Function at 0x40dad0
Capabilities:
Set file attributes

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe94
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x16c], edx
mov dword [ebp - 0x168], edx
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.004037a0
lea eax, [ebp - 0x164]
mov edx, dword [0x405f24]
call fcn.00403948
xor eax, eax
push ebp
push 0x40e077
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x40e031
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x168]
mov ecx, 0x40e090
mov edx, dword [ebp - 4]
call fcn.00403638
mov eax, dword [ebp - 0x168]
lea ecx, [ebp - 0x164]
mov edx, 0x10
call fcn.00406da0
test eax, eax
je 0x40db65
lea eax, [ebp - 0x164]
call fcn.00406e14
jmp 0x40e01c
mov eax, 0xa
call fcn.0040c778
push dword [ebp - 4]
push 0x40e0a0
push dword [ebp - 0x158]
lea eax, [ebp - 8]
mov edx, 3
call fcn.004036ac
push 0x80
mov eax, dword [ebp - 8]
call fcn.004037b0
push eax
call sub.kernel32.dll_SetFileAttributesA
mov eax, dword [ebp - 0x15c]
and eax, 0x10
cmp eax, 0x10
je 0x40dfca
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.00406f64
mov eax, dword [ebp - 0xc]
mov edx, 0x40e0ac
call fcn.004036fc
je 0x40dbd8
mov eax, dword [ebp - 0xc]
mov edx, 0x40e0bc
call fcn.004036fc
jne 0x40dc2a
mov eax, dword [ebp - 8]
call fcn.0040c990
cmp eax, 0x20
jne 0x40e009
lea edx, [ebp - 0x16c]
mov eax, dword [ebp - 8]
call fcn.0040c890
mov eax, dword [ebp - 0x16c]
mov edx, 0x40e0cc
call fcn.004036fc
je 0x40e009
mov eax, dword [ebp - 8]
call fcn.0040c6e4
cmp al, 1
jne 0x40e009
mov eax, dword [ebp - 8]
call fcn.0040d494
jmp 0x40e009
cmp word [0x41064e], 0xf
jb 0x40e009
mov eax, dword [ebp - 0xc]
mov edx, 0x40e0d8
call fcn.004036fc
je 0x40dc56
mov eax, dword [ebp - 0xc]
mov edx, 0x40e0e8
call fcn.004036fc
jne 0x40dc5e
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e0f8
call fcn.004036fc
je 0x40dc7c
mov eax, dword [ebp - 0xc]
mov edx, 0x40e108
call fcn.004036fc
jne 0x40dc84
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e118
call fcn.004036fc
je 0x40dca2
mov eax, dword [ebp - 0xc]
mov edx, 0x40e128
call fcn.004036fc
jne 0x40dcaa
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e138
call fcn.004036fc
je 0x40dcc8
mov eax, dword [ebp - 0xc]
mov edx, 0x40e148
call fcn.004036fc
jne 0x40dcd0
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e158
call fcn.004036fc
je 0x40dcee
mov eax, dword [ebp - 0xc]
mov edx, 0x40e168
call fcn.004036fc
jne 0x40dcf6
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e178
call fcn.004036fc
je 0x40dd14
mov eax, dword [ebp - 0xc]
mov edx, 0x40e188
call fcn.004036fc
jne 0x40dd1c
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e198
call fcn.004036fc
je 0x40dd3a
mov eax, dword [ebp - 0xc]
mov edx, 0x40e1a8
call fcn.004036fc
jne 0x40dd42
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e1b8
call fcn.004036fc
je 0x40dd60
mov eax, dword [ebp - 0xc]
mov edx, 0x40e1c8
call fcn.004036fc
jne 0x40dd68
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e1d8
call fcn.004036fc
je 0x40dd86
mov eax, dword [ebp - 0xc]
mov edx, 0x40e1e8
call fcn.004036fc
jne 0x40dd8e
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e1f8
call fcn.004036fc
je 0x40ddac
mov eax, dword [ebp - 0xc]
mov edx, 0x40e208
call fcn.004036fc
jne 0x40ddb4
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e218
call fcn.004036fc
je 0x40ddd2
mov eax, dword [ebp - 0xc]
mov edx, 0x40e228
call fcn.004036fc
jne 0x40ddda
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e238
call fcn.004036fc
je 0x40ddf8
mov eax, dword [ebp - 0xc]
mov edx, 0x40e248
call fcn.004036fc
jne 0x40de00
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e258
call fcn.004036fc
je 0x40de1e
mov eax, dword [ebp - 0xc]
mov edx, 0x40e268
call fcn.004036fc
jne 0x40de26
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e278
call fcn.004036fc
je 0x40de44
mov eax, dword [ebp - 0xc]
mov edx, 0x40e288
call fcn.004036fc
jne 0x40de4c
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e298
call fcn.004036fc
je 0x40de6a
mov eax, dword [ebp - 0xc]
mov edx, 0x40e2a8
call fcn.004036fc
jne 0x40de72
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e2b8
call fcn.004036fc
je 0x40de90
mov eax, dword [ebp - 0xc]
mov edx, 0x40e2c8
call fcn.004036fc
jne 0x40de98
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e2d8
call fcn.004036fc
je 0x40deb6
mov eax, dword [ebp - 0xc]
mov edx, 0x40e2e8
call fcn.004036fc
jne 0x40debe
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e2f8
call fcn.004036fc
je 0x40dedc
mov eax, dword [ebp - 0xc]
mov edx, 0x40e308
call fcn.004036fc
jne 0x40dee4
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e318
call fcn.004036fc
je 0x40df02
mov eax, dword [ebp - 0xc]
mov edx, 0x40e328
call fcn.004036fc
jne 0x40df0a
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e338
call fcn.004036fc
je 0x40df28
mov eax, dword [ebp - 0xc]
mov edx, 0x40e348
call fcn.004036fc
jne 0x40df30
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e358
call fcn.004036fc
je 0x40df4e
mov eax, dword [ebp - 0xc]
mov edx, 0x40e368
call fcn.004036fc
jne 0x40df56
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e378
call fcn.004036fc
je 0x40df74
mov eax, dword [ebp - 0xc]
mov edx, 0x40e388
call fcn.004036fc
jne 0x40df7c
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e398
call fcn.004036fc
je 0x40df9a
mov eax, dword [ebp - 0xc]
mov edx, 0x40e3a8
call fcn.004036fc
jne 0x40dfa2
mov eax, dword [ebp - 8]
call fcn.00406e30
mov eax, dword [ebp - 0xc]
mov edx, 0x40e3b8
call fcn.004036fc
je 0x40dfc0
mov eax, dword [ebp - 0xc]
mov edx, 0x40e3c8
call fcn.004036fc
jne 0x40e009
mov eax, dword [ebp - 8]
call fcn.00406e30
jmp 0x40e009
mov eax, dword [ebp - 0x158]
mov edx, 0x40e3d8
call fcn.004036fc
je 0x40e009
mov eax, dword [ebp - 0x158]
mov edx, 0x40e3e4
call fcn.004036fc
je 0x40e009
push 0x80
mov eax, dword [ebp - 8]
call fcn.004037b0
push eax
call sub.kernel32.dll_SetFileAttributesA
mov eax, dword [ebp - 8]
call fcn.0040dad0
lea eax, [ebp - 0x164]
call fcn.00406df0
test eax, eax
je 0x40db65
lea eax, [ebp - 0x164]
call fcn.00406e14
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x40e03b
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x40e07e
lea eax, [ebp - 0x16c]
mov edx, 2
call fcn.004033b4
lea eax, [ebp - 0x164]
mov edx, dword [0x405f24]
call fcn.00403a14
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.004033b4
ret