Function at 0x41c030
Capabilities:
Set file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov edi, ecx
lea ecx, [ebx + eax*2]
call fcn.0041ae30
mov edx, dword [ebp + 0x14]
and edx, 0x400
mov dword [esp + 0x1c], eax
cmp dword [edi + 0x684], 6
mov dword [esp + 0x14], edx
jne 0x41c087
mov ecx, dword [edi + 0x690]
and ecx, 0x1800
or ecx, 0
je 0x41c087
mov eax, dword [edi + 0x864]
mov esi, 1
jmp 0x41c09b
mov eax, dword [edi + 0x864]
xor esi, esi
mov dword [esp + 0x18], 1
test eax, eax
jne 0x41c0ab
mov dword [esp + 0x18], 0
test eax, eax
je 0x41c1d0
test byte [ebp + 0x14], 1
mov dword [esp + 0x10], ebx
je 0x41c0c5
push 0x80
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov edx, dword [esp + 0x14]
test esi, esi
je 0x41c146
test edx, edx
jne 0x41c146
mov edx, dword [ebp + 0x18]
mov eax, edx
mov ecx, dword [ebp + 0x1c]
or eax, ecx
je 0x41c125
push ecx
push ecx
push edx
push ebx
mov ecx, edi
call fcn.0041c590
mov ecx, dword [edi + 0xb50]
test eax, eax
jne 0x41c11d
add dword [ecx + 0xe0], 1
push eax
adc dword [ecx + 0xe4], eax
mov ecx, edi
mov eax, dword [edi + 0x84c]
lea eax, [ebx + eax*2]
push eax
push str.WriteRandomData_delete_
call fcn.00419420
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20
add dword [ecx + 0x28], 1
adc dword [ecx + 0x2c], 0
push dword [esp + 0x1c]
push dword [ebp + 0xc]
push dword [edi + 0x838]
push ebx
call fcn.0041c4f0
test eax, eax
je 0x41c146
mov edx, dword [edi + 0x838]
mov dword [esp + 0x10], edx
mov edx, dword [edi + 0x790]
mov ecx, dword [esp + 0x10]
call fcn.00457a80
test eax, eax
jne 0x41c214
mov ebx, dword [esp + 0x18]
lea esi, [edi + 0xfc4]
test ebx, ebx
je 0x41c172
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [edi + 0xb50]
mov ecx, dword [ebp + 0x18]
add dword [eax + 0xf8], 1
adc dword [eax + 0xfc], 0
mov eax, dword [edi + 0xb50]
add dword [eax + 0x100], ecx
mov ecx, dword [ebp + 0x1c]
adc dword [eax + 0x104], ecx
test ebx, ebx
je 0x41c1a9
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [edi + 0x84c]
mov ecx, dword [esp + 0x10]
push 0
lea eax, [ecx + eax*2]
mov ecx, edi
push eax
push str.DeleteFile
call fcn.00419420
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x20
test esi, esi
je 0x41c218
test edx, edx
jne 0x41c218
mov eax, dword [edi + 0xb50]
add dword [eax + 0x28], 1
adc dword [eax + 0x2c], edx
mov eax, dword [edi + 0x690]
and eax, 0x1000
or eax, edx
lea eax, [edx + 3]
jne 0x41c1fa
lea eax, [edx + 1]
push dword [ebp + 0x1c]
mov esi, dword [edi + 0xb50]
push dword [ebp + 0x18]
push 0
push eax
call fcn.0047dfd0
add dword [esi + 0x40], eax
adc dword [esi + 0x44], edx
mov edx, dword [esp + 0x14]
cmp dword [edi + 0x854], 0
je 0x41c250
push 0
push dword [ebp + 0x1c]
xor eax, eax
test edx, edx
push dword [ebp + 0x18]
setne al
push dword [ebp + 0x24]
push dword [ebp + 0x20]
lea eax, [eax*8 + 0x20]
push ecx
push eax
mov eax, dword [edi + 0x84c]
mov ecx, edi
lea eax, [ebx + eax*2]
push eax
call fcn.00416d90
mov ebx, dword [esp + 0x18]
lea esi, [edi + 0xfc4]
test ebx, ebx
je 0x41c265
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [edi + 0xb50]
mov ecx, dword [ebp + 0x18]
add dword [eax + 0x60], 1
adc dword [eax + 0x64], 0
mov eax, dword [edi + 0xb50]
add dword [eax + 0x68], ecx
mov ecx, dword [ebp + 0x1c]
adc dword [eax + 0x6c], ecx
test ebx, ebx
je 0x41c290
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 0x20