ecx, [ebx + 0x6c]
mov eax, dword [ecx + 0xc]
dec eax
push eax
call fcn.0101903f
mov edi, eax
xor eax, eax
cmp edi, eax
setne cl
movzx ecx, cl
push ecx
push 0x100280c
push eax
push eax
push eax
push 0x1010458
push dword [0x102e5ac]
push 4
call fcn.0102c428
movzx eax, byte [esi]
cmp eax, 9
jg 0x1027291
je 0x1027214
mov ecx, eax
xor eax, eax
sub ecx, eax
je 0x10271fc
sub ecx, 5
je 0x10271ac
dec ecx
je 0x102716d
dec ecx
je 0x1027134
dec ecx
jne 0x10272ad
cmp word [ebp + 0xc], 0x38
sete cl
movzx ecx, cl
push ecx
push 0x100280c
push eax
push eax
push eax
push 0x10103b8
push dword [0x102e5ac]
push 4
call fcn.0102c428
mov dword [ebx + 0x134], 3
mov eax, dword [esi + 0x18]
mov dword [edi + 0xc], eax
mov byte [edi + 0x1c], 3
push dword [esi + 0x20]
lea eax, [esi + 0x28]
push eax
push dword [esi + 0x30]
mov ecx, edi
call fcn.01021efe
xor eax, eax
cmp byte [esi + 0x14], al
setne al
cmp dword [ebp + 0x10], 2
mov dword [ebx + 0x138], eax
mov al, byte [esi + 0x15]
mov byte [ebx + 0x144], al
jne 0x10274b1
cmp dword [esi + 0x30], 0
jbe 0x10274b1
jmp 0x1027399
cmp word [ebp + 0xc], 0x20
sete cl
movzx ecx, cl
push ecx
push 0x100280c
push eax
push eax
push eax
push 0x1010318
push dword [0x102e5ac]
push 4
call fcn.0102c428
mov dword [ebx + 0x134], 2
mov eax, dword [esi + 0x18]
mov byte [edi + 0x1c], 2
jmp 0x10271a4
cmp word [ebp + 0xc], 0x20
sete cl
movzx ecx, cl
push ecx
push 0x100280c
push eax
push eax
push eax
push 0x1010278
push dword [0x102e5ac]
push 4
call fcn.0102c428
mov dword [ebx + 0x134], 6
mov eax, dword [esi + 0x18]
mov byte [edi + 0x1c], 6
mov dword [edi + 0xc], eax
jmp 0x10273e8
cmp word [ebp + 0xc], 0x30
sete cl
movzx ecx, cl
push ecx
push 0x100280c
push eax
push eax
push eax
push 0x10101d8
push dword [0x102e5ac]
push 4
call fcn.0102c428
mov dword [ebx + 0x134], 1
mov byte [edi + 0x1c], 1
push dword [esi + 0x28]
movzx eax, word [esi + 0x26]
push eax
movzx eax, word [esi + 0x24]
push eax
push dword [esi + 0x20]
mov ecx, edi
call fcn.010261cd
jmp 0x10273e8
mov dword [ebx + 0x134], eax
mov byte [edi + 0x1c], al
mov dword [ebx + 0x138], 1
jmp 0x10274b1
cmp word [ebp + 0xc], 0x38
sete al
movzx eax, al
push eax
push 0x100280c
xor eax, eax
push eax
push eax
push eax
push 0x1010138
push dword [0x102e5ac]
push 4
call fcn.0102c428
mov dword [ebx + 0x134], 4
mov eax, dword [esi + 0x18]
mov dword [edi + 0xc], eax
mov byte [edi + 0x1c], 4
push dword [esi + 0x20]
lea eax, [esi + 0x28]
push eax
push dword [esi + 0x30]
mov ecx, edi
call fcn.01021fac
xor eax, eax
cmp byte [esi + 0x14], al
setne al
cmp dword [ebp + 0x10], 2
mov dword [ebx + 0x138], eax
mov al, byte [esi + 0x15]
mov byte [ebx + 0x144], al
jne 0x10274b1
cmp dword [esi + 0x30], 0
jbe 0x10274b1
jmp 0x102732d
sub eax, 0xa
je 0x1027404
dec eax
je 0x10273a5
dec eax
je 0x1027339
dec eax
je 0x10272cd
xor eax, eax
push eax
push 0x1010110
push eax
push eax
push eax
push 0x1010070
push dword [0x102e5ac]
push 4
call fcn.0102c428
jmp 0x10274b1
cmp word [ebp + 0xc], 0x38
sete al
movzx eax, al
push eax
push 0x100280c
xor eax, eax
push eax
push eax
push eax
push 0x100ffd0
push dword [0x102e5ac]
push 4
call fcn.0102c428
mov dword [ebx + 0x134], 0xd
mov eax, dword [esi + 0x18]
mov byte [edi + 0x1c], 0xd
mov dword [edi + 0xc], eax
push dword [esi + 0x30]
mov ecx, edi
push dword [esi + 0x20]
call fcn.01021f5f
xor eax, eax
cmp byte [esi + 0x14], al
setne al
mov dword [ebx + 0x138], eax
mov al, byte [esi + 0x15]
mov byte [ebx + 0x144], al
or dword [ebx + 0xac], 1
jmp 0x10274b1
cmp word [ebp + 0xc], 0x38
sete al
movzx eax, al
push eax
push 0x100280c
xor eax, eax
push eax
push eax
push eax
push 0x100ff30
push dword [0x102e5ac]
push 4
call fcn.0102c428
mov dword [ebx + 0x134], 0xc
mov eax, dword [esi + 0x18]
mov byte [edi + 0x1c], 0xc
mov dword [edi + 0xc], eax
push dword [esi + 0x30]
mov ecx, edi
push dword [esi + 0x20]
call fcn.01021f5f
xor eax, eax
cmp byte [esi + 0x14], al
setne al
mov dword [ebx + 0x138], eax
mov al, byte [esi + 0x15]
mov byte [ebx + 0x144], al
or dword [ebx + 0xac], 2
jmp 0x10274b1
cmp word [ebp + 0xc], 0x20
sete al
movzx eax, al
push eax
push 0x100280c
xor eax, eax
push eax
push eax
push eax
push 0x100fe90
push dword [0x102e5ac]
push 4
call fcn.0102c428
mov dword [ebx + 0x134], 0xb
mov eax, dword [esi + 0x18]
mov ecx, edi
mov byte [edi + 0x1c], 0xb
mov dword [edi + 0xc], eax
call fcn.01026222
xor eax, eax
cmp byte [esi + 0x14], al
setne al
mov dword [ebx + 0x138], eax
mov al, byte [esi + 0x15]
mov byte [ebx + 0x144], al
jmp 0x10274b1
cmp word [ebp + 0xc], 0x38
sete al
movzx eax, al
push eax
push 0x100280c
xor eax, eax
push eax
push eax
push eax
push 0x100fdf0
push dword [0x102e5ac]
push 4
call fcn.0102c428
mov eax, dword [esi + 0x20]
mov dword [ebx + 0x134], 5
and eax, 3
mov dword [ebp + 0xc], eax
mov eax, dword [esi + 0x18]
mov byte [edi + 0x1c], 5
mov dword [edi + 0xc], eax
push dword [esi + 0x34]
mov ecx, edi
push dword [esi + 0x30]
push dword [esi + 0x20]
call fcn.0102200d
xor eax, eax
cmp byte [esi + 0x14], al
setne al
mov dword [ebx + 0x138], eax
mov al, byte [esi + 0x15]
mov byte [ebx + 0x144], al
xor eax, eax
cmp dword [esi + 0x30], eax
jbe 0x102747e
or dword [ebx + 0xac], 1
cmp dword [esi + 0x34], eax
jbe 0x10274b1
cmp dword [ebp + 0xc], eax
je 0x1027494
cmp dword [ebp + 0xc], 3
je 0x1027494
cmp dword [ebp + 0x10], 2
jne 0x102749b
or dword [ebx + 0xac], 2
cmp dword [ebp + 0xc], 1
jne 0x10274aa
or dword [ebx + 0xac], 8
jmp 0x10274b1
or dword [ebx + 0xac], 4
pop edi
pop esi
pop ebx
pop ebp
ret 0x18