Function at 0x4066cf
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov word [ebp - 0x1732], ax
mov ecx, 0x33
mov word [ebp - 0x1730], cx
mov edx, 0x32
mov word [ebp - 0x172e], dx
mov eax, 0x2e
mov word [ebp - 0x172c], ax
mov ecx, 0x64
mov word [ebp - 0x172a], cx
mov edx, 0x6c
mov word [ebp - 0x1728], dx
mov eax, 0x6c
mov word [ebp - 0x1726], ax
xor ecx, ecx
mov word [ebp - 0x1724], cx
push edi
and edi, 0xbe8e
sub edi, 0x2537
pop edi
push ecx
push ebx
add esp, 4
and ecx, 0x5a11
jmp 0x4051c9
call 0x4051d6
add byte [edi], bh
cmp dword ds:[0x83474733], esi
les eax, [ecx + ebx*2]
push ebx
push esi
add esp, 4
and ebx, 0x1308
jmp 0x4051ec
add ebx, 0x3a45
pop ebx
push ecx
xor ecx, 0x3bda
call 0x405208
add byte [edi], bh
inc esp
dec eax
aaa
cmp al, 0x4a
xor eax, 0x4c4833c
pop ecx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x19b8], edx
mov eax, dword [ebp - 0x19b8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x19bc], ecx
mov edx, dword [ebp - 0x19bc]
mov dword [ebp - 0x15dc], edx
push eax
push ecx
add esp, 4
call 0x405248
add byte [esi + ecx*2], bh
inc eax
inc edx
dec edi
dec edi
cmp eax, 0x4c48350
or eax, 0x361e
or eax, 0x50a4
pop eax
push edx
xor edx, 0xaeaf
and edx, 0x1526c
pop edx
cmp dword [ebp - 0x15dc], 0
jne 0x40527e
mov dword [ebp - 0x31c], 0
jmp 0x40553a
mov eax, dword [ebp - 0x15dc]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc98], edx
push edx
jmp 0x40529a
xor edx, 0xff42
pop edx
push edi
sub edi, 0x72bc
call 0x4052b5
add byte [edx + 0x33], cl
cmp eax, 0x40374f4e
add esp, 4
pop edi
push ecx
jmp 0x4052c1
pop ecx
cmp dword [ebp - 0xc98], 0
jne 0x4052da
mov dword [ebp - 0x31c], 0
jmp 0x40553a
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x504], eax
push edx
push esi
add esp, 4
jmp 0x4052f0
add edx, 0x200c
sub edx, 0x208b
pop edx
push esi
call 0x40530e
add byte [ebx], dh
inc edx
xor al, 0x35
dec ebx
inc ebx
inc edi
cmp eax, 0x4c4833f
xor esi, 0xd6fc
pop esi
lea ecx, [ebp - 0x173c]
mov dword [ebp - 0xc94], ecx
mov edx, dword [ebp - 0x504]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc90], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push edi
call 0x405356
add byte [eax + 0x4a], al
push eax
xor eax, 0x3a493e3a
aas
xor eax, 0x8104c483
not dword [ecx - 0x17ffff4b]
or dword [eax], eax
add byte [eax], al
add byte [edi + 0x3f], al
aas
inc ecx
dec esp
dec eax
inc edx
cmp al, byte [ebx - 0x307efb3c]
dec byte [eax + eax - 0x7a74a100]
jo 0x40536e
les eax, [ecx + eax*4]
iretd
invalid
push edi
push ebx
add esp, 4
or edi, 0x11749
add edi, 0x3083
pop edi
push ecx
push edx
add esp, 4
and ecx, 0xc2b3
or ecx, 0x182c5
and ecx, 0x7433
pop ecx
push edi
or edi, 0x12406
pop edi
cmp dword [ebp - 0x31c], 0
jne 0x405e85
mov edx, 0x6b
mov word [ebp - 0x1758], dx
mov eax, 0x65
mov word [ebp - 0x1756], ax
mov ecx, 0x72
mov word [ebp - 0x1754], cx
mov edx, 0x6e
mov word [ebp - 0x1752], dx
mov eax, 0x65
mov word [ebp - 0x1750], ax
mov ecx, 0x6c
mov word [ebp - 0x174e], cx
mov edx, 0x33
mov word [ebp - 0x174c], dx
mov eax, 0x32
mov word [ebp - 0x174a], ax
mov ecx, 0x2e
mov word [ebp - 0x1748], cx
mov edx, 0x64
mov word [ebp - 0x1746], dx
mov eax, 0x6c
mov word [ebp - 0x1744], ax
mov ecx, 0x6c
mov word [ebp - 0x1742], cx
xor edx, edx
mov word [ebp - 0x1740], dx
push ebx
push esi
add esp, 4
call 0x405624
add byte [ebx + 0x35], cl
cmp byte [0x8345504d], dh
les eax, [eax + ebp*8]
or byte [eax], al
add byte [eax], al
add byte [ebx + esi], bh
inc ebp
dec ecx
dec esi
inc edx
cmp eax, dword [ebx - 0x1c7efb3c]
retf 0x10f
push ebx
push eax
add esp, 4
xor ebx, 0xec9c
jmp 0x405e95
pop ebx
push ecx
or ecx, 0xf045
sub ecx, 0x10457
add ecx, 0x141b2
or ecx, 0x17c4a
pop ecx
push esi
jmp 0x405eb6
pop esi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19e0], eax
mov ecx, dword [ebp - 0x19e0]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19e4], edx
mov eax, dword [ebp - 0x19e4]
mov dword [ebp - 0x1600], eax
push esi
add esi, 0xe5e4
pop esi
push eax
push ecx
add esp, 4
sub eax, 0x15d27
pop eax
push ebx
sub ebx, 0x57f2
call 0x405f06
add byte [esi], bh
cmp bh, byte [ebx]
dec edx
cmp esi, dword [edi]
inc ebp
add esp, 4
xor ebx, 0x7db9
pop ebx
cmp dword [ebp - 0x1600], 0
jne 0x405f28
mov dword [ebp - 0x31c], 0
jmp 0x4061cf
mov ecx, dword [ebp - 0x1600]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcb4], eax
push edi
push eax
add esp, 4
call 0x405f4c
add byte [esp + eax*2], bh
xor ecx, dword [esi + 0x4f]
inc ecx
inc ecx
add esp, 4
pop edi
push ebx
add ebx, 0xd5fd
pop ebx
push ecx
add ecx, 0x9a79
pop ecx
push edx
push edi
add esp, 4
and edx, 0x15774
pop edx
cmp dword [ebp - 0xcb4], 0
jne 0x405f84
mov dword [ebp - 0x31c], 0
jmp 0x4061cf
mov ecx, dword [ebp - 0xcb4]
mov dword [ebp - 0x50c], ecx
push esi
and esi, 0x63e7
add esi, 0x8461
pop esi
push ecx
push edx
add esp, 4
or ecx, 0xc5be
and ecx, 0x91bd
call 0x405fbe
add byte [eax + edx*2 + 0x3c], cl
dec eax
dec esp
dec edx
cmp al, 0x3e
add esp, 4
pop ecx
lea edx, [ebp - 0x173c]
mov dword [ebp - 0xcb0], edx
mov eax, dword [ebp - 0x50c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcac], ecx
xor edx, edx
mov word [ebp - 0x218], dx
xor eax, eax
mov word [ebp - 0x34], ax
push ebx
push esi
add esp, 4
add ebx, 0x7a0e
jmp 0x405ffc
pop ebx
push eax
push ebx
add esp, 4
and eax, 0x15d19
jmp 0x406011
and eax, 0xaa3b
add eax, 0x132fb
pop eax
mov ecx, dword [ebp - 0xcac]
mov dx, word [ecx]
mov word [ebp - 0x103a], dx
mov eax, dword [ebp - 0xcac]
add eax, 2
mov dword [ebp - 0xcac], eax
mov cx, word [ebp - 0x103a]
mov word [ebp - 0x218], cx
mov edx, dword [ebp - 0xcb0]
mov ax, word [edx]
mov word [ebp - 0x103c], ax
mov ecx, dword [ebp - 0xcb0]
add ecx, 2
mov dword [ebp - 0xcb0], ecx
mov dx, word [ebp - 0x103c]
mov word [ebp - 0x34], dx
push ecx
and ecx, 0xd415
pop ecx
push edx
push edi
add esp, 4
jmp 0x40608b
add edx, 0x993e
jmp 0x406096
call 0x4060a3
add byte [0x45364341], bh
dec edx
cmp dword [ebx + 0xf5a04c4], eax
mov bh, 0x45
int3
push ecx
or ecx, 0xa1b9
and ecx, 0x2a29
and ecx, 0x2dc1
pop ecx
push edi
push eax
add esp, 4
add edi, 0x845c
and edi, 0x16bab
and edi, 0x14243
or edi, 0x2112
pop edi
mov eax, dword [ebp - 0x31c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x324], ecx
push ecx
xor ecx, 0x325e
and ecx, 0x7dca
and ecx, 0x115ad
pop ecx
push edi
push eax
add esp, 4
and edi, 0xdfa6
and edi, 0x2c4d
sub edi, 0x11e8d
xor edi, 0x4274
pop edi
mov dword [ebp - 0x770], 0
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x160c], edx
cmp dword [ebp - 0x160c], 0
jne 0x406272
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x406563
mov ecx, dword [ebp - 0x160c]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1610], edx
jne 0x40629a
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x406563
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1610]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1614], ecx
cmp dword [ebp - 0x1614], 0
jne 0x4062cc
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
jmp 0x406563
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1614]
mov dword [ebp - 0x764], eax
jne 0x4062f1
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x510], ecx
jmp 0x406563
mov edx, dword [ebp - 0x764]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x19e8], eax
mov ecx, dword [ebp - 0x764]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x19ec], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1d74], ecx
mov dword [ebp - 0x768], 0
jmp 0x40634b
mov edx, dword [ebp - 0x768]
add edx, 1
mov dword [ebp - 0x768], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x768]
cmp ecx, dword [eax + 0x18]
jae 0x406557
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x19e8]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x19ec]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1d74]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x19f0], eax
mov dword [ebp - 0x19c], 0
jmp 0x4063bb
mov ecx, dword [ebp - 0x19c]
add ecx, 1
mov dword [ebp - 0x19c], ecx
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
test eax, eax
je 0x40646d
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
test edx, edx
je 0x40646d
push ecx
xor ecx, 0x40ad
and ecx, 0xe8b
xor ecx, 0x4644
pop ecx
push ecx
push edx
add esp, 4
xor ecx, 0x166a7
pop ecx
push esi
push edx
add esp, 4
xor esi, 0x1430d
sub esi, 0x83d6
pop esi
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x878]
cmp ecx, eax
je 0x40645f
mov ecx, dword [ebp - 0x76c]
add ecx, dword [ebp - 0x19c]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x878]
cmp edx, ecx
jne 0x406466
jmp 0x4063ac
jmp 0x40646d
push esi
push eax
add esp, 4
sub esi, 0x1805d
xor esi, 0xfa6d
pop esi
push eax
push eax
add esp, 4
and eax, 0x13956
add eax, 0x1728f
pop eax
push eax
and eax, 0xd78f
and eax, 0xd03d
pop eax
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
cmp eax, edx
jne 0x4064cc
mov dword [ebp - 0xcb8], 0
jmp 0x40653b
push ecx
push edx
add esp, 4
add ecx, 0xe4dc
or ecx, 0xea6b
or ecx, 0x2edc
pop ecx
push eax
sub eax, 0xec4b
sub eax, 0x23df
and eax, 0x5d24
sub eax, 0x9ca0
pop eax
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x878]
or eax, 0x20
cmp ecx, eax
jge 0x406531
mov dword [ebp - 0xcb8], 0xffffffff
jmp 0x40653b
mov dword [ebp - 0xcb8], 1
cmp dword [ebp - 0xcb8], 0
jne 0x406552
mov ecx, dword [ebp - 0x19f0]
mov dword [ebp - 0x510], ecx
jmp 0x406563
jmp 0x40633c
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x79c], eax
push esi
push edi
add esp, 4
xor esi, 0x9b3f
pop esi
push ecx
push edi
add esp, 4
xor ecx, 0xa9d3
and ecx, 0xcb5a
jmp 0x406594
pop ecx
push edi
push ebx
add esp, 4
and edi, 0x17849
pop edi
mov ecx, dword [ebp - 0x3e8]
add ecx, 0xe
mov dword [ebp - 0x1a40], ecx
push ebx
add ebx, 0x4b7c
xor ebx, 0x1c0c
xor ebx, 0xc723
add ebx, 0x4dbe
pop ebx
push eax
push ebx
add esp, 4
or eax, 0x6da9
pop eax
push ebx
push ecx
add esp, 4
and ebx, 0x17ddd
pop ebx
cmp dword [ebp - 0x3e8], 0
je 0x4065f4
cmp dword [ebp - 0xac0], 0
jne 0x40663a
push eax
push ecx
add esp, 4
jmp 0x4065fe
pop eax
push ebx
xor ebx, 0x1290f
call 0x406616
add byte [esp + eax*2], bh
dec esi
cmp al, byte [eax + 0x4d]
cmp cl, byte [ecx + eax*2 + 0x4c]
add esp, 4
add ebx, 0x8f4b
sub ebx, 0x2257
pop ebx
mov edx, dword [ebp - 0x79c]
mov dword [ebp - 0x19f4], edx
push 0
call dword [ebp - 0x19f4]
mov dword [ebp - 0x210c], 0xa
push edx
xor edx, 0x17a19
pop edx
push esi
and esi, 0x34e0
sub esi, 0x78d0
sub esi, 0xaf72
pop esi
push edi
sub edi, 0xa146
pop edi
push edx
sub edx, 0x2398
add edx, 0x8851
pop edx
mov eax, dword [ebp - 0x3e8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xac0]
sub edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x1698], edx
mov dword [ebp - 0xce8], 0
push edx
push esi
add esp, 4
call 0x4066b6
add byte [edi + 0x3e], cl
dec ebx
dec ebx
xor eax, 0x3d4c4f48
dec eax
add esp, 4
add edx, 0x84c2
pop edx
push edi
call 0x4066cf
add byte [ecx + 0x4b], al
inc ebp
cmp edi, dword [ecx]
dec ebx
inc ebp
aaa
add esp, 4
pop edi
mov byte [ebp - 0x9d4], 0x56
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
mov byte [ebp - 0x9c6], 0
push eax
push edx
add esp, 4
and eax, 0x4e4d
add eax, 0xd948
xor eax, 0x1734e
add eax, 0x1588c
pop eax
push ecx
push edx
add esp, 4
add ecx, 0x9fc9
jmp 0x40676d
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19f8], eax
mov ecx, dword [ebp - 0x19f8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19fc], edx
mov eax, dword [ebp - 0x19fc]
mov dword [ebp - 0x1618], eax
push ecx
jmp 0x40679c
or ecx, 0x12315
and ecx, 0xad54
sub ecx, 0xe720
pop ecx
push ecx
add ecx, 0x558
jmp 0x4067be
jmp 0x4067c6
pop ecx
cmp dword [ebp - 0x1618], 0
jne 0x4067df
mov dword [ebp - 0x2fc], 0
jmp 0x406a86
mov ecx, dword [ebp - 0x1618]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push ecx
push edi
add esp, 4
sub ecx, 0xdfad
and ecx, 0xe783
pop ecx
push edi
push edx
add esp, 4
xor edi, 0x9ac4
add edi, 0x6041
pop edi
push edi
or edi, 0xee93
add edi, 0x8917
pop edi
cmp dword [ebp - 0xcc4], 0
jne 0x40683b
mov dword [ebp - 0x2fc], 0
jmp 0x406a86
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0x514], ecx
push ebx
or ebx, 0x586c
pop ebx
push edx
push edx
add esp, 4
or edx, 0x16f1f
and edx, 0x37d2
pop edx
push eax
push esi
add esp, 4
xor eax, 0x16df6
pop eax
push ebx
push ebx
add esp, 4
sub ebx, 0x1179e
pop ebx
lea edx, [ebp - 0x173c]
mov dword [ebp - 0xcc0], edx
mov eax, dword [ebp - 0x514]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcbc], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
xor eax, eax
mov word [ebp - 0x38], ax
push esi
add esi, 0xc9ca
and esi, 0x165e4
pop esi
push edx
push ebx
add esp, 4
sub edx, 0x1007b
pop edx
push ecx
push eax
add esp, 4
sub ecx, 0x136ce
or ecx, 0x16443
xor ecx, 0x164df
pop ecx
mov ecx, dword [ebp - 0xcbc]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcbc]
add eax, 2
mov dword [ebp - 0xcbc], eax
mov cx, word [ebp - 0x103e]
mov word [ebp - 0x21c], cx
mov edx, dword [ebp - 0xcc0]
mov ax, word [edx]
mov word [ebp - 0x1040], ax
mov ecx, dword [ebp - 0xcc0]
add ecx, 2
mov dword [ebp - 0xcc0], ecx
mov dx, word [ebp - 0x1040]
mov word [ebp - 0x38], dx
push ecx
and ecx, 0x121ab
and ecx, 0x2ea4
xor ecx, 0x1d48
pop ecx
push ebx
call 0x40694e
add byte [esi + 0x35], al
cmp eax, 0x36324139
add esp, 4
pop ebx
push edi
push eax
add esp, 4
xor edi, 0x4ae5
pop edi
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x40697b
movzx ecx, word [ebp - 0x21c]
invalid
mov bh, 0x55