Function at 0x4016c0
Capabilities:
Set file attributes

Disassembly:
push edi
lea edi, [esp + 8]
and esp, 0xfffffff0
push dword [edi - 4]
push ebp
mov ebp, esp
push edi
push esi
mov esi, edi
mov edi, eax
push ebx
mov ebx, ecx
sub esp, 0x4d0
mov eax, dword [esi]
mov dword [ebp - 0x494], edx
mov dword [ebp - 0x488], 0x200020
mov dword [ebp - 0x484], 0x200020
mov dword [ebp - 0x480], 0x200020
mov dword [ebp - 0x49c], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x47c], 0x200020
mov dword [ebp - 0x498], eax
mov eax, dword [esi + 8]
movzx esi, byte [0x403004]
mov dword [ebp - 0x4a0], eax
xor eax, eax
and esi, 8
mov word [ebp - 0x478], ax
jne 0x401d20
test ebx, ebx
jne 0x401ac8
lea eax, [ebp - 0x268]
mov dword [ebp - 0x48c], eax
mov eax, dword [sym.imp.kernel32.dll_FindFirstFileW]
lea ebx, [ebp - 0x470]
mov dword [ebp - 0x4a8], eax
mov eax, dword [sym.imp.kernel32.dll_FindClose]
mov dword [ebp - 0x4ac], eax
xor eax, eax
movzx edx, word [edi + eax]
mov word [ebx + eax], dx
add eax, 2
test dx, dx
jne 0x401770
cmp word [ebp - 0x470], 0
mov edx, ebx
je 0x401799
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x401790
mov dword [ebp - 0x490], edi
mov edi, dword [ebp - 0x494]
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [edi + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4017b0
mov eax, esi
mov edi, dword [ebp - 0x490]
test al, al
jne 0x401cc0
mov eax, dword [ebp - 0x48c]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x4a8]
call eax
mov dword [ebp - 0x4a8], 0
sub esp, 8
mov dword [ebp - 0x494], eax
cmp eax, 0xffffffff
je 0x401946
lea esi, [ebp - 0x23c]
mov eax, esi
shr eax, 0x10
mov dword [ebp - 0x4a4], eax
mov eax, dword [sym.imp.kernel32.dll_FindNextFileW]
mov dword [ebp - 0x490], eax
lea esi, [esi]
test byte [0x403004], 8
jne 0x401970
mov dword [esp + 4], 0x40411a
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_lstrcmpW]
sub esp, 8
test eax, eax
je 0x401920
mov dword [esp + 4], 0x40411e
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_lstrcmpW]
sub esp, 8
test eax, eax
je 0x401920
mov eax, dword [ebp - 0x49c]
mov edx, dword [ebp - 0x268]
test eax, eax
jne 0x40187e
test dl, 0x10
jne 0x401920
mov eax, dword [ebp - 0x498]
mov ecx, dword [ebp - 0x4a0]
or eax, ecx
je 0x4019d8
mov eax, ecx
mov ecx, dword [ebp - 0x498]
not eax
and eax, edx
or ecx, eax
mov eax, pe_nt_image_headers32
cmove ecx, eax
xor eax, eax
mov dword [ebp - 0x268], ecx
movzx edx, word [edi + eax]
mov word [ebx + eax], dx
add eax, 2
test dx, dx
jne 0x4018b0
cmp word [ebp - 0x470], 0
mov edx, ebx
je 0x4018d9
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x4018d0
xor eax, eax
mov dword [ebp - 0x4a8], ecx
lea esi, [esi]
movzx ecx, word [esi + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x4018e8
mov ecx, dword [ebp - 0x4a8]
mov dword [esp], ebx
mov dword [esp + 4], ecx
call dword [sym.imp.kernel32.dll_SetFileAttributesW]
sub esp, 8
mov dword [ebp - 0x4a8], 1
lea esi, [esi]
nop
mov eax, dword [ebp - 0x48c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x494]
mov dword [esp], eax
mov eax, dword [ebp - 0x490]
call eax
sub esp, 8
test eax, eax
jne 0x401820
mov eax, dword [ebp - 0x494]
mov dword [esp], eax
mov eax, dword [ebp - 0x4ac]
call eax
mov eax, dword [ebp - 0x4a8]
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
ret
mov eax, dword [ebp - 0x4a4]
test eax, eax
je 0x401ab0
mov dword [esp + 4], 0xffffffff
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x4019a4
mov eax, esi
call section..text
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Found__s_n
mov dword [esp + 8], str.ATTRIB_processdirectory
mov dword [esp + 4], 0x403004
mov dword [esp], 3
call fcn.00401280
jmp 0x40182d
test dl, 2
je 0x4019e9
mov ecx, 0x48
mov word [ebp - 0x480], cx
test dl, 4
je 0x4019fa
mov ecx, 0x53
mov word [ebp - 0x486], cx
test dl, 0x20
je 0x401a0b
mov ecx, 0x41
mov word [ebp - 0x488], cx
test dl, 1
je 0x401a1c
mov ecx, 0x52
mov word [ebp - 0x47e], cx
test dh, 1
je 0x401a2d
mov ecx, 0x54
mov word [ebp - 0x47c], cx
and dh, 8
jne 0x401bd0
xor edx, edx
lea esi, [esi]
nop
movzx ecx, word [edi + edx]
mov word [ebx + edx], cx
add edx, 2
test cx, cx
jne 0x401a40
cmp word [ebp - 0x470], 0
mov edx, ebx
je 0x401a70
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x401a60
lea esi, [esi]
movzx ecx, word [esi + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x401a70
lea eax, [ebp - 0x488]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], str._1______2_n
call fcn.004012d0
movdqa xmm0, xmmword [str.]
movaps xmmword [ebp - 0x488], xmm0
jmp 0x40190e
mov dword [esp + 4], esi
mov dword [esp], str._04x
call fcn.004011c0
jmp 0x4019a4
lea ebx, [ebp - 0x470]
xor eax, eax
movzx edx, word [edi + eax]
mov word [ebx + eax], dx
add eax, 2
test dx, dx
jne 0x401ad0
cmp word [ebp - 0x470], 0
mov edx, ebx
je 0x401af9
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x401af0
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [eax + 0x4040f0]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x401b00
mov eax, esi
test al, al
jne 0x401de8
lea eax, [ebp - 0x268]
mov dword [ebp - 0x48c], eax
mov dword [esp + 4], eax
mov eax, dword [sym.imp.kernel32.dll_FindFirstFileW]
mov dword [esp], ebx
mov dword [ebp - 0x4a8], eax
call eax
mov esi, dword [sym.imp.kernel32.dll_FindNextFileW]
sub esp, 8
mov dword [ebp - 0x4a4], eax
mov dword [ebp - 0x490], esi
lea esi, [ebp - 0x23c]
cmp eax, 0xffffffff
je 0x401ba0
test byte [ebp - 0x268], 0x10
je 0x401b7e
mov dword [esp + 4], 0x40411a
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_lstrcmpW]
sub esp, 8
test eax, eax
jne 0x401be8
mov eax, dword [ebp - 0x48c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x4a4]
mov dword [esp], eax
mov eax, dword [ebp - 0x490]
call eax
sub esp, 8
test eax, eax
jne 0x401b5d
mov eax, dword [ebp - 0x4a4]
mov dword [esp], eax
mov eax, dword [sym.imp.kernel32.dll_FindClose]
mov dword [ebp - 0x4ac], eax
call eax
movzx esi, byte [0x403004]
sub esp, 4
and esi, 8
jmp 0x40176e
mov edx, 0x43
mov word [ebp - 0x47a], dx
jmp 0x401a36
mov dword [esp + 4], 0x40411e
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_lstrcmpW]
sub esp, 8
test eax, eax
je 0x401b7e
xor eax, eax
lea esi, [esi]
lea esi, [esi]
movzx edx, word [edi + eax]
mov word [ebx + eax], dx
add eax, 2
test dx, dx
jne 0x401c10
cmp word [ebp - 0x470], 0
mov edx, ebx
je 0x401c39
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x401c30
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [esi + eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x401c40
cmp word [ebp - 0x470], 0
mov edx, ebx
je 0x401c69
lea esi, [esi]
add edx, 2
cmp word [edx], 0
jne 0x401c60
xor eax, eax
lea esi, [esi]
nop
movzx ecx, word [eax + 0x404124]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x401c70
mov eax, dword [ebp - 0x4a0]
mov ecx, 1
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x498]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x49c]
mov dword [esp], eax
mov edx, dword [ebp - 0x494]
mov eax, ebx
call fcn.004016c0
jmp 0x401b7e
mov eax, ebx
shr eax, 0x10
test eax, eax
je 0x401e70
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x401cf3
mov eax, ebx
call section..text
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Searching_for_files_as__s_n
mov dword [esp + 8], str.ATTRIB_processdirectory
mov dword [esp + 4], 0x403004
mov dword [esp], 3
call fcn.00401280
jmp 0x4017d0
mov eax, edx
shr eax, 0x10
test eax, eax
je 0x401e50
mov dword [esp + 4], 0xffffffff
mov eax, dword [ebp - 0x494]
mov esi, str._invalid_
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
sub esp, 8
test eax, eax
jne 0x401d5d
mov eax, dword [ebp - 0x494]
call section..text
mov esi, eax
mov eax, edi
shr eax, 0x10
test eax, eax
je 0x401e88
mov dword [esp + 4], 0xffffffff
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x401d90
mov eax, edi
call section..text
mov ecx, dword [ebp - 0x4a0]
mov dword [esp + 0x20], ecx
mov ecx, dword [ebp - 0x498]
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0xc], str.Processing_dir__s__spec__s___d__lx__lx_n
mov dword [esp + 8], str.ATTRIB_processdirectory
mov dword [esp + 4], 0x403004
mov dword [esp], 3
call fcn.00401280
movzx esi, byte [0x403004]
and esi, 8
jmp 0x40173e
mov eax, ebx
shr eax, 0x10
test eax, eax
je 0x401e9d
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x401e1b
mov eax, ebx
call section..text
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Searching_for_directories_with__s_n
mov dword [esp + 8], str.ATTRIB_processdirectory
mov dword [esp + 4], 0x403004
mov dword [esp], 3
call fcn.00401280
jmp 0x401b1d
mov dword [esp + 4], edx
mov dword [esp], str._04x
call fcn.004011c0
mov esi, eax
jmp 0x401d5d
mov dword [esp + 4], ebx
mov dword [esp], str._04x
call fcn.004011c0
jmp 0x401cf3
mov dword [esp + 4], edi
mov dword [esp], str._04x
call fcn.004011c0
jmp 0x401d90
mov dword [esp + 4], ebx
mov dword [esp], str._04x
call fcn.004011c0
jmp 0x401e1b