Function at 0x4024b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa8
mov eax, dword [0x63fbf0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x14]
push ecx
mov bl, 0x65
mov dword [ebp - 0x14], 0x6e72656b
mov dword [ebp - 0x10], 0x32336c65
mov dword [ebp - 0xc], 0x6c6c642e
mov byte [ebp - 8], 0
mov dword [ebp - 0x5c], 0x54746547
mov dword [ebp - 0x58], 0x436b6369
mov dword [ebp - 0x54], 0x746e756f
mov word [ebp - 0x50], 0x3436
mov byte [ebp - 0x4e], 0
call fcn.00560f90
mov esi, eax
test esi, esi
je 0x40252c
push 0x80
push esi
call fcn.00401100
add esp, 4
push eax
mov ecx, esi
call fcn.00401790
add esp, 8
lea edx, [ebp - 0x3c]
push edx
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 0x3c], 0x47
mov byte [ebp - 0x3b], bl
mov dword [ebp - 0x3a], 0x63695474
mov dword [ebp - 0x36], 0x756f436b
mov word [ebp - 0x32], 0x746e
mov byte [ebp - 0x30], 0
call fcn.00560f90
mov esi, eax
test esi, esi
je 0x402577
push 0x100
push esi
call fcn.00401100
add esp, 4
push eax
mov ecx, esi
call fcn.00401790
add esp, 8
lea ecx, [ebp - 0x9c]
push ecx
lea edx, [ebp - 0x14]
push edx
mov word [ebp - 0x9c], 0x7551
mov byte [ebp - 0x9a], bl
mov word [ebp - 0x99], 0x7972
mov byte [ebp - 0x97], 0x50
mov byte [ebp - 0x96], bl
mov dword [ebp - 0x95], 0x726f6672
mov dword [ebp - 0x91], 0x636e616d
mov byte [ebp - 0x8d], bl
mov dword [ebp - 0x8c], 0x6e756f43
mov byte [ebp - 0x88], 0x74
mov byte [ebp - 0x87], bl
mov word [ebp - 0x86], 0x72
call fcn.00560f90
mov esi, eax
test esi, esi
je 0x402605
push 0x200
push esi
call fcn.00401100
add esp, 4
push eax
mov ecx, esi
call fcn.00401790
add esp, 8
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x14]
push ecx
mov word [ebp - 0x2c], 0x6974
mov byte [ebp - 0x2a], 0x6d
mov byte [ebp - 0x29], bl
mov byte [ebp - 0x28], 0x47
mov byte [ebp - 0x27], bl
mov dword [ebp - 0x26], 0x6d695474
mov byte [ebp - 0x22], bl
mov byte [ebp - 0x21], 0
call fcn.00560f90
mov esi, eax
test esi, esi
je 0x402653
push 0x400
push esi
call fcn.00401100
add esp, 4
push eax
mov ecx, esi
call fcn.00401790
add esp, 8
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x20], 0x6c64746e
mov dword [ebp - 0x1c], 0x6c642e6c
mov word [ebp - 0x18], 0x6c
mov dword [ebp - 0x4c], 0x42676244
mov byte [ebp - 0x48], 0x72
mov byte [ebp - 0x47], bl
mov dword [ebp - 0x46], 0x6f506b61
mov dword [ebp - 0x42], 0x746e69
call fcn.00560f90
mov esi, eax
test esi, esi
je 0x4026c1
lea ecx, [ebp - 0x9d]
push ecx
mov ecx, 1
mov edx, esi
mov byte [ebp - 0x9d], 0xc3
call fcn.0043af20
push 0x1000
push 1
mov ecx, esi
call fcn.00401790
add esp, 0xc
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x70], 0x55676244
mov word [ebp - 0x6c], 0x5269
mov byte [ebp - 0x6a], bl
mov word [ebp - 0x69], 0x6f6d
mov byte [ebp - 0x67], 0x74
mov byte [ebp - 0x66], bl
mov word [ebp - 0x65], 0x7242
mov byte [ebp - 0x63], bl
mov dword [ebp - 0x62], 0x6e696b61
mov byte [ebp - 0x5e], 0
call fcn.00560f90
mov edi, eax
test esi, esi
je 0x402781
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x20]
push edx
mov dword [ebp - 0x84], 0x5372644c
mov dword [ebp - 0x80], 0x64747568
mov dword [ebp - 0x7c], 0x506e776f
mov word [ebp - 0x78], 0x6f72
mov byte [ebp - 0x76], 0x63
mov byte [ebp - 0x75], bl
mov word [ebp - 0x74], 0x7373
mov byte [ebp - 0x72], 0
call fcn.00560f90
test eax, eax
je 0x402770
sub eax, edi
sub eax, 5
mov dword [ebp - 0xa7], eax
lea eax, [ebp - 0xa8]
push eax
mov ecx, 5
mov edx, edi
mov byte [ebp - 0xa8], 0xe9
call fcn.0043af20
add esp, 4
push 0x2000
push 1
mov ecx, edi
call fcn.00401790
add esp, 8
push 0x4000
push fcn.004022e0
call fcn.00401100
add esp, 4
push eax
mov ecx, fcn.004022e0
call fcn.00401790
add esp, 8
push 0x8000
push 0x4023e0
call fcn.00401100
add esp, 4
push eax
mov ecx, 0x4023e0
call fcn.00401790
add esp, 8
push 0x10000
push fcn.00402410
call fcn.00401100
add esp, 4
push eax
mov ecx, fcn.00402410
call fcn.00401790
mov ecx, dword [ebp - 4]
add esp, 8
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00544a28
mov esp, ebp
pop ebp
ret