Function at 0x406280
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x40d358
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2c
push ebx
push ebp
push esi
push edi
mov esi, ecx
call fcn.004068f0
mov ecx, dword [esi + 0x20]
lea eax, [esp + 0x2c]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetClientRect]
xor ebx, ebx
mov ecx, esi
push ebx
push ebx
push ebx
push ebx
call fcn.00406a00
push ebx
push 0xa
push 0x7e
push 0x7e
mov ecx, esi
call fcn.00406a00
push ebx
push 0xa
push 0x21
push 0x21
mov ecx, esi
call fcn.00406a00
push ebx
push 0xa
push 0x40
push 0x40
mov ecx, esi
call fcn.00406a00
push ebx
push 0xa
push 0x23
push 0x23
mov ecx, esi
call fcn.00406a00
push ebx
push 0xa
push 0x24
push 0x24
mov ecx, esi
call fcn.00406a00
push ebx
push 0xa
push 0x25
push 0x25
mov ecx, esi
call fcn.00406a00
push ebx
push 0xa
push 0x5e
push 0x5e
mov ecx, esi
call fcn.00406a00
push ebx
push 0xa
push 0x26
push 0x26
mov ecx, esi
call fcn.00406a00
push ebx
push 0xa
push 0x2a
push 0x2a
mov ecx, esi
call fcn.00406a00
push ebx
push 0xa
push 0x28
push 0x28
mov ecx, esi
call fcn.00406a00
push ebx
push 0xa
push 0x29
push 0x29
mov ecx, esi
call fcn.00406a00
push ebx
push 0xa
push 0x5f
push 0x5f
mov ecx, esi
call fcn.00406a00
push ebx
push 0xa
push 0x2b
push 0x2b
mov ecx, esi
call fcn.00406a00
push ebx
push 0xa
push 0x7c
push 0x7c
mov ecx, esi
call fcn.00406a00
push ebx
push 0x23
push 2
push ebx
mov ecx, esi
call fcn.00406a00
push ebx
push 2
push ebx
push ebx
mov ecx, esi
call fcn.00406a00
push ebx
push 0xa
push 0x60
push 0x60
mov ecx, esi
call fcn.00406a00
mov dl, byte [esp + 0x13]
mov dword [esp + 0x20], ebx
mov byte [esp + 0x1c], dl
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
lea eax, [esp + 0x13]
lea ecx, [esp + 0x1c]
push eax
push 1
push ebx
mov dword [esp + 0x50], ebx
mov byte [esp + 0x1f], 0x31
call fcn.004079b0
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x13]
push ecx
push 1
push edx
lea ecx, [esp + 0x28]
mov byte [esp + 0x1f], 0x32
call fcn.004079b0
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0x13]
push eax
push 1
push ecx
lea ecx, [esp + 0x28]
mov byte [esp + 0x1f], 0x33
call fcn.004079b0
mov eax, dword [esp + 0x24]
lea edx, [esp + 0x13]
push edx
push 1
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x1f], 0x34
call fcn.004079b0
lea ecx, [esp + 0x13]
mov byte [esp + 0x13], 0x35
push ecx
push 1
mov edx, dword [esp + 0x2c]
lea ecx, [esp + 0x24]
push edx
call fcn.004079b0
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0x13]
push eax
push 1
push ecx
lea ecx, [esp + 0x28]
mov byte [esp + 0x1f], 0x36
call fcn.004079b0
mov eax, dword [esp + 0x24]
lea edx, [esp + 0x13]
push edx
push 1
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x1f], 0x37
call fcn.004079b0
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x13]
push ecx
push 1
push edx
lea ecx, [esp + 0x28]
mov byte [esp + 0x1f], 0x38
call fcn.004079b0
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0x13]
push eax
push 1
push ecx
lea ecx, [esp + 0x28]
mov byte [esp + 0x1f], 0x39
call fcn.004079b0
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
sub edx, eax
mov byte [esp + 0x13], 0x30
cmp edx, 1
mov edi, eax
jae 0x406588
mov edx, dword [esp + 0x20]
cmp edx, ebx
je 0x4064d3
mov ecx, eax
sub ecx, edx
cmp ecx, 1
ja 0x4064d8
mov ecx, 1
cmp edx, ebx
jne 0x4064e0
xor eax, eax
jmp 0x4064e2
sub eax, edx
add eax, ecx
cmp eax, ebx
mov dword [esp + 0x14], eax
jge 0x4064ee
xor eax, eax
push eax
call sub.MFC42.DLL_operatornew
mov ebp, dword [esp + 0x24]
add esp, 4
cmp ebp, edi
mov dword [esp + 0x18], eax
mov ebx, eax
je 0x406515
push ebp
push ebx
call fcn.00407d40
add esp, 8
inc ebx
inc ebp
cmp ebp, edi
jne 0x406505
lea eax, [esp + 0x13]
lea ecx, [esp + 0x1c]
push eax
push 1
push ebx
call fcn.00407b80
mov ecx, dword [esp + 0x24]
inc ebx
push ebx
push ecx
push edi
lea ecx, [esp + 0x28]
call fcn.00407980
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
push edx
push eax
lea ecx, [esp + 0x24]
call fcn.00407970
mov ecx, dword [esp + 0x20]
push ecx
call sub.MFC42.DLL_operatordelete
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
add esp, 4
lea ecx, [eax + edx]
mov edx, dword [esp + 0x20]
test edx, edx
mov dword [esp + 0x28], ecx
jne 0x406572
xor ecx, ecx
jmp 0x406578
mov ecx, dword [esp + 0x24]
sub ecx, edx
lea edx, [ecx + eax + 1]
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], edx
xor ebx, ebx
jmp 0x406605
xor cl, cl
cmp cl, 1
jae 0x4065cc
lea edx, [eax + 1]
lea ecx, [esp + 0x1c]
push edx
push eax
push eax
call fcn.00407980
lea eax, [esp + 0x13]
mov ecx, edi
push eax
mov eax, dword [esp + 0x28]
sub ecx, eax
inc ecx
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.00407b80
mov eax, dword [esp + 0x24]
cmp edi, eax
je 0x406601
mov dl, byte [esp + 0x13]
mov byte [edi], dl
inc edi
cmp edi, eax
jne 0x4065bf
jmp 0x406601
push eax
push eax
dec eax
lea ecx, [esp + 0x24]
push eax
call fcn.00407980
mov eax, dword [esp + 0x24]
mov ecx, eax
dec eax
cmp edi, eax
je 0x4065ef
mov dl, byte [eax - 1]
dec eax
dec ecx
cmp eax, edi
mov byte [ecx], dl
jne 0x4065e4
lea eax, [edi + 1]
cmp edi, eax
je 0x406601
mov cl, byte [esp + 0x13]
mov byte [edi], cl
inc edi
cmp edi, eax
jne 0x4065f6
inc dword [esp + 0x24]
mov dl, byte [esp + 0x1c]
sub esp, 0x10
mov edi, esp
mov dword [esp + 0x28], esp
mov byte [edi], dl
mov ecx, dword [esp + 0x30]
cmp ecx, ebx
jne 0x406620
xor eax, eax
jmp 0x406626
mov eax, dword [esp + 0x34]
sub eax, ecx
cmp eax, ebx
jge 0x40662c
xor eax, eax
push eax
call sub.MFC42.DLL_operatornew
mov dword [edi + 4], eax
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
add esp, 4
cmp ecx, edx
mov ebp, edx
je 0x406654
cmp eax, ebx
je 0x40664e
mov dl, byte [ecx]
mov byte [eax], dl
inc eax
inc ecx
cmp ecx, ebp
jne 0x406646
mov ecx, esi
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
call fcn.00406170
push ebx
push 0xa
push 0x2d
push 0x2d
mov ecx, esi
call fcn.00406a00
push ebx
push 0xa
push 0x3d
push 0x3d
mov ecx, esi
call fcn.00406a00
push ebx
push 0xa
push 0x5c
push 0x5c
mov ecx, esi
call fcn.00406a00
push ebx
push 3
push ebx
push ebx
mov ecx, esi
call fcn.00406a00
push ebx
call dword [sym.imp.MSVCRT.dll_time]
push eax
call dword [sym.imp.MSVCRT.dll_srand]
add esp, 8
call dword [sym.imp.MSVCRT.dll_rand]
cdq
mov ecx, 0x1a
mov edi, 0xa
idiv ecx
mov ebx, edx
add bl, 0x61
mov al, bl
mov byte [esp + 0x14], bl
sub al, 0x20
mov byte [esp + 0x18], al
jmp 0x4066d2
mov eax, dword [esp + 0x18]
cmp al, 0x5a
jle 0x4066ef
add bl, 0xe6
add al, 0xe6
mov byte [esp + 0x14], bl
push 0
mov edx, dword [esp + 0x18]
push 0xa
push eax
mov byte [esp + 0x24], al
push edx
jmp 0x4066f9
push 0
push 0xa
push eax
mov eax, dword [esp + 0x20]
push eax
mov ecx, esi
call fcn.00406a00
mov cl, byte [esp + 0x18]
inc bl
inc cl
dec edi
mov byte [esp + 0x14], bl
mov byte [esp + 0x18], cl
jne 0x4066ce
push 0
push 0xa
push 0x7b
push 0x7b
mov ecx, esi
call fcn.00406a00
push 0
push 0xa
push 0x7d
push 0x7d
mov ecx, esi
call fcn.00406a00
push 0
push 0xa
push 0x5b
push 0x5b
mov ecx, esi
call fcn.00406a00
push 0
push 0xa
push 0x5d
push 0x5d
mov ecx, esi
call fcn.00406a00
push 0
push 4
push 0
push 0
mov ecx, esi
call fcn.00406a00
mov al, bl
mov edi, 9
sub al, 0x20
mov byte [esp + 0x18], al
jmp 0x406771
mov eax, dword [esp + 0x18]
cmp al, 0x5a
jle 0x40678e
add bl, 0xe6
add al, 0xe6
mov byte [esp + 0x14], bl
push 0
mov ecx, dword [esp + 0x18]
push 0xa
push eax
mov byte [esp + 0x24], al
push ecx
jmp 0x406798
mov edx, dword [esp + 0x14]
push 0
push 0xa
push eax
push edx
mov ecx, esi
call fcn.00406a00
mov cl, byte [esp + 0x18]
inc bl
inc cl
dec edi
mov byte [esp + 0x14], bl
mov byte [esp + 0x18], cl
jne 0x40676d
push 0
push 0xa
push 0x3a
push 0x3a
mov ecx, esi
call fcn.00406a00
push 0
push 0xa
push 0x22
push 0x22
mov ecx, esi
call fcn.00406a00
push 0
push 0xa
push 0x3b
push 0x3b
mov ecx, esi
call fcn.00406a00
push 0
push 0xa
push 0x27
push 0x27
mov ecx, esi
call fcn.00406a00
push 0
push 0x23
push 1
push 0
mov ecx, esi
call fcn.00406a00
push 0
push 2
push 0
push 0
mov ecx, esi
call fcn.00406a00
mov al, bl
mov edi, 7
sub al, 0x20
mov byte [esp + 0x18], al
jmp 0x40681f
mov eax, dword [esp + 0x18]
cmp al, 0x5a
jle 0x40683c
add bl, 0xe6
add al, 0xe6
push 0
mov byte [esp + 0x18], bl
push 0xa
mov byte [esp + 0x20], al
push eax
mov eax, dword [esp + 0x20]
push eax
jmp 0x406846
mov ecx, dword [esp + 0x14]
push 0
push 0xa
push eax
push ecx
mov ecx, esi
call fcn.00406a00
mov cl, byte [esp + 0x18]
inc bl
inc cl
dec edi
mov byte [esp + 0x14], bl
mov byte [esp + 0x18], cl
jne 0x40681b
push 0
push 0xa
push 0x3c
push 0x3c
mov ecx, esi
call fcn.00406a00
push 0
push 0xa
push 0x3e
push 0x3e
mov ecx, esi
call fcn.00406a00
push 0
push 0xa
push 0x3f
push 0x3f
mov ecx, esi
call fcn.00406a00
push 0
push 0xa
push 0x2c
push 0x2c
mov ecx, esi
call fcn.00406a00
push 0
push 0xa
push 0x2e
push 0x2e
mov ecx, esi
call fcn.00406a00
push 0
push 0xa
push 0x2f
push 0x2f
mov ecx, esi
call fcn.00406a00
mov ecx, esi
call fcn.00406940
mov edx, dword [esp + 0x20]
push edx
call sub.MFC42.DLL_operatordelete
mov ecx, dword [esp + 0x40]
add esp, 4
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x38
ret