Function at 0x406b35
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8e8
push ebx
push esi
xor esi, esi
push edi
push esi
mov dword [ebp - 4], esi
push dword [ebp + 8]
call fcn.0040628a
pop ecx
cmp eax, esi
pop ecx
jle 0x406e03
cmp dword [ebp + 0xc], eax
jge 0x406e03
sub eax, dword [ebp + 0xc]
push 0x421b20
push dword [ebp + 8]
mov byte [ebp - 0x13], 0x65
dec eax
mov byte [ebp - 0x14], 0x25
mov dword [ebp + 0xc], eax
mov byte [ebp - 0x12], 0x52
mov byte [ebp - 0x10], 0x74
mov byte [ebp - 0x11], 0x40
mov byte [ebp - 0xf], 0x6f
mov byte [ebp - 0xe], 0x50
mov byte [ebp - 0xd], 0x6d
mov byte [ebp - 0xb], 0x3c
mov byte [ebp - 0xc], 0x7c
mov byte [ebp - 0xa], 0x23
mov byte [ebp - 9], 0x59
mov byte [ebp - 7], 0x73
mov byte [ebp - 8], 0x4b
mov byte [ebp - 6], 0x24
mov byte [ebp - 5], 0x5e
call fcn.0040e4b4
mov edi, eax
pop ecx
cmp edi, esi
pop ecx
je 0x406e03
push 2
push esi
push edi
call fcn.0040eb3b
push edi
call fcn.0040e9b8
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, 0xfffffd38
mov esi, 0x2c8
push 1
push ebx
push edi
call fcn.0040eb3b
push edi
call fcn.0040e9b8
add esp, 0x10
test eax, eax
je 0x406dfc
push esi
lea eax, [ebp - 0x2e0]
push 0
push eax
call fcn.0040d430
push edi
push esi
lea eax, [ebp - 0x2e0]
push 1
push eax
call fcn.0040ebf4
lea eax, [ebp - 0x2e0]
push esi
push eax
call fcn.004060da
lea eax, [ebp - 0x14]
push 0x10
push eax
lea eax, [ebp - 0x2e0]
push esi
push eax
call fcn.00406082
lea eax, [ebp - 0x2e0]
push eax
call fcn.004061c8
add esp, 0x38
test al, al
je 0x406dfc
mov eax, dword [ebp - 4]
cmp eax, dword [ebp + 0xc]
je 0x406c72
inc dword [ebp - 4]
mov eax, ebx
sub eax, dword [ebp - 0x1c]
push 1
push eax
push edi
call fcn.0040eb3b
add esp, 0xc
jmp 0x406be1
push edi
call fcn.0040e9b8
sub ebx, dword [ebp - 0x1c]
push 1
mov dword [ebp - 4], eax
push ebx
push edi
call fcn.0040eb3b
push edi
call fcn.0040e9b8
mov esi, eax
lea eax, [ebp - 0x4e8]
push 0x104
push eax
call fcn.00405fdb
add esp, 0x1c
test al, al
je 0x406dfc
lea eax, [ebp - 0x4e8]
push 0x4210b0
push eax
call fcn.0040e4b4
pop ecx
mov dword [ebp + 0xc], eax
test eax, eax
pop ecx
je 0x406dfc
push 0
push 0
push edi
call fcn.0040eb3b
add esp, 0xc
mov ebx, 0x400
test esi, esi
jle 0x406d10
cmp esi, ebx
mov eax, esi
jl 0x406ce7
mov eax, ebx
push edi
push eax
lea eax, [ebp - 0x8e8]
push 1
push eax
call fcn.0040ebf4
push dword [ebp + 0xc]
push eax
lea eax, [ebp - 0x8e8]
push 1
push eax
call fcn.0040e34a
add esp, 0x20
sub esi, eax
jmp 0x406cdb
push 0
push dword [ebp - 4]
push edi
call fcn.0040eb3b
mov eax, dword [ebp - 0x18]
add esp, 0xc
sub eax, dword [ebp - 4]
mov esi, eax
test esi, esi
jle 0x406d61
test byte [edi + 0xc], 0x10
jne 0x406d61
cmp esi, ebx
mov eax, esi
jl 0x406d38
mov eax, ebx
push edi
push eax
lea eax, [ebp - 0x8e8]
push 1
push eax
call fcn.0040ebf4
push dword [ebp + 0xc]
push eax
lea eax, [ebp - 0x8e8]
push 1
push eax
call fcn.0040e34a
add esp, 0x20
sub esi, eax
jmp 0x406d26
push edi
call fcn.0040e2cd
mov dword [esp], 0x4210b0
push dword [ebp + 8]
call fcn.0040e4b4
mov edi, eax
pop ecx
test edi, edi
pop ecx
je 0x406e03
push dword [ebp + 0xc]
call fcn.0040e2cd
lea eax, [ebp - 0x4e8]
mov dword [esp], 0x421b20
push eax
call fcn.0040e4b4
mov esi, eax
pop ecx
test esi, esi
pop ecx
je 0x406e03
push 0
push 0
push esi
call fcn.0040eb3b
add esp, 0xc
test byte [esi + 0xc], 0x10
jne 0x406ddd
push esi
push ebx
lea eax, [ebp - 0x8e8]
push 1
push eax
call fcn.0040ebf4
push edi
push eax
lea eax, [ebp - 0x8e8]
push 1
push eax
call fcn.0040e34a
add esp, 0x20
jmp 0x406db2
push edi
call fcn.0040e2cd
push esi
call fcn.0040e2cd
lea eax, [ebp - 0x4e8]
push eax
call fcn.00405c89
add esp, 0xc
mov al, 1
jmp 0x406e05
push edi
call fcn.0040e2cd
pop ecx
xor al, al
pop edi
pop esi
pop ebx
leave
ret