Function at 0x10276f3
Capabilities:
Reference absolute stream path on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
mov ebx, ecx
mov eax, dword [ebx + 0x40]
mov ecx, dword [ebx + 0x3c]
push esi
xor esi, esi
mov dword [ebp - 0x14], eax
mov eax, dword [ecx]
mov dword [ebp - 4], esi
mov dword [ebp - 0x10], ecx
call dword [eax]
mov eax, dword [0x102e010]
cmp eax, 0x102e010
je 0x1027747
mov ecx, dword [eax + 0x9c]
test cl, 4
je 0x1027747
test ecx, ecx
jns 0x1027747
push 0x100e47c
push 0x12
push dword [eax + 0x94]
push dword [eax + 0x90]
call fcn.010165d0
lea eax, [ebx + 0xf8]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0x88]
cmp al, 0x16
jne 0x102788c
lea edi, [ebx + 0x164]
cmp edi, esi
setne al
movzx eax, al
push eax
push 0x1009398
push esi
push esi
push esi
push 0x1010b80
push dword [0x102e5ac]
push 4
call fcn.0102c428
mov dword [edi], esi
mov eax, dword [ebx + 0x98]
cmp eax, esi
mov dword [ebp - 0xc], eax
setne al
movzx eax, al
push eax
push 0x1004b14
push esi
push esi
push esi
push 0x1010ab8
push dword [0x102e5ac]
push 4
call fcn.0102c428
mov edi, dword [ebx + 0x7c]
cmp edi, esi
setne al
movzx eax, al
push eax
push 0x1004a3c
push esi
push esi
push esi
push 0x10109f0
push dword [0x102e5ac]
push 4
call fcn.0102c428
mov edi, dword [edi + 0x58]
cmp edi, esi
setne al
movzx eax, al
push eax
push 0x100495c
push esi
push esi
push esi
push 0x1010928
push dword [0x102e5ac]
mov dword [ebp - 8], edi
push 4
call fcn.0102c428
cmp dword [0x102e46c], esi
je 0x102788c
cmp byte [0x102e435], 0
mov al, byte [0x102e470]
je 0x102782e
cmp al, 4
jae 0x1027823
test al, al
jne 0x102788c
test byte [0x102e468], 1
jne 0x102786b
jmp 0x102788c
cmp al, 4
jae 0x1027836
test al, al
jne 0x102788c
mov eax, dword [0x102e458]
mov ecx, dword [0x102e45c]
mov esi, 0x40000000
and eax, 1
and ecx, esi
or eax, ecx
je 0x102788c
mov eax, dword [0x102e460]
mov edi, dword [0x102e464]
mov ecx, eax
mov edx, edi
and ecx, 1
and edx, esi
cmp ecx, eax
jne 0x102788c
cmp edx, edi
jne 0x102788c
push dword [ebp - 8]
push dword [ebp - 0xc]
push 0x10012e4
push 0x1001468
push dword [0x102e444]
push dword [0x102e440]
call fcn.01018396
mov eax, dword [ebx + 0xfc]
mov dword [eax + 0x48], 1
mov eax, dword [ebx]
push ebx
call dword [eax + 0x3c]
mov ecx, dword [ebx + 0xfc]
mov dword [ecx], eax
mov ecx, dword [ebx + 0x84]
mov eax, dword [ebx + 0xfc]
mov dword [eax + 4], ecx
mov edi, dword [ebx + 0xfc]
push 0x10
add edi, 8
pop ecx
lea esi, [ebx + 0x118]
rep movsd dword es:[edi], dword [esi]
lea edi, [ebx + 0x6c]
mov ecx, edi
call fcn.01026ed7
test al, al
je 0x1027a2d
cmp byte [ebx + 0x114], 0x1b
jne 0x10278f2
cmp byte [ebx + 0x115], 2
jne 0x10278f2
xor al, al
jmp 0x10278f5
xor eax, eax
inc eax
push eax
push 0x10108f4
xor esi, esi
push esi
push esi
push esi
push 0x1010830
push dword [0x102e5ac]
push 4
call fcn.0102c428
mov eax, dword [0x102e010]
cmp eax, 0x102e010
je 0x1027960
test byte [eax + 0x9c], 4
je 0x1027960
cmp byte [eax + 0x99], 5
jb 0x1027960
lea eax, [ebx + 0xf8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x84]
movzx eax, al
push eax
mov eax, dword [0x102e010]
push 0x100e47c
push 0x13
push dword [eax + 0x94]
push dword [eax + 0x90]
call fcn.010164b8
mov eax, dword [ebx]
push ebx
call dword [eax + 8]
mov eax, dword [ebx + 0xfc]
mov dword [eax + 0x4c], ebx
cmp dword [0x102e46c], esi
je 0x1027b8b
cmp byte [0x102e435], 0
mov al, byte [0x102e470]
je 0x1027991
cmp al, 4
jae 0x10279d4
test al, al
jmp 0x10279ce
cmp al, 4
jae 0x102799d
test al, al
jne 0x1027b8b
mov ecx, dword [0x102e45c]
mov edx, 0x80000000
and ecx, edx
xor eax, eax
or eax, ecx
je 0x1027b8b
mov ecx, dword [0x102e464]
mov eax, ecx
and eax, edx
xor edx, edx
cmp edx, dword [0x102e460]
jne 0x1027b8b
cmp eax, ecx
jne 0x1027b8b
push dword [ebx + 0x10c]
movzx eax, byte [ebx + 0x115]
push dword [ebx + 0x124]
push dword [ebx + 0x120]
push dword [ebx + 0x11c]
push dword [ebx + 0x118]
push eax
movzx eax, byte [ebx + 0x114]
push eax
mov eax, dword [ebx + 0x7c]
push dword [eax + 0x24]
push 0x102e5b4
push 0x10012c4
push 0x10013d8
push dword [0x102e444]
push dword [0x102e440]
call fcn.01018237
jmp 0x1027b8b
mov eax, dword [0x102e010]
cmp eax, 0x102e010
je 0x1027a7b
test byte [eax + 0x9c], 4
je 0x1027a7b
cmp byte [eax + 0x99], 5
jb 0x1027a7b
lea eax, [ebx + 0xf8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x84]
movzx eax, al
push eax
mov eax, dword [0x102e010]
push 0x100e47c
push 0x14
push dword [eax + 0x94]
push dword [eax + 0x90]
call fcn.010164b8
mov eax, dword [ebx + 0xfc]
xor esi, esi
mov dword [eax + 0x4c], esi
cmp dword [0x102e46c], esi
je 0x1027b2f
cmp byte [0x102e435], 0
mov al, byte [0x102e470]
je 0x1027aa8
cmp al, 4
jae 0x1027adb
test al, al
jmp 0x1027ad9
cmp al, 4
jae 0x1027ab0
test al, al
jne 0x1027b2f
mov ecx, dword [0x102e45c]
mov edx, 0x80000000
and ecx, edx
xor eax, eax
or eax, ecx
je 0x1027b2f
mov ecx, dword [0x102e464]
mov eax, ecx
and eax, edx
xor edx, edx
cmp edx, dword [0x102e460]
jne 0x1027b2f
cmp eax, ecx
jne 0x1027b2f
push dword [ebx + 0x10c]
movzx eax, byte [ebx + 0x115]
push dword [ebx + 0x124]
push dword [ebx + 0x120]
push dword [ebx + 0x11c]
push dword [ebx + 0x118]
push eax
movzx eax, byte [ebx + 0x114]
push eax
mov eax, dword [ebx + 0x7c]
push dword [eax + 0x24]
push 0x102e5b4
push 0x10012c4
push 0x10013b8
push dword [0x102e444]
push dword [0x102e440]
call fcn.01018237
mov ecx, edi
call fcn.010250a8
mov eax, dword [ebx]
push ebx
call dword [eax + 8]
push ebx
mov ecx, 0x102e080
mov dword [ebp - 4], 1
call fcn.0102636b
cmp byte [0x102e5a8], 0
je 0x1027b7a
cmp eax, esi
setne al
movzx eax, al
push eax
push 0x10107d8
push esi
push esi
push esi
push 0x1010710
push dword [0x102e5ac]
push 4
call fcn.0102c428
cmp dword [ebx + 0x160], esi
je 0x1027b8b
push 0
mov ecx, ebx
call fcn.01019458
mov esi, dword [ebp - 0x10]
mov eax, dword [esi]
push 0
push dword [ebp - 0x14]
mov ecx, esi
call dword [eax + 0x10]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
cmp dword [ebp - 4], 0
pop edi
je 0x1027bae
mov eax, dword [ebx]
push ebx
call dword [eax + 0xc]
mov eax, dword [0x102e010]
pop esi
pop ebx
cmp eax, 0x102e010
je 0x1027be3
mov ecx, dword [eax + 0x9c]
test cl, 4
je 0x1027be3
test ecx, ecx
jns 0x1027be3
push 0x100e47c
push 0x15
push dword [eax + 0x94]
push dword [eax + 0x90]
call fcn.010165d0
leave
ret