Function at 0x101a52a
Capabilities:
Set file attributes
Write file on windows

Disassembly:
push 0x24c
mov eax, 0x101d7ff
call fcn.0100f9b0
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x248], eax
cmp eax, ebx
je 0x101a54d
mov dword [eax], ebx
cmp esi, ebx
je 0x101a87a
cmp eax, ebx
je 0x101a87a
lea eax, [ebp - 0x258]
xor edi, edi
push eax
mov dword [ebp - 0x224], edi
mov dword [ebp - 0x234], ebx
mov dword [ebp - 0x230], ebx
mov dword [ebp - 0x238], ebx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x220], ebx
mov eax, dword [esi]
lea ecx, [ebp - 0x220]
push ecx
push 0x1002fa4
push esi
mov byte [ebp - 4], 1
call dword [eax]
cmp eax, ebx
jl 0x101a5ea
mov eax, dword [esi]
lea ecx, [ebp - 0x234]
push ecx
push esi
call dword [eax + 0x14]
cmp eax, ebx
je 0x101a5dd
lea eax, [ebp - 0x234]
push eax
call fcn.01012728
cmp eax, ebx
jl 0x101a5ea
lea eax, [ebp - 0x234]
push eax
push dword [ebp - 0x220]
call fcn.0101840c
cmp eax, ebx
jl 0x101a5ea
mov eax, dword [esi]
lea ecx, [ebp - 0x238]
push ecx
push esi
call dword [eax + 0x18]
mov eax, dword [esi]
lea ecx, [ebp - 0x23c]
push ecx
push esi
call dword [eax + 0x48]
test eax, eax
jge 0x101a605
mov dword [ebp - 0x23c], 0xc96441
xor eax, eax
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
or dword [ebp - 0x22c], 0xffffffff
lea eax, [ebp - 0x22c]
push eax
call fcn.0101974d
mov esi, eax
cmp esi, ebx
jl 0x101a6c4
push dword [ebp - 0x23c]
lea eax, [ebp - 0x218]
push 0xffffffffffffffff
push dword [ebp - 0x230]
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push dword [ebp - 0x22c]
push 0x104
push eax
call fcn.0101926a
mov esi, eax
cmp esi, ebx
jl 0x101a6c4
push ebx
push ebx
push 1
push ebx
push 2
push 2
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.API_MS_Win_Core_File_L1_1_0.dll_CreateFileW]
mov dword [ebp - 0x240], eax
cmp eax, 0xffffffff
jne 0x101a6eb
call dword [sym.imp.API_MS_Win_Core_ErrorHandling_L1_1_0.dll_GetLastError]
cmp eax, 0x50
je 0x101a62a
cmp eax, 0xb7
je 0x101a62a
mov eax, dword [ebp - 0x220]
mov byte [ebp - 4], bl
cmp eax, ebx
je 0x101a6bd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, 0x80004005
jmp 0x101a6d7
mov eax, dword [ebp - 0x220]
mov byte [ebp - 4], bl
cmp eax, ebx
je 0x101a6d7
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x258]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, esi
jmp 0x101a87f
lea eax, [ebp - 0x258]
push eax
push dword [ebp - 0x220]
call fcn.0101810b
mov dword [ebp - 0x21c], eax
mov eax, 0x2011
cmp ax, word [ebp - 0x258]
jne 0x101a71f
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x224], eax
mov edi, eax
xor eax, eax
cmp dword [ebp - 0x21c], ebx
mov dword [ebp - 0x228], ebx
jl 0x101a76c
cmp edi, ebx
je 0x101a752
lea eax, [ebp - 0x228]
push eax
push edi
call dword [sym.imp.OLEAUT32.dll_SafeArrayUnaccessData]
mov dword [ebp - 0x21c], eax
mov eax, dword [edi + 0x10]
cmp dword [ebp - 0x228], ebx
jne 0x101a764
cmp dword [ebp - 0x21c], ebx
jl 0x101a76c
mov dword [ebp - 0x21c], 0x80004005
cmp dword [ebp - 0x21c], ebx
jge 0x101a795
cmp edi, ebx
je 0x101a777
push edi
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetElement]
mov eax, dword [ebp - 0x220]
mov byte [ebp - 4], bl
cmp eax, ebx
je 0x101a78a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [ebp - 0x21c]
jmp 0x101a6d7
push ebx
lea ecx, [ebp - 0x244]
push ecx
push eax
push dword [ebp - 0x228]
mov dword [ebp - 0x244], ebx
push dword [ebp - 0x240]
call dword [sym.imp.API_MS_Win_Core_File_L1_1_0.dll_WriteFile]
mov edi, 0xffff
mov esi, 0x80070000
test eax, eax
jne 0x101a7d8
call dword [sym.imp.API_MS_Win_Core_ErrorHandling_L1_1_0.dll_GetLastError]
cmp eax, ebx
jle 0x101a7d2
and eax, edi
or eax, esi
mov dword [ebp - 0x21c], eax
push dword [ebp - 0x240]
call dword [sym.imp.API_MS_Win_Core_Handle_L1_1_0.dll_CloseHandle]
test eax, eax
jne 0x101a804
cmp dword [ebp - 0x21c], ebx
jl 0x101a804
call dword [sym.imp.API_MS_Win_Core_ErrorHandling_L1_1_0.dll_GetLastError]
cmp eax, ebx
jle 0x101a7fe
and eax, edi
or eax, esi
mov dword [ebp - 0x21c], eax
push 0x2000
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.API_MS_Win_Core_File_L1_1_0.dll_SetFileAttributesW]
cmp dword [ebp - 0x224], ebx
je 0x101a82a
push dword [ebp - 0x224]
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetElement]
cmp dword [ebp - 0x21c], ebx
jl 0x101a852
mov eax, dword [ebp - 0x22c]
mov ecx, dword [ebp - 0x248]
push eax
push dword [ebp - 0x220]
mov dword [ecx], eax
call fcn.01018196
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x220]
mov byte [ebp - 4], bl
cmp eax, ebx
je 0x101a865
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x258]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [ebp - 0x21c]
jmp 0x101a87f
mov eax, 0x80070057
call fcn.0100fa42
ret 8