Function at 0x4031d0
Capabilities:
Get file attributes
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x40cea7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x12c8
call fcn.00405980
mov eax, dword [0x410240]
push ebx
push esi
xor eax, ebp
push edi
mov esi, ecx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1290], esi
mov dword [ebp - 4], 0
call fcn.004010a0
lea eax, [ebp - 0x121c]
push eax
call fcn.00401470
add esp, 4
lea ecx, [ebp - 0x121c]
push 0x40d204
push ecx
call fcn.004049a1
mov ebx, eax
add esp, 8
test ebx, ebx
jne 0x40324d
call fcn.00401110
or eax, 0xffffffff
jmp 0x4037fd
mov dword [ebp - 0x129c], ebx
lea edx, [ebp - 0x518]
push edx
mov byte [ebp - 4], 1
call fcn.004014d0
lea eax, [esi + 4]
add esp, 4
mov edx, eax
jmp 0x403270
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403270
lea edi, [ebp - 0x518]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x403280
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x518]
dec edi
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4032a0
mov eax, dword [str..exe]
mov cl, byte [0x40d360]
lea edx, [ebp - 0x518]
mov dword [edi], eax
push 0x40d208
push edx
mov byte [edi + 4], cl
call fcn.004049a1
add esp, 8
test eax, eax
mov dword [ebp - 0x1298], eax
jne 0x4032ec
call fcn.00401110
push ebx
call fcn.00404211
add esp, 4
or eax, 0xffffffff
jmp 0x4037fd
xor eax, eax
mov esi, dword [ebp - 0x1290]
mov byte [ebp - 0xe1c], 0
mov ecx, 0xff
lea edi, [ebp - 0xe1b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0xa1c], 0
mov ecx, 0xff
lea edi, [ebp - 0xa1b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0xe1c]
push eax
mov ecx, esi
call fcn.00402460
lea ecx, [ebp - 0xa1c]
push ecx
call fcn.00402340
lea edi, [ebp - 0xa1c]
add esp, 4
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x403348
mov edx, dword [str._rzx]
mov al, byte [0x40d358]
mov dword [edi], edx
lea ecx, [ebp - 0xa1c]
push ecx
lea edx, [ebp - 0xe1c]
push edx
lea ecx, [ebp - 0x128c]
mov byte [edi + 4], al
call fcn.004038c0
lea ecx, [ebp - 0x128c]
mov byte [ebp - 4], 2
call fcn.00403b90
mov ecx, esi
call fcn.004029b0
push 0x200000
call fcn.00403d91
mov esi, eax
add esp, 4
mov dword [ebp - 0x1294], esi
mov dword [ebp - 0x12a0], esi
mov eax, dword [ebp - 0x1290]
mov ecx, dword [eax]
push 0
push ecx
push ebx
mov byte [ebp - 4], 3
call fcn.00404d60
add esp, 0xc
push ebx
push 0x200000
push 1
push esi
call fcn.00404a9d
mov edx, dword [ebp - 0x1298]
push edx
push eax
push 1
push esi
call fcn.004048f9
mov al, byte [ebx + 0xc]
add esp, 0x20
test al, 0x10
je 0x4033c2
mov eax, dword [ebp - 0x1298]
test eax, eax
je 0x4033fd
push eax
call fcn.00404211
add esp, 4
lea eax, [ebp - 0x518]
push eax
push str.__s_
push esi
call fcn.004042cf
add esp, 0xc
mov ecx, esi
lea edx, [ebp - 0x518]
lea ebx, [ebx]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x403420
push esi
call fcn.00402340
lea edi, [ebp - 0x518]
add esp, 4
dec edi
lea ebx, [ebx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x403440
mov ecx, dword [str.__o_]
mov dl, byte [0x40d348]
mov dword [edi], ecx
mov eax, esi
mov byte [edi + 4], dl
mov edx, eax
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403460
lea edi, [ebp - 0x518]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x403470
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x518]
dec edi
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x403490
mov eax, dword [str.___y]
mov cl, byte [0x40d340]
push 0x40
lea edx, [ebp - 0x518]
mov dword [edi], eax
push 1
push edx
mov byte [edi + 4], cl
call fcn.004022b0
mov ebx, dword [ebp - 0x1294]
mov edi, ebx
add esp, 0xc
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4034c4
mov eax, dword [str._rzx]
mov dword [edi], eax
mov cl, byte [0x40d358]
lea edx, [ebp - 0x518]
push edx
mov byte [edi + 4], cl
call fcn.00402340
lea edi, [ebp - 0x518]
add esp, 4
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4034f2
mov ax, word [0x40d25c]
mov word [edi], ax
mov eax, dword [ebp - 0x1290]
add eax, 4
mov dword [ebp - 0x1294], eax
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403514
lea edi, [ebp - 0x518]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x403524
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x518]
push ebx
push ecx
call fcn.0040407a
add esp, 8
test eax, eax
je 0x403662
push 1
push ebx
call fcn.00401180
mov edi, 0xf
mov eax, ebx
add esp, 8
mov dword [ebp - 0x12a4], edi
mov dword [ebp - 0x12a8], 0
mov byte [ebp - 0x12b8], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403580
sub eax, edx
push eax
push ebx
lea ecx, [ebp - 0x12bc]
call fcn.00402070
push 0x5c
lea edx, [ebp - 0x12bc]
push edx
lea eax, [ebp - 0x12d8]
push eax
mov byte [ebp - 4], 4
call fcn.00402860
add esp, 0xc
mov ecx, dword [eax + 0x18]
mov esi, 0x10
cmp ecx, esi
mov byte [ebp - 4], 5
jb 0x4035c7
mov eax, dword [eax + 4]
jmp 0x4035ca
add eax, 4
push eax
call fcn.00401540
mov eax, dword [ebp - 0x12c0]
add esp, 4
cmp eax, esi
jb 0x4035ec
mov ecx, dword [ebp - 0x12d4]
push ecx
call fcn.00404f12
add esp, 4
cmp dword [ebp - 0x12a4], esi
mov dword [ebp - 0x12c0], edi
mov dword [ebp - 0x12c4], 0
mov byte [ebp - 0x12d4], 0
mov byte [ebp - 4], 3
jb 0x40361e
mov edx, dword [ebp - 0x12b8]
push edx
call fcn.00404f12
add esp, 4
mov ecx, dword [ebp - 0x1290]
push ebx
mov dword [ebp - 0x12a4], edi
mov dword [ebp - 0x12a8], 0
mov byte [ebp - 0x12b8], 0
call fcn.00402cf0
lea eax, [ebp - 0x518]
push ebx
push eax
call fcn.004012d0
add esp, 8
lea ecx, [ebp - 0x518]
push 1
push ecx
call fcn.00401180
add esp, 8
mov byte [ebp - 0x118], 0
xor eax, eax
mov ecx, 0x40
lea edi, [ebp - 0x117]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea edx, [ebp - 0x118]
push 0x104
push edx
stosb byte es:[edi], al
call fcn.00401a50
lea edi, [ebp - 0x118]
add esp, 8
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x403696
mov eax, dword [str.RzxInstall.log]
mov ecx, dword [0x40d26c]
mov edx, dword [0x40d270]
mov dword [edi], eax
mov eax, dword [0x40d274]
mov dword [edi + 4], ecx
lea ecx, [ebp - 0x118]
mov dword [edi + 8], edx
push 0x40d208
push ecx
mov dword [edi + 0xc], eax
call fcn.004049a1
mov esi, eax
add esp, 8
test esi, esi
je 0x4036e9
push ebx
push esi
call fcn.0040591c
push esi
call fcn.00404211
add esp, 0xc
lea ecx, [ebp - 0x128c]
call fcn.00403970
lea edx, [ebp - 0x518]
push edx
call fcn.004014d0
mov eax, dword [ebp - 0x1294]
add esp, 4
mov edx, eax
jmp 0x403710
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403710
lea edi, [ebp - 0x518]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x403720
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x518]
dec edi
nop
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x403740
mov eax, dword [str..exe]
mov cl, byte [0x40d360]
push ebx
lea edx, [ebp - 0x61c]
mov dword [edi], eax
push str._supclient.bmp
push edx
mov byte [edi + 4], cl
call fcn.004042cf
push 1
lea eax, [ebp - 0x61c]
push eax
lea ecx, [ebp - 0x518]
push ecx
call fcn.00401290
add esp, 0x18
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
or eax, 2
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov edi, ebx
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x403797
mov edx, dword [str._rzxmon.exe]
mov dword [edi], edx
mov eax, dword [0x40d324]
mov dword [edi + 4], eax
mov ecx, dword [0x40d328]
mov dword [edi + 8], ecx
call fcn.00401110
push 0x20
push 0
push ebx
call fcn.004022b0
mov edx, dword [ebp - 0x12a0]
add esp, 0xc
push edx
call fcn.00404f12
add esp, 4
lea ecx, [ebp - 0x128c]
mov byte [ebp - 4], 1
call fcn.00403830
mov eax, dword [ebp - 0x129c]
test eax, eax
je 0x4037fb
push eax
call fcn.00404211
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00404293
mov esp, ebp
pop ebp
ret