Function at 0x406639
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x450a29
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x180
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.00401710
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x20]
call fcn.00401710
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.004109f0
mov byte [ebp - 4], 3
push 0x46a794
lea ecx, [ebp - 0x14]
call fcn.00446e6d
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x14]
push ecx
lea edx, [ebp - 0x38]
push edx
call fcn.00446f13
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xf8], eax
mov byte [ebp - 4], 4
push 0x46a7c0
mov ecx, dword [ebp - 0xf8]
push ecx
lea edx, [ebp - 0x3c]
push edx
call fcn.00446f79
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x100], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x100]
push ecx
lea ecx, [ebp - 0x14]
call fcn.00446e1d
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3c]
call fcn.00446ce4
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x38]
call fcn.00446ce4
mov byte [ebp - 4], 6
push 7
push 0
push 0x46a7c4
lea ecx, [ebp - 0x18]
call fcn.00404f50
push 1
mov ecx, 0x4720c0
call fcn.00404eb0
push eax
lea ecx, [ebp - 0x4c]
call fcn.00405940
mov dword [ebp - 0x104], eax
mov edx, dword [ebp - 0x104]
mov dword [ebp - 0x108], edx
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x14]
call fcn.004051f0
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x5c]
call fcn.00405900
mov dword [ebp - 0x110], eax
mov ecx, dword [ebp - 0x110]
mov dword [ebp - 0x114], ecx
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x18]
call fcn.00404f20
mov dword [ebp - 0x118], eax
push 1
push 3
push 2
mov edx, dword [ebp - 0x108]
push edx
mov eax, dword [ebp - 0x114]
push eax
mov ecx, dword [ebp - 0x118]
call fcn.00404d50
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x5c]
call fcn.00405ae0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x4c]
call fcn.00405ae0
lea ecx, [ebp - 0x18]
call fcn.00404f20
mov dword [ebp - 0x11c], eax
mov ecx, dword [ebp - 0x11c]
call fcn.00408ed0
lea ecx, [ebp - 0x18]
call fcn.00404f20
mov dword [ebp - 0x120], eax
mov ecx, dword [ebp - 0x120]
call fcn.00404c90
mov word [ebp - 0x122], ax
movsx ecx, word [ebp - 0x122]
test ecx, ecx
jne 0x406b8b
lea ecx, [ebp - 0x18]
call fcn.00404f20
mov dword [ebp - 0x128], eax
mov ecx, dword [ebp - 0x128]
call fcn.00404c90
mov word [ebp - 0x12a], ax
movsx edx, word [ebp - 0x12a]
test edx, edx
jne 0x406b8b
push 0x46a7d4
lea ecx, [ebp - 0x70]
call fcn.00405900
mov dword [ebp - 0x130], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x18]
call fcn.00404f20
mov dword [ebp - 0x134], eax
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x80]
push ecx
mov ecx, dword [ebp - 0x134]
call fcn.00404e10
mov dword [ebp - 0x138], eax
mov edx, dword [ebp - 0x138]
mov dword [ebp - 0x13c], edx
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x60]
call fcn.00405b00
mov dword [ebp - 0x140], eax
mov ecx, dword [ebp - 0x140]
mov dword [ebp - 0x144], ecx
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x144]
call fcn.00405670
mov dword [ebp - 0x148], eax
push 0
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp - 0x148]
push eax
mov ecx, dword [ebp - 0xf0]
add ecx, 0xd4
call fcn.00409140
mov dword [ebp - 0x14c], eax
mov ecx, dword [ebp - 0x14c]
mov dword [ebp - 0x1c], ecx
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x60]
call fcn.00405620
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x80]
call fcn.00405ae0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x70]
call fcn.00405ae0
push 0x46a7dc
lea ecx, [ebp - 0xa0]
call fcn.00405900
mov dword [ebp - 0x150], eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x18]
call fcn.00404f20
mov dword [ebp - 0x154], eax
lea edx, [ebp - 0xa0]
push edx
lea eax, [ebp - 0xb0]
push eax
mov ecx, dword [ebp - 0x154]
call fcn.00404e10
mov dword [ebp - 0x158], eax
mov ecx, dword [ebp - 0x158]
mov dword [ebp - 0x15c], ecx
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x15c]
mov eax, dword [edx]
mov dword [ebp - 0x90], eax
mov ecx, dword [edx + 4]
mov dword [ebp - 0x8c], ecx
mov eax, dword [edx + 8]
mov dword [ebp - 0x88], eax
mov ecx, dword [edx + 0xc]
mov dword [ebp - 0x84], ecx
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x90]
mov dword [edx], eax
mov ecx, dword [ebp - 0x8c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x88]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x84]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0xb4]
push edx
call fcn.0040722a
add esp, 0x14
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x164], eax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x164]
push ecx
lea ecx, [ebp - 0x20]
call fcn.00446e1d
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xb4]
call fcn.00446ce4
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xb0]
call fcn.00405ae0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xa0]
call fcn.00405ae0
push ecx
mov ecx, esp
mov dword [ebp - 0xb8], esp
lea edx, [ebp - 0x20]
push edx
call fcn.00446a59
mov dword [ebp - 0x168], eax
call fcn.00406f87
add esp, 4
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
jle 0x406b42
push 0x46a7e0
lea ecx, [ebp - 0xdc]
call fcn.00405900
mov dword [ebp - 0x170], eax
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x18]
call fcn.00404f20
mov dword [ebp - 0x174], eax
lea ecx, [ebp - 0xdc]
push ecx
lea edx, [ebp - 0xec]
push edx
mov ecx, dword [ebp - 0x174]
call fcn.00404e10
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x17c], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x17c]
mov edx, dword [ecx]
mov dword [ebp - 0xcc], edx
mov eax, dword [ecx + 4]
mov dword [ebp - 0xc8], eax
mov edx, dword [ecx + 8]
mov dword [ebp - 0xc4], edx
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0xc0], eax
push ecx
mov ecx, esp
mov dword [ebp - 0xbc], esp
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0xcc]
mov dword [edx], eax
mov eax, dword [ebp - 0xc8]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0xc4]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xc0]
mov dword [edx + 0xc], eax
push ecx
call fcn.0040722a
add esp, 0x14
mov dword [ebp - 0x180], eax
mov ecx, dword [ebp - 0xf0]
call fcn.00406639
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xec]
call fcn.00405ae0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xdc]
call fcn.00405ae0
lea ecx, [ebp - 0x18]
call fcn.00404f20
mov dword [ebp - 0x184], eax
mov ecx, dword [ebp - 0x184]
call fcn.00404c90
mov word [ebp - 0x186], ax
movsx ecx, word [ebp - 0x186]
test ecx, ecx
jne 0x406b86
lea ecx, [ebp - 0x18]
call fcn.00404f20
mov dword [ebp - 0x18c], eax
mov ecx, dword [ebp - 0x18c]
call fcn.00404d10
jmp 0x406815
lea ecx, [ebp - 0x18]
call fcn.00404f20
mov dword [ebp - 0x190], eax
mov ecx, dword [ebp - 0x190]
call fcn.00404cd0
jmp 0x406bef
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.00410a10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x20]
call fcn.00446ce4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.00446ce4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.00446ce4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8