Function at 0x4067e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x422f59
mov eax, dword fs:[0]
push eax
sub esp, 0x170
mov eax, dword [0x42a0c0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp - 0x110], edi
lea eax, [ebp - 0x16c]
push eax
mov dword [ebp - 4], 1
call fcn.004083b0
mov byte [ebp - 4], 2
xor ecx, ecx
xor ebx, ebx
push 6
mov eax, 0x426d74
lea esi, [ebp - 0xfc]
mov dword [ebp - 0xe4], 7
mov dword [ebp - 0xe8], ebx
mov word [ebp - 0xf8], cx
call fcn.00402c50
mov edx, esi
push edx
lea eax, [ebp - 0x16c]
mov byte [ebp - 4], 3
push eax
mov dword [edi + 0xb8], fcn.00403b50
call fcn.00407bd0
mov ecx, dword [edi + 0xb8]
mov dword [eax], ecx
mov al, 0x28
mov dl, 0x2e
mov cl, 0x2f
mov dword [ebp - 0x108], ebx
mov dword [ebp - 0x148], ebx
mov ebx, 0x32
mov byte [ebp - 0x54], 0x29
mov byte [ebp - 0x53], 0x35
mov byte [ebp - 0x52], 0x35
mov byte [ebp - 0x51], 0x31
mov byte [ebp - 0x50], 0x7b
mov byte [ebp - 0x4f], 0x6e
mov byte [ebp - 0x4e], 0x6e
mov byte [ebp - 0x4d], al
mov byte [ebp - 0x4c], 0x2c
mov byte [ebp - 0x4b], 0x31
mov byte [ebp - 0x4a], 0x6f
mov byte [ebp - 0x49], 0x27
mov byte [ebp - 0x48], 0x34
mov byte [ebp - 0x47], bl
mov byte [ebp - 0x46], al
mov byte [ebp - 0x45], dl
mov byte [ebp - 0x44], cl
mov byte [ebp - 0x43], al
mov byte [ebp - 0x42], cl
mov byte [ebp - 0x41], bl
mov byte [ebp - 0x40], 0x35
mov byte [ebp - 0x3f], 0x20
mov byte [ebp - 0x3e], 0x2d
mov byte [ebp - 0x3d], 0x2d
mov byte [ebp - 0x3c], 0x6f
mov byte [ebp - 0x3b], 0x22
mov byte [ebp - 0x3a], dl
mov byte [ebp - 0x39], 0x2c
mov byte [ebp - 0x38], 0x6e
mov byte [ebp - 0x37], al
mov byte [ebp - 0x36], 0x2c
mov byte [ebp - 0x35], 0x31
mov byte [ebp - 0x34], 0x33
mov byte [ebp - 0x33], 0x24
mov byte [ebp - 0x32], bl
mov byte [ebp - 0x31], bl
mov byte [ebp - 0x30], al
mov byte [ebp - 0x2f], dl
mov byte [ebp - 0x2e], cl
mov byte [ebp - 0x2d], 0x6f
mov byte [ebp - 0x2c], 0x25
mov byte [ebp - 0x2b], dl
mov byte [ebp - 0x2a], 0x6e
mov byte [ebp - 0x29], 0x7e
mov byte [ebp - 0x28], 0x24
mov byte [ebp - 0x27], 0x37
push ebx
lea edx, [ebp - 0xc4]
mov byte [ebp - 0x25], cl
push edx
lea ecx, [ebp - 0x54]
mov byte [ebp - 0x26], 0x24
mov byte [ebp - 0x24], 0x35
mov byte [ebp - 0x23], 0x7c
call fcn.00404a20
mov byte [ebp - 4], 4
cmp dword [eax + 0x18], 8
jb 0x40696f
mov eax, dword [eax + 4]
jmp 0x406972
add eax, 4
xor ecx, ecx
mov word [ebp - 0xdc], cx
mov ecx, eax
mov dword [ebp - 0xc8], 7
mov dword [ebp - 0xcc], 0
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x406994
sub ecx, esi
sar ecx, 1
push ecx
lea esi, [ebp - 0xe0]
call fcn.00402c50
mov ebx, 8
mov byte [ebp - 4], 6
cmp dword [ebp - 0xac], ebx
jb 0x4069cf
mov edx, dword [ebp - 0xc0]
push edx
call fcn.0040a6a3
add esp, 4
xor eax, eax
push eax
lea ecx, [ebp + 8]
mov word [ebp - 0xc0], ax
push ecx
or eax, 0xffffffff
lea esi, [ebp - 0xe0]
mov dword [ebp - 0xac], 7
mov dword [ebp - 0xb0], 0
call fcn.00402b40
cmp dword [ebp + 0x38], 0
je 0x406bbf
push 0xa
lea edx, [ebp - 0x144]
push edx
lea ecx, [ebp - 0x20]
mov byte [ebp - 0x20], 0x67
mov byte [ebp - 0x1f], 0x33
mov byte [ebp - 0x1e], 0x24
mov byte [ebp - 0x1d], 0x27
mov byte [ebp - 0x1c], 0x24
mov byte [ebp - 0x1b], 0x33
mov byte [ebp - 0x1a], 0x33
mov byte [ebp - 0x19], 0x24
mov byte [ebp - 0x18], 0x33
mov byte [ebp - 0x17], 0x7c
call fcn.00404a20
mov byte [ebp - 4], 7
cmp dword [eax + 0x18], ebx
jb 0x406a50
mov edx, dword [eax + 4]
jmp 0x406a53
lea edx, [eax + 4]
mov eax, edx
lea esi, [eax + 2]
jmp 0x406a60
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x406a60
sub eax, esi
sar eax, 1
push eax
push edx
lea eax, [ebp - 0xe0]
call fcn.00408000
mov byte [ebp - 4], 6
cmp dword [ebp - 0x12c], ebx
jb 0x406a97
mov eax, dword [ebp - 0x140]
push eax
call fcn.0040a6a3
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x10c], esp
xor edx, edx
push 0xffffffffffffffff
mov dword [ecx + 0x18], 7
mov dword [ecx + 0x14], 0
push edx
lea eax, [ebp + 0x24]
mov word [ecx + 4], dx
call fcn.00402430
lea eax, [ebp - 0x70]
push eax
mov ecx, edi
call fcn.00407080
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x6c]
mov eax, edx
cmp ecx, 0x10
jae 0x406ae0
lea eax, [ebp - 0x6c]
mov esi, dword [ebp - 0x5c]
lea edi, [esi + eax]
test edi, edi
je 0x406b08
mov eax, edx
cmp ecx, 0x10
jae 0x406af4
lea eax, [ebp - 0x6c]
cmp eax, edi
ja 0x406b08
mov eax, edx
cmp ecx, 0x10
jae 0x406b02
lea eax, [ebp - 0x6c]
add esi, eax
cmp edi, esi
jbe 0x406b13
call fcn.0040a5d6
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x6c]
lea ebx, [ebp - 0x70]
cmp ecx, 0x10
jb 0x406c4e
mov esi, edx
test edx, edx
je 0x406b46
mov eax, edx
cmp ecx, 0x10
jae 0x406b2f
lea eax, [ebp - 0x6c]
cmp eax, esi
ja 0x406b46
mov eax, edx
cmp ecx, 0x10
jae 0x406b3d
lea eax, [ebp - 0x6c]
mov ecx, dword [ebp - 0x5c]
add ecx, eax
cmp esi, ecx
jbe 0x406b4b
call fcn.0040a5d6
push edi
push ebx
push esi
lea eax, [ebp - 0x70]
push eax
lea esi, [ebp - 0xa8]
call fcn.00409a40
mov edx, esi
push 0
push edx
or eax, 0xffffffff
lea esi, [ebp - 0xe0]
mov byte [ebp - 4], 9
call fcn.00402b40
cmp dword [ebp - 0x90], 8
jb 0x406b8c
mov eax, dword [ebp - 0xa4]
push eax
call fcn.0040a6a3
add esp, 4
xor ecx, ecx
mov byte [ebp - 4], 6
cmp dword [ebp - 0x58], 0x10
mov dword [ebp - 0x90], 7
mov dword [ebp - 0x94], 0
mov word [ebp - 0xa4], cx
jb 0x406bbf
mov edx, dword [ebp - 0x6c]
push edx
call fcn.0040a6a3
add esp, 4
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x16c]
push ecx
call fcn.00407bd0
mov eax, dword [eax]
lea edx, [ebp - 0xa8]
push 0xe
push edx
call eax
add esp, 8
mov byte [ebp - 4], 0xa
xor ecx, ecx
xor esi, esi
push 0xffffffffffffffff
mov word [ebp - 0x88], cx
mov ebx, 7
push esi
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x78], esi
call fcn.00402430
mov edi, 8
cmp dword [ebp - 0x90], edi
jb 0x406c26
mov edx, dword [ebp - 0xa4]
push edx
call fcn.0040a6a3
add esp, 4
xor eax, eax
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x94], esi
mov word [ebp - 0xa4], ax
cmp dword [ebp - 0x74], edi
jb 0x406c56
mov ecx, dword [ebp - 0x88]
mov dword [ebp - 0x100], ecx
jmp 0x406c62
lea esi, [ebp - 0x6c]
jmp 0x406b25
lea edx, [ebp - 0x88]
mov dword [ebp - 0x100], edx
push 0x4279d0
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0xd
push eax
mov dword [ebp - 0x11c], 0x2a
call fcn.0040ad6b
mov ecx, dword [ebp - 0x110]
mov edx, dword [ecx + 0x9c]
mov ecx, dword [ebp - 0x100]
push edx
call fcn.00407760
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], 0xc
mov eax, 0x406ca9
ret