Function at 0x95c0a0
Capabilities:
Set file attributes

Disassembly:
push ebp
lea ebp, [esp - 0x20c]
sub esp, 0x20c
push 0xfffffffffffffffe
push 0xb13290
push 0xa847a0
mov eax, dword fs:[0]
push eax
sub esp, 0x3c
mov eax, dword [0xb196ec]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp + 0x208], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov esi, dword [ebp + 0x214]
mov dword [ebp - 0x2c], esi
mov eax, dword [ebp + 0x21c]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp + 0x224]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp + 0x228]
mov dword [ebp - 0x30], edx
xor ebx, ebx
mov dword [ebp + 0x22c], ebx
cmp esi, ebx
je 0x95c606
cmp byte [esi], bl
je 0x95c606
mov dword [ebp - 0x20], ebx
push 0xb70
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edi, eax
mov dword [ebp - 0x1c], edi
cmp edi, ebx
je 0x95c606
lea ebx, [edi + 8]
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, ebx
call fcn.00960910
push 0xaad5c4
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov dword [ebp - 4], 0
lea esi, [edi + 0xa30]
mov ecx, ebx
call fcn.0094df40
mov dword [edi + 4], eax
cmp eax, 0xffffffff
je 0x95c5cb
jmp 0x95c180
mov dword [ebp - 0x4c], 1
lea esi, [edi + 0xa5c]
mov dword [ebp - 0x44], esi
cmp byte [esi], 0x2e
jne 0x95c205
mov ecx, 0xaacda4
mov eax, esi
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x95c1c0
test dl, dl
je 0x95c1bc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x95c1c0
add eax, 2
add ecx, 2
test dl, dl
jne 0x95c1a0
xor eax, eax
jmp 0x95c1c5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x95c1f9
mov ecx, 0xaacda8
mov eax, esi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x95c1f0
test dl, dl
je 0x95c1ec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x95c1f0
add eax, 2
add ecx, 2
test dl, dl
jne 0x95c1d0
xor eax, eax
jmp 0x95c1f5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x95c205
mov dword [ebp - 0x4c], 0
jmp 0x95c4fe
lea ebx, [edi + 8]
mov eax, dword [ebp - 0x2c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, ebx
call fcn.00960910
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [edi + 0xa30]
test al, 0x10
jne 0x95c401
mov dword [ebp - 0x28], 1
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x95c263
push esi
push ebx
call fcn.0095aa90
add esp, 8
mov dword [ebp - 0x28], eax
mov eax, 0xabfb58
mov ecx, ebx
call fcn.0094c330
test eax, eax
jne 0x95c263
mov dword [ebp - 0x28], eax
jmp 0x95c4fe
cmp dword [ebp - 0x28], 0
je 0x95c4fe
mov esi, dword [ebp + 0x230]
test esi, esi
je 0x95c2f8
mov dword [ebp - 0x38], 0
mov byte [ebp + 0x104], 0
push 0x103
push 0
lea ecx, [ebp + 0x105]
push ecx
call fcn.00a7ffb0
lea edx, [ebp - 0x38]
push edx
push esi
mov bl, 0x2c
lea edi, [ebp + 0x104]
call fcn.0095ae80
add esp, 0x14
cmp dword [ebp - 0x38], 0xffffffff
je 0x95c2f5
mov eax, dword [ebp - 0x44]
push eax
lea ecx, [ebp + 0x104]
push ecx
call fcn.0095aa90
add esp, 8
cmp eax, 1
jne 0x95c2de
mov dword [ebp - 0x28], 0
mov edi, dword [ebp - 0x1c]
jmp 0x95c4fe
lea edx, [ebp - 0x38]
push edx
push esi
mov bl, 0x2c
lea edi, [ebp + 0x104]
call fcn.0095ae80
add esp, 8
jmp 0x95c2b1
mov edi, dword [ebp - 0x1c]
cmp dword [ebp - 0x28], 0
je 0x95c4fe
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x95c30b
inc dword [eax]
cmp dword [ebp + 0x220], 0
je 0x95c4fe
lea esi, [edi + 8]
xor ebx, ebx
mov eax, esi
call fcn.0096ff30
mov ebx, eax
test byte [edi + 0xa30], 7
je 0x95c33b
push 0x80
push esi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
cmp dword [ebp + 0x22c], 0
je 0x95c378
test ebx, ebx
je 0x95c378
mov eax, 0xace578
mov ecx, ebx
call fcn.0094c330
test eax, eax
je 0x95c368
mov eax, str..OCX
mov ecx, ebx
call fcn.0094c330
test eax, eax
jne 0x95c378
call fcn.0098f440
test eax, eax
je 0x95c378
mov ecx, esi
call fcn.00956890
mov eax, esi
call fcn.0094dd20
mov ebx, eax
mov dword [ebp - 0x48], ebx
test ebx, ebx
jne 0x95c3da
cmp dword [ebp + 0x218], eax
je 0x95c3da
mov edi, esi
call fcn.0095bfa0
test eax, eax
jne 0x95c3f5
push esi
call fcn.0095be10
add esp, 4
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x80
push esi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov eax, esi
call fcn.0094dd20
mov ebx, eax
mov dword [ebp - 0x48], ebx
test ebx, ebx
jne 0x95c3d7
mov dword [ebp - 0x20], 1
push eax
mov ecx, esi
call fcn.00957a90
mov edi, dword [ebp - 0x1c]
cmp ebx, 1
jne 0x95c4fe
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x95c4fe
inc dword [eax]
jmp 0x95c4fe
mov dword [ebp - 0x48], 1
mov edi, dword [ebp - 0x1c]
jmp 0x95c3e3
test eax, 0x400
jne 0x95c4fe
mov dword [ebp - 0x40], 0
mov esi, dword [ebp + 0x230]
test esi, esi
je 0x95c48d
mov dword [ebp - 0x3c], 0
mov byte [ebp], 0
push 0x103
push 0
lea eax, [ebp + 1]
push eax
call fcn.00a7ffb0
lea ecx, [ebp - 0x3c]
push ecx
push esi
mov bl, 0x2c
lea edi, [ebp]
call fcn.0095ae80
add esp, 0x14
lea ebx, [ebx]
cmp dword [ebp - 0x3c], 0xffffffff
je 0x95c48a
mov edx, dword [ebp - 0x44]
push edx
lea eax, [ebp]
push eax
call fcn.0095aa90
add esp, 8
cmp eax, 1
jne 0x95c476
mov dword [ebp - 0x40], eax
mov edi, dword [ebp - 0x1c]
jmp 0x95c4fe
lea ecx, [ebp - 0x3c]
push ecx
push esi
mov bl, 0x2c
lea edi, [ebp]
call fcn.0095ae80
add esp, 8
jmp 0x95c450
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x34]
mov ebx, dword [ebp - 0x30]
cmp dword [ebp - 0x40], 0
jne 0x95c4fe
cmp dword [ebp - 0x24], 0
jne 0x95c4bb
push 0
push 0
push ebx
push esi
mov edx, dword [ebp + 0x220]
push edx
push 0
mov eax, dword [ebp + 0x218]
push eax
lea ecx, [edi + 8]
push ecx
jmp 0x95c4f6
mov eax, 0xabfb58
mov ecx, dword [ebp - 0x24]
call fcn.0094c330
push 0
mov edx, dword [ebp + 0x220]
push 0
push ebx
push esi
push edx
test eax, eax
jne 0x95c4e7
push eax
mov eax, dword [ebp + 0x218]
push eax
lea ecx, [edi + 8]
push ecx
jmp 0x95c4f6
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [ebp + 0x218]
push ecx
lea edx, [edi + 8]
push edx
call fcn.0095c0a0
or dword [ebp - 0x20], eax
lea esi, [edi + 0xa30]
mov ecx, dword [edi + 4]
call fcn.0094e160
test eax, eax
jne 0x95c180
mov eax, dword [edi + 4]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov esi, dword [ebp - 0x24]
test esi, esi
je 0x95c549
mov eax, 0xaad5c4
mov ecx, esi
call fcn.0094c330
test eax, eax
je 0x95c549
mov eax, 0xabfb58
mov ecx, esi
call fcn.0094c330
test eax, eax
jne 0x95c5cb
cmp dword [ebp + 0x220], 0
je 0x95c5cb
mov esi, dword [ebp - 0x2c]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jle 0x95c567
cmp byte [esi + eax - 1], 0x2e
je 0x95c5cb
call fcn.0095c080
mov ebx, eax
test ebx, ebx
jne 0x95c5cb
cmp dword [ebp + 0x218], eax
je 0x95c5cb
mov edi, esi
call fcn.0095bfa0
test eax, eax
jne 0x95c5c8
push eax
push str.favorites
push esi
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
je 0x95c5b5
push str.IEXPLORE.EXE
call fcn.0095be10
add esp, 4
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.0095c080
mov ebx, eax
test ebx, ebx
jne 0x95c5c8
mov dword [ebp - 0x20], 1
push ebx
mov ecx, esi
call fcn.00957a90
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 4], 0xfffffffe
jmp 0x95c5f6
test edi, edi
je 0x95c601
push edi
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [ebp - 0x20]
jmp 0x95c608
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x208]
xor ecx, ebp
call fcn.00a78f21
add ebp, 0x20c
mov esp, ebp
pop ebp
ret 0x20