Function at 0x10062a80
Capabilities:
Set file attributes

Disassembly:
push ebp
lea ebp, [esp - 0x20c]
sub esp, 0x20c
push 0xfffffffffffffffe
push 0x10182dd0
push 0x10132540
mov eax, dword fs:[0]
push eax
sub esp, 0x38
mov eax, dword [0x10189710]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp + 0x208], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov esi, dword [ebp + 0x214]
mov dword [ebp - 0x24], esi
mov eax, dword [ebp + 0x21c]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp + 0x224]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp + 0x228]
mov dword [ebp - 0x2c], edx
test esi, esi
je 0x10063006
mov al, byte [esi]
test al, al
je 0x10063006
cmp al, 0x5c
jne 0x10062b07
cmp byte [esi + 1], al
je 0x10063006
mov dword [ebp - 0x1c], 0
push 2
push 0xb70
call fcn.1006aa20
add esp, 8
mov ebx, eax
mov dword [ebp - 0x20], ebx
test ebx, ebx
je 0x10063006
lea edi, [ebx + 8]
push esi
push edi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, edi
call fcn.10065200
push 0x10169e90
push edi
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov dword [ebp - 4], 0
lea esi, [ebx + 0xa30]
mov ecx, edi
call fcn.1005ae10
mov dword [ebx + 4], eax
cmp eax, 0xffffffff
je 0x10062fea
jmp 0x10062b70
mov dword [ebp - 0x44], 1
mov edi, dword [ebp - 0x20]
lea ebx, [edi + 0xa5c]
cmp byte [ebx], 0x2e
jne 0x10062bf5
mov ecx, 0x10157178
mov eax, ebx
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10062bb0
test dl, dl
je 0x10062bac
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10062bb0
add eax, 2
add ecx, 2
test dl, dl
jne 0x10062b90
xor eax, eax
jmp 0x10062bb5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x10062be9
mov ecx, 0x10158110
mov eax, ebx
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10062be0
test dl, dl
je 0x10062bdc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10062be0
add eax, 2
add ecx, 2
test dl, dl
jne 0x10062bc0
xor eax, eax
jmp 0x10062be5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10062bf5
mov dword [ebp - 0x44], 0
jmp 0x10062eed
add edi, 8
mov eax, dword [ebp - 0x24]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, edi
call fcn.10065200
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [esi]
test al, 0x10
jne 0x10062de3
mov esi, 1
mov dword [ebp - 0x38], esi
mov edi, dword [ebp - 0x3c]
test edi, edi
je 0x10062c52
push ebx
push edi
call fcn.10061b10
add esp, 8
mov esi, eax
mov dword [ebp - 0x38], esi
mov eax, 0x10169e94
mov ecx, edi
call fcn.1005a090
test eax, eax
jne 0x10062c52
mov dword [ebp - 0x38], eax
jmp 0x10062eed
test esi, esi
je 0x10062eed
xor edi, edi
je 0x10062cd5
mov dword [ebp - 0x30], edi
mov byte [ebp + 0x104], 0
push 0x103
push edi
lea ecx, [ebp + 0x105]
push ecx
call fcn.1012e060
push 1
push 0x2c
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp + 0x104]
push eax
xor cl, cl
mov edx, edi
call fcn.10061f00
add esp, 0x1c
cmp dword [ebp - 0x30], 0xffffffff
je 0x10062cd5
push ebx
lea ecx, [ebp + 0x104]
push ecx
call fcn.10061b10
add esp, 8
cmp eax, 1
jne 0x10062cb8
mov dword [ebp - 0x38], edi
jmp 0x10062eed
push 1
push 0x2c
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp + 0x104]
push eax
xor cl, cl
mov edx, edi
call fcn.10061f00
add esp, 0x10
jmp 0x10062c95
test esi, esi
je 0x10062eed
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x10062cfb
inc dword [eax]
mov eax, dword [eax]
mov ecx, dword [ebp + 0x218]
cmp ecx, 1
jle 0x10062cfb
cmp eax, ecx
ja 0x10062f06
cmp dword [ebp + 0x220], 0
je 0x10062eed
mov ebx, dword [ebp - 0x20]
lea esi, [ebx + 8]
call fcn.100736c0
mov edi, eax
test byte [ebx + 0xa30], 7
je 0x10062d2a
push 0x80
push esi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
xor eax, eax
je 0x10062d62
test edi, edi
je 0x10062d62
mov eax, str..DLL
mov ecx, edi
call fcn.1005a090
test eax, eax
je 0x10062d52
mov eax, str..OCX
mov ecx, edi
call fcn.1005a090
test eax, eax
jne 0x10062d62
call fcn.1008aae0
test eax, eax
je 0x10062d62
mov ecx, esi
call fcn.1005e850
mov eax, esi
call fcn.1005ad10
mov edi, eax
mov dword [ebp - 0x40], edi
mov ebx, 1
test edi, edi
jne 0x10062dc2
cmp dword [ebp + 0x218], ebx
jne 0x10062dc2
mov edi, esi
call fcn.10062940
test eax, eax
jne 0x10062dde
push esi
call fcn.100627c0
add esp, 4
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x80
push esi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov eax, esi
call fcn.1005ad10
mov edi, eax
mov dword [ebp - 0x40], edi
test edi, edi
jne 0x10062dc2
mov dword [ebp - 0x1c], ebx
push eax
mov ecx, esi
call fcn.1005ece0
cmp edi, ebx
jne 0x10062eed
cmp dword [ebp - 0x28], 0
je 0x10062eed
mov eax, dword [ebp - 0x28]
inc dword [eax]
jmp 0x10062eed
mov dword [ebp - 0x40], ebx
jmp 0x10062dca
test eax, 0x400
jne 0x10062eed
xor esi, esi
mov dword [ebp - 0x48], esi
xor edi, edi
cmp edi, esi
je 0x10062e61
mov dword [ebp - 0x34], esi
mov byte [ebp], 0
push 0x103
push esi
lea ecx, [ebp + 1]
push ecx
call fcn.1012e060
push 1
push 0x2c
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp]
push eax
xor cl, cl
mov edx, edi
call fcn.10061f00
add esp, 0x1c
cmp dword [ebp - 0x34], 0xffffffff
je 0x10062e61
push ebx
lea ecx, [ebp]
push ecx
call fcn.10061b10
add esp, 8
cmp eax, 1
jne 0x10062e47
mov dword [ebp - 0x48], eax
jmp 0x10062eed
push 1
push 0x2c
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp]
push eax
xor cl, cl
mov edx, edi
call fcn.10061f00
add esp, 0x10
jmp 0x10062e27
test esi, esi
jne 0x10062eed
mov esi, dword [ebp - 0x3c]
test esi, esi
jne 0x10062e92
push esi
push esi
mov ecx, dword [ebp - 0x2c]
push ecx
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp + 0x220]
push eax
push esi
mov ecx, dword [ebp + 0x218]
push ecx
mov edx, dword [ebp - 0x20]
add edx, 8
push edx
jmp 0x10062ee5
mov eax, 0x10169e94
mov ecx, esi
call fcn.1005a090
push 0
push 0
test eax, eax
jne 0x10062ec7
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp + 0x220]
push edx
push 0
mov eax, dword [ebp + 0x218]
push eax
mov ecx, dword [ebp - 0x20]
add ecx, 8
push ecx
jmp 0x10062ee5
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp + 0x220]
push ecx
push esi
mov edx, dword [ebp + 0x218]
push edx
mov eax, dword [ebp - 0x20]
add eax, 8
push eax
call fcn.10062a80
or dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x20]
lea esi, [eax + 0xa30]
mov ecx, dword [eax + 4]
call fcn.1005b070
test eax, eax
jne 0x10062b70
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, dword [ebp - 0x3c]
test esi, esi
je 0x10062f3e
mov eax, 0x10169e90
mov ecx, esi
call fcn.1005a090
test eax, eax
je 0x10062f3e
mov eax, 0x10169e94
mov ecx, esi
call fcn.1005a090
test eax, eax
jne 0x10062fea
cmp dword [ebp + 0x220], 0
je 0x10062fea
mov esi, dword [ebp - 0x24]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jle 0x10062f64
cmp byte [esi + eax - 1], 0x2e
je 0x10062fea
call fcn.10062a20
mov esi, eax
test esi, esi
jne 0x10062fea
cmp dword [ebp + 0x218], 1
jne 0x10062fea
mov edi, dword [ebp - 0x24]
call fcn.10062940
test eax, eax
jne 0x10062fea
push eax
push str.favorites
push edi
call fcn.10063340
add esp, 0xc
cmp eax, 0xffffffff
je 0x10062fbd
push str.IEXPLORE.EXE
call fcn.100627c0
add esp, 4
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ebx, [esi + 1]
mov esi, edi
call fcn.10062a40
mov esi, eax
test esi, esi
jne 0x10062fea
mov dword [ebp - 0x1c], 1
push esi
mov ecx, edi
call fcn.1005ece0
jmp 0x10062fea
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x10063001
push eax
call fcn.1006a910
add esp, 4
mov eax, dword [ebp - 0x1c]
jmp 0x10063008
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x208]
xor ecx, ebp
call fcn.10127db1
add ebp, 0x20c
mov esp, ebp
pop ebp
ret 0x20