Function at 0x428ed0
Capabilities:
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x410
push ebx
push esi
push edi
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x30c]
rep stosd dword es:[edi], eax
mov ecx, 0x41
lea edi, [ebp - 0x410]
rep stosd dword es:[edi], eax
mov ecx, 0x41
lea edi, [ebp - 0x208]
rep stosd dword es:[edi], eax
mov edi, dword [ebp + 8]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0x208]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [0x452f2c]
mov al, byte [ecx + 0x16]
test al, al
jne 0x428fc2
lea edx, [ebp - 0x410]
lea eax, [ebp - 0x30c]
push edx
push eax
push 0
lea ecx, [ebp - 0x208]
push 0
push ecx
call fcn.00428170
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x208]
add esp, 0x14
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x30c]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0x208]
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [ebp - 0x208]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x410]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x30c]
rep stosd dword es:[edi], eax
mov ecx, 0x41
lea edi, [ebp - 0x410]
rep stosd dword es:[edi], eax
mov ecx, 0x41
lea edi, [ebp - 0x104]
rep stosd dword es:[edi], eax
mov eax, dword [0x452f2c]
lea edi, [eax + 0x22b]
mov al, byte [eax + 0x22b]
test al, al
je 0x42904d
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0x104]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov al, byte [ebp - 0x104]
test al, al
je 0x4290b6
lea edi, [ebp - 0x104]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp byte [ebp + ecx - 0x105], 0x5c
je 0x4290b6
jmp 0x429086
lea eax, [ebp - 0x104]
push 0x104
push eax
call dword [sym.imp.MSVCRT.dll__getcwd]
mov al, byte [ebp - 0x104]
add esp, 8
test al, al
je 0x4290b6
lea edi, [ebp - 0x104]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp byte [ebp + ecx - 0x105], 0x5c
je 0x4290b6
mov edi, 0x43fe58
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x104]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x208]
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x104]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push eax
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
push eax
and ecx, 3
lea eax, [ebp - 0x410]
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x30c]
push eax
lea edx, [ebp - 0x104]
push ecx
push edx
call fcn.00428170
lea edi, [ebp - 0x410]
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x30c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea eax, [ebp - 0x30c]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
call fcn.00428cd0
lea ecx, [ebp - 0x104]
push ecx
call fcn.004280f0
mov edx, dword [0x452f2c]
mov edi, dword [sym.imp.MSVCRT.dll_fopen]
mov esi, eax
add esp, 0x1c
mov al, byte [edx + 0xa]
mov ebx, 1
test al, al
jne case.default.0x4291bd
lea eax, [ebp - 0x104]
push 0x43ff18
push eax
call edi
mov ecx, dword [0x452f2c]
add esp, 8
mov dword [ecx + 4], eax
mov edx, dword [0x452f2c]
mov eax, dword [edx + 4]
test eax, eax
je case.default.0x4291bd
push eax
call dword [sym.imp.MSVCRT.dll_fclose]
add esp, 4
cmp esi, 0xffffffff
je 0x4291a3
test esi, esi
jne case.default.0x4291bd
lea eax, [ebp - 0x104]
push eax
call fcn.0042bfd0
movsx eax, al
add eax, 0xffffff98
add esp, 4
cmp eax, 3
ja case.default.0x4291bd
jmp dword [eax*4 + 0x429268]
mov byte [0x452f31], 0
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
mov byte [0x452f31], bl
lea edx, [ebp - 0x104]
push 0x80
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea eax, [ebp - 0x104]
push 0x440370
push eax
call edi
mov ecx, dword [0x452f2c]
add esp, 8
mov dword [ecx + 4], eax
mov edx, dword [0x452f2c]
mov eax, dword [edx + 4]
test eax, eax
jne 0x4291cb
lea eax, [ebp - 0x104]
push eax
push 0x3e8
call fcn.0042ae10
add esp, 8
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x452f2c]
mov byte [0x452f31], bl
mov byte [ecx + 0xa], bl
jmp case.default.0x4291bd
push 0x441880
push 0x3fb
call fcn.0042ae10
add esp, 8
mov byte [0x452f31], 0
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret