Function at 0x406981
Capabilities:
Contain obfuscated stackstrings

Disassembly:
cmp dword [ecx + 0x44], eax
dec edx
xor eax, dword [ecx - 0x7d]
les eax, [eax + ebp*8]
or eax, dword [eax]
add byte [eax], al
add byte [edi + 0x33], cl
dec ecx
cmp eax, 0x4b37493f
dec edi
inc ebp
add esp, 4
jmp 0x40698c
pop eax
mov byte [ebp - 0x9d4], 0x56
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
je 0x4069b6
test dword [edx], edi
idiv bh
inc dword [eax]
push edi
call 0x406a05
add byte [ecx], bh
dec esp
dec esp
inc esi
dec ebp
inc ecx
cmp byte [ebx + eax*4 - 0x3c], cl
add al, 0x81
not ebp
sahf
add byte [eax], al
call 0x406a1e
add byte [edx + 0x32], al
inc edx
dec ebx
inc ebx
cmp esi, dword [ebx]
cmp dword [ebx], esi
inc edi
add esp, 4
add edi, 0x15500
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1994], eax
mov ecx, dword [ebp - 0x1994]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1998], edx
mov eax, dword [ebp - 0x1998]
mov dword [ebp - 0x1614], eax
push edx
push edi
add esp, 4
jmp 0x406a5c
pop edx
push edx
push esi
add esp, 4
add edx, 0x13953
and edx, 0xb9f4
pop edx
push esi
push ecx
add esp, 4
sub esi, 0x72d6
jmp 0x406a80
pop esi
cmp dword [ebp - 0x1614], 0
jne 0x406a99
mov dword [ebp - 0x2fc], 0
jmp 0x406d40
mov ecx, dword [ebp - 0x1614]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push edi
sub edi, 0x9293
jmp 0x406ab8
add edi, 0xed15
pop edi
push ebx
push ecx
add esp, 4
and ebx, 0x15b9c
and ebx, 0x14ce5
xor ebx, 0x43c5
add ebx, 0x894e
pop ebx
cmp dword [ebp - 0xcc4], 0
jne 0x406af5
mov dword [ebp - 0x2fc], 0
jmp 0x406d40
mov ecx, dword [ebp - 0xcc4]
push edx
push ecx
add esp, 4
xor edx, 0x23fe
xor edx, 0x56c5
pop edx
push edi
push ecx
add esp, 4
xor edi, 0xb59c
xor edi, 0x14d0d
sub edi, 0x9bf8
pop edi
push ebx
or ebx, 0x7bba
pop ebx
cmp dword [ebp - 0x2fc], 0
jne 0x407677
mov eax, 0x6b
mov word [ebp - 0x1790], ax
mov ecx, 0x65
mov word [ebp - 0x178e], cx
mov edx, 0x72
mov word [ebp - 0x178c], dx
mov eax, 0x6e
mov word [ebp - 0x178a], ax
mov ecx, 0x65
mov word [ebp - 0x1788], cx
mov edx, 0x6c
mov word [ebp - 0x1786], dx
mov eax, 0x33
mov word [ebp - 0x1784], ax
mov ecx, 0x32
mov word [ebp - 0x1782], cx
mov edx, 0x2e
mov word [ebp - 0x1780], dx
mov eax, 0x64
mov word [ebp - 0x177e], ax
mov ecx, 0x6c
mov word [ebp - 0x177c], cx
mov edx, 0x6c
mov word [ebp - 0x177a], dx
xor eax, eax
mov word [ebp - 0x1778], ax
push edi
or edi, 0x16660
add edi, 0x14961
call 0x406e35
add byte [edi], dh
dec edx
aaa
inc ebp
aaa
inc esp
inc edx
inc ebp
cmp dh, byte [esi]
add esp, 4
pop edi
push ebx
push edx
add esp, 4
jmp 0x406e43
add ebx, 0x1c6a
pop ebx
mov byte [ebp - 0x8a4], 0x4c
mov byte [ebp - 0x8a3], 0x6f
mov byte [ebp - 0x8a2], 0x61
mov byte [ebp - 0x8a1], 0x64
mov byte [ebp - 0x8a0], 0x4c
mov byte [ebp - 0x89f], 0x69
mov byte [ebp - 0x89e], 0x62
mov byte [ebp - 0x89d], 0x72
mov byte [ebp - 0x89c], 0x61
mov byte [ebp - 0x89b], 0x72
mov byte [ebp - 0x89a], 0x79
mov byte [ebp - 0x899], 0x57
mov byte [ebp - 0x898], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x199c], ecx
mov edx, dword [ebp - 0x199c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19a0], eax
mov ecx, dword [ebp - 0x19a0]
mov dword [ebp - 0x1620], ecx
push eax
add eax, 0x124b7
pop eax
push ebx
push esi
add esp, 4
or ebx, 0xac05
sub ebx, 0xe65f
sub ebx, 0x9d77
sub ebx, 0xb4d1
pop ebx
push esi
push eax
add esp, 4
xor esi, 0x13297
pop esi
cmp dword [ebp - 0x1620], 0
jne fcn.00406f17
mov dword [ebp - 0x774], 0
jmp 0x4071be