Function at 0x406775
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8e8
push ebx
push esi
xor esi, esi
push edi
push esi
mov dword [ebp - 4], esi
push dword [ebp + 8]
call fcn.00405eca
pop ecx
cmp eax, esi
pop ecx
jle 0x406a43
cmp dword [ebp + 0xc], eax
jge 0x406a43
sub eax, dword [ebp + 0xc]
push 0x421b20
push dword [ebp + 8]
mov byte [ebp - 0x13], 0x65
dec eax
mov byte [ebp - 0x14], 0x25
mov dword [ebp + 0xc], eax
mov byte [ebp - 0x12], 0x52
mov byte [ebp - 0x10], 0x74
mov byte [ebp - 0x11], 0x40
mov byte [ebp - 0xf], 0x6f
mov byte [ebp - 0xe], 0x50
mov byte [ebp - 0xd], 0x6d
mov byte [ebp - 0xb], 0x3c
mov byte [ebp - 0xc], 0x7c
mov byte [ebp - 0xa], 0x23
mov byte [ebp - 9], 0x59
mov byte [ebp - 7], 0x73
mov byte [ebp - 8], 0x4b
mov byte [ebp - 6], 0x24
mov byte [ebp - 5], 0x5e
call fcn.0040e0f4
mov edi, eax
pop ecx
cmp edi, esi
pop ecx
je 0x406a43
push 2
push esi
push edi
call fcn.0040e77b
push edi
call fcn.0040e5f8
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, 0xfffffd38
mov esi, 0x2c8
push 1
push ebx
push edi
call fcn.0040e77b
push edi
call fcn.0040e5f8
add esp, 0x10
test eax, eax
je 0x406a3c
push esi
lea eax, [ebp - 0x2e0]
push 0
push eax
call fcn.0040d070
push edi
push esi
lea eax, [ebp - 0x2e0]
push 1
push eax
call fcn.0040e834
lea eax, [ebp - 0x2e0]
push esi
push eax
call fcn.00405d1a
lea eax, [ebp - 0x14]
push 0x10
push eax
lea eax, [ebp - 0x2e0]
push esi
push eax
call fcn.00405cc2
lea eax, [ebp - 0x2e0]
push eax
call fcn.00405e08
add esp, 0x38
test al, al
je 0x406a3c
mov eax, dword [ebp - 4]
cmp eax, dword [ebp + 0xc]
je 0x4068b2
inc dword [ebp - 4]
mov eax, ebx
sub eax, dword [ebp - 0x1c]
push 1
push eax
push edi
call fcn.0040e77b
add esp, 0xc
jmp 0x406821
push edi
call fcn.0040e5f8
sub ebx, dword [ebp - 0x1c]
push 1
mov dword [ebp - 4], eax
push ebx
push edi
call fcn.0040e77b
push edi
call fcn.0040e5f8
mov esi, eax
lea eax, [ebp - 0x4e8]
push 0x104
push eax
call fcn.00405c1b
add esp, 0x1c
test al, al
je 0x406a3c
lea eax, [ebp - 0x4e8]
push 0x4210b0
push eax
call fcn.0040e0f4
pop ecx
mov dword [ebp + 0xc], eax
test eax, eax
pop ecx
je 0x406a3c
push 0
push 0
push edi
call fcn.0040e77b
add esp, 0xc
mov ebx, 0x400
test esi, esi
jle 0x406950
cmp esi, ebx
mov eax, esi
jl 0x406927
mov eax, ebx
push edi
push eax
lea eax, [ebp - 0x8e8]
push 1
push eax
call fcn.0040e834
push dword [ebp + 0xc]
push eax
lea eax, [ebp - 0x8e8]
push 1
push eax
call fcn.0040df8a
add esp, 0x20
sub esi, eax
jmp 0x40691b
push 0
push dword [ebp - 4]
push edi
call fcn.0040e77b
mov eax, dword [ebp - 0x18]
add esp, 0xc
sub eax, dword [ebp - 4]
mov esi, eax
test esi, esi
jle 0x4069a1
test byte [edi + 0xc], 0x10
jne 0x4069a1
cmp esi, ebx
mov eax, esi
jl 0x406978
mov eax, ebx
push edi
push eax
lea eax, [ebp - 0x8e8]
push 1
push eax
call fcn.0040e834
push dword [ebp + 0xc]
push eax
lea eax, [ebp - 0x8e8]
push 1
push eax
call fcn.0040df8a
add esp, 0x20
sub esi, eax
jmp 0x406966
push edi
call fcn.0040df0d
mov dword [esp], 0x4210b0
push dword [ebp + 8]
call fcn.0040e0f4
mov edi, eax
pop ecx
test edi, edi
pop ecx
je 0x406a43
push dword [ebp + 0xc]
call fcn.0040df0d
lea eax, [ebp - 0x4e8]
mov dword [esp], 0x421b20
push eax
call fcn.0040e0f4
mov esi, eax
pop ecx
test esi, esi
pop ecx
je 0x406a43
push 0
push 0
push esi
call fcn.0040e77b
add esp, 0xc
test byte [esi + 0xc], 0x10
jne 0x406a1d
push esi
push ebx
lea eax, [ebp - 0x8e8]
push 1
push eax
call fcn.0040e834
push edi
push eax
lea eax, [ebp - 0x8e8]
push 1
push eax
call fcn.0040df8a
add esp, 0x20
jmp 0x4069f2
push edi
call fcn.0040df0d
push esi
call fcn.0040df0d
lea eax, [ebp - 0x4e8]
push eax
call fcn.004058c9
add esp, 0xc
mov al, 1
jmp 0x406a45
push edi
call fcn.0040df0d
pop ecx
xor al, al
pop edi
pop esi
pop ebx
leave
ret