Function at 0x41bf86
Capabilities:
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x98
mov eax, dword [ebp + 8]
inc ecx
push ebx
sbb dword [0x42a014], edx
push esi
shl esi, 1
push edi
and dword [0x42c014], 0
jmp 0x41bfba
mov edi, dword [0x42c014]
inc edi
mov dword [0x42c014], edi
cmp dword [0x42c014], 0x1f
jae 0x41c018
cmp dword [0x42c014], 0xb
jne 0x41bfe7
push 0x424553
push 0x4244e5
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_DefineDosDeviceW]
cmp dword [0x42c014], 0xa
jne 0x41c001
mov edi, dword [0x42c014]
inc edi
mov dword [0x42c014], edi
jmp 0x41bfad
mov esi, 0x7510893
sub eax, esi
mov edi, dword [0x423e29]
mov ecx, dword [0x423e45]
sub edi, ecx
sub edi, dword [edi + ecx]
mov edi, 0x3272db
add eax, edi
sub ecx, 0x38ef
mov dword [ebp - 0x30], eax
mov eax, dword [0x423e79]
mov dword [0x429010], 0x1f
cmp dword [0x429010], 0
je 0x41c0aa
cmp dword [0x429010], 0xf
jne 0x41c07e
push 0x82e0
push 0x7826
push 0x30a6
call dword [sym.imp.KERNEL32.dll_HeapValidate]
cmp dword [0x429010], 0x10
jne 0x41c098
mov ecx, dword [0x429010]
dec ecx
mov dword [0x429010], ecx
mov ecx, dword [0x429010]
dec ecx
mov dword [0x429010], ecx
jmp 0x41c04f
mov eax, dword [eax]
add ecx, dword [0x42a01c]
jmp 0x41e400
mov dword [ebp - 0x20], eax
mov dword [0x429028], 0x1e
cmp dword [0x429028], 0
je 0x41e45c
cmp dword [0x429028], 0x2e
jne 0x41e43c
push 0x88e3
push 0x5900
push 0x6949
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov eax, dword [0x429028]
dec eax
mov dword [0x429028], eax
jmp 0x41e40d
mov eax, dword [0x424081]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x38], 0xf89c87b6
mov eax, dword [ebp - 0x38]
mov dword [0x42b004], 0x13
cmp dword [0x42b004], 0
je 0x41e4f8
cmp dword [0x42b004], 0x19
jne 0x41e4aa
push 0x8602
push dword [ebp - 0x28]
push dword [ebp - 0x18]
push 0x5ed1
call dword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov ecx, dword [0x42b004]
dec ecx
mov dword [0x42b004], ecx
jmp 0x41e47a
sub eax, esi
and dword [0x429008], 0
jmp 0x41e516
mov ecx, dword [0x429008]
inc ecx
mov dword [0x429008], ecx
cmp dword [0x429008], 0x14
jae 0x41e565
cmp dword [0x429008], 0xb
jne 0x41e540
push 0x3d49
push 0x424388
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp dword [0x429008], 0xa
jne 0x41e55a
mov ecx, dword [0x429008]
inc ecx
mov dword [0x429008], ecx
jmp 0x41e509
add eax, edi
xor dword [0x42c010], 0x649e
mov dword [ebp - 0x30], eax
mov ecx, dword [0x429028]
xor dword [0x42b018], ecx
mov eax, dword [0x423ff9]
sbb ecx, 0x5dc9
mov dword [ebp - 0x30], eax
xor eax, eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push 4
not ecx
pop ecx
adc dword [0x42a004], 0x37d1
sub ecx, eax
add ecx, dword [ebp - 0x28]
mov eax, dword [0x429024]
or dword [0x42a008], eax
mov dword [ebp - 0x2c], 0xf89c85f6
mov dword [0x42a008], 0x13
cmp dword [0x42a008], 0
je 0x41e624
cmp dword [0x42a008], 9
jne 0x41e5f3
push 0x665a
push 0x4c85
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp dword [0x42a008], 0xa
jne 0x41e60b
mov eax, dword [0x42a008]
dec eax
mov dword [0x42a008], eax
sub eax, eax
xor eax, dword [0x42a008]
dec eax
mov dword [0x42a008], eax
jmp 0x41e5c9
mov dword [ebp - 0x24], ecx
and dword [section..vnhjh], 0x4083
mov dword [ebp - 0x98], 0xf89c85ba
mov eax, dword [ebp - 0x14]
sub dword [0x429028], 0x42c00c
mov dword [ebp - 0x94], eax
mov dword [0x429018], 0x60a2
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x90], eax
sub eax, 0x1a7d
mov eax, dword [ebp - 0x2c]
add dword [0x429014], 0x42b010
sub eax, esi
add eax, edi
or dword [0x42a01c], 0xdce
mov dword [ebp - 0x8c], eax
xor dword [0x42d004], 0x42a000
lea eax, [ebp - 0x50]
sub dword [0x429020], 0x429004
mov dword [ebp - 0x88], eax
sub dword [0x429028], 0x1657
mov eax, dword [ebp - 0x98]
sub eax, esi
sub dword [0x42c01c], 0x42d010
add eax, edi
mov dword [ebp - 0x98], eax
and dword [0x42d004], 0x42b004
lea eax, [ebp - 0x98]
sbb dword [0x42d008], 0x429018
push eax
and dword [0x42c004], edi
mov eax, dword [ebp + 0xc]
sub dword [0x42b014], 0x42a01c
sub eax, esi
add eax, edi
sbb dword [0x429024], 0x42c01c
push eax
and eax, dword [0x42c018]
mov eax, dword [0x424019]
adc dword [0x429004], 0x7be0
push 0x423f6f
and dword [section..trtfd], 0x42b018
push dword [eax]
xor dword [0x42c014], 0x72b4
call fcn.0040867b
inc eax
mov eax, dword [ebp - 0x14]
add ecx, dword [0x42b00c]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp + 8]
xor dword [0x429020], 0x42a008
sub ecx, esi
mov dword [ebp - 0x38], eax
xor dword [0x42c014], 0x42a014
add ecx, edi
jmp 0x423b76
adc ebx, dword [0x429018]
lea edx, [ecx + eax]
mov dword [section..xlsdkf], 0x1d
cmp dword [section..xlsdkf], 0
je 0x41e7c7
cmp dword [section..xlsdkf], 0x24
jne 0x41e7ad
push 0x42a008
push dword [ebp - 0x14]
push 0x4243a4
call dword [sym.imp.KERNEL32.dll_GetFileAttributesExA]
sub ebx, ebx
add ebx, dword [section..xlsdkf]
dec ebx
mov dword [section..xlsdkf], ebx
jmp 0x41e780
mov dword [ebp - 0x28], edx
sub edx, ebx
mov edx, dword [ebp - 0x4c]
and dword [0x42d00c], 0
jmp 0x41e7eb
mov ebx, dword [0x42d00c]
inc ebx
mov dword [0x42d00c], ebx
cmp dword [0x42d00c], 0x19
jae 0x41e840
cmp dword [0x42d00c], 0xe
jne 0x41e815
push 0x42901c
push 0x4df2
call dword [sym.imp.KERNEL32.dll_GetCommTimeouts]
cmp dword [0x42d00c], 0xd
jne 0x41e831
sub ebx, ebx
xor ebx, dword [0x42d00c]
inc ebx
mov dword [0x42d00c], ebx
jmp 0x41e7de
sub edx, ecx
sbb dword [0x429014], ebx
mov dword [ebp - 0x20], edx
and dword [0x42d01c], 0
mov edx, dword [0x42d01c]
inc edx
mov dword [0x42d01c], edx
cmp dword [0x42d01c], 8
jne 0x41e878
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
cmp dword [0x42d01c], 7
jne 0x41e894
sub edx, edx
or edx, dword [0x42d01c]
inc edx
mov dword [0x42d01c], edx
cmp dword [0x42d01c], 0x11
jb 0x41e855
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x34], 0xf89c85b6
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x18], 0xf89c85b5
mov edx, dword [ebp - 0x34]
sub edx, esi
add edx, edi
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x34]
sub edx, esi
add edx, edi
mov dword [ebp - 8], edx
mov dword [ebp - 0x28], 0xf89c85d6
mov dword [ebp - 0x2c], 0xf89c85bf
mov edx, dword [ebp - 0x34]
mov ebx, dword [ebp - 0x14]
sub edx, esi
add edx, edi
cmp ebx, edx
je 0x423b6a
mov eax, dword [ebp - 0x18]
sub eax, esi
mov edx, 0xffcd8d25
sub edx, eax
add edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x10]
sub eax, esi
add eax, edi
imul eax, ebx
cmp eax, edx
ja 0x423b67
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x28]
sub eax, edx
sub ebx, esi
sub edx, edx
add ebx, edi
div ebx
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 8]
sub eax, esi
add eax, edi
cmp edx, eax
jbe 0x41e945
mov eax, dword [ebp - 0x2c]
sub eax, esi
add eax, edi
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 8]
sub eax, esi
add eax, edi
imul eax, edx
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 8]
sub eax, esi
add eax, edi
cmp edx, eax
je 0x423b50
mov eax, dword [ebp - 8]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x44]
mov dword [ebp - 0x20], 0xf89c85b6
mov dword [ebp - 8], eax
mov eax, 0xf89c85b5
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], 0xf89c85b4
mov dword [ebp - 0x30], 0xf89c85bb
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x20]
sub eax, esi
add eax, edi
jmp 0x423b0c
mov dword [ebp - 0x48], 0xf89c85bd
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0xc]
sub eax, esi
add eax, edi
imul eax, edx
mov edx, dword [ebp - 8]
mov al, byte [eax + edx]
mov byte [ebp - 1], al
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0xc]
sub eax, esi
add eax, edi
imul eax, edx
mov edx, dword [ebp - 0x40]
sub edx, esi
add eax, edx
mov edx, dword [ebp - 8]
movzx eax, byte [eax + edx + 0x3272db]
jmp 0x420d2c
mov edx, dword [ebp - 0x48]
jmp 0x42307d
sub edx, esi
lea eax, [edx + eax + 0x3272db]
movzx edx, byte [ebp - 1]
sub edx, eax
mov byte [ebp - 1], dl
mov al, byte [ebp - 1]
mov edx, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0xc]
sub edx, esi
add edx, edi
imul edx, ebx
mov ebx, dword [ebp - 8]
mov byte [edx + ebx], al
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0xc]
sub eax, esi
add eax, edi
imul eax, edx
mov edx, dword [ebp - 8]
mov al, byte [eax + edx]
mov byte [ebp - 1], al
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0xc]
sub eax, esi
add eax, edi
imul eax, edx
mov edx, dword [ebp - 0x3c]
sub edx, esi
add eax, edx
jmp 0x423ac2
mov edx, dword [ebp - 8]
movzx eax, byte [eax + edx + 0x3272db]
mov edx, dword [ebp - 0x54]
sub edx, esi
lea eax, [edx + eax + 0x3272db]
movzx edx, byte [ebp - 1]
sub edx, eax
mov byte [ebp - 1], dl
mov al, byte [ebp - 1]
mov edx, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0xc]
sub edx, esi
add edx, edi
imul edx, ebx
mov ebx, dword [ebp - 8]
mov byte [edx + ebx], al
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x3c]
sub eax, esi
sub edx, esi
add eax, edi
add edx, edi
imul eax, edx
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x24]
cmp edx, eax
jb 0x41e9a2
mov eax, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x24]
sub eax, esi
add eax, edi
imul eax, edx
mov edx, dword [ebp - 0x20]
sub edx, esi
add edx, edi
or eax, edx
mov edx, dword [ebp - 0x18]
sub edx, esi
add eax, edx
mov edx, dword [ebp - 0x18]
sub edx, esi
add eax, edx
mov edx, dword [ebp - 0x10]
lea eax, [eax + edx + 0x64e5b6]
jmp 0x423b5f
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x10]
sub eax, esi
lea eax, [eax + edx + 0x3272db]
mov dword [ebp - 0x10], eax
jmp 0x41e8ef
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp + 0xc]
sub edx, esi
lea ecx, [ecx + edx + 0x3272db]
lea edx, [ecx - 0x3272db]
sub edx, esi
cmp edx, 0xf89c95b6
jne 0x41e76d
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
sub edx, esi
mov dl, byte [edx + eax + 0x3272db]
sub ecx, esi
mov cl, byte [ecx + eax + 0x3272db]
sub ebx, esi
mov byte [ebx + eax + 0x3272db], dl
mov edx, dword [ebp + 0xc]
sub edx, esi
mov byte [edx + eax + 0x3272db], cl
mov eax, dword [ebp + 0xc]
sub eax, esi
add eax, edi
pop edi
pop esi
pop ebx
leave
ret 8