Function at 0x417fc0
Capabilities:
Set file attributes

Disassembly:
sub esp, 0x5c
mov edx, dword [0x438de0]
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], edi
mov dword [esp + 0x58], ebp
mov dword [esp], edx
call sub.msvcrt.dll_fclose
mov eax, dword [0x428404]
test eax, eax
je 0x418000
mov ebx, dword [esp + 0x4c]
mov esi, dword [esp + 0x50]
mov edi, dword [esp + 0x54]
mov ebp, dword [esp + 0x58]
add esp, 0x5c
ret
lea ebx, [esp + 0x40]
lea ebp, [esp + 0x38]
mov dword [esp + 0x2c], ebx
lea edi, [esp + 0x30]
mov dword [esp + 8], ebx
mov dword [esp + 4], ebp
mov dword [esp], edi
call fcn.0041b4f0
mov dword [esp + 0x18], 0
mov ebx, eax
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 2
mov dword [esp + 4], 0x40000000
mov dword [esp], 0x438df8
call sub.KERNEL32.dll_CreateFileA
mov ecx, dword [0x428cb4]
mov esi, eax
sub esp, 0x1c
mov eax, dword [ecx + 0x14]
test al, 0x5f
jne 0x418252
mov edx, dword [0x438cf4]
test edx, edx
jne 0x418164
cmp esi, 0xffffffff
je 0x418121
test ebx, ebx
je 0x4180d1
mov dword [esp], esi
xor ecx, ecx
test bl, 1
sete cl
xor edx, edx
dec ecx
and edi, ecx
test bl, 2
sete dl
xor ecx, ecx
mov dword [esp + 0xc], edi
dec edx
and ebp, edx
mov dword [esp + 8], ebp
test bl, 4
sete cl
dec ecx
and dword [esp + 0x2c], ecx
mov edi, dword [esp + 0x2c]
mov dword [esp + 4], edi
call sub.KERNEL32.dll_SetFileTime
sub esp, 0x10
test eax, eax
je 0x4180e1
mov dword [esp], esi
call sub.KERNEL32.dll_CloseHandle
sub esp, 4
jmp 0x417fea
call sub.KERNEL32.dll_GetLastError
mov dword [esp + 8], eax
mov dword [esp + 4], 0x417f30
mov dword [esp], 0x428cb8
call sub.msvcrt.dll_sprintf
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0x428cb8
mov dword [esp], 0x4283f0
call dword [0x439258]
jmp 0x4180d1
call sub.KERNEL32.dll_GetLastError
mov dword [esp + 8], eax
mov dword [esp + 4], 0x417f50
mov dword [esp], 0x428cb8
call sub.msvcrt.dll_sprintf
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 4], 0x428cb8
mov dword [esp], 0x4283f0
call dword [0x439258]
jmp 0x417fea
movzx ecx, word [0x438d16]
mov dword [esp + 4], edx
mov dword [esp], 0x438df8
mov dword [esp + 8], ecx
call fcn.0041b130
cmp eax, 0x4f
jne 0x418082
mov eax, dword [0x42842c]
test eax, eax
jne 0x418200
mov edx, dword [0x438cf4]
add edx, 2
mov dword [esp], edx
call fcn.0040b990
mov ecx, dword [0x42842c]
movzx eax, ax
sub eax, 0xa
test ecx, ecx
je 0x4181f9
mov edx, 0x417f82
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], 0x4064f0
mov dword [esp], 0x428cb8
call sub.msvcrt.dll_sprintf
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 4], 0x428cb8
mov dword [esp], 0x4283f0
call dword [0x439258]
jmp 0x418082
mov edx, 0x417f84
jmp 0x4181b7
mov dword [esp + 4], 0x430cb8
mov dword [esp], 0x438df8
call fcn.00409b40
mov dword [esp + 8], eax
mov dword [esp + 4], 0x417f85
mov dword [esp], 0x428cb8
call sub.msvcrt.dll_sprintf
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 4], 0x428cb8
mov dword [esp], 0x4283f0
call dword [0x439258]
jmp 0x418191
mov dword [esp], 0x438df8
and eax, 0x7f
mov dword [esp + 4], eax
call sub.KERNEL32.dll_SetFileAttributesA
sub esp, 8
test eax, eax
jne 0x418074
call sub.KERNEL32.dll_GetLastError
mov dword [esp + 8], eax
mov dword [esp + 4], 0x417f90
mov dword [esp], 0x428cb8
call sub.msvcrt.dll_sprintf
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 4], 0x428cb8
mov dword [esp], 0x4283f0
call dword [0x439258]
jmp 0x418074