Function at 0x41ba60
Capabilities:
Access peb ldr_data
Set file attributes

Disassembly:
push 0xffffffffffffffff
push 0x4f6f6f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
push esi
mov esi, ecx
push edi
lea ecx, [esi + 4]
mov dword [esp + 0x10], esi
mov dword [esi], 0x5058f4
call fcn.00401270
lea ebx, [esi + 0x24]
xor ebp, ebp
push 0x502a56
mov ecx, ebx
mov dword [esp + 0x20], ebp
call fcn.00401fd0
mov byte [esp + 0x1c], 1
lea edi, [esi + 0x28]
call fcn.004e5159
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [edi], eax
push 0x502a56
lea ecx, [esi + 0x2c]
mov byte [esp + 0x20], 2
call fcn.00401fd0
mov byte [esp + 0x1c], 3
mov word [esi + 0x30], 0x26b6
call fcn.004e5159
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x34], eax
mov byte [esp + 0x1c], 4
call fcn.004e5159
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x3c], eax
mov byte [esp + 0x1c], 5
call fcn.004e5159
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x44], eax
mov byte [esp + 0x1c], 6
call fcn.004e5159
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x48], eax
mov byte [esp + 0x1c], 7
call fcn.004e5159
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x4c], eax
mov byte [esp + 0x1c], 8
call fcn.004e5159
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x50], eax
mov byte [esp + 0x1c], 9
call fcn.004e5159
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x54], eax
mov byte [esp + 0x1c], 0xa
call fcn.004e5159
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x58], eax
mov byte [esp + 0x1c], 0xb
call fcn.004e5159
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x5c], eax
mov byte [esp + 0x1c], 0xc
call fcn.004e5159
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x60], eax
mov byte [esp + 0x1c], 0xd
call fcn.004e5159
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x64], eax
mov byte [esp + 0x1c], 0xe
call fcn.004e5159
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x68], eax
mov byte [esp + 0x1c], 0xf
call fcn.004e5159
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x6c], eax
mov byte [esp + 0x1c], 0x10
call fcn.004e5159
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x70], eax
mov byte [esp + 0x1c], 0x11
call fcn.004e5159
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x74], eax
mov byte [esp + 0x1c], 0x12
call fcn.004e5159
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x80], eax
mov byte [esp + 0x1c], 0x13
push 1
call fcn.0047df50
add esp, 4
cmp eax, ebp
je 0x41bc6a
mov ebp, eax
lea edx, [ebp + 1]
nop
mov cl, byte [ebp]
inc ebp
test cl, cl
jne 0x41bc60
sub ebp, edx
push ebp
push eax
mov ecx, edi
call fcn.00401880
mov ecx, edi
call fcn.0040f3c0
push str..ini
push str..exe
mov ecx, edi
call fcn.00401920
push edi
mov ecx, ebx
call fcn.00403fd0
mov eax, dword [ebx]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov ecx, esi
call fcn.0041ae60
mov ecx, dword [esp + 0x14]
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret