Function at 0x1027a4a
Capabilities:
Set file attributes

Disassembly:
mov eax, 0x108cce2
call fcn.01027038
sub esp, 0x27c
mov eax, dword [0x10a1e18]
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0xc]
push edi
mov edi, dword [ebp + 0x10]
mov esi, ecx
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x234], edi
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], ebx
mov al, byte [esi + 0xc0]
cmp al, 1
mov dword [ebp - 4], ebx
je 0x1027ab2
cmp byte [ebp + 0x14], 1
je 0x1027aa6
cmp byte [ebp + 0x18], 1
jne 0x1027ab2
push edi
push 0x1003828
push ebx
jmp 0x1027d03
mov eax, dword [ebp + 8]
push edi
push dword [eax*4 + 0x1002fbc]
push 0x10037f0
push ebx
push esi
call fcn.01029592
add esp, 0x14
cmp edi, ebx
je 0x1027de3
push edi
call dword [sym.imp.msvcrt.dll_wcslen]
test eax, eax
pop ecx
je 0x1027de3
cmp byte [ebp + 0x14], bl
jne 0x1027af2
cmp byte [ebp + 0x18], bl
je 0x1027b91
push 0x1002ae4
push edi
call dword [sym.imp.ntdll.dll_wcsstr]
test eax, eax
pop ecx
pop ecx
je 0x1027b0e
push 0x1003778
jmp 0x1027dd4
cmp byte [ebp + 0x14], bl
je 0x1027b58
push 1
lea eax, [ebp - 0x230]
push eax
lea ecx, [esi + 0x24c]
call fcn.01042dfb
mov edi, eax
cmp edi, ebx
jl 0x1027dfb
mov eax, dword [esi + 0x264]
cmp byte [eax + 0x7c], bl
mov eax, 0x1003764
jne 0x1027b46
mov eax, 0x100374c
push eax
lea ecx, [ebp - 0x230]
call fcn.0101a383
mov edi, dword [ebp - 0x234]
cmp byte [ebp + 0x18], bl
je 0x1027b91
mov ecx, esi
call fcn.0102981c
cmp eax, ebx
jge 0x1027b73
push 0x1003708
push eax
jmp 0x1027dd9
lea ecx, [esi + 0x6c]
call fcn.01040280
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x230]
call fcn.0101a55d
mov ecx, esi
call fcn.010295b3
push 0x1003700
push edi
call dword [sym.imp.ntdll.dll_wcsstr]
test eax, eax
pop ecx
pop ecx
jne 0x1027dcf
push 0x1002d48
push edi
call dword [sym.imp.ntdll.dll_wcsstr]
test eax, eax
pop ecx
pop ecx
jne 0x1027dcf
cmp byte [ebp + 0x14], bl
jne 0x1027c01
cmp byte [ebp + 0x18], bl
jne 0x1027c01
mov eax, dword [esi + 0x2c]
cmp eax, ebx
mov ecx, 0x1001eb0
mov edx, ecx
je 0x1027bd7
mov edx, eax
mov eax, dword [esi + 0x264]
add eax, 0x3c
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x1027be9
mov eax, ecx
push 0x103
lea ecx, [ebp - 0x218]
push ecx
push edx
push eax
push edi
mov ecx, esi
call fcn.010276c4
jmp 0x1027c3c
lea eax, [ebp - 0x230]
push eax
call fcn.010219e1
mov eax, dword [ebp - 0x22c]
cmp eax, ebx
jne 0x1027c1c
mov eax, 0x1001eb0
push edi
push eax
push 0x10036f4
lea eax, [ebp - 0x218]
push 0x103
push eax
call dword [sym.imp.ntdll.dll__snwprintf]
add esp, 0x14
mov word [ebp - 0x12], bx
cmp word [ebp - 0x218], bx
lea eax, [ebp - 0x218]
je 0x1027c5d
cmp word [eax], 0x2f
jne 0x1027c56
mov word [eax], 0x5c
inc eax
inc eax
cmp word [eax], bx
jne 0x1027c4b
push 0x80
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp dword [ebp + 8], ebx
jne 0x1027d42
mov eax, dword [ebp - 0x220]
cmp eax, ebx
je 0x1027d38
cmp word [eax], bx
je 0x1027d38
push 0x1400000
push 0x10036d0
call fcn.010220ac
mov edi, eax
cmp edi, ebx
jl 0x1027dfb
lea eax, [ebp - 0x219]
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x244]
call fcn.0101a5f5
push 1
lea eax, [ebp - 0x244]
push eax
mov byte [ebp - 4], 1
call fcn.01021e1d
mov edi, eax
cmp edi, ebx
push 1
lea ecx, [ebp - 0x244]
setl byte [ebp - 0x219]
mov byte [ebp - 4], bl
call fcn.0101937d
cmp byte [ebp - 0x219], bl
lea eax, [ebp - 0x218]
je 0x1027d13
push eax
push 0x1003690
push edi
push esi
call fcn.01029592
add esp, 0x10
mov edi, eax
jmp 0x1027df7
push dword [ebp - 0x220]
mov ecx, dword [esi + 0x264]
push eax
lea eax, [esi + 0x38]
push eax
call fcn.01043d41
mov edi, eax
cmp edi, ebx
jl 0x1027dfb
jmp 0x1027dcb
push 0x1003648
jmp 0x1027dd4
push ebx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x288]
call fcn.0101f093
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 2
call fcn.0101ed27
test al, al
je 0x1027d81
cmp byte [ebp + 0x14], bl
jne 0x1027d72
cmp byte [ebp + 0x18], bl
je 0x1027d81
lea eax, [ebp - 0x218]
push eax
push 0x10035a0
push ebx
jmp 0x1027da2
push 1
push 1
lea ecx, [ebp - 0x288]
call fcn.0101f4aa
test eax, eax
jge 0x1027dbd
lea eax, [ebp - 0x218]
push eax
push 0x1003550
push 0xfffffffffffffffe
push esi
call fcn.01029592
add esp, 0x10
lea ecx, [ebp - 0x288]
mov edi, eax
mov byte [ebp - 4], bl
call fcn.0101ee6c
jmp 0x1027df7
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], bl
call fcn.0101ee6c
xor edi, edi
jmp 0x1027e0a
push 0x10034e8
push 0x80070057
push esi
call fcn.01029592
mov edi, eax
jmp 0x1027df4
push 0x10032ec
mov edi, 0x80070057
push edi
push esi
call fcn.01029592
add esp, 0xc
cmp edi, ebx
jge 0x1027e0a
push 0x10034a0
push edi
push esi
call fcn.01029592
add esp, 0xc
push 1
lea ecx, [ebp - 0x230]
call fcn.0101937d
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop ebx
call fcn.0101cfd1
leave
ret 0x14