Function at 0x403181
Capabilities:
Set file attributes

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xa24
mov eax, dword [0x412004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0xa18], edx
mov esi, 0x1fc
mov dword [ebp - 0xa14], ebx
push esi
lea eax, [ebp - 0x208]
mov dword [ebp - 0xa20], ebx
mov edi, ecx
mov dword [ebp - 0xa1c], ebx
push ebx
push eax
mov dword [ebp - 0xa0c], edi
mov dword [ebp - 0x9fc], 0x401108
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [ebp - 0x9f4], ebx
lea eax, [ebp - 0x408]
push esi
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [ebp - 0xa08], ebx
add esi, 2
mov dword [ebp - 0x9f0], ebx
lea eax, [ebp - 0x608]
push esi
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x808]
push esi
push ebx
push eax
call sub.msvcrt.dll_memset
mov eax, ebx
add esp, 0xc
mov dword [ebp - 0xa04], eax
mov ecx, 0x1e0
mov dword [ebp - 0xa10], eax
lea eax, [ebp - 0x9e8]
mov byte [eax], bl
inc eax
sub ecx, 1
jne 0x40323c
push 0xfe
mov edx, 0x4011ec
lea ecx, [ebp - 0x408]
call fcn.0040e35d
mov esi, 0x40110c
lea ecx, [ebp - 0x9e8]
push 8
mov edx, esi
call fcn.0040e2ff
xor ebx, ebx
mov dword [ebp - 0x9c8], 0x40112c
lea eax, [ebp - 0xa20]
mov dword [ebp - 0x9e0], 0xa
inc ebx
mov dword [ebp - 0x9bc], eax
push 8
mov edx, esi
mov dword [ebp - 0x9d0], ebx
lea ecx, [ebp - 0x998]
call fcn.0040e2ff
xor esi, esi
mov dword [ebp - 0x978], 0x4011f0
push 8
mov edx, 0x40110c
mov dword [ebp - 0x988], 0x12000
lea ecx, [ebp - 0x948]
mov dword [ebp - 0x984], esi
mov dword [ebp - 0x990], ebx
mov dword [ebp - 0x980], ebx
call fcn.0040e2ff
push 8
mov edx, 0x40110c
mov dword [ebp - 0x928], 0x4011f4
lea ecx, [ebp - 0x8f8]
mov dword [ebp - 0x938], 0x12000
mov dword [ebp - 0x934], esi
mov dword [ebp - 0x940], ebx
mov dword [ebp - 0x930], ebx
call fcn.0040e2ff
lea eax, [ebp - 0x408]
mov dword [ebp - 0x8d8], 0x4011f8
push 8
mov edx, 0x40110c
mov dword [ebp - 0x8e8], 0x10
lea ecx, [ebp - 0x8a8]
mov dword [ebp - 0x8e4], esi
mov dword [ebp - 0x8f0], ebx
mov dword [ebp - 0x8e0], ebx
mov dword [ebp - 0x8cc], eax
mov dword [ebp - 0x8c8], 0xfe
call fcn.0040e2ff
lea eax, [ebp - 0xa1c]
mov dword [ebp - 0x888], 0x40113c
push 8
mov edx, 0x40110c
mov dword [ebp - 0x898], 0x20000
lea ecx, [ebp - 0x858]
mov dword [ebp - 0x894], esi
mov dword [ebp - 0x8a0], 0xa
mov dword [ebp - 0x890], ebx
mov dword [ebp - 0x87c], eax
call fcn.0040e2ff
mov edx, dword [ebp - 0xa18]
lea eax, [ebp - 0xa08]
push ecx
mov dword [ebp - 0x82c], eax
mov ecx, edi
lea eax, [ebp - 0x9e8]
mov dword [ebp - 0x838], 0x401200
push eax
push 6
push esi
mov dword [ebp - 0x848], 0x82000
mov dword [ebp - 0x844], esi
mov dword [ebp - 0x850], 3
mov dword [ebp - 0x840], ebx
call fcn.00411190
test eax, eax
jne 0x403418
push 2
call fcn.00411dc9
pop ecx
mov edx, 0x20001
mov ecx, eax
call fcn.0040d7c6
jmp 0x403fb4
mov eax, dword [ebp - 0x91c]
mov edi, dword [ebp - 0x96c]
mov dword [ebp - 0x9f8], edi
mov dword [ebp - 0x9ec], eax
mov dword [ebp - 0xa00], eax
test eax, eax
jne 0x403454
mov ecx, 0x1fc
call fcn.0040ebd3
mov dword [ebp - 0x9ec], eax
mov dword [ebp - 0xa00], eax
test eax, eax
je 0x4033ff
push ecx
xor edx, edx
mov ecx, edi
call fcn.0040df49
push ecx
mov ecx, dword [ebp - 0x9ec]
xor edx, edx
call fcn.0040df49
cmp dword [ebp - 0xa1c], ebx
jne 0x40349d
cmp dword [ebp - 0xa0c], 3
jbe 0x40349d
push 5
pop ecx
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
jmp 0x403fb4
cmp dword [ebp - 0x97c], esi
je 0x4034d2
mov ecx, edi
call fcn.0040e3f2
test eax, eax
jne 0x4034d2
mov ecx, 0x30e
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
jmp 0x403f9e
mov eax, dword [ebp - 0x92c]
test eax, eax
je 0x4034f8
mov ecx, dword [ebp - 0x9ec]
call fcn.0040e3f2
test eax, eax
jne 0x4034f2
mov ecx, 0x30f
jmp 0x4034b5
mov eax, dword [ebp - 0x92c]
cmp dword [ebp - 0x97c], esi
jne 0x40351c
test eax, eax
je 0x403520
mov ecx, 0x30b
call fcn.0040d995
mov ecx, eax
call fcn.0040d5bd
call fcn.0040d59d
jmp 0x4034ba
test eax, eax
jne 0x40352f
cmp dword [ebp - 0x8dc], esi
je 0x40352f
mov ecx, 0x30c
jmp 0x403509
mov ecx, edi
cmp dword [ebp - 0xa1c], esi
je 0x40356f
call fcn.0040cc0e
cmp eax, ebx
je 0x403f9e
push 6
pop edi
mov ecx, edi
call fcn.0040d995
push ebx
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
inc edi
cmp edi, 0x17
jbe 0x403549
xor ebx, ebx
jmp 0x403f9e
call fcn.0040f9d8
test eax, eax
je 0x4035a8
call fcn.0040f91b
test eax, eax
jne 0x4035a8
mov ecx, 0xe87
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
call fcn.0040d859
jmp 0x403fb4
mov ecx, edi
call fcn.0040f9d8
test eax, eax
jne 0x40360c
cmp dword [ebp - 0x8dc], esi
je 0x4035e1
push esi
push ebx
mov edx, 0x4011ec
lea ecx, [ebp - 0x408]
call fcn.0040e401
test eax, eax
jne 0x4035d9
mov dword [ebp - 0x9f4], ebx
jmp 0x40360c
cmp dword [ebp - 0x8dc], esi
jne 0x40360c
cmp dword [ebp - 0x97c], esi
jne 0x4035f1
cmp dword [ebp - 0x92c], esi
je 0x40360c
push 0xfe
mov edx, 0x401104
mov dword [ebp - 0x9f4], ebx
lea ecx, [ebp - 0x408]
call fcn.0040e35d
push 2
push 0x401208
push edi
call dword [sym.imp.api_ms_win_core_shlwapi_obsolete_l1_1_0.dll_StrCmpNW]
test eax, eax
jne 0x403678
push 3
push 0x401210
push edi
call dword [sym.imp.api_ms_win_core_shlwapi_obsolete_l1_1_0.dll_StrCmpNW]
test eax, eax
je 0x403678
push 0x401208
push edi
call dword [sym.imp.msvcrt.dll_wcstok]
mov dword [ebp - 0xa0c], eax
pop ecx
pop ecx
test eax, eax
jne 0x40366a
push esi
push ebx
mov edx, 0x401208
mov ecx, edi
call fcn.0040e401
test eax, eax
je 0x403664
mov ecx, 0xe7d
jmp 0x403480
mov eax, dword [ebp - 0xa0c]
push 0xfe
mov edx, eax
mov ecx, edi
call fcn.0040e35d
mov ecx, edi
call fcn.0040f9d8
cmp eax, ebx
jne 0x4036b1
mov ecx, dword [ebp - 0x9ec]
call fcn.0040e3f2
test eax, eax
je 0x4036b1
mov ecx, 0x313
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
xor esi, esi
mov edx, dword [ebp - 0x9ec]
lea eax, [ebp - 0x9f0]
push eax
push dword [ebp - 0x9f4]
lea eax, [ebp - 0x208]
mov ecx, edi
push eax
lea eax, [ebp - 0x408]
push eax
call fcn.004052aa
test eax, eax
je 0x403f8d
lea ecx, [ebp - 0x208]
call fcn.00404f7f
mov ecx, eax
mov dword [ebp - 0x9ec], ecx
test ecx, ecx
jne 0x403746
mov eax, dword [0x41248c]
test bl, al
je 0x403706
or eax, 0x21
jmp 0x403709
or eax, 0x20
push eax
mov dword [0x41248c], eax
lea eax, [ebp - 0x208]
push eax
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_SetFileAttributesW]
test eax, eax
jne 0x403f8d
mov ecx, 0x8d
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
jmp 0x403f8d
call fcn.0040f4ff
mov edx, dword [ebp - 0xa08]
test edx, edx
je 0x403f22
cmp edx, eax
ja 0x403f22
cmp eax, ebx
jne 0x40376f
mov ecx, 0x87
jmp 0x403f25
dec edx
call fcn.0040f556
mov ecx, eax
call fcn.0040e3f2
mov ecx, 0xfe
cmp eax, ecx
jbe 0x4037a9
push ecx
mov ecx, 0xc12
call fcn.0040d995
push eax
push ebx
push ebx
push 2
call fcn.00411dc9
pop ecx
push eax
call fcn.0040e6ab
add esp, 0x14
jmp 0x403f3d
mov edx, dword [ebp - 0xa08]
mov ecx, dword [ebp - 0x9ec]
lea edx, [edx - 1]
call fcn.0040f556
push 0x22
push eax
call dword [sym.imp.msvcrt.dll_wcsrchr]
pop ecx
pop ecx
test eax, eax
jne 0x40383e
mov ecx, 0x829
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
mov eax, dword [0x41248c]
test bl, al
je 0x4037f7
or eax, 0x21
jmp 0x4037fa
or eax, 0x20
push eax
mov dword [0x41248c], eax
lea eax, [ebp - 0x208]
push eax
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_SetFileAttributesW]
test eax, eax
jne 0x40382e
mov ecx, 0x8d
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
lea ecx, [ebp - 0xa14]
call fcn.0040f1de
jmp 0x403f82
add eax, 2
lea ecx, [ebp - 0x608]
push 0xff
mov edx, 0x401258
mov dword [ebp - 0x9f4], eax
call fcn.0040e35d
lea eax, [ebp - 0x608]
push eax
call dword [sym.imp.api_ms_win_core_string_l2_1_0.dll_CharLowerW]
mov ecx, dword [ebp - 0x9f4]
lea edx, [ebp - 0x608]
push esi
push ebx
call fcn.0040dea7
mov ecx, eax
cmp ecx, 0xffffffff
jne 0x40388b
mov dword [ebp - 0xa18], esi
jmp 0x40389a
mov eax, dword [ebp - 0x9f4]
lea eax, [eax + ecx*2]
mov dword [ebp - 0xa18], eax
mov edx, dword [ebp - 0xa08]
mov ecx, dword [ebp - 0x9ec]
lea edx, [edx - 1]
call fcn.0040f4af
mov ecx, dword [ebp - 0x9ec]
lea edx, [ebp - 0x9fc]
call fcn.00405791
cmp eax, ebx
je 0x403f3d
cmp dword [ebp - 0xa08], ebx
jne 0x4039dd
mov ecx, dword [ebp - 0x9ec]
xor edx, edx
call fcn.0040f556
mov ecx, eax
mov dword [ebp - 0x9f4], eax
call fcn.0040e3f2
mov dword [ebp - 0xa0c], eax
lea ecx, [eax*2 + 0x14]
call fcn.0040ebd3
mov dword [ebp - 0xa04], eax
mov dword [ebp - 0xa10], eax
test eax, eax
jne 0x4039b7
push 2
call fcn.00411dc9
pop ecx
mov edx, 0x10001
mov ecx, eax
call fcn.0040d7c6
mov eax, dword [0x41248c]
test bl, al
je 0x403935
or eax, 0x21
jmp 0x403938
or eax, 0x20
push eax
mov dword [0x41248c], eax
lea eax, [ebp - 0x208]
push eax
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_SetFileAttributesW]
test eax, eax
jne 0x40396e
mov ecx, 0x8d
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
xor esi, esi
lea ecx, [ebp - 0x9fc]
call fcn.0040eb2f
lea ecx, [ebp - 0x9ec]
call fcn.0040f1de
cmp dword [ebp - 0x9f0], 0
je 0x403995
push ecx
mov ecx, edi
call fcn.0041005b
lea ecx, [ebp - 0x9f8]
call fcn.0040eb2f
lea ecx, [ebp - 0xa00]
call fcn.0040eb2f
mov edi, dword [ebp - 0x9f8]
mov eax, dword [ebp - 0xa04]
push dword [ebp - 0xa0c]
mov edx, dword [ebp - 0x9f4]
mov ecx, eax
call fcn.0040e35d
push 0x401250
push dword [ebp - 0xa04]
call dword [sym.imp.msvcrt.dll_wcstok]
pop ecx
pop ecx
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0x9fc]
push 0x401218
call dword [sym.imp.api_ms_win_core_privateprofile_l1_1_1.dll_WritePrivateProfileSectionW]
test eax, eax
je 0x403e78
push dword [ebp - 0xa08]
mov ecx, 0xcf
call fcn.0040d995
push eax
push ebx
push ebx
push ebx
call fcn.00411dc9
pop ecx
push eax
call fcn.0040e6ab
add esp, 0x14
cmp dword [ebp - 0xa08], ebx
jne 0x403a5e
lea eax, [ebp - 0x208]
push eax
push dword [ebp - 0xa04]
push 0x40114c
push 0x40126c
call dword [sym.imp.api_ms_win_core_privateprofile_l1_1_0.dll_WritePrivateProfileStringW]
test eax, eax
jne 0x403a53
mov ecx, 0x1b7
jmp 0x403e7d
lea ecx, [ebp - 0xa10]
call fcn.0040eb2f
mov ecx, dword [ebp - 0x9ec]
call fcn.0040f4ff
mov edx, eax
mov dword [ebp - 0xa04], esi
mov dword [ebp - 0xa0c], edx
mov eax, esi
mov dword [ebp - 0x9f4], eax
test edx, edx
je 0x403b24
mov edx, eax
call fcn.0040f556
push 0x22
push eax
call dword [sym.imp.msvcrt.dll_wcsrchr]
pop ecx
pop ecx
test eax, eax
je 0x403b79
add eax, 2
mov dword [ebp - 0xa10], eax
lea eax, [ebp - 0x608]
push eax
call dword [sym.imp.api_ms_win_core_string_l2_1_0.dll_CharLowerW]
mov ecx, dword [ebp - 0xa10]
lea edx, [ebp - 0x608]
push esi
push ebx
call fcn.0040dea7
mov ecx, eax
cmp ecx, 0xffffffff
je 0x403af7
mov eax, dword [ebp - 0xa10]
lea eax, [eax + ecx*2]
test eax, eax
je 0x403af7
mov eax, dword [ebp - 0xa08]
dec eax
cmp dword [ebp - 0x9f4], eax
je 0x403af7
mov edx, ebx
mov dword [ebp - 0xa04], edx
jmp 0x403afd
mov edx, dword [ebp - 0xa04]
mov eax, dword [ebp - 0x9f4]
mov ecx, dword [ebp - 0x9ec]
inc eax
mov dword [ebp - 0x9f4], eax
cmp eax, dword [ebp - 0xa0c]
jb 0x403a87
test edx, edx
jne 0x403e21
cmp dword [ebp - 0xa18], 0
je 0x403e21
lea eax, [ebp - 0x808]
push eax
push 0x401284
lea ecx, [ebp - 0x208]
call fcn.0040a28c
cmp eax, ebx
jne 0x403c43
push 2
call fcn.00411dc9
pop ecx
mov edx, 0x20001
mov ecx, eax
call fcn.0040d7c6
mov eax, dword [0x41248c]
test bl, al
je 0x403bf6
or eax, 0x21
jmp 0x403bf9
mov ecx, 0x829
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
mov eax, dword [0x41248c]
test bl, al
je 0x403ba4
or eax, 0x21
jmp 0x403ba7
or eax, 0x20
push eax
mov dword [0x41248c], eax
lea eax, [ebp - 0x208]
push eax
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_SetFileAttributesW]
test eax, eax
jne 0x403bdb
mov ecx, 0x8d
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
lea ecx, [ebp - 0x9ec]
call fcn.0040f1de
lea ecx, [ebp - 0x9fc]
call fcn.0040eb2f
jmp 0x403f8d
or eax, 0x20
push eax
mov dword [0x41248c], eax
lea eax, [ebp - 0x208]
push eax
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_SetFileAttributesW]
test eax, eax
jne 0x403c2d
mov ecx, 0x8d
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
lea ecx, [ebp - 0x9fc]
call fcn.0040eb2f
lea ecx, [ebp - 0xa14]
jmp 0x403f88
lea eax, [ebp - 0x808]
push eax
call dword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrlenW]
test eax, eax
je 0x403d46
lea eax, [ebp - 0x208]
push eax
push esi
push 0x401284
push 0x40126c
call dword [sym.imp.api_ms_win_core_privateprofile_l1_1_0.dll_WritePrivateProfileStringW]
test eax, eax
je 0x403c95
mov ecx, 0xe83
call fcn.0040d995
push ebx
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
jmp 0x403d44
mov ecx, 0xe81
call fcn.0040d995
push ebx
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
lea ecx, [ebp - 0x9fc]
call fcn.0040eb2f
mov eax, dword [0x41248c]
test bl, al
je 0x403cca
or eax, 0x21
jmp 0x403ccd
or eax, 0x20
push eax
mov dword [0x41248c], eax
lea eax, [ebp - 0x208]
push eax
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_SetFileAttributesW]
test eax, eax
jne 0x403d01
mov ecx, 0x8d
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
lea ecx, [ebp - 0x9ec]
call fcn.0040f1de
lea ecx, [ebp - 0xa14]
call fcn.0040f1de
cmp dword [ebp - 0x9f0], 0
je 0x403d28
push ecx
mov ecx, edi
call fcn.0041005b
lea ecx, [ebp - 0x9f8]
call fcn.0040eb2f
lea ecx, [ebp - 0xa00]
call fcn.0040eb2f
mov edi, dword [ebp - 0x9f8]
xor esi, esi
lea eax, [ebp - 0x808]
push eax
push 0x401298
lea ecx, [ebp - 0x208]
call fcn.0040a28c
cmp eax, ebx
jne 0x403dd5
push 2
call fcn.00411dc9
pop ecx
mov edx, 0x20001
mov ecx, eax
call fcn.0040d7c6
lea ecx, [ebp - 0x9fc]
call fcn.0040eb2f
mov eax, dword [0x41248c]
test bl, al
je 0x403d8e
or eax, 0x21
jmp 0x403d91
or eax, 0x20
push eax
mov dword [0x41248c], eax
lea eax, [ebp - 0x208]
push eax
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_SetFileAttributesW]
test eax, eax
jne 0x403dc5
mov ecx, 0x8d
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
lea ecx, [ebp - 0x9ec]
call fcn.0040f1de
jmp 0x403c38
lea eax, [ebp - 0x808]
push eax
call dword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrlenW]
test eax, eax
je 0x403e21
lea eax, [ebp - 0x208]
push eax
push esi
push 0x401298
push 0x40126c
call dword [sym.imp.api_ms_win_core_privateprofile_l1_1_0.dll_WritePrivateProfileStringW]
mov ecx, 0xe84
test eax, eax
jne 0x403e0a
add ecx, 0xfffffffe
call fcn.0040d995
push ebx
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
mov eax, dword [0x41248c]
test bl, al
je 0x403e2f
or eax, 0x21
jmp 0x403e32
or eax, 0x20
push eax
mov dword [0x41248c], eax
lea eax, [ebp - 0x208]
push eax
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_SetFileAttributesW]
test eax, eax
jne 0x403e68
mov ecx, 0x8d
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
xor ebx, ebx
lea ecx, [ebp - 0x9fc]
call fcn.0040eb2f
jmp 0x403dc5
mov ecx, 0x88
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
mov eax, dword [0x41248c]
test bl, al
je 0x403ea3
or eax, 0x21
jmp 0x403ea6
or eax, 0x20
push eax
mov dword [0x41248c], eax
lea eax, [ebp - 0x208]
push eax
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_SetFileAttributesW]
test eax, eax
jne 0x403eda
mov ecx, 0x8d
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
lea ecx, [ebp - 0x9fc]
call fcn.0040eb2f
lea ecx, [ebp - 0x9ec]
call fcn.0040f1de
cmp dword [ebp - 0x9f0], 0
je 0x403f01
push ecx
mov ecx, edi
call fcn.0041005b
lea ecx, [ebp - 0x9f8]
call fcn.0040eb2f
lea ecx, [ebp - 0xa00]
call fcn.0040eb2f
lea ecx, [ebp - 0xa10]
jmp 0x403faf
push 0x7d
pop ecx
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
mov eax, dword [0x41248c]
test bl, al
je 0x403f4b
or eax, 0x21
jmp 0x403f4e
or eax, 0x20
push eax
mov dword [0x41248c], eax
lea eax, [ebp - 0x208]
push eax
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_SetFileAttributesW]
test eax, eax
jne 0x403f82
mov ecx, 0x8d
call fcn.0040d995
push 2
mov esi, eax
call fcn.00411dc9
pop ecx
mov edx, esi
mov ecx, eax
call fcn.0040e454
lea ecx, [ebp - 0x9ec]
call fcn.0040f1de
cmp dword [ebp - 0x9f0], 0
je 0x403f9e
push ecx
mov ecx, edi
call fcn.0041005b
lea ecx, [ebp - 0x9f8]
call fcn.0040eb2f
lea ecx, [ebp - 0xa00]
call fcn.0040eb2f
mov ecx, dword [ebp - 4]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004117f0
leave
ret