Function at 0x40642b
Capabilities:
Set file attributes

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x634
mov eax, dword [0x412004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, 0x1fc
lea eax, [ebp - 0x230]
push edi
mov ebx, ecx
mov esi, edx
push 0
push eax
mov dword [ebp - 0x62c], ebx
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x430]
push edi
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea edi, [ebp - 0x2c]
xor edx, edx
xor eax, eax
mov dword [ebp - 0x628], edx
mov dword [ebp - 0x630], edx
push 0xa
pop ecx
rep stosd dword es:[edi], eax
mov dword [ebp - 0x624], edx
lea eax, [ebp - 0x610]
mov dword [ebp - 0x61c], edx
mov ecx, 0x1e0
mov dword [ebp - 0x620], edx
mov byte [eax], dl
inc eax
sub ecx, 1
jne 0x4064ab
push 0xfe
mov edx, 0x4011ec
lea ecx, [ebp - 0x230]
call fcn.0040e35d
push 8
mov edx, 0x40110c
lea ecx, [ebp - 0x610]
call fcn.0040e2ff
xor edi, edi
mov dword [ebp - 0x5f0], 0x40115c
lea eax, [ebp - 0x630]
mov dword [ebp - 0x608], 0xa
inc edi
mov dword [ebp - 0x5e4], eax
push 8
mov edx, 0x40110c
mov dword [ebp - 0x5f8], edi
lea ecx, [ebp - 0x5c0]
call fcn.0040e2ff
and dword [ebp - 0x5ac], 0
lea ecx, [ebp - 0x570]
push 8
mov edx, 0x40110c
mov dword [ebp - 0x5a0], 0x4011f0
mov dword [ebp - 0x5b0], 0x12000
mov dword [ebp - 0x5b8], edi
mov dword [ebp - 0x5a8], edi
call fcn.0040e2ff
and dword [ebp - 0x55c], 0
lea ecx, [ebp - 0x520]
push 8
mov edx, 0x40110c
mov dword [ebp - 0x550], 0x4011f4
mov dword [ebp - 0x560], 0x12000
mov dword [ebp - 0x568], edi
mov dword [ebp - 0x558], edi
call fcn.0040e2ff
and dword [ebp - 0x50c], 0
lea eax, [ebp - 0x230]
push 8
mov edx, 0x40110c
mov dword [ebp - 0x500], 0x4011f8
lea ecx, [ebp - 0x4d0]
mov dword [ebp - 0x510], 0x10
mov dword [ebp - 0x518], edi
mov dword [ebp - 0x508], edi
mov dword [ebp - 0x4f4], eax
mov dword [ebp - 0x4f0], 0xfe
call fcn.0040e2ff
and dword [ebp - 0x4bc], 0
lea eax, [ebp - 0x628]
push 8
mov edx, 0x40110c
mov dword [ebp - 0x4b0], 0x401104
lea ecx, [ebp - 0x480]
mov dword [ebp - 0x4c0], 0xc0000
mov dword [ebp - 0x4c8], 3
mov dword [ebp - 0x4b8], edi
mov dword [ebp - 0x4a4], eax
call fcn.0040e2ff
and dword [ebp - 0x46c], 0
lea eax, [ebp - 0x620]
push ecx
mov dword [ebp - 0x454], eax
mov edx, esi
lea eax, [ebp - 0x610]
mov dword [ebp - 0x460], 0x40113c
push eax
push 6
push 0
mov ecx, ebx
mov dword [ebp - 0x470], 0x20000
mov dword [ebp - 0x478], 0xa
mov dword [ebp - 0x468], edi
call fcn.00411190
test eax, eax
jne 0x406688
push 2
call fcn.00411dc9
pop ecx
mov edx, 0x20001
mov ecx, eax
call fcn.0040d7c6
jmp 0x406aab
mov esi, dword [ebp - 0x544]
mov ebx, dword [ebp - 0x594]
mov dword [ebp - 0x618], ebx
mov dword [ebp - 0x614], esi
test esi, esi
jne 0x4066ba
mov ecx, 0x1fc
call fcn.0040ebd3
mov esi, eax
mov dword [ebp - 0x614], esi
test esi, esi
je 0x40666f
push ecx
xor edx, edx
mov ecx, ebx
call fcn.0040df49
push ecx
xor edx, edx
mov ecx, esi
call fcn.0040df49
cmp dword [ebp - 0x620], edi
jne 0x406701
cmp dword [ebp - 0x62c], 3
jbe 0x406701
mov ecx, 0x1b5
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
jmp 0x406aab
cmp dword [ebp - 0x5a4], 0
je 0x40674d
mov ecx, ebx
call fcn.0040e3f2
test eax, eax
jne 0x40674d
mov ecx, 0x30e
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
lea ecx, [ebp - 0x618]
call fcn.0040eb2f
lea ecx, [ebp - 0x614]
call fcn.0040eb2f
jmp 0x406aab
mov eax, dword [ebp - 0x554]
test eax, eax
je 0x40676f
mov ecx, esi
call fcn.0040e3f2
test eax, eax
jne 0x406769
mov ecx, 0x30f
jmp 0x40671a
mov eax, dword [ebp - 0x554]
cmp dword [ebp - 0x5a4], 0
jne 0x406786
test eax, eax
je 0x40678a
mov ecx, 0x30b
jmp 0x4066e4
test eax, eax
jne 0x40679a
cmp dword [ebp - 0x504], 0
je 0x40679a
mov ecx, 0x30c
jmp 0x40671a
cmp dword [ebp - 0x628], 0x3e7
jbe 0x4067b0
mov ecx, 0x1b9
jmp 0x40671a
cmp dword [ebp - 0x620], 0
mov ecx, ebx
je 0x4067f4
call fcn.0040cc0e
cmp eax, edi
je 0x406732
mov ebx, 0x193
mov ecx, ebx
call fcn.0040d995
push edi
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
inc ebx
cmp ebx, 0x1a2
jbe 0x4067cd
jmp 0x406a31
call fcn.0040f9d8
test eax, eax
je 0x406843
call fcn.0040f91b
test eax, eax
jne 0x406843
mov ecx, 0xe87
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
lea ecx, [ebp - 0x618]
call fcn.0040eb2f
lea ecx, [ebp - 0x614]
call fcn.0040eb2f
call fcn.0040d859
jmp 0x406aab
mov ecx, ebx
call fcn.0040f9d8
test eax, eax
jne 0x4068aa
cmp dword [ebp - 0x504], eax
je 0x40687d
push eax
push edi
mov edx, 0x4011ec
lea ecx, [ebp - 0x230]
call fcn.0040e401
test eax, eax
jne 0x406874
mov dword [ebp - 0x624], edi
jmp 0x4068aa
cmp dword [ebp - 0x504], 0
jne 0x4068aa
cmp dword [ebp - 0x5a4], 0
jne 0x40688f
cmp dword [ebp - 0x554], 0
je 0x4068aa
push 0xfe
mov edx, 0x401104
mov dword [ebp - 0x624], edi
lea ecx, [ebp - 0x230]
call fcn.0040e35d
push 2
push 0x401208
push ebx
call dword [sym.imp.api_ms_win_core_shlwapi_obsolete_l1_1_0.dll_StrCmpNW]
test eax, eax
jne 0x406919
push 3
push 0x401210
push ebx
call dword [sym.imp.api_ms_win_core_shlwapi_obsolete_l1_1_0.dll_StrCmpNW]
test eax, eax
je 0x406919
push 0x401208
push ebx
call dword [sym.imp.msvcrt.dll_wcstok]
mov dword [ebp - 0x62c], eax
pop ecx
pop ecx
test eax, eax
jne 0x406902
push eax
push edi
mov edx, 0x401208
mov ecx, ebx
call fcn.0040e401
test eax, eax
je 0x406902
mov ecx, 0xe7d
jmp 0x4066e4
mov ecx, ebx
call fcn.0040ed63
mov edx, dword [ebp - 0x62c]
mov ecx, ebx
shr eax, 1
push eax
call fcn.0040e35d
lea eax, [ebp - 0x61c]
mov edx, esi
push eax
push dword [ebp - 0x624]
lea eax, [ebp - 0x430]
mov ecx, ebx
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.004052aa
test eax, eax
jne 0x40695a
cmp dword [ebp - 0x61c], eax
je 0x406732
push ecx
mov ecx, ebx
call fcn.0041005b
jmp 0x406732
mov ecx, ebx
call fcn.0040f9d8
cmp eax, edi
jne 0x40698d
mov ecx, esi
call fcn.0040e3f2
test eax, eax
je 0x40698d
mov ecx, 0x313
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
push 0xa
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x628]
call dword [sym.imp.msvcrt.dll__itow]
add esp, 0xc
lea eax, [ebp - 0x430]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x40115c
push 0x40126c
call dword [sym.imp.api_ms_win_core_privateprofile_l1_1_0.dll_WritePrivateProfileStringW]
test eax, eax
je 0x406a38
push 0x7e
pop ecx
call fcn.0040d995
push edi
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
mov eax, dword [0x41248c]
test al, 1
je 0x4069e9
or eax, 0x21
jmp 0x4069ec
or eax, 0x20
push eax
mov dword [0x41248c], eax
lea eax, [ebp - 0x430]
push eax
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_SetFileAttributesW]
test eax, eax
jne 0x406a20
mov ecx, 0x8d
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
cmp dword [ebp - 0x61c], 0
je 0x406a31
push ecx
mov ecx, ebx
call fcn.0041005b
xor edi, edi
jmp 0x406732
mov ecx, 0x9a
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
mov eax, dword [0x41248c]
test al, 1
je 0x406a63
or eax, 0x21
jmp 0x406a66
or eax, 0x20
push eax
mov dword [0x41248c], eax
lea eax, [ebp - 0x430]
push eax
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_SetFileAttributesW]
test eax, eax
jne 0x406a9a
mov ecx, 0x8d
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
cmp dword [ebp - 0x61c], 0
je 0x406aab
push ecx
mov ecx, ebx
call fcn.0041005b
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004117f0
leave
ret