Function at 0x403149
Capabilities:
Set file attributes
Terminate process

Disassembly:
mov eax, 0x40d8fc
call fcn.00406320
sub esp, 0x628
push ebx
push esi
mov esi, 0x104
xor ebx, ebx
push esi
lea eax, [ebp - 0x42c]
push ebx
push eax
call fcn.00406340
push esi
lea eax, [ebp - 0x224]
push ebx
push eax
call fcn.00406340
push esi
lea eax, [ebp - 0x634]
push ebx
push eax
call fcn.00406340
push esi
lea eax, [ebp - 0x120]
push ebx
push eax
call fcn.00406340
push esi
lea eax, [ebp - 0x328]
push ebx
push eax
call fcn.00406340
push esi
lea eax, [ebp - 0x530]
push ebx
push eax
call fcn.00406340
add esp, 0x48
cmp byte [0x411840], bl
je 0x4031d4
lea eax, [ebp - 0x120]
push 0x411840
push eax
call fcn.00406600
jmp 0x4031e1
lea eax, [ebp - 0x120]
push esi
push eax
call fcn.004070fc
lea eax, [ebp - 0x120]
push eax
call fcn.00405ed0
add esp, 0xc
cmp byte [ebp + eax - 0x121], 0x5c
je 0x403215
cmp byte [ebp - 0x120], bl
je 0x403215
lea eax, [ebp - 0x120]
push 0x410960
push eax
call fcn.00406610
pop ecx
pop ecx
mov esi, str.TemporaryPathForXZIP_
push edi
push esi
call fcn.00405ed0
test byte [0x4774b4], 0x30
pop ecx
mov edi, eax
je 0x403254
push esi
push dword [ebp + 8]
call fcn.00406cb0
pop ecx
cmp eax, ebx
pop ecx
je 0x40324f
add eax, edi
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.00406610
pop ecx
pop ecx
jmp 0x403295
push dword [ebp + 8]
jmp 0x40323f
lea eax, [ebp - 0x530]
push eax
lea eax, [ebp - 0x328]
push eax
push ebx
push ebx
push dword [ebp + 8]
call fcn.00402a8a
lea eax, [ebp - 0x328]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.00406610
lea eax, [ebp - 0x530]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.00406610
add esp, 0x24
push ebx
lea eax, [ebp - 0x42c]
push ebx
push eax
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.00402a8a
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.00406610
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x634]
push eax
call fcn.00406600
lea eax, [ebp - 0x224]
push eax
call fcn.00402ed3
add esp, 0x28
cmp byte [0x41197e], bl
pop edi
jne 0x4033b6
lea eax, [ebp - 0x120]
push 0x410480
push eax
call fcn.004065e9
pop ecx
cmp eax, ebx
pop ecx
mov dword [0x411614], eax
je 0x4033b6
push eax
call fcn.00407217
lea eax, [ebp - 0x120]
push 0x46
push eax
call fcn.00402a39
push eax
mov esi, 0x47614c
push 0x410980
push esi
call fcn.0040649a
push esi
call fcn.00401243
push 4
push esi
call fcn.0040128b
movsx eax, al
add esp, 0x24
cmp eax, 0x59
jg 0x40336c
je 0x403392
sub eax, 0xd
je 0x403392
sub eax, 0x34
je 0x4033a8
dec eax
dec eax
je 0x40339b
dec eax
dec eax
je 0x403392
sub eax, 9
je 0x403385
jmp 0x4033b6
sub eax, 0x61
je 0x4033a8
dec eax
dec eax
je 0x40339b
dec eax
dec eax
je 0x403392
sub eax, 9
je 0x403385
sub eax, 0xb
je 0x403392
jmp 0x4033b6
mov byte [0x410916], bl
xor eax, eax
jmp 0x40344c
mov byte [0x410916], 1
jmp 0x4033b6
push 1
mov byte [0x410916], bl
call fcn.004063c5
mov byte [0x410916], 1
mov byte [0x41197e], 1
lea eax, [ebp - 0x120]
push 0x20
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea eax, [ebp - 0x120]
push 0x410958
push eax
call fcn.004065e9
pop ecx
cmp eax, ebx
pop ecx
mov dword [0x411614], eax
jne 0x4033f2
lea eax, [ebp - 0x120]
push eax
push ebx
call fcn.00402716
pop ecx
pop ecx
jmp 0x403449
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x1c]
mov byte [ebp - 0x1c], al
call fcn.00403c02
lea eax, [ebp - 0x120]
push eax
call fcn.00405ed0
pop ecx
push eax
lea eax, [ebp - 0x120]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00403c62
mov eax, dword [0x47739c]
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, 0x477398
mov eax, dword [eax]
mov dword [ebp - 4], ebx
push eax
lea eax, [ebp + 8]
push eax
call fcn.00403bc8
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x1c]
call fcn.00403c02
push 1
pop eax
mov ecx, dword [ebp - 0xc]
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret