Function at 0x4013ab
Capabilities:
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov dword [ebp - 4], 0
push 8
call fcn.004047d1
add esp, 4
mov dword [ebp - 8], eax
mov edi, eax
mov esi, 0x47c92e
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov eax, 0x47c8ea
test eax, eax
je 0x401400
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.004047d1
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [0x47cb04]
test ebx, ebx
je 0x401414
push ebx
call fcn.004047cb
add esp, 4
pop eax
mov dword [0x47cb04], eax
mov eax, 0x47c901
test eax, eax
je 0x401436
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.004047d1
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [0x47cb08]
test ebx, ebx
je 0x40144a
push ebx
call fcn.004047cb
add esp, 4
pop eax
mov dword [0x47cb08], eax
mov eax, 0x47c917
test eax, eax
je 0x40146c
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.004047d1
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [0x47cb0c]
test ebx, ebx
je 0x401480
push ebx
call fcn.004047cb
add esp, 4
pop eax
mov dword [0x47cb0c], eax
jmp 0x401498
push 0
mov ebx, 0x108
call fcn.00405000
add esp, 4
mov dword [ebp - 0x14], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4014c0
mov eax, 0x47c8e1
push eax
push 1
mov ebx, 0x268
call fcn.00405090
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4014e6
push ebx
call fcn.004047cb
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x4014fa
push ebx
call fcn.004047cb
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0
push 0
push 0
push 0x80000005
push 0
mov eax, dword [0x47cb08]
test eax, eax
jne 0x401519
mov eax, 0x47c92e
push eax
push 0x80000005
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x40152d
mov eax, 0x47c92e
push eax
push 3
mov ebx, 0x1ac
call fcn.00405100
add esp, 0x28
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffff
je 0x401bd8
push dword [0x47cb0c]
push dword [0x47cb04]
mov ecx, 2
call fcn.00401334
add esp, 8
mov dword [ebp - 0x14], eax
push 0
push 0
push 0
push 0x80000005
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x401582
mov eax, 0x47c92e
push eax
push 0x80000005
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x401596
mov eax, 0x47c92e
push eax
push 3
mov ebx, 0x1c4
call fcn.00405270
add esp, 0x28
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4015bc
push ebx
call fcn.004047cb
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [ebp - 8]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x4015de
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x4015da
imul eax, dword [ebx]
jmp 0x4015cf
mov ecx, eax
test ecx, ecx
je 0x4015fd
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x4015f6
push ebx
push eax
call fcn.004047cb
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x4015e4
call fcn.004047cb
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
call fcn.00401c5b
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jne 0x4017d3
cmp dword [0x47cafc], 0
je 0x4017d3
push 0
mov ebx, 0x108
call fcn.00405000
add esp, 4
mov dword [ebp - 0x14], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x401654
mov eax, 0x47c8e1
push eax
push 1
mov ebx, 0x268
call fcn.00405090
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40167a
push ebx
call fcn.004047cb
add esp, 4
mov eax, dword [ebp - 0x18]
push eax
mov ebx, dword [0x47cb10]
test ebx, ebx
je 0x401691
push ebx
call fcn.004047cb
add esp, 4
pop eax
mov dword [0x47cb10], eax
push 0x80000301
push 0
push 0xb
push 1
mov ebx, 0x1c
mov eax, 0x407370
call fcn.00404ce0
add esp, 0x10
mov dword [ebp - 0x14], eax
push str.HD_X.dat
push dword [ebp - 0x14]
mov ecx, 2
call fcn.0040106b
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4016e5
push ebx
call fcn.004047cb
add esp, 4
push 0x80000005
push 0
mov eax, dword [0x47cb10]
test eax, eax
jne 0x4016fa
mov eax, 0x47c92e
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x40170e
mov eax, 0x47c8e1
push eax
push 2
mov ebx, 0x26c
call fcn.00404d80
add esp, 0x1c
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x401731
push ebx
call fcn.004047cb
add esp, 4
push 0x80000301
push 0
push 3
push 1
mov ebx, 0x1c
mov eax, 0x407370
call fcn.00404ce0
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x40445c
mov eax, str..exe
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00401d19
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x401781
push ebx
call fcn.004047cb
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x401791
push ebx
call fcn.004047cb
add esp, 4
push 0x40445c
mov eax, str..exe
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
mov eax, str.C:UsersAdministratorDesktop_
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
call fcn.00401d19
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4017c3
push ebx
call fcn.004047cb
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x4017d3
push ebx
call fcn.004047cb
add esp, 4
lea eax, [ebp - 8]
push eax
call fcn.00401c5b
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jne 0x401bd8
mov ebx, dword [ebp - 8]
call fcn.0040138b
mov eax, 0
cmp eax, ecx
jl 0x401811
push 0x550
push 0x4012f66
push 1
call fcn.004047d7
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x14]
mov eax, dword [ebx]
test eax, eax
je 0x401835
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.004047d1
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [0x47cb10]
test ebx, ebx
je 0x401849
push ebx
call fcn.004047cb
add esp, 4
pop eax
mov dword [0x47cb10], eax
mov ebx, dword [ebp - 8]
call fcn.0040138b
mov eax, 1
cmp eax, ecx
jl 0x401877
push 0x577
push 0x4012f66
push 1
call fcn.004047d7
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x14]
mov eax, dword [ebx]
test eax, eax
je 0x40189b
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.004047d1
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [0x47cb14]
test ebx, ebx
je 0x4018af
push ebx
call fcn.004047cb
add esp, 4
pop eax
mov dword [0x47cb14], eax
cmp dword [0x47cb18], 0
jne 0x401a85
push 0
mov ebx, 0x104
call fcn.00405430
add esp, 4
mov dword [ebp - 0x14], eax
push 0
mov ebx, 0x108
call fcn.00405000
add esp, 4
mov dword [ebp - 0x18], eax
push dword [ebp - 0x18]
push str.HD_
push dword [ebp - 0x14]
mov ecx, 3
call fcn.0040106b
add esp, 0xc
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x401917
push ebx
call fcn.004047cb
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x401927
push ebx
call fcn.004047cb
add esp, 4
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40193b
push ebx
call fcn.004047cb
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0
mov ebx, 0x108
call fcn.00405000
add esp, 4
mov dword [ebp - 0x14], eax
push dword [ebp - 0x14]
push 0x47c96a
mov ecx, 2
call fcn.0040106b
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40197c
push ebx
call fcn.004047cb
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x40198f
mov eax, 0x47c8e1
push eax
push 1
mov ebx, 0x2c
mov eax, 0x4075a0
call fcn.00404ce0
add esp, 0x10
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4019b7
push ebx
call fcn.004047cb
add esp, 4
push 0x80000004
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x4019ca
mov eax, 0x47c8e1
push eax
push 1
mov ebx, 0x244
call fcn.004054c0
add esp, 0x10
push 0x80000005
push 0
mov eax, dword [0x47cb14]
test eax, eax
jne 0x4019f2
mov eax, 0x47c92e
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x401a06
mov eax, 0x47c8e1
push eax
push 2
mov ebx, 0x26c
call fcn.00404d80
add esp, 0x1c
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], esp
push 6
push dword [ebp - 0xc]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
nop
nop
cmp dword [ebp - 0x14], esp
je 0x401a4d
push 0x6ea
push 0x4012f66
push 6
call fcn.004047d7
add esp, 0xc
push 0
push 0
push 0
push 0x80000002
push 0
push 0
push 0x80000004
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x401a72
mov eax, 0x47c8e1
push eax
push 3
mov ebx, 0x2c0
call fcn.00404e20
add esp, 0x28
mov dword [0x47cb18], 1
push 0x80000301
push 0
push 0xb
push 1
mov ebx, 0x1c
mov eax, 0x407370
call fcn.00404ce0
add esp, 0x10
mov dword [ebp - 0x14], eax
push str.HD_X.dat
push dword [ebp - 0x14]
mov ecx, 2
call fcn.0040106b
add esp, 8
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x401add
push ebx
call fcn.004047cb
add esp, 4
push 0x80000005
push 0
mov eax, dword [0x47cb10]
test eax, eax
jne 0x401af2
mov eax, 0x47c92e
push eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x401b06
mov eax, 0x47c8e1
push eax
push 2
mov ebx, 0x26c
call fcn.00404d80
add esp, 0x1c
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x401b29
push ebx
call fcn.004047cb
add esp, 4
cmp dword [0x47cafc], 0
je 0x401bd8
push 0x80000301
push 0
push 3
push 1
mov ebx, 0x1c
mov eax, 0x407370
call fcn.00404ce0
add esp, 0x10
mov dword [ebp - 0x14], eax
push 0x40445c
mov eax, str..exe
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00401d19
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x401b86
push ebx
call fcn.004047cb
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x401b96
push ebx
call fcn.004047cb
add esp, 4
push 0x40445c
mov eax, str..exe
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
mov eax, str.C:UsersAdministratorDesktop_
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
call fcn.00401d19
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x401bc8
push ebx
call fcn.004047cb
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x401bd8
push ebx
call fcn.004047cb
add esp, 4
mov dword [0x47cb00], 0
jmp 0x401bf2
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x401c02
push ebx
call fcn.004047cb
add esp, 4
mov ebx, dword [ebp - 8]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x401c20
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x401c1c
imul eax, dword [ebx]
jmp 0x401c11
mov ecx, eax
test ecx, ecx
je 0x401c3f
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x401c38
push ebx
push eax
call fcn.004047cb
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x401c26
call fcn.004047cb
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x401c57
push ebx
call fcn.004047cb
add esp, 4
mov esp, ebp
pop ebp
ret